]>
Commit | Line | Data |
---|---|---|
1 | # News | |
2 | ||
3 | This is charybdis 4.0-dev, Copyright (c) 2005-2016 Charybdis team. | |
4 | See LICENSE for licensing details (GPL v2). | |
5 | ||
6 | ## charybdis-3.6-dev | |
7 | ||
8 | ### build | |
9 | - Build system has been converted to libtool + automake for sanity reasons. | |
10 | - The compile date is now set at configure time rather than build time, allowing for | |
11 | reproducible builds. (#148, #149) | |
12 | - Support for GNUTLS 3.4 has been added. | |
13 | ||
14 | ### user | |
15 | - Import the ability to exceed MAXCHANNELS from ircd-seven. | |
16 | - Implement IRCv3.2 enhanced capability negotiation (`CAP LS 302`). | |
17 | - Implement support for receiving and sending IRCv3 message tags. | |
18 | - Implement IRCv3.2 capabilities: (#141) | |
19 | - account-tag | |
20 | - echo-message | |
21 | - invite-notify | |
22 | - sasl | |
23 | - server-time | |
24 | - SASL: certificate fingerprints are now always sent to the SASL agent, allowing for | |
25 | the certificate to be used as a second authentication factor. | |
26 | ||
27 | ### oper | |
28 | - Merge several features from ircd-seven: | |
29 | - Implement support for remote DIE/RESTART. | |
30 | - Implement support for remote MODLOAD et al commands. | |
31 | - Add the GRANT command which allows for temporarily opering a client. | |
32 | - Implement the hidden oper-only channel modes framework. | |
33 | - Implement a channel mode that disallows kicking IRC operators (+M). | |
34 | - Enhance the oper override system, allowing more flexibility and detail | |
35 | in network-wide notices. | |
36 | - DNS, ident, and blacklist lookups have been moved to a dedicated daemon known | |
37 | as authd. Some cosmetic changes to blacklist statistics and rejection notices | |
38 | have resulted. | |
39 | - An experimental OPM scanner has been added to authd. Plaintext SOCKS4, | |
40 | SOCKS5, and HTTP CONNECT proxies can be checked for. | |
41 | - The LOCOPS command has been moved from core to an extension. | |
42 | ||
43 | ### conf | |
44 | - Add the ability to strip color codes from topics unconditionally. | |
45 | - The obsolete hub option from server info has been removed. | |
46 | ||
47 | ### docs | |
48 | - The documentation has been cleaned up; obsolete files have been purged, and | |
49 | files have been renamed and shuffled around to be more consistent. | |
50 | ||
51 | ### code | |
52 | - irc_dictionary and irc_radixtree related functions are now in librb, and | |
53 | prefixed accordingly. Typedefs have been added for consistency with existing | |
54 | data structures. For example, now you would write `rb_dictionary *foo` and | |
55 | `RB_DICTIONARY_FOREACH`. | |
56 | - C99 bools are now included and used in the code. Don't use ints as simple true | |
57 | or false flags anymore. In accordance with this change, the `YES`/`NO` and | |
58 | `TRUE`/`FALSE` macros have been removed. | |
59 | - libratbox has been renamed to librb, as we have diverged from upstream long | |
60 | ago. | |
61 | - Almost all 2.8-style hashtable structures have been moved to dictionaries or | |
62 | radix trees, resulting in significant memory savings. | |
63 | - The block allocator has been disabled and is no longer used. | |
64 | - The ratbox client capabilities have been ported to use the ircd capabilities | |
65 | framework, allowing for modules to provide capabilities. | |
66 | - Support for restarting ssld has been added. ssld processes which are still | |
67 | servicing clients will remain in use, but not service new connections, and | |
68 | are garbage collected when they are no longer servicing connections. | |
69 | - Support for ratbox-style 'iodebug' hooks has been removed. | |
70 | ||
71 | ## charybdis-3.5.0 | |
72 | ||
73 | ### server protocol | |
74 | - Fix propagation of ip_cloaking hostname changes (only when setting or | |
75 | unsetting the umode after connection). | |
76 | - Fix a remote-triggerable crash triggered by the CAPAB parsing code. | |
77 | - As per the TS6 spec, require QS and ENCAP capabilities. | |
78 | - Require EX and IE capabilities (+e and +I cmodes). | |
79 | - Check that UIDs start with the server's SID. | |
80 | ||
81 | ### user | |
82 | - Allow mode queries on mlocked modes. In particular, allow /mode #channel f | |
83 | to query the forward channel even if +f is mlocked. | |
84 | - Strip colours from channel topics in /list. | |
85 | - If umode +D or +g are oper-only, don't advertise them in 005. | |
86 | - If MONITOR is not enabled, don't advertise it in 005. | |
87 | - Add starttls as per ircv3. | |
88 | - Abort a whowas listing when it would exceed SendQ, which would previously | |
89 | disconnect the user. | |
90 | - Reject nicks with '~' in them, rather than truncating at the '~'. | |
91 | - Remove CHARSET=ascii from ISUPPORT | |
92 | - Use the normal rules for IP visibility in /whowas. | |
93 | - Cmode +c now strips '\x0F' (^O, formatting off), fixing weird rendering in | |
94 | some clients that internally use mIRC formatting such as highlighted | |
95 | messages in HexChat. | |
96 | - Indicate join failure because of the chm_sslonly extension (cmode +S) using | |
97 | the same 480 numeric as ircd-ratbox. | |
98 | - Do not allow SASL authentication when the configured SASL agent is unavailable. | |
99 | - Automatically add unidentified users to the ACCEPT list when a user is set +R, | |
100 | as we do when the user is set +g. | |
101 | - Implement IRCv3.2 capabilities: | |
102 | - cap-notify | |
103 | - chghost | |
104 | - userhost-in-names | |
105 | - Implement the $&, $| and $m extban types: | |
106 | - $& combines 1 or more child extbans as an AND expression | |
107 | - $| combines 1 or more child extbans as an OR expression | |
108 | - $m provides normal hostmask matching as an extban for the above | |
109 | - Do not allow STARTTLS if a connection is already using TLS. | |
110 | - Display an operator's privilege set in WHOIS. | |
111 | - The $o extban now matches against privilege set names as well as individual | |
112 | privileges. Privilege set names are preferred over individual privileges. | |
113 | ||
114 | ### oper | |
115 | - Fix a crash with /testline. | |
116 | - Complain to opers if a server that isn't a service tries to | |
117 | SU/RSFNC/NICKDELAY/SVSLOGIN. | |
118 | - Turn off umode +p (override) when deopering. | |
119 | - Make listener error messages (e.g. port already in use) visible by default | |
120 | instead of only on snomask +d and in ioerrorlog. | |
121 | - Remove snotes on +r about GET/PUT/POST commands ("HTTP Proxy disconnected"). | |
122 | - Add DNSBL snotes on snomask +r. | |
123 | ||
124 | ### config | |
125 | - Add hide_uncommon_channels extension to hide uncommon channel memberships in WHOIS, | |
126 | like in ircd-seven. | |
127 | - Add chm_nonotice extension, cmode +T to reject notices. | |
128 | - Add restrict-unauthenticated extension, prevents unauthenticated users from | |
129 | doing anything as channel operator. | |
130 | - Add no_kill_services extension, prevents local opers from killing services. | |
131 | - Allow matching specific replies of DNSBLs, using the new matches option. | |
132 | - Remove blowfish crypt since it has the BSD advertising clause. | |
133 | - Fix SHA256 ($5$) crypt. | |
134 | - Make the channel::channel_target_change option actually work (it used to be | |
135 | always on). | |
136 | - SSL/TLS listeners now have defer_accept unconditionally enabled on them. | |
137 | - The method used for certificate fingerprints (CertFP) is now configurable. | |
138 | SHA1, SHA256 and SHA512 are available options. | |
139 | - The minimum user threshold for channels in default /list output is now | |
140 | configurable. | |
141 | ||
142 | ### misc | |
143 | - Work around timerfd/signalfd brokenness on OpenVZ. | |
144 | - Fix a compilation issue in libratbox/src/sigio.c with recent glibc. | |
145 | - Extend documentation slightly. | |
146 | - Remove a BSD advertising clause that permission was granted to remove. | |
147 | - Add support for hooking PRIVMSG/NOTICE. | |
148 | - Reenable and fix the GnuTLS support. | |
149 | - Add mbedTLS backend for SSL/TLS. | |
150 | - Remove EGD support. | |
151 | - Try other DNS servers if errors or corrupt replies are encountered. | |
152 | - Rename genssl.sh script to genssl. | |
153 | - Choose more secure SSL/TLS algorithms. | |
154 | - Fix reconnecting with SSL/TLS with some clients such as ChatZilla (see | |
155 | https://bugzilla.mozilla.org/show_bug.cgi?id=858394#c34 for details.) | |
156 | - Improve error messages about the configuration file. | |
157 | - Fix a crash when compiled with recent clang on 32-bit systems. | |
158 | - Fix various memory leaks in rehash. | |
159 | - Fix various code quality issues. | |
160 | - Add --with-shared-sqlite to allow distribution packages to link to a shared | |
161 | sqlite library. Using this is not recommended for on-server compilation. | |
162 | - ISUPPORT tokens which are actually provided by modules have been moved to their | |
163 | respective modules. | |
164 | ||
165 | ## charybdis-3.4.0 | |
166 | ||
167 | ### server protocol | |
168 | - Allow overriding opers (with the new extension) to op themselves on channels. | |
169 | - Allow RSFNC to change a nickname's capitalization only. | |
170 | - Add channel ban forwarding <mask>$<channel> much like ircd-seven. Local use | |
171 | of this is controlled by the channel::use_forward config option. | |
172 | - Add ENCAP TGINFO to propagate IP addresses that exceeded target change | |
173 | limits (these get a lower limit when they reconnect). | |
174 | ||
175 | ### user | |
176 | - Consider bogus CTCP ACTION messages (without action text) CTCP (for | |
177 | cmode +C). | |
178 | - Send ERR_TOOMANYCHANNELS for each channel join that fails due to channel | |
179 | limits. | |
180 | - Add account-notify client capability to notify clients about logins and | |
181 | logouts of users in common channels. See doc/account-notify.txt. | |
182 | - Add extended-join client capability to add account name and ircname to JOIN. | |
183 | - Add topic TS and channel TS constraints for /LIST (T<, T>, C<, C> | |
184 | parameters as in some other servers). | |
185 | - Disallow wildcarded nicknames in "hunted" parameters like /stats and /motd. | |
186 | - Disallow mIRC italics in channel names when disable_fake_channels. | |
187 | - Add AUTHENTICATE EXTERNAL support, allows SASL authentication using a | |
188 | certificate fingerprint. | |
189 | - Allow channel::kick_on_split_riding to protect channels with mlocked keys. | |
190 | - The NICKLEN token in 005 now only specifies the maximum usable nick length. | |
191 | The MAXNICKLEN token specifies the maximum nick length any user can have. | |
192 | - Disallow $ in usernames as this may cause problems with ban forwarding. | |
193 | - Add an error message (numeric 743) if a ban mask is invalid. | |
194 | - Extract the underlying IPv4 address from 6to4 and Teredo IPv6 addresses. | |
195 | Show it in a remote /whois and check channel bans, quiets, D:lines and | |
196 | K:lines against it. Note that ban exceptions and auth{} blocks are not | |
197 | checked. | |
198 | - Allow normal users to perform /privs on themselves, showing some privileges | |
199 | from the auth{} block. | |
200 | - Add away-notify client capability, see doc/away-notify.txt. | |
201 | - Add rate limit for high-bandwidth commands, in particular /who <channel>. | |
202 | - Rate limit /away to help avoid flooding via away-notify. | |
203 | - Apply colour stripping (cmode +c) and CTCP checking (cmode +C) to messages | |
204 | to @/+ channel as well. | |
205 | - Channel mode +c (and other places that disallow colour codes) now also strip | |
206 | ASCII 4 (a different kind of colour code). | |
207 | ||
208 | ### oper | |
209 | - Add operspy for /list. | |
210 | - Add a server notice to snomask +b if a user exceeds target change limits. | |
211 | - Add missing server notice for kills from RSFNC and SVSLOGIN. | |
212 | - Add /stats C to show information about dynamically loaded server | |
213 | capabilities. | |
214 | ||
215 | ### config | |
216 | - Add support for linking using SSL certificate fingerprints as the link | |
217 | credential rather than the traditional password pair. | |
218 | - Add m_roleplay extension, provides various roleplay commands. | |
219 | - Add override extension, umode +p oper override for opers with oper:override | |
220 | permission, with accountability notices and timeout. Note that opers cannot | |
221 | op themselves if there are older servers on the network. | |
222 | - Add channel::disable_local_channels config option. | |
223 | - Add support for IPv6 DNSBLs. A new "type" option specifies the IP version(s) | |
224 | for which each DNSBL should be checked. | |
225 | - Make flood control settings configurable by those who know exactly what they | |
226 | are doing. | |
227 | - Add serverinfo::nicklen config option to limit the nick length for local | |
228 | users. Different values of this option do not break the server protocol. | |
229 | - Add extb_usermode extension, $m:+-<modes> extban matching against umodes. | |
230 | - Extend extb_oper extension to allow matching against oper privileges. | |
231 | - Add m_remove extension, /remove command as in ircd-seven. | |
232 | - Add general::away_interval to allow configuring /away rate limiting. | |
233 | - Add listener::defer_accept to delay accepting a connection until the client | |
234 | sends data. This depends on kernel support. It may break BOPM checking. | |
235 | ||
236 | ### misc | |
237 | - In mkpasswd, default to SHA512-based crypt instead of MD5-based crypt. | |
238 | - Add --with-custom-branding and --with-custom-version configure options to | |
239 | help forks/patchsets distinguish themselves. | |
240 | - Change version control from Mercurial to GIT. | |
241 | - Ensure SIGHUP and SIGINT keep working after a SIGINT restart. | |
242 | - Add --enable-fhs-paths configure option to allow installing into a more | |
243 | FHS-like hierarchy. | |
244 | - Remove broken GnuTLS support. SSL/TLS is now only provided using OpenSSL. | |
245 | ||
246 | ## charybdis-3.3.0 | |
247 | ||
248 | ### server protocol | |
249 | - Add new BAN command, for propagated network-wide bans (K/X:lines and RESVs). | |
250 | These will burst to new servers as they are introduced, and will stay in sync | |
251 | across the whole network (new BAN capab). | |
252 | - Add new MLOCK command, to implement ircd-side channel mode locks. This allows | |
253 | services to send out a list of mode letters for a given channel which may not | |
254 | be changed, preventing mode fights between services and client bots (new MLOCK | |
255 | capab). | |
256 | ||
257 | ### user | |
258 | - New RPL_QUIETLIST(728) and RPL_ENDOFQUIETLIST(729) numerics are used for the | |
259 | quiet (+q) list, instead of overloading the ban list numerics. | |
260 | - Users may no longer change the topic of a -t channel if they cannot send to | |
261 | it. | |
262 | - Add help for EXTBAN, describing the syntax of extended bans in general, as | |
263 | well as the most common types. | |
264 | - Changed AWAY messages are now propagated to other servers. Previously, AWAY | |
265 | was only propagated when the user was not already away. | |
266 | - Channel mode +c (and other places that disallow colour codes) now also strip | |
267 | ASCII 29 (mIRC 7 italics). | |
268 | - Add auto-accept for user mode +g (callerid): Messaging a user while set +g | |
269 | will automatically add them to your accept list. | |
270 | - Add target change for channels. It applies to unopped, unvoiced and unopered | |
271 | users. This has the effect of stopping spambots which join, message and part | |
272 | many channels at a time. | |
273 | - Show RPL_WHOISLOGGEDIN in /whowas as well as in /whois entries. This adds at | |
274 | most an additional 0.5MB of memory usage. | |
275 | ### config | |
276 | - Add general::use_propagated_bans to switch the new BAN system on or off. | |
277 | - Add general::default_ident_timeout, to control the timeout for identd (auth) | |
278 | connections. | |
279 | - Add channel::channel_target_change to switch the new channel target change limits | |
280 | on or off. | |
281 | - Fix class::number_per_ident so that it also applies to connections without | |
282 | identd. | |
283 | - Change the example sslport option to 6697, which is more standard than 9999. | |
284 | ### misc | |
285 | - The custom channel mode API has been rewritten, allowing these modules to work | |
286 | correctly when reloaded, or loaded from the config file. | |
287 | - The EFNet RBL is now recommended, instead of DroneBL. | |
288 | - Remove the unsupported modules directory. | |
289 | - Numerous bug fixes and code cleanups. | |
290 | - In mkpasswd, default to MD5 crypt instead of insecure DES. | |
291 | ||
292 | ## charybdis-3.2.0 | |
293 | ||
294 | ### server protocol | |
295 | - Apply +z to messages blocked by +b and +q as well. (new EOPMOD capab) | |
296 | - Add new topic command ETB, allowing services to set topic+setter+ts always. | |
297 | (new EOPMOD capab) | |
298 | - The slash ('/') character is now allowed in spoofs. | |
299 | ||
300 | ### user | |
301 | - Add can_kick hook, based on the ircd-seven one. | |
302 | - Add cmode +C (no CTCP) from ircd-seven. | |
303 | - Flood checking has been reworked. | |
304 | - Fix op-moderate (cmode +z) for channel names with '@'. | |
305 | - Add CERTFP support, allowing users to connect with an SSL client | |
306 | certificate and propagating the certificate fingerprint to other servers. | |
307 | Services packages can use this to identify users based on client | |
308 | certificates. | |
309 | - Maintain the list of recently used targets (for the target change | |
310 | anti-spam system) in most-recently-used order, overwriting the least | |
311 | recently used target with a new one. This should be friendlier to users | |
312 | without giving spambots anything. | |
313 | - Do not require target change slots for replying to the last five users to | |
314 | send a private message, notice or invite. | |
315 | - Apply target change restrictions to /invite. | |
316 | - Apply umode +g/+R restrictions to /invite, with the difference that | |
317 | instead of sending "<user> is messaging you" the invite is let through | |
318 | since that is just as noisy. | |
319 | ||
320 | ### oper | |
321 | - Add /rehash throttles to clear throttling. | |
322 | - Send all server notices resulting from a remote /rehash to the oper. | |
323 | - '\s' for space is now part of the matching, not a substitution at xline | |
324 | time, fixing various issues with it. | |
325 | - Display o:line "nickname" in oper-up server notices. | |
326 | - Fix sendq exceeded snotes for servers. | |
327 | - SCAN UMODES: default list-max to 500, like a global WHO. | |
328 | - Ignore directory names in MODRELOAD to avoid crashing if it is a core | |
329 | module and the path is incorrect. | |
330 | - Tweaks to spambot checks. | |
331 | ||
332 | ### config | |
333 | - Add channel::only_ascii_channels config option to restrict channel names | |
334 | to printable ascii only. | |
335 | - Add channel::resv_forcepart, forcibly parts local users on channel RESV, | |
336 | default enabled. | |
337 | ||
338 | ### misc | |
339 | - New mkpasswd from ircd-ratbox. | |
340 | - Check more system calls for errors and handle the errors. | |
341 | - Various ssld/libratbox bugfixes from ircd-ratbox. [some MERGED] | |
342 | - Fix fd passing on FreeBSD/amd64 and possibly Solaris/sparc. [MERGED] | |
343 | - Various documentation improvements. [some MERGED] | |
344 | - Fix some crash issues. [MERGED] | |
345 | - Add bandb from ircd-ratbox, which stores permanent dlines/klines/xlines/resvs | |
346 | in an sqlite database instead of a flatfile and does the storage in a | |
347 | helper process. Use bin/bantool -i to import your old bans into the | |
348 | database. | |
349 | ||
350 | ## charybdis-3.1.0 | |
351 | ||
352 | - Remove TS5 support. No TS5 servers are permitted in a network with | |
353 | charybdis 3.1.0 or newer, except jupes. | |
354 | - Replace oper flags by privilege sets (privsets). This adds an extra | |
355 | level of indirection between oper flags and operator blocks. /stats O | |
356 | (capital O) shows the configured privsets. | |
357 | - Update libratbox and ssld from upstream and use it better. | |
358 | - Add auth_user to auth{}. This allows specifying a username:password instead | |
359 | of just a password in PASS, so that a fixed user@host is not necessary | |
360 | for a specific auth{} block. | |
361 | - Add need_ssl to auth{} and operator{}. This makes these blocks reject | |
362 | the user if not connected via SSL. | |
363 | - Allow modules to provide simple channel modes without parameter. | |
364 | - Remove restrictions on CNAME in the resolver. | |
365 | - Make the resolver remember nonresponsive nameservers. | |
366 | - Move nick collision notices from +s to +k. | |
367 | - Add additional information to various server notices about server | |
368 | connections. | |
369 | - Show throttle information in /stats t. | |
370 | - Show rejectcache and throttle information in /testline. | |
371 | - Show oper reason in /testline. | |
372 | - Allow opers to see other users' umodes with /mode <nick>. | |
373 | - SCAN UMODES GLOBAL NO-LIST MASK <mask> is no longer an operspy command. | |
374 | - Also apply floodcount to messages to remote clients (except services). | |
375 | - Remove user@server messages to local users. Sending such messages to | |
376 | remote servers is still possible, for securely messaging pseudoservers | |
377 | whether service{}'ed or not. The special oper-only syntax opers@server | |
378 | remains as well. | |
379 | - Allow /list on a named +p channel. A full /list already included +p channels. | |
380 | - Add operspy /topic. | |
381 | - For remote rehashes, send error messages to the requesting oper as well. | |
382 | - Disable autoconnect for a server with excessive TS delta. | |
383 | - Disallow invites to juped channels. | |
384 | - Warn about certain duplicate and redundant auth blocks. | |
385 | - Make PRIVMSG/NOTICE behave as CPRIVMSG/CNOTICE automatically if possible. | |
386 | - Allow +z messages from outside if a channel is -n. | |
387 | - Allow coloured part reasons in -c channels. | |
388 | - Add ircu-like WHOX support. This allows requesting specific information | |
389 | in /who and allows obtaining services login name for all users in a | |
390 | channel. XChat/Conspire use WHOX to update away status more efficiently. | |
391 | - Allow opers and shide_exempt users to see hopcounts even if flatten_links | |
392 | is on. | |
393 | - Rework ip_cloaking. | |
394 | - Add the IP address to userlog, as in ircd-ratbox 3.0. | |
395 | - Split cidr_bitlen into cidr_ipv4_bitlen and cidr_ipv6_bitlen. | |
396 | - Allow using ziplinks with SSL connections. This is not as efficient as | |
397 | using OpenSSL's built in compression, but also works with older versions | |
398 | of OpenSSL. | |
399 | - Fix an off by one error with zipstats processing, which could overwrite | |
400 | a variable with NULL causing a crash on some systems. | |
401 | - Document some extensions in charybdis-oper-guide. | |
402 | - Add more server protocol documentation. | |
403 | - Add m_sendbans extension, SENDBANS command to propagate xlines and resvs | |
404 | manually. | |
405 | - Add chm_sslonly extension, cmode +S for SSL/TLS only channels. | |
406 | - Add chm_operonly extension, cmode +O for IRCop only channels. | |
407 | - Add chm_adminonly extension, cmode +A for server admin only channels. | |
408 | - Various code cleanups. | |
409 | ||
410 | ## charybdis-3.0.4 | |
411 | ||
412 | - Fix a crash on certain recent versions of Ubuntu. | |
413 | - Allow 127.x.y.z for DNSBL replies instead of just 127.0.0.x. | |
414 | - Various documentation improvements. | |
415 | ||
416 | ## charybdis-3.0.3 | |
417 | ||
418 | - Fix IPv6 D:lines | |
419 | - Fix rejectcache and unknown_count. | |
420 | - Fix genssl.sh. | |
421 | - Fix ident for SSL/TLS connections. | |
422 | - Fix SSL/TLS bugs for servers with more than about 100 connections. | |
423 | - Small bugfixes. | |
424 | ||
425 | ## charybdis-3.0.2 | |
426 | ||
427 | - Improve OLIST extension error messages. | |
428 | - Improve some kline error checking. | |
429 | - Avoid timing out clients if we are still waiting for a DNSBL lookup. | |
430 | - Fix resolver hangs with epoll. | |
431 | - Fix compilation without zlib. | |
432 | ||
433 | ## charybdis-3.0.1 | |
434 | ||
435 | - Fix occasional hung clients with kqueue. | |
436 | - Fix a rare ssld crash. | |
437 | - Fix a bug that could cause incorrect connect failure reasons to be | |
438 | reported. | |
439 | - Make the IRCd work on MacOS X again. | |
440 | ||
441 | ## charybdis-3.0.0 | |
442 | ||
443 | - Port the IRCd to libratbox, which has improved our portability and allows | |
444 | us to reuse low-level code instead of maintaining our own. | |
445 | - Change configuration of maximum number of clients to ircd-ratbox 3 way. | |
446 | - Add adminwall from ircd-ratbox, as an extension. | |
447 | - Add client and server-to-server SSL, read example.conf for setup. | |
448 | - Replace servlink with ssld (also for ziplinks). | |
449 | - A new extban, $z, has been added for ssl users (extensions/extb_ssl.so). | |
450 | - A new compatibility channel mode, +R, has been added, it sets | |
451 | +q/-q $~a (extensions/chm_operonly_compat.so). This is similar to | |
452 | the +R seen in ircd-seven. | |
453 | - A new compatibility channel mode, +S, has been added, it sets | |
454 | +b/-b $~z (extensions/chm_sslonly_compat.so). | |
455 | - A new compatibility channel mode, +O, has been added, it sets | |
456 | +iI/-iI $o (extensions/chm_operonly_compat.so). | |
457 | - Add remote D:lines. Note that these are not enabled by default. | |
458 | - Remove EFnet-style G:lines. Noone appears to use these. | |
459 | - Remove idle time checking (auto disconnecting users idle too long). | |
460 | - Display a notice to clients when the IRCd is shut down using SIGTERM. | |
461 | - Some error messages have been clarified to enhance usability. | |
462 | - Close the link to servers that send invalid nicks (e.g. nicklen mismatches). | |
463 | Formerly the users were killed from the network. | |
464 | - Enable topicburst by default in connect{}. | |
465 | - Fix a potential desync which can happen with oper override. | |
466 | - Remove "deopped" flag (TS5 legacy). | |
467 | - Use 127.0.0.1 as nameserver if none can be found in /etc/resolv.conf. | |
468 | - Only accept 127.0.0.x as a dnsbl listing. | |
469 | - Change cloaking module (same as 2.2.1, different from 2.2.0). | |
470 | - Make some more server notices about failed remote connect attempts | |
471 | network wide. | |
472 | - Make some server notices about flooders and TS delta network wide. | |
473 | - Remove redundant "<server> had been connected for <time>" server notice. | |
474 | - Add resv oper privilege to control /resv, /unresv and cmode +L and +P, | |
475 | enabled by default. | |
476 | - Add mass_notice oper privilege to control global notices and /wallops, | |
477 | enabled by default. | |
478 | - Rework unkline/undline/unxline/unresv so they show the exact item removed | |
479 | and do not rehash bans. | |
480 | - Show opers a list of recently (<24hrs) split servers in /map. | |
481 | - Add /privs command, shows effective privileges of a client. | |
482 | ||
483 | ## charybdis-2.2.0 | |
484 | ||
485 | - The I/O code has been reworked, file descriptor metadata is stored in a | |
486 | hashtable and the maximum number of clients can now be set in ircd.conf. | |
487 | - Improve error checking and error messages for kline/dline/xline/resv files. | |
488 | - Allow kline ipv6:address, unkline some.host and unkline ipv6:address | |
489 | without *@. | |
490 | - Add accountability (wallops, log) to OKICK extension. | |
491 | - Add opernick to OPME/OMODE/OJOIN log messages. | |
492 | - Add use_forward option, allows disabling cmode +fFQ and umode +Q. | |
493 | - Add keyword substitution to DNSBL reasons, making it possible to show | |
494 | things like the user's IP address in the reason. | |
495 | - Use sendto_one_notice() more. | |
496 | - Server notices about kills now include the victim's nick!user@host instead | |
497 | of just nick. | |
498 | - Include real hostname in Closing Link message for unknown connections | |
499 | that have sent USER, in particular banned users. | |
500 | - Add some documentation about the SASL client protocol. | |
501 | - Change spambot, flooder and jupe joiner notices from host to orighost. | |
502 | - Remove the last remains of server hostmasking (this made it possible to | |
503 | have multiple servers with similar names appear as a single server). | |
504 | - Keep bitmasks of modularized umodes reserved forever to the letter, | |
505 | avoiding problems when reloading umode modules in a different order. | |
506 | - Fix -logfile. | |
507 | - Update to the new revision (v8) of the TS6 spec, this fixes problems with | |
508 | joins reversing certain mode changes crossing them. This interoperates | |
509 | with older versions. | |
510 | - Put "End of Channel Quiet List" at the end of +q lists. | |
511 | - Fix invisible count getting desynched from reality if the act of opering | |
512 | up sets -i or +i. | |
513 | - Don't leak auth{} spoofed IP addresses in +f notices. | |
514 | - Shorten quit/part/kick reasons to avoid quit reasons overflowing the | |
515 | client exiting server notice (from TOPICLEN to 260). | |
516 | - Fix some cases where 10 char usernames lose their final character. | |
517 | - Move username check after xline and dnsbl checks, so it will not complain | |
518 | to opers about clients who are xlined or blacklisted anyway (both of | |
519 | which silently reject). | |
520 | - Remove invite_ops_only config option, forcing it to YES. | |
521 | - Allow /invite (but not invex) to override +r, +l, +j in addition to +i. | |
522 | - Add several new extensions, such as createoperonly. | |
523 | - Merge whois notice extensions into one and move it from snomask +y to +W. | |
524 | ||
525 | ## charybdis-2.1.2 | |
526 | ||
527 | - Fix bug that could cause all hostmangled users to be exempted when a | |
528 | single ban exception existed on a channel. | |
529 | - Tweak \s code a little. | |
530 | - Add a minor clarification to the SGML docs. | |
531 | - Avoid truncation in ip_cloaking (by removing components on the other side). | |
532 | Note that this may cause channel +bqeI modes set on such very long hosts | |
533 | to no longer match. | |
534 | ||
535 | ## charybdis-2.1.1 | |
536 | ||
537 | - Search the shortest list (user's/channel's) when looking up channel | |
538 | memberships. | |
539 | - Make the SID-collision notice look right under all conditions. | |
540 | - Move kills from services from +s to +k snomask. | |
541 | - When no_tilde is present on an auth{} block, check the non-tilde version | |
542 | of the user@host against k:lines as well. | |
543 | - Put full reason in the SQUIT reason when a server is rejected for | |
544 | insufficient parameters being passed to a command. | |
545 | - Don't redirect users to an existing domain, irc.fi. | |
546 | - Improve communication of servlink-related error messages. | |
547 | ||
548 | ## charybdis-2.1.0 | |
549 | ||
550 | - Our official website is now http://www.ircd-charybdis.org/. | |
551 | - Make RPL_ISUPPORT (005 numeric) modularizable. | |
552 | - Also do forwarding if the channel limit (+l) is exceeded. | |
553 | - Don't count opers on service{} servers in /lusers. | |
554 | - Allow servers to send to @#chan and +#chan. | |
555 | - Allow +S clients (services) to send to channels and @/+ channels always. | |
556 | - Allow normal match() on IP address also in /masktrace. | |
557 | - Add new testmask from ratbox 2.2. Allows matches on nick, ip and gecos | |
558 | in addition to user and host, and is fully analogous to masktrace. | |
559 | The numeric has changed from 724 to 727 and fields in it have changed. | |
560 | - Show IP addresses to opers in /whowas. | |
561 | - Add extb_extgecos extban option ($x:nick!user@host#gecos), from sorcery | |
562 | modules. | |
563 | - Add extb_canjoin extban option ($j:#channel), matches if the user is banned | |
564 | from the other channel. | |
565 | - Allow opers to /who based on realhost. | |
566 | - Allow opers to /masktrace, /testmask based on realhost. | |
567 | - Add general::operspy_dont_care_user_info, limits operspy accountability to | |
568 | channel-related information. | |
569 | - Make host mangling more reliable. | |
570 | - Prevent ban evasion by enabling/disabling host mangling. | |
571 | - Add EUID, sends real host and services account in the same command as other | |
572 | user information. | |
573 | - Make it possible to send CHGHOST without ENCAP (fixes problems with old | |
574 | services). | |
575 | - Allow service{} servers to manipulate the nick delay table (for "nickserv | |
576 | enforcement", aka SVSHOLD). | |
577 | - Send server notices about connections initiated by remote opers network wide. | |
578 | - Fix too early truncation of JOIN channel list. | |
579 | - Make the newconf system available to modules. | |
580 | - Add /stats s to the hurt module to list active hurts. | |
581 | - Add general::servicestring, shown in /whois for opered services (+oS). | |
582 | - Show real host/IP behind dynamic spoof in /whois to the user themselves | |
583 | and opers. | |
584 | - Document option to disable nick delay. | |
585 | - Improve logging of server connections. | |
586 | - Clean up handling of hostnames in connect blocks. | |
587 | - Remove support for resolving ip6.int, people should be using ip6.arpa. | |
588 | - Unbreak --disable-balloc (useful for debugging with tools like valgrind). | |
589 | - Make Solaris 10 I/O ports code compile. | |
590 | - Add WEBIRC module to allow showing the real host/IP of CGI:IRC users. | |
591 | - Comment out blacklist{} block in example confs, as AHBL requires | |
592 | notification before use. | |
593 | - Fix some bugs relating to the resolver. | |
594 | ||
595 | ## charybdis-2.0.0 | |
596 | ||
597 | - Replace ADNS with a new smaller resolver from ircu and hybrid. | |
598 | - Make services shortcuts (/chanserv etc) configurable in ircd.conf. | |
599 | - Add extban: extensible +bqeI matching via modules. Syntax is | |
600 | $<type>[:<data>]. By default no modules are loaded. | |
601 | - Add DNS blacklist checking. | |
602 | - Change operator{} block user@host from host to orighost. This means that | |
603 | services/+h spoofs do not work in operator{} blocks; auth{} spoofs still | |
604 | work. Check your operator{} blocks! | |
605 | - Split contrib/ into extensions/ and unsupported/. | |
606 | - Change CHGHOST do show the change to all other clients on common channels | |
607 | with quit/join/mode. | |
608 | - Add /rehash nickdelay to clear out the nickdelay tables. | |
609 | - Glines are now disabled in the example confs. | |
610 | - Show more error messages on stderr. | |
611 | - Add OMODE command to extensions/ for easier oper mode hacking. | |
612 | - Add HURT system to extensions/; this shuns clients matching certain host/ip | |
613 | unless and until they identify to services. Mainly intended for SorceryNet. | |
614 | - Show SASL success and failure counts in /stats t. | |
615 | - Allow more frequent autoconnects to servers. | |
616 | - Messaging services by nickname no longer uses target change slots. | |
617 | - Only accept SASL from servers in a service{} block. | |
618 | - New auth{} flag need_sasl to reject users who haven't done SASL | |
619 | authentication. | |
620 | - Expand blah.blah and blah:blah to *!*@... instead of ...!*@* for bans | |
621 | - Don't allow opers to fake locops/operwall to +w. | |
622 | - Documentation updates. | |
623 | - Many bugfixes. | |
624 | ||
625 | ## charybdis-1.1.0 | |
626 | ||
627 | - Implement SAFELIST. | |
628 | - Incorporate ircu's match() algorithm. | |
629 | - Improve usermode modularization. | |
630 | - Seperate server notices into a seperate snomask, freeing up many | |
631 | usermodes to be used. | |
632 | - Add support for SIGNON originating from Hyperion2. | |
633 | - Modularize many server notices into seperate modules. | |
634 | - Add hooks for can_join and can_create_channel. | |
635 | - Add support for SASL authentication. | |
636 | - Add introduce_user hook for adding new messages when a user is bursted. | |
637 | - Move a large part of the ircd into libcharybdis. | |
638 | - Don't complain "unknown user mode" if a user tries to unset | |
639 | a mode they do not have access to. | |
640 | - Update our challenge specification to the challenge implementation in | |
641 | ratbox 2.2 for interoperability. | |
642 | - Make +f notices network-wide (local host, global host, | |
643 | global user@host, local class), other notices tied to +f remain local. | |
644 | - Allow ENCAP REALHOST outside of netburst. | |
645 | - Add general::global_snotices option to make server notices be | |
646 | network-wide or not. | |
647 | - Add sno_farconnect.c to contrib, provides farconnect support. | |
648 | Could be useful for BOPM. | |
649 | - Add sno_routing.c which displays information about netsplits, netjoins | |
650 | and the clients affected by them. | |
651 | - Add CHANTRACE and TRACEMASK commands from ratbox 3.0 | |
652 | - Use IsOperAdmin() instead of IsAdmin() when sending admin-only messages, | |
653 | that way hidden admins get them too. | |
654 | - Add m_error to core_module_table, somehow it was missing. | |
655 | - Correct a format string bug that occurs when a read error is | |
656 | received. | |
657 | - Add some logging in places where we drop servers and only notify | |
658 | server operators. | |
659 | - Track hostmask limits based on a client's original host, if | |
660 | available. | |
661 | - Move HIDE_SPOOF_IPS into the general {} block in ircd.conf | |
662 | ||
663 | ## charybdis-1.0.3 | |
664 | ||
665 | - Fix /invite UID leak. (Found by logiclrd@EFnet.) | |
666 | - Incorporate ratbox bugfixes for the MONITOR system. | |
667 | - Made show_ip() less braindead. | |
668 | - Show real errno if we fail to connect to a server. | |
669 | - Don't disclose server IP's when a connection fails. | |
670 | - Do not show the channels a service is sitting in. | |
671 | - Reverted the aline code from hybrid-7.2 | |
672 | - Make sure TS6 services are recognized properly if connected remotely. | |
673 | - Tweak something in services support for cyrix boxes. | |
674 | ||
675 | ## charybdis-1.0.2 | |
676 | ||
677 | - Fix propagation of an empty SJOIN (permanant channels). | |
678 | - Fix an exploit involving a malformed /trace request. | |
679 | - Don't display a blank RPL_WHOISCHANNELS in a remote whois request. | |
680 | - Allow modules to provide new usermodes. | |
681 | - On a nickname collision, change the collided nick to their unique ID, | |
682 | if general::collision_fnc is enabled in the config. | |
683 | - Don't allow UID lookups in /monitor + and /monitor s | |
684 | - Fix a garbage issue with channel mode +j. | |
685 | - Apply proper capability flags to the proper server in me_gcap(). | |
686 | - Use find_named_person() instead of find_person() in a nick collision. | |
687 | - Prevent UID disclosure in cmode setting. | |
688 | - Prevent UID disclosure to remote clients in /kick. | |
689 | - Do not allow users to query via /whois <server> <UID>. | |
690 | - Don't allow local users to use UID's in local usermode changes. | |
691 | - Propagate +q lists on netjunction. | |
692 | - Clear +q lists on a lowerTS SJOIN. | |
693 | - Ported a generic k/d/x-line parser from hybrid-7.2 which resulted in | |
694 | duplicate code reduction. | |
695 | - Fix linebuf raw code to not truncate lines longer than 512 bytes; | |
696 | improves ziplink reliability on net junction. | |
697 | - Use find_named_person() vs find_person() in services alias code. | |
698 | - Fix issue where channel forwarding token can be lost on net junction. | |
699 | - Fix empty channel desync issues involving +P. | |
700 | - Remove unused non-ENCAP CHGHOST support. | |
701 | - Use TS6 form for SQUIT wallops. | |
702 | - Propagate nickname changes for remote clients in TS6 form if possible, | |
703 | even if sent in TS5 format. | |
704 | - Only clear oper_only_umodes for local clients on deoper. | |
705 | ||
706 | ## charybdis-1.0.1 | |
707 | ||
708 | - Display logged in status on non-local clients too. | |
709 | - Documentation updates | |
710 | - Fix a bug with forward target authorization. | |
711 | - Fix a bug with mode propagation (+Q/+F). | |
712 | - Change ERR_NOSUCHNICK to ERR_SERVICESOFFLINE in services aliases. | |
713 | - Add remote rehashing. | |
714 | - Document service { } blocks (u:lines on ircu). | |
715 | - Document identify_service and identify_command in reference.conf. | |
716 | ||
717 | ## charybdis-1.0 | |
718 | ||
719 | - Implement channel mode +L for channel list limit exemptions. | |
720 | - Implement channel mode +P primarily as a status mode, permanant | |
721 | channel -- this is usually enforced via services registrations. | |
722 | - Change behaviour of /stats p: now displays all staff members instead | |
723 | of local ones only. | |
724 | - Make oper_list global, add local_oper_list for local traffic. | |
725 | - Strip control codes from parts and quits. | |
726 | - Add channel mode +c which strips control codes from messages sent to | |
727 | the channel. | |
728 | - Add channel mode +g which enables free use of the /invite command. | |
729 | - Add channel mode +z which sends rejected messages to channel ops. | |
730 | Could be useful for Q&A sessions or other similar events. | |
731 | - Add channel quietmasks. These are recommended over the use of channel | |
732 | bans used to remove a user's ability to participate in the channel. | |
733 | - Add channel join throttling mode, +j. Used to throttle channel join | |
734 | traffic, i.e. join/part flood attacks. Syntax: +j <joins>:<timeslice> | |
735 | - Improvements to channel_modes(), from shadowircd -- allows for | |
736 | better construction of the mode string. | |
737 | - Use the undernet throttle notice instead of bancache message when | |
738 | dealing with rejected clients. (stolen from ircu2.10.12) | |
739 | - Add channel forwarding, via channel mode +f, behaves similarly to | |
740 | dancer-ircd version. | |
741 | - Update example.conf to reflect AthemeNET changes. Original ratbox | |
742 | config is now reference.conf. | |
743 | - Services account names are now tracked globally. | |
744 | - Add channel mode +Q which disables the effects of channel forwarding | |
745 | on a temporary basis. | |
746 | - Add channel mode +F which allows anybody to disable forwarding target | |
747 | authorisation, voluntarily on their channels. | |
748 | - Make wallops behave like normal wallops. | |
749 | - Add services aliases: /ns, /cs, /os, /nickserv, /chanserv, /operserv. | |
750 | - Add simple hack that enables use of server password for automatic | |
751 | identify. |