|
|
c231c6b8ef
|
connclass: verify a KDF class password off the core thread with a registration hold (auth_pending + Event::ConnclassAuth) — connect floods can't freeze the server
|
2026-08-12 13:13:27 +00:00 |
|
|
|
7cb58586b4
|
core: generic spawn_crypto helper; offload all slow KDF hashing (OPER pbkdf2 too, and MKPASSWD) off the core thread
|
2026-08-12 13:05:29 +00:00 |
|
|
|
e246699fef
|
oper: verify bcrypt passwords on a worker thread (Event::OperAuth), bounded — a bcrypt OPER no longer freezes the core, closing the OPER-spam DoS; fast hashes stay inline
|
2026-08-12 12:46:52 +00:00 |
|
|
|
749a1c3b69
|
customprefix: config-override channel-prefix sigils per tier (customprefix = <tier> <sigil>); PREFIX/NAMES/FJOIN consistent
|
2026-08-11 19:01:45 +00:00 |
|
|
|
3b43abc88a
|
operlevels: oper = <name> <pass> <level>; a lower-level oper can't KILL a higher-level one
|
2026-08-11 18:50:12 +00:00 |
|
|
|
72ca89af26
|
log_json: append the server-notice/log stream to a file as JSONL (log_json = <path>)
|
2026-08-11 18:44:48 +00:00 |
|
|
|
5ea543188d
|
syslog: tee the server-notice/log stream to syslog (native /dev/log unix datagram or udp host:port)
|
2026-08-11 11:21:09 +00:00 |
|
|
|
f371ed0a18
|
connclass: cidr/parent/port/limit/globalmax + hashed/trusted-cert passwords, per-class recvq/sendq + fakelag, and rfc1413 ident
|
2026-08-10 18:46:42 +00:00 |
|
|
|
f5f888dbaa
|
connectclass: per-class connection policy (allow/deny, localmax, password, maxchans, pingfreq, timeout, modes) + PASS
|
2026-08-10 17:49:12 +00:00 |
|
|
|
1dd7f77ca8
|
operprefix + ojoin: server oper prefix (!/mode y, above owner) auto-granted to opers + OJOIN command
|
2026-08-10 13:01:07 +00:00 |
|
|
|
06883ced9f
|
extbanbanlist: matching extban b:#chan (share another channel's ban list)
|
2026-08-10 09:37:51 +00:00 |
|
|
|
9d84a66437
|
autoop: +w <prefix>:<mask> channel list mode grants status on join
|
2026-08-10 08:18:07 +00:00 |
|
|
|
87e3d5436d
|
chanlog: mirror the oper server-notice stream into a configured channel
|
2026-08-09 23:19:29 +00:00 |
|
|
|
61954f6c5c
|
conn_waitpong: optionally require a PONG cookie before registration (anti-bot)
|
2026-08-09 23:04:14 +00:00 |
|
|
|
61584a545b
|
config: make flood/dnsbl/multiline/chathistory/extjwt limits + nick/chan/watch/monitor/silence/whowas/timeouts configurable (no hardcoded options)
|
2026-08-09 22:52:39 +00:00 |
|
|
|
7a99f49ca4
|
geoip: native maxmind .mmdb reader, G: geoban extban, GEOIP command, whois country
|
2026-08-09 21:43:57 +00:00 |
|
|
|
bda7eecfc2
|
modules: port ircv3_extended_isupport (draft/extended-isupport cap + ISUPPORT command, draft/isupport batch)
|
2026-08-09 19:52:52 +00:00 |
|
|
|
97b0d8ad89
|
server: route announce through the same tagged path as snotice — REHASH notices now carry server-time + draft/json-log + hit the log ring
|
2026-08-09 17:46:26 +00:00 |
|
|
|
100e33c76b
|
modules: port jsonlog (draft/json-log cap) — structured JSON tag on snotices for capable opers
|
2026-08-09 17:10:20 +00:00 |
|
|
|
06afd1e59d
|
rpc: implement the deferred methods — channel.set_mode, server.connect, log.tail/log.events (in-memory log ring)
|
2026-08-09 16:36:34 +00:00 |
|
|
|
89f508aca9
|
rpc: add server/stats/ban/message/whowas/spamfilter providers; fix REHASH to reload raw_config
|
2026-08-09 16:07:53 +00:00 |
|
|
|
b0d767a809
|
modules: port account_registration (REGISTER/VERIFY over async HTTP API) + async http infra
|
2026-08-09 11:48:17 +00:00 |
|
|
|
a48b48e46f
|
modules: port antirandom, restrictcommands, restrictmsg, blockamsg, connectban
|
2026-08-09 11:27:52 +00:00 |
|
|
|
131471e245
|
modules: move all per-module state/config out of server.rs/config.rs into own files
|
2026-08-09 11:18:04 +00:00 |
|
|
|
0d4c9297b5
|
port whoisport, ircv3_network_icon, profileLink, hidewhois (all config-driven)
|
2026-08-09 08:33:56 +00:00 |
|
|
|
f6fbff5270
|
reputation: full parity port — CIDR ipv4/ipv6 masking, reputationexpire decay rules, whois visibility modes, config-driven db/bump/expire/save/minchanmembers/scorecap (no hardcoding)
|
2026-08-09 08:28:38 +00:00 |
|
|
|
eb121a75f8
|
reputation: full port — y: score extban (y:<N/y:>N), WHOIS score, +2 for accounts, bump interval/scorecap/minchanmembers config; conn_join/conn_umodes/connbanner/operjoin/opermodes/seenicks/chancreate
|
2026-08-09 08:19:32 +00:00 |
|
|
|
64dcbd8bf4
|
securitygroups: UnrealIRCd-style groups + g: extban + SECURITYGROUPS + WHOIS
|
2026-08-09 08:08:06 +00:00 |
|
|
|
97a35338fa
|
delayjoin +D: hide JOINs until a member speaks/reveals (NAMES + part/quit/nick aware)
|
2026-08-09 07:40:10 +00:00 |
|
|
|
f022ea5a42
|
hostcycle: PART+JOIN non-chghost clients on host change (prefixes restored)
|
2026-08-09 01:30:25 +00:00 |
|
|
|
d4ce5c008f
|
connflood: refuse connection floods from a single IP
|
2026-08-09 01:28:09 +00:00 |
|
|
|
f4c01e1bf8
|
OPERMOTD, self-service VHOST, and command aliases (config-driven)
|
2026-08-09 01:19:24 +00:00 |
|
|
|
8dc51a281b
|
channel modes +Q nokicks / +A allowinvite / +P permchannels; fix SWHOIS (full multi-word text, no doubled nick in WHOIS)
|
2026-08-09 00:47:10 +00:00 |
|
|
|
431ef2f5b3
|
move chathistory + redact + the history store into their own module file
|
2026-08-08 22:54:52 +00:00 |
|
|
|
ab7188bb70
|
move draft/multiline into its own module file
|
2026-08-08 22:49:54 +00:00 |
|
|
|
768435d810
|
move markread into its own module file
|
2026-08-08 22:47:10 +00:00 |
|
|
|
50a95c6686
|
move metadata out of core into its own module file
|
2026-08-08 22:44:58 +00:00 |
|
|
|
ee98fade40
|
filter (m_filter) as a self-contained module: Server.ext typemap for module state + module_commands() wiring; FILTER command + on_pre_message hook all in modules/filter.rs
|
2026-08-08 22:34:56 +00:00 |
|
|
|
d4c4c1a7d0
|
draft/multiline: inbound BATCH parsing + concat assembly, deliver assembled lines; advertise limits
|
2026-08-08 22:07:04 +00:00 |
|
|
|
5a34ec57da
|
draft/metadata-2: client METADATA get/list/set/clear on users+channels (op-gated), change notices, metadata batch
|
2026-08-08 22:00:46 +00:00 |
|
|
|
045e7d3ee7
|
Revert "ircv3 STS: advertise sts= (port on plaintext, duration/preload on tls) — the modern tls-upgrade cap"
This reverts commit e0b22a34d0.
|
2026-08-08 21:51:06 +00:00 |
|
|
|
6cf9f01ff8
|
ircv3 STS: advertise sts= (port on plaintext, duration/preload on tls) — the modern tls-upgrade cap
|
2026-08-08 21:48:05 +00:00 |
|
|
|
a70ee42aee
|
markread (draft/read-marker, identity-shared) + advertise UTF8ONLY
|
2026-08-08 21:41:54 +00:00 |
|
|
|
ab3d9a07f0
|
chathistory: store per-conversation DM history too (canonical pair key, original target preserved)
|
2026-08-08 20:25:30 +00:00 |
|
|
|
f5cc12e809
|
connect: oper can dial a configured server link on demand
|
2026-08-08 20:19:14 +00:00 |
|
|
|
49a1bf08b9
|
webirc: restrict a gateway password to a source ip-mask; document webirc in the example config
|
2026-08-08 20:02:22 +00:00 |
|
|
|
6a634ef678
|
chathistory: in-memory per-channel history + CHATHISTORY latest/before/after in a batch (draft/chathistory)
|
2026-08-08 20:00:23 +00:00 |
|
|
|
1b7dbc4c0e
|
labeled-response + batch: capture a labeled command's replies and wrap them (single label tag / BATCH / ACK)
|
2026-08-08 19:53:34 +00:00 |
|
|
|
81e9728cfa
|
webirc: trusted web gateways can set the real client host/ip (webirc config blocks)
|
2026-08-08 19:42:10 +00:00 |
|
|
|
02528df5e9
|
sasl external: request tls client cert, plumb sha256 certfp through to user, relay to services; advertise sasl=PLAIN,EXTERNAL on tls
|
2026-08-08 19:36:48 +00:00 |
|
