ports/177506: irc/unreal: Update UnrealIRCD to 3.2.10.1
JR Aquino
tanawts at gmail.com
Sat Aug 10 18:10:01 UTC 2013
The following reply was made to PR ports/177506; it has been noted by GNATS.
From: JR Aquino <tanawts at gmail.com>
To: bug-followup at freebsd.org, Jr Aquino <tanawts at gmail.com>, lippe at freebsd.org
Cc:
Subject: Re: ports/177506: irc/unreal: Update UnrealIRCD to 3.2.10.1
Date: Sat, 10 Aug 2013 11:02:55 -0700
--001a11c1ba4a59867e04e39bb3e2
Content-Type: text/plain; charset=ISO-8859-1
Unreal3.2.10.1 Release Notes
=============================
==[ GENERAL INFORMATION ]==
- If you are upgrading on *NIX, then make sure you run 'make clean' and
'./Config' first, before running 'make'.
- The official UnrealIRCd documentation is doc/unreal32docs.html
online version at: http://www.vulnscan.org/UnrealIRCd/unreal32docs.html
FAQ: http://www.vulnscan.org/UnrealIRCd/faq/
Read them before asking for help.
- Report bugs at http://bugs.unrealircd.org/
- The purpose of the sections below (NEW, CHANGED, MINOR, etc) is to be a
SUMMARY of the changes in this release. There have been 79 changes in
total, for the full list of changes see the Changelog.
==[ .1 RELEASE]==
The following bugs in version 3.2.10 were fixed in this 3.2.10.1 release:
- Windows only: outgoing connects from Windows caused severe linking issues,
including killing of (ghost) users on the Windows server.
- An issue where user modes were stripped from remote clients, this caused
a problem for Anope BotServ bots.
- A compile problem on OpenBSD.
- '/REHASH -global' did not rehash all servers.
- Some documentation updates.
These were the only changes in 3.2.10.1.
Below is a summary of all changes with respect to 3.2.9:
==[ NEW ]==
- Improved socket engine. This brings some performance improvements and
also makes it easier to configure a system to hold more than 1024
clients (no more editing of header files on Linux!).
- ESVID support: services can communicate the account name of the user
back to the IRCd. This only works on ESVID-capable services:
- Extban ~a:<accountname>: matches users who are logged in to services
with that account name.
- Show account name in /WHOIS
- CAP support: this enables clients to enable certain features more easily.
Can be disabled through set::options::disable-cap.
- Now that STARTTLS is advertised in CAP it is likely to be used more often.
- away-notify: informs clients of AWAY state changes of users on the same
channels, for clients that support this.
- account-notify: similar to away-notify, inform clients of changes in the
login status and account name used by other clients on the same channels.
- SASL support. To use this, and if your services support this, you point
set::sasl-server to your services server.
- Server-side MLOCK support: the IRCd will prevent channel mode changes
depending on the MLOCK setting in services. Requires special support
from services for this feature.
- User Mode +I (IRCOp only): hide idle time
- auth-method 'sslclientcertfp': authenticate users using an SSL client
certificate by the SHA256 fingerprint of that certificate.
The documentation has a new section (3.19) called 'Authentication Types'
which contains an (improved) example of how to use SSL client certificate
authentication instead of regular passwords.
- oper::require-modes: an optional setting, which can be used to require
users to have certain user modes (such as 'z') before they can /OPER up.
- allow/deny channel: you can now optionally specify a class here as an
extra filter.
- doc/example.es.conf: Spanish translation of example configuration file.
- There have also been some behavior changes, which can be considered NEW,
see next section (CHANGED).
==[ CHANGED ]==
- Anti-spoof protection (ping cookies) can now be enabled/disabled at
run-time through set::ping-cookie [yes|no]. The default is 'yes'
(enabled).
- A quit with 'Ping timeout' now shows the number of seconds since the ping.
- Print out a warning if we can't write to a log file.
- Refuse to boot if we can't write to ANY log file.
- Windows: if an SSL certificate exists, then uncheck the 'generate SSL
certificate' checkbox by default.
- *NIX with SSL: We now ask in ./Config if you want to generate an SSL
certificate. The certificate is then copied when you run 'make install'.
==[ MAJOR BUGS FIXED ]==
- Windows SSL crash (this issue was already fixed in 3.2.9-SSL-fix)
- Other than that, none?
==[ MINOR BUGS FIXED ]==
- Various compile problems, in particular with remote includes enabled.
- Windows: the installer sometimes insisted that the Visual C++ 2008
redistributable package was not installed, when it actually was there.
- Windows: MOTD file date/time was always showing up as 1/1/1970.
- And more... see Changelog
==[ REMOVED / DROPPED ]==
- Windows 9X is no longer supported
- The networks/ directory has been removed
==[ KNOWN ISSUES ]==
- Regexes: Be careful with backreferences (\1, etc), certain regexes can
slow the IRCd down considerably and even bring it to a near-halt.
In the spamfilter user target it's usually safe though.
Slow spamfilter detection can help prevent the slowdown/freeze, but
might not work in worst-case scenario's.
- Regexes: Possessive quantifiers such as, for example, "++" (not to be
confused with "+") are not safe to use, they can easily freeze the IRCd.
==[ ADDITIONAL INFO ]==
- See Changelog for more details
On Sat, Aug 10, 2013 at 10:55 AM, JR Aquino <tanawts at gmail.com> wrote:
> Here is the final corrected patch. It updates to UnrealIRCD 3.2.10.1. I
> tested it several times to make sure it worked.
>
> Notice that it removes unreal/files/patch-makenet so please be sure to
> apply with: patch -E < patch.txt
>
> Please let me know if there is anything else that I need to do.
>
--001a11c1ba4a59867e04e39bb3e2
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
<div dir=3D"ltr"><div>Unreal3.2.10.1 Release Notes</div><div>=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
</div><div><br></div><div>=3D=3D[ GENERAL INFORMATION ]=3D=3D</div><div>- I=
f you are upgrading on *NIX, then make sure you run 'make clean' an=
d</div>
<div>=A0 './Config' first, before running 'make'.</div><div=
>- The official UnrealIRCd documentation is doc/unreal32docs.html</div><div=
>=A0 online version at: <a href=3D"http://www.vulnscan.org/UnrealIRCd/unrea=
l32docs.html">http://www.vulnscan.org/UnrealIRCd/unreal32docs.html</a></div=
>
<div>=A0 FAQ: <a href=3D"http://www.vulnscan.org/UnrealIRCd/faq/">http://ww=
w.vulnscan.org/UnrealIRCd/faq/</a></div><div>=A0 Read them before asking fo=
r help.</div><div>- Report bugs at <a href=3D"http://bugs.unrealircd.org/">=
http://bugs.unrealircd.org/</a></div>
<div>- The purpose of the sections below (NEW, CHANGED, MINOR, etc) is to b=
e a</div><div>=A0 SUMMARY of the changes in this release. =A0There have bee=
n 79 changes in</div><div>=A0 total, for the full list of changes see the C=
hangelog.</div>
<div><br></div><div>=3D=3D[ .1 RELEASE]=3D=3D</div><div>The following bugs =
in version 3.2.10 were fixed in this 3.2.10.1 release:</div><div>- Windows =
only: outgoing connects from Windows caused severe linking issues,</div><di=
v>=A0 including killing of (ghost) users on the Windows server.</div>
<div>- An issue where user modes were stripped from remote clients, this ca=
used</div><div>=A0 a problem for Anope BotServ bots.</div><div>- A compile =
problem on OpenBSD.</div><div>- '/REHASH -global' did not rehash al=
l servers.</div>
<div>- Some documentation updates.</div><div>These were the only changes in=
3.2.10.1.</div><div><br></div><div>Below is a summary of all changes with =
respect to 3.2.9:</div><div><br></div><div>=3D=3D[ NEW ]=3D=3D</div><div>- =
Improved socket engine. This brings some performance improvements and</div>
<div>=A0 also makes it easier to configure a system to hold more than 1024<=
/div><div>=A0 clients (no more editing of header files on Linux!).</div><di=
v>- ESVID support: services can communicate the account name of the user</d=
iv>
<div>=A0 back to the IRCd. This only works on ESVID-capable services:</div>=
<div>=A0 - Extban ~a:<accountname>: matches users who are logged in t=
o services</div><div>=A0 =A0 with that account name.</div><div>=A0 - Show a=
ccount name in /WHOIS</div>
<div>- CAP support: this enables clients to enable certain features more ea=
sily.</div><div>=A0 Can be disabled through set::options::disable-cap.</div=
><div>- Now that STARTTLS is advertised in CAP it is likely to be used more=
often.</div>
<div>- away-notify: informs clients of AWAY state changes of users on the s=
ame</div><div>=A0 channels, for clients that support this.</div><div>- acco=
unt-notify: similar to away-notify, inform clients of changes in the</div>
<div>=A0 login status and account name used by other clients on the same ch=
annels.</div><div>- SASL support. To use this, and if your services support=
this, you point</div><div>=A0 set::sasl-server to your services server.</d=
iv>
<div>- Server-side MLOCK support: the IRCd will prevent channel mode change=
s</div><div>=A0 depending on the MLOCK setting in services. Requires specia=
l support</div><div>=A0 from services for this feature.</div><div>- User Mo=
de +I (IRCOp only): hide idle time</div>
<div>- auth-method 'sslclientcertfp': authenticate users using an S=
SL client</div><div>=A0 certificate by the SHA256 fingerprint of that certi=
ficate.</div><div>=A0 The documentation has a new section (3.19) called =
9;Authentication Types'</div>
<div>=A0 which contains an (improved) example of how to use SSL client cert=
ificate</div><div>=A0 authentication instead of regular passwords.</div><di=
v>- oper::require-modes: an optional setting, which can be used to require<=
/div>
<div>=A0 users to have certain user modes (such as 'z') before they=
can /OPER up.</div><div>- allow/deny channel: you can now optionally speci=
fy a class here as an</div><div>=A0 extra filter.</div><div>- doc/example.e=
s.conf: Spanish translation of example configuration file.</div>
<div>- There have also been some behavior changes, which can be considered =
NEW,</div><div>=A0 see next section (CHANGED).</div><div><br></div><div>=3D=
=3D[ CHANGED ]=3D=3D</div><div>- Anti-spoof protection (ping cookies) can n=
ow be enabled/disabled at</div>
<div>=A0 run-time through set::ping-cookie [yes|no]. The default is 'ye=
s' (enabled).</div><div>- A quit with 'Ping timeout' now shows =
the number of seconds since the ping.</div><div>- Print out a warning if we=
can't write to a log file.</div>
<div>- Refuse to boot if we can't write to ANY log file.</div><div>- Wi=
ndows: if an SSL certificate exists, then uncheck the 'generate SSL</di=
v><div>=A0 certificate' checkbox by default.</div><div>- *NIX with SSL:=
We now ask in ./Config if you want to generate an SSL</div>
<div>=A0 certificate. The certificate is then copied when you run 'make=
install'.</div><div><br></div><div>=3D=3D[ MAJOR BUGS FIXED ]=3D=3D</d=
iv><div>- Windows SSL crash (this issue was already fixed in 3.2.9-SSL-fix)=
</div>
<div>- Other than that, none?</div><div><br></div><div>=3D=3D[ MINOR BUGS F=
IXED ]=3D=3D</div><div>- Various compile problems, in particular with remot=
e includes enabled.</div><div>- Windows: the installer sometimes insisted t=
hat the Visual C++ 2008</div>
<div>=A0 redistributable package was not installed, when it actually was th=
ere.</div><div>- Windows: MOTD file date/time was always showing up as 1/1/=
1970.</div><div>- And more... see Changelog</div><div><br></div><div>=3D=3D=
[ REMOVED / DROPPED ]=3D=3D</div>
<div>- Windows 9X is no longer supported</div><div>- The networks/ director=
y has been removed</div><div><br></div><div>=3D=3D[ KNOWN ISSUES ]=3D=3D</d=
iv><div>- Regexes: Be careful with backreferences (\1, etc), certain regexe=
s can</div>
<div>=A0 slow the IRCd down considerably and even bring it to a near-halt.<=
/div><div>=A0 In the spamfilter user target it's usually safe though.</=
div><div>=A0 Slow spamfilter detection can help prevent the slowdown/freeze=
, but</div>
<div>=A0 might not work in worst-case scenario's.</div><div>- Regexes: =
Possessive quantifiers such as, for example, "++" (not to be</div=
><div>=A0 confused with "+") are not safe to use, they can easily=
freeze the IRCd.</div>
<div><br></div><div>=3D=3D[ ADDITIONAL INFO ]=3D=3D</div><div>- See Changel=
og for more details</div></div><div class=3D"gmail_extra"><br><br><div clas=
s=3D"gmail_quote">On Sat, Aug 10, 2013 at 10:55 AM, JR Aquino <span dir=3D"=
ltr"><<a href=3D"mailto:tanawts at gmail.com" target=3D"_blank">tanawts at gma=
il.com</a>></span> wrote:<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex"><div dir=3D"ltr">Here is the final corrected=
patch. =A0It updates to UnrealIRCD 3.2.10.1. I tested it several times to =
make sure it worked.<div>
<br></div><div>Notice that it removes=A0unreal/files/patch-makenet so pleas=
e be sure to apply with: patch -E < patch.txt</div>
<div><br></div><div>Please let me know if there is anything else that I nee=
d to do.</div></div>
</blockquote></div><br></div>
--001a11c1ba4a59867e04e39bb3e2--
More information about the freebsd-ports-bugs
mailing list