Bram Matthys
e28895c8a9
Show 'security-groups: known-users' etc in connect notice to opers.
2021-06-19 12:49:09 +02:00
Bram Matthys
6cc50d16d0
Fix security group code seeing remote users as always on TLS.
...
Likely not that important until now, but fix needed for next...
2021-06-19 12:47:52 +02:00
Bram Matthys
991f9f347e
Allow wildcards in ~a extban, also special code for ~a:0 and ~a:*
...
~a:0: match all unauthenticated users
~a:*: match all authenticated users
~a:SomeUser: match only SomeUser, also allow wildcards here, even
though that is usually a very bad idea :D
2021-06-19 11:13:30 +02:00
Bram Matthys
fb4b21982d
Start writing early release notes for 5.2.1, in particular the new allow
...
and mask options that should give people food for thought.
[skip ci]
2021-06-19 10:41:04 +02:00
Bram Matthys
905850a825
Bump version to 5.2.1-git and indicate this is bleeding edge
2021-06-19 10:21:46 +02:00
Bram Matthys
b72ea1d945
Change allow block to use allow::mask instead of allow::ip / allow::hostname
...
We use 'mask' everywhere in the config except here, which is annoying
and also inflexible since mask has several nice options, see
https://www.unrealircd.org/docs/Mask_item
Users upgrading will receive a warning, and a reference to
https://www.unrealircd.org/docs/FAQ#allow-mask
but the IRCd will continue to boot (it is not an error).
2021-06-19 10:17:18 +02:00
Bram Matthys
deead90ac3
Allow extended server ban syntax in ::mask entries. Eg mask ~a:Syzop;
2021-06-19 09:12:18 +02:00
Bram Matthys
f71f6c8fe3
Another update to positive and negative mask rules, the rules are now:
...
- If you have only negating entries, like '!abc' and '!def', then
we assume an implicit * rule first, since that is clearly what
the user wants.
- If you have a mix, like '*.com', '!irc1*', '!irc2*', then the
implicit * is dropped and we assume you only want to match *.com,
with the exception of irc1*.com and irc2*.com.
- If you only have normal entries without ! then things are
as they always are.
This patch also makes the behavior for unreal_mask_match() and
unreal_mask_match_string() the same.
2021-06-19 08:44:03 +02:00
Bram Matthys
f7d115e87c
More fixes and enhancements for deny link::mask
...
( 5d6738b3e8 )
2021-06-19 08:00:04 +02:00
Bram Matthys
360d3f507f
Move try_connections() from core to server module
2021-06-18 17:21:08 +02:00
Bram Matthys
497c3059ea
Fix to support existing deny link::mask syntax as well.
2021-06-18 16:05:50 +02:00
Ramiro Bou
5d6738b3e8
Allowing multiple masks in "deny link" blocks. ( #140 )
2021-06-18 15:13:50 +02:00
Bram Matthys
f0d00ff109
modules.optional.conf: elaborate a bit more on antimixedutf8 score.
...
And set the default there to 8 instead of 10, which should be OK.
2021-06-16 13:33:01 +02:00
Bram Matthys
89755ccec6
** UnrealIRCd 5.2.0.1 **
...
Note: existing 5.2.0 users on *NIX can upgrade without restart to
have the spamfilter fix by using:
./unrealircd hot-patch wrongspamfilter520
2021-06-16 08:25:07 +02:00
Bram Matthys
fb8c7a5a75
Fix weird behavior for users in pre-connect stage, eg showing
...
up in WHOIS. Reported by armyn and Valware.
2021-06-15 20:26:12 +02:00
Bram Matthys
8a655b8bb4
Fix spamfilter not working with type 'c'.
...
If you had a spamfilter on type 'c' but not on 'p' then it would not
trigger. Reported by armyn in https://bugs.unrealircd.org/view.php?id=5913
This probably went unnoticed because most people add spamfilters
on 'pc' (or even 'pcnN').
2021-06-15 20:01:58 +02:00
Bram Matthys
ce807c4e21
Fix Windows build
2021-06-14 10:22:46 +02:00
Bram Matthys
f7933a8d72
Set version to 5.2.0
2021-06-14 10:19:06 +02:00
Bram Matthys
de4c09eae4
** UnrealIRCd 5.2.0 **
2021-06-14 10:14:23 +02:00
Bram Matthys
c60b5f48c2
Update release notes
2021-06-14 09:43:04 +02:00
Bram Matthys
210bb2201e
Update release notes
...
[skip ci]
2021-06-14 09:08:44 +02:00
Bram Matthys
f8934a44c8
Update release notes
...
[skip ci]
2021-06-14 08:06:29 +02:00
Bram Matthys
572b349cbd
set::restrict-commands: new option exempt-tls which allows SSL/TLS users
...
to bypass a restriction.
2021-06-14 08:00:48 +02:00
Bram Matthys
389a971f96
Fix rapid autoconnect protection to work with >120 servers (:D)
2021-06-07 17:11:20 +02:00
Bram Matthys
36097fbdce
Fix SQUIT being sent back to where it came from.
...
Reported by Ariadne Conill in https://bugs.unrealircd.org/view.php?id=5906
This patch applies cleanly against 5.2.0-rc1 and 5.0.9.x.
Needs more testing, though, as fiddling with SQUIT code and the
various directions and far/near server distinctions can be tricky.
2021-06-07 10:22:23 +02:00
Bram Matthys
5237ebaabc
Fix crash in 5.2.0-rc1: don't call flood_limit_exceeded_log() if a remote
...
server causes the target flood protection limit to be hit for a target
user or a channel.
2021-06-07 07:48:03 +02:00
Bram Matthys
a22ac547c2
Some markup stuff
...
[skip ci]
2021-06-06 17:37:51 +02:00
Bram Matthys
cc490ca924
When using old set::anti-flood settings it is now a (big) warning instead
...
of an error. Also the warning will differ depending on whether you use
the defaults that were in example.conf for a long time, or some custom
settings.
It's not perfect but should help people with migrating from 5.0.x to 5.2.x.
2021-06-06 17:35:17 +02:00
Bram Matthys
3335eb3305
Fix a doc URL and a (now) confusing syntax example
...
[skip ci]
2021-06-06 17:09:31 +02:00
Bram Matthys
46550cf180
Update example conf with new anti-flood block.
...
Replace it with a reference to the documentation instead of trying
to include some or all of the defaults since 1) the block is huge
nowadays with all the settings, and 2) this way we can tweak the
defaults over time in newer versions rather than having people
change their configuration file.
2021-06-06 09:01:31 +02:00
Bram Matthys
3188b7be2d
Small code cleanup for two efuncs, so the names match.
2021-06-06 08:33:20 +02:00
Bram Matthys
20c20b3053
Try to explain to people that symmetric encryption works with keys (:D)
2021-06-05 19:20:11 +02:00
Bram Matthys
173af8c88c
** UnrealIRCd 5.2.0-rc1 **
2021-06-04 11:13:02 +02:00
Bram Matthys
020421a01c
Mention websocket type negotiation (Sec-WebSocket-Protocol) in release notes.
...
[skip ci]
2021-06-04 10:39:18 +02:00
Bram Matthys
f6c2b93c72
Show how many sockets/clients the server can handle in 'STATS S'.
...
Suggested by westor in https://bugs.unrealircd.org/view.php?id=5838
This also fixes a bug where output from modules for 'STATS S' was
shown twice (eg: modef-default-unsettime shown twice).
2021-06-04 10:09:28 +02:00
Bram Matthys
67deb7ec8c
UnrealIRCd script: restart is now identical to stop+start (:D)
2021-06-04 09:16:44 +02:00
Bram Matthys
25db0c73e4
Compiler too dumb to detect this properly...
2021-06-04 09:11:15 +02:00
Bram Matthys
6771c98d76
Move check for secret block to beginning of unrealdb_open() so we don't
...
end up with a 0 byte file due to an easy-to-avoid error later on.
2021-06-04 09:09:06 +02:00
Bram Matthys
148ea98307
Load chathistory module by default
2021-06-04 08:46:09 +02:00
Bram Matthys
a7f2406557
Add security-group "webirc" by default. This matches users who
...
connect through approved webirc gateways, the ones in
https://www.unrealircd.org/docs/WebIRC_block
2021-06-02 19:32:10 +02:00
Bram Matthys
e126d924a5
Somehow DEBUGMODE was turned on by last commit, now off again by default.
2021-06-02 19:31:05 +02:00
Bram Matthys
40bc3ef8cc
Bump version to 5.2.0-git. This is still work in progress.
...
Note that we are on the 'unreal52' branch now and have left 'unreal50'
2021-06-02 15:27:14 +02:00
Bram Matthys
d9b80d889f
Update curlinstall script for ./configure from cURL 7.77.0 and above.
2021-06-02 14:35:37 +02:00
Bram Matthys
d360ae7845
Add some markup in release notes
...
[skip ci]
2021-05-30 19:37:51 +02:00
Bram Matthys
517298007d
If no log { } block is present, we used to only log errors to ircd.log.
...
From now on we simply enable ALL logging to ircd.log, so also connects,
kills, and so on.
2021-05-30 19:35:52 +02:00
Bram Matthys
3eb0bc24ea
Add log::flags "flood" to log flood messages
2021-05-30 19:30:36 +02:00
Bram Matthys
f8a732747b
Get rid of mempool LOG_DBG which is never used
2021-05-30 19:27:35 +02:00
Bram Matthys
6358a2e5ff
Remove this check due to clang complaining. Whatever.
2021-05-30 19:11:50 +02:00
Bram Matthys
5acef88ceb
All violatons of target-flood, nick-flood, join-flood, away-flood,
...
invite-flood, knock-flood, max-concurrent-conversations are now
reported to opers with the snomask 'f' (flood).
2021-05-30 19:10:18 +02:00
Bram Matthys
cb604d6df0
Update release notes
...
[skip ci]
2021-05-30 18:49:18 +02:00