link <server-name> {
    username <usermask>;
    hostname <ipmask>;
    bind-ip <ip-to-bind-to>;
    port <port-to-connect-on>;
    password-connect <password-to-connect-with>;
    password-receive <password-to-receive> { <auth-type>; };
    hub <hub-mask>;
    leaf <leaf-mask>;
    leafdepth <depth>;
    class <class-name>;
    ciphers <ssl-ciphers>;
    options {
        <option>;
        <option>;
        ...
    };
};

link <server-name> {
    incoming {
        mask *@192.168.0.0/16;
        // may contain multiple masks: or should this be in a separate { mask ...; mask .. } ?
        password <password-to-receive> { <auth-type>; };
    };
    outgoing {
        bind-ip <ip-to-bind-to>;
        hostname irc1.some.net; /* may also be an IP */
        port 6697; /* or move the hostname & ip into one item ? irc1.some.net:6697 */
        password <password-to-connect-with>;
        options { ssl; zip; autoconnect; };
    };
    hub <hub-mask>;
    leaf <leaf-mask>;
    leafdepth <depth>;
    class <class-name>;
    ciphers <ssl-ciphers>;
    options {
        quarantine; /* is a generic option */
    };
};