Jump to content

UnrealIRCd

From Wikipedia, the free encyclopedia
UnrealIRCd
Original author(s)Carsten V. Munk (stskeeps)
Developer(s)Bram Matthys (Syzop) and others
Initial releaseMay 1999; 25 years ago (1999-05)[1]
Stable release
6.1.5[2] Edit this on Wikidata / 22 April 2024
Written inC
PlatformLinux, BSD, Mac OS X, Solaris, HP-UX, Windows
TypeIRCd
LicenseGPLv1 or later[3][4]
Websitewww.unrealircd.org

UnrealIRCd is an open-source IRC daemon, originally based on DreamForge, and is available for Unix-like operating systems and Windows. Since the beginning of development on UnrealIRCd c. May 1999, many new features have been added and modified, including advanced security features and bug fixes, and it has become a popular server.

Development

[edit]

UnrealIRCd was originally based on DALnet's DreamForge IRCd, "a now deprecated IRC server that was the predecessor to the actively maintained Bahamut server."[5]

On July 13, 2007, Carsten V. Munk (stskeeps),[6] the founder of the UnrealIRCd project,[7] announced that a future v4.0 would be a fork of InspIRCd. Later on, this idea was dropped.[8]

With the release of version 3.2.10 in December 2012, Bram Matthys (Syzop), the current project leader of UnrealIRCd,[7] announced that development has been started on a 3.4 version. The 3.2 series will be maintained until the new version has been declared stable, which was expected to happen somewhere in 2014.[9] In October 2015 it was announced that due to the many changes the new series will be called UnrealIRCd 4 and the first Release Candidate was made available for download.[10] An UnrealIRCd 4.0.0 stable release was made on December 24, 2015.[11] Next UnrealIRCd 5 stable series was first released on December 13, 2019.[12]

Features

[edit]

Some of Unreal's features are referred to as "nonstandard",[5] in that they are not listed in the IRC-related RFCs 1459 and 2811–2813,[13] but are beneficial "from a security point of view."[5] The software "possibly has the most security features of any IRC server", including "spam filters, different styles of user bans, various channel modes to prevent abuse and flooding, SSL (Secure Sockets Layer) connection support, and compressed server connections."[5] For example, the shun command blocks a user from transmitting any text, the spamfilter uses regular expressions and can automatically ban, shun or disconnect users, and dccdeny can block files from being transmitted.[14] It includes the ability to password-protect server restart and stop commands, for operator use only.[15] The Windows version includes error reporting on startup.[15] Unreal supports linking to IRC Services, and allowing Services to change channel modes.[16] Server-side filtering can be used by administrators to block transfers of files, or certain domains.[17]

Unreal 3.2's "new-style" configuration file format is described as "more verbose" than traditional IRCd servers, which makes it easier set up; it is divided into "blocks" of related options, and has explanatory comments for each option.[18]

Reception

[edit]

UnrealIRCd is "one of the most popular and full-featured IRC daemons"[5][19] and is used on the largest number of IRC servers, according to SearchIRC.com.[20] This server is described as having "possibly the most security features of any IRC server."[5]

Security issues

[edit]

The tarball of version 3.2.8.1, from November 2009 to June 12, 2010, contained a trojan that allowed people to execute commands with the privileges of the user running the daemon, regardless of any user restrictions. The problem was fixed - the current tarball download is not suspected to contain a trojan.[21][22][23] The attack was attributed to the group Ac1db1tch3z.[citation needed]

The "Firefox XPS" cross-protocol JavaScript-based attack on IRC networks was reported in January 2010;[24] UnrealIRCd developers later released a patch to set its anti-spoofing configuration parameter to "on" - the default was previously "off" - and "kill/zline/etc such connections".[25][26] It is the first question in the configuration file.[26]

See also

[edit]

References

[edit]
  1. ^ "UnrealIRCd celebrates its 15th birthday!". Archived from the original on 2015-03-22. Retrieved 2014-05-18.
  2. ^ https://forums.unrealircd.org/viewtopic.php?t=9355. {{cite web}}: Missing or empty |title= (help)
  3. ^ "license.h". GitHub.
  4. ^ "unrealircd/LICENSE at unreal42 ‧ unrealircd/unrealircd ‧ Github". github.com. Archived from the original on April 19, 2021. Retrieved May 20, 2019.
  5. ^ a b c d e f Piccard, Paul; Baskin, Brian; Spillman, George; Sachs, Marcus (May 2005). Securing IM and P2P Applications for the Enterprise (1st ed.). Syngress Publishing. p. 370. ISBN 978-1-59749-017-7. Archived from the original on 2014-07-12. Retrieved 2011-09-10.
  6. ^ Munk, Carsten V. (stskeeps) (December 6, 2008). "Stskeeps says goodbye". Unrealircd.com. Archived from the original on April 2, 2012. Retrieved September 11, 2011.
  7. ^ a b "UnrealIRCd Staff/Contributors". UnrealIRCd.com. Archived from the original on 2010-01-27. Retrieved 2009-09-10.
  8. ^ Bishop, Nathan (nate) (December 10, 2008). "UnrealIRCd Development & Future". UnrealIRCd.com. Archived from the original on 2011-07-28. Retrieved 2011-07-28.
  9. ^ Matthys, Bram (Syzop) (December 25, 2012). "Unreal3.2.10 released & Unreal3.4 development". UnrealIRCd.org. Archived from the original on 2015-03-30. Retrieved 2012-12-25.
  10. ^ Matthys, Bram (Syzop) (October 11, 2015). "UnrealIRCd 4.0.0-rc1 released". UnrealIRCd.org. Archived from the original on 2016-03-13. Retrieved 2015-10-11.
  11. ^ "UnrealIRCd 4.0.17 released". UnrealIRCd. Dec 23, 2017. Archived from the original on April 16, 2018. Retrieved Apr 15, 2018.
  12. ^ "UnrealIRCd 5.0.0 released - UnrealIRCd Forums". UnrealIRCd. Dec 13, 2019. Archived from the original on August 6, 2020. Retrieved Aug 18, 2020.
  13. ^ Piccard et al., p. 402
  14. ^ Piccard et al., p. 371
  15. ^ a b Leadbeater, David (2004). "Chapter 15, Servers and Services: Hack 95". In Mutton, Paul (ed.). IRC Hacks: 100 Industrial-Strength Tips & Tools. O'Reilly. p. 363. ISBN 0-596-00687-X. Archived from the original on 2014-07-12. Retrieved 2011-09-19. One of the most popular and full-featured ircds is Unreal.
  16. ^ Leadbeater, p. 366.
  17. ^ Piccard et al., p. 409, 392
  18. ^ Leadbeater, p. 361.
  19. ^ Leadbeater, p. 360.
  20. ^ "IRCd version overview". SearchIRC. Archived from the original on 2010-02-09. Retrieved 2011-09-10.
  21. ^ Bott, Ed (June 12, 2010). "Linux infection proves Windows malware monopoly is over; Gentoo ships backdoor? [updated]". ZDNet. Archived from the original on September 26, 2011. Retrieved September 20, 2011.
  22. ^ "UnrealIRCd Security Advisory". UnrealIRCd.com. June 12, 2010. Archived from the original on 2011-09-04. Retrieved 2011-09-10.
  23. ^ Lederer, Christian (June 12, 2010). "Some UnrealIRCd 3.2.8.1 downloads trojaned (Update 3)". IRCJunkie.org. Archived from the original on 2011-08-01. Retrieved 2011-09-10. (rationale)
  24. ^ Goodin, Dan (January 30, 2010). "Firefox-based attack wreaks havoc on IRC users". The Register. Archived from the original on 2011-08-17. Retrieved 2011-09-10.
  25. ^ Syzop (February 28, 2010). "Browser/Javascript POST attack". UnrealIRCd.com. Archived from the original on 2011-09-28. Retrieved 2011-09-10.
  26. ^ a b Lederer, Christian (March 1, 2010). "UnrealIRCd team releases patch against Firefox XPS attack". irc-junkie.org. Archived from the original on 2011-09-01. Retrieved 2011-09-10.
[edit]
Retrieved from "https://en.wikipedia.org/w/index.php?title=UnrealIRCd&oldid=1239435224"