|
|
99eb9c74f3
|
relaymsg: gate RELAYMSG on oper (it spoofs an arbitrary source nick), matching InspIRCd
|
2026-08-17 19:06:17 +00:00 |
|
|
|
d6f27ac56c
|
securitygroups: honor tls=no/account=no/etc. instead of inverting them to require
|
2026-08-17 15:05:13 +00:00 |
|
|
|
edb10a6607
|
connectban: never collapse the ban mask to * on a sub-/8 CIDR (would z-line the whole network)
|
2026-08-17 15:05:13 +00:00 |
|
|
|
3d7ee6b586
|
reputation: count remote/services channel members toward the minchanmembers gate (score was frozen)
|
2026-08-17 13:27:58 +00:00 |
|
|
|
5722640957
|
s2s: handle echo's metadata profile keys, standard replies, OPERTYPE and REDACT; emit ssl_cert + OPERTYPE
|
2026-08-17 13:08:14 +00:00 |
|
|
|
0f28083855
|
markread: persist account-keyed read markers to disk and restore them at startup
|
2026-08-17 02:12:17 +00:00 |
|
|
|
b451ccbfd8
|
permchannels: persist +P channels (modes, topic, ts, list modes) to disk and restore them at startup
|
2026-08-17 01:43:29 +00:00 |
|
|
|
978f8f8f82
|
reputation: persist the score table on each bump/expire so restarts don't revert to a stale snapshot
|
2026-08-17 01:19:57 +00:00 |
|
|
|
6efbcb6db0
|
cloak: config-selectable methods (account, fingerprint, static) alongside the default hmac-sha256
|
2026-08-16 19:49:26 +00:00 |
|
|
|
04423388d5
|
services: reword uline/service code comments, drop external daemon references
|
2026-08-16 14:12:18 +00:00 |
|
|
|
7d57e4ed34
|
connectban: never flood-ban loopback (127.0.0.1/::1) and add a connectban_exempt glob/cidr list
|
2026-08-15 23:25:16 +00:00 |
|
|
|
546f6279e7
|
snomasks: make +s a parametric snomask mode with the standard category letters (acdfgjklnoqrtuvwx), route each server notice by category, RPL_SNOMASKIS 008; opers default to all and narrow with +s -c etc.
|
2026-08-15 17:06:14 +00:00 |
|
|
|
35af95fd0f
|
harden: connclass clone-cap at register, ws control-frame limits, uuid recycle-skip, json-escape extjwt/filehost claims, metadata value/key caps, cloak numeric-dotted leak, relaymsg remote-nick, rpc set_oper block validation, isupport 13-token split, multi-hop privmsg routing, connectdelay=0
|
2026-08-15 16:27:11 +00:00 |
|
|
|
e935ee7002
|
harden: fix reachable panics (parse_duration/parse_iso/dechunk char-boundary+overflow), s2s netburst key/limit loss, rpc set_nick/set_vhost/notice injection, webirc rehash reload, panic-state reset, ws line cap, remote nick collision, per-conn state leaks
|
2026-08-15 15:02:36 +00:00 |
|
|
|
3fa9737ccb
|
link: stop services re-locking +r on every join — track the registered channel mode, keep +r channels alive when empty, use ijoin not fjoin for incremental joins, and consume s2s channel-mode params through the registry
|
2026-08-15 13:20:04 +00:00 |
|
|
|
145a01b2c2
|
core: Server::disk_write — coalescing off-core snapshot writer; reputation/metadata saves no longer block the event loop on a slow disk
|
2026-08-12 13:16:15 +00:00 |
|
|
|
c231c6b8ef
|
connclass: verify a KDF class password off the core thread with a registration hold (auth_pending + Event::ConnclassAuth) — connect floods can't freeze the server
|
2026-08-12 13:13:27 +00:00 |
|
|
|
2b3495be65
|
customtitle: verify a KDF /TITLE password off the core thread (Event::TitleAuth) — /TITLE spam can't freeze the server
|
2026-08-12 13:07:28 +00:00 |
|
|
|
7cb58586b4
|
core: generic spawn_crypto helper; offload all slow KDF hashing (OPER pbkdf2 too, and MKPASSWD) off the core thread
|
2026-08-12 13:05:29 +00:00 |
|
|
|
b40c523b87
|
customprefix: data-driven prefix engine — define arbitrary new prefix modes (letter/prefix/rank/ranktoset/ranktounset/depriv), ranks re-spaced x10; built-in tiers + defaults unchanged
|
2026-08-11 19:46:07 +00:00 |
|
|
|
9f3081cb38
|
customprefix: add ranktoset/ranktounset/depriv per tier (InspIRCd change= parity for existing prefixes)
|
2026-08-11 19:20:27 +00:00 |
|
|
|
749a1c3b69
|
customprefix: config-override channel-prefix sigils per tier (customprefix = <tier> <sigil>); PREFIX/NAMES/FJOIN consistent
|
2026-08-11 19:01:45 +00:00 |
|
|
|
b4186ae08d
|
namedmodes: PROP command sets/queries channel modes by long name (op, moderated, limit, ...)
|
2026-08-11 18:55:14 +00:00 |
|
|
|
3b43abc88a
|
operlevels: oper = <name> <pass> <level>; a lower-level oper can't KILL a higher-level one
|
2026-08-11 18:50:12 +00:00 |
|
|
|
72ca89af26
|
log_json: append the server-notice/log stream to a file as JSONL (log_json = <path>)
|
2026-08-11 18:44:48 +00:00 |
|
|
|
4f6c0ded48
|
websocket: add ws_defaultmode (text/binary/reject), ws_proxyranges (glob/CIDR X-Real-IP/XFF trust), ws_allowmissingorigin, ws_nativeping
|
2026-08-11 16:10:09 +00:00 |
|
|
|
d68f3ce97e
|
bcrypt: native $2b$ hashing (blowfish + eksblowfish; pi constants via exact fixed-point machin) wired into password_hash + MKPASSWD
|
2026-08-11 11:32:35 +00:00 |
|
|
|
5ea543188d
|
syslog: tee the server-notice/log stream to syslog (native /dev/log unix datagram or udp host:port)
|
2026-08-11 11:21:09 +00:00 |
|
|
|
f371ed0a18
|
connclass: cidr/parent/port/limit/globalmax + hashed/trusted-cert passwords, per-class recvq/sendq + fakelag, and rfc1413 ident
|
2026-08-10 18:46:42 +00:00 |
|
|
|
f5f888dbaa
|
connectclass: per-class connection policy (allow/deny, localmax, password, maxchans, pingfreq, timeout, modes) + PASS
|
2026-08-10 17:49:12 +00:00 |
|
|
|
1dd7f77ca8
|
operprefix + ojoin: server oper prefix (!/mode y, above owner) auto-granted to opers + OJOIN command
|
2026-08-10 13:01:07 +00:00 |
|
|
|
8ebb106f97
|
hidemode: hide configured mode changes from members below a rank (per-recipient MODE)
|
2026-08-10 09:41:20 +00:00 |
|
|
|
06883ced9f
|
extbanbanlist: matching extban b:#chan (share another channel's ban list)
|
2026-08-10 09:37:51 +00:00 |
|
|
|
0d5717c585
|
relaymsg: RELAYMSG + draft/relaymsg cap for bridge-style spoofed-nick channel messages
|
2026-08-10 09:06:30 +00:00 |
|
|
|
512185d6df
|
globops + autodrop: /GLOBOPS oper broadcast and pre-registration scanner drop
|
2026-08-10 08:58:15 +00:00 |
|
|
|
ab4d87488b
|
hidelist: restrict list-mode viewing by rank; allow members to view lists by default (parity)
|
2026-08-10 08:24:37 +00:00 |
|
|
|
9d84a66437
|
autoop: +w <prefix>:<mask> channel list mode grants status on join
|
2026-08-10 08:18:07 +00:00 |
|
|
|
87e3d5436d
|
chanlog: mirror the oper server-notice stream into a configured channel
|
2026-08-09 23:19:29 +00:00 |
|
|
|
1a53c5ae5a
|
banredirect: +b mask$#chan bounces a banned user to another channel (loop-guarded)
|
2026-08-09 23:17:32 +00:00 |
|
|
|
349200d695
|
solvemsg: arithmetic challenge before an un-vouched user's PMs deliver (anti-spam)
|
2026-08-09 23:11:57 +00:00 |
|
|
|
0bf6992d8a
|
dccallow: block unwanted DCC sends/chat + DCCALLOW +/-/LIST allow-list command
|
2026-08-09 23:08:25 +00:00 |
|
|
|
61954f6c5c
|
conn_waitpong: optionally require a PONG cookie before registration (anti-bot)
|
2026-08-09 23:04:14 +00:00 |
|
|
|
e0d849b4c9
|
showfile: serve a text file as its own command (e.g. /RULES), config-driven like aliases
|
2026-08-09 23:00:07 +00:00 |
|
|
|
61584a545b
|
config: make flood/dnsbl/multiline/chathistory/extjwt limits + nick/chan/watch/monitor/silence/whowas/timeouts configurable (no hardcoded options)
|
2026-08-09 22:52:39 +00:00 |
|
|
|
1969218d3f
|
geoip: show full country name (country.names.en) in whois and GEOIP, keep iso for geoban
|
2026-08-09 22:05:23 +00:00 |
|
|
|
7a99f49ca4
|
geoip: native maxmind .mmdb reader, G: geoban extban, GEOIP command, whois country
|
2026-08-09 21:43:57 +00:00 |
|
|
|
aa384d56f2
|
modules: port customtitle (TITLE vanity-title command + WHOIS line + vhost)
|
2026-08-09 20:13:07 +00:00 |
|
|
|
e7976a76d3
|
modules: port rmode (bulk-remove channel list-mode entries)
|
2026-08-09 20:11:09 +00:00 |
|
|
|
3186af07e8
|
modules: port maphide and tline
|
2026-08-09 20:06:54 +00:00 |
|
|
|
140554719b
|
modules: port randquote, disable, restrictchans, channames
|
2026-08-09 20:03:47 +00:00 |
|
