1
0
mirror of https://github.com/unrealircd/unrealircd.git synced 2026-06-30 19:46:38 +02:00
Commit Graph

3343 Commits

Author SHA1 Message Date
Bram Matthys 45e46d9bdc blah 2015-06-03 10:41:39 +02:00
Bram Matthys 678268f2a3 Allow multiple masks in link::incoming::mask
Make linking code use unreal_mask functions as well. Some fixes.
2015-06-03 10:39:33 +02:00
Bram Matthys 6ef0069cd6 secure by default: set::oper-only-stats now defaults to "*" 2015-06-03 09:59:20 +02:00
Bram Matthys e49563fc7c Ugly oper::from::userhost is now oper::mask, vhost::from::userhost is now vhost::mask.
Coders: added generic mask functions: unreal_mask_match(), unreal_add_masks() and unreal_delete_masks().
These deal with one or multiple masks and do all the work for you ;)
2015-06-03 09:57:24 +02:00
Bram Matthys c107eeff85 Three allow block changes: 1) require just one of allow::hostname and allow::ip,
2) warn if using both allow::hostname and allow::ip (as in old 3.2.x confs),
3) require allow::maxperip as we don't want anyone forget setting this
2015-06-03 08:51:09 +02:00
Travis McArthur c1a402c85e Add initial permission syste hooks for whois - more later 2015-06-01 22:53:42 -04:00
Travis McArthur 6cb5cbfc06 Remove unnecessary cptr in ACLs 2015-06-01 22:44:49 -04:00
Bram Matthys 93c0521605 Fix silly bug in only-sending-to-3.4.x for 'posix'&'simple' spamfilters. Rename oper priv 'kline:global' to 'gline' 2015-06-01 16:42:02 +02:00
Bram Matthys b96c711aa6 Only send TRE spamfilters ('posix') to 3.2.x servers. Print out a warning if using the new 'regex' or 'simple' types if running a mixed 3.2.x/3.4.x network (or any version older than a few days, actually) 2015-06-01 10:49:04 +02:00
Bram Matthys 44dd384904 Fix /SPAMFILTER del 2015-06-01 10:24:30 +02:00
Bram Matthys 0eb9c9a36b PCRE2: enable JIT, free when no longer needed, fix & improve error message when an invalid regex is specified 2015-06-01 10:09:25 +02:00
Bram Matthys 2b5051710d Merge branch 'unreal34' of github.com:unrealircd/unrealircd into unreal34 2015-06-01 09:52:15 +02:00
Bram Matthys ecd06aa530 Now actually use PCRE2. 2015-06-01 09:51:33 +02:00
Travis McArthur 090faaccf9 Fix raw entry logic, fix descent logic 2015-06-01 03:29:24 -04:00
Travis McArthur 2cacfa1d27 Fix bug with one node paths for oper class 2015-06-01 02:34:25 -04:00
Travis McArthur a72ce0017e Add additional TKL checks 2015-06-01 02:34:13 -04:00
Travis McArthur b6329b3b44 Remove test statements, fix logic error 2015-06-01 02:24:52 -04:00
Travis McArthur d640ca84ee G:line uses operclass along-side classic system 2015-06-01 02:16:04 -04:00
Travis McArthur 1f9677a199 Fix several bugs in operclass system 2015-06-01 02:14:18 -04:00
Travis McArthur 574297054c Modify verification function calls 2015-06-01 00:38:50 -04:00
Travis McArthur 01f997f917 Allow opers to have oper-class 2015-05-31 23:41:57 -04:00
Travis McArthur adf8a61625 Add support for adding/removing validators 2015-05-31 23:19:08 -04:00
Travis McArthur 1726669f67 Fix memory leak 2015-05-31 22:31:55 -04:00
Travis McArthur 8db6d406a1 [0004326] - Fix by hyperi0n for chmode unload prob 2015-05-31 22:04:16 -04:00
Travis McArthur 3b98eac4a9 Remove unnecessary gotos 2015-05-31 21:46:32 -04:00
Travis McArthur 7ca84567fe Add oper ACL evaluation system
Still requires module and core hooks to be added, config test to be added, and to require these for perm validation - this enables core parser and querying of system though
2015-05-31 17:20:28 -04:00
Travis McArthur d4bb75cd39 Add oper class parser and structs 2015-05-31 17:20:28 -04:00
Travis McArthur ffe6877fbe Clean up unnecessary stuff 2015-05-30 22:14:45 -04:00
Bram Matthys 58bd3cf60b Preparations for #4356 (experimental / on-going):
* add general matching framework (aMatch type, unreal_match_xxx functions)
* change spamfilter { } block syntax
* add support for simple wildcard matching (non-regex, just '?' and '*')
This is the initial commit so the new lib is not in yet, 'regex' is not
functional (but 'posix' and 'simple' are working), linking has not been
fully tested and no warnings are printed yet. IOTW: work in progress!
2015-05-30 21:11:11 +02:00
Bram Matthys a109bdb0f6 Rip out the final remains of WebTV (/MSG IRC ..) & change handling of VERSION replies for ban version { }. 2015-05-27 18:00:16 +02:00
Bram Matthys 542ef1acbb move aJFlood * stuff from core to jointhrottle module, using ModData. (as per TODO) 2015-05-27 17:33:53 +02:00
Bram Matthys 822f27f34c Remove "We will loose all flood counters!" message upon /REHASH. 2015-05-27 10:41:45 +02:00
Bram Matthys 1f805a247b Add link to https://www.unrealircd.org/docs/Upgrading_from_3.2.x in (likely 3.2.x conf) errors. 2015-05-25 17:16:19 +02:00
Bram Matthys bcbc3fd082 Fix crash with new block (that's 1..). Reported by dg (#4353). 2015-05-25 16:59:48 +02:00
Bram Matthys efdefc4eb8 mute non-SSL warning for localhost (won't bother about other cases) 2015-05-25 13:14:44 +02:00
Bram Matthys 04727556c7 Show warning if non-SSL. Improve link error (on authentication failure). Auto-convert link::incoming::mask from like '1.2.3.4' to '*@1.2.3.4'. 2015-05-25 13:06:18 +02:00
Bram Matthys db97b23bcb move to a single password entry in link block:
"password in link block should be plaintext OR should be the SSL fingerprint of the remote link (=better)"
2015-05-25 10:54:05 +02:00
Bram Matthys a1b3b9e1b9 quickly fix ssl ;) 2015-05-25 10:27:39 +02:00
Bram Matthys 8049136379 Restructure the entire link { } block (#4032). Initial commit (missing autoconnect, ssl, etc). 2015-05-25 10:19:15 +02:00
Bram Matthys 0a42cedf77 Bounce links that have their clock too far out of sync (#4214). Currently set at 1 minute. TODO: make configurable.
This only works with newer servers as it relies on PROTOCTL TS=xyz very early in the synch.
2015-05-24 16:16:31 +02:00
Bram Matthys c2ca896dea Add new flag MOD_OPT_PERM_RELOADABLE. Can be used instead of MOD_OPT_PERM if
you want to permit re-loading but not complete un-loading of your module.
This way you get the benefits of being able to upgrade code on-the-fly but
can still disallow the user to do something potentially unwise.
2015-05-23 20:43:31 +02:00
Bram Matthys 1e8c2c0141 dead_link() can now deal with cases where it's called more than 1 time for the same (soon-to-be-dead) client 2015-05-23 20:08:34 +02:00
Bram Matthys d386650f49 set throttling to 3 per 60 seconds by default (in case you have no set::throttle block) 2015-05-23 19:08:37 +02:00
Bram Matthys 3623ebae05 Add protection against SSL Renegotiation attacks (#4046). Reported by seraph.
Also expose dead_link() to modules, IOTW: make it non-static.
2015-05-23 19:04:41 +02:00
Bram Matthys c66d213748 Module coders: HOOKTYPE_RAWPACKET_IN: third argument is now int * rather than int so you can change the length (and readbuf is of 8K size, so should be plenty). Requested by s0beit in #4250. 2015-05-23 17:47:47 +02:00
Bram Matthys c6fea92257 Port fix #4318 from 3.2.x:
For services who allow you to log in by account name but still allow you to
use a different nick: when you're logged in you are now considered
registered as far as channel mode +M (only registered users may speak and
+R (only registered users may join) are concerned. Same for user mode +R
(only allow private messages from registered users).
Tech: whenever services set SVID and it's not * and does not start with a
      number, then we consider this user to be 'logged in'.
      Whenever a user is set +r (s)he is also considered 'logged in'.
      This way it's compatible with both older and new services and doesn't
      introduce security issues with older services using servicetimestamp
      for nick tracking or other means.
This issue was reported by ShawnSmith (#4318).
2015-05-23 17:06:44 +02:00
Bram Matthys 29f4d5d540 './unreal mkpasswd' now has 3 possible syntaxes:
1) No arguments: UnrealIRCd will prompt you to enter a password and hash
   it with the bcrypt algorithm. This is the recommended method.
2) One argument: It will hash the provided password with bcrypt
3) Two arguments: It will use the hashing algorithm of your choice (1st arg)
   to hash the provided password (2nd arg)
We recommend to use syntax #1 as bcrypt is the best algorithm available and
by using the prompt the password won't end up in your bash history (or
whatever shell you use) and can't be snooped by other people with a shell
on the same machine (by looking at the process list)
2015-05-23 16:49:11 +02:00
Bram Matthys d5caf06ec5 bcrypt password hashing is now implemented (#4335). Not yet documented. 2015-05-23 16:38:48 +02:00
Bram Matthys 56911cad3c Fix windows packager: removed an #endif and removed references to Changes 2015-05-23 16:18:11 +02:00
Bram Matthys d8858458a4 fix win32 build now Changes is gone. Hmm. need to clean this up. 2015-05-23 16:16:32 +02:00