summaryrefslogtreecommitdiff
path: root/docs/DEFCON
blob: 44510e05e9d7d517dbe3180d8147475096636a03 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
Anope DefCon
------------

1) Introduction
2) Installation
3) Configuration
4) Usage
5) Usage Example
6) Support

1) Introduction

    Anope supports a unique protection mechanism based on the
    military "Defense Readiness Condition" (DefCon) system. It is based on
    5 levels of defense readiness defined as:

    DEFCON5 Normal peacetime readiness
    DEFCON4 Increased intelligence and security readiness
    DEFCON3 Increase in force readiness
    DEFCON2 Further increase in force readiness
    DEFCON1 Maximum force readiness.

    These are configurable levels that mandates what actions Anope should
    take in case of emergency and change in readiness status.

    It is used to prevent abuse to both Anope, and the IRCd on which they
    are running. Also to protect the users, primarily in the event of Clones
    and/or FloodBOT attacks.

2) Installation

    The DefCon system is part of Anope's core,

    The DefCon system has to be configured on your operserv.conf file to
    be enabled. Defcon will be disabled if "defaultlevel" in the defcon
    block is left commented, or set to 0. Look for the defcon block
    on your operserv.conf file for more information on enabling and
    configuring it.

    Make sure you restart Anope after changing the DefCon configuration
    directives.

3) Configuration

    Pre-defined DefCon actions:

    No new channel registrations
    No New Nick Registrations
    No Mode Lock changes
    Force Chan Mode
    Use Reduced Session Limit
    KILL any new clients trying to connect
    Ignore everyone but opers
    Silently ignore everyone but opers
    AKILL all new clients trying to connect
    No new memos sent to block MemoServ attacks

    Information regarding how to enable this for specific defcon levels can
    be found in operserv.conf

4) Usage

    Anope starts up in DEFCON5 (normal readiness). To change the Defcon level
    in action use:

    /msg OperServ DEFCON 1|2|3|4|5

5) Usage Example

    Place the network on DEFCON4:

    /msg OperServ DEFCON 4

    -OperServ- Services are now at DEFCON 4
    -OperServ- * No new channel registrations
    -OperServ- * No new nick registrations
    -OperServ- * No mode lock changes
    -OperServ- * Use the reduced session limit of 5

    -Global- The Defcon Level is now at: 4

    Restore normal readiness:

    /msg OperServ DEFCON 5

    -OperServ- Services are now at DEFCON 5

    -Global- Services are now back to normal, sorry for any inconvenience

6) Support

    You might get DefCon support by posting on our online forum, or maybe on
    our #anope channel at /server irc.anope.org.