unrealircd

- supernets unrealircd source & configuration
git clone git://git.acid.vegas/unrealircd.git
commit f3531e713e37805bb172a5f190adabd7b484c877
parent eec3fa048615fda07497ea59fb4c83df9282f2f0
Author: acidvegas <acid.vegas@acid.vegas>
Date: Mon, 20 Apr 2020 15:14:09 -0400

updated to 5.0.4

Diffstat:
doc/conf/unrealircd.remote.conf
186
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
1 file changed, 186 insertions(+), 0 deletions(-)
diff --git a/doc/conf/unrealircd.remote.conf b/doc/conf/unrealircd.remote.conf
@@ -0,0 +1,185 @@
+admin { ""; }
+
+alias botserv { type services; }
+alias bs { target botserv; type services; }
+alias chanserv { type services; }
+alias cs { target chanserv; type services; }
+alias hostserv { type services; }
+alias hs { target hostserv; type services; }
+alias nickserv { type services; }
+alias ns { target nickserv; type services; }
+alias operserv { type services; }
+alias os { target operserv; type services; }
+
+class clients { pingfreq 120; maxclients 100; sendq 1M; options { nofakelag; } }
+class servers { pingfreq 120; maxclients  10; sendq 1M; connfreq 30;           }
+
+allow { ip *; class clients; maxperip 2; }
+
+listen { ip *; port 6667;      options { clientsonly;      } }
+listen { ip *; port 6697;      options { clientsonly; tls; } }
+listen { ip *; port REDACTED;  options { serversonly; tls; } }
+
+link irc.supernets.org {
+	incoming { mask REDACTED; }
+	outgoing {
+		bind-ip *;
+		hostname REDACTED;
+		port REDACTED;
+		options { tls; autoconnect; }
+	}
+	password "REDACTED" { spkifp; }
+	class servers;
+}
+
+log "errors.log" { flags { errors; } maxsize 10K; }
+
+tld { mask *@*; motd remote.motd; rules remote.motd; options { remote; } }
+
+ulines { services.supernets.org; }
+
+blacklist dronebl {
+	dns {
+		name dnsbl.dronebl.org;
+		type record;
+		reply { 3; 5; 6; 7; 8; 9; 10; 11; 12; 13; 14; 15; 16; }
+	}
+	action gzline;
+	ban-time 1d;
+	reason "8,4   E N T E R   T H E   V O I D   ";
+}
+
+blacklist efnetrbl {
+	dns {
+		name rbl.efnetrbl.org;
+		type record;
+		reply { 1; 4; 5; }
+	}
+	action gzline;
+	ban-time 1d;
+	reason "8,4   E N T E R   T H E   V O I D   ";
+}
+
+blacklist torbl {
+	dns {
+		name torexit.dan.me.uk;
+		type record;
+		reply { 100; }
+	}
+	action gzline;
+	ban-time 1d;
+	reason "8,4   E N T E R   T H E   V O I D   ";
+}
+
+webirc { mask 107.161.19.53;  password "REDACTED"; } # KiwiIRC
+webirc { mask 107.161.19.109; password "REDACTED"; }
+webirc { mask 107.161.31.4;   password "REDACTED"; }
+
+webirc { mask 207.192.75.252; password "REDACTED"; } # Mibbit
+webirc { mask 64.62.228.82;   password "REDACTED"; }
+webirc { mask 78.129.202.38;  password "REDACTED"; }
+webirc { mask 109.169.29.95 ; password "REDACTED"; }
+
+set {
+	kline-address "banned@supernets.org";
+	gline-address "banned@supernets.org";
+	modes-on-connect "+ipTx";
+	modes-on-oper "+HIq";
+	snomask-on-oper "+bcFfkGsSo";
+	modes-on-join "+ns";
+	level-on-join "op";
+	restrict-channelmodes "CnLpPs";
+	restrict-commands {
+		invite          { connect-delay 3600; exempt-identified yes; }
+		list            { connect-delay 120;  exempt-identified yes; }
+		private-message { connect-delay 300;  exempt-identified yes; }
+		private-notice  { connect-delay 3600; exempt-identified yes; }
+	}
+	auto-join "#superbowl";
+	oper-auto-join "#help";
+	static-quit "EMO-QUIT";
+	static-part "EMO-PART";
+	who-limit 100;
+	nick-length 20;
+	maxchannelsperuser 10;
+	channel-command-prefix "`!@$.";
+	options { hide-ulines; flat-map; identd-check; }
+	network-name "SuperNETs";
+	default-server "irc.supernets.org";
+	services-server "services.supernets.org";
+	sasl-server "services.supernets.org";
+	help-channel "#help";
+	cloak-method ip;
+	cloak-keys {
+		"REDACTED";
+		"REDACTED";
+		"REDACTED";
+	}
+	hiddenhost-prefix "SUPER";
+	plaintext-policy {
+		user warn;
+		oper deny;
+		server deny;
+		user-message "4WARNING: You are not using a secure connection with SSL/TLS";
+		oper-message "Network operators must connect using SSL/TLS";
+	}
+	outdated-tls-policy {
+		user warn;
+		oper deny;
+		server deny;
+		user-message "4WARNING: You are using an outdated SSL/TLS protocol or cipher";
+		oper-message "Network operators must connect using an up-to-date SSL/TLS protocol or cipher";
+	}
+	anti-flood {
+		away-flood 3:300;
+		connect-flood 3:300;
+		invite-flood 3:300;
+		join-flood 3:300;
+		knock-flood 3:300;
+		max-concurrent-conversations { users 5; new-user-every 60s; }
+		nick-flood 3:300;
+		unknown-flood-amount 2048;
+		unknown-flood-bantime 1h;
+	}
+	default-bantime 1d;
+	spamfilter {
+		ban-time 1d;
+		ban-reason "8,4   E N T E R   T H E   V O I D   ";
+		except "#anythinggoes";
+	}
+	max-targets-per-command { kick 1; part 1; privmsg 1; }
+	hide-ban-reason yes;
+	reject-message {
+		gline                "8,4   E N T E R   T H E   V O I D   ";
+		kline                "8,4   E N T E R   T H E   V O I D   ";
+		password-mismatch    "8,4   E N T E R   T H E   V O I D   ";
+		server-full          "8,4   E N T E R   T H E   V O I D   ";
+		too-many-connections "8,4   E N T E R   T H E   V O I D   ";
+		unauthorized         "8,4   E N T E R   T H E   V O I D   ";
+	}
+	antimixedutf8 {
+		score 10;
+		ban-action block;
+		ban-reason "8,4   E N T E R   T H E   V O I D   ";
+		ban-time 1h;
+	}
+	connthrottle {
+		known-users   { minimum-reputation-score 24; sasl-bypass yes;       }
+		new-users     { local-throttle 20:60;        global-throttle 30:60; }
+		disabled-when { reputation-gathering 1w;     start-delay 3m;        }
+	}
+	history {
+		channel {
+			playback-on-join        { lines 100; time 1d; }
+			max-storage-per-channel { lines 100; time 1d; }
+		}
+	}
+	manual-ban-target ip;
+}
+
+hideserver {
+	disable-map yes;
+	disable-links yes;
+	map-deny-message "Denied";
+	links-deny-message "Denied";
+}
+\ No newline at end of file