Commit graph

  • 1dec4c5a98 remove old files: .hg* is unused as we use git, update/.UPDATE/.CONFIG.RANT/etc is very old, INSTALL.REMOTEINC is no longer necessary as ./curlinstall takes care of everything Bram Matthys 2015-06-05 15:50:39 +02:00
  • de59bf47ef Move all built-in extended bans to modules/extbans/... Bram Matthys 2015-06-05 15:38:01 +02:00
  • 0994c9431f I blame the name.. Bram Matthys 2015-06-03 11:11:21 +02:00
  • a48a7f81b6 Ensure nobody uses the oper block from the example conf as-is. Bram Matthys 2015-06-03 11:10:21 +02:00
  • cbc898b4c1 set::throttle has been moved. Use set::anti-flood::connect-flood <connections>:<period> instead. Bram Matthys 2015-06-03 11:04:46 +02:00
  • 45e46d9bdc blah Bram Matthys 2015-06-03 10:41:39 +02:00
  • 678268f2a3 Allow multiple masks in link::incoming::mask Make linking code use unreal_mask functions as well. Some fixes. Bram Matthys 2015-06-03 10:39:33 +02:00
  • 6ef0069cd6 secure by default: set::oper-only-stats now defaults to "*" Bram Matthys 2015-06-03 09:59:20 +02:00
  • e49563fc7c Ugly oper::from::userhost is now oper::mask, vhost::from::userhost is now vhost::mask. Coders: added generic mask functions: unreal_mask_match(), unreal_add_masks() and unreal_delete_masks(). These deal with one or multiple masks and do all the work for you ;) Bram Matthys 2015-06-03 09:57:24 +02:00
  • c107eeff85 Three allow block changes: 1) require just one of allow::hostname and allow::ip, 2) warn if using both allow::hostname and allow::ip (as in old 3.2.x confs), 3) require allow::maxperip as we don't want anyone forget setting this Bram Matthys 2015-06-03 08:51:09 +02:00
  • dc4ae019a3 new example conf (work in progress, actually) Bram Matthys 2015-06-03 08:49:55 +02:00
  • 5d8ffe2aa9 Merge branch 'unreal34' of github.com:unrealircd/unrealircd into unreal34 Bram Matthys 2015-06-02 21:36:36 +02:00
  • 0e9bdce4b0 Initial work on 3.4-alpha3 release notes. Bram Matthys 2015-06-02 21:35:59 +02:00
  • c1a402c85e Add initial permission syste hooks for whois - more later Travis McArthur 2015-06-01 22:53:42 -04:00
  • 6cb5cbfc06 Remove unnecessary cptr in ACLs Travis McArthur 2015-06-01 22:38:14 -04:00
  • bb56b6acf2 config.sub & config.guess moved to autoconf/ in previous commit. Now actually update them (from 2001-06-08 to 2015-03-08, hmm!) Bram Matthys 2015-06-01 21:18:23 +02:00
  • f81d22076c Add configure check and compile with pthreads Bram Matthys 2015-06-01 21:16:44 +02:00
  • 93c0521605 Fix silly bug in only-sending-to-3.4.x for 'posix'&'simple' spamfilters. Rename oper priv 'kline:global' to 'gline' Bram Matthys 2015-06-01 16:42:02 +02:00
  • b96c711aa6 Only send TRE spamfilters ('posix') to 3.2.x servers. Print out a warning if using the new 'regex' or 'simple' types if running a mixed 3.2.x/3.4.x network (or any version older than a few days, actually) Bram Matthys 2015-06-01 10:49:04 +02:00
  • 44dd384904 Fix /SPAMFILTER del Bram Matthys 2015-06-01 10:24:30 +02:00
  • 0eb9c9a36b PCRE2: enable JIT, free when no longer needed, fix & improve error message when an invalid regex is specified Bram Matthys 2015-06-01 10:09:25 +02:00
  • 2b5051710d Merge branch 'unreal34' of github.com:unrealircd/unrealircd into unreal34 Bram Matthys 2015-06-01 09:52:15 +02:00
  • ecd06aa530 Now actually use PCRE2. Bram Matthys 2015-06-01 09:51:33 +02:00
  • 090faaccf9 Fix raw entry logic, fix descent logic Travis McArthur 2015-06-01 02:53:41 -04:00
  • 2cacfa1d27 Fix bug with one node paths for oper class Travis McArthur 2015-06-01 02:34:25 -04:00
  • a72ce0017e Add additional TKL checks Travis McArthur 2015-06-01 02:34:13 -04:00
  • b6329b3b44 Remove test statements, fix logic error Travis McArthur 2015-06-01 02:24:52 -04:00
  • d640ca84ee G:line uses operclass along-side classic system Travis McArthur 2015-06-01 02:14:28 -04:00
  • 1f9677a199 Fix several bugs in operclass system Travis McArthur 2015-06-01 02:14:18 -04:00
  • 574297054c Modify verification function calls Travis McArthur 2015-06-01 00:38:50 -04:00
  • 01f997f917 Allow opers to have oper-class Travis McArthur 2015-05-31 23:41:57 -04:00
  • adf8a61625 Add support for adding/removing validators Travis McArthur 2015-05-31 23:19:08 -04:00
  • 1726669f67 Fix memory leak Travis McArthur 2015-05-31 22:31:55 -04:00
  • 8db6d406a1 [0004326] - Fix by hyperi0n for chmode unload prob Travis McArthur 2015-05-31 22:04:16 -04:00
  • 3b98eac4a9 Remove unnecessary gotos Travis McArthur 2015-05-31 21:25:52 -04:00
  • 7ca84567fe Add oper ACL evaluation system Still requires module and core hooks to be added, config test to be added, and to require these for perm validation - this enables core parser and querying of system though Travis McArthur 2015-05-31 17:15:23 -04:00
  • d4bb75cd39 Add oper class parser and structs Travis McArthur 2015-05-30 18:29:57 -04:00
  • 547b2d69d0 Build with PCRE2 (not used yet). Enhance SSL build error (may need more fixing). Bram Matthys 2015-05-31 21:47:11 +02:00
  • ffe6877fbe Clean up unnecessary stuff Travis McArthur 2015-05-30 22:13:15 -04:00
  • 58bd3cf60b Preparations for #4356 (experimental / on-going): * add general matching framework (aMatch type, unreal_match_xxx functions) * change spamfilter { } block syntax * add support for simple wildcard matching (non-regex, just '?' and '*') This is the initial commit so the new lib is not in yet, 'regex' is not functional (but 'posix' and 'simple' are working), linking has not been fully tested and no warnings are printed yet. IOTW: work in progress! Bram Matthys 2015-05-30 21:11:11 +02:00
  • 39c3a03d14 found some more old webtv stuff. Bram Matthys 2015-05-27 18:05:04 +02:00
  • a109bdb0f6 Rip out the final remains of WebTV (/MSG IRC ..) & change handling of VERSION replies for ban version { }. Bram Matthys 2015-05-27 18:00:16 +02:00
  • 542ef1acbb move aJFlood * stuff from core to jointhrottle module, using ModData. (as per TODO) Bram Matthys 2015-05-27 17:33:53 +02:00
  • 822f27f34c Remove "We will loose all flood counters!" message upon /REHASH. Bram Matthys 2015-05-27 10:41:45 +02:00
  • 9b9a35a155 Send numeric 396 on host changes Zoddo 2015-05-26 23:39:18 +02:00
  • 1f805a247b Add link to https://www.unrealircd.org/docs/Upgrading_from_3.2.x in (likely 3.2.x conf) errors. Bram Matthys 2015-05-25 17:16:19 +02:00
  • bcbc3fd082 Fix crash with new block (that's 1..). Reported by dg (#4353). Bram Matthys 2015-05-25 16:59:48 +02:00
  • efdefc4eb8 mute non-SSL warning for localhost (won't bother about other cases) Bram Matthys 2015-05-25 13:14:44 +02:00
  • 04727556c7 Show warning if non-SSL. Improve link error (on authentication failure). Auto-convert link::incoming::mask from like '1.2.3.4' to '*@1.2.3.4'. Bram Matthys 2015-05-25 13:06:18 +02:00
  • db97b23bcb move to a single password entry in link block: "password in link block should be plaintext OR should be the SSL fingerprint of the remote link (=better)" Bram Matthys 2015-05-25 10:54:05 +02:00
  • a1b3b9e1b9 quickly fix ssl ;) Bram Matthys 2015-05-25 10:27:39 +02:00
  • 8049136379 Restructure the entire link { } block (#4032). Initial commit (missing autoconnect, ssl, etc). Bram Matthys 2015-05-25 10:19:15 +02:00
  • 0a42cedf77 Bounce links that have their clock too far out of sync (#4214). Currently set at 1 minute. TODO: make configurable. This only works with newer servers as it relies on PROTOCTL TS=xyz very early in the synch. Bram Matthys 2015-05-24 16:16:31 +02:00
  • c2ca896dea Add new flag MOD_OPT_PERM_RELOADABLE. Can be used instead of MOD_OPT_PERM if you want to permit re-loading but not complete un-loading of your module. This way you get the benefits of being able to upgrade code on-the-fly but can still disallow the user to do something potentially unwise. Bram Matthys 2015-05-23 20:43:31 +02:00
  • 1e8c2c0141 dead_link() can now deal with cases where it's called more than 1 time for the same (soon-to-be-dead) client Bram Matthys 2015-05-23 20:08:34 +02:00
  • d386650f49 set throttling to 3 per 60 seconds by default (in case you have no set::throttle block) Bram Matthys 2015-05-23 19:08:37 +02:00
  • 3623ebae05 Add protection against SSL Renegotiation attacks (#4046). Reported by seraph. Also expose dead_link() to modules, IOTW: make it non-static. Bram Matthys 2015-05-23 19:04:41 +02:00
  • c66d213748 Module coders: HOOKTYPE_RAWPACKET_IN: third argument is now int * rather than int so you can change the length (and readbuf is of 8K size, so should be plenty). Requested by s0beit in #4250. Bram Matthys 2015-05-23 17:47:47 +02:00
  • c6fea92257 Port fix #4318 from 3.2.x: For services who allow you to log in by account name but still allow you to use a different nick: when you're logged in you are now considered registered as far as channel mode +M (only registered users may speak and +R (only registered users may join) are concerned. Same for user mode +R (only allow private messages from registered users). Tech: whenever services set SVID and it's not * and does not start with a number, then we consider this user to be 'logged in'. Whenever a user is set +r (s)he is also considered 'logged in'. This way it's compatible with both older and new services and doesn't introduce security issues with older services using servicetimestamp for nick tracking or other means. This issue was reported by ShawnSmith (#4318). Bram Matthys 2015-05-23 17:06:44 +02:00
  • 29f4d5d540 './unreal mkpasswd' now has 3 possible syntaxes: 1) No arguments: UnrealIRCd will prompt you to enter a password and hash it with the bcrypt algorithm. This is the recommended method. 2) One argument: It will hash the provided password with bcrypt 3) Two arguments: It will use the hashing algorithm of your choice (1st arg) to hash the provided password (2nd arg) We recommend to use syntax #1 as bcrypt is the best algorithm available and by using the prompt the password won't end up in your bash history (or whatever shell you use) and can't be snooped by other people with a shell on the same machine (by looking at the process list) Bram Matthys 2015-05-23 16:49:11 +02:00
  • d5caf06ec5 bcrypt password hashing is now implemented (#4335). Not yet documented. Bram Matthys 2015-05-23 16:38:48 +02:00
  • 56911cad3c Fix windows packager: removed an #endif and removed references to Changes Bram Matthys 2015-05-23 16:18:11 +02:00
  • d8858458a4 fix win32 build now Changes is gone. Hmm. need to clean this up. Bram Matthys 2015-05-23 16:16:32 +02:00
  • 6e48ddf3f9 add autodetect for AUTHTYPE_SSL_CLIENTCERTFP Bram Matthys 2015-05-23 15:19:44 +02:00
  • 4a38d0c838 make auth-type optional for passwords in config (#4334). Now you can just add password "$ZaJw56to$uSEc[etc..]"; to your configuration file without needing an explicit { md5; }; or { sha1; };. Naturally you can still specify an auth-type if you want to, and for types like 'sslclientcert' it's still required. Bram Matthys 2015-05-23 15:07:37 +02:00
  • 10af800c43 ./createchangelog is no longer used Bram Matthys 2015-05-23 14:20:58 +02:00
  • d12b6962a5 convert to more understandable code Bram Matthys 2015-05-23 09:50:45 +02:00
  • 6e886d8dac whoops.. final cleanup. really. Bram Matthys 2015-05-23 09:31:20 +02:00
  • af551ba491 more cleanups in src/auth.c, and don't require 'para' in Auth_Check() if we don't use it (eg: client certs) Bram Matthys 2015-05-23 09:27:21 +02:00
  • 8e43418775 get rid of win32-dependent code, not needed anymore as we have (Open)SSL on Windows as well Bram Matthys 2015-05-23 09:17:21 +02:00
  • bd65916b5a more cleanups for AUTHENABLE_* Bram Matthys 2015-05-23 09:15:24 +02:00
  • 5c0e2b59e1 cleanup part I: remove #ifdef's for AUTHENABLE_*, as all of them will be available now we require (Open)SSL Bram Matthys 2015-05-23 09:11:28 +02:00
  • 4ca497ffef Merge pull request #26 from dboyz/auth-certfp Bram Matthys 2015-05-23 09:00:59 +02:00
  • fd4acdc832 Document MD server command (module data / meta data). Bram Matthys 2015-05-21 19:37:23 +02:00
  • a8f2e08ef8 Initialize variable and some fixes (don't blindly copy paste) dboyz 2015-05-21 11:00:06 +08:00
  • 0361248fc3 Provisional code to authenticate based on certfp based on moddata dboyz 2015-05-21 09:25:14 +08:00
  • 2dc8cb9e84 Allow win32 SSL inconsistencies Fix issue in previous commit Travis McArthur 2015-05-20 02:57:14 -04:00
  • aea09603a4 Remove USE_SSL macro and associated code We no longer support non-SSL builds, remove related code Travis McArthur 2015-05-20 02:48:34 -04:00
  • 229bcca996 Remove Custom MD5 Implementation We no longer support builds without OpenSSL - consequently we have no reason to keep our custom MD5 implementation, and probably shouldn't keep it around Travis McArthur 2015-05-20 02:25:46 -04:00
  • 68b4f42a52 Merge pull request #24 from dboyz/auth_findtype-fix Travis McArthur 2015-05-19 10:51:31 -07:00
  • 6b7776cb1c Fix core from parse_v4_netmask parsing invalid cidrs Adam 2014-08-06 04:10:03 -04:00
  • bc02d95f33 Ignore svsnicks when the new nick is the same as the old one Adam 2014-08-26 10:37:05 -04:00
  • 09c71fc5f9 Make auth_findtype case insensitive dboyz 2015-05-20 00:42:32 +08:00
  • b17245d9a1 remove hate from Makefile Bram Matthys 2015-05-19 17:41:51 +02:00
  • cafaebff3f update release notes & delete Changes file Bram Matthys 2015-05-19 17:41:23 +02:00
  • 4b8d5ac3ba Always build with OpenSSL. NON-SSL builds are no longer supported. Bram Matthys 2015-05-19 17:32:37 +02:00
  • 32aeb1fa6c ModData: only broadcast changes if sync==1. Fix return value of moddata_client_set(). Bram Matthys 2015-05-19 12:00:12 +02:00
  • b7d11d3e0f Get rid of implicit declarations due to missing header file(s), now including unrealircd.h instead. Bram Matthys 2015-05-19 11:57:04 +02:00
  • 0391987147 update release notes for alpha2 Bram Matthys 2015-05-19 11:51:03 +02:00
  • 9da1988375 change version to 3.4-alpha2 Bram Matthys 2015-05-19 11:27:44 +02:00
  • 5ff5e01aa2 Rename moddata_client_XXX_string to moddata_client_XXX Bram Matthys 2015-05-19 11:22:11 +02:00
  • 7ad4b6db67 Module coders: introduce moddata_client_set_string() and moddata_client_get_string(). Will document later in ModData wiki page (which does not exist yet). Bram Matthys 2015-05-18 17:15:02 +02:00
  • 222c780d64 broadcast cert fingerprint on connect Bram Matthys 2015-05-18 17:01:04 +02:00
  • e8888bae53 Update windows makefile to build modules/certfp Bram Matthys 2015-05-18 16:53:26 +02:00
  • f9fb628aed Implemented certificate fingerprint: available through /WHOIS and synch'ed network-wide (via ModData system). Thanks to DBoyz and Nath (#4136) for the contributed patches. Initial commit (but it works). Bram Matthys 2015-05-18 16:48:41 +02:00
  • 28c2e83cc4 actually call moddata_free_client() :) Bram Matthys 2015-05-18 16:48:24 +02:00
  • fa38dbf9e6 Added HOOKTYPE_WHOIS. May later be replaced by a more advanced system. Bram Matthys 2015-05-18 16:45:31 +02:00
  • 6f4ea900c1 Fixed pointer confusing in ModData system and made UnrealIRCd free all client ModData structures on client exit. Bram Matthys 2015-05-18 16:42:01 +02:00
  • 347609d958 Fix uninitalized read @ censor Bram Matthys 2015-05-18 16:26:57 +02:00
  • d927dd3cd0 Delete old leftovers: newnet, ircdreg, rehash, killircd. Reported by katsklaw (#4342) and others. Bram Matthys 2015-05-18 12:58:04 +02:00