UnrealIRCd 6.1.7 release notes

This is UnrealIRCd 6.1.7 stable. It comes with ASN support, more flexible ban user { } and require authentication { } blocks and more.

• In the ban user { } and require authentication { } blocks the mask is now a Mask item. This means you can use all the power of mask items and security groups and multiple matching criteria.
• The GeoIP module now contains information about Autonomous System Numbers:
  • The asn is shown in the user connecting notice as [asn: ###], is shown in WHOIS (for IRCOps) and it is expanded in JSON data such as JSON Logging and JSON-RPC calls like user.list.
  • Can be used in Extended server ban: GLINE ~asn:64496 0 This ISP is banned.
  • Can be used in security groups and mask items so you can do like:

    require authentication {
        mask { asn { 64496; 64497; 64498; } }
        reason "Too much abuse from this ISP. You are required to log in with an account using SASL.";
    }
    

     

• • In Crule functions as match_asn(64496)
  • Also available in regular extbans/invex, but normally users don't know the IP or ASN of other users, unless you use no cloaking or change set::whois-details::asn.
• JSON-RPC: Similar to oper and operclass, in an rpc-user you now have to specify an rpc-user::rpc-class. The rpc-class is defined in an rpc-class block and configures what JSON methods can be called.
  There are two default json-rpc classes:
  • full: access to all JSON-RPC Methods
  • read-only: access to things like server_ban.list but not to server_ban.add
• set::spamfilter::except is now a Mask item instead of only a list of exempted targets. A warning is created to existing users along with a suggestion of how to use the new syntax. Technically, this is not really new functionality as all this was already possible via the Except ban block with type spamfilter, but it is more visible/logical to have this also.
• New option set::hide-killed-by: We normally show the nickname of the oper who did the /KILL in the quit message. When set to yes the quit message becomes shortened to "Killed (Reason)". This can prevent oper harassment.
• set::restrict-commands: new option channel-create for managing who may create new channels.
• New option set::tls::certificate-expiry-notification: since UnrealIRCd 5.0.8 we warn if a SSL/TLS certificate is (nearly) expired. This new option allows turning it off, it is (still) on by default.
• Add the ability to capture the same data as Central Spamreport by providing an spamreport::url option.

• IRCOps with the operclass locop can now only REHASH the local server and not remote servers.
• Comment out some more in example.conf by default
• Update shipped libraries: c-ares to 1.31.0, PCRE2 to 10.44, Sodium to 1.0.20

• Crash when removing the websocket option on a websocket listener.
• Silence some compiler warnings regarding deprecation of c-ares API in src/dns.c.
• Memory leaks of around 1-2KB per rehash

• We use numeric 569 (RPL_WHOISASN) for displaying ASN info to IRCOps:
  :irc.example.net 569 x whoiseduser 64496 :is connecting from AS64496 [Example Corp]