fedserv/echo
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

NOTIFY: update feed examples to labelled IP/DNS/Account/Server format

reverse 2026-07-18 17:51:01 +00:00
parent 32d9e4a9f3
commit 6eff870a65
No known key found for this signature in database
1 changed files with 3 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

5
Services.md

@ -30,9 +30,10 @@ AKILL and other X-lines, FORBID, SPAMFILTER, NOTIFY, DEFCON, JUPE, SESSION limit
`NOTIFY ADD +<expiry> <flags|*> <mask> <reason>` watches a mask; matching users have their flagged events announced to the staff feed (as DebugServ, tagged `[NOTIFY]`). Also `DEL <mask|number>`, `LIST`/`VIEW [pattern]`, and `CLEAR`. Admin only. `NOTIFY ADD +<expiry> <flags|*> <mask> <reason>` watches a mask; matching users have their flagged events announced to the staff feed (as DebugServ, tagged `[NOTIFY]`). Also `DEL <mask|number>`, `LIST`/`VIEW [pattern]`, and `CLEAR`. Admin only.
Each line carries the forensic detail a cloak hides — the real IP (with rdns in parentheses if it differs), the login, and the origin server: Each line carries the forensic detail a cloak hides, in labelled fields — the real IP, its rdns (`DNS:`, shown only when it differs), the login, and the origin server. A services command reads `Service:verb`:
[NOTIFY] TimeRider!swaygo@kmaclxbm.dvmin24u.po6mymze.IP joined #devs · 81.185.171.238 (host.swaygo.fr) · acct swaygo · via irc.swaygo.fr [NOTIFY] reverse!reverse@be.yourself.4ever used OperServ:rehash · IP: 2001:41d0:701:1100::65d0 DNS: vps-9b04b3b4.vps.ovh.net · Account: reverse · Server: irc.tchatou.fr
[NOTIFY] TimeRider!swaygo@kmaclxbm.dvmin24u.po6mymze.IP joined #devs · IP: 81.185.143.211 · Account: swaygo · Server: irc.tchatou.fr
The displayed `nick!ident@host` keeps the cloak so it still correlates with what ordinary users see. Because these lines expose real IPs, keep the log channel **operator-only** (`+O`). The connection *port* is not shown — the ircd's server-to-server burst never sends it to services. The displayed `nick!ident@host` keeps the cloak so it still correlates with what ordinary users see. Because these lines expose real IPs, keep the log channel **operator-only** (`+O`). The connection *port* is not shown — the ircd's server-to-server burst never sends it to services.