mirror of
https://github.com/unrealircd/unrealircd.git
synced 2026-07-02 04:26:38 +02:00
Bram Matthys
6f2be400c3
* Changed layout * Removed text, split up 3.1.x->3.2.x upgrade info to Unreal31_to_32.html (actually that's just .RELEASE.NOTES, need a bit more explanation and stuff about converting configs etc). * Improved Me, Class, Allow, Listen and Set block text/layout/etc. * Removed typo's
196 lines
12 KiB
HTML
196 lines
12 KiB
HTML
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
|
|
<html>
|
|
<head>
|
|
<title>UnrealIRCd - 3.2 - Offical Documentation</title>
|
|
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
|
|
</head>
|
|
|
|
<body>
|
|
<p> <font size="-1">I M P O R T A N T R E A D I N G</font></p>
|
|
<p><font size="-1">(YES, YOU WILL NEED TO READ ALL OF THIS)</font></p>
|
|
<p><font size="-1">* Unreal3.2 is a lot different than Unreal3.1.1. Forget
|
|
all you have learned about setting up Unreal3.1.1 - this is a lot different.
|
|
We have got a new configuration format that integrates all the former config
|
|
files,ircd.conf, vhost.conf, chrestrict.conf, unrealircd.conf, into to one newunrealircd.conf
|
|
(what the ircd.conf is called now). See doc/ for more information on the configuration
|
|
format</font></p>
|
|
<p><font size="-1">* THIS IS A BETA VERSION, REPORT BUGS ON http://bugs.unrealircd.org</font></p>
|
|
<p><font size="-1">* We have introduced a new cloaking algorithm (+x), which makes
|
|
it incompatible with Unreal3.1.1 - these can however still link, but the hostname
|
|
will look different. This is made of three big numbers, configured in the config
|
|
file - and these MUST be the same on all servers on the network. Keep these
|
|
numbers secret, and the cloaking algorithm is uncrackable (within 55 years,
|
|
that is). The +x algorithm was changed slightly to fix a method of cracking
|
|
that was found. #define COMPAT_BETA4_KEYS to use the beta4 system for compatibility
|
|
with older betas.</font></p>
|
|
<p><font size="-1">* If you use Linux and have problems where the IRCd complains
|
|
that MAXCONNECTIONS is larger than FD_SETSIZE, you need to get your root to
|
|
edit /usr/include/bits/types.h - #define __FD_SETSIZE 1024 to be somenumber
|
|
that is equal or higher than MAXCONNECTIONS. This is a problem with Linux that
|
|
it is hard coded and non override able in some distributions. We recommend you
|
|
use FreeBSD or the variants of this if you need to run high load IRC servers.</font></p>
|
|
<p><font size="-1">* We use autoconf to help with compilation, and this should
|
|
make us able to a lot more platform (we have even ported to BeOS).</font></p>
|
|
<p><font size="-1">* We require a pthreads library for the SOCKS scan now - and
|
|
this is now done in the background (no more waiting!).</font></p>
|
|
<p><font size="-1">* The IRCd is now modularized, and you load modules with the
|
|
loadmodule command. You will most likely want to add these lines:<br>
|
|
loadmodule "src/modules/commands.so";<br>
|
|
loadmodule "src/modules/scan.so";<br>
|
|
loadmodule "src/modules/scan_socks.so";<br>
|
|
loadmodule "src/modules/scan_http.so";</font></p>
|
|
<p><font size="-1"> If you would like to code a module, doc/ will contain a module
|
|
guide,and we got an example module in src/modules/m_dummy.c.</font></p>
|
|
<p><font size="-1">* We have some IPv6 support, and there are some minor bugs
|
|
in it.</font></p>
|
|
<p><font size="-1">* The documentation is NOT yet 100% complete</font></p>
|
|
<p><font size="-1">* We have added snomask (similar to ircu), basically this allowed
|
|
us to remove several modes. Modes +cfFkje are gone, but don't worry, you can
|
|
still use them. They are now added like this:</font></p>
|
|
<p><font size="-1"> /mode yournick +s +cF</font></p>
|
|
<p><font size="-1"> You set the flags in the second parameter of the mode command
|
|
for a mode change +s, setting -s with no parameters removes all your snomask.
|
|
You can remove a specific snomask by doing:</font></p>
|
|
<p><font size="-1"> /mode yournick -s -c</font></p>
|
|
<p><font size="-1">The current snomasks are:</font></p>
|
|
<p><font size="-1"> c - local connects<br>
|
|
F - far connects<br>
|
|
f - flood notices<br>
|
|
k - kill notices<br>
|
|
e - 'eyes' notices<br>
|
|
j - 'junk' notices<br>
|
|
v - vhost notices<br>
|
|
G - gline/shun notices<br>
|
|
n - nick change notices<br>
|
|
q - deny nick (Q:line) rejection notices</font></p>
|
|
<p><font size="-1"> It shouldn't be too hard to figure out, just play around with
|
|
it a bit :)</font></p>
|
|
<p><font size="-1">* /who needs testing it was recorded and may contain bugs</font></p>
|
|
<p><font size="-1">* We have added alias {} which allows you to dynamically create
|
|
commands such as /nickserv Read example.conf for more information on how to
|
|
create your own. To use standard ones include one of the following files</font></p>
|
|
<p><font size="-1"> aliases/ircservices.conf (IRCServices, Daylight)<br>
|
|
aliases/epona.conf (Epona)<br>
|
|
aliases/auspice.conf (Auspice)<br>
|
|
aliases/generic.conf (Magick, Sirius, Wrecked)<br>
|
|
aliases/operstats.conf (OperStats)<br>
|
|
aliases/genericstats.conf (GeoStats, NeoStats)</font></p>
|
|
<p><font size="-1">* You can now use an IP in the oper::from and vhost::from fields
|
|
even if the host resolves</font></p>
|
|
<p><font size="-1">* Added an http proxy scanner (scan_http.so)</font></p>
|
|
<p><font size="-1">* Added oper::snomask to specify default oper snomask modes</font></p>
|
|
<p><font size="-1">* /helpop text has been moved to a config directive, help {}.
|
|
To keep the standard help text you need to include help.conf so add include
|
|
"help.conf"; to your config file.</font></p>
|
|
<p><font size="-1">* To be able to use G:lines you must now have the can_gkline
|
|
flag (or t if old style flags)</font></p>
|
|
<p><font size="-1">* Usermode +T (Tech Admin) has been removed, since it is 100%
|
|
useless</font></p>
|
|
<p><font size="-1">* Added a make install to copy files to the installation location</font></p>
|
|
<p><font size="-1">* Removed ./ircd, ./killircd, crypt/mkpasswd, ./rehash and
|
|
merged them into a new ./unreal [start|stop|rehash|mkpasswd] for mkpasswd the
|
|
format is</font></p>
|
|
<p><font size="-1"> ./unreal mkpasswd [method] [password]</font></p>
|
|
<p><font size="-1">* Added a new system for crypting passwords. You now do for
|
|
example password "my password" { crypt; }; This allows you to have
|
|
some crypted passwords and others not. If you have SSL enabled you may also
|
|
use the md5 and sha1 methods.</font></p>
|
|
<p><font size="-1">* The old blackhole is now set::scan::endpoint and specifies
|
|
an IP and port to tell proxies to connect to.</font></p>
|
|
<p><font size="-1">* You can now specify a cipher list for SSL links (read doc/conf.doc
|
|
for more info)</font></p>
|
|
<p><font size="-1">* +I is now in invisibility.so so it is easily disabled</font></p>
|
|
<p><font size="-1">* set::socks has been replaced by set::scan (read doc/conf.doc
|
|
for more info)</font></p>
|
|
<p><font size="-1">* If you experience problems with the scanners, perhaps check
|
|
out BOPM (http://www.blitzed.org/bopm)</font></p>
|
|
<p><font size="-1">* log {} syslog support added (read doc/unreal32docs.html for
|
|
more info)</font></p>
|
|
<p><font size="-1">* Added ripemd-160 password encryption support</font></p>
|
|
<p><font size="-1">* Enabled sha1 and md5 password encryption on Win32 regardless
|
|
of whether SSL is used.</font></p>
|
|
<p><font size="-1">* Added WinNT/2k/XP service support (experimental) To use this
|
|
you use the unreal.exe utility: unreal install -installs the service<br>
|
|
unreal uninstall -uninstalls the service <br>
|
|
unreal start -starts the service <br>
|
|
unreal stop -stops the service<br>
|
|
unreal restart -restarts the service<br>
|
|
unreal rehash -rehashes the config file</font></p>
|
|
<p><font size="-1"> Config errors and crashes are now logged to service.log when
|
|
in service mode.</font></p>
|
|
<p><font size="-1">* Implemented a new win32 debugger to make fixing bugs much
|
|
easier.</font></p>
|
|
<p><font size="-1">* Added a win32 installer to simplify installing under Windows.</font></p>
|
|
<p><font size="-1">* AKILL/RAKILL is deprecated. Server command still works but
|
|
will be removed eventually (aliases to TKL G). For normal opers it notices that
|
|
the commands are deprecated.</font></p>
|
|
<p><font size="-1">Made the config parser smarter when it comes to time values
|
|
and size values. Entries are no longer limited to 1d2h1m. You can now enter
|
|
"1day 2 hours 1 minute" for example. See doc/conf.doc for more information.</font></p>
|
|
<p><font size="-1">* The oper override code has been rewritten to be less intrusive.
|
|
You can now no longer automatically join a channel for which you must override
|
|
a mode. You must /invite yourself to the channel. The idea behind this is it
|
|
prevents the accidental "rejoin on kick" ban override and joining
|
|
a +s channel without realizing it is +s and therefore you shouldn't know it
|
|
exists.</font></p>
|
|
<p><font size="-1">* If you use the SSL features of Unreal, you should use OpenSSL
|
|
0.9.6e or later. This is important as the older versions may make the program
|
|
exploitable. See http://www.openssl.org for more information</font></p>
|
|
<p><font size="-1">* We have made a lot of changes to deal with SSL, and if you
|
|
find any flaws or problems, please contact the coder team. We however think
|
|
that the changes will make SSL more transparent and make it work more efficiently.</font></p>
|
|
<p><font size="-1">* Added technical documentation in doc/technical. This directory
|
|
will contain information about the protocol used by Unreal.</font></p>
|
|
<p><font size="-1">* Added EGD support for SSL. EGD allows entropy to be gathered
|
|
on systems that do not have a random device (/dev/random or /dev/urandom) or
|
|
have an unreliable random device. Unreal has been tested using EGADS (http://www.securesoftware.com/egads.php)
|
|
[With EGD support enabled], PRNGD (http://www.aet.tu-cottbus.de/personen/jaenicke/postfix_tls/prngd.html),
|
|
and EGD (http://egd.sourceforge.net). Other EGD compatible programs should work
|
|
as well.</font></p>
|
|
<p><font size="-1">* We have created a new complete set of docs! doc/unreal32docs.html
|
|
is now a complete<br>
|
|
set of docs! It is still not finished, however it contains atleast what was
|
|
already<br>
|
|
avail. in the other doc files. <br>
|
|
It can also be view online @ http://www.unrealircd.com/unreal32docs.html</font></p>
|
|
<p><font size="-1">* We have removed ./Setup - Please read the new docs for information
|
|
on configuring &<br>
|
|
setting up Unreal3.2</font></p>
|
|
<p><font size="-1">* Removed makeconf - Read the docs to make a config file</font></p>
|
|
<p><font size="-1">* Added set::ssl::options with the following options:<br>
|
|
fail-if-no-clientcert - If SSL client connects and doesn't provide a client<br>
|
|
certificate, abort connection immediately<br>
|
|
verify-certificate - Check the certificate's validity using X509 methods, check if<br>
|
|
we trust CA's, etc. <br>
|
|
It however does slip self signed certificates through UNLESS<br>
|
|
no-self-signed - Don't allow self-signed certificates through (requires<br>
|
|
verify-certificate)</font></p>
|
|
|
|
<p><font size="-1">* Added the ability specify which CA's are trusted using set::ssl::trusted-ca-file</font></p>
|
|
|
|
<p><font size="-1">* A new configuration system has been added. The system is a bit more strict (meaning it
|
|
will complain more often) but it will never crash due to configuration errors, just
|
|
display a message saying errors exist.</font></p>
|
|
|
|
<p><font size="-1">* SVSLUSERS was added to all U:lines to change local and global max user counts (this is
|
|
NOT meant so you can make the max count higher than it really should be.)</font></p>
|
|
|
|
<p><font size="-1">* A new oper flag, can_override/v has been added. This is an attempt to stop oper abuse.
|
|
All opers can no longer use oper-override, this oflag MUST be in place for oper-override
|
|
to be allowed. Can_override is NOT assumed to be present no matter what your flags,
|
|
meaning you could be +N but still not be allowed to use oper-override.</font></p>
|
|
|
|
<p><font size="-1">* UNKLINE and UNZLINE have been removed in favor of a system like G:lines, to remove you
|
|
now /kline -user@host or /zline -user@host</font></p>
|
|
<p><font size="-1">* MAKE SURE YOU RERUN ./Config AND RUN make clean BEFORE USING
|
|
THIS VERSION!!!</font></p>
|
|
<p> </p>
|
|
<p> </p>
|
|
<p><font size="+2"><strong>Notes on compatibility</strong><a name="notesoncompatibility" id="notesoncompatibility"></a></font><br>
|
|
</p>
|
|
<p>Unreal 3.2 is ONLY compatible with Unreal3.1.4 and Unreal3.2 servers. DO NOT
|
|
ATTEMPT to link to servers that it is NOT compatible with.</p>
|
|
<p>
|
|
</body>
|
|
</html>
|