fedserv/echo
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

NOTIFY: document the enriched feed line (real IP, rdns, login, server)

reverse 2026-07-18 17:28:35 +00:00
parent b38aac0bbc
commit 43c1999eb0
No known key found for this signature in database
1 changed files with 6 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

6
Services.md

@ -30,6 +30,12 @@ AKILL and other X-lines, FORBID, SPAMFILTER, NOTIFY, DEFCON, JUPE, SESSION limit
`NOTIFY ADD +<expiry> <flags|*> <mask> <reason>` watches a mask; matching users have their flagged events announced to the staff feed (as DebugServ, tagged `[NOTIFY]`). Also `DEL <mask|number>`, `LIST`/`VIEW [pattern]`, and `CLEAR`. Admin only.
Each line carries the forensic detail a cloak hides — the real IP (with rdns in parentheses if it differs), the login, and the origin server:
[NOTIFY] TimeRider!swaygo@kmaclxbm.dvmin24u.po6mymze.IP joined #devs · 81.185.171.238 (host.swaygo.fr) · acct swaygo · via irc.swaygo.fr
The displayed `nick!ident@host` keeps the cloak so it still correlates with what ordinary users see. Because these lines expose real IPs, keep the log channel **operator-only** (`+O`). The connection *port* is not shown — the ircd's server-to-server burst never sends it to services.
- **Mask** — a `nick!user@host` pattern, a bare nick glob (`baddie*`), or a `#channel` (watches everyone who joins a matching channel).
- **Flags** — `c` connect, `d` disconnect, `j` join, `p` part, `n` nick change, `t` topic, `s` services command, `S` services SET; `*` for all.
- **Expiry** — `+30d`, `+12h`, `+45m`, or `+0` for permanent.