diff --git a/doc/conf/unrealircd.remote.conf b/doc/conf/unrealircd.remote.conf new file mode 100644 index 0000000..e745785 --- /dev/null +++ b/doc/conf/unrealircd.remote.conf @@ -0,0 +1,185 @@ +admin { ""; } + +alias botserv { type services; } +alias bs { target botserv; type services; } +alias chanserv { type services; } +alias cs { target chanserv; type services; } +alias hostserv { type services; } +alias hs { target hostserv; type services; } +alias nickserv { type services; } +alias ns { target nickserv; type services; } +alias operserv { type services; } +alias os { target operserv; type services; } + +class clients { pingfreq 120; maxclients 100; sendq 1M; options { nofakelag; } } +class servers { pingfreq 120; maxclients 10; sendq 1M; connfreq 30; } + +allow { ip *; class clients; maxperip 2; } + +listen { ip *; port 6667; options { clientsonly; } } +listen { ip *; port 6697; options { clientsonly; tls; } } +listen { ip *; port REDACTED; options { serversonly; tls; } } + +link irc.supernets.org { + incoming { mask REDACTED; } + outgoing { + bind-ip *; + hostname REDACTED; + port REDACTED; + options { tls; autoconnect; } + } + password "REDACTED" { spkifp; } + class servers; +} + +log "errors.log" { flags { errors; } maxsize 10K; } + +tld { mask *@*; motd remote.motd; rules remote.motd; options { remote; } } + +ulines { services.supernets.org; } + +blacklist dronebl { + dns { + name dnsbl.dronebl.org; + type record; + reply { 3; 5; 6; 7; 8; 9; 10; 11; 12; 13; 14; 15; 16; } + } + action gzline; + ban-time 1d; + reason "8,4 E N T E R T H E V O I D "; +} + +blacklist efnetrbl { + dns { + name rbl.efnetrbl.org; + type record; + reply { 1; 4; 5; } + } + action gzline; + ban-time 1d; + reason "8,4 E N T E R T H E V O I D "; +} + +blacklist torbl { + dns { + name torexit.dan.me.uk; + type record; + reply { 100; } + } + action gzline; + ban-time 1d; + reason "8,4 E N T E R T H E V O I D "; +} + +webirc { mask 107.161.19.53; password "REDACTED"; } # KiwiIRC +webirc { mask 107.161.19.109; password "REDACTED"; } +webirc { mask 107.161.31.4; password "REDACTED"; } + +webirc { mask 207.192.75.252; password "REDACTED"; } # Mibbit +webirc { mask 64.62.228.82; password "REDACTED"; } +webirc { mask 78.129.202.38; password "REDACTED"; } +webirc { mask 109.169.29.95 ; password "REDACTED"; } + +set { + kline-address "banned@supernets.org"; + gline-address "banned@supernets.org"; + modes-on-connect "+ipTx"; + modes-on-oper "+HIq"; + snomask-on-oper "+bcFfkGsSo"; + modes-on-join "+ns"; + level-on-join "op"; + restrict-channelmodes "CnLpPs"; + restrict-commands { + invite { connect-delay 3600; exempt-identified yes; } + list { connect-delay 120; exempt-identified yes; } + private-message { connect-delay 300; exempt-identified yes; } + private-notice { connect-delay 3600; exempt-identified yes; } + } + auto-join "#superbowl"; + oper-auto-join "#help"; + static-quit "EMO-QUIT"; + static-part "EMO-PART"; + who-limit 100; + nick-length 20; + maxchannelsperuser 10; + channel-command-prefix "`!@$."; + options { hide-ulines; flat-map; identd-check; } + network-name "SuperNETs"; + default-server "irc.supernets.org"; + services-server "services.supernets.org"; + sasl-server "services.supernets.org"; + help-channel "#help"; + cloak-method ip; + cloak-keys { + "REDACTED"; + "REDACTED"; + "REDACTED"; + } + hiddenhost-prefix "SUPER"; + plaintext-policy { + user warn; + oper deny; + server deny; + user-message "4WARNING: You are not using a secure connection with SSL/TLS"; + oper-message "Network operators must connect using SSL/TLS"; + } + outdated-tls-policy { + user warn; + oper deny; + server deny; + user-message "4WARNING: You are using an outdated SSL/TLS protocol or cipher"; + oper-message "Network operators must connect using an up-to-date SSL/TLS protocol or cipher"; + } + anti-flood { + away-flood 3:300; + connect-flood 3:300; + invite-flood 3:300; + join-flood 3:300; + knock-flood 3:300; + max-concurrent-conversations { users 5; new-user-every 60s; } + nick-flood 3:300; + unknown-flood-amount 2048; + unknown-flood-bantime 1h; + } + default-bantime 1d; + spamfilter { + ban-time 1d; + ban-reason "8,4 E N T E R T H E V O I D "; + except "#anythinggoes"; + } + max-targets-per-command { kick 1; part 1; privmsg 1; } + hide-ban-reason yes; + reject-message { + gline "8,4 E N T E R T H E V O I D "; + kline "8,4 E N T E R T H E V O I D "; + password-mismatch "8,4 E N T E R T H E V O I D "; + server-full "8,4 E N T E R T H E V O I D "; + too-many-connections "8,4 E N T E R T H E V O I D "; + unauthorized "8,4 E N T E R T H E V O I D "; + } + antimixedutf8 { + score 10; + ban-action block; + ban-reason "8,4 E N T E R T H E V O I D "; + ban-time 1h; + } + connthrottle { + known-users { minimum-reputation-score 24; sasl-bypass yes; } + new-users { local-throttle 20:60; global-throttle 30:60; } + disabled-when { reputation-gathering 1w; start-delay 3m; } + } + history { + channel { + playback-on-join { lines 100; time 1d; } + max-storage-per-channel { lines 100; time 1d; } + } + } + manual-ban-target ip; +} + +hideserver { + disable-map yes; + disable-links yes; + map-deny-message "Denied"; + links-deny-message "Denied"; +} \ No newline at end of file