Unreal3.2.6 released

[Bram M. (Syzop) <sy...@un...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

As an (early) Christmas present we've released UnrealIRCd 3.2.6.
This release comes with tons of bugfixes and is a recommended upgrade.

Our coders contest held after previous release has resulted in two new
coders in our team. Welcome aquanight and Trocotronic!

I'd like to stress that contributors are still very much welcomed,
especially C coders willing to spend time on making patches for bugs
or features. As a contributor you can work on things anytime you
please, without having to become an official coder with all it's
added responsibilities.
While we now have two new coders, and 2-3 contributors, it's still far
from ideal and not entirely what we hoped for. To be able to have an
Unreal 3.3 release in 12-18 months we would really need some extra help.
See http://dev.unrealircd.com/wiki/how_to_help_out for more information.
If you still have any questions or doubts on how to help out as a C coder
or what procedures to follow, then don't hesitate to email me at
sy...@un...

Release notes follow...

 Unreal3.2.6 Release Notes
 ==========================

 ==[ GENERAL INFORMATION ]==
 - If you are upgrading on *NIX, make sure you run 'make clean' and './Config'
   first before doing 'make'
 - The official UnrealIRCd documentation is doc/unreal32docs.html
   online version at: http://www.vulnscan.org/UnrealIRCd/unreal32docs.html
   FAQ: http://www.vulnscan.org/UnrealIRCd/faq/
   Read them before asking for help.
 - Report bugs at http://bugs.unrealircd.org/
 - When upgrading a network, we assume you are upgrading from the previous
   version (3.2.5). Upgrading from 3.2.3 or 3.2.4 should be ok as well.
   However, if you have a network running with servers that are several versions behind
   (eg: 3.2.1) then you might experience small (desynch) problems.
   Please also minimize the time you have multiple versions running, a few days or
   one week is generally not a problem, but having mixed versions on a network for several
   weeks or months is not recommended.
 - The purpose of the sections below (NEW, CHANGED, MINOR, etc) is to be a SUMMARY of
   the changes in this release. There have been 80+ changes, and trying to mention them
   all would be useless, see the CHANGELOG section for the full list of changes.

 ==[ NEW ]==
 - None. Except some behavior changes, see next.

 ==[ CHANGED ]==
 - SSL: The server certificate and keys can now be reloaded via '/REHASH -ssl', no
   restart needed anymore.
 - IRCOps can now view the bans of a channel ("MODE #channel b") from the outside
 - Moved failed /OPER attempt notices to snomask +o and made them sent to all servers.
   This means all failed oper attempts can now be seen globally. Plus, the UID is now
   always shown (like for incorrect host and maxlogin), unless trying an unknown oper acc.
 - The annoying "please type /quote pong" message is now no longer shown on connect, unless
   explicitly enabled by setting set::pingpong-warning to 'yes'. (mainly Windows)
 - /INVITE's from people on the silence list are now silently ignored
 - SAPART now works for multiple channels (again)
 - Non-SSL users are now kicked when netsynching and channel is +z (SSL only)
 - No longer showing server numerics in /MAP to non-opers (too confusing anyway)
 - Updated ukrainian-w1251, belarussian-w1251 and catalan character sets
 - Spamfilter + IPv6: for target 'u' (nick!user@host:realname bans), the 'host' part
   is now in brackets if it's an IPv6 address (eg: blah!blah@[1:2:3:4:5:6:7:8]:hello)
 - loadmodule errors are improved
 - Snomask 'N' will no longer show nick changes of U-lined servers
 - The set::dns block is now no longer mandatory, because it is actually not used
   (except for set::dns::bind-ip) and fetched from /etc/resolv.conf (*NIX) or the
   registry (Windows) instead. This has always been the case, but has never been documented.
 - Various doc updates ('/HELPOP ?EXTBANS', and some unreal32docs improvements)

 ==[ MAJOR BUGS FIXED ]==
 - Crash if link::options::quarantine was used
 - Another crash which could happen in some rare cases
 - Throttling was not always being applied correctly
 - Windows 2003: Fixed crash on-boot if no nameserver was set
 - Windows: Fixed /RESTART not always working properly (leaving the ircd dead)

 ==[ MINOR BUGS FIXED ]==
 - Remote includes: should now work with latest curl again, due to c-ares upgrade
 - a bunch of OperOverride bugs.. messages being sent when they shouldn't, some things
   not being logged or broadcasted, and more.
 - Sometimes no message was shown when a link to an SSL server failed
 - Desynch problem caused by +Q
 - SAJOIN now properly deals with +z channels
 - "MODE #channel" showing extended channel mode parameters if not in channel
 - Channel Mode 'f' did not properly eat a parameter on unset (even though it would
   show like it did), this could have caused desynchs in some cases.
 - Fixed handling of CNAME's once again (now showing original name instead of fwded name)
 - The "looking up your hostname" message was always sent, regardless of show-connect-info
 - deny link { } blocks were being ignored by autoconnect
 - Windows: SSL private key prompt caused a crash
 - Windows: Unable to write to service.log caused a crash
 - set::allowed-nickchars could cause a segfault for some unknown languages
 - If class::connfreq was omitted and used for a server link, this would cause a huge
   connection flood when autoconnect was used.
 - set::dns::bind-ip was seen as a duplicate when it actually wasn't
 - And more... see Changelog

 ==[ KNOWN ISSUES ]==
 - Regexes: Be careful with backreferences (\1, etc), certain regexes can slow the IRCd
   down considerably and even bring it to a near-halt. In the spamfilter user target it's
   usually safe though.
 - Regexes: Possessive quantifiers such as, for example, "++" (not to be confused with "+")
   are not safe to use, they can easily freeze the IRCd.

 ==[ SERVICES / CODERS ]==
 - Note: this is a new section, it describes changes specifically for services coders
   and unreal module coders. Note that other changes (such as new modes, etc) mentioned
   elsewhere in this document might affect you as well. For more info about a particular
   change mentioned below (such as a new hooktype), see the Changelog.
 - New hooktype: HOOKTYPE_SILENCED (called when a message is not delivered due to silence)
 - New hooktype: HOOKTYPE_POST_SERVER_CONNECT (called after users synched to remote server)
 - Fixed CALLBACKTYPE_CLOAK_EX, wasn't working properly at all
 - Fixed SVSNICK: cAsE cHaNgE no longer causes a collision, fixed QUIT not being sent
 - SVSMODE/SVS2MODE: when doing -x on a user, the virthost is removed from memory.
   This means services can now properly "unvhost" a user and give them back their cloaked
   host by doing "SVSMODE User -x+x".
 - Services timestamps for users are now properly treated as unsigned long, previously
   some trouble could arise when netsynching for values larger than 2147483647.
 - 'SVSMOTD !' now removes the svsmotd from memory as well.
 - Fixed SVSMODE -b User not always removing all bans for that user (specifically, bans on
   the cloaked host, when the user has a vhost).
 - Fixed SVSO - not removing coadmin (+C)

 ==[ CHANGELOG ]==
 Changes sine 3.2.5:
 - c-ares resolver: upgrade from 1.3.0 to 1.3.1. This mainly fixes compile problems,
   including one reported by frigola on an old Sun Cobalt RAQ3.
   It will probably also fix an issue with the just released curl 7.15.4, if compiling
   with remote includes.
   TODO: Update win32 (not urgent)
 - Added HOOKTYPE_SILENCED: this is called whenever a message did not get delivered to a user
   because the user was on the silence list.
 - Added OpenBSD 3.9 to the supported OS list.
 - Made it so undefining SHOW_SECRET (not the default) properly hides +s channels from ircops
   (except netadmins), as it should. Reported and patch supplied by Jason (#0002965).
 - Fixed tld::options:: not working properly, reported by DelGurth (#0003003).
 - Fixed problem with oper as chanadmin kicking himself causing an operoverride notice,
   reported by Bock (as part of #2889).
 - Fixed desynch problem with +Q, reported by tabrisnet (#0002992).
 - Updated doc/coding-guidelines
 - Added bugs.* url to /info, was still showing some email address.
 - Fixed forgotten operoverride logmessage (kick if chan +Q), reported in #2889.
 - Fixed operoverride message if oper is +h and -h's himself, reported by Bock (#2889).
 - Fixed SVSMODE -b [user] not always removing all bans (specificly, bans on the cloaked
   host when you have a vhost), a code cleanup was also done. Based on patch from tabrisnet.
   Reported by Rob (#0002981).
 - MARK: 3.3* was forked off from here
 - Removed server numeric output from /MAP for normal users (still visible to ircops).
 - Renamed unreal32docs.tk.html to unreal32docs.tr.html
 - Module coders: Added HOOKTYPE_POST_SERVER_CONNECT (1 param: cptr) which is called when
   a server connects, just like HOOTYPE_SERVER_CONNECT but this is actually called *after*
   all clients and channels are synched. Obviously needed for some modules which must synch
   data that refers to clients/channels that would otherwise not exist yet on the other side.
 - The server SSL certificate and private key can now be reloaded without requiring a server
   restart, simply use: /REHASH -ssl
 - Small compile fix for above
 - Fixed /SAJOIN able to join insecure users to +z channels, reported by phedny (#0002601).
 - Fixed SSL crash problem due to previous SSL change.
 - Fixed some bugs in webtv code that could have caused trouble in the future (off by one),
   reported by Ilja van Sprundel.
 - Module coders: Fixed CALLBACKTYPE_CLOAK_EX, it was not working properly at all.
 - Fixed bug in MODE #channel showing extended channel mode parameters when not in #channel.
 - Made 'MODE #channel b' and friends show bans to ircops even when not in channel.
 - Fix for channel mode +f: It incorrectly didn't eat a paramter on unset (ouch!), even
   though it always acted like it did in the MODE line sent to the channel. This bug caused
   desynchs in some cases. Bug reported by Korfio (#0003048).
 - Fixes to SVSNICK: case-change no longer causes a collision, don't return the value from
   exit_client (which would be FLUSH_BUFFER), fix QUIT not being sent back on collision.
 - Fix for above so it doesn't -r the client.
 - Fixed small memory leak in resolver (~40 bytes when connecting to a server)
 - Made Unreal use the original name in case of a CNAME, instead of the forwarded name,
   reported by jerrcsnet (#0003054).
 - The "looking up your hostname" message was always sent, regardless of show-connect-info.
 - Kick non-SSL users when the channel turns out to be +z during netmerge, reported by
   Ron2K (#0002942).
 - Windows 2003: Fixed UnrealIRCd unable to boot if no DNS server is configured, we now
   fallback to set::dns::nameserver in such a case. Thanks to Romeo (reporter, #0002802)
   and Bock for tracing this down.
 - Fixed cloak cutoff problem with long hosts.
 - Added doc/help.tr.conf (Turkish), translated by Diablo.
 - Added doc/example.tr.conf (Turkish), translated by ironic.
 - Fixed zlib version check: 1.x is compatible with all 1.*, etc. (#0002966).
 - Fixed a couple of add_Command/del_Command lines in m_chgname and m_helpop trying to
   add the same token twice. Didn't cause any trouble, normally, though...
 - Updated ukrainian-w1251 and belarussian-w1251 charsets: some characters were previously
   included that shouldn't. Reported by avb (#0003102), patch supplied by Bock.
 - Made it so that when 'java' is enabled for a listen block, then the 2nd parameter to
   NICK is not seen as a password on this port. Patch from afolentes (#0003097).
 - Fixed some unitialized pointer things for win32 w/ssl on keyprompt, no idea if it
   helps, though. Would appreciate it if another code looks into this. -- Syzop
 - Fixed SVSO - not removing coadmin (+C). Reported by Muisje (#0003077).
 - Fixed deny link {} blocks being ignored by autoconnect. Reported by a couple people,
   also see #0003084.
 - Fixed m_names.so not being build (a problem for people not using commands.so),
   reported by aegis (#0003085).
 - Using SVSMODE (or SVS2MODE) to set -x will now actually remove the vhost from memory,
   instead of letting it magically reappear whenever +x is set. This means services can
   now properly "unvhost" a user by sending a "SVSMODE User -x+x" (then any existing vhost
   will be removed and user will have a cloaked host). Reported by avenger and others
   (#0002933).
 - [internal] Made a spamfilter_build_user_string function that will build the spamfilter
   user target string (nick!user@host:info), insteaf of doing it at like 5 places.
 - Spamfilter target 'u' (user): the host field (nick!user@HOST:realname) is now escaped
   with brackets if it's an IPv6 address, eg: blah!blah@[1:2:3:4:5:6:7:8]:hello, reported
   by aquanight and others (#0003010).
 - Win32: SSL private key prompt should now no longer crash. Patch provided by Alexey
   Markevich (#0002866).
 - Win32: we now no longer crash if no access to write to service.log, suggested and
   patch by Xuefer (#0002886).
 - Services timestamps are now always treated as an unsigned long (0..2^32-1), instead
   of accidently as signed long during netsynchs. This bug caused issues with values
   larger than 2147483647. Reported by avenger (#0002980).
 - If the 'crypt' algorithm is used, then passwords were/are truncated to 8 characters.
   We now print a warning when this happens (both on the IRC command and command-line).
   Suggested by JasonTik (#0002953).
 - Win32: Fixed a few compiler warnings, suggested by Zell (#0002890).
 - Moved a couple isatty() calls to DEBUGMODE (#0002945).
 - Made win32 compile again, reported by Bock (#0003106).
 - Moved failed oper snotices to snomask +o, and are sent out to all servers. Also now
   shows the uid attempted (like [FAILEDAUTH] does) for incorrect host or maxlogin.
 - Fixed set::allowed-nickchars causing a segfault for some unknown charsets, reported
   by avb (#0003069).
 - Cutoff webtv whois at MAXTARGETS (#0003004).
 - loadmodule now reports proper errors when the actual file can't be found, instead of
   blaming it on the temp file, reported in #3015.
 - Fixed 'SVSMOTD !' not deleting the services motd in memory, reported by avb (#0003110).
 - Snomask N: Don't show nickchanges for U-lines, reported by seneces (#0002636).
 - Fixed set::dns::bind-ip directive seen as duplicate, reported by aegis (#0003074).
 - set::dns::* block is now no longer mandatory. All info has always been read from
   /etc/resolv.conf (*NIX) or the registry (Win32), and the set::dns block is ignored
   (except for set::dns::bind-ip, but that's a special case). Suggested by many including
   djGrrr to make things slightly more logical (#0003019).
 - As a consequence of the above, set::dns blocks were removed from doc/example*conf.
 - Added two more characters to Catalan charset, reported by rmh (#0002995).
 - Added set::pingpong-warning [yes|no] which decides whether to send the "** If you are
   having problems connecting due to ping timeouts, please type /quote pong .." message
   to each client when NOSPOOF is enabled (usually on Win32). The default is NO.
   Previously this message was always sent if NOSPOOF was on, which often caused
   confusion among users. The message was intended for non-confirming clients, but these
   should be fixed by now, and those that were not fixed (self-made bots/etc) did often
   not understand the message anyway. Anyway, you can still turn it on ;). (#2680).
 - /INVITE's from people on the silence list are now (silently) ignored, suggested by
   White_Magic (#0002478).
 - Fixed a couple of typos and other one-line-text fixes at various places: reported by
   aegis (#3081), DanPMK (#2818), tabrisnet (#2974, #2970, #2467), penna (#2721),
   Brad (#2488), vonitsanet (#2467).
 - Made OpenSSL version dynamic, reported by buildsmart (#0002975).
 - Rejecting fake +z modes in conf, reported by rve (#0002532).
 - Changed some minor Makefile stuff
 - Fixed belarussian-w1251 charset.. accidently copied a "'" which caused an internal
   error, reported by Bock (#0003114).
 - Added information about extbans to help.conf (/HELPOP ?EXTBANS). Patch from Bock
   (#0003113).
 - Made SAPART work for mulitple channels, just like SAJOIN. Reported by Snake and
   SeigHart, patch provided by Bock (#0003064). This also fixes SAPART now being
   announced to all opers globally, just like SAJOIN.
 - Finally fixed /RESTART issue on windows for good, should now always restart correctly.
   Patch provided by BuHHunyx and Bock (#0002734).
 - Fixed charsys config error message sometimes saying stuff about set::accept-language,
   which should be set::allowed-nickchars (the former does not exist). Reported and
   patch provided by avb (#0003122).
 - Fixed compile bug on Solaris due to missing INADDR_NONE, fix provided by Schak
   (#0003125).
 - Fixed bug where omitting class::connfreq would result in a huge connection attempt
   flood when autoconnect was enabled. We now set class::connfreq to 60 if it's not
   specified. Reported by Milliways (#0003018).
 - Improved description of link::hub/leaf/leafdepth in unreal32docs.html reported by Bugz
   (#2623), also fixed typo (leafdepth, not leaf-depth), reported by monas (#3083).
 - c-ares resolver: upgrade to 1.3.2.
 - upgraded windows c-ares (areslib.lib) as well.
 - fix for above
 - Added release notes for 3.2.6
 - Fixed help.conf typo
 ** 3.2.6-rc1 release **
 - Get rid of some old stuff in release notes
 - Added donators since 3.2.5
 - Setting set::pingpong-warning didn't work, reported by vonitsanet, patch supplied by
   avb (#0003131).
 - Don't show silence list to others
 - Improved detection of bad set::modes-on-oper and oper::modes, now rejecting things like
   'o', 'z', and more.
 - Fix from above fixes an /OPER announce problem reported by Bock (#0003135).
 - Fixed SSL bug where an outgoing connect (either autoconnect, or /connect), would not
   show any error message when it failed. Error information has also been slightly
   improved. Reported by vonitsanet (#0003138).
 - Updated SVSNLINE syntax in help.conf (the remove-syntax).
 - Post-3.2.5 CVS-only bug: Fixed spamfilter on user target not working properly when
   changing nicks (was still trying to match on the old nick), reported by vonitsanet
   (#0003143).
 ** 3.2.6-rc2 release **
 - Fixed possible crash with using quarantine, reported by Sephiroth (#0003151).
 - Showing even more SSL server errors now, hopefully all of them, also changed the
   error notice a bit so it's much more like non-SSL server link errors. Reported by
   vonitsanet (#0003150).
 ** 3.2.6-rc3 release **
 - Updated release notes, mass-change of version number, no code changes.
 ** 3.2.6 release **

As usual, you can get it from http://www.unrealircd.com/

All our releases are PGP signed (well, with GPG) with our releases key:
rel...@un... [0x1C8A554E] which you can grab from
http://www.unrealircd.com/pgp/release_key.asc
This is the same release key that was used for signing 3.2.3 and up.

By popular request, here are the checksums again...

MD5 checksums:
611ad9a3c524204b0d382409a09abf6c  Unreal3.2.6.tar.gz
4c3186ee7dc3398bddf40f0a7fe234be  Unreal3.2.6.exe
2e17b8744977929b8e5c61d95700c667  Unreal3.2.6-SSL.exe

SHA1 checksums:
60481664d448030e5369d20885d5807323e29e81  Unreal3.2.6.tar.gz
463a4f349c6e2eb924464d61a658d0c3d4278e35  Unreal3.2.6.exe
cd71812cc020619f6f9392e408d43b565ec44993  Unreal3.2.6-SSL.exe

Thanks to everyone who contributed to this release: bug reporters,
coders, contributors, translators and testers.

Thanks also to YOU for using UnrealIRCd, keeping it the most
popular IRCd out there (55,225 downloads of Unreal3.2.5)!

Merry Christmas and a happy new year to everyone!

	The UnrealIRCd Team.

- --
Bram Matthys
Software developer/IT consultant        sy...@vu...
PGP key:                       www.vulnscan.org/pubkey.asc
PGP fp: 8DD4 437E 9BA8 09AA 0A8D  1811 E1C3 D65F E6ED 2AA2
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (MingW32)

iD8DBQFFjSx04cPWX+btKqIRAnDmAKDMvKwsxJETO0KanVcmv2wzpUk0RACfRIGz
cUCtiTh9XLidOmTDDGJRv2Q=
=DoCd
-----END PGP SIGNATURE-----