]>
Commit | Line | Data |
---|---|---|
1 | # News | |
2 | ||
3 | This is charybdis 3.6-dev, Copyright (c) 2005-2016 Charybdis team. | |
4 | See LICENSE for licensing details (GPL v2). | |
5 | ||
6 | ## charybdis-3.6-dev | |
7 | ||
8 | ### build | |
9 | - Build system has been converted to libtool + automake for sanity reasons. | |
10 | - The compile date is now set at configure time rather than build time, allowing for | |
11 | reproducible builds. (#148, #149) | |
12 | - Support for GNUTLS 3.4 has been added. | |
13 | ||
14 | ### user | |
15 | - Import the ability to exceed MAXCHANNELS from ircd-seven. | |
16 | - Implement IRCv3.2 enhanced capability negotiation (`CAP LS 302`). | |
17 | - Implement support for receiving and sending IRCv3 message tags. | |
18 | - Implement IRCv3.2 capabilities: (#141) | |
19 | - account-tag | |
20 | - echo-message | |
21 | - invite-notify | |
22 | - sasl | |
23 | - server-time | |
24 | - SASL: certificate fingerprints are now always sent to the SASL agent, allowing for | |
25 | the certificate to be used as a second authentication factor. | |
26 | ||
27 | ### oper | |
28 | - Merge several features from ircd-seven: | |
29 | - Implement support for remote DIE/RESTART. | |
30 | - Implement support for remote MODLOAD et al commands. | |
31 | - Add the GRANT command which allows for temporarily opering a client. | |
32 | - Implement the hidden oper-only channel modes framework. | |
33 | - Implement a channel mode that disallows kicking IRC operators (+M). | |
34 | - Enhance the oper override system, allowing more flexibility and detail | |
35 | in network-wide notices. | |
36 | ||
37 | ### conf | |
38 | - Add the ability to strip color codes from topics unconditionally. | |
39 | ||
40 | ### docs | |
41 | - The documentation has been cleaned up; obsolete files have been purged, and | |
42 | stuff has been renamed and shuffled around to be more consistent. | |
43 | ||
44 | ### code | |
45 | - irc_dictionary and irc_radixtree stuff is now in librb, prefixed accordingly. | |
46 | Typedefs have been added for consistency reasons. For example, now you would | |
47 | write `rb_dictionary *foo` and `RB_DICTIONARY_FOREACH`. | |
48 | - C99 bools have been added. Don't use ints as simple true/false flags anymore. | |
49 | Accordingly, the `YES`/`NO` and `TRUE`/`FALSE` macros have been removed. | |
50 | - libratbox has been renamed to librb, as we have diverged from upstream long | |
51 | ago. | |
52 | - Almost all 2.8-style hashtable structures have been moved to dictionaries or | |
53 | radix trees, resulting in significant memory savings. | |
54 | - The block allocator has been disabled and is no longer used. | |
55 | - The ratbox client capabilities have been ported to use the ircd capabilities | |
56 | framework, allowing for modules to provide capabilities. | |
57 | - Support for restarting ssld has been added. ssld processes which are still | |
58 | servicing clients will remain in use, but not service new connections, and | |
59 | are garbage collected when they are no longer servicing connections. | |
60 | - Support for ratbox-style 'iodebug' hooks has been removed. | |
61 | ||
62 | ## charybdis-3.5.0 | |
63 | ||
64 | ### server protocol | |
65 | - Fix propagation of ip_cloaking hostname changes (only when setting or | |
66 | unsetting the umode after connection). | |
67 | - Fix a remote-triggerable crash triggered by the CAPAB parsing code. | |
68 | - As per the TS6 spec, require QS and ENCAP capabilities. | |
69 | - Require EX and IE capabilities (+e and +I cmodes). | |
70 | - Check that UIDs start with the server's SID. | |
71 | ||
72 | ### user | |
73 | - Allow mode queries on mlocked modes. In particular, allow /mode #channel f | |
74 | to query the forward channel even if +f is mlocked. | |
75 | - Strip colours from channel topics in /list. | |
76 | - If umode +D or +g are oper-only, don't advertise them in 005. | |
77 | - If MONITOR is not enabled, don't advertise it in 005. | |
78 | - Add starttls as per ircv3. | |
79 | - Abort a whowas listing when it would exceed SendQ, which would previously | |
80 | disconnect the user. | |
81 | - Reject nicks with '~' in them, rather than truncating at the '~'. | |
82 | - Remove CHARSET=ascii from ISUPPORT | |
83 | - Use the normal rules for IP visibility in /whowas. | |
84 | - Cmode +c now strips '\x0F' (^O, formatting off), fixing weird rendering in | |
85 | some clients that internally use mIRC formatting such as highlighted | |
86 | messages in HexChat. | |
87 | - Indicate join failure because of the chm_sslonly extension (cmode +S) using | |
88 | the same 480 numeric as ircd-ratbox. | |
89 | - Do not allow SASL authentication when the configured SASL agent is unavailable. | |
90 | - Automatically add unidentified users to the ACCEPT list when a user is set +R, | |
91 | as we do when the user is set +g. | |
92 | - Implement IRCv3.2 capabilities: | |
93 | - cap-notify | |
94 | - chghost | |
95 | - userhost-in-names | |
96 | - Implement the $&, $| and $m extban types: | |
97 | - $& combines 1 or more child extbans as an AND expression | |
98 | - $| combines 1 or more child extbans as an OR expression | |
99 | - $m provides normal hostmask matching as an extban for the above | |
100 | - Do not allow STARTTLS if a connection is already using TLS. | |
101 | - Display an operator's privilege set in WHOIS. | |
102 | - The $o extban now matches against privilege set names as well as individual | |
103 | privileges. Privilege set names are preferred over individual privileges. | |
104 | ||
105 | ### oper | |
106 | - Fix a crash with /testline. | |
107 | - Complain to opers if a server that isn't a service tries to | |
108 | SU/RSFNC/NICKDELAY/SVSLOGIN. | |
109 | - Turn off umode +p (override) when deopering. | |
110 | - Make listener error messages (e.g. port already in use) visible by default | |
111 | instead of only on snomask +d and in ioerrorlog. | |
112 | - Remove snotes on +r about GET/PUT/POST commands ("HTTP Proxy disconnected"). | |
113 | - Add DNSBL snotes on snomask +r. | |
114 | ||
115 | ### config | |
116 | - Add hide_uncommon_channels extension to hide uncommon channel memberships in WHOIS, | |
117 | like in ircd-seven. | |
118 | - Add chm_nonotice extension, cmode +T to reject notices. | |
119 | - Add restrict-unauthenticated extension, prevents unauthenticated users from | |
120 | doing anything as channel operator. | |
121 | - Add no_kill_services extension, prevents local opers from killing services. | |
122 | - Allow matching specific replies of DNSBLs, using the new matches option. | |
123 | - Remove blowfish crypt since it has the BSD advertising clause. | |
124 | - Fix SHA256 ($5$) crypt. | |
125 | - Make the channel::channel_target_change option actually work (it used to be | |
126 | always on). | |
127 | - SSL/TLS listeners now have defer_accept unconditionally enabled on them. | |
128 | - The method used for certificate fingerprints (CertFP) is now configurable. | |
129 | SHA1, SHA256 and SHA512 are available options. | |
130 | - The minimum user threshold for channels in default /list output is now | |
131 | configurable. | |
132 | ||
133 | ### misc | |
134 | - Work around timerfd/signalfd brokenness on OpenVZ. | |
135 | - Fix a compilation issue in libratbox/src/sigio.c with recent glibc. | |
136 | - Extend documentation slightly. | |
137 | - Remove a BSD advertising clause that permission was granted to remove. | |
138 | - Add support for hooking PRIVMSG/NOTICE. | |
139 | - Reenable and fix the GnuTLS support. | |
140 | - Add mbedTLS backend for SSL/TLS. | |
141 | - Remove EGD support. | |
142 | - Try other DNS servers if errors or corrupt replies are encountered. | |
143 | - Rename genssl.sh script to genssl. | |
144 | - Choose more secure SSL/TLS algorithms. | |
145 | - Fix reconnecting with SSL/TLS with some clients such as ChatZilla (see | |
146 | https://bugzilla.mozilla.org/show_bug.cgi?id=858394#c34 for details.) | |
147 | - Improve error messages about the configuration file. | |
148 | - Fix a crash when compiled with recent clang on 32-bit systems. | |
149 | - Fix various memory leaks in rehash. | |
150 | - Fix various code quality issues. | |
151 | - Add --with-shared-sqlite to allow distribution packages to link to a shared | |
152 | sqlite library. Using this is not recommended for on-server compilation. | |
153 | - ISUPPORT tokens which are actually provided by modules have been moved to their | |
154 | respective modules. | |
155 | ||
156 | ## charybdis-3.4.0 | |
157 | ||
158 | ### server protocol | |
159 | - Allow overriding opers (with the new extension) to op themselves on channels. | |
160 | - Allow RSFNC to change a nickname's capitalization only. | |
161 | - Add channel ban forwarding <mask>$<channel> much like ircd-seven. Local use | |
162 | of this is controlled by the channel::use_forward config option. | |
163 | - Add ENCAP TGINFO to propagate IP addresses that exceeded target change | |
164 | limits (these get a lower limit when they reconnect). | |
165 | ||
166 | ### user | |
167 | - Consider bogus CTCP ACTION messages (without action text) CTCP (for | |
168 | cmode +C). | |
169 | - Send ERR_TOOMANYCHANNELS for each channel join that fails due to channel | |
170 | limits. | |
171 | - Add account-notify client capability to notify clients about logins and | |
172 | logouts of users in common channels. See doc/account-notify.txt. | |
173 | - Add extended-join client capability to add account name and ircname to JOIN. | |
174 | - Add topic TS and channel TS constraints for /LIST (T<, T>, C<, C> | |
175 | parameters as in some other servers). | |
176 | - Disallow wildcarded nicknames in "hunted" parameters like /stats and /motd. | |
177 | - Disallow mIRC italics in channel names when disable_fake_channels. | |
178 | - Add AUTHENTICATE EXTERNAL support, allows SASL authentication using a | |
179 | certificate fingerprint. | |
180 | - Allow channel::kick_on_split_riding to protect channels with mlocked keys. | |
181 | - The NICKLEN token in 005 now only specifies the maximum usable nick length. | |
182 | The MAXNICKLEN token specifies the maximum nick length any user can have. | |
183 | - Disallow $ in usernames as this may cause problems with ban forwarding. | |
184 | - Add an error message (numeric 743) if a ban mask is invalid. | |
185 | - Extract the underlying IPv4 address from 6to4 and Teredo IPv6 addresses. | |
186 | Show it in a remote /whois and check channel bans, quiets, D:lines and | |
187 | K:lines against it. Note that ban exceptions and auth{} blocks are not | |
188 | checked. | |
189 | - Allow normal users to perform /privs on themselves, showing some privileges | |
190 | from the auth{} block. | |
191 | - Add away-notify client capability, see doc/away-notify.txt. | |
192 | - Add rate limit for high-bandwidth commands, in particular /who <channel>. | |
193 | - Rate limit /away to help avoid flooding via away-notify. | |
194 | - Apply colour stripping (cmode +c) and CTCP checking (cmode +C) to messages | |
195 | to @/+ channel as well. | |
196 | - Channel mode +c (and other places that disallow colour codes) now also strip | |
197 | ASCII 4 (a different kind of colour code). | |
198 | ||
199 | ### oper | |
200 | - Add operspy for /list. | |
201 | - Add a server notice to snomask +b if a user exceeds target change limits. | |
202 | - Add missing server notice for kills from RSFNC and SVSLOGIN. | |
203 | - Add /stats C to show information about dynamically loaded server | |
204 | capabilities. | |
205 | ||
206 | ### config | |
207 | - Add support for linking using SSL certificate fingerprints as the link | |
208 | credential rather than the traditional password pair. | |
209 | - Add m_roleplay extension, provides various roleplay commands. | |
210 | - Add override extension, umode +p oper override for opers with oper:override | |
211 | permission, with accountability notices and timeout. Note that opers cannot | |
212 | op themselves if there are older servers on the network. | |
213 | - Add channel::disable_local_channels config option. | |
214 | - Add support for IPv6 DNSBLs. A new "type" option specifies the IP version(s) | |
215 | for which each DNSBL should be checked. | |
216 | - Make flood control settings configurable by those who know exactly what they | |
217 | are doing. | |
218 | - Add serverinfo::nicklen config option to limit the nick length for local | |
219 | users. Different values of this option do not break the server protocol. | |
220 | - Add extb_usermode extension, $m:+-<modes> extban matching against umodes. | |
221 | - Extend extb_oper extension to allow matching against oper privileges. | |
222 | - Add m_remove extension, /remove command as in ircd-seven. | |
223 | - Add general::away_interval to allow configuring /away rate limiting. | |
224 | - Add listener::defer_accept to delay accepting a connection until the client | |
225 | sends data. This depends on kernel support. It may break BOPM checking. | |
226 | ||
227 | ### misc | |
228 | - In mkpasswd, default to SHA512-based crypt instead of MD5-based crypt. | |
229 | - Add --with-custom-branding and --with-custom-version configure options to | |
230 | help forks/patchsets distinguish themselves. | |
231 | - Change version control from Mercurial to GIT. | |
232 | - Ensure SIGHUP and SIGINT keep working after a SIGINT restart. | |
233 | - Add --enable-fhs-paths configure option to allow installing into a more | |
234 | FHS-like hierarchy. | |
235 | - Remove broken GnuTLS support. SSL/TLS is now only provided using OpenSSL. | |
236 | ||
237 | ## charybdis-3.3.0 | |
238 | ||
239 | ### server protocol | |
240 | - Add new BAN command, for propagated network-wide bans (K/X:lines and RESVs). | |
241 | These will burst to new servers as they are introduced, and will stay in sync | |
242 | across the whole network (new BAN capab). | |
243 | - Add new MLOCK command, to implement ircd-side channel mode locks. This allows | |
244 | services to send out a list of mode letters for a given channel which may not | |
245 | be changed, preventing mode fights between services and client bots (new MLOCK | |
246 | capab). | |
247 | ||
248 | ### user | |
249 | - New RPL_QUIETLIST(728) and RPL_ENDOFQUIETLIST(729) numerics are used for the | |
250 | quiet (+q) list, instead of overloading the ban list numerics. | |
251 | - Users may no longer change the topic of a -t channel if they cannot send to | |
252 | it. | |
253 | - Add help for EXTBAN, describing the syntax of extended bans in general, as | |
254 | well as the most common types. | |
255 | - Changed AWAY messages are now propagated to other servers. Previously, AWAY | |
256 | was only propagated when the user was not already away. | |
257 | - Channel mode +c (and other places that disallow colour codes) now also strip | |
258 | ASCII 29 (mIRC 7 italics). | |
259 | - Add auto-accept for user mode +g (callerid): Messaging a user while set +g | |
260 | will automatically add them to your accept list. | |
261 | - Add target change for channels. It applies to unopped, unvoiced and unopered | |
262 | users. This has the effect of stopping spambots which join, message and part | |
263 | many channels at a time. | |
264 | - Show RPL_WHOISLOGGEDIN in /whowas as well as in /whois entries. This adds at | |
265 | most an additional 0.5MB of memory usage. | |
266 | ### config | |
267 | - Add general::use_propagated_bans to switch the new BAN system on or off. | |
268 | - Add general::default_ident_timeout, to control the timeout for identd (auth) | |
269 | connections. | |
270 | - Add channel::channel_target_change to switch the new channel target change limits | |
271 | on or off. | |
272 | - Fix class::number_per_ident so that it also applies to connections without | |
273 | identd. | |
274 | - Change the example sslport option to 6697, which is more standard than 9999. | |
275 | ### misc | |
276 | - The custom channel mode API has been rewritten, allowing these modules to work | |
277 | correctly when reloaded, or loaded from the config file. | |
278 | - The EFNet RBL is now recommended, instead of DroneBL. | |
279 | - Remove the unsupported modules directory. | |
280 | - Numerous bug fixes and code cleanups. | |
281 | - In mkpasswd, default to MD5 crypt instead of insecure DES. | |
282 | ||
283 | ## charybdis-3.2.0 | |
284 | ||
285 | ### server protocol | |
286 | - Apply +z to messages blocked by +b and +q as well. (new EOPMOD capab) | |
287 | - Add new topic command ETB, allowing services to set topic+setter+ts always. | |
288 | (new EOPMOD capab) | |
289 | - The slash ('/') character is now allowed in spoofs. | |
290 | ||
291 | ### user | |
292 | - Add can_kick hook, based on the ircd-seven one. | |
293 | - Add cmode +C (no CTCP) from ircd-seven. | |
294 | - Flood checking has been reworked. | |
295 | - Fix op-moderate (cmode +z) for channel names with '@'. | |
296 | - Add CERTFP support, allowing users to connect with an SSL client | |
297 | certificate and propagating the certificate fingerprint to other servers. | |
298 | Services packages can use this to identify users based on client | |
299 | certificates. | |
300 | - Maintain the list of recently used targets (for the target change | |
301 | anti-spam system) in most-recently-used order, overwriting the least | |
302 | recently used target with a new one. This should be friendlier to users | |
303 | without giving spambots anything. | |
304 | - Do not require target change slots for replying to the last five users to | |
305 | send a private message, notice or invite. | |
306 | - Apply target change restrictions to /invite. | |
307 | - Apply umode +g/+R restrictions to /invite, with the difference that | |
308 | instead of sending "<user> is messaging you" the invite is let through | |
309 | since that is just as noisy. | |
310 | ||
311 | ### oper | |
312 | - Add /rehash throttles to clear throttling. | |
313 | - Send all server notices resulting from a remote /rehash to the oper. | |
314 | - '\s' for space is now part of the matching, not a substitution at xline | |
315 | time, fixing various issues with it. | |
316 | - Display o:line "nickname" in oper-up server notices. | |
317 | - Fix sendq exceeded snotes for servers. | |
318 | - SCAN UMODES: default list-max to 500, like a global WHO. | |
319 | - Ignore directory names in MODRELOAD to avoid crashing if it is a core | |
320 | module and the path is incorrect. | |
321 | - Tweaks to spambot checks. | |
322 | ||
323 | ### config | |
324 | - Add channel::only_ascii_channels config option to restrict channel names | |
325 | to printable ascii only. | |
326 | - Add channel::resv_forcepart, forcibly parts local users on channel RESV, | |
327 | default enabled. | |
328 | ||
329 | ### misc | |
330 | - New mkpasswd from ircd-ratbox. | |
331 | - Check more system calls for errors and handle the errors. | |
332 | - Various ssld/libratbox bugfixes from ircd-ratbox. [some MERGED] | |
333 | - Fix fd passing on FreeBSD/amd64 and possibly Solaris/sparc. [MERGED] | |
334 | - Various documentation improvements. [some MERGED] | |
335 | - Fix some crash issues. [MERGED] | |
336 | - Add bandb from ircd-ratbox, which stores permanent dlines/klines/xlines/resvs | |
337 | in an sqlite database instead of a flatfile and does the storage in a | |
338 | helper process. Use bin/bantool -i to import your old bans into the | |
339 | database. | |
340 | ||
341 | ## charybdis-3.1.0 | |
342 | ||
343 | - Remove TS5 support. No TS5 servers are permitted in a network with | |
344 | charybdis 3.1.0 or newer, except jupes. | |
345 | - Replace oper flags by privilege sets (privsets). This adds an extra | |
346 | level of indirection between oper flags and operator blocks. /stats O | |
347 | (capital O) shows the configured privsets. | |
348 | - Update libratbox and ssld from upstream and use it better. | |
349 | - Add auth_user to auth{}. This allows specifying a username:password instead | |
350 | of just a password in PASS, so that a fixed user@host is not necessary | |
351 | for a specific auth{} block. | |
352 | - Add need_ssl to auth{} and operator{}. This makes these blocks reject | |
353 | the user if not connected via SSL. | |
354 | - Allow modules to provide simple channel modes without parameter. | |
355 | - Remove restrictions on CNAME in the resolver. | |
356 | - Make the resolver remember nonresponsive nameservers. | |
357 | - Move nick collision notices from +s to +k. | |
358 | - Add additional information to various server notices about server | |
359 | connections. | |
360 | - Show throttle information in /stats t. | |
361 | - Show rejectcache and throttle information in /testline. | |
362 | - Show oper reason in /testline. | |
363 | - Allow opers to see other users' umodes with /mode <nick>. | |
364 | - SCAN UMODES GLOBAL NO-LIST MASK <mask> is no longer an operspy command. | |
365 | - Also apply floodcount to messages to remote clients (except services). | |
366 | - Remove user@server messages to local users. Sending such messages to | |
367 | remote servers is still possible, for securely messaging pseudoservers | |
368 | whether service{}'ed or not. The special oper-only syntax opers@server | |
369 | remains as well. | |
370 | - Allow /list on a named +p channel. A full /list already included +p channels. | |
371 | - Add operspy /topic. | |
372 | - For remote rehashes, send error messages to the requesting oper as well. | |
373 | - Disable autoconnect for a server with excessive TS delta. | |
374 | - Disallow invites to juped channels. | |
375 | - Warn about certain duplicate and redundant auth blocks. | |
376 | - Make PRIVMSG/NOTICE behave as CPRIVMSG/CNOTICE automatically if possible. | |
377 | - Allow +z messages from outside if a channel is -n. | |
378 | - Allow coloured part reasons in -c channels. | |
379 | - Add ircu-like WHOX support. This allows requesting specific information | |
380 | in /who and allows obtaining services login name for all users in a | |
381 | channel. XChat/Conspire use WHOX to update away status more efficiently. | |
382 | - Allow opers and shide_exempt users to see hopcounts even if flatten_links | |
383 | is on. | |
384 | - Rework ip_cloaking. | |
385 | - Add the IP address to userlog, as in ircd-ratbox 3.0. | |
386 | - Split cidr_bitlen into cidr_ipv4_bitlen and cidr_ipv6_bitlen. | |
387 | - Allow using ziplinks with SSL connections. This is not as efficient as | |
388 | using OpenSSL's built in compression, but also works with older versions | |
389 | of OpenSSL. | |
390 | - Fix an off by one error with zipstats processing, which could overwrite | |
391 | a variable with NULL causing a crash on some systems. | |
392 | - Document some extensions in charybdis-oper-guide. | |
393 | - Add more server protocol documentation. | |
394 | - Add m_sendbans extension, SENDBANS command to propagate xlines and resvs | |
395 | manually. | |
396 | - Add chm_sslonly extension, cmode +S for SSL/TLS only channels. | |
397 | - Add chm_operonly extension, cmode +O for IRCop only channels. | |
398 | - Add chm_adminonly extension, cmode +A for server admin only channels. | |
399 | - Various code cleanups. | |
400 | ||
401 | ## charybdis-3.0.4 | |
402 | ||
403 | - Fix a crash on certain recent versions of Ubuntu. | |
404 | - Allow 127.x.y.z for DNSBL replies instead of just 127.0.0.x. | |
405 | - Various documentation improvements. | |
406 | ||
407 | ## charybdis-3.0.3 | |
408 | ||
409 | - Fix IPv6 D:lines | |
410 | - Fix rejectcache and unknown_count. | |
411 | - Fix genssl.sh. | |
412 | - Fix ident for SSL/TLS connections. | |
413 | - Fix SSL/TLS bugs for servers with more than about 100 connections. | |
414 | - Small bugfixes. | |
415 | ||
416 | ## charybdis-3.0.2 | |
417 | ||
418 | - Improve OLIST extension error messages. | |
419 | - Improve some kline error checking. | |
420 | - Avoid timing out clients if we are still waiting for a DNSBL lookup. | |
421 | - Fix resolver hangs with epoll. | |
422 | - Fix compilation without zlib. | |
423 | ||
424 | ## charybdis-3.0.1 | |
425 | ||
426 | - Fix occasional hung clients with kqueue. | |
427 | - Fix a rare ssld crash. | |
428 | - Fix a bug that could cause incorrect connect failure reasons to be | |
429 | reported. | |
430 | - Make the IRCd work on MacOS X again. | |
431 | ||
432 | ## charybdis-3.0.0 | |
433 | ||
434 | - Port the IRCd to libratbox, which has improved our portability and allows | |
435 | us to reuse low-level code instead of maintaining our own. | |
436 | - Change configuration of maximum number of clients to ircd-ratbox 3 way. | |
437 | - Add adminwall from ircd-ratbox, as an extension. | |
438 | - Add client and server-to-server SSL, read example.conf for setup. | |
439 | - Replace servlink with ssld (also for ziplinks). | |
440 | - A new extban, $z, has been added for ssl users (extensions/extb_ssl.so). | |
441 | - A new compatibility channel mode, +R, has been added, it sets | |
442 | +q/-q $~a (extensions/chm_operonly_compat.so). This is similar to | |
443 | the +R seen in ircd-seven. | |
444 | - A new compatibility channel mode, +S, has been added, it sets | |
445 | +b/-b $~z (extensions/chm_sslonly_compat.so). | |
446 | - A new compatibility channel mode, +O, has been added, it sets | |
447 | +iI/-iI $o (extensions/chm_operonly_compat.so). | |
448 | - Add remote D:lines. Note that these are not enabled by default. | |
449 | - Remove EFnet-style G:lines. Noone appears to use these. | |
450 | - Remove idle time checking (auto disconnecting users idle too long). | |
451 | - Display a notice to clients when the IRCd is shut down using SIGTERM. | |
452 | - Some error messages have been clarified to enhance usability. | |
453 | - Close the link to servers that send invalid nicks (e.g. nicklen mismatches). | |
454 | Formerly the users were killed from the network. | |
455 | - Enable topicburst by default in connect{}. | |
456 | - Fix a potential desync which can happen with oper override. | |
457 | - Remove "deopped" flag (TS5 legacy). | |
458 | - Use 127.0.0.1 as nameserver if none can be found in /etc/resolv.conf. | |
459 | - Only accept 127.0.0.x as a dnsbl listing. | |
460 | - Change cloaking module (same as 2.2.1, different from 2.2.0). | |
461 | - Make some more server notices about failed remote connect attempts | |
462 | network wide. | |
463 | - Make some server notices about flooders and TS delta network wide. | |
464 | - Remove redundant "<server> had been connected for <time>" server notice. | |
465 | - Add resv oper privilege to control /resv, /unresv and cmode +L and +P, | |
466 | enabled by default. | |
467 | - Add mass_notice oper privilege to control global notices and /wallops, | |
468 | enabled by default. | |
469 | - Rework unkline/undline/unxline/unresv so they show the exact item removed | |
470 | and do not rehash bans. | |
471 | - Show opers a list of recently (<24hrs) split servers in /map. | |
472 | - Add /privs command, shows effective privileges of a client. | |
473 | ||
474 | ## charybdis-2.2.0 | |
475 | ||
476 | - The I/O code has been reworked, file descriptor metadata is stored in a | |
477 | hashtable and the maximum number of clients can now be set in ircd.conf. | |
478 | - Improve error checking and error messages for kline/dline/xline/resv files. | |
479 | - Allow kline ipv6:address, unkline some.host and unkline ipv6:address | |
480 | without *@. | |
481 | - Add accountability (wallops, log) to OKICK extension. | |
482 | - Add opernick to OPME/OMODE/OJOIN log messages. | |
483 | - Add use_forward option, allows disabling cmode +fFQ and umode +Q. | |
484 | - Add keyword substitution to DNSBL reasons, making it possible to show | |
485 | things like the user's IP address in the reason. | |
486 | - Use sendto_one_notice() more. | |
487 | - Server notices about kills now include the victim's nick!user@host instead | |
488 | of just nick. | |
489 | - Include real hostname in Closing Link message for unknown connections | |
490 | that have sent USER, in particular banned users. | |
491 | - Add some documentation about the SASL client protocol. | |
492 | - Change spambot, flooder and jupe joiner notices from host to orighost. | |
493 | - Remove the last remains of server hostmasking (this made it possible to | |
494 | have multiple servers with similar names appear as a single server). | |
495 | - Keep bitmasks of modularized umodes reserved forever to the letter, | |
496 | avoiding problems when reloading umode modules in a different order. | |
497 | - Fix -logfile. | |
498 | - Update to the new revision (v8) of the TS6 spec, this fixes problems with | |
499 | joins reversing certain mode changes crossing them. This interoperates | |
500 | with older versions. | |
501 | - Put "End of Channel Quiet List" at the end of +q lists. | |
502 | - Fix invisible count getting desynched from reality if the act of opering | |
503 | up sets -i or +i. | |
504 | - Don't leak auth{} spoofed IP addresses in +f notices. | |
505 | - Shorten quit/part/kick reasons to avoid quit reasons overflowing the | |
506 | client exiting server notice (from TOPICLEN to 260). | |
507 | - Fix some cases where 10 char usernames lose their final character. | |
508 | - Move username check after xline and dnsbl checks, so it will not complain | |
509 | to opers about clients who are xlined or blacklisted anyway (both of | |
510 | which silently reject). | |
511 | - Remove invite_ops_only config option, forcing it to YES. | |
512 | - Allow /invite (but not invex) to override +r, +l, +j in addition to +i. | |
513 | - Add several new extensions, such as createoperonly. | |
514 | - Merge whois notice extensions into one and move it from snomask +y to +W. | |
515 | ||
516 | ## charybdis-2.1.2 | |
517 | ||
518 | - Fix bug that could cause all hostmangled users to be exempted when a | |
519 | single ban exception existed on a channel. | |
520 | - Tweak \s code a little. | |
521 | - Add a minor clarification to the SGML docs. | |
522 | - Avoid truncation in ip_cloaking (by removing components on the other side). | |
523 | Note that this may cause channel +bqeI modes set on such very long hosts | |
524 | to no longer match. | |
525 | ||
526 | ## charybdis-2.1.1 | |
527 | ||
528 | - Search the shortest list (user's/channel's) when looking up channel | |
529 | memberships. | |
530 | - Make the SID-collision notice look right under all conditions. | |
531 | - Move kills from services from +s to +k snomask. | |
532 | - When no_tilde is present on an auth{} block, check the non-tilde version | |
533 | of the user@host against k:lines as well. | |
534 | - Put full reason in the SQUIT reason when a server is rejected for | |
535 | insufficient parameters being passed to a command. | |
536 | - Don't redirect users to an existing domain, irc.fi. | |
537 | - Improve communication of servlink-related error messages. | |
538 | ||
539 | ## charybdis-2.1.0 | |
540 | ||
541 | - Our official website is now http://www.ircd-charybdis.org/. | |
542 | - Make RPL_ISUPPORT (005 numeric) modularizable. | |
543 | - Also do forwarding if the channel limit (+l) is exceeded. | |
544 | - Don't count opers on service{} servers in /lusers. | |
545 | - Allow servers to send to @#chan and +#chan. | |
546 | - Allow +S clients (services) to send to channels and @/+ channels always. | |
547 | - Allow normal match() on IP address also in /masktrace. | |
548 | - Add new testmask from ratbox 2.2. Allows matches on nick, ip and gecos | |
549 | in addition to user and host, and is fully analogous to masktrace. | |
550 | The numeric has changed from 724 to 727 and fields in it have changed. | |
551 | - Show IP addresses to opers in /whowas. | |
552 | - Add extb_extgecos extban option ($x:nick!user@host#gecos), from sorcery | |
553 | modules. | |
554 | - Add extb_canjoin extban option ($j:#channel), matches if the user is banned | |
555 | from the other channel. | |
556 | - Allow opers to /who based on realhost. | |
557 | - Allow opers to /masktrace, /testmask based on realhost. | |
558 | - Add general::operspy_dont_care_user_info, limits operspy accountability to | |
559 | channel-related information. | |
560 | - Make host mangling more reliable. | |
561 | - Prevent ban evasion by enabling/disabling host mangling. | |
562 | - Add EUID, sends real host and services account in the same command as other | |
563 | user information. | |
564 | - Make it possible to send CHGHOST without ENCAP (fixes problems with old | |
565 | services). | |
566 | - Allow service{} servers to manipulate the nick delay table (for "nickserv | |
567 | enforcement", aka SVSHOLD). | |
568 | - Send server notices about connections initiated by remote opers network wide. | |
569 | - Fix too early truncation of JOIN channel list. | |
570 | - Make the newconf system available to modules. | |
571 | - Add /stats s to the hurt module to list active hurts. | |
572 | - Add general::servicestring, shown in /whois for opered services (+oS). | |
573 | - Show real host/IP behind dynamic spoof in /whois to the user themselves | |
574 | and opers. | |
575 | - Document option to disable nick delay. | |
576 | - Improve logging of server connections. | |
577 | - Clean up handling of hostnames in connect blocks. | |
578 | - Remove support for resolving ip6.int, people should be using ip6.arpa. | |
579 | - Unbreak --disable-balloc (useful for debugging with tools like valgrind). | |
580 | - Make Solaris 10 I/O ports code compile. | |
581 | - Add WEBIRC module to allow showing the real host/IP of CGI:IRC users. | |
582 | - Comment out blacklist{} block in example confs, as AHBL requires | |
583 | notification before use. | |
584 | - Fix some bugs relating to the resolver. | |
585 | ||
586 | ## charybdis-2.0.0 | |
587 | ||
588 | - Replace ADNS with a new smaller resolver from ircu and hybrid. | |
589 | - Make services shortcuts (/chanserv etc) configurable in ircd.conf. | |
590 | - Add extban: extensible +bqeI matching via modules. Syntax is | |
591 | $<type>[:<data>]. By default no modules are loaded. | |
592 | - Add DNS blacklist checking. | |
593 | - Change operator{} block user@host from host to orighost. This means that | |
594 | services/+h spoofs do not work in operator{} blocks; auth{} spoofs still | |
595 | work. Check your operator{} blocks! | |
596 | - Split contrib/ into extensions/ and unsupported/. | |
597 | - Change CHGHOST do show the change to all other clients on common channels | |
598 | with quit/join/mode. | |
599 | - Add /rehash nickdelay to clear out the nickdelay tables. | |
600 | - Glines are now disabled in the example confs. | |
601 | - Show more error messages on stderr. | |
602 | - Add OMODE command to extensions/ for easier oper mode hacking. | |
603 | - Add HURT system to extensions/; this shuns clients matching certain host/ip | |
604 | unless and until they identify to services. Mainly intended for SorceryNet. | |
605 | - Show SASL success and failure counts in /stats t. | |
606 | - Allow more frequent autoconnects to servers. | |
607 | - Messaging services by nickname no longer uses target change slots. | |
608 | - Only accept SASL from servers in a service{} block. | |
609 | - New auth{} flag need_sasl to reject users who haven't done SASL | |
610 | authentication. | |
611 | - Expand blah.blah and blah:blah to *!*@... instead of ...!*@* for bans | |
612 | - Don't allow opers to fake locops/operwall to +w. | |
613 | - Documentation updates. | |
614 | - Many bugfixes. | |
615 | ||
616 | ## charybdis-1.1.0 | |
617 | ||
618 | - Implement SAFELIST. | |
619 | - Incorporate ircu's match() algorithm. | |
620 | - Improve usermode modularization. | |
621 | - Seperate server notices into a seperate snomask, freeing up many | |
622 | usermodes to be used. | |
623 | - Add support for SIGNON originating from Hyperion2. | |
624 | - Modularize many server notices into seperate modules. | |
625 | - Add hooks for can_join and can_create_channel. | |
626 | - Add support for SASL authentication. | |
627 | - Add introduce_user hook for adding new messages when a user is bursted. | |
628 | - Move a large part of the ircd into libcharybdis. | |
629 | - Don't complain "unknown user mode" if a user tries to unset | |
630 | a mode they do not have access to. | |
631 | - Update our challenge specification to the challenge implementation in | |
632 | ratbox 2.2 for interoperability. | |
633 | - Make +f notices network-wide (local host, global host, | |
634 | global user@host, local class), other notices tied to +f remain local. | |
635 | - Allow ENCAP REALHOST outside of netburst. | |
636 | - Add general::global_snotices option to make server notices be | |
637 | network-wide or not. | |
638 | - Add sno_farconnect.c to contrib, provides farconnect support. | |
639 | Could be useful for BOPM. | |
640 | - Add sno_routing.c which displays information about netsplits, netjoins | |
641 | and the clients affected by them. | |
642 | - Add CHANTRACE and TRACEMASK commands from ratbox 3.0 | |
643 | - Use IsOperAdmin() instead of IsAdmin() when sending admin-only messages, | |
644 | that way hidden admins get them too. | |
645 | - Add m_error to core_module_table, somehow it was missing. | |
646 | - Correct a format string bug that occurs when a read error is | |
647 | received. | |
648 | - Add some logging in places where we drop servers and only notify | |
649 | server operators. | |
650 | - Track hostmask limits based on a client's original host, if | |
651 | available. | |
652 | - Move HIDE_SPOOF_IPS into the general {} block in ircd.conf | |
653 | ||
654 | ## charybdis-1.0.3 | |
655 | ||
656 | - Fix /invite UID leak. (Found by logiclrd@EFnet.) | |
657 | - Incorporate ratbox bugfixes for the MONITOR system. | |
658 | - Made show_ip() less braindead. | |
659 | - Show real errno if we fail to connect to a server. | |
660 | - Don't disclose server IP's when a connection fails. | |
661 | - Do not show the channels a service is sitting in. | |
662 | - Reverted the aline code from hybrid-7.2 | |
663 | - Make sure TS6 services are recognized properly if connected remotely. | |
664 | - Tweak something in services support for cyrix boxes. | |
665 | ||
666 | ## charybdis-1.0.2 | |
667 | ||
668 | - Fix propagation of an empty SJOIN (permanant channels). | |
669 | - Fix an exploit involving a malformed /trace request. | |
670 | - Don't display a blank RPL_WHOISCHANNELS in a remote whois request. | |
671 | - Allow modules to provide new usermodes. | |
672 | - On a nickname collision, change the collided nick to their unique ID, | |
673 | if general::collision_fnc is enabled in the config. | |
674 | - Don't allow UID lookups in /monitor + and /monitor s | |
675 | - Fix a garbage issue with channel mode +j. | |
676 | - Apply proper capability flags to the proper server in me_gcap(). | |
677 | - Use find_named_person() instead of find_person() in a nick collision. | |
678 | - Prevent UID disclosure in cmode setting. | |
679 | - Prevent UID disclosure to remote clients in /kick. | |
680 | - Do not allow users to query via /whois <server> <UID>. | |
681 | - Don't allow local users to use UID's in local usermode changes. | |
682 | - Propagate +q lists on netjunction. | |
683 | - Clear +q lists on a lowerTS SJOIN. | |
684 | - Ported a generic k/d/x-line parser from hybrid-7.2 which resulted in | |
685 | duplicate code reduction. | |
686 | - Fix linebuf raw code to not truncate lines longer than 512 bytes; | |
687 | improves ziplink reliability on net junction. | |
688 | - Use find_named_person() vs find_person() in services alias code. | |
689 | - Fix issue where channel forwarding token can be lost on net junction. | |
690 | - Fix empty channel desync issues involving +P. | |
691 | - Remove unused non-ENCAP CHGHOST support. | |
692 | - Use TS6 form for SQUIT wallops. | |
693 | - Propagate nickname changes for remote clients in TS6 form if possible, | |
694 | even if sent in TS5 format. | |
695 | - Only clear oper_only_umodes for local clients on deoper. | |
696 | ||
697 | ## charybdis-1.0.1 | |
698 | ||
699 | - Display logged in status on non-local clients too. | |
700 | - Documentation updates | |
701 | - Fix a bug with forward target authorization. | |
702 | - Fix a bug with mode propagation (+Q/+F). | |
703 | - Change ERR_NOSUCHNICK to ERR_SERVICESOFFLINE in services aliases. | |
704 | - Add remote rehashing. | |
705 | - Document service { } blocks (u:lines on ircu). | |
706 | - Document identify_service and identify_command in reference.conf. | |
707 | ||
708 | ## charybdis-1.0 | |
709 | ||
710 | - Implement channel mode +L for channel list limit exemptions. | |
711 | - Implement channel mode +P primarily as a status mode, permanant | |
712 | channel -- this is usually enforced via services registrations. | |
713 | - Change behaviour of /stats p: now displays all staff members instead | |
714 | of local ones only. | |
715 | - Make oper_list global, add local_oper_list for local traffic. | |
716 | - Strip control codes from parts and quits. | |
717 | - Add channel mode +c which strips control codes from messages sent to | |
718 | the channel. | |
719 | - Add channel mode +g which enables free use of the /invite command. | |
720 | - Add channel mode +z which sends rejected messages to channel ops. | |
721 | Could be useful for Q&A sessions or other similar events. | |
722 | - Add channel quietmasks. These are recommended over the use of channel | |
723 | bans used to remove a user's ability to participate in the channel. | |
724 | - Add channel join throttling mode, +j. Used to throttle channel join | |
725 | traffic, i.e. join/part flood attacks. Syntax: +j <joins>:<timeslice> | |
726 | - Improvements to channel_modes(), from shadowircd -- allows for | |
727 | better construction of the mode string. | |
728 | - Use the undernet throttle notice instead of bancache message when | |
729 | dealing with rejected clients. (stolen from ircu2.10.12) | |
730 | - Add channel forwarding, via channel mode +f, behaves similarly to | |
731 | dancer-ircd version. | |
732 | - Update example.conf to reflect AthemeNET changes. Original ratbox | |
733 | config is now reference.conf. | |
734 | - Services account names are now tracked globally. | |
735 | - Add channel mode +Q which disables the effects of channel forwarding | |
736 | on a temporary basis. | |
737 | - Add channel mode +F which allows anybody to disable forwarding target | |
738 | authorisation, voluntarily on their channels. | |
739 | - Make wallops behave like normal wallops. | |
740 | - Add services aliases: /ns, /cs, /os, /nickserv, /chanserv, /operserv. | |
741 | - Add simple hack that enables use of server password for automatic | |
742 | identify. |