8d05951298
Silence a warning
2018-09-07 10:50:55 +02:00
858aaa774a
'SVSMODE Nick -t' does not remove vhost (while MODE 'MODE Nick -t' does)
...
Reported by The_Myth in https://bugs.unrealircd.org/view.php?id=5111
2018-09-07 10:50:00 +02:00
aa3e66bb5b
We now use standard formatted messages for all K-Lines, G-Lines and
...
any other bans that will cause the user to be disconnected.
For technical details see the banned_client() function.
It's likely I made some mistakes somewhere => testing required!!
2018-09-05 16:24:08 +02:00
107d8ccf6a
* A new require sasl { } block which allows you to force users on the
...
specified hostmask to use SASL. Any unauthenticated users matching
the specified hostmask are are rejected.
See https://www.unrealircd.org/docs/Require_sasl_block
Feature suggestion: https://bugs.unrealircd.org/view.php?id=5107
2018-09-05 11:34:48 +02:00
ffcf85f409
Announce the soft bans in release notes. (Best to read that rather
...
than the million commits before it)
2018-09-05 10:03:42 +02:00
c4760cc83c
Add more soft actions. The full list is available on
...
https://www.unrealircd.org/docs/Actions
Also, some minor cleanups / simplifications.
2018-09-05 09:39:44 +02:00
c8c0199095
Fix potential bug if there are both soft and hard tkl's matching the user.
...
Add soft-shun. Use IsLoggedIn() to detect logged in to services status
rather than repeating the more elaborate if ... isdigit...svid.. etc.. stuff.
2018-09-04 21:08:48 +02:00
aa45ce11cc
..and the necessary stuff for softbans in the blacklist module.
2018-09-03 20:18:23 +02:00
b2be1009a0
Second parameter to find_tkline_match() can now be used to skip
...
soft ban checking. Necessary for blacklist module.
2018-09-03 19:55:48 +02:00
1d42ccd973
DNSBL: Fix possible problem where multiple blacklists are not processed.
...
Also fix a memory leak triggered in some circumstances.
2018-09-03 19:31:27 +02:00
1eb09484f1
Add 'soft-kline' and 'soft-gline' to ban actions (more information soon)
...
If you don't know what ban actions are, they are listed here:
https://www.unrealircd.org/docs/Actions
2018-09-03 17:24:23 +02:00
5f116cc64e
Part one of soft gline/kline (more information will follow)
2018-09-03 17:07:22 +02:00
2537fb5e1c
extbans/textban was not working properly on words with dots
...
Reported by The_Myth in https://bugs.unrealircd.org/view.php?id=4909
2018-09-02 21:55:57 +02:00
d3dba63f56
AntiRandom: The module will now (by default) exempt WEBIRC gateways
...
from antirandom checking because they frequently cause false positives.
This new behavior can be disabled via:
set { antirandom { except-webirc no; }; };
Suggested by The_Myth in https://bugs.unrealircd.org/view.php?id=5007
2018-09-02 12:34:03 +02:00
5f597c0b08
Sync 'webirc' status of a client with the rest of the network (via ModData).
...
Also necessary for upcoming commit..
2018-09-02 12:16:45 +02:00
cab8ea7066
* Potential crash issue when concurrently checking DNSBL for the WEBIRC
...
gateway and the spoofed host.
2018-09-02 12:16:15 +02:00
883a5fe413
* The except throttle { } block now also overrides any limitations from
...
set::max-unknown-connection-per-ip. Useful for WEBIRC/cgiirc gateways.
Reported by KnuX https://bugs.unrealircd.org/view.php?id=5088
2018-09-02 11:40:15 +02:00
b1b73e0e56
* Localhost connections are considered secure, so these can be used even
...
if you have a plaintext-policy of 'deny' or 'warn'. (This was already
the case for servers, but now also for users and opers)
https://bugs.unrealircd.org/view.php?id=5108
2018-09-02 11:24:19 +02:00
3c801ced2e
Load by default: extbans/textban, extbans/timedban, extbans/msgbypass.
...
https://bugs.unrealircd.org/view.php?id=5117
2018-09-02 11:17:14 +02:00
bf08c5d121
Update instructions on customizing modules.default.conf now that
...
we have blacklist-module.
2018-09-01 21:08:58 +02:00
477694bd11
Update release notes: Add info on 'blacklist-module'.
2018-09-01 21:02:24 +02:00
d86d4c7c71
Add new option: blacklist-module "<modulename>";
...
This is meant to blacklist modules that are in modules.default.conf (or
elsewhere). The 'loadmodule' line for any such module is effective ignored.
https://bugs.unrealircd.org/view.php?id=5118
Note: I had to move the loadmodule code. Previously this was done as each
config file (include) was loaded into memory. Now it is done after *ALL*
config files have been read into memory. This shouldn't matter for module
devs, though..
2018-09-01 20:31:14 +02:00
cf97de890a
These should be marked extern.
2018-09-01 19:37:25 +02:00
c2f9df9e48
Update release notes (no we're not anywhere near a release at this point)
2018-07-15 18:30:52 +02:00
26c194d8db
Update paths. Again.
...
Slashes in my editor are special so a replace with \u becomes..
ah well.. long story.
2018-07-15 18:19:11 +02:00
4900fb01df
Remove Visual Studio 2012 leftovers.
...
[skip ci]
2018-07-15 18:11:49 +02:00
54a6e2f61f
Update build command for vs2017 with new deps
2018-07-15 18:11:00 +02:00
8fc4f68bcc
Make AppVeyor only build VS2017 version (and update library deps)
2018-07-15 17:58:07 +02:00
8150c6c237
Change default library paths for Visual Studio 2017 lib build.
...
Will upload the dependencies in a couple of minutes to:
https://www.unrealircd.org/docs/Windows_external_libraries_for_UnrealIRCd
2018-07-15 17:47:37 +02:00
1f4fcb9407
Set version to 4.0.19-dev
2018-07-15 17:40:18 +02:00
3bd83829e3
Work towards moving to Visual Studio 2017.
...
Compiling already works (this is already tested by AppVeyor for quite a
while), but the installer in git required VS 2015. The actual releases
up to now required VS 2012.
To be more precise, either VS 2015 Redist or VS 2017 Redist is enough,
the x86 version that is, as they are binary compatible and both provide
"version 14". So if one of those is installed, the installer just runs.
If neither of these is installed we tell the user to install the VS 2017
Redist package, not mentioning 2015 as it would only cause confusion.
2018-07-15 14:49:24 +02:00
f3b9753460
Fix compile problem with clang if -Werror is active.
...
(introduced by previous commit, 98709beee2
2018-07-08 14:52:43 +02:00
98709beee2
./configure: -Wno-format-truncation
2018-07-08 13:35:53 +02:00
bc8ac7c7f6
./Config: For remote includes, suggest /usr when /usr/bin/curl-config
...
is found. This fixes an issue on Ubuntu 18 where the library is
stored in /usr/include/x86_64-linux-gnu and ./Config doesn't detect
it and thus reverts to using local-curl.
2018-07-08 13:31:23 +02:00
25f08d50ac
UnrealIRCd 4.0.18
2018-06-23 16:06:12 +02:00
c4d132c8f9
No longer permit 'require-sasl' or 'require-ssl', as introduced in rcX,
...
as it would be confusing with the current functionality.
Use 'sasl' or 'ssl' instead. See bug #5107 .
2018-06-23 08:16:04 +02:00
05dcf18ea6
When importing ./Config settings from a previous UnrealIRCd, with
...
curl enabled but without system curl, the build could fail with
an libCURL configure error. This is is because it imported the
CURLDIR but it referred to an old UnrealIRCd directory.
Reported by The_Myth (#5106 )
2018-06-23 08:13:02 +02:00
f9f03190f8
** 4.0.18-rc2 **
2018-06-16 18:22:31 +02:00
14eda9638d
curl-ca-bundle.crt: update to latest mozilla (Wed Mar 7 04:12:06 2018 GMT)
...
[skip ci]
2018-06-16 18:14:06 +02:00
0961b95ba9
Move setting of curves (duh)
2018-06-16 17:58:15 +02:00
52afbeee50
Travis-CI: cipherscan: it helps if you scan on the right port..
2018-06-16 09:19:03 +02:00
da98080860
Travis-CI: add cipherscan test
...
TODO: fail if certain criterea are not met
2018-06-16 08:40:39 +02:00
49bfb1e782
Fix ECDHE not working on 4.0.18-rc1 with older OpenSSL versions.
...
For example Ubuntu 16.04 LTS with OpenSSL 1.0.2g.
Especially in strict config it would error 'No shared ciphers'.
Had to do with #if(def) ordering. SSL_CTX_set_ecdh_auto() is
still required in 1.0.x even if SSL_CTX_set1_curves_list() is
used. Understandable.
2018-06-16 08:21:13 +02:00
18b793db9a
UnrealIRCd 4.0.18-rc1
2018-06-11 10:46:44 +02:00
a236eb0fc1
Update release notes
...
[skip ci]
2018-06-11 10:17:41 +02:00
3aec69192b
Build with -Werror except on macOS
2018-06-11 10:11:16 +02:00
5461d24124
Update openssl test to 1.1.1-pre7.
...
[skip ci]
2018-06-11 09:57:49 +02:00
93957fc7ee
blacklist module: also check the ip of WEBIRC users.
...
Suggested by jesopo (#0005098 ).
2018-06-11 08:53:34 +02:00
cd6d7a2bb7
Add allow::options::sasl (or require-sasl) to require SASL authentication
...
as suggested in https://bugs.unrealircd.org/view.php?id=5098
The allow block documentation has been updated, including an example at
the end of the page - https://www.unrealircd.org/docs/Allow_block
2018-06-11 08:22:29 +02:00
46a60ec795
Fix OOB read (1 byte to the left)
2018-06-11 08:05:14 +02:00
Bram Matthys