allow block for ssl doesnt work

[BadPenguin]

Hi,

i have 2 allow blocks for ssl connections.

One for normal connections and One for more connections but the allow block for ssl with more connection per ip doesnt work.

me not find a solution for this problem :/

[AngryWolf]

Oh, it's easy:

Code: Select all

class normal-clients
{
        pingfreq        90;
        maxclients      1000;
        sendq           100000;
        recvq           8000;
};

class secure-clients
{
        pingfreq        90;
        maxclients      2000;
        sendq           100000;
        recvq           8000;
};

allow
{
        ip              *@*;
        hostname        *@*;
        class           normal-clients;
        maxperip        5;
};

allow
{
        ip              *@*;
        hostname        *@*;
        class           secure-clients;
        maxperip        10;
        options         { ssl; };
};

*** Notice -- Client connecting on port 6667: [AngryWolf] (~angrywolf@localhost) [normal-clients]
*** Notice -- Client connecting on port 6668: {AngryWolf} (~angrywolf@localhost) [secure-clients] [secure DES-CBC3-SHA]

[BadPenguin]

Code: Select all

class clients {
        pingfreq 40;
        maxclients 400;
        sendq 50000;
        recvq 8000;
};

class bncs {
        pingfreq 40;
        maxclients 400;
        sendq 50000;
        recvq 8000;
};


allow {
        ip *@*;
        hostname *@*;
        class clients;
        maxperip 3;
};


allow {
        ip *@217.20.xxx.xx;
        hostname *@ipxxx.xxxxx.xxxxx.com;
        class bncs;
        maxperip 50;
        redirect-port 6601;
        options { ssl; };
};

allow {
        ip *@*;
        hostname *@*;
        class clients;
        maxperip 3;
        redirect-port 6601;
        options {
                ssl;
        };
};

but the second allow block not work. Always said Unrealircd that to many connects from the host.

[AngryWolf]

From the documentation:

Also the allow blocks are read upside down, so you need specific host/ip allow blocks AFTER your general *@* allow blocks.

Hence, what you need is to sort your allow blocks in the appropriate order. Like this (it should work I think):

Code: Select all

allow {
        ip *@*;
        hostname *@*;
        class clients;
        maxperip 3;
};

allow {
        ip *@*;
        hostname *@*;
        class clients;
        maxperip 3;
        redirect-port 6601;
        options {
                ssl;
        };
};

allow {
        ip *@217.20.xxx.xx;
        hostname *@ipxxx.xxxxx.xxxxx.com;
        class bncs;
        maxperip 50;
        redirect-port 6601;
        options { ssl; };
};

However, the problem about "too many connects" is unclear to me.

[BadPenguin]

huh I´m stupid I had read over this part of the docu. sry

thx i test this one

[BadPenguin]

thx it works