+ngIRCd Release 17
+
+ ngIRCd 17~rc1 (2010-10-11)
+ - New configuration option "NoZeroConf" to disable service registration at
+ runtime even if ngIRCd is compiled with support for ZeroConf (e.g. using
+ Howl, Avahi or on Mac OS X).
+ - New configuration option "SyslogFacility" to define the syslog "facility"
+ (the "target"), to which ngIRCd should send its log messages.
+ Possible values are system dependant, but most probably "auth", "daemon",
+ "user" and "local1" through "local7" are possible values; see syslog(3).
+ Default is "local5" for historical reasons.
+ - Dump the "internal server state" (configured servers, established
+ connections and known clients) to the console or syslog when receiving
+ the SIGUSR2 signal and debug mode is enabled.
+ - Enable the daemon to disable and enable "debug mode" on runtime using
+ signal SIGUSR1, when debug code is compiled in, not only on startup
+ using the command line parameters.
+ - Signal handler: added new 'delayed' signal handlers, including fallback
+ to deprecated sysv API. And removed global NGIRCd_SignalRehash variable.
+ - IO: add io_cloexec() to set close-on-exec flag.
+ - ng_ipaddr.h: include required assert.h header.
+ - Conn_SyncServerStruct(): test all connections; and work case insensitive
+ - configure script: correctly indent IPv6 yes/no summary output.
+ - Don't reset My_Connections[Idx].lastping when reading data, so the
+ client lag debug-output is working again.
+ - Implement user mode "x": hostname cloaking (closes: #102).
+ - Make configure switch "--docdir" work (closes: #108).
+ - Reformat and update FAQ.txt a little bit.
+ - INSTALL: mention SSL, IPv6, and changed handling of MotdFile.
+ - Change MOTD file handling: ngIRCd now caches the contens of the MOTD
+ file, so the daemon now requires a HUP signal or REHASH command to
+ re-read the MOTD file when its content changed.
+ - Startup: open /dev/null before chroot'ing the daemon.
+ - Allow IRC ops to change channel modes even without OperServerMode set.
+ - Allow IRC operators to use MODE command on any channel (closes: #100).
+ - Added mailmap file for git-[short]log and git-blame.
+ - Authenticated users should be registered without the "~" mark.
+ - Set NoPAM=yes in configuration files used for the testsuite.
+ - New configuration option "NoPAM" to disable PAM.
+ - Implement asynchronous user authentication using PAM, please see the
+ file doc/PAM.txt for details.
+ - Resolver: Implement signal handler and catch TERM signals.
+ - Don't set a penalty time when doing DNS lookups.
+ - Add some documentation for using BOPM with ngIRCd, see doc/Bopm.txt.
+ - Implement user mode "c": receive connect/disconnect NOTICEs. Note that
+ this new mode requires the user to be an IRC operator.
+ - ngircd.init: require "$network" and "$remote_fs" when stopping ngircd.
+ - Show SSL status in WHOIS output, numeric 275.
+ - Include correct header files when testing for arpa/inet.h (Closes: #105).
+ - Don't access already freed memory in IRC_KILL().
+ - Fix "beeing" typo ...
+ - SSL/TLS: fix bogus "socket closed" error message.
+
+ngIRCd Release 16 (2010-05-02)
+
+ - doc/SSL: remove line continuation marker
+
+ ngIRCd 16~rc2 (2010-04-25)
+ - Updated some more copyright notices, it's 2010 already :-)
+ - Only compile in Get_Error() if really needed
+ - Fix gcc warning "ignoring return value of ..."
+ - Include netinet/in_systm.h alongside netinet/ip.h
+ - Include netinet/{in.h, in_systm.h} when checking for netinet/ip.h
+ - Only include <netinet/in_systm.h> if it exists
+ - Updated doc/Platforms.txt
+ - Enhace connection statistics counters: display total number of served
+ connections on daemon shutdown and when a new client connects using
+ the new numeric RPL_STATSCONN (250).
+
+ ngIRCd 16~rc1 (2010-03-25)
+ - Various fixes to the build system and code cleanups.
+ - contrib/platformtest.sh: Only show latest commit.
+ - Updatet doc/Platforms.txt, added new README-Interix.txt documenting
+ how to tun ngIRCd on Microsoft Services for UNIX (MS SFU, MS SUA).
+ - Updated links to the ngIRCd homepage (bug tracker, mailing list).
+ - Added missing modes to USERMODES #define
+ - Show our name (IRCD=ngIRCd) in ISUPPORT (005) numeric
+ - Quote received messages of ERROR commands in log output.
+ - ngircd.conf manual page: document missing "Password" variable.
+ - Implement WEBIRC command used by some Web-IRC frontends. The password
+ required to secure this command must be configured using the new
+ "WebircPassword" variable in the ngircd.conf file.
+ - Don't use port 6668 as example for both "Ports" and "SSLPorts".
+ - Remove limit on max number of configured irc operators.
+ - Only link "nsl" library when really needed.
+ - A new channel mode "secure connections only" (+z) has been implemented:
+ Only clients using a SSL encrypted connection to the server are allowed
+ to join such a channel.
+ But please note three things: a) already joined clients are not checked
+ when setting this mode, b) IRC operators are always allowed to join
+ every channel, and c) remote clients using a server not supporting this
+ mode are not checked either and therefore always allowed to join.
+
+ngIRCd Release 15 (2009-11-07)
+
+ - "ngircd --configtest": print SSL configuration options even when unset.
+
+ ngIRCd 15~rc1 (2009-10-15)
+ - Do not add default listening port (6667) if SSL ports were specified, so
+ ngIRCd can be configured to only accept SSL-encrypted connections now.
+ - Enable IRC operators to use the IRC command SQUIT (insted of the already
+ implemented but non-standard DISCONNECT command).
+ - New configuration option "AllowRemoteOper" (disabled by default) that
+ enables remote IRC operators to use the IRC commands SQUIT and CONNECT
+ on the local server.
+ - Mac OS X: fix test for packagemaker(1) tool in Makefile and use gcc 4.0
+ for Mac OS X 10.4 compatibility in the Xcode project file.
+ - Fix --with-{openssl|gnutls} to accept path names.
+ - Fix LSB header of Debian init script.
+ - Updated doc/Platforms.txt and include new script contrib/platformtest.sh
+ to ease generating platform reports.
+ - Fix connection information for already registered connections.
+ - Enforce upper limit on maximum number of handled commands. This implements
+ a throttling scheme: an IRC client can send up to 3 commands or 256 bytes
+ per second before a one second pause is enforced.
+ - Fix connection counter.
+ - Fix a few error handling glitches for SSL/TLS connections.
+ - Minor fixes to manual pages and documentation.
+
+ngIRCd Release 14.1 (2009-05-05)
+
+ - Security: fix remotely triggerable crash in SSL/TLS code.
+ - BSD start script contrib/ngircd.sh has been renamed to ngircd-bsd.sh.
+ - New start/stop script for RedHat-based distributions:
+ contrib/ngircd-redhat.init, thanks to Naoya Nakazawa <naoya@sanow.net>.
+ - Doxygen: update source code repository link to GIT.
+ - Debian: build ngircd-full-dbg package.
+ - Allow ping timeout quit messages to show the timeout value.
+ - Fix error handling on compressed links.
+ - Fix server list announcement.
+ - Do not remove hostnames from info text.
+
+ngIRCd Release 14 (2009-04-20)
+
+ - Display IPv6 addresses as "[<addr>]" when accepting connections.
+
+ ngIRCd 14~rc1 (2009-03-29)
+ - Updated Debian/Linux init script (see contrib/Debian/ngircd.init).
+ - Allow creation of persistent modeless channels.
+ - The INFO command reports the compile time now (if available).
+ - Spell check and enhance ngIRCd manual pages.
+ - Channel mode changes: break on syntax errors in MODE command.
+ - Support individual channel keys for pre-defined channels: introduce
+ new configuration variable "KeyFile" in [Channel] sections in ngircd.conf,
+ here a file can be configured for each pre-defined channel which contains
+ individual channel keys for different users.
+ - Remove limit on maximum number of predefined channels in ngircd.conf.
+ - Updated ngircd.spec file for building RPM packages.
+ - Add new and missing files to Mac OS X Xcode project, and update project.
+ - Reject masks with wildcard after last dot.
+ - TLS/SSL: remove useless error message when ssl connection is closed.
+ - Fix memory leak when a encrypted and compressed server link goes down.
+ (closes bug #95, reported by Christoph, fiesh@fiesh.homeip.net)
+ - Fix handling of channels containing dots.
+ (closes ug #93, reported by Gonosz Csiga)
+
+ngIRCd Release 13 (2008-12-25)
+
+ - Updated documentation, especially doc/Services.txt and doc/SSL.txt.
+ - Make the test suite work on OpenSolaris.
+
+ ngIRCd 13~rc1 (2008-11-21):
+ - New version number scheme :-)
+ - Initial support for IRC services, using a RFC1459 style interface,
+ tested with IRCServices (http://www.ircservices.za.net/) version 5.1.13.
+ For this to work, ngIRCd now supports server-server links conforming
+ to RFC 1459. New ngircd.conf(5) option: ServiceMask.
+ - Support for SSL-encrypted server-server and client-server links using
+ OpenSSL (configure: --with-openssl) or GNUTLS (configure: --with-gnutls).
+ New ngircd.conf(5) options: SSLPorts, SSLKeyFile, SSLKeyFilePassword,
+ SSLCertFile, SSLDHFile, and SSLConnect.
+ - Server local channels have been implemented, prefix "&", that are only
+ visible to users of the same server and are not visible in the network.
+ In addition ngIRCd creates a "special" channel &SERVER on startup and logs
+ all the messages to it that a user with mode +s receives.
+ - New make target "osxpkg" to build a Mac OS X installer package.
+ - Debug mode: enable support for GNU libc memory tracing (see mtrace(3)).
+ - SysV init script: use LSB logging functions, if available.
+ - Added some more FAQ entries (regarding logging and IRC operators).
+ - Allow IRC operators to overwrite channel limits.
+ - Support for enhanced PRIVMSG and NOTICE message targets.
+ - More tests have been added to the test-suite ("make check"), and two
+ servers are started for testing server-server linking.
+ - Added a timestamp to log messages to the console.
+ - New configuration option "NoIdent" to disable IDENT lookups even if the
+ daemon is compiled with IDENT support.
+
+ngIRCd 0.12.1 (2008-07-09)
+
+ - Allow mixed line terminations (CR+LF/CR/LF) in non-RFC-compliant mode
+ - Don't allow stray \r or \n in command parameters
+ - --configtest: return non-zero exit code if there are errors
+ - Update ngIRCd manual pages
+ - Add option aliases -V (for --version) and -h (for --help).
+ - Fix 'no-ipv6' compile error.
+ - Make Listen parameter a comma-separated list of addresses. This also
+ obsoletes ListenIPv4 and ListenIPv6 options. If Listen is unset, it
+ is treated as Listen="::,0.0.0.0".
+ Note: ListenIPv4 and ListenIPv6 options are still recognized,
+ but ngircd will print a warning if they are used in the config file.
+
+ngIRCd 0.12.0 (2008-05-13)
+
+ - Fix Bug: 85: "WHO #SecretChannel" that user is not a member of now returns
+ proper RPL_ENDOFWHO_MSG instead of nothing. (Ali Shemiran)
+ - Fix compile on FreeBSD 5.4 and AIX.
+ - If bind() fails, also print IP address and not just the port number.
+
+ ngIRCd 0.12.0-pre2 (2008-04-29)
+ - IPv6: Add config options to disable ipv4/ipv6 support.
+ - Don't include doc/CVS.txt in distribution archive, use doc/GIT.txt now!
+ - Documentation: get rid of some more references to CVS, switch to GIT.
+ - Get rid of cvs-version.* and CVSDATE definition.
+ - Report ERR_NOTONCHANNEL when trying to part a channel one is not member of.
+ - Testsuite: remove erroneous ConfUID setting in config file.
+
+ ngIRCd 0.12.0-pre1 (2008-04-20)
+ - Include Mac OS X Xcode project in distribution archives.
+ - Do not exit on SIGHUP or /REHASH if the config file cannot opened.
+ - Add IPv6 support.
+ - Install a LaunchDaemon script to start/stop ngIRCd on Mac OS X.
+ - Implemented IRC commands INFO, SUMMON (dummy), and USERS (dummy) and
+ enhanced test suite to check these commands. (Dana Dahlstrom)
+ - RPL_WHOREPLY messages generated by IRC_WHO didn't include flags (*,@,+).
+ (Dana Dahlstrom)
+ - IRC_WHO now supports search patterns and will test this against user
+ nickname/servername/hostname, etc. as required by RFC 2812, Section 3.6.1.
+ (reported by Dana Dahlstrom)
+ - Add test cases for "WHO" command. (Dana Dahlstrom)
+ - Implement RFC 2812 handling of "0" argument to 'JOIN': must be treated
+ as if the user had sent PART commands for all channels the user is a
+ member of. (Dana Dahlstrom)
+ - Allow NOTICEs to be sent to a channel. (Fabian Schlager)
+
+ngIRCd 0.11.1 (2008-02-26)
+
+ - Fix sending of JOIN commands between servers when remote server appended
+ mode flags. (Rolf Eike Beer) [from HEAD]
+ - Send "G" instead of "H" flag in WHO replies. (reported by Dana Dahlstrom)
+ - Under some circumstances ngIRCd issued channel MODE message with a
+ trailing space. (Dana Dahlstrom) [from HEAD]
+
+ngIRCd 0.11.0 (2008-01-15)
+
+ ngIRCd 0.11.0-pre2 (2008-01-07)
+ - SECURITY: IRC_PART could reference invalid memory, causing
+ ngircd to crash [from HEAD]. (CVE-2008-0285)
+
+ ngIRCd 0.11.0-pre1 (2008-01-02)
+ - Use dotted-decimal IP address if hostname is >= 64.
+ - Add support for /STAT u (server uptime) command.
+ - New [Server] configuration Option "Bind" allows to specify
+ the source IP address to use when connecting to remote server.
+ - New configuration option "MaxNickLength" to specify the allowed maximum
+ length of user nick names. Note: must be unique in an IRC network!
+ - Enhanced the IRC+ protocol to support an enhanced "server handshake" and
+ enable server to recognize numeric 005 (ISUPPORT) and 376 (ENDOFMOTD).
+ See doc/Protocol.txt for details.
+ - Re-added doc/SSL.txt to distribution -- got lost somewhere!?
+ - Fixes the wrong logging output when nested servers are introduced
+ to the network as well as the wrong output of the LINKS command.
+ - Update Mac OS X Xcode project file for Xcode 3.
+ - Adjust test suite to be usable on HP/UX 11.11 :-)
+ - Fix code to compile using K&R C compiler and ansi2kr again.
+ - New config option NoDNS: Disables DNS lookups when clients connect.
+ - Fixed propagation of channel mode 'P' on server links.
+ - Numeric 317: implemented "signon time" (displayed in WHOIS result).
+ - Fixed code that prevented GCC 2.95 to compile ngIRCd.
+ - Adjust path names in manual pages according to "./configure" settings.
+ - Added new server configuration option "Passive" for "Server" blocks to
+ disable automatic outgoing connections (similar to -p option to ngircd,
+ but only for the specified server). (Tassilo Schweyer)
+ - Don't connect to a server if a connection to another server within the
+ same group is already in progress.
+ - Added support for the WALLOPS command. Usage is restricted to IRC
+ operators.
+
+ngIRCd 0.10.4 (2008-01-07)
+
+ - SECURITY: IRC_PART could reference invalid memory, causing
+ ngircd to crash [from HEAD]. (CVE-2008-0285)
+
+ngIRCd 0.10.3 (2007-08-01)
+
+ - SECURITY: Fixed a severe bug in handling JOIN commands, which could
+ cause the server to crash. Thanks to Sebastian Vesper, <net@veoson.net>.
+ (CVE-2007-6062)
+
+ngIRCd 0.10.2 (2007-06-08)
+
+ ngIRCd 0.10.2-pre2 (2007-05-19)
+ - Server links are allowed to use larger write buffers now (up to 50 KB).
+
+ ngIRCd 0.10.2-pre1 (2007-05-05)
+ - Fix compressed server links (broken since 0.10.0).
+ - Predefined Channel configuration now allows specification of channel key
+ (mode k) and maximum user count (mode l).
+ - When using epoll() IO interface, compile in the select() interface as
+ well and fall back to it when epoll() isn't available on runtime.
+ - New configure option "--without-select" to disable select() IO API
+ (even when using epoll(), see above).
+ - Added support for IO APIs "poll()" and "/dev/poll".
+ - Reorganized internal handling of invite and ban lists.
+
+ngIRCd 0.10.1 (2006-12-17)
+
+ - Fixed validation of server names containing digits.
+ - Update the "info text" of the local server after re-reading configuration.
+ - Changed Numerics 265 and 266 to follow ircd 2.11.x "standards".
+ - Allow PASS syntax defined in RFC 1459 for server links, too.
+ - Enhanced ISUPPORT message (005 numeric).
+ - New configuration option "PredefChannelsOnly": if set, clients can only
+ join predefined channels.
+ - Code cleanups: use "LogDebug(...)" instead of "Log(LOG_DEBUG, ...)", use
+ "strcspn()", unsigned vs. signed, use "const", fix whitespaces, ...
+
+ngIRCd 0.10.0 (2006-10-01)
+
+ - Fixed file handle leak when daemon is not able to send MOTD to a client.
+
+ ngIRCd 0.10.0-pre2 (2006-09-09)
+ - Fixed build problems with GCC option -fstack-protector.
+ - Minor documentation updates.
+
+ ngIRCd 0.10.0-pre1 (2006-08-02)
+ - Validate "ServerName" (see RFC 2812, section 2.3.1).
+ - Enhanced DIE to accept a single parameter ("comment text") which is sent
+ to all locally connected clients before the server goes down.
+ - The ngIRCd handles time shifts backwards more gracefully now (the
+ timeout handling doesn't disconnect clients by mistake any more).
+ - Internal: Restructured connection handling (the connection ID is equal
+ to the file descriptor of the connection).
+ - Internal: Simplified resolver code.
+ - JOIN now supports more than one channel key at a time.
+ - Implemented numeric "333": Time and user name who set a channel topic.
+ - Enhanced the handler for PING and PONG commands: fix forwarding and enable
+ back-passing of a client supplied additional argument of PING.
+ - Changed handling of timeouts for unregistered connections: don't reset
+ the counter if data is received and disconnect clients earlier.
+ - Removed unnecessary #define of "LOCAL", now use plain C "static" instead.
+ - Channel topics are no longer limited to 127 characters: now the only limit
+ is the maximum length of an IRC command, i. e. 512 bytes (in practice, this
+ limits the topic to about 490 characters due to protocol overhead).
+ - Reverse DNS lookup code now checks the result by doing an additional
+ lookup to prevent spoofing.
+ - Added new IO layer which (optionally) supports epoll() and kqueue() in
+ addition to the select() interface.
+
+ngIRCd 0.9.2 (2005-10-15)
+
+ - Fixed a bug that could cause the daemon to crash when outgoing server
+ connections can't be established.
+ - Fixed a bug that caused the daemon to leak file descriptors when no
+ resolver subprocesses could be created.
+ - Fixed server NOTICEs to users with "s" mode ("server messages").
+ - Fixed a format string bug in "connection statistics" messages to clients.
+
+ngIRCd 0.9.1 (2005-08-03)
+
+ - The KILL command killed much more than desired (including server links!)
+ when the target user is connected to a remote server. Bug introduced in
+ ngIRCd 0.9.0 ... Reported by <qssl@fastmail.fm>, Thanks!
+ - Changed some constants to be "signed" (instead of unsigned) to solve
+ problems with old (pre-ANSI) compilers.
+
+ngIRCd 0.9.0 (2005-07-24)
+
+ ngIRCd 0.9.0-pre1 (2005-07-09)
+ - Fixed maximum length of user names, now allow up to 9 characters.
+ - Cut off oversized IRC messages that should be sent to the network instead
+ of shutting down the (wrong) connection.
+ - Don't generate error messages for unknown commands received before the
+ client is registered with the server (like the original ircd).
+ - Never run with root privileges but always switch the user ID.
+ - Make "netsplit" messages RFC compliant.
+ - Fix handling of QUIT Messages: send only one message, even if the client
+ is member of multiple channels.
+ - Don't exit server if closing of a socket fails; instead ignore it and
+ pray that this will be "the right thing" ...
+ - Implemented the IRC function "WHOWAS".
+ - Don't enable assert() calls when not ./configure'd with --enable-debug.
+ - Fixed ./configure test for TCP Wrappers: now it runs on Mac OS X as well.
+ - Enhanced configure script: now you can pass an (optional) search path
+ to all --with-XXX parameters, e. g. "--with-ident=/opt/ident".
+ - Removed typedefs for the native C datatypes.
+ Use stdbool.h / inttypes.h if available.
+ - New configuration option "OperServerMode" to enable a workaround needed
+ when running an network with ircd2 servers and "OperCanUseMode" enabled
+ to prevent the ircd2 daemon to drop mode changes of IRC operators.
+ Patch by Florian Westphal, <westphal@foo.fh-furtwangen.de>.
+ - Implemented support for "secret channels" (channel mode "s").
+ - New configuration option "Mask" for [Operator] sections to limit OPER
+ commands to users with a specific IRC mask. Patch from Florian Westphal.
+ - Write "error file" (/tmp/ngircd-XXX.err) only if compiled with debug
+ code ("--enable-debug") and running as daemon process.
+ - Don't create version information string each time a client connects
+ but instead on server startup. By Florian Westphal.
+ - New configuration variable "PidFile", section "[Global]": if defined,
+ the server writes its process ID (PID) to this file. Default: off.
+ Idea of Florian Westphal, <westphal@foo.fh-furtwangen.de>.
+ - Code cleanups from Florian Westphal, <westphal@foo.fh-furtwangen.de>.
+ - Raised the maximum length of passwords to 20 characters.
+ - Fixed a memory leak when resizing the connection pool and realloc()
+ failed. Now we don't fall back to malloc(), which should be sane anyway.
+ Patch from Florian Westphal, <westphal@foo.fh-furtwangen.de>.
+ - Added support for the Howl (http://www.porchdogsoft.com/products/howl/)
+ Rendezvous API, in addition to the API of Apple (Mac OS X). The available
+ API will be autodetected when you call "./configure --with-rendezvous".
+ - Made ngIRCd compile on HP/UX 10.20 with native HP pre-ANSI C compiler and
+ most probably other older C compilers on other systems.
+ - When the daemon should switch to another user ID (ServerID is defined in
+ the configuration file) and is not running in a chroot environment, it
+ changes its working directory to the home directory of this user. This
+ should enable the system to write proper core files when not running with
+ root privileges ...
+
+ngIRCd 0.8.3 (2005-02-03)
+
+ - Fixed a bug that could case a root exploit when the daemon is compiled
+ to do IDENT lookups and is logging to syslog. Bug discovered by CoKi,
+ <coki@nosystem.com.ar>, thanks a lot!
+ (CVE-2005-0226; http://www.nosystem.com.ar/advisories/advisory-11.txt)
+
+ngIRCd 0.8.2 (2005-01-26)
+
+ - Added doc/SSL.txt to distribution.
+ - Fixed a buffer overflow that could cause the daemon to crash. Bug found
+ by Florian Westphal, <westphal@foo.fh-furtwangen.de>. (CVE-2005-0199)
+ - Fixed a possible buffer underrun when reading the MOTD file. Thanks
+ to Florian Westphal, <westphal@foo.fh-furtwangen.de>.
+ - Fixed detection of IRC lines which are too long to send. Detected by
+ Florian Westphal, <westphal@foo.fh-furtwangen.de>.
+ - Fixed return values of our own implementation of strlcpy(). The code has
+ been taken from rsync and they fixed it, but we didn't until today :-/
+ It has only been used when the system didn't implement strlcpy by itself,
+ not on "modern" systems. Florian Westphal, <westphal@foo.fh-furtwangen.de>.
+
+ngIRCd 0.8.1 (2004-12-25)
+
+ - Autoconf: Updated config.guess and config.sub
+ - Added some more debug code ...
+ - Fixed wrong variable names in output of "ngircd --configtest".
+ - Debian: Fixed the name of the "default file" in the init script for
+ ngircd-full packages. And do the test if the binary is executable after
+ reading this file.
+ - Enhanced the "test suite": please have a look at src/testsuite/README!
+
+ngIRCd 0.8.0 (2004-06-26)
+
+ - Fixed wrong buffer size calculation for results of the resolver.
+
+ ngircd 0.8.0-pre2 (2004-05-16)