ngIRCd release 19~rc1

Update RPM spec file description to match Debian "control file"

Update NEWS and ChangeLog files

Fix forwarding of LIST commands Bug reported by Cahata, thanks!

Update preliminary ngIRCd protocol module for Anope 1.9.6

New_Connection(): don't set the client hostname twice Setting the hostname twice doesn't do much harm a lot, but isn't elegant. And for IPv6 addresses, it isn't correct the first time (missing []) ...

Client_SetHostname(): Code cleanup, more debug logging

io: use define for number of possible events

io: remove outer do {} while loops for epoll/kqueue/devpoll backends simplifies things a bit. io_dispatch() is called repeatedly from the main loop.

Enhance server command limits This patch updates the limits for handling commands from a remote server: - "<user count> / 5 + <min>" using "<min>=10" during normal operation, - the above count multiplied with 5 while servers are syncing. The intention is to a) make the limit dependent of the number of users in the network (the more users, the more commands required to sync) and b) to significantly rise this limit while servers are joining the network to make the login and synchronization faster.

Send a PING at the end of the server sync to detect it At the end of sending all "state" to the remote server, a PING command is sent to request a PONG reply. Until then, no "regual" PING was sent, so Conn_LastPing(<connection>) is null and now becomes non-null in the PONG command handler. So the servers are still synchronizing when Conn_LastPing(<connection>) is 0, which could easily be tested.

New function Conn_UpdatePing() to update the "ping timestamp"

Conn_UpdateIdle(): Code cleanup

RPL_ISUPPORT_MSG(005): add "EXCEPTS=e INVEX=I" Thanks to Cahata for the idea!

Fix "MAXLIST=beI:50": the limit is the sum of all lists "Modes which are specified in the same pair share the same maximum size", so "beI:50" means a total of 50 entries, regardless of the list. See <http://www.irc.org/tech_docs/draft-brocklesby-irc-isupport-03.txt>, thanks to Cahata for reporting this!

Update NEWS and ChangeLog files

New RPL_WHOISHOST_MSG(378): show hostname and IP address The numeric RPL_WHOISHOST_MSG(378) returns the DNS hostname (if available) and the IP address of a client in the WHOIS reply. Only the user itself and local IRC operators get this numeric.

New function Conn_GetIPAInfo(): get IP address of a connection

G/K-Lines: only add and delete valid IRC masks

Check G/K-Lines before the client has been registered, too This allows to use "*!<user>@<host>" or "*!*@<host>" masks to reject clients even before receiving PASS, NICK and USER commands and before forking authentication child processes which reduces resource usage.

Streamline handling of connection rejects (bad password, G/K-line) - Use Client_Reject(), get rid of Reject_Client(). - Refactor Class_IsMember() to Class_GetMemberReason(), - New function Class_HandleServerBans().

New function Client_Reject() to reject clients on connect

New function Lists_CheckReason() to get reason of list entries

Update NEWS and ChangeLog files

Fix ERR_{SUMMON|USERS}DISABLED: don't repeat command name in reply

Implement channel exception list (mode 'e') This allows a channel operator to define exception masks that allow users to join the channel even when a "ban" would match and prevent them from joining: the exception list (e) overrides the ban list (b).

{Add|Del}_Ban_Invite > {Add_To|Del_From}_List(): more generic

Rename ShowInvitesBans() to ShowChannelList(), make it more flexible

PRIVMSG/NOTICE: handle nick!user@host masks case-insensitive And enhance our test suite to check this a little bit better :-)

PRIVMSG/NOTICE: don't stop list processing on invalid target Process further targets, even if one has been a server ID: just skip this one with an error message and continue.

Implement user mode 'C': require "same channel" to send message If the target user of a PRIVMSG or NOTICE command has the user mode 'C' set, it is required that both sender and receiver are on the same channel. This prevents private flooding by completely unknown clients.

New RPL_WHOISREGNICK_MSG(307) numeric: indicate if nick is registered

IRC_WHOIS_SendReply(): Code cleanup

Limit channel invite and ban lists to 50 entries - New function Lists_Count(). - New limit #define MAX_HNDL_CHANNEL_LISTS = 50. - New numeric #define ERR_LISTFULL_MSG(478). - Adjust numeric RPL_ISUPPORT2_MSG(005) accordingly ("MAXLIST")

Make Send_ListChange() a little bit more generic

Remove unused prototype of Lists_AlreadyRegistered() This prototype has been introduced by commit fa7bb279 in 2006, but as far as I can see, this function never existed ...

Channel lists: Fix duplicate check and error messages - Check correct list for duplicates when adding items. - Don't generate any messages when adding duplicates or removing non-existing items (this is how ircd-seven and ircu behave). - Code cleanup: Add_Ban_Invite(), Del_Ban_Invite().

Don't enforce MAX_HNDL_MODES_ARG on server and service links

Update documentation (fix some URL, update some info)

Update NEWS and ChangeLog for next ngIRCd release once more

Don't stop join handling on faulty channel, skip it (part #2) Commit 565523cb allowed processing of further channel names given to the JOIN command when a single name was invalid. After this patch, the JOIN command handler continues to process channel name lists even after errors like "channel is full", "too many channels", and the like and generates appropriate error messages for all the channels given by the client.

JOIN command: don't check channel limit if already member Don't check the channel limit and don't report "too many channels" when trying to join a channel that the client is already a member of.

Return ERR_UNKNOWNMODE(472) for unknown channel modes The daemon reported ERR_UMODEUNKNOWNFLAG(501), which is wrong.

Numberic 005 (ISUPPORT), CHANMODES: add "O", "R", "z" modes

Limit list replies of LIST, WHO, WHOIS, and MAX_RPL_WHOWAS Introduce new #define's MAX_RPL_LIST(100), MAX_RPL_WHO(25), MAX_RPL_WHOIS(10), and MAX_RPL_WHOWAS(25).

New function IRC_CheckListTooBig() to check size of list replies It the limit is reached, a NOTICE is sent to the client and list processing should stop.

LIST command: compare pattern case insensitive

IRC_LIST(): Code cleanup

DEFAULT_WHOWAS->DEF_RPL_WHOWAS; MAX_CMODES_ARG->MAX_HNDL_MODES_ARG To streamline naming, in preparation for MAX_RPL_WHO and MAX_RPL_WHOWAS :-)

defines.h: Code cleanup and (a little bit) more documentation

RPL_ISUPPORT (numeric 005): Report MODES=<MAX_CMODES_ARG> "Maximum number of channel modes with parameter allowed per MODE command." See <http://www.irc.org/tech_docs/005.html> for details.

Channel modes: really break handling when MAX_CMODES_ARG is hit This fixes 98493077.

channel modes: only handle MAX_CMODES_ARG modes with arguments Limit the MODE command to handle a maximum of MAX_CMODES_ARG (5) channel modes that require an argument (+Ibkl) per call. Please note: Further modes that require arguments are silently ignored and end the handling of any further modes. This is similar to the behavior of ircd2.11 (silently ignores but seems to handle other modes) as well as ircd-seven (silently ignores but handles some(!) other modes) ...

Fix handling of channel mode sequence with/without arguments For example, don't generate wrong error messages when handling "MODE #chan +IIIIItn *!aa@b *!bb@c *!cc@d *!dd@e *!ee@f".

Conn_Write(): Make sure there is a client when detecting its type The assert(client != NULL) got triggered during our tests, so there is an error path that resulted in the connection being still established (sock >= 0) but the client structure already freed. So Conn_Write() should handle it!

Proc_Close(): Only close socket if it is still valid It could be invalid when calling Proc_Close() a 2nd time, for exmaple, which could happen when we hit a timeout doing IDENT requests :-(

WHOIS command: make sure matching is case-insensitive And make sure that RPL_ENDOFWHOIS replies with the unmodified mask like it has been received from the client.

WHOIS command: don't anser queries for IRC servers Thanks to Cahata for spotting this!

WHOIS command: make sure the reply ends with RPL_ENDOFWHOIS Up to now, each reply for itself ended in RPL_ENDOFWHOIS and queries for unknown nick names lacked the RPL_ENDOFWHOIS -- both is wrong.

README: update features list, borrow from list on our website

LINKS command: support <mask> parameter The <mask> can be used to limit the servers shown in the listing.

IRC_LINKS(): Code cleanup; more documentation

Add 1 second penalty for every further target on PRIVMSG/NOTICE This reduces the possibility of flooding channels with commands like "PRIVMSG/NOTICE #a,#n,#c,... :message" a little bit. Problem noticed by Cahata -- thanks!

Conn_SetPenalty(): Add new "penalty time" on each function call Until now, the penalty time has only been set when longer as the already set one, so it didn't accumulate. And add documentation for and clean up code in Conn_SetPenalty() and Conn_ResetPenalty() functions.

Enhance log messages when setting user and group

NGIRCd_getNobodyID(): Code cleanup

Display correct error message when "Server{UID|GID}" is invalid This partly closes bug #118. ngIRCd still starts up even when Server{UID|GID} is invalid: then the daemon falls back to "nobody" when running with root(0) privileges (as before).

NGIRCd_Init(): Code cleanup

main(): Code cleanup

README: point to included COPYING file, not gnu.org

Update Copyright notices for 2012

lists: don't crash if reason ptr is NULL commit 15fec92ed75c3de0b32c40d005e93e3f61aef77e (Update list item, if it already exists) can make ngircd crash because 'Reason' can be NULL, as reported by Cahata on the ngircd mailing list. Doesn't affect any released ngircd versions. Also, make sure that we do not pass NULL as arguments to a '%s' printf-like function.

Don't stop join handling on faulty channel, skip it When JOIN is received with more than one channel name, don't stop processing on the first error (e.g. bad name, wrong channel key, ...) but report an error and continue with the other given channel names. Reported by Cahata -- thanks!

IRC_JOIN(): Code cleanup

ISON command: reply with correct upper-/lowercase nick names Reported by Cahata -- thanks!

IRC_ISON(): Code cleanup

Remove unused "bool have_arg" from IRC_WHO() This fixes: irc-info.c: In function ‘IRC_WHO’: irc-info:936:18: warning: variable ‘have_arg’ set but not used

Update NEWS and ChangeLog for next ngIRCd release

ngircd.conf.5: reword description of "Ports" variable

New configuration option "PAMIsOptional" When "PAMIsOptional" is set, clients not sending a password are still allowed to connect: they won't become "identified" and keep the "~" character prepended to their supplied user name.

PAM: don't use global password buffer for conv struct Use the pointer of the password of the client directly. Eventually we can get rid of the global password again ...

doc/Modes.txt: document channel mode "r" And make clear, that user mode "r" and channel mode "r" are not set by ngIRCd itself but by IRC services.

Fixed handling of WHO commands This fixes two bugs: - "WHO <nick>" returned nothing at all if the user was "+i" (reported by Cahata, thanks). - "WHO <nick|nickmask>" returned channel names instead of "*" when the user was member of a (visible) channel. Clean up code and add documentation as well.

Remove unused "time_t now" from Lists_Check() This fixes: lists.c: In function ‘Lists_Check’: lists.c:330:9: warning: variable ‘now’ set but not used

Fixed some spelling errors in documentation and code comments Thanks to Christoph Biedl!

contrib/Debian/control: Update and complete "Build-Depends"

Update our Debian package descriptions with "official" ones See Debian Bug #648241 for details.

Fixed typo in two error messages Thanks to Christoph Biedl!

LUSERS reply: only count "visible" channels Rename Channel_Count() to Channel_CountVisible() and only count channels that are visible to the requesting client, so the existence of secret channels is no longer revealed by using LUSERS. Reported by Cahata -- thanks!

IRC_Send_LUSERS(): Code cleanup

Don't stop mode handling on unknown modes; skip it Unknown user and channel modes no longer stop the mode parser, but are simply ignored. Therefore modes after the unknown one are now handled. This is how ircd2.10/ircd2.11/ircd-seven behave, at least. Reported by Cahata -- thanks!

IRC_xLINE(): output an error message for unexpected "lines" This fixes: irc-oper.c: In function ‘IRC_xLINE’: irc-oper.c:429: warning: ‘class’ may be used uninitialized in this function irc-oper.c:430: warning: ‘class_c’ may be used uninitialized in this function

README: Update list of implemented commands

Update list item, if it already exists This updates the "validity" (timeout) as well as the "reason" text, if given.

Lists_CheckDupeMask(): return pointer to already existing item The old behavior of returning true/false is compatible to this change, so there are no other code changes required.

Log better error messages when rejecting clients

Synchronize G-Lines on server login

Op_Check(): always accept commands from a remote server itself

Class_GetList() now retuns a pointer to list_head structure

Check G-Line and K-Line lists after authenticating clients

New functions Lists_Expire() and Class_Expire() GLINE and KLINE lists are cleared automatically now, not when they are checked. So "STATS g" and "STATS k" no longer show expired entries :-)

Implement IRC_xLINE(): handler for "GLINE" and "KLINE" commands

Op_Check(): return client that initiated the request or NULL The old behavior of returning true/false is compatible to this change, so there are no other code changes required.

irc-oper.c: code cleanup; more documentation

Implement IRC "STATS g" and "STATS k" command

New function Class_GetList()

lists.{c|h}: code cleanup; more documentation

List and class handling: add optional "reason" text Adjust Lists_Add() and Class_AddMask() accordingly, implement Lists_GetReason() and Lists_GetValidity().

Add new class.{c|h} module to Xcode project

Add new class.{c|h} to project Implement Class_{AddMask|DeleteMask|IsMember}() functions.

Lists: change "only once" property into "valid until" The old "only once" true/false behavior is still supported, so there are no other code changes required.

Xcode: update project file for Xcode 4.2

define HAVE_GAI_STRERROR for Mac OS X Xcode builds On Mac OS X 10.7 Lion, this fixes In file included from .../contrib/MacOSX/../../src/ngircd/client.c:28: /Developer/SDKs/MacOSX10.7.sdk/usr/include/netdb.h:272:13: error: expected identifier or '('

Configuration: get rid of Conf_Oper_Count and Conf_Channel_Count Count elements dynamically when needed.

./configure: Fix logic and quoting of poll() detection code This fixes commit 8e193df ...

Suppress 'Can't create pre-defined channel: invalid name: ""' messages Skip predefined channel structures that have configured no name, like the "--configtest" does.

Only use poll() when poll.h exists as well

Not only check for poll(), make sure poll.h exists as well This fixes building ngIRCd on Debian GNU/Linux 1.3 "Bo" :-)

whois-test: handle local hostname = "localhost.localdomain" Use the pattern "localhost*" for valid local hostnames.

sample-ngircd.conf: show correct default for "PAM" variable The default of "PAM" is "yes" when ngIRCd has been configured to use it, so show the correct default value in the sample configuration file. Closes #119.

Update GPL 2 license text to current version See <http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt>.

Test for gai_strerror() If gai_strerror() isn't available, use a macro that simply returns a static error message (regardless of the real error code). For example, GNU libc 2.0.7 doesn't implement gai_strerror().

Only use AI_NUMERICHOST if it is #define'd It isn't using GNU libc 2.0.7, for example ...

defines.h: fix comment: "lenth" -> "length" Reported by Christoph Biedl in #ngircd. Thanks!

Init_Server_Struct(): correctly zero Server->bind_addr Don't use the size of the pointer, use the size of the variable!

Clean up and fix comments of Check_ArgIsTrue() Thanks to kaFux for pointing this out! And fix code formatting as well ...

Update doc/GIT.txt

Only close "unrelated" sockets in forked child processes This fixes the problem that ngIRCd can't do any IDENT lookups because of the socket has already been closed in the child process. The bug has been introduced starting with ngIRCd 17 ... :-( (commit ID 6ebb31ab35e)

Added doc/Modes.txt: document modes supported by ngIRCd

Implemented user mode "R" and channel mode "R" - User mode "R": indicates that the nick name of this user is "registered". This mode isn't handled by ngIRCd itself, but must be set and unset by IRC services like Anope. - Channel mode "R": only registered users (having the user mode "R" set) are allowed to join this channel.

Use Proc_Close() to remove no longer unused pipes to child processes This removes spurious (but harmless) debug messages.

New function Proc_Close() to shutdown pipes to child processes

Introduce DEBUG_BUFFER, rework some debug messages DEBUG_BUFFER is off by default and therefore disables these messages: - "Handle_Write() called for connection XX, YY bytes pending ..." - "Connection XX: ZZ bytes left in read buffer."

Testsuite: bind to loopback (127.0.0.1) interface only

doc/Platforms.txt: ngIRCd 18 on Nexenta works Thanks to Götz Hoffart for testing!

New 2nd message "Nickname too long" for error code 432

Client_CheckNick(), Client_IsValidNick(): code cleanup

Merge branch 'ServerMode' * ServerMode: Handle channel user modes 'a', 'h', and 'q' from remote servers Handle unknown channel modes on server links Handle unknown user modes on server links IRC_MODE(), Client_Mode(): code cleanup [2/2] Enlarge client user mode buffer, reduce client flags buffer Infom clients when other servers change their user modes IRC_MODE(), Client_Mode(): code cleanup [1/2]

Merge branch 'bug113-SrvPrefix' * bug113-SrvPrefix: Slightly change (and document!) IRC_KILL() calling convention Spoofed prefixes: close connection on non-server links only

Handle channel user modes 'a', 'h', and 'q' from remote servers These channel user modes aren't used for anything at the moment, but ngIRCd knows that these three modes are "channel user modes" and not "channel modes", that is that these modes take an "nick name" argument. Like unknown user and channel modes, these modes are saved and forwarded, but ignored otherwise.

Xcode: update project file to Xcode 3.2 or newer Xcode requires Mac OS X 10.6 or newer; Xcode 4 supports this project format as well, so effectively you can use Mac OS X 10.6.x or 10.7.x for building ngIRCd with the Apple Xcode IDE.

Handle unknown channel modes on server links

Slightly change (and document!) IRC_KILL() calling convention

Xcode: Mac OS X config.h: support 10.5 as well as 10.6/10.7 SDK

Handle unknown user modes on server links

Spoofed prefixes: close connection on non-server links only On server-links, spoofed prefixes can happen because of the asynchronous nature of the IRC protocol. So don't break server-links, only log a message and ignore the command. This fixes bug 113, see: <https://arthur.barton.de/bugzilla/show_bug.cgi?id=113>

Xcode: exclude more Xcode 4 specific directories in ".gitignore"

IRC_MODE(), Client_Mode(): code cleanup [2/2]

Fix typo in doc/Platforms.txt; make Linux footnote more generic

Cast getpid() and time() results for srand() input This fixes: src/ngircd/ngircd.c:596: warning: implicit conversion shortens 64-bit value into a 32-bit value (i686-apple-darwin11-llvm-gcc-4.2)

Enlarge client user mode buffer, reduce client flags buffer We have to enlage our user mode buffer, so we can handle even unknown user modes in the future; and reduce the client flags buffer, because I can't imagine why we ever would need ~100 flags!? Now we support up to 15 user modes (was: 8) and up to 15 flags (was: 99). So in the end, we even save 99-15+8-15=77 bytes for each client structure!

ngIRCd release 18

Xcode: update and add missing files to project

Infom clients when other servers change their user modes

Update ChangeLog and NEWS for ngIRCd release 18

IRC_QUIT(): disconnect directly linked servers sending QUIT Without this patch, the server becomes removed from the network and the client structures, but the connection isn't shut down at all ...

IRC_MODE(), Client_Mode(): code cleanup [1/2]

Updated doc/Platforms.txt for ngIRCd release 18

contrib/ngindent: detect "gindent" as GNU indent

Testsuite: make getpid.sh work even when run as root Use ps(1) flag "-a" (as well as "-f"): "Select all processes except both session leaders (see getsid(2)) and processes not associated with a terminal." Thanks to Götz Hoffart for reporting this problem!

MorePrivacy: Don't register WHOWAS information Citing an email from Florian to the ngIRCd mailing list: "I wonder what the expected behaviour is when Conf_MorePrivacy is changed from 'yes' to 'no' and the config is reloaded. At the moment, WHOWAS will start giving out information on Users that were connected during Conf_MorePrivacy=yes period. If this is not wanted, Client_RegisterWhowas() should be changed to not store a record when Conf_MorePrivacy is enabled." And I think it is "not wanted" :-)

doc/Platforms.txt: re-add mipsel/unknown/linux-gnu with gcc 4.1.2

Add preliminary ngIRCd protocol module for Anope 1.9 See contrib/Anope/README and doc/Services.txt for more details and installation instructions!

Updated doc/Platforms.txt: mipsel/unknown/linux-gnu

Update timestamp of ngircd(8) manual page

ngIRCd release 18~rc2

GnuTLS: use 1024 (DH_BITS_MIN) as minimum size of the DH prime For outgoing connections, we use 2048 (DH_BITS) since commit 49b2d0e. This patch enables ngIRCd to accept incoming connections from other servers and clients that use at least 1024 bits (and no longer requires 2048 for incoming connections, too). Patch proposed by Florian Westphal.

ngircd.8: document debugging options

ngircd.conf.5: strip "SSL" prefix from variables in [SSL] section

Fix some wording, use spellchecker ;-)

doc/SSL.txt: adopt to new configuration file layout

ngIRCd release 18~rc1

hash: Use UINT32 instead of uint32_t

Update NEWS and ChangeLog file for our upcoming next release

hash: use more recent lookup3 algorithm instead of lookup2 Bob Jenkins published a newer hash function in May 2006, it has better distribution. See http://burtleburtle.net/bob/hash/doobs.html for lengthy comparisions.

Use srand()/rand() instead of srandom()/random(); seems to be more portable

Merge branch 'MorePrivacy' * MorePrivacy: New configuration opion "MorePrivacy" to "censor" some user information

sample-ngircd.conf: remove "SSL" prefix from SSL-related variables

New configuration opion "MorePrivacy" to "censor" some user information this patch contains: * Fix for Conf_CloakUserToNick to make it conceal user details * Adds MorePrivacy-feature MorePrivacy censors some user information from being reported by the server. Signon time and idle time is censored. Part and quit messages are made to look the same. WHOWAS requests are silently dropped. All of this is useful if one wish to conceal users that access the ngircd servers from TOR or I2P.

Merge branch 'ScrubCTCP' * ScrubCTCP: Add documentation for "ScrubCTCP" configuration option New option to scrub incoming CTCP commands

INSTALL: document changed location of configuration variables

Merge branch 'newconfig' * newconfig: sample-ngircd.conf: "SyslogFacility" should be commented out Move SSL-related configuration variables to new [SSL] section CheckFileReadable(): only check when a filename is given ... PAM: make clear which "Password" config option is ignored Really remove [Features] in our manual pages INSTALL: document changed location of configuration variables Update sample config file and manual page for new config structure Testsuite: update configuration files for new config file format Display configuration errors more prominent on "--configtest" conf.c: code cleanup Check for redability of SSL-related files like for MOTD file Restructure ngIRCd configuration, introduce [Limits] and [Options]

Add documentation for "ScrubCTCP" configuration option

Update sample config file and manual page for new config structure

sample-ngircd.conf: "SyslogFacility" should be commented out

New option to scrub incoming CTCP commands This patch makes it possible to scrub incomming CTCP commands from other servers and clients alike. The ngircd oper can enable it from the config file, by adding "ScrubCTCP = yes" under [OPTIONS]. It is default off. CTCP can be used to profile IRC users (get user clients name and version, and also their IP addresses). This is not something we like to happen when user pseudonymity/secrecy is important. The server silently drops incomming CTCP requests from both other servers and from users. The server that scrubs CTCP will not forward the CTCP requests to other servers in the network either, which can spell trouble if not every oper knows about the CTCP-scrubbing. Scrubbing CTCP commands also means that it is not possible to send files between users. There is one exception to the CTCP scrubbing performed: ACTION ("/me commands") requests are not scrubbed. ACTION is not dangerous to users (unless they use OTR, which does not encrypt CTCP requests) and most users would be confused if they were just dropped. A CTCP request looks like this: ctcp_char, COMMAND, arg0, arg1, arg2, .. argN, ctcp_char ctcp_char is 0x01. (just like bold is 0x02 and color is 0x03.) They are sent as part of a message and can be delivered to channels and users alike.

Testsuite: update configuration files for new config file format

New documentation: "how to contribute"

Move SSL-related configuration variables to new [SSL] section

Display configuration errors more prominent on "--configtest"

conn: fix error handling when connecting to server The io_event_create error handling seems to miss a 'return' statement. Fix this by moving io_event_create() call around so we do not need the Conn_Close/Init calls in the error case.

CheckFileReadable(): only check when a filename is given ...

conf.c: code cleanup

ssl: gnutls: bump dh bitsize to 2048 problem is that some clients refuse to connect to severs that only offer 1024. For interoperability it would be best to just use 4096, but that takes minutes, even on current hardware.

PAM: make clear which "Password" config option is ignored

Check for redability of SSL-related files like for MOTD file Remove functions ssl_print_configvar() and ConfSSL_Puts(), introduce new function CheckFileReadable().

Mac OS X: split up make targets New targets are: "have-packagemaker", "osxpkg-dest"

Really remove [Features] in our manual pages

Restructure ngIRCd configuration, introduce [Limits] and [Options] The intention of this restructuring is to make the [Global] section much cleaner, so that it only contains variables that most installations must adjust to the local requirements. All the optional variables are moved to [Limits], for configurable limits and timers of ngIRCd, and [Options], for optional features. The old variables in the [Global] section are deprecated now, but still recognized.

fix clang warning about dead stores clang 'scan-build': Value stored to 'r' is never read Value stored to 'fd' is never read

contrib/platformtest.sh: fix gcc version detection Now the version of GNU C is detected correctly on SuSE Linux, too ...

parse: fix logical expression testing for non RFC1459 links parse.c:284: warning: suggest parentheses around operand of '!' or change '&' to '&&' or '!' to '~' The expression looks dubious, this should probably be an if-not-set, then... test.

conn: avoid needlesly scary 'buffer overflow' messages When the write buffer space grows too large, ngircd has to disconnect the client to avoid wasting too much memory. ngircd logs this with a scary 'write buffer overflow' message. Change this to a more descriptive wording.

Only require server prefixes on non RFC1459 links Not all servers (and services!) using the RFC1459 protocol style send prefixes on all commands; so don't require them to do so. This relaxes the requirements introduced by commit 15775e679.

Merge branch 'master' of git://arthur.barton.de/ngircd-alex * 'master' of git://arthur.barton.de/ngircd-alex: Do reverse lookups using the AF of the incoming connection resolve: fix reverse lookups of client connections with ConnectIPv6=no

Do reverse lookups using the AF of the incoming connection This fixes errors like this one: Address mismatch: 2001:1234:abcd:1::1 != 192.168.1.1

Mac OS X: install on root volume only, and set correct permissions Update Mac OS X Installer.app description bundle, so that the ngIRCd package can only be installed on the root volume ("/"); and make sure that all installed files and directories have correct ownership and permissions.

resolve: fix reverse lookups of client connections with ConnectIPv6=no We re-use the same helper function for both forward lookups (when we want to connect to a peer server) and for validation of reverse loopups (where we make a lookup on the hostname returned by a reverse lookup on the IP address that connected). Problem: When ConnectIPv6=no, the forward lookup helper sets the adderss family to AF_INET, and, if out client connected via ipv6, we fail to validate the result. Thus move the ConnectIPvX check out of the helper.

Mac OS X: update installer texts and add logo.

Doxygen'ify conf.c

New function Config_Error_Section(); and code cleanup

Add some type casts to random() and srandom() functions This fixes two gcc warnings (on Mac OS X): "warning: implicit conversion shortens 64-bit value into a 32-bit value"

ngircd: improve rng initialisation we do not need this for cryptographic purposes, but we can do better than plain srandom(getpid()). Also, keep in mind that rng state is inherited across fork(), so re-init it in the child.

Merge branch 'AuthPing' * AuthPing: Add documentation for "RequireAuthPing" configuration option New configuration option "RequireAuthPing": PING-PONG on login

Merge branch 'NoticeAuth' * NoticeAuth: Add documentation for "NoticeAuth" configuration option Configuration: move "NoticeAuth" to GLOBAL section New configuration option "NoticeAuth": send NOTICE AUTH on connect

Add documentation for "RequireAuthPing" configuration option

ngircd.conf.5: Add variable type to "CloakHost" and "CloakUserToNick"

Add documentation for "NoticeAuth" configuration option

New configuration option "RequireAuthPing": PING-PONG on login When enabled, this configuration option lets ngIRCd send a PING with an numeric "token" to clients logging in; and it will not become registered in the network until the client responds with the correct PONG. This is used by QuakeNet for example (ircu/snircd), and looks like this: NICK nick :irc.example.net PING :1858979527 USER user . . :real name PONG 1858979527 :irc.example.net 001 nick :Welcome to the Internet Relay Network ...

Xcode: don't list sample-ngircd.conf, use sample-ngircd.conf.tmpl

Configuration: move "NoticeAuth" to GLOBAL section

Warn when unknown variables are found in [Features] section

New configuration option "NoticeAuth": send NOTICE AUTH on connect When enabling "NoticeAuth" in the [Features] section, ngircd will send "NOTICE AUTH" messages on client connect like e.g. snircd (QuakeNet) does.

Update doc/GIT.txt

Update INSTALL text

Generate WALLOPS message on SQUIT from IRC operator So SQUIT now behaves like CONNECT and DISCONNECT commands, when called by an IRC operator (and not received from an other server).

Commands received from other servers must have prefixes Make sure that all commands received from other servers do have valid prefixes. Only exceptions are PING and ERROR commands that can occure without prefixes when generated by the remote peer itself.

Allow servers to send more commands in the first 10 secods This helps to speed up server login and network synchronisation.

IRC_CHANINFO(): Code cleanup

Handle_GLOBAL(): don't use multi-line strings They aren't supported by elder C compilers ...

Merge branches 'CloakUserHost', 'QuitOnHTTP' and 'bug72-WHOIS-List' * CloakUserHost: Add a note not to use a percent sign ("%") in CloakHost variable Rename ClientHost to CloakHost, and ClientUserNick to CloakUserToNick Don't use "the.net" in sample-ngircd.conf, use "example.net" ngircd.conf.5: document "ClientHost" and "ClientUserNick" Move "ClientHost" and "ClientUserNick" to end of [Global] section ClientUserNick setting ClientHost setting * QuitOnHTTP: Only "handle" HTTP commands on unregistered connections Don't use IRC_QUIT_HTTP() if STRICT_RFC is #define'd IRC_QUIT_HTTP(): enhance error message Move IRC_QUIT_HTTP() below IRC_QUIT() quit on HTTP commands: GET & POST * bug72-WHOIS-List: Add "whois-test" to testsuite and distribution archive Add support for up to 3 targets in WHOIS queries.

Add a note not to use a percent sign ("%") in CloakHost variable The percent sign is reserved for future extensions, for example to expand some variables like %H to a hash value of the real host name ... Idea by kaFux in #ngircd.

Add "whois-test" to testsuite and distribution archive Test script proposed by Dana Dahlstrom, 2008-02-17. See <https://arthur.barton.de/bugzilla/show_bug.cgi?id=72> ...

Only "handle" HTTP commands on unregistered connections

Rename ClientHost to CloakHost, and ClientUserNick to CloakUserToNick

Add support for up to 3 targets in WHOIS queries. also allow up to one wildcard query from local hosts. Follows ircd 2.10 implementation rather than RFC 2812. At most 10 entries are returned per wildcard expansion. WHOIS test cases by Dana Dahlstrom.

Don't use IRC_QUIT_HTTP() if STRICT_RFC is #define'd

Doxygen: Remove header.inc.html and ngircd-doc.css from distribution

Don't use "the.net" in sample-ngircd.conf, use "example.net" "the.net" is an existing domain of the Texas Higher Education Network ... See RFC 2606.

IRC_QUIT_HTTP(): enhance error message

ngircd.conf.5: describe types of variables Describe the possible types of variables in ngircd.conf: booleans, text strings, integer numbers. And add type information to each variable description.

Move IRC_QUIT_HTTP() below IRC_QUIT()

ngircd.conf.5: document "ClientHost" and "ClientUserNick"

Move "ClientHost" and "ClientUserNick" to end of [Global] section

quit on HTTP commands: GET & POST

channel: always reject zero-length channel key previously, any client could join in this configuration: [Channel] Name = #test Modes = tnk KeyFile = /tmp/foobar fix this by checking for zero-length key before comparing key to channel key.

ClientUserNick setting

PAM-Auth child: log if result can't be reported This fixes the followin GCC warning on modern Linux systems as well: irc-login.c: In function ‘Hello_User’: irc-login.c:876: warning: ignoring return value of ‘write’, declared with attribute warn_unused_result

ClientHost setting

Protocol.txt: Update description of CHANINFO command

Add cscope.out to .gitignore file

Correctly detect errors when handling "MODE x" commands

Enhance documentation for the WEBIRC command

Doxygen'ify irc-login.c

Doxygen'ify irc-channel.c

Doxygen'ify conn.c

Doxygen'ify proc.h

Doxygen'ify parse.h

Doxygen'ify and update comments in ngircd.{c|h}

Doxygen'ify and update comments in match.c

Update and translate comments in hash.c

Doxygen'ify conf.h

Add missong Doxygen @file tags to ngircd.h and irc-op.h

Code cleanup: mostly removing empty lines

Doxygen: define ZLIB, PAM, and ZEROCONF

Add Doxygen @file documentation to each source and header file

Updated Doxygen configuration file Removed unnecessary variables DETAILS_AT_TOP, EXTRACT_PRIVATE, EXTRACT_LOCAL_CLASSES, added SHOW_DIRECTORIES=YES, STRIP_CODE_COMMENTS=NO, REFERENCED_BY_RELATION=YES, REFERENCES_RELATION=YES, HTML_DYNAMIC_SECTIONS=YES and GENERATE_DOCSET=NO; updated PREDEFINED.

Doxygen: remove own header and CSS file Use the ones of Doxygen instead, this has the advantage that we benefit of new functionality of Doxygen without having to make changes.

Make write buffers bigger, but flush early This patch - makes the server write buffer bigger: 64k, - makes the regular write buffer bigger: 32k, - tries to flush the write buffer starting at 4K. Before this patch, a client got disconnected if the buffer flushing at 4k failed, now regular clients can store up to 32k and servers up 64k even if flushing is not possible at the moment (e.g. on slow links).

Enhance logging on "write buffer overflow"

Clean up Validate_Prefix(); don't send punctuation in ERROR commands

Better check for invalid IRC+ PASS command Don't do a NULL-pointer dereference when a remote server using the IRC+ protocol sends an invalid PASS command without the required <serverversion> parameter ...

Read_Request(): don't access possibly free'd CLIENT structure Handle_Buffer() can shut down connections and remove clients, so after calling it, we have to make sure that our CLIENT pointer is still valid.

ngircd-test2.conf: really disable Ident and PAM ...

Log "Can't read MOTD file" as "configuration error" Now this error message is displayed in the console without debug prefix when running the configuration test (--configtest).

Allow "Port = 0" in [Server] blocks Port number 0 marks remote servers that try to connect to this daemon, but where this daemon never tries to establis a connection on its own: only incoming connections are allowed.

conf: fix 'Value of "..." is not a number!' for negative values Don't use isdigit() function any more, because it only checks the first character of the variable value and because it doesn't know about the minus sign which is required e.g. for "Group = -1".

Don't read MOTD file twice The MOTD file is read in Read_Config(), so don't read it when handling the "MotdFile" configuration variable. Instead make sure that it is initialized properly when (re-)reading the configuration.

Add [Features] section to ngircd-test{1|2}.conf Fix commit 5a34bb203a: It is not enough to strip the "No" prefix from "Ident" and "PAM", but we have to introduce the new [Features] section to fix all warning messages of ngIRCd. Variables "Ident" and "PAM" in [Global] are completely wrong :-(

Enable WHOIS command to return information about services

Update testsuite configuration: strip No... prefixes

Add connection/socket information to some log messages

Implement channel mode 'O': "IRC operators only" This channel mode is used on DALnet (bahamut), for example.

Remove ZeroConf variable from sample-ngircd.conf

Remove support for ZeroConf/Bonjour/Rendezvous service registration

TOPIC command: test for channel admin rights correctly This enables other servers, services and IRC operators to change channel topics, even when the client is not joined to this channel. Now the handler for TOPIC behaves like the one for MODE.

Channel_CheckAdminRights(): test if client can admin a channel This generic function tests if a client is allowed to do administrative tasks to a specific channel: - servers and services are always truested ("allowed everything"), - channel operators are allowed, - IRC operarors are allowed if OperCanUseMode is set in the config.

conf: fix 'unknown section' FEATURES parse error pointed out by Alex: ngircd.conf, line 105: Unknown section "[Features]"!

IRC_TOPIC(): code cleanup

conf: move 'run-time-feature-disable' options to new FEATURE section

array: remove check for allocated == 0 allocated can only be zero if ->mem is NULL.

array: remove alignment of requested size libc should know better than us. Also, this helps debugging with tools like valgrind: When you allocate an array of size x, and then erronoulsy use x+1 valgrind cannot detect the bug because due to ALIGN_() made by array.c we might have allocated more than size x...

conf: Warn if PAM=true when ngircd was built without PAM support

conf: add missing static qualifier internal helper, so it should be static. also, add UNUSED to 'Line'.

Update copyright notices for 2010 :) And update the NEWS and ChangeLog file as well.

Make NoZeroConf option work with Howl

config: deprecate NoXX-Options ngircd unfortunately uses several options using double-negation, e.g. NoIdent = No, NoPam = No, etc. This renames all options by dropping the "No" prefix, e.g. "NoIdent = no" becomes "Ident = yes". The old options will continue to work, but will cause a warning message. Also update man pages and default config. To prevent silly 'Ident = yes' from appearing in --configtest output in the 'ident support not compiled in and Ident Option not used' case, make default value depend on feature availability. If feature is available, enable by default, otherwise disable. We might consider moving these options to a new [Feature] section, or something like that, because none of these options are essential. Another possible improvement: 'Ident = yes' option in ngircd.conf causes a warning if ngircd was built without ident support. This does not happen with e.g. zeroconf....

channel: fix confusing "adding to invite list" debug output adding entries to ban list produced 'invite list' debug output...

Command throttling: introduce MAX_COMMANDS_SERVICE New MAX_COMMANDS_SERVICE (currently set to MAX_COMMANDS_SERVER[10]), so that services are handled like servers (and not regular users).

Don't throttle services and servers beeing registered

Xcode: correctly sort files

Don't assert() when serching a client for an invalid server token This is only relevant when a trusted server on a server-server link sends invalid commands.

ngIRCd release 17.1

--configtest: remember if MOTD is configured by file or phrase Configuration variables "MotdFile" and "MotdPhrase" are mutually exclusive; so don't display content in both of them when running "ngircd --configtest": instead remember which one is beeing used.

Enhance log messages when establishing server links a little bit

Reset ID of outgoing server link on DNS error correctly Not resetting the ID prevents the daemon from trying to re-establish outgoing server links when the DNS resolver failed to resole a hostname.

Don't log critical (or worse) messages to stderr stderr isn't redirected to the "error file" any more, so there is no point in trying to log to it ...

Manual page ngircd(8): add SIGNALS section

Manual pages: update and simplyfy AUTHORS section

Remove "error file" when compiled with debug code enabled The information written to the "error file" (/tmp/ngircd-<PID>.err) when ngIRCd is compiled with debug code enabled isn't that usefule, so don't create this file at all.

README: Updated list of implemented commands

add doc/README-Interix.txt and doc/Bopm.txt to distribution tarball

Merge branch 'numeric-329' * numeric-329: New numeric 329: get channel creation time on "MODE #chan" commands Save channel creation time; new function Channel_CreationTime()

add doc/PAM.txt to distribution tarball doc/PAM.txt was not included in the release tarball. reported by Christoph Biedl.

New numeric 329: get channel creation time on "MODE #chan" commands

Save channel creation time; new function Channel_CreationTime()

ngIRCd release 17

Updated doc/Platforms.txt for upcoming release 17

contrib/platformtest.sh: make command name quoting consistent

contrib/ngircd-redhat.init: updated email address of Naoya Nakazawa

Fix up generation and distribution of sample-ngircd.conf - Add generated sample-ngircd.conf to new .gitignore file, - refactor Makefile.am to generate sample-ngircd.conf on "make all", to clean it up on "make clean", and to install it to the correct place. - Make sure path names in sample-ngircd.conf are separated by "/".

doc: change path names in sample-ngircd.conf depending on sysconfdir

ngIRCd Release 17~rc3

Fix connect attempts to further IP addresses of outgoing server links If a hostname resolves to more than one IP address (round-robin DNS, IPv4 and IPv6) and an attempt to connect to the first address fails, ngIRCd should try to connect to the 2nd address, 3rd address etc. But because of a wrong variable used in the call to New_Server(), the wrong server structure has been used in further connection attemps which possibly lead to connection attempts to already connected servers.

Debian: Install default /etc/pam.d/ngircd allowing all logins This is required for backwards compatibility when installing the -full or -full-dbg package variant: PAM is enabled now but no configuration present, so all login attempts would be denied ... Creating /etc/pam.d/ngircd including "auth required pam_permit.so" restores the old behaviour of allowing all connections.

Debian: update standards to 3.9.1; add libpam0g-dev dependency

Make contrib/platformtest.sh more portable

Mac OS X package ("make osxpkg"): generate PAM configuration

Xcode builds ("make xcode"): disable pam_fail_delay() disable pam_fail_delay() only is available starting with Mac OS X 10.6; but we use the 10.5 SDK for campatibility, so don't use this function at all when building using Xcode.

Xcode: update project file, use 10.5.x SDK This is required for universal 32 bit and 64 bit builds: now code for ppc, i386, and x86_64 is generated (which requires 10.5 or newer).

Xcode builds ("make xcode"): detect version number correctly

ngIRCd release 17~rc2

Updated contrib/platformtest.sh (new version scheme) - handle version numbers generated by "git describe" - detect gcc compiler version correctly when "-std=xxx" is used

New doc/HowToRelease.txt file describing the release process

ZeroConf: include header files missing since commit a988bbc86a

Generate ngIRCd version number from GIT tag Now the ngIRCd release/version number is deduced from the "current" annotated GIT tag; see "git describe --help" for details. This is the same scheme the Linux kernel uses and gives much more details version numbers for interim releases and inofficial source archives generated using "make dist". Please note: the version number is only updated it the autogen.sh script is run; so after pulling in and pushing out new commits, you should run ./autogen.sh!

Make sourcecode compatible with ansi2knr again This allows to compile ngIRCd using a pre-ANSI K&R C compiler again: all source files are automatically converted by the included ansi2knr program (of GNU automake/autoconf) before compiling them with the K&R C compiler, but a few coding standards must be met. Tested on Apple A/UX 3.x. Regression testing on Linux and Mac OS X.

./configure: check if C compiler can compile ISO Standard C This is required for enabling ansi2knr on systems that don't have an ANSI C compiler installed (e.g. on A/UX with Apple standard C compiler).

./configure: check support for C prototypes again

Don't use PARAMS() macro for function implementations The PARAMS() macro is only needed for function prototypes; don't use it for the actual implementations.

Added m68k/apple/aux3.0.1 (gcc 2.7.2) to doc/Platforms.txt

Only try to set FD_CLOEXEC if this flag is defined A/UX 3.x doesn't implement this constant, for example.

Only use "__attribute__ ((unused))" if GCC >=2.8 is used At least GCC 2.7.2 doesn't support this attribute.

doc/Makefile.am: don¹t set docdir, automake handles it already And elder make(1) programs don¹t like "x ?= y" ...

ngIRCd release 17~rc1

New configuration option "NoZeroConf" to disable ZeroConf registration If ngIRCd is compiled to register its services using ZeroConf (e.g. using Howl, Avahi or on Mac OS X) this parameter can be used to disable service registration at runtime.

Xcode: only build current architecture in "Debug" target

doc/Platforms.txt: added NetBSD 5.0.2

Updated doc/Platforms.txt

Make sure sighandlers.h is listed in noinst_HEADERS ... because it must be included in the distribution archive :-)

const'ify ngt_SyslogFacilityName() function This fixes the following gcc compiler warning: tool.c: In function 'ngt_SyslogFacilityName': tool.c:195: warning: return discards qualifiers from pointer target type

Debian packages: build "-full" and "-full-dbg" with support for PAM

New configuration option "SyslogFacility" The new option "SyslogFacility" deines the syslog "facility" to which ngIRCd should send log messages. Possible values are system dependant, but most probably "auth", "daemon", "user" and "local1" through "local7" are possible values; see syslog(3). Default is "local5" for historical reasons.

New functions ngt_SyslogFacilityName() and ngt_SyslogFacilityID() These both functions translate syslog facility names to ID numbers and vice versa. On systems that don't define the facilitynames[] array in syslog.h, we try to build one ourself.

Explicitly cast return value of read(2) to "int" This fixes the following gcc warning, emitted by Xcode: src/ngircd/sighandlers.c: In function 'Signal_Callback': src/ngircd/sighandlers.c:239: warning: implicit conversion shortens 64-bit value into a 32-bit value

Add sighandlers.{c|h} to Xcode project And update static Mac OS X config.h used by the Xcode project.

Don't call sigaction() if it is not available on the system

Fix signalpipe file descriptor leak on RESTART Signals_Init() must only be called once. This does not affect any ngircd release version. Earlier version of this patch moved the io and sighandler initialization before the while() loop, but as Alexander Barton noticed that broke all systems without builtin select support in io.c...

sighandlers.{c|h}: Code cleanup - declare signals_catch[] array not between the function implementations. - rename now local function NGIRCd_Rehash() to Rehash(). - remove empty and therefore not used "catch SIGHUP; break;".

Make sighandlers.{c|h} compatible with ansi2knr

Updated ChangeLog to include signal handler changes

Bump version number to "17-dev"

Update ChangeLog and NEWS: include SIGUSR1/SIGUSR2 changes

Output connection status when dumping the internal server state

Reformat "server state" debug messages a little bit

Enable the daemon to dump its internal state in debug-mode. This patch allows ngIRCd to dump its internal state (connected clients, actual configuration) when compiled with --enable-debug. The daemon catches two more signals: - SIGUSR1: toggle debug mode (on/off), - SIGUSR2: dump internal state to console/syslog.

signalhandlers: add fallback to deprecated sysv API

remove NGIRCd_SignalRehash now that the main signal handling is done from the dispatcher loop we can call NGIRCD_Rehash() directly. the /REHASH handler can queue the Rehash() function for execution by sending a SIGHUP. It will be run when we return back to the dispatch loop.

Add new 'delayed' signal handlers. Allows to defer/queue signal processing for execution on the next event dispatch call, i.e. we can perform any signal action in normal, non-signal context. Example uses: - Reload everything on HUP without writing a global "SIGHUP_received" variable - Dump status of internal Lists on SIGUSR1, etc.

io: add io_cloexec to set close-on-exec flag.

ng_ipaddr.h: include assert.h We use assert() in this header, so we should include assert.h.

Conn_SyncServerStruct(): test all connections; and work case insensitive Fix synchronization of established connections and configured server structures after a configuration update: - Not only test servers that already have a connection, but also check and update configured servers to which a new connection is beeing established (SERVER_WAIT state). - And do the server name comparision case-insensitive.

Check_Servers(): skip servers already beeing connected Let CheckServers() not only skip servers that already have a connection, but also skip servers to which a new connection is already beeing established (SERVER_WAIT state).

Check_Servers(): Code cleanup

Update ChangeLog and NEWS in preparation for the next release ...

Fix linebreak in INSTALL text to fit in 80 columns

configure: correctly indent IPv6 yes/no summary output

Don't reset My_Connections[Idx].lastping when reading data This fixes PING-PONG lag calculation (which resulted in "0" before). The "lastping" time is still reset it if a time shift backwards has been detected to prevent the daemon from miscalculating ping timeouts.

write_whoreply(): respect hostname cloaking

IRC_USERHOST(): respect hostname cloaking

IRC_USERHOST(): Code cleanup & some documentation

Send_Message(): respect hostname cloaking

IRC_WriteStrClientPrefix() / Get_Prefix(): respect hostname cloaking

Refactor IRC_WriteStr{Channel|Related}Prefix(); support cloaking Move common code to new local function Send_Marked_Connections() and respect hostname cloaking.

Implement user mode "x": hostname cloaking (closes: #102) When a client has user mode "x" set, its real hostname is cloaked by substituting it with the server name (as configured in ngircd.conf). Restricted clients (user mode "r") aren't allowed to change mode "x". Please note that hostname cloaking is only in effect in server-client communication! The server still uses the real hostname for its own logging and for all server-server communication -- therefore all servers in the network must support user mode "x" to prevent older servers from leaking the real hostname of a cloaked client!

WHOWAS: respect hostname cloaking Store cloaked hostname if user mode "x" is set when the client disconnects from the server.

WHOIS: respect hostname cloaking

Implement Client_HostnameCloaked() and Client_MaskCloaked() These two functions return the cloaked hostname, if the client has enabled hostname cloaking indicated by the -- still to implement -- user mode "x". See furter patches :-)

Clean up an document Client_Hostname() and Client_Mask()

Make configure switch "--docdir" work (closes: #108)

Reformat and update FAQ.txt a little bit

INSTALL: mention SSL and IPv6

INSTALL: mention changed handling of MotdFile.

ngircd: change MOTD file handling previously, the given MotdFile file was read whenever a client requested it. Change handling to read the MotdFile contents into memory once during config file parsing. Two side effects: - changes to the MOTD file do not have any effect until ngircds configuration is reloaded - MOTD file does no longer have to reside in the chroot directory (the MOTD contents will then not be re-read on reload in that case)

startup: open /dev/null before chroot before people had to create a /dev/null inside the chroot to make redirection work.

Allow IRC ops to change channel modes even without OperServerMode set

Allow IRC operators to use MODE command on any channel (closes: #100) This allows IRC operators to change channel modes of ANY channel, even without joining these channels first.

Added mailmap file for git-[short]log and git-blame

Remove Proc_Kill(), use timeout to kill child processes This avoids a race and potentionally killing the wrong process on systems that use randomized process IDs; now the child itself is responsible to exit in a timely manner using SIGALRM.

New function Conn_CloseAllSockets() to close all open sockets This is useful in forked child processes, for example, to make sure that they don't hold connections open that the main process wants to close.

Authenticated users should be registered without the "~" mark

Don't Proc_Kill() childs after Proc_Read(): done there already.

Don't even fork a PAM-subprocess if "NoPAM" option is set

Use Proc_GenericSignalHandler() as handler for SIGTERM by default

Mark some variables as "unused" to prevent compiler warnings Some variables are only used when compiling with IDENT or PAM support or when the debug code is enabled. Mark them as "unused" so that gcc doesn't generate warnings when neither of these options is enabled.

Set NoPAM=yes in configuration files used for the testsuite

New configuration option "NoPAM" to disable PAM When the "NoPAM" configuration option is set and ngIRCd is compiled with support for PAM, ngIRCd will not call any PAM functions: all connection attemps without password will succeed instead and all connection attemps with password will fail. If ngIRCd is compiled without PAM support, this option is a dummy option and nothing changes: the global server password will still be in effect.

io.c: Include conn.h when using the select() API

Use correct preprocessor syntax when testing for PAM and IDENTAUTH

Make sure signal.h is #include'd when needed

Initial documentation for using PAM with ngIRCd

Implement asynchronous user authentication using PAM For each client connection a child process is forked which handles the actual PAM authentication and reports the result back to the master process using a pipe for communication. While the PAM authentication is in process the daemon does not block.

Add new pam.{c|h} module to Xcode project Adjust Xcode project and Mac OS X static config.h header to use PAM.

Add pam.{c|h} to project and implement PAM_Authenticate() function

New functions Client_[Set]OrigUser() to get/set user specified by peer The Client_SetOrigUser() function is used to store the peer-provided user name (see USER command) in its original form, not changed by IDENT results, for example.

Detect PAM libraries

Refactor Resolve_Read() into generic Proc_Read() function

Make Proc_Kill() more fault-tolerant

New function Conn_GetProcStat() Get PROC_STAT sub-process structure of a given connection.

Code cleanup: don't reset penalty time on DNS resolver result See commit d4632a727fbee6: it's not necessary any more!

New function Proc_GenericSignalHandler()

Rename Log_[{Init|Exit}_]Resolver to Log_[{Init|Exit}_]Subprocess Rename Log_Init_Resolver, Log_Exit_Resolver, and Log_Resolver to Log_Init_Subprocess, Log_Exit_Subprocess, and Log_Subprocess and make it more generic thereby.

Don't #include client.h when conn.h/conn-func.h is already included conn.h and cinn-func.h both already #include client.h, so it is not needed to do it twice.

New function Conn_GetFromProc() to get CONN_ID of a subprocess Get CONN_ID from file descriptor associated to a subprocess structure.

Resolver: Implement signal handler and catch TERM signal

Don't set a penalty time when doing DNS lookups The logic isn't as described in the source and intended by this code: ngIRCd doesn't wait for the asynchronous resolver process until the set penalty time is over, but until the forked process terminates or the initial connection timeout (= PongTimeout) triggers. So don't set the penalty time at all and remove the wrong comment.

Update comments: subprocesses not only can be resolver processes

Refactoring: Rename CONNECTION.res_stat to .proc_stat We want to use this process status variable not only for the resolver subprocesses but other asynchronous tasks as well; so let's name it more generic.

New "module" proc.c/proc.h for generic process handling The new "module" proc.c is used for functions dealing with child processes. At the moment, it is only used by the asynchronous resolver. All the functions already implemented habe been migrated from the resolver code base, and the rest of the ngIRCd source code has been adepted to the new namespace and calling conventions. The goal is to develop "generic" process handling functions that can be used for other purposes as well, e.g. running processes on client connects etc.

Only #include resolve.h if it is really needed

Fix redundant redeclaration of Conn_Count*() functions The wrongly placed #endif lead to the following compiler warnings: conn.h:125: warning: redundant redeclaration of ‘Conn_Count’ conn.h:125: warning: previous declaration of ‘Conn_Count’ was here conn.h:126: warning: redundant redeclaration of ‘Conn_CountMax’ conn.h:126: warning: previous declaration of ‘Conn_CountMax’ was here conn.h:127: warning: redundant redeclaration of ‘Conn_CountAccepted’ conn.h:127: warning: previous declaration of ‘Conn_CountAccepted’ was here

const'ify Conn_WriteStr() function

const'ify Send_ListChange() function in irc-mode.c

const'ify IRC_WriteStrXXX() and Get_Prefix() functions

const'ify command name variable in _COMMAND strcuture

const'ify Client_TypeText()

Add some documentation for using BOPM with ngIRCd

Implement user mode "c": receive connect/disconnect NOTICEs Users having the user mode "c" set receive NOTICE messages on each new client connection to the local server as well as disconnects. Only IRC operators (users having the mode "o" set) are allowed to set the 'c' user mode. These connect/disconnect messages can be useful for open proxy scanners -- BOPM (http://wiki.blitzed.org/BOPM) is now functional with ngIRCd, for example.

Refactor Wall_ServerNotice() into more generic Log_ServerNotice() Log_ServerNotice() sends a messages to all users having a given user mode set.

New function Conn_IPA(): get client IP address as string

ngircd.init: require $network $remote_fs when stopping ngircd

Show SSL status in WHOIS, numeric 275 "I've been wanting this for years and finally took the 5 minutes to patch it in. I took the response code (275) from whatever's running OFTC's IRC network." -- Neale Pickett <neale@woozle.org>, Fri, 11 Jun 2010 17:32:41 -0500 (OFTC is running Hybrid ircd.)

Include correct header files when testing for arpa/inet.h (Closes: #105) Tested on OpenBSD 4.7, OpenBSD 4.1, FreeBSD 8, Linux and Mac OS X. Thanks to rck <dev.rck@gmail.com> for reporting and testing!