IRC-Junkie.org - IRC News » InspIRCd

InspIRCd 1.2.7 stable is out, fixes DoS bugs

phrozen77 — Tue, 20 Apr 2010 15:37:25 +0000

The InspIRCd team released version 1.2.7 of their stable branch yesterday which fixes 2 critical bugs that can result in DoS conditions, so an upgrade is advised.

The first crash that has been fixed is triggerable when a remote server has the same name as a local one which possibly crashes the linking IRCd. This bug was squashed by developer danieldg in this commit.

The second bug can lead to a Denial of Service condition due to memory exhaustion which is possible since ban exception masks weren’t limited in length and numbers according to MAXBANS.

This has been rectified by this commit and they are now restricted to 250 characters in length and adhere to the MAXBANS directive.

The download for InspIRCd 1.2.7 can be found here, the whole commit-log can be viewed here.

InspIRCd 1.2.7 stable is out, fixes DoS bugs is a post from: IRC-Junkie.org - IRC News

This post is licensed under the Creative Commons Attribution-NonCommercial-ShareAlike 3.0 Deutschland license.

Atheme / InspIRCd m_invisible brouhaha

phrozen77 — Tue, 23 Mar 2010 15:53:19 +0000

Those who closely follow either projects development will have noticed a few “odd” looking commits to their sourcecode in the past few days.

The commits all concerned InspIRCds m_invisible module which provides similar functionality as the old mode +I in UnrealIRCd 3.1.x.

Quoting the InspIRCd wiki page about m_invisible the module

adds support for quiet (invisible) opers. A quiet oper is invisible to normal users on channels. This can be used for surveillence of botnet channels, statistics bots, etc. Note that other opers CAN see invisible opers; +Q only hides the oper from non-opers.

The brawl emerged when Atheme developer nenolod commited a few changes to the services packages that would make such a join visible to channel members by announcing that “Channel security has been compromised” because an invisible user has joined.

This commit was followed up by danieldg of the InspIRCd developer team who moved the module out of the main – and therefore by default included – modules into the seperate “inspircd-extras” repository, but only in the 2.0 beta and 2.1 pre-alpha branches.

The initial commits to Atheme have since been reverted but there now are checks for m_invisible being loaded and the services package now refuses to link if it spots the module being present.

The module, referred to as “morally unacceptable” and “not … ethical” by nenolod, has legitimate uses such as “private networks inside offices, with special uses, those do need logging and accountability, most of them even disable private messages entirely” said developer Brain when asked about his views of this whole situation. They wrote it because “users asked for the module” and his opinion is that it “should be kept, and we’re keeping it, in third party”.

Brain says to him “it’s all about choice, the choice to run the modules or not to, we aren’t going to tell people whats right and wrong” and that “people are sensible enough and educated enough to decide for themselves”.

What’s your opinion about this? Do you use m_invisible on your network? And if so, do you tell your users that such a module is loaded? Guns don’t kill, people do?

Atheme / InspIRCd m_invisible brouhaha is a post from: IRC-Junkie.org - IRC News

This post is licensed under the Creative Commons Attribution-NonCommercial-ShareAlike 3.0 Deutschland license.

InspIRCd 2.0 beta 4 released

phrozen77 — Thu, 04 Mar 2010 18:44:17 +0000

The InspIRCd team brings us another fresh release of the upcoming generation of their IRCd – InspIRCd 2.0 beta4.

The features and enhancements that are introduced with the new branch are huge and tops those available in the 1.2 stable branch in every aspect.

And just as in the stable version, every feature, every mode and every module can either be enabled or disabled – customize your IRCd the way you want it.

The features the team ponders to implement are listed on their Roadmap page in their Wiki – a list with already programmed features can be found here.

If you want to try the upcoming generation of the IRCd, you can grab the current beta here – the changelog is available here.

InspIRCd 2.0 beta 4 released is a post from: IRC-Junkie.org - IRC News

This post is licensed under the Creative Commons Attribution-NonCommercial-ShareAlike 3.0 Deutschland license.

InspIRCd releases version 1.2.6

phrozen77 — Thu, 25 Feb 2010 16:21:24 +0000

The InspIRCd project just released a new version of their IRCd in the stable tree which is now at version 1.2.6.

The release mainly consists of bugfixes where the most important ones fix another CPU spike issue and a possible crash when servers suffered a ping timeout – both fixes have been made in the spanningtree linking module.

Another bugfix in the form of a compile-fix made the LDAP Auth module work again.

The download can be obtained from here, the full changelog can be viewed here.

InspIRCd releases version 1.2.6 is a post from: IRC-Junkie.org - IRC News

This post is licensed under the Creative Commons Attribution-NonCommercial-ShareAlike 3.0 Deutschland license.

InspIRCd 1.2.5 stable and 2.0 beta 3 has been released

phrozen77 — Mon, 15 Feb 2010 16:52:06 +0000

Shortly after the last two releases, the InspIRCd project released another bugfix release in their stable tree as well as another release in their 2.0 branch, which is now at beta 3.

The stable tree of the IRCd is now at version 1.2.5 which fixes the “crash-on-delink bug that 1.2.4 was intended to fix” but in the end only “one method of triggering the bug” has been fixed then.

Developer danieldg continues that this release is “more thoroughly tested” and also fixes a “100% CPU use bug in epoll that will require an ircd restart to fix if you have hit it”.

The 2.0 beta 3 release has the “same netsplit crash fixes as the 1.2 stable line, and a few other module fixes” with the most important change being that “DNSBL and GeoIP modules can now be used to assign connect blocks, which could be used to implement complex restrictions like only allowing TOR for valid accounts”.

The downloads can be found in the announcement here or checked out from their Subversion repository.

InspIRCd 1.2.5 stable and 2.0 beta 3 has been released is a post from: IRC-Junkie.org - IRC News

This post is licensed under the Creative Commons Attribution-NonCommercial-ShareAlike 3.0 Deutschland license.