Page 2 of 2

Posted: Wed Jan 05, 2005 12:09 pm
by Dukat
These blocks DO work, but they don't do what you want, of course.

Now please start reading the documentation, it is very clearly documented how allow blocks work.

Posted: Wed Jan 05, 2005 12:14 pm
by Itsme-HcK
I don't get it, this IS how it's done in the docs... :|
The docs wrote:About matching
The access control works like this: ip matches OR host matches, so "hostname *@*"; and "ip *@1.2.3.4" will mean it will always match.
So, I've changed that...
The docs wrote:Also the allow blocks are read upside down, so you need specific host/ip allow blocks AFTER your general *@* allow blocks.
That too...
The docs wrote:ip
The ip mask is in the form user@ip, user is the ident and often set at *, ip is the ipmask. Some examples: *@* (from everywhere), *@192.168.* (only from addr's starting with 192.168), etc.
Exactly what I have....
The docs wrote:host
Also a user@host hostmask, again.. user is often set at *. Some examples: *@* (everywhere), *@*.wanadoo.fr (only from wanadoo.fr).
Same thing here.

Posted: Wed Jan 05, 2005 12:18 pm
by Dukat
Read everything...
"About Matching" is the interesting part for you.

Posted: Wed Jan 05, 2005 12:19 pm
by Itsme-HcK
Itsme-HcK wrote:I don't get it, this IS how it's done in the docs... :|
The docs wrote:About matching
The access control works like this: ip matches OR host matches, so "hostname *@*"; and "ip *@1.2.3.4" will mean it will always match.
So, I've changed that...
Itsme-HcK wrote:
allow {
ip *@127.0.0.1;
hostname *@127.0.0.1;

class clients;
maxperip 50;
};

Posted: Wed Jan 05, 2005 5:30 pm
by Ron2K
Itsme-HcK wrote:

Code: Select all

allow {
	ip             *@*;
	hostname       *@*;
	class           clients;
	maxperip 5;
};

allow {
ip *@192.168.1.33;
hostname *@192.168.1.33;
class clients;
maxperip 20;
};

allow {
	ip *@127.0.0.1;
	hostname *@127.0.0.1;
	class clients;
	maxperip 50;
};

allow {
	ip *@*;
	hostname *@*;
	class clients;
	password "vanmij";
};
It has to be like that right? (it doesn't work...)
Nope. With that link block order, you may as well not have the first three. (All connections will match #4.)

As countless others have suggested, go and read the manual again.

Posted: Wed Jan 05, 2005 7:25 pm
by Itsme-HcK
For the 6th time? Really, I just don't get it >.<

And about the passworded one, I thought it wouldn't be matched without the password...

Posted: Wed Jan 05, 2005 7:31 pm
by Syzop
I'm not 100% sure what you are trying to accomplish since your allow blocks seem to change all the time, but... But! Here's a guess:
- normal clients allowed: 5 maxperip
- 192.168.1.33: 20 maxperip
- 127.0.0.1: 50 maxperip
- anywhere, with a password: "unlimited" maxperip

Code: Select all

allow {
   ip *@*;
   hostname *@*;
   class clients;
   maxperip 5;
};

allow {
   ip *@192.168.1.33;
   hostname NOMATCH;
   class clients;
   maxperip 20;
};

allow {
   ip *@127.0.0.1;
   hostname NOMATCH;
   class clients;
   maxperip 50;
};

allow {
   ip *@*;
   hostname *@*;
   class clients;
   password "vanmij";
   options { nopasscont; };
};
Now for the last block w/o password, I rather suggest also requiring an ident.. Reason is, if someone connects with a password of something else than "vanmij" they can't get in. And since passwords can be used by users for services (if you specify a password it also gets sent to nickserv) this isn't too uncommon.

So last block perhaps something like:

Code: Select all

allow {
   ip myident@*;
   hostname myident@*;
   class clients;
   password "vanmij";
   options { nopasscont; };
};
But of course, you could try with the original set I posted first.. to see if that works for you.

Posted: Wed Jan 05, 2005 7:33 pm
by Itsme-HcK
Thanks, it works :D


Well, the passworded one is only for occasions like: I'm at a friend and can't connect to the remote.
So, I think an ident isn't usefull ;)

Re: Problem with allow-line

Posted: Tue May 27, 2008 12:34 am
by slemborg
Old topic, but I just wanted to be sure
I have on my server which hosts my unreal ircd and services, also installed psybnc
which im gonna let max 50 users use, so to get this working would I use:

Code: Select all

allow {
   ip *@127.0.0.1;
   hostname NOMATCH;
   class clients;
   maxperip 50;
};
In order to have services NOT interfer with that amount of connections
from localhost?

Re: Problem with allow-line

Posted: Tue May 27, 2008 2:21 am
by BigSmoke
That would work fine, Allow block is local only and only works for that particular server.

And clients can't connect to your services server anyway:P

Re: Problem with allow-line

Posted: Tue May 27, 2008 2:45 am
by slemborg
Thanks for your reply, I was wondering, do I need to add anything in services.conf
or will unrealircd.conf sort what needs sorting by adding the allow block I wrote?

Re: Problem with allow-line

Posted: Tue May 27, 2008 11:41 am
by Jobe
You may also have to add an exception to limiting in services too.