IAUTH.CONF(5)

NAME
iauth.conf - The Internet Relay Chat Authentication Configuration File

DESCRIPTION

The iauth.conf file is read by the iauth program upon startup, it contains the list of modules that should be used to authenticate a particular connection. The list is ordered, which means that the first module to successfully authenticate a connection will be the last to be tried. The file is divided in sections, each section specifies a module with eventual options using the following format:
    module module-name
    [TAB]option = string
    [TAB]host = host-name
    [TAB]ip = ip-address
The section ends with an empty line. The module-name defines which module the section applies to. A particular module may be used in several sections. A string of undefined format may be specified, it will then be passed to the module upon initialization, see the MODULES section to find out if a module accepts any option. If host-name and ip-address fields are specified, then the module will only be used for connections matching one of the fields given in the configuration. If none are specified, then the module will always be used. When writing a configuration file, one should always verify the syntax using the iauth program to avoid later problems.

MODULES

pipe
    This module is provided as a replacement to the (now obsolete) R configuration lines supported by the IRC daemon. It runs an external program with the client IP and port as arguments. The program should output either 'Y' (Yes, let the client in), or 'N' (No, don't let them in). Note that this module is quite expensive as it forks a separate process for each connection received by the IRC daemon. This module requires the following option: prog=/path/to/external/program

socks
    This module performs a basic check to verify that the host where the connection originated from doesn't run a SOCKS v4 proxy server on port 1080 that is open to the world. It is useful to reject abusive clients using a relay to evade kill lines and bans. This module understands four options: reject to reject connections originating from a host where an open proxy was detected, log to log hostnames where an open proxy is detected. paranoid to consider proxies which deny the request because of a userid/ident mismatch to be OPEN proxies. cache[=value] to set the cache lifetime in minutes. By default, caching is enabled for 30 minutes. A value of 0 disables caching.

rfc931
    This module is for authentication TCP connections using the protocol defined in RFC 1413 (which obsoletes RFC 931).

EXAMPLE
The following file will cause the IRC daemon to reject and log all connections originating from a system where an open proxy is running. For all connections, an ident lookup (RFC 1413) will be performed.
    module socks
            option = log,reject
    module rfc931
The following file will cause the IRC daemon to only attempt an ident lookup for connections originating from a host which has an internet address.
    module rfc931
            host = *

COPYRIGHT
(c) 1998 Christophe Kalt

For full COPYRIGHT see LICENSE file with IRC package.

FILES
 "iauth.conf"

SEE ALSO
iauth(8)

AUTHOR
Christophe Kalt.