2 ngIRCd - Next Generation IRC Server
3 http://ngircd.barton.de/
5 (c)2001-2018 Alexander Barton and Contributors.
6 ngIRCd is free software and published under the
7 terms of the GNU General Public License.
13 - Allow IRC Ops and remote servers to KILL service clients: such clients
14 behave like regular users, therefore IRC operators and servers should be
15 able to KILL them: for example to resolve nick collisions.
18 ngIRCd 24 (2017-01-20)
20 ngIRCd 24~rc1 (2017-01-07)
21 - Log privilege violations and failed OPER request with log level "error"
22 and send it to the "&SERVER" channel, too.
23 - Immediately shut down connection when receiving an "ERROR" command,
24 don't wait for the peer to close the connection. This allows the daemon
25 to forward the received "ERROR" message in the network, instead of the
26 very generic "client closed connection" message.
27 - Explicitly forbid remote servers to modify "x-lines" (G-LINES) when the
28 "AllowRemoteOper" configuration option isn't set, even when the command
29 seems to originate from the remote server itself: this prevents GLINE's
30 to become set during server handshake in this case (what wouldn't be
31 possible during regular runtime when a remote IRC Op sends the command)
32 and what can't be undone by IRC Ops later on (because of the missing
33 "AllowRemoteOper" option) ...
34 - Update Xcode project for latest Xcode version (8.0), and fix "duplicate
35 symbols" error messages when building (linking) the binary.
36 - Add "Documentation" variables to systemd configuration files.
37 - Make sure that SYSCONFDIR is always set, which can be handy when
38 using source code linters when ./configure hasn't been run already.
39 - Add the new "PAMServiceName" configuration option to specify the name
40 used as PAM service name. This setting allows to run multiple ngIRCd
41 instances with different PAM configurations for each instance.
42 Thanks to Christian Aistleitner <christian@quelltextlich.at> for the
44 - Add an ".editorconfig" file to the project.
45 - Limit the number of message target, and suppress duplicates: This
46 prevents an user from flooding the server using commands like this:
47 "PRIVMSG nick1,nick1,nick1,...".
48 Duplicate targets are suppressed silently (channels and clients).
49 In addition, the maximum number of targets per PRIVMSG, NOTICE, ...
50 command are limited to MAX_HNDL_TARGETS (25). If there are more, the
51 daemon sends the new 407 (ERR_TOOMANYTARGETS_MSG) numeric, containing
52 the first target that hasn't been handled any more. Closes #187.
53 - Make contrib/platformtest.sh script more portable, and only show
54 "runs=Y" when the test suite really has been passed successfully.
56 ngIRCd 23 (2015-11-16)
58 ngIRCd 23~rc1 (2015-09-06)
59 - Use "NOTICE *" before registration instead of "NOTICE AUTH". "AUTH" is
60 a valid nickname so sending notices to it is probably not a good idea.
61 Use "*" as the target instead as done with numerics when the nick is not
62 available. This mimics the behavior in Charybdis, IRCD-Hybrid, InspIRCd
63 2.2, Plexus 4, etc. Closes #217.
64 The "NoticeAuth" configuration variable (ngircd.conf) has been renamed
65 to "NoticeBeforeRegistration" accordingly, but the old name is still
66 supported for compatibility reasons.
67 - Implement new channel mode "N" (regular users can't change their nick
68 name while on this channel). Closes #214.
69 - Keep track of who placed bans, invites, and excepts.
70 Idea and implementation by LucentW, Thanks! Closes #203.
71 - Implement numeric RPL_LISTSTART(321). lightIRC and other clients
72 expecting RPL_LISTSTART should now behave correctly.
73 Idea and implementation by LucentW, Thanks! Closes #207.
74 - Streamline the effect of "MorePrivacy" option: Update documentation
75 in ngircd.conf(5); don't hide channels for IRC Ops on LIST and don't
76 hide IP addresses/hostnames on WHOIS when "MorePrivacy" is in effect.
78 - IRC operators now can kick anyone when "OperCanMode" is set.
79 Idea and implementation by LucentW, Thanks! Closes #202.
80 - Implement user mode "I": Hide channels on WHOIS: this mode prevents
81 ngIRCd from showing channels on WHOIS (IRC Operators can always see
83 Idea and implementation by LucentW, Thanks! Closes #197.
84 - INVITE command: Implement ERR_USERNOTONSERV(504) numeric and make sure
85 that the target user is on the same server when inviting other users
86 to local ("&") channels.
87 Idea by Cahata, thanks! Closes #183.
88 - MODE command: Always report channel creation time. Up to now when
89 receiving a MODE command, ngIRCd only reported the channel creation
90 time to clients that were members of the channel. This patch reports
91 the channel creation time to all clients, regardless if they are joined
92 to that channel or not. At least ircd-seven behaves like this.
93 This closes #188. Reported by Cahata, thanks!
95 ngIRCd 22.1 (2015-04-06)
97 - Update "CipherList" to not enable SSLv3 by default. Idea, initial patch,
98 and testing by Christoph Biedl <ngircd.anoy@manchmal.in-ulm.de>.
99 - Change ngIRCd test suite not to use DNS lookups: Different operating
100 systems do behave quite differently when doing DNS lookups, for example
101 "127.0.0.1" sometimes resolves to "localhost" and sometimes to
102 "localhost.localdomain" (for example OpenBSD). And other OS resolve
103 "localhost" to the real host name (for example Cygwin). So not using
104 DNS at all makes the test site much more portable.
106 ngIRCd 22 (2014-10-11)
108 - Match all list patterns case-insensitive: this affects the invite-,
109 ban-, and except lists, as well as G-Lines an K-Lines.
110 Problem pointed out by "wowaname" on #ngircd, thanks!
112 ngIRCd 22~rc1 (2014-09-29)
113 - Sync "except lists" between servers: Up to now, ban, invite, and G-Line
114 lists have been synced between servers while linking -- but obviously
115 nobody noticed that except list have been missing ever since. Until now.
116 Thanks to "j4jackj", who reported this issue in #ngircd.
117 - Allow longer user names (up to 63 characters) for authentication.
118 - Increase MAX_SERVERS from 16 to 64: There are installations out there
119 that would like to configure more than 16 links per server, so increase
120 this limit. Best would be to get rid of MAX_SERVERS altogether and make
121 if fully dynamic, but start with this quick and dirty hack ...
122 - Test suite/platformtest.sh: Detect when tests have been skipped.
123 - Allow "DefaultUserModes" to set all possible modes, including modes only
124 settable by IRC Operators.
125 - Implement user mode "F": "relaxed flood protection". Clients with mode
126 "F" set are allowed to rapidly send data to the daemon. This mode is only
127 settable by IRC Operators and can cause problems in the network -- so be
128 careful and only set it on "trusted" clients!
129 User mode "F" is used by Bahamut for this purpose, for example.
130 - Use server password when PAM is compiled in but disabled.
131 - Streamline punctuation of log messages.
132 - Return ISUPPORT(005) numerics on "VERSION". This is how ircd-seven,
133 Charybdis, Hybrid, and InspIRCd behave, for example.
134 - configure: Only link "contrib/Debian" if it exists, which isn't the case
135 on "VPATH builds", for example.
136 - Show the account name in WHOIS. This uses the same numeric as Charybdis
137 and ircu families: WHOISLOGGEDIN(330).
138 - Pattern matching: Remove "range matching" in our pattern matching code
139 using the "[...]" syntax, because [ and ] are valid characters in nick
140 names and one has to quote them currently using the "\" character, which
141 is quite unexpected for users.
142 - platformtest.sh: New option "-x", don't regenerate build system and
143 allow using separate source and build trees.
144 - Test suite: explicitly enable glibc memory checking.
145 - Make "MODE -k" handling more robust and compatible, send "fake '*' key"
147 - portabtest: Actually test the functions snprintf(), strlcpy(), strlcat(),
148 and vsnprintf() for correctness, not only existence (which was quite
149 useless, because if they weren't available, the program could not have
150 been linked at all ...).
151 - Implement new configuration option "Network": it is used to set the
152 (completely optional) "network name", to which this instance of the
153 daemon belongs. When set, this name is used in the ISUPPORT(005) numeric
154 which is sent to all clients connecting to the server after logging in.
155 - Update doc/Platforms.txt.
156 - Various code cleanups, remove unused code, streamline error handling.
157 Remove all imp.h and exp.h header files, support non-standard vsnprintf()
158 return codes, and fix some K&R C portability issues. Streamline
159 DEBUG_ARRAY, DEBUG_BUFFER, DEBUG_IO, DEBUG_ZIP definitions.
160 - Increase penalty time to 10 seconds when handling OPER commands with an
163 ngIRCd 21.1 (2014-03-25)
165 - Don't ignore but use the server password when PAM is compiled in but
166 disabled. Thanks to Roy Sindre Norangshol <roy.sindre@norangshol.no>!
167 - doc/Platforms.txt: Update from master branch.
168 - doc/Services.txt: Update information for Anope 2.x.
169 - configure: add support for the LDFLAGS_END and LIBS_END variables to add
170 linker flags and libraries at the end of the configure run (CFLAGS_END has
171 been implemented already).
172 - Update Copyright notices for 2014 :-)
174 ngIRCd 21 (2013-10-30)
176 - Call arc4random_stir() in forked subprocesses, when available. This
177 is required by FreeBSD <10 and current NetBSD at least to correctly
178 initialize the "arc4" random number generator on these platforms.
180 ngIRCd 21~rc2 (2013-10-20)
181 - Report the correct configuration file name on configuration errors,
182 support longer configuration lines, and warn when lines are truncated.
184 ngIRCd 21~rc1 (2013-10-05)
185 - Actually KILL clients on GLINE/KLINE. (Closes bug #156)
186 - Add support to show all user links using the "STATS L" (uppercase)
187 command (restricted to IRC Operators).
188 - Implement configurable SSL cipher list selection for GnuTLS and OpenSSL
189 using the new configuration option "CipherList". In addition, this
190 changes the defaults to more secure values: "HIGH:!aNULL:@STRENGTH" for
191 OpenSSL, and "SECURE128" for GnuTLS.
192 - Show connection flag "s" (SSL) in RPL_TRACE{LINK|SERVER} messages: now
193 you can check if a server-to-server link is SSL-encrypted or not using
194 the IRC "TRACE" command.
195 - Implement the new configuration option "DefaultUserModes" which lists
196 user modes that become automatically set on new local clients right
197 after login. Please note that only modes can be set that the client
198 could set on itself, so you can't set "a" (away) or "o" (IRC Op),
199 for example! User modes "i" (invisible) or "x" (cloaked) etc. are
200 "interesting", though. (Closes bug #160)
201 - Add support for the new METADATA "account" property, which allows
202 services to automatically identify users after netsplits and across
204 - Implement a new configuration option "AllowedChannelTypes" that lists
205 all allowed channel types (channel prefixes) for newly created channels
206 on the local server. By default, all supported channel types are allowed.
207 If set to the empty string, local clients can't create new channels at
208 all, which equals the old "PredefChannelsOnly = yes" setting.
209 This change deprecates the "PredefChannelsOnly" variable, too, but it is
210 still supported and translated to the appropriate "AllowedChannelTypes"
211 setting. When the old "PredefChannelsOnly" variable is processed, a
212 warning message is logged. (Closes bug #152)
213 - Add support for "client certificate fingerprinting". When a client
214 passes an SSL certificate to the server, the "fingerprint" will be
215 forwarded in the network which enables IRC services to identify the
216 user using this certificate and not using passwords.
217 - Implement a new configuration option "IncludeDir" in the "[Options]"
218 section that can be used to specify a directory which can contain
219 further configuration files and configuration file snippets matching
220 the pattern "*.conf". These files are read in after the main server
221 configuration file ("ngircd.conf" by default) has been read in and
222 parsed. The default is "$SYSCONFDIR/ngircd.conf.d", so that it is
223 possible to adjust the configuration only by placing additional files
224 into this directory. (Closes bug #157)
225 - Add Travis-CI configuration file (".travis.yml") to project.
226 - ngIRCd now accepts user names including "@" characters, saves the
227 unmodified name for authentication but stores only the part in front
228 of the "@" character as "IRC user name". And the latter is how
229 ircd2.11, Bahamut, and irc-seven behave as well. (Closes bug #155)
230 - Lots of IRC "information functions" like ADMIN, INFO, ... now accept
231 server masks and names of connected users (in addition to server names)
232 for specifying the target server of the command. (Closes bug #153)
233 - Implement a new configuration option "IdleTimeout" in the "[Limits]"
234 section of the configuration file which can be used to set a timeout
235 in seconds after which the whole daemon will shutdown when no more
236 connections are left active after handling at least one client.
237 The default is 0, "never".
238 This can be useful for testing or when ngIRCd is started using "socket
239 activation" with systemd(8), for example.
240 - Implement support for systemd(8) "socket activation".
241 - Enable WHOIS to display information about IRC Services using the new
242 numeric 310(RPL_WHOISSERVICE) This numeric is used for this purpose by
243 InspIRCd, for example -- but as usual, other numerics are in use, too,
244 like 613 in UltimateIRCd ...
245 Please note that neither the Operator (+o) not the "bot status" (+B)
246 of an IRC service is displayed in the output.
247 - Update systemd(8) example configuration files in ./contrib/ directory:
248 the "ngircd.service" file now uses the "forking" service type which
249 enhances the log messages shown by "systemctl status ngircd.service",
250 and the new "ngircd.socket" file configures a systemd socket that
251 configures a socket for ngIRCd and launches the daemon on demand.
252 - Enhance help system and the HELP command: now a "help text file" can be
253 set using the new configuration option "HelpFile" ("global" section),
254 which is read in and parsed on server startup and configuration reload,
255 and then is used to output individual help texts to specific topics.
256 Please see the file ./doc/Commands.txt for details.
258 ngIRCd 20.3 (2013-08-23)
260 - This release is a bugfix release only, without new features.
261 - Security: Fix a denial of service bug (server crash) which could happen
262 when the configuration option "NoticeAuth" is enabled (which is NOT the
263 default) and ngIRCd failed to send the "notice auth" messages to new
264 clients connecting to the server (CVE-2013-5580).
266 ngIRCd 20.2 (2013-02-15)
268 - This release is a bugfix release only, without new features.
269 - Security: Fix a denial of service bug in the function handling KICK
270 commands that could be used by arbitrary users to to crash the daemon
273 ngIRCd 20.1 (2013-01-02)
275 - This release is a bugfix release only, without new features.
277 ngIRCd 20 (2012-12-17)
279 - Allow user names ("INDENT") up to 20 characters when ngIRCd has not
280 been configured for "strict RFC mode". This is useful if you are using
281 external (PAM) authentication mechanisms that require longer user names.
282 Patch suggested by Brett Smith <brett@w3.org>, see
283 <http://arthur.barton.de/pipermail/ngircd-ml/2012-October/000579.html>.
285 ngIRCd 20~rc2 (2012-12-02)
286 - Rework cloaked hostname handling and implement the "METADATA cloakhost"
287 subcommand: Now ngIRCd uses two fields internally, one to store the
288 "real" hostname and one to save the "cloaked" hostname. This allows
289 "foreign servers" (aka "IRC services") to alter the real and cloaked
290 hostnames of clients without problems, even when the user itself issues
291 additional "MODE +x" and "MODE -x" commands.
293 ngIRCd 20~rc1 (2012-11-11)
294 - Update doc/Services.txt: describe the upcoming version of Anope 1.9.8,
295 then including a protocol module for ngIRCd. And remove our own patches
296 in ./contrib/Anope because they aren't supported any more ...
297 - Implement new "METADATA" command which can be used by remote servers
298 and IRC services to update client metadata like the client info text
299 ("real name"), user name, and hostname, and use this command to
300 configure an cloaked hostname (user mode "+x") on remote servers:
301 This prevents "double cloaking" of hostnames and even cloaked
302 hostnames are in sync on all servers supporting "METADATA" now.
303 - Implement new IRC "SVSNICK" command to allow remote servers (and IRC
304 services) to change nicknames of already registered users. The SVSNICK
305 command itself doesn't change the nickname, but it becomes forwarded
306 to the server to which the user is connected to. And then this server
307 initiates the real nickname changing using regular NICK commands.
308 This allows to run mixed networks with old servers not supporting the
309 SVSNICK command, because SVSNICK commands for nicknames on such servers
310 are silently ignored and don't cause a desynchronization of the network.
311 - New configuration option "MaxListSize" to configure the maximum number
312 of channels returned by a LIST command. The default is 100, as before.
313 - Implement user mode "b", "block messages": when a user has set mode "b",
314 all private messages and notices to this user are blocked if they don't
315 originate from a registered user, an IRC Op, server or service. The
316 originator gets an error numeric sent back in this case,
317 ERR_NONONREG_MSG (486), which is used by UnrealIRCd, too. (Closes #144)
318 - Implement channel mode "V" (invite disallow): If the new channel mode
319 "V" is set, the INVITE command becomes invalid and all clients get the
320 new ERR_NOINVITE_MSG (518) reply. (Closes #143)
321 - Implement channel mode "Q" and user mode "q": Both modes protect users
322 from channel kicks: only IRC operators and servers can kick users having
323 mode "q" or in channels with mode "Q". (Closes #141)
324 - Allow users to "cloak" their hostname only when the configuration
325 variable "CloakHostModeX" (introduced in 19.2) is set. Otherwise, only
326 IRC operators, other servers, and services are allowed to set the user
327 mode "+x": this prevents regular users from changing their hostmask to
328 the name of the IRC server itself, which confused quite a few people ;-)
330 - New configuration option "OperChanPAutoOp": If disabled, IRC operators
331 don't become channel operators in persistent channels when joining.
332 Enabled by default, which has been the behavior of ngIRCd up to this
334 - Allow IRC operators to see secret (+s) channels in LIST command as long
335 as the "MorePrivacy" configuration option isn't enabled in the
336 configuration file. (Closes #136)
337 - Implement new (optional) IRC+ "CHARCONV" command to set a client
338 character set that the server translates all messages to/from UTF-8.
339 This feature requires the "libiconv" library and must be enabled using
340 the new "--with-iconv" option of the ./configure script. See
341 doc/Protocol.txt for details. (Closes #109)
342 - Implement user mode "B" ("Bot flag"): it is settable and unsettable by
343 every (non-restricted) client. This is how Unreal and InspIRCd do
344 behave, and so do we :-)
345 - Implement channel mode "M": Only the server, identified users and IRC
346 operators are able to talk in such a channel.
347 - Block nicknames that are reserved for services and are defined using the
348 configuration variable "ServiceMask" in "Server" blocks; And this
349 variable now can handle more than one mask separated by commas.
350 - Implemented XOP channel user modes: "Half Op" ("+h", prefix "%") can set
351 the channel modes +imntvIbek and kick all +v and normal users; "Admin"
352 ("+a", prefix "&") can set channel modes +imntvIbekoRsz and kick all +o,
353 +h, +v and normal users; and "Owner" ("+q", prefix "~") can set channel
354 modes +imntvIbekoRsz and kick all +a, +o, +h, +v and normal users.
355 - Implement hashed cloaked hostnames for both the "CloakHost" and
356 "CloakHostModeX" configuration options: now the admin can use the new
357 '%x' placeholder to insert a hashed version of the clients hostname,
358 and the new configuration option "CloakHostSalt" defines the salt for
359 the hash function. When "CloakHostSalt" is not set (the default), a
360 random salt will be generated after each server restart.
362 ngIRCd 19.2 (2012-06-19)
364 ngIRCd 19.2~rc1 (2012-06-13)
365 - New configuration option "CloakHostModeX" to configure the hostname
366 that gets used for IRC clients which have user mode "+x" enabled.
367 Up to now, the name of the IRC server itself has been used for this,
368 which still is the default when "CloakHostModeX" isn't set.
369 - Add instructions for setting up Atheme IRC services.
370 - Implement support for IRC capability handling, the new "CAP" command,
371 and capability "multi-prefix" which allows both the NAME and WHO command
372 handlers to return more than one "class prefix" to the client.
374 ngIRCd 19.1 (2012-03-19)
376 - Really include _all_ patches to build the Anope module into the
377 distribution archive ... ooops!
379 ngIRCd 19 (2012-02-29)
381 ngIRCd 19~rc1 (2012-02-12)
382 - Update preliminary ngIRCd protocol module for Anope 1.9.6, which now
383 is the only supported version.
384 - New numeric RPL_WHOISHOST_MSG(378), which returns the DNS host name
385 (if available) and the IP address of a client in the WHOIS reply.
386 Only the user itself and local IRC operators get this numeric.
387 - Implement channel exception list (mode 'e'). This allows a channel
388 operator to define exception masks that allow users to join the
389 channel even when a "ban" would match and prevent them from joining:
390 the exception list (e) overrides the ban list (b).
391 - Implement user mode 'C': If the target user of a PRIVMSG or NOTICE
392 command has the user mode 'C' set, it is required that both sender
393 and receiver are on the same channel. This prevents private flooding
394 by completely unknown clients.
395 - New RPL_WHOISREGNICK_MSG(307) numeric in WHOIS command replies: it
396 indicates if a nickname is registered (if user mode 'R' set).
397 - Limit channel invite, ban, and exception lists to 50 entries and fix
398 duplicate check and error messages when adding already listed entries
399 or deleting no (longer) existing ones.
400 - Limit the number of list items in the reply of LIST (100), WHO (25),
401 WHOIS (10), and WHOWAS (25) commands.
402 - Limit the MODE command to handle a maximum number of 5 channel modes
403 that require an argument (+Ibkl) per call and report this number
404 in the ISUPPORT(005) numeric: "MODES=5".
405 - LINKS command: support <mask> parameter to limit the reply.
406 - Add 1 second penalty for every further target on PRIVMSG/NOTICE
407 commands: this reduces the possibility of flooding channels with
408 commands like "PRIVMSG/NOTICE #a,#n,#c,... :message" a little bit.
409 Problem noticed by Cahata, thanks!
410 - New configuration option "PAMIsOptional": when set, clients not
411 sending a password are still allowed to connect: they won't become
412 "identified" and keep the "~" character prepended to their supplied
413 user name. See "man 5 ngircd.conf" for details.
414 - Fixed handling of WHO commands. This fixes two bugs: "WHO <nick>"
415 returned nothing at all if the user was "+i" (reported by Cahata,
416 thanks) and "WHO <nick|nickmask>" returned channel names instead
417 of "*" when the user was member of a (visible) channel.
418 - LUSERS reply: only count channels that are visible to the requesting
419 client, so the existence of secret channels is no longer revealed by
420 using LUSERS. Reported by Cahata, thanks!
421 - Unknown user and channel modes no longer stop the mode parser, but
422 are simply ignored. Therefore modes after the unknown one are now
423 handled. This is how ircd2.10/ircd2.11/ircd-seven behave, at least.
424 Reported by Cahata, thanks!
425 - Implement IRC commands "GLINE" and "KLINE" to ban users. G-Lines are
426 synchronized between server on peering, K-Lines are local only.
427 If you use "*!<user>@<host>" or "*!*@<host>" masks, these connections
428 are blocked even before the user is fully logged in (before PASS,
429 NICK, and USER commands have been processed) and before the child
430 processes for authentication are forked, so resource usage is smaller.
431 - Added doc/Modes.txt: document modes supported by ngIRCd.
432 - Implement user mode "R": indicates that the nickname of this user
433 is "registered". This mode isn't handled by ngIRCd itself, but must
434 be set and unset by IRC services like Anope.
435 - Implement channel mode "R": only registered users (having the user
436 mode "R" set) are allowed to join this channel.
437 - Test suite: bind to loopback (127.0.0.1) interface only.
438 - Handle unknown user and channel modes: these modes are saved and
439 forwarded to other servers, but ignored otherwise.
440 - Handle channel user modes 'a', 'h', and 'q' from remote servers.
441 These channel user modes aren't used for anything at the moment,
442 but ngIRCd knows that these three modes are "channel user modes"
443 and not "channel modes", that is that these modes take an "nickname"
444 argument. Like unknown user and channel modes, these modes are saved
445 and forwarded to other servers, but ignored otherwise.
447 ngIRCd 18 (2011-07-10)
449 - Add preliminary ngIRCd protocol module for Anope 1.9 to contrib/Anope/.
451 ngIRCd 18~rc2 (2011-06-29)
452 - GnuTLS: use 1024 bits as minimum size of the DH prime. This enables
453 ngIRCd to accept incoming connections from other servers and clients
454 that "only" use at least 1024 bits again, like ngIRCd 17 did (and no
455 longer requires 2048 bits for incoming connections).
457 ngIRCd 18~rc1 (2011-06-27)
458 - New configuration option "MorePrivacy" to "censor" some user information.
459 When enabled, signon time and idle time is left out. Part and quit
460 messages are made to look the same. WHOWAS requests are silently dropped.
461 All of this is useful if one wish to conceal users that access the ngircd
462 servers from TOR or I2P.
463 - New configuration option "ScrubCTCP" to scrub incoming CTCP commands. If
464 activated, the server silently drops incoming CTCP requests from both
465 other servers and from users. The server that scrubs CTCP will not forward
466 the CTCP requests to other servers in the network either, which can spell
467 trouble if not every oper knows about the CTCP-scrubbing. Scrubbing CTCP
468 commands also means that it is not possible to send files between users.
469 There is one exception to the CTCP scrubbing performed: ACTION ("/me
470 commands") requests are not scrubbed.
471 - Restructure ngIRCd configuration file: introduce new [Limits], [Options],
472 and [SSL] sections. The intention of this restructuring is to make the
473 [Global] section much cleaner, so that it only contains variables that
474 most installations must adjust to the local requirements. All the optional
475 variables are moved to [Limits], for configurable limits and timers of
476 ngIRCd, and [Options], for optional features. All SSL-related variables
477 are moved to [SSL] and the "SSL"-prefix is stripped. The old variables in
478 the [Global] section are deprecated now, but are still recognized.
479 => Don't forget to check your configuration, use "ngircd --configtest"!
480 - New documentation "how to contribute": doc/Contributing.txt.
481 - Avoid needlessly scary 'buffer overflow' messages: When the write buffer
482 space grows too large, ngIRCd has to disconnect the client to avoid
483 wasting too much memory, which is logged with a scary 'write buffer
484 overflow' message. Change this to a more descriptive wording.
485 - New configuration option "RequireAuthPing": PING-PONG on login. When
486 enabled, this configuration option lets ngIRCd send a PING with an numeric
487 "token" to clients logging in; and it will not become registered in the
488 network until the client responds with the correct PONG.
489 - New configuration option "NoticeAuth": send NOTICE AUTH on connect. When
490 active, ngircd will send "NOTICE AUTH" messages on client connect time
491 like e.g. snircd (QuakeNet) does.
492 - Add support for up to 3 targets in WHOIS queries, also allow up to one
493 wildcard query from local hosts. Follows ircd 2.10 implementation rather
494 than RFC 2812. At most 10 entries are returned per wildcard expansion.
495 - ngircd.conf(5) manual page: describe types of configuration variables
496 (booleans, text strings, integer numbers) and add type information to each
497 variable description.
498 - Terminate incoming connections on HTTP commands "GET" and "POST".
499 - New configuration option "CloakHost": when set, this host name is used for
500 every client instead of the real DNS host name (or IP address).
501 - New configuration option "CloakUserToNick": when enabled, ngIRCd sets
502 every clients' user name to their nickname and hides the user name
503 supplied by the IRC client.
504 - Make write buffers bigger, but flush early. Before this change, a client
505 got disconnected if the buffer flushing at 4k failed, now regular clients
506 can store up to 32k and servers up 64k even if flushing is not possible at
507 the moment. This enhances reliability on slow links.
508 - Allow "Port = 0" in [Server] blocks. Port number 0 marks remote servers
509 that try to connect to this daemon, but where this daemon never tries to
510 establish a connection on its own: only incoming connections are allowed.
511 - Enable WHOIS command to return information about services.
512 - Implement channel mode 'O': "IRC operators only". This channel mode is
513 used on DALnet (bahamut), for example.
514 - Remove support for ZeroConf/Bonjour/Rendezvous service registration
515 including the "[No]ZeroConf" configuration option.
516 - Deprecate NoXX-Options in ngircd.conf and move new variants into our new
517 [Options] section: 'NoDNS=no' => 'DNS=yes', 'NoIdent=no' => 'Ident=yes',
518 'NoPAM=no' => 'PAM=yes', and 'NoZeroConf=no' => 'ZeroConf=yes' (and
519 vice-versa). The defaults are adjusted accordingly and the old variables
520 in [Global] are still accepted, so there is no functional change.
522 ngIRCd 17.1 (2010-12-19)
524 - Don't log critical (or worse) messages to stderr
525 - Remove "error file" when compiled with debug code enabled
526 - New numeric 329: get channel creation time on "MODE #chan" commands
528 ngIRCd 17 (2010-11-07)
530 - doc: change path names in sample-ngircd.conf depending on sysconfdir
532 ngIRCd 17~rc2 (2010-10-25)
533 - Generate ngIRCd version number from GIT tag.
534 - Make source code compatible with ansi2knr again. This allows to compile
535 ngIRCd using a pre-ANSI K&R C compiler again.
537 ngIRCd 17~rc1 (2010-10-11)
538 - New configuration option "NoZeroConf" to disable service registration at
539 runtime even if ngIRCd is compiled with support for ZeroConf (e.g. using
540 Howl, Avahi or on Mac OS X).
541 - New configuration option "SyslogFacility" to define the syslog "facility"
542 (the "target"), to which ngIRCd should send its log messages.
543 Possible values are system dependent, but most probably "auth", "daemon",
544 "user" and "local1" through "local7" are possible values; see syslog(3).
545 Default is "local5" for historical reasons.
546 - Dump the "internal server state" (configured servers, established
547 connections and known clients) to the console or syslog when receiving
548 the SIGUSR2 signal and debug mode is enabled.
549 - Enable the daemon to disable and enable "debug mode" on runtime using
550 signal SIGUSR1, when debug code is compiled in, not only on startup
551 using the command line parameters.
552 - Implement user mode "x": host name cloaking (closes: #102).
553 - Change MOTD file handling: ngIRCd now caches the contents of the MOTD
554 file, so the daemon now requires a HUP signal or REHASH command to
555 re-read the MOTD file when its content changed.
556 - Allow IRC ops to change channel modes even without OperServerMode set.
557 - Allow IRC operators to use MODE command on any channel (closes: #100).
558 - New configuration option "NoPAM" to disable PAM.
559 - Implement asynchronous user authentication using PAM, please see the
560 file doc/PAM.txt for details.
561 - Add some documentation for using BOPM with ngIRCd, see doc/Bopm.txt.
562 - Implement user mode "c": receive connect/disconnect NOTICEs. Note that
563 this new mode requires the user to be an IRC operator.
564 - Show SSL status in WHOIS output, numeric 275.
566 ngIRCd 16 (2010-05-02)
568 ngIRCd 16~rc2 (2010-04-25)
569 - Enhance connection statistics counters: display total number of served
570 connections on daemon shutdown and when a new client connects using
571 the new numeric RPL_STATSCONN (250).
573 ngIRCd 16~rc1 (2010-03-25)
574 - Implement WEBIRC command used by some Web-IRC frontends. The password
575 required to secure this command must be configured using the new
576 "WebircPassword" variable in the ngircd.conf file.
577 - Remove limit on max number of configured irc operators.
578 - A new channel mode "secure connections only" (+z) has been implemented:
579 Only clients using a SSL encrypted connection to the server are allowed
580 to join such a channel.
581 But please note three things: a) already joined clients are not checked
582 when setting this mode, b) IRC operators are always allowed to join
583 every channel, and c) remote clients using a server not supporting this
584 mode are not checked either and therefore always allowed to join.
586 ngIRCd 15 (2009-11-07)
588 ngIRCd 15~rc1 (2009-10-15)
589 - Do not add default listening port (6667) if SSL ports were specified, so
590 ngIRCd can be configured to only accept SSL-encrypted connections now.
591 - Enable IRC operators to use the IRC command SQUIT (instead of the already
592 implemented but non-standard DISCONNECT command).
593 - New configuration option "AllowRemoteOper" (disabled by default) that
594 enables remote IRC operators to use the IRC commands SQUIT and CONNECT
596 - Enforce upper limit on maximum number of handled commands. This implements
597 a throttling scheme: an IRC client can send up to 3 commands or 256 bytes
598 per second before a one second pause is enforced.
600 ngIRCd 14.1 (2009-05-05)
602 - Security: fix remotely triggerable crash in SSL/TLS code.
603 - Debian: build ngircd-full-dbg package.
604 - Allow ping timeout quit messages to show the timeout value.
606 ngIRCd 14 (2009-04-20)
608 ngIRCd 14~rc1 (2009-03-29)
609 - Allow creation of persistent modeless channels.
610 - The INFO command reports the compile time now (if available).
611 - Support individual channel keys for pre-defined channels: introduce
612 new configuration variable "KeyFile" in [Channel] sections in ngircd.conf,
613 here a file can be configured for each pre-defined channel which contains
614 individual channel keys for different users.
615 - Remove limit on maximum number of predefined channels in ngircd.conf.
617 ngIRCd 13 (2008-12-25)
619 ngIRCd 13~rc1 (2008-11-21):
620 - New version number scheme :-)
621 - Initial support for IRC services, using a RFC1459 style interface,
622 tested with IRCServices (http://www.ircservices.za.net/) version 5.1.13.
623 For this to work, ngIRCd now supports server-server links conforming
624 to RFC 1459. New ngircd.conf(5) option: ServiceMask.
625 - Support for SSL-encrypted server-server and client-server links using
626 OpenSSL (configure: --with-openssl) or GNUTLS (configure: --with-gnutls).
627 New ngircd.conf(5) options: SSLPorts, SSLKeyFile, SSLKeyFilePassword,
628 SSLCertFile, SSLDHFile, and SSLConnect.
629 - Server local channels have been implemented, prefix "&", that are only
630 visible to users of the same server and are not visible in the network.
631 In addition ngIRCd creates a "special" channel &SERVER on startup and logs
632 all the messages to it that a user with mode +s receives.
633 - New make target "osxpkg" to build a Mac OS X installer package.
634 - New configuration option "NoIdent" to disable IDENT lookups even if the
635 daemon is compiled with IDENT support.
637 ngIRCd 0.12.1 (2008-07-09)
639 - Add option aliases -V (for --version) and -h (for --help).
640 - Make Listen parameter a comma-separated list of addresses. This also
641 obsoletes ListenIPv4 and ListenIPv6 options. If Listen is unset, it
642 is treated as Listen="::,0.0.0.0".
643 Note: ListenIPv4 and ListenIPv6 options are still recognized,
644 but ngircd will print a warning if they are used in the config file.
646 ngIRCd 0.12.0 (2008-05-13)
648 ngIRCd 0.12.0-pre2 (2008-04-29)
649 - IPv6: Add config options to disable ipv4/ipv6 support.
651 ngIRCd 0.12.0-pre1 (2008-04-20)
653 - Install a LaunchDaemon script to start/stop ngIRCd on Mac OS X.
654 - Implemented IRC commands INFO, SUMMON (dummy), and USERS (dummy) and
655 enhanced test suite to check these commands. (Dana Dahlstrom)
656 - IRC_WHO now supports search patterns and will test this against user
657 nickname/server name/host name, etc. as required by RFC 2812, Section 3.6.1.
658 (reported by Dana Dahlstrom)
659 - Implement RFC 2812 handling of "0" argument to 'JOIN': must be treated
660 as if the user had sent PART commands for all channels the user is a
661 member of. (Dana Dahlstrom)
662 - Allow NOTICEs to be sent to a channel. (Fabian Schlager)
664 ngIRCd 0.11.0 (2008-01-15)
666 - Add support for /STAT u (server uptime) command.
667 - New [Server] configuration Option "Bind" allows to specify
668 the source IP address to use when connecting to remote server.
669 - New configuration option "MaxNickLength" to specify the allowed maximum
670 length of user nicknames. Note: must be unique in an IRC network!
671 - Numeric 317: implemented "signon time" (displayed in WHOIS result).
672 - Added new server configuration option "Passive" for "Server" blocks to
673 disable automatic outgoing connections (similar to -p option to ngircd,
674 but only for the specified server). (Tassilo Schweyer)
675 - Added support for the WALLOPS command. Usage is restricted to IRC
678 ngIRCd 0.10.2 (2007-06-08)
680 - Predefined channel configuration now allows specification of channel key
681 (mode k) and maximum user count (mode l): variables "Key" and "MaxUsers".
682 - When using the epoll() IO interface, compile in the select() interface as
683 well and fall back to it when epoll() isn't available on runtime.
684 - Added support for IO APIs "poll()" and "/dev/poll".
686 ngIRCd 0.10.1 (2006-12-17)
688 - Allow PASS syntax defined in RFC 1459 for server links, too.
689 - New configuration option "PredefChannelsOnly": if set, clients can only
690 join predefined channels.
692 ngIRCd 0.10.0 (2006-10-01)
694 ngIRCd 0.10.0-pre1 (2006-08-02)
695 - Enhanced DIE to accept a single parameter ("comment text") which is sent
696 to all locally connected clients before the server goes down.
697 - JOIN now supports more than one channel key at a time.
698 - Implemented numeric "333": Time and user name who set a channel topic.
699 - Channel topics are no longer limited to 127 characters: now the only limit
700 is the maximum length of an IRC command, i. e. 512 bytes (in practice, this
701 limits the topic to about 490 characters due to protocol overhead).
702 - Reverse DNS lookup code now checks the result by doing an additional
703 lookup to prevent spoofing.
704 - Added new IO layer which (optionally) supports epoll() and kqueue() in
705 addition to the select() interface.
707 ngIRCd 0.9.0 (2005-07-24)
709 - Never run with root privileges but always switch the user ID.
710 - Make "netsplit" messages RFC compliant.
711 - Implemented the IRC function "WHOWAS".
712 - New configuration option "OperServerMode" to enable a workaround needed
713 when running an network with ircd2 servers and "OperCanUseMode" enabled
714 to prevent the ircd2 daemon to drop mode changes of IRC operators.
715 Patch by Florian Westphal, <westphal@foo.fh-furtwangen.de>.
716 - Implemented support for "secret channels" (channel mode "s").
717 - New configuration option "Mask" for [Operator] sections to limit OPER
718 commands to users with a specific IRC mask. Patch from Florian Westphal.
719 - New configuration variable "PidFile", section "[Global]": if defined,
720 the server writes its process ID (PID) to this file. Default: off.
721 Idea of Florian Westphal, <westphal@foo.fh-furtwangen.de>.
722 - Added support for the Howl (http://www.porchdogsoft.com/products/howl/)
723 Rendezvous API, in addition to the API of Apple (Mac OS X). The available
724 API will be autodetected when you call "./configure --with-rendezvous".
726 ngIRCd 0.8.0 (2004-06-26)
728 - Two new configuration options: "ChrootDir" and "MotdPhrase", thanks to
729 Benjamin Pineau <ben@zouh.org>. Now you can force the daemon to change
730 its root and working directory to something "safe". MotdPhrase is used
731 to define an "MOTD string" instead of a whole file, useful if the
732 "real" MOTD file would be outside the "jail".
733 - INVITE- and BAN-lists become synchronized between IRC+ servers when
734 establishing new connections, if the peer supports this as well.
735 - The type of service (TOS) of all sockets is set to "interactive" now.
736 - Added short command line option "-t" as alternative to "--configtest".
737 - Added optional support for "IDENT" lookups on incoming connections. You
738 have to enable this function with the ./configure switch "--with-ident".
739 The default is not to do IDENT lookups.
741 ngIRCd 0.7.5 (2003-07-11)
743 - New configuration variable "MaxConnectionsIP" to limit the number of
744 simultaneous connections from a single IP that the server will accept.
745 This configuration options lowers the risk of denial of service attacks
746 (DoS), the default is 5 connections per client IP.
747 - Added new configuration variable "Listen" to bind all listening
748 sockets of the server to a single IP address.
750 ngIRCd 0.7.1 (2003-07-18)
752 - Added support for GNU/Hurd.
754 ngIRCd 0.7.0 (2003-05-01)
756 - New command CONNECT to enable and add server links. The syntax is not
757 RFC-compatible: use "CONNECT <name> <port>" to enable and connect an
758 configured server and "CONNECT <name> <port> <host> <mypwd> <peerpwd>"
759 to add a new server (ngIRCd tries to connect new servers only once!).
760 - Added DISCONNECT command ("DISCONNECT <name>") to disable servers.
761 - New command TRACE (you can trace only servers at the moment).
762 - New command HELP that lists all understood commands.
763 - ngIRCd can register itself with Rendezvous: to enable support pass the
764 new switch "--with-rendezvous" to configure.
765 - Added support for TCP Wrappers library: pass "--with-tcp-wrappers" to
766 configure to enable it.
767 - Changed some configure options to use "--with"/"--without" as prefix
768 instead of "--enable"/"--disable": "--without-syslog", "--without-zlib",
769 "--with-tcp-wrappers", and "--with-rendezvous".
770 - Enhanced manual pages ngircd(8) and ngircd.conf(5).
771 - Documentation is now installed in $(datadir)/doc/ngircd.
774 Older news (sorry, only available in German language):
776 ngIRCd 0.6.0, 24.12.2002
778 - beim Schliessen einer Verbindung zeigt der Server nun vor dem ERROR
779 noch eine Statistik ueber die empfangene und gesendete Datenmenge an.
780 - Connection-Strukturen werden nun "pool-weise" verwaltet; der Pool wird
781 bei Bedarf bis zu einem konfigurierten Limit vergroessert.
782 - Mit der neuen Konfigurationsvariable "MaxConnections" (Sekion "Global")
783 kann die maximale Anzahl gleichzeitiger Verbindungen begrenzt werden.
784 Der Default ist -1, "unlimitiert".
785 - der Server erkennt nun, ob bereits eine eingehende Verbindung von einem
786 Peer-Server besteht und versucht dann nicht mehr, selber eine eigene
787 ausgehende Verbindung zu diesem auufzubauen. Dadurch kann nun auf beiden
788 Servern in der Konfiguration ein Port fuer den Connect konfiguriert
789 werden (beide Server versuchen sich dann gegenseitig zu connectieren).
790 - Server identifizieren sich nun mit asynchronen Passwoertern, d.h. das
791 Passwort, welches A an B schickt, kann ein anderes sein als das, welches
792 B als Antwort an A sendet. In der Konfig.-Datei, Abschnitt "Server",
793 wurde "Password" dazu durch "MyPassword" und "PeerPassword" ersetzt.
794 - Der Server kann nun zur Laufzeit die Konfiguration neu einlesen: dies
795 macht er nach dem Befehl REHASH oder wenn ein HUP-Signal empfangen wird.
796 - Server-Server-Links koennen nun komprimiert werden, dazu wird die zlib
797 (www.zlib.org) benoetigt. Unterstuetzt die Gegenseite die Komprimierung
798 nicht, wird automatisch unkomprimiert kommuniziert. Das Verfahren ist
799 kompatibel mit dem Original-ircd 2.10.3, d.h. beide Server koennen
800 miteinander ueber komprimiert Links kommunizieren.
801 - neue Konfigurations-Variable "MaxJoins": Hiermit kann die maximale Zahl
802 der Channels, in denen ein User Mitglied sein kann, begrent werden.
803 - neue Channel-Modes l (User-Limit) und k (Channel-Key) implementiert.
805 ngIRCd 0.5.0, 20.09.2002
807 - AIX (3.2.5), HP-UX (10.20), IRIX (6.5), NetBSD (1.5.3/m68k) und Solaris
808 (2.5.1, 2.6) gehoeren nun auch zu den unterstuetzten Platformen.
809 - Unter A/UX (und evtl. weiteren Systemen) kompiliert der ngIRCd nun mit
810 dem "nativen" (ggf. pre-ANSI) Compiler.
811 - "persistente Channels" (Mode 'P') implementiert: diese koennen in der
812 Konfigurationsdatei definiert werden (Sektion "Channel", vgl. Beispiel-
813 Konfiguration "sample-ngircd.conf") und bleiben auch dann bestehen,
814 wenn kein User mehr im Channel ist.
815 - neue IRC-Befehle: KICK, INVITE, ADMIN, CHANINFO; LIST wurde erweitert.
816 Mit dem neuen Befehl CHANINFO synchronisieren Server, die das IRC+-
817 Protokoll unterstuetzen, Channel-Modes und Topics. Fuer den ADMIN-Befehl
818 gibt es neue Konfigurationsoptionen (Sektion "Global"): "AdminInfo1",
819 "AdminInfo2" und "AdminEMail".
820 - Invite- und Ban-Lists implementiert.
821 - neue Konfigurationsoption "OperCanUseMode" (Sektion "Global"):
822 ist sie aktiv, koennen IRC-Operatoren immer Channel-Modes setzen.
823 - "Test-Suite" begonnen: mit "make check" wird sie durchlaufen.
825 ngIRCd 0.4.2, 29.04.2002
827 - IRC-Funktion LIST implementiert; bisher werden allerdings noch keine
828 Regular Expressions (bis auf "*") unterstuetzt.
830 ngIRCd 0.4.0, 01.04.2002
832 - WHO implementiert (bisher ohne komplette Unterstuetzung von Masks).
833 - stderr wird nun in eine Datei umgelenkt (/ngircd-<PID>.err).
834 Laeuft der Server nicht im Debug-Modus, so wird diese bei Programm-
835 ende geloescht. Sollte der Server abstuerzen, finden sich hier evtl.
836 zusaetzliche Informationen.
837 - Server-Gruppen implementiert: es wird immer nur zu einem Server in
838 einer Gruppe eine Verbindung aufgebaut, klappt es beim ersten Server
839 nicht, so wird der naechste probiert.
840 - Clients und Channels werden nicht mehr ueber ihren Namen, sondern
841 einen Hash-Wert gesucht: sollte deutlich schneller sein.
842 - neuer Kommandozeilen-Parameter "--configtest": die Konfiguration wird
843 gelesen und die dann verwendeten Werte angezeigt.
844 - Client-Mode "s" (Server Notices) implementiert.
845 - mit dem neuen Kommandozeilen-Parameter "--config"/"-f" kann eine
846 alternative Konfigurationsdatei angegeben werden.
847 - nach dem Start kann der ngIRCd, wenn er mit root-Rechten laeuft,
848 zu einer anderen User-ID und Group-ID wechseln.
850 ngIRCd 0.3.0, 02.03.2002
852 - bekommt der Server ein HUP-Signal, so startet er neu -- genau so, wie
853 er auf den IRC-Befehl RESTART reagiert.
854 - neuer Kommandozeilen-Schalter "--passive" (-p): wird er angegeben, so
855 verbindet sich der ngIRCd nicht mehr automatisch zu anderen Servern.
856 Zum Debuggen manchmal ganz praktisch :-)
857 - neue Befehle VERSION und KILL implementiert. NAMES korrigiert.
858 - Anpassungen an A/UX: gehoert nun auch zu den unterstuetzten Platformen.
859 - AWAY (und der User-Mode 'a') ist nun implementiert.
860 - der ngIRCd unterstuetzt nun Channel-Topics (TOPIC-Befehl).
861 - Channel- und Nicknames werden nun ordentlich validiert.
863 ngIRCd 0.2.0, 15.02.2002
865 - Begonnen Channel-Modes und User-Channel-Modes zu implementieren: der
866 Server versteht an User-Modes o und v, beachtet letzteres allerdings
867 noch nirgends. Bekannte (aber nicht beachtete!) Channel-Modes sind
868 bisher a, m, n, p, q, s und t. Diese Modes werden von Usern ange-
869 nommen, von anderen Servern werden auch unbekannte Modes uebernommen.
870 - Nach dem Connect eines Users werden LUSERS-Informationen angezeigt.
872 ngIRCd 0.1.0, 29.01.2002
874 - Channels implementiert, bisher jedoch noch ohne Channel-Modes, d.h.
875 es gibt keine Channel-Ops, kein Topic, kein "topic lock" etc. pp.
876 Chatten in Channels ist aber natuerlich moeglich ;-)
877 Dadurch zum Teil groessere Aenderungen an bisherigen Funktionen.
878 - neue Befehle fuer Channles: JOIN, PART und NJOIN.
879 - FAQ.txt in doc/ begonnen.
881 ngIRCd 0.0.3, 16.01.2002
883 - Server-Links vollstaendig implementiert: der ngIRCd kann nun auch
884 "Sub-Server" haben, also sowohl als Leaf-Node als auch Hub in einem
885 IRC-Netzwerk arbeiten.
886 - WHOIS wird nun immer an den "Original-Server" weitergeleitet.
887 - Parser handhabt Leerzeichen zw. Parametern nun etwas "lockerer".
888 - Kommandozeilen-Parser: Debug- und No-Daemon-Modus, Hilfe.
889 - ngIRCd wandelt sich nun in einen Daemon (Hintergrundprozess) um.
890 - neue Befehle: LUSERS, LINKS.
892 ngIRCd 0.0.2, 06.01.2002
894 - neuer Aufbau der Konfigurationsdatei,
895 - mehrere IRC-Operatoren koennen konfiguriert werden,
896 - Server-Links teilweise implementiert. Bisher kann der ngIRCd jedoch
897 nur "leafed server" sein, d.h. keine "Client-Server" haben.
899 ngIRCd 0.0.1, 31.12.2001
901 - erste oeffentliche Version von ngIRCd als "public preview" :-)