allow::mask
instead of allow::ip
and allow::hostname
. Users upgrading will receive a warning but the server will continue to boot.allow { mask ~a:TrustedUser; class flooders; maxperip 100; }
If TrustedUser authenticates to services using SASL then he gets in the special class "flooders" with a maxperip of 100.allow { mask { ~S:112233etc; ~S:anotherone; }; class clients; maxperip 10; }
Users matching one of these certificate fingerprints get a high maximum per ip of 10.set::server-linking
include-mask
. This can be used to put clients matching a mask into a security group.lag-penalty
and lag-penalty-bytes
in the set::anti-flood
block.REHASH
command is now sufficient to reload SSL/TLS certificates. You no longer need to use REHASH -tls
. The same is true for unrealircdctl rehash
which now also does the extra steps in unrealircdctl reloadtls
. The commands will stay, though, in case you only want to reload the TLS certificates and not rehash the entire configuration file.TSCTL ALLTIME
INFO
command on *NIX (ReleaseId).~a:*
now matches all authenticated users and ~a:0
matches all unauthenticated users.deny link { }
block127.*
was too broad. It also matched hostnames that started with it, allowing such users to bypass gline/kline/shun (but not zline/gzline).+d
(so after -D
) never took QUITs into account properly. This should now fix things, so the channel goes -d
immediately once it is no longer needed.+r
and does not use SVSLOGIN
or SVSMODE nick +d SVID
then users will not be recognized as authenticated anymore.UID
command we now validate the UID (parameter 6) to start with the SID and contains digits and uppercase only.mreq.remote_write=1
. You can use #if UNREAL_VERSION_TIME >= 202125
to detect if this new .remote_write
option is available.HCN
from 005, since nobody uses this anyway.Please login to add feedback.
This update has been submitted for testing by robert.
This update's test gating status has been changed to 'ignored'.
This update's test gating status has been changed to 'waiting'.
This update's test gating status has been changed to 'ignored'.
This update has been pushed to testing.
Service starts and I can connect. LGTM!
This update has been submitted for stable by bodhi.
This update has been pushed to stable.