From 9213d7ca5f5ff91c27d56d484205b37ed43227bf Mon Sep 17 00:00:00 2001
From: Bram Matthys <syzop@vulnscan.org>
Date: Sat, 20 Jun 2015 15:12:08 +0200
Subject: [PATCH] some more updates to modules.full.conf

---
 doc/conf/modules.full.conf | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/doc/conf/modules.full.conf b/doc/conf/modules.full.conf
index d922a2921..5136cb5a6 100644
--- a/doc/conf/modules.full.conf
+++ b/doc/conf/modules.full.conf
@@ -19,6 +19,8 @@ loadmodule "cloak";
 /*** Commands ***/
 
 // User commands (MINIMAL)
+// These provide just the minimal set of IRC commands that are
+// required by RFC1459, along with WATCH and MAP.
 loadmodule "m_admin";
 loadmodule "m_away";
 loadmodule "m_invite";
@@ -49,6 +51,7 @@ loadmodule "m_whois";
 loadmodule "m_whowas";
 
 // User commands (EXTENDED)
+// These are commands that provide extended functionality.
 loadmodule "m_botmotd";
 loadmodule "m_cap";
 loadmodule "m_cycle";
@@ -57,12 +60,10 @@ loadmodule "m_guest";
 loadmodule "m_help";
 loadmodule "m_knock";
 loadmodule "m_lag";
-loadmodule "m_nopost";
 loadmodule "m_sasl";
 loadmodule "m_setname";
 loadmodule "m_silence";
 loadmodule "m_starttls";
-loadmodule "m_stats";
 loadmodule "m_time";
 loadmodule "m_userip";
 loadmodule "m_vhost";
@@ -97,6 +98,7 @@ loadmodule "m_sapart";
 loadmodule "m_sdesc";
 loadmodule "m_sethost";
 loadmodule "m_setident";
+loadmodule "m_stats";
 loadmodule "m_tkl"; /* also server-to-server */
 loadmodule "m_trace";
 loadmodule "m_tsctl";
@@ -107,6 +109,7 @@ loadmodule "m_unzline";
 loadmodule "m_wallops";
 
 // Server-to-server commands
+// Don't remove these, unless you never link to other servers.
 loadmodule "m_eos";
 loadmodule "m_md";
 loadmodule "m_netinfo";
@@ -117,6 +120,8 @@ loadmodule "m_swhois";
 loadmodule "m_umode2";
 
 // Services commands
+// You could disable these if you don't use Services
+// https://www.unrealircd.org/docs/Services
 loadmodule "m_sendsno";
 loadmodule "m_sendumode";
 loadmodule "m_svsfline";
@@ -179,4 +184,5 @@ loadmodule "extbans/inchannel"; /* +b ~c */
 
 loadmodule "certfp"; /* SSL certificate fingerprint in /WHOIS (& more) */
 loadmodule "ssl_antidos"; /* prevent SSL DoS (renegotiate floods) */
+loadmodule "m_nopost"; /* Block POST commands (Firefox XPS IRC Attack) */
 loadmodule "webirc"; /* WEBIRC command. See webirc block. */