From 6eff870a65ac150727485d0419b528e10c020916 Mon Sep 17 00:00:00 2001 From: reverse Date: Sat, 18 Jul 2026 17:51:01 +0000 Subject: [PATCH] NOTIFY: update feed examples to labelled IP/DNS/Account/Server format --- Services.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/Services.md b/Services.md index bd46098..6c4336e 100644 --- a/Services.md +++ b/Services.md @@ -30,9 +30,10 @@ AKILL and other X-lines, FORBID, SPAMFILTER, NOTIFY, DEFCON, JUPE, SESSION limit `NOTIFY ADD + ` watches a mask; matching users have their flagged events announced to the staff feed (as DebugServ, tagged `[NOTIFY]`). Also `DEL `, `LIST`/`VIEW [pattern]`, and `CLEAR`. Admin only. -Each line carries the forensic detail a cloak hides — the real IP (with rdns in parentheses if it differs), the login, and the origin server: +Each line carries the forensic detail a cloak hides, in labelled fields — the real IP, its rdns (`DNS:`, shown only when it differs), the login, and the origin server. A services command reads `Service:verb`: - [NOTIFY] TimeRider!swaygo@kmaclxbm.dvmin24u.po6mymze.IP joined #devs · 81.185.171.238 (host.swaygo.fr) · acct swaygo · via irc.swaygo.fr + [NOTIFY] reverse!reverse@be.yourself.4ever used OperServ:rehash · IP: 2001:41d0:701:1100::65d0 DNS: vps-9b04b3b4.vps.ovh.net · Account: reverse · Server: irc.tchatou.fr + [NOTIFY] TimeRider!swaygo@kmaclxbm.dvmin24u.po6mymze.IP joined #devs · IP: 81.185.143.211 · Account: swaygo · Server: irc.tchatou.fr The displayed `nick!ident@host` keeps the cloak so it still correlates with what ordinary users see. Because these lines expose real IPs, keep the log channel **operator-only** (`+O`). The connection *port* is not shown — the ircd's server-to-server burst never sends it to services.