Page 1 of 1

securing my server

Posted: Fri Jun 16, 2006 3:29 pm
by noike
hello, could someone please give me an example of how to setup the allow and oper sections so that normal users could log on without a password and opers would require a password?

Thanks for your help in advance.

Re: securing my server

Posted: Fri Jun 16, 2006 4:18 pm
by MarHazK
noike wrote:hello, could someone please give me an example of how to setup the allow and oper sections so that normal users could log on without a password and opers would require a password?

Thanks for your help in advance.
You mean by this:

Code: Select all

allow {
	ip             *@*;
	hostname       *@*;
	class           clients;
	maxperip 5;
};
Above is allow users to connect to your server without any password required.

Posted: Fri Jun 16, 2006 4:28 pm
by noike
ip *;
hostname *;
class clients;
maxperip 2;
};

/* Passworded allow line */
allow {
ip aaron@*;
hostname *@*;
class Opers;
password "password";
maxperip 1;
options {
nopasscont;
};
};


is that correct?
I meant something like that and then also in the oper block something like this but I don't think all this works because no matter what name I log in as I always become operator.

oper noike {
class clients;
from {
userhost *@*;
};
password "password";
flags {
netadmin;
can_zline;
can_gzline;
can_gkline;
global;
};
};
the userhost has to be the way it is because I travel allot and am on many networks.

Posted: Fri Jun 16, 2006 5:11 pm
by Jobe
Im a little confused as to what you are asking for. For reference the oper section defines a user and password for use with the /oper command to allow you to gain IRC operator priviledges.

For example the following would mean you could type "/oper user password" to become an IRC operator:

Code: Select all

oper user {
  from {
    userhost *@*;
  };
  password "password";
  class clients;
  flags {
    netadmin;
  };
};
The other thing which i am confused about is where you say:
noike wrote:no matter what name I log in as I always become operator.
because when you connect you shouldnt be automatically givern IRC operator priviledges. Also you can use the /oper command from ANY nick so long as your user@host mask matches one of the allowed user@host masks for the oper block you are trying to use.