| 1 |
-- Noteworthy changes in version 1.1.9 (2020-??-??) |
| 2 |
o) Implemented support for loading a user-provided private key and |
| 3 |
tls certificate. As a side effect this allows HOPM to use certificate |
| 4 |
fingerprints for NickServ authentication |
| 5 |
|
| 6 |
|
| 7 |
-- Noteworthy changes in version 1.1.8 (2020-07-05) |
| 8 |
o) Minimum supported OpenSSL version is 1.1.1 now |
| 9 |
o) Experimental TLS support for the irc client part has been implemented. We |
| 10 |
only do TLSv1.2 and higher |
| 11 |
o) The irc::tls and irc::tls_hostname_verification configuration directives |
| 12 |
have been added |
| 13 |
o) A possible out-of-bounds write in the irc parser logic has been fixed |
| 14 |
|
| 15 |
|
| 16 |
-- Noteworthy changes in version 1.1.7 (2020-04-19) |
| 17 |
o) Fixed github issue #31: hopm attempts to open stderr for logging in |
| 18 |
non-debug/fork mode which can cause hopm to exit silently |
| 19 |
|
| 20 |
|
| 21 |
-- Noteworthy changes in version 1.1.6 (2019-04-21) |
| 22 |
o) Fixed issue with ssh banner scans where hopm would test connections only |
| 23 |
against the 'target_string' that's defined last in the scanner{} block |
| 24 |
o) Minimum supported OpenSSL version is 1.0.1f now |
| 25 |
|
| 26 |
|
| 27 |
-- Noteworthy changes in version 1.1.5 (2018-10-14) |
| 28 |
o) The ':', and ',' nickname delimiters work again |
| 29 |
o) Fixed a bug where the hopm process couldn't be restarted under certain |
| 30 |
conditions |
| 31 |
o) The hopm process can now be restarted from the command line via "kill -HUP" |
| 32 |
o) Added --enable-efence switch to allow easy linking with the |
| 33 |
electric fence memory debugger library |
| 34 |
o) Implemented proper support to kill users with vulnerable SSH versions by |
| 35 |
version announcement. Patch provided by falsovsky (Pedro de Oliveira). See |
| 36 |
doc/reference.conf for more information. |
| 37 |
o) Minimum supported OpenSSL version is 1.0.1d now |
| 38 |
|
| 39 |
|
| 40 |
-- Noteworthy changes in version 1.1.4 (2017-04-05) |
| 41 |
o) IPv6 blacklist support has been implemented |
| 42 |
o) The CHECK command now accepts IPv6 addresses |
| 43 |
o) The negative cache has been rewritten to use latest Net::Patricia |
| 44 |
C sources and does support IPv6 now |
| 45 |
o) Further code cleanups and optimizations |
| 46 |
|
| 47 |
|
| 48 |
-- Noteworthy changes in version 1.1.3 (2016-09-26) |
| 49 |
o) Allow inclusion of other configuration files in the main hopm.conf |
| 50 |
file. See doc/reference.conf for further information on how to use |
| 51 |
the new .include configuration directive. |
| 52 |
|
| 53 |
|
| 54 |
-- Noteworthy changes in version 1.1.2 (2016-05-15) |
| 55 |
o) Fixed archaic bug which can cause the scanner to either detect nothing or |
| 56 |
to detect everything and therefore even kill legit clients |
| 57 |
|
| 58 |
|
| 59 |
-- Noteworthy changes in version 1.1.1 (2016-01-03) |
| 60 |
o) Added 'command_queue_size', 'command_interval', and 'command_timeout', |
| 61 |
configuration directives to the options {} block. See doc/reference.conf |
| 62 |
for more information. |
| 63 |
o) Various updates to the reference.conf; added updated 'connregex' directives |
| 64 |
for ircd-hybrid in conjunction with user mode +F (far connect notices), and |
| 65 |
UnrealIRCd 4.0.0, which now uses a different format for connect notices |
| 66 |
o) Minor code cleanups |
| 67 |
|
| 68 |
|
| 69 |
-- Noteworthy changes in version 1.1.0 (2015-08-07) |
| 70 |
o) options::pidfile and options::scanlog can now be relative pathnames |
| 71 |
o) Due to security reasons the PROTOCOLS command has been removed again |
| 72 |
|
| 73 |
|
| 74 |
-- Noteworthy changes in version 1.1.0beta1 (2015-07-02) |
| 75 |
o) Added HTTPS support for SSL/TLS-enabled HTTP proxies which seem to be |
| 76 |
used quite a lot on IRC nowadays. LibreSSL or OpenSSL 0.9.8o and above |
| 77 |
is required for this to work. |
| 78 |
o) Added new HTTPS and HTTPSPOST protocol configuration directives to the |
| 79 |
scanner {} block. |
| 80 |
|
| 81 |
|
| 82 |
-- Noteworthy changes in version 1.0.8 (2015-06-25) |
| 83 |
o) Added options::reconnectinterval configuration option. See doc/reference.conf |
| 84 |
for more information. |
| 85 |
o) Added options::dns_timeout configuration option. See doc/reference.conf |
| 86 |
for more information. |
| 87 |
o) Further modernizations and cleanups to the build system |
| 88 |
o) HOPM now compiles with -fstack-protector-strong and -fstack-protector, |
| 89 |
respectively, depending on what the compiler supports |
| 90 |
o) Added --enable-assert switch to ./configure. assert() statements are now |
| 91 |
disabled by default and can be enabled with ./configure --enable-assert |
| 92 |
o) Added --enable-warnings switch to ./configure, which enables various |
| 93 |
compiler warnings if supported by the compiler |
| 94 |
|
| 95 |
|
| 96 |
-- Noteworthy changes in version 1.0.7 (2015-06-06) |
| 97 |
o) HOPM can now detect Dreamboxes with default root passwords |
| 98 |
o) Fixed bug where the configuration parser would report syntax errors |
| 99 |
with invalid line numbers when there are multi-line C-style |
| 100 |
comments in the config file |
| 101 |
o) Minor code cleanups |
| 102 |
|
| 103 |
|
| 104 |
-- Noteworthy changes in version 1.0.6 (2015-05-27) |
| 105 |
o) HOPM now catches MikroTik HttpProxies |
| 106 |
|
| 107 |
|
| 108 |
-- Noteworthy changes in version 1.0.5 (2015-05-04) |
| 109 |
o) Fixed bug where HOPM couldn't connect to the server specified |
| 110 |
in the irc {} block on some OS |
| 111 |
|
| 112 |
|
| 113 |
-- Noteworthy changes in version 1.0.4 (2015-03-17) |
| 114 |
o) Log timestamp format is ISO8601 now |
| 115 |
o) Added 'protocols' command which dumps a list of configured scanners |
| 116 |
and their associated protocols/ports to a channel |
| 117 |
o) Code cleanups and performance improvements |
| 118 |
|
| 119 |
|
| 120 |
-- Noteworthy changes in version 1.0.3 (2015-01-28) |
| 121 |
o) Fixed bug where HOPM wouldn't try re-connecting to the server in |
| 122 |
case the connection got lost |
| 123 |
o) Added irc::notice configuration option |
| 124 |
|
| 125 |
|
| 126 |
-- Noteworthy changes in version 1.0.2 (2015-01-12) |
| 127 |
o) Added options::negcache_rebuild configuration option |
| 128 |
o) Added basic IPv6 support allowing HOPM to bind and |
| 129 |
connect to IPv6 addresses |
| 130 |
o) Many code cleanups and optimizations |
| 131 |
|
| 132 |
|
| 133 |
-- Noteworthy changes in version 1.0.1 (2015-01-06) |
| 134 |
o) Fixed build on OS X |
| 135 |
o) More code cleanups, no user-visible changes |
| 136 |
|
| 137 |
|
| 138 |
-- Noteworthy changes in version 1.0.0 (2015-01-03) |
| 139 |
o) Minor stabilization and performance improvements |
| 140 |
|
| 141 |
|
| 142 |
-- Noteworthy changes in version 1.0.0beta2 (2014-12-31) |
| 143 |
o) Added irc::readtimeout configuration option |
| 144 |
o) Many code cleanups and optimizations |
| 145 |
o) Worked towards IPv6 support |
| 146 |
o) Fixed reference.conf from causing syntax errors |
| 147 |
o) HOPM now uses poll() for I/O event notification instead of select() |
| 148 |
|
| 149 |
|
| 150 |
-- Noteworthy changes in version 1.0.0beta1 (2014-12-25) |
| 151 |
######################################################################## |
| 152 |
o) NOTE: this is the first release of the hybrid open proxy monitor (HOPM) |
| 153 |
fully based off the discontinued blitzed open proxy monitor (BOPM) 3.1.3 |
| 154 |
######################################################################## |
| 155 |
o) Modernized and cleaned up build system |
| 156 |
o) Modernized the example configuration file. Removed/updated blacklist entries. |
| 157 |
o) The configuration parser now does support time and size units |
| 158 |
o) The configuration parser now does support c++ style comments |
| 159 |
o) Fixed a memory leak in conjunction with manual scans |
| 160 |
o) Fixed weird behaviour in the command parser |
| 161 |
o) Code hardening. Replaced occurences of strcpy/strcat with strlcpy/strlcat, etc. |
| 162 |
o) Various code cleanups and optimizations |
| 163 |
o) The irc::away configuration option is now optional |
| 164 |
|
| 165 |
|
| 166 |
-------------------------------------------------------------------------------- |
| 167 |
|
| 168 |
BUG REPORTS: If you run this code and encounter problems, you must report |
| 169 |
the bug by EMAIL to bugs@ircd-hybrid.org |
| 170 |
Please include a gdb backtrace and a copy of your setup.h and |
| 171 |
hopm.conf with any report (with passwords and other sensitive |
| 172 |
information masked). |
| 173 |
|
| 174 |
DISCUSSION: There is a mailing list for discussion of hopm issues, |
| 175 |
including betas. To subscribe, use this link: |
| 176 |
https://lists.ircd-hybrid.org/mailman/listinfo/hybrid |
| 177 |
This is the proper place to discuss new features, bugs, etc. |
| 178 |
|
| 179 |
Questions/comments directed to bugs@ircd-hybrid.org |
| 180 |
|
| 181 |
Other files recommended for reading: README, INSTALL |
| 182 |
|
| 183 |
-------------------------------------------------------------------------------- |
| 184 |
$Id$ |
