Page 2 of 2
Posted: Wed Jan 05, 2005 12:09 pm
by Dukat
These blocks DO work, but they don't do what you want, of course.
Now please start reading the documentation, it is very clearly documented how allow blocks work.
Posted: Wed Jan 05, 2005 12:14 pm
by Itsme-HcK
I don't get it, this IS how it's done in the docs...
The docs wrote:About matching
The access control works like this: ip matches OR host matches, so "hostname *@*"; and "ip *@1.2.3.4" will mean it will always match.
So, I've changed that...
The docs wrote:Also the allow blocks are read upside down, so you need specific host/ip allow blocks AFTER your general *@* allow blocks.
That too...
The docs wrote:ip
The ip mask is in the form user@ip, user is the ident and often set at *, ip is the ipmask. Some examples: *@* (from everywhere), *@192.168.* (only from addr's starting with 192.168), etc.
Exactly what I have....
The docs wrote:host
Also a user@host hostmask, again.. user is often set at *. Some examples: *@* (everywhere), *@*.wanadoo.fr (only from wanadoo.fr).
Same thing here.
Posted: Wed Jan 05, 2005 12:18 pm
by Dukat
Read everything...
"About Matching" is the interesting part for you.
Posted: Wed Jan 05, 2005 12:19 pm
by Itsme-HcK
Itsme-HcK wrote:I don't get it, this IS how it's done in the docs...
The docs wrote:About matching
The access control works like this: ip matches OR host matches, so "hostname *@*"; and "ip *@1.2.3.4" will mean it will always match.
So, I've changed that...
Itsme-HcK wrote:allow {
ip *@127.0.0.1;
hostname *@127.0.0.1;
class clients;
maxperip 50;
};
Posted: Wed Jan 05, 2005 5:30 pm
by Ron2K
Itsme-HcK wrote:Code: Select all
allow {
ip *@*;
hostname *@*;
class clients;
maxperip 5;
};
allow {
ip *@192.168.1.33;
hostname *@192.168.1.33;
class clients;
maxperip 20;
};
allow {
ip *@127.0.0.1;
hostname *@127.0.0.1;
class clients;
maxperip 50;
};
allow {
ip *@*;
hostname *@*;
class clients;
password "vanmij";
};
It has to be like that right? (it doesn't work...)
Nope. With that link block order, you may as well not have the first three. (All connections will match #4.)
As countless others have suggested, go and read the manual again.
Posted: Wed Jan 05, 2005 7:25 pm
by Itsme-HcK
For the 6th time? Really, I just don't get it >.<
And about the passworded one, I thought it wouldn't be matched without the password...
Posted: Wed Jan 05, 2005 7:31 pm
by Syzop
I'm not 100% sure what you are trying to accomplish since your allow blocks seem to change all the time, but... But! Here's a guess:
- normal clients allowed: 5 maxperip
- 192.168.1.33: 20 maxperip
- 127.0.0.1: 50 maxperip
- anywhere, with a password: "unlimited" maxperip
Code: Select all
allow {
ip *@*;
hostname *@*;
class clients;
maxperip 5;
};
allow {
ip *@192.168.1.33;
hostname NOMATCH;
class clients;
maxperip 20;
};
allow {
ip *@127.0.0.1;
hostname NOMATCH;
class clients;
maxperip 50;
};
allow {
ip *@*;
hostname *@*;
class clients;
password "vanmij";
options { nopasscont; };
};
Now for the last block w/o password, I rather suggest also requiring an ident.. Reason is, if someone connects with a password of something else than "vanmij" they can't get in. And since passwords can be used by users for services (if you specify a password it also gets sent to nickserv) this isn't too uncommon.
So last block perhaps something like:
Code: Select all
allow {
ip myident@*;
hostname myident@*;
class clients;
password "vanmij";
options { nopasscont; };
};
But of course, you could try with the original set I posted first.. to see if that works for you.
Posted: Wed Jan 05, 2005 7:33 pm
by Itsme-HcK
Thanks, it works
Well, the passworded one is only for occasions like: I'm at a friend and can't connect to the remote.
So, I think an ident isn't usefull

Re: Problem with allow-line
Posted: Tue May 27, 2008 12:34 am
by slemborg
Old topic, but I just wanted to be sure
I have on my server which hosts my unreal ircd and services, also installed psybnc
which im gonna let max 50 users use, so to get this working would I use:
Code: Select all
allow {
ip *@127.0.0.1;
hostname NOMATCH;
class clients;
maxperip 50;
};
In order to have services NOT interfer with that amount of connections
from localhost?
Re: Problem with allow-line
Posted: Tue May 27, 2008 2:21 am
by BigSmoke
That would work fine, Allow block is local only and only works for that particular server.
And clients can't connect to your services server anyway:P
Re: Problem with allow-line
Posted: Tue May 27, 2008 2:45 am
by slemborg
Thanks for your reply, I was wondering, do I need to add anything in services.conf
or will unrealircd.conf sort what needs sorting by adding the allow block I wrote?
Re: Problem with allow-line
Posted: Tue May 27, 2008 11:41 am
by Jobe
You may also have to add an exception to limiting in services too.