UnrealIRCd 6.2.5 released & hot-patch for IPv6 networks

[Syzop]

This UnrealIRCd 6.2.5 release is mostly about improving IPv6 clone detection. If your IRC network has IPv6 connectivity then hot-patching without restart (see below), or upgrading, is highly recommended. If you don't have IPv6 then this release is less important.

Without this, a user with IPv6 connectivity (e.g. a typical residential connection) can connect thousands of clones using their /64 prefix, bypassing per-host limits like allow::maxperip and connect-flood.

Hot-patch (update without restart)
If you run UnrealIRCd 6.2.x then you also have the option of using our hot-patch, which allows updating the server without a restart. To do so, run:

Code: Select all

./unrealircd hot-patch ipv6-clones

For UnrealIRCd 6.2.3 and 6.2.4 this gives you nearly the same IPv6 clones protection as this 6.2.5 release. For UnrealIRCd 6.2.0/6.2.1/6.2.2 it will hot-patch only the maxperip issue (the most important one) and not add the new connthrottle functionality.

For those who love to verify after (but this is pretty much unneeded) you can use the following command. It will print 2.0.0 for both maxperip and connthrottle modules if you are on the patched/up-to-date version:

Code: Select all

$ ./unrealircd module-status|grep -E 'maxperip|connthrottle'
maxperip 2.0.0 - Limit user connections based on ip address - by UnrealIRCd Team 
connthrottle 2.0.0 - Connection throttler - by Syzop - by UnrealIRCd Team 

As said, if you are on 6.2.3 or 6.2.4 then both modules got patched, if you are on 6.2.0/6.2.1/6.2.2 then only the maxperip patch is possible (which is the most important one).

Release notes and details
All the information can be found in the release notes. See there under "Enhancements".

As always, you can download UnrealIRCd from www.unrealircd.org. If you want to upgrade on *NIX, then use: ./unrealircd upgrade