checking how to run the C++ preprocessor... /lib/cpp
configure: error: C++ preprocessor "/lib/cpp" fails sanity check

# locate libssl.so
/usr/lib/libssl.so
/usr/lib/libssl.so.0
/usr/lib/libssl.so.0.9.6
/usr/lib/libssl.so.0.9.7
# locate opensslv.h
/usr/include/openssl/opensslv.h
# grep OPENSSL_VERSION /usr/include/openssl/opensslv.h
#define OPENSSL_VERSION_NUMBER  0x0090702fL
#define OPENSSL_VERSION_TEXT    "OpenSSL 0.9.7b 10 Apr 2003"
#define OPENSSL_VERSION_PTEXT   " part of " OPENSSL_VERSION_TEXT
# strings /usr/lib/libcrypto.so|grep 0.9.
libcrypto.so.0.9.7
libssl.so.0.9.7
SSLv2 part of OpenSSL 0.9.7b 10 Apr 2003
SSLv3 part of OpenSSL 0.9.7b 10 Apr 2003

$ make
Building src
make[1]: Entering directory `/home/irc/Unreal3.2/src'
gcc -I../include -I/home/irc/Unreal3.2/extras/regexp/include -pipe -g -O2 -funsigned-char -export-dynamic   -c auth.c
In file included from auth.c:21:
../include/struct.h:68:23: tre/regex.h: No such file or directory
In file included from auth.c:21:
../include/struct.h:797: error: parse error before "regex_t"
../include/struct.h:797: warning: no semicolon at end of struct or union
../include/struct.h:800: error: parse error before '}' token
In file included from auth.c:21:
../include/struct.h:1200: error: parse error before "regex_t"
../include/struct.h:1200: warning: no semicolon at end of struct or union
../include/struct.h:1282: error: parse error before "regex_t"
../include/struct.h:1282: warning: no semicolon at end of struct or union
make[1]: *** [auth.o] Error 1
make[1]: Leaving directory `/home/irc/Unreal3.2/src'
make: *** [build] Error 2

  Creating library L_COMMANDS.lib and object L_COMMANDS.exp
M_OPER.obj : error LNK2019: unresolved external symbol _sendto_snomask_global re
ferenced in function _m_oper
M_INVITE.obj : error LNK2001: unresolved external symbol _sendto_snomask_global
src/modules/commands.dll : fatal error LNK1120: 1 unresolved externals
NMAKE : fatal error U1077: 'cl' : return code '0x2'
Stop.

nmake -f makefile.win32 [your other options here]
nmake -f makefile.win32 SYMBOLFILE
nmake -f makefile.win32 [your other options here]

mv: Makefile: set owner/group (was: 1002/0): Operation not permitted
config.status: creating src/modules/Makefile
mv: src/modules/Makefile: set owner/group (was: 1002/0): Operation not permitted
config.status: creating unreal
mv: unreal: set owner/group (was: 1002/0): Operation not permitted
config.status: creating ircdcron/ircdchk
mv: ircdcron/ircdchk: set owner/group (was: 1002/0): Operation not permitted
config.status: creating include/setup.h
mv: include/setup.h: set owner/group (was: 1002/0): Operation not permitted.

if /bin/bash ../libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I. -I.. -I. -g -O2 -Wall -MT tre-ast.lo
-MD -MP -MF ".deps/tre-ast.Tpo" -c -o tre-ast.lo tre-ast.c; \
then mv -f ".deps/tre-ast.Tpo" ".deps/tre-ast.Plo"; else rm -f ".deps/tre-ast.Tpo"; exit 1; fi
libtool: compile: cannot determine name of library object from `'
gmake[3]: *** [tre-ast.lo] Error 1
gmake[3]: Leaving directory `/home/irc/Unreal3.2/extras/tre-0.7.2/lib'
gmake[2]: *** [all] Error 2
gmake[2]: Leaving directory `/home/irc/Unreal3.2/extras/tre-0.7.2/lib'
gmake[1]: *** [all-recursive] Error 1
gmake[1]: Leaving directory `/home/irc/Unreal3.2/extras/tre-0.7.2'
gmake: *** [all] Error 2

make: Permission denied

This application has failed to start because the application configuration is incorrect. Reinstalling the application may fix this problem.

*NIX:

loadmodule "src/modules/commands.so";
loadmodule "src/modules/cloak.so";

loadmodule "modules/commands.dll";
loadmodule "modules/cloak.dll";

admin {
    "Blah";
    "Blahblah";
};

The OS enforces a limit on max open files
Hard Limit: 512 MAXCONNECTIONS: 1024
Fix MAXCONNECTIONS

set {
 cloak-keys {
  "a2JO6fh3Q6w4oN3s7";
  "Shfid6sfw3gqG8If";
  "sdh3iAe2QH7UfdNsh";
 };
};

== [ NEW ]==
- [!] Cloaking has been modulized.
  - This means you now MUST load a cloaking module in order to boot.
    Example: loadmodule "src/modules/cloak.so";
  - 2 cloaking modules are provided: 'cloak' and 'oldcloak':
  - 'cloak' is the new, RECOMMENDED, and much more secure cloaking algorithm that uses
    md5 internally. It requires 3 keys of 5-100 characters (10-20 is fine) consisting
    of mixed lowcase (a-z), upcase (A-Z) and digits (0-9). So for example:
    set { cloak-keys { "AHsHS6ds2sQGAkish"; "qF5D3orm6Evba26hjf"; "f6oaO2hhd6sIHSfs"; };
  - 'oldcloak' is the <=3.2 cloaking algorithm, it is ONLY ment for use during the
    upgrade process (it will give a warning if you use it), you should switch to the
    much more secure 'cloak' module as soon as all your servers are upgraded.
  - 3rd party cloak modules are also possible.

loadmodule "modules/commands.dll";
loadmodule "modules/cloak.dll";

[error] unrealircd.conf: Unexpected EOF for section starting on line 123

admin {
  "blablabla";
  "blah!";
};

admin {
  "blablabla";
  "blah!";
}
OR:
admin {
  "blablabla";
};
  "blah!";
OR:
admin {
  "blablabla"
  "blah!"
};
etc...

* unrealircd.conf:52: loadmodule src/modules/commands.so: failed to load: tmp/F73A8A80.commands.so: Undefined symbol "ssl_get_cipher"

Notice -- Received KILL message for XXX!yyy@zzz from xxxxx Path: irc!xxxxx (XXX <- YYY)
Cannot find server XX (&....
Missing user XX in SJOIN for #...
      

This is really basic network admin knowledge.
 

include "help.conf";

If you have can_override, you can now op yourself (/mode #chan +o yournick) or without can_override as a services admin or higher you can use /samode #chan +o yournick.
To join a +k/+i/etc channel you need to invite yourself (/invite Yournick #channel), you can then 'walk through' those modes.
 

One possible solution to get in again:
Edit your unrealircd.conf and add an exception block & except ban block for your IP.
For example:

except tkl { mask *@1.2.3.4; type { gline; gzline; shun; }; };
except ban { mask 1.2.3.4; };

include "help.conf";

LONG ANSWER:
This happens when a client issues a request that will return A LOT of data, usually '/who' (eg /who #channel). If you for example have huge channels like 300+, 500+ etc... then /who #chan will return A LOT of data, therefore the max sendq (sendq == send queue) is reached and the client is disconnected... Some scripts do a '/who #chan' on join, this explains why certain people will die directly on join, while others will not :).

The solution is to simply increase the sendq, what the best value is.. I can't say, but just double it and see if that works.
 

# host 1.2.3.4
4.3.2.1.in-addr.arpa domain name pointer test.domain.
# host test.domain
test.domain has address 1.2.3.4

-test.test.net- Ca 0 Cd 0 Ce 0 Cl 0 Ch 0:0 Cu 0
-test.test.net- Re 0 Rl 5/0 Rp 0 Rq 5
-test.test.net- Ru 0 Rsh 0 Rs 10(5) Rt 5

Exiting ssl client [@1.2.3.4.1234]: SSL_write(): Internal OpenSSL error or protocol error
Exiting ssl client [@1.2.3.4.1234]: SSL_write(): OpenSSL functions requested a read()

WARNING: (g)zlines should be placed on user@IPMASK, not user@hostmask (this is because (g)zlines are processed BEFORE a dns lookup is done)

set { restrict-usermodes "x"; };

listen *:6667;

Error binding stream socket to IP [..] Invalid argument

To give you some links:
Anope (epona) - Lots of features and user-friendly. (*NIX and Windows)
IRC Services - Stable services, has module support and is expandable (*NIX)
Magick IRC Services (*NIX, Win32)
NeoStats, OperStats, SolarStats. - Services used for statistics (*NIX,*NIX,*NIX/Win32)
There are even more services, try google ;)

 

set {
 services-server "services.mynet.net";
};

For anope it's for example:
include "aliases/anope.conf";
 

hg clone http://hg.unrealircd.org/unreal

PREFIX_AQ will give +a (chanadmin) the & prefix, and +q (chanowner) the ~ prefix... just like +o has @. This also means you no longer need to +qo/+ao a user, just +q/+a is enough.

The question whether to enable this is asked during ./Config on *NIX. It's turned ON in all our windows builds.

How to turn it off
As said above for *NIX, just say No to the ./Config question. Windows users will have to compile their own UnrealIRCd (which requires a compiler and some experience with this), grab the source (the .tar.gz) and see doc/compiling_win32.txt for instructions. You can find the PREFIX_AQ define in include\setup.h

It is NOT possible to use any other symbol than & and ~, if you try it anyway you'll loose support and break other things. Also support questions on this will result in an immediate ban/topic delete/etc.

We do offer custom coding for money however (modifications done by someone of the team), in that case the person that did the modifications will help you if you have any crashes/weird bugs.
 

This is easier said than done. The maximum amount of connections (also called file descriptors [fd's] or open files) depends on multiple things... Before you read all of this you should understand that the following requires help of your sysadmin (unless you have root access yourself) and it's not easy so it might be better to do just like most people do: run multiple servers.

** The global maximum **
With Linux 2.4 and Linux 2.6 everything should be ok already, so just skip this step :)
With Linux 2.2 you'll have to do something like: echo 8192 >/proc/sys/kernel/file-max although I really recommend you to use Linux 2.4 or 2.6 because there are several other limits of 2.2* that might affect you.
With FreeBSD you should do something like: sysctl kern.maxfiles=8192 (and add it to your /etc/sysctl.conf of course). You probably also need to increase kern.ipc.nmbclusters, and perhaps some other ones as well I'm unaware off. [FEEDBACK is welcome.. if you know how to properly tweak freebsd to get 4096 or 8192 connections, let me know at syzop AT unrealircd DOT com].

** The ulimit value **
Unless you are root you cannot upgrade your ulimit -n value, so..
FreeBSD: sysctl kern.maxfilesperproc=4096 and then everything is ok (well, you prolly want to add that to sysctl.conf as well and don't forget to relogin, otherwise the changes will have no effect).
Linux: what you probably want is edit /etc/security/limits.conf and add 2 lines like:
username hard nofile 4096
username soft nofile 4096
Where 'username' is your login name (eg: syzop)
Assuming your pam is configured correctly, relogin (yes you have to login again) and type ulimit -n, it should now show 4096.
If it didn't, then your pam isn't loading the session limit module (or something else), you'll have to add a line like session required pam_limits.so to /etc/pam.d/login, /etc/pam.d/sshd, /etc/pam.d/su, and perhaps some others as well (cron???). But please be careful, since you can lock yourself out if you make a mistake, so be sure to keep 1 terminal logged in etc ;).

** The header files **
FreeBSD? Then you are already set :).
Linux? Then you'll have to do this step too...
Search for __FD_SETSIZE in /usr/include/bits/typesizes.h or /usr/include/bits/types.h and change the value.
At my system it was a matter of changing this line:
#define __FD_SETSIZE 1024
to this:
#define __FD_SETSIZE 4096

*** UnrealIRCd ***
Now you've finished everything, doublecheck that ulimit -n displays the correct value, and then you can specify this value at the MAXCONNECTIONS question (eg: 4096) of ./Config (and then do make.. etc).

*** Test results ***
I've done several tests with 10K (yes, 10000) clients on Linux 2.4* and it went fine. But to handle this amount of clients you need a good box like with a ghz proc, and more important: with enough (free) memory... at least 512Mb, and preferably 1Gb+ (not only for unreal, but also for socket buffers, etc).

I'm aware of a few "live nets" that in fact hold ~3000 users on 1 server. Why I'm only aware of a few? Well, as said.. most networks just use multiple servers.

Windows
If you are on W9X or ME, forget about it.. you really need at least NT or higher (W2K, XP, 2003, ..).
The current windows version of UnrealIRCd can handle 4096 connections by default which should be enough for most servers/networks.
If you want more, you would have to compile your own ircd, then change MAXCONNECTIONS in include/config.h to the value you want and compile it. Note that if you experience any problems/odd issues, you should mention this change in the bugreport since this has not been tested extensively.
 

irc.blah.net A 1.2.3.4

irc.blah.net A 1.2.3.5
irc.blah.net A 5.23.52.2
irc.blah.net A 74.36.3.36
etc..

Long answer:
If you think of it, it also doesn't make any sense to do so.
Situation: you have the certificate encrypted for security reasons, so that when somebody can get his/her hands on the certificate it will not be broken immediately.
And now you want it so the ircd can boot automatically without providing the passphrase?
The only solution to do that is to store the password somewhere. This password cannot be stored hashed ("unencryptable") since it has to be entered. Hence, it will either have to be stored somewhere as plaintext or fake-encrypted (near-identical to plaintext, just obfuscated).
So how does this help?
It only gives a false sense of security.
 

*** If you are having problems connecting due to ping timeouts, please type /quote pong 50CF4C86 or /raw pong 50CF4C86 now.

1. On some OS's (mainly Windows NT/2000/XP) it is there to fight IP spoofing. Without it, a user can show up onto your server with almost any IP, including funny things like someuser@whitehouse.gov. To be exact: this is because some OS's have an insecure TCP ISN, which makes it easy for hackers to spoof any IP.
2. In general (regardless of the OS), nospoof also protects against other "blind clients". One example of this is HTTP POST proxies. They can't connect succesfully if nospoof is enabled.