Page 1 of 1
allow block for ssl doesnt work
Posted: Tue Apr 06, 2004 10:05 am
by BadPenguin
Hi,
i have 2 allow blocks for ssl connections.
One for normal connections and One for more connections but the allow block for ssl with more connection per ip doesnt work.
me not find a solution for this problem :/
Posted: Tue Apr 06, 2004 1:33 pm
by AngryWolf
Oh, it's easy:
Code: Select all
class normal-clients
{
pingfreq 90;
maxclients 1000;
sendq 100000;
recvq 8000;
};
class secure-clients
{
pingfreq 90;
maxclients 2000;
sendq 100000;
recvq 8000;
};
allow
{
ip *@*;
hostname *@*;
class normal-clients;
maxperip 5;
};
allow
{
ip *@*;
hostname *@*;
class secure-clients;
maxperip 10;
options { ssl; };
};
*** Notice -- Client connecting on port 6667: [AngryWolf] (~angrywolf@localhost) [normal-clients]
*** Notice -- Client connecting on port 6668: {AngryWolf} (~angrywolf@localhost) [secure-clients] [secure DES-CBC3-SHA]
Posted: Thu Apr 08, 2004 9:34 am
by BadPenguin
Code: Select all
class clients {
pingfreq 40;
maxclients 400;
sendq 50000;
recvq 8000;
};
class bncs {
pingfreq 40;
maxclients 400;
sendq 50000;
recvq 8000;
};
allow {
ip *@*;
hostname *@*;
class clients;
maxperip 3;
};
allow {
ip *@217.20.xxx.xx;
hostname *@ipxxx.xxxxx.xxxxx.com;
class bncs;
maxperip 50;
redirect-port 6601;
options { ssl; };
};
allow {
ip *@*;
hostname *@*;
class clients;
maxperip 3;
redirect-port 6601;
options {
ssl;
};
};
but the second allow block not work. Always said Unrealircd that to many connects from the host.
Posted: Thu Apr 08, 2004 12:31 pm
by AngryWolf
From the
documentation:
Also the allow blocks are read upside down, so you need specific host/ip allow blocks AFTER your general *@* allow blocks.
Hence, what you need is to sort your allow blocks in the appropriate order. Like this (it should work I think):
Code: Select all
allow {
ip *@*;
hostname *@*;
class clients;
maxperip 3;
};
allow {
ip *@*;
hostname *@*;
class clients;
maxperip 3;
redirect-port 6601;
options {
ssl;
};
};
allow {
ip *@217.20.xxx.xx;
hostname *@ipxxx.xxxxx.xxxxx.com;
class bncs;
maxperip 50;
redirect-port 6601;
options { ssl; };
};
However, the problem about "too many connects" is unclear to me.
Posted: Thu Apr 08, 2004 1:39 pm
by BadPenguin
huh I´m stupid
I had read over this part of the docu. sry
thx i test this one
Posted: Thu Apr 08, 2004 4:02 pm
by BadPenguin
thx it works