Skip to content
Snippets Groups Projects
  1. May 27, 2016
    • rswindell's avatar
      Server listening interfaces can now be configured again using the various · 25ccb605
      rswindell authored
      - "Configure" menus (not working since the IPv6 commit) - both IPv4 and IPv6
         addresses may be specified (comma-separated), or multiple IPv4 addresses!
      - Added new "Temp Ban" settings to Properites->Security tab.
      - Added context (tab) sensitive "Help" button to Properties page
        (links to section on relevant wiki page).
      - Every log window has a new right-click pop-up menu with 2 options:
        1. Copy Selected
        2. Copy All
        Hopefully it's obvious what these menu options do. :-)
      25ccb605
    • rswindell's avatar
      Update the temp ban (loginBanned): · e0e5279f
      rswindell authored
      - Never ban the server's own address
      - Log the login attempt and last name attempted
      - Use a compressed version of the HH:MM:SS "time remaining" portion of the log
        message
      e0e5279f
    • rswindell's avatar
      Use the proper get/set duration value ini functions for the · 4f22e485
      rswindell authored
      LoginAttemptBanDuration value. Allows short-hand multipliers: YWDHMS
      (year, week, day, hour, minute, second) and fractions (e.g. "2.5H").
      4f22e485
  2. May 26, 2016
  3. May 25, 2016
  4. May 21, 2016
  5. May 19, 2016
    • rswindell's avatar
      Implement IP temporary ban: · ee159c40
      rswindell authored
      By default, after 20 consecutive (unique) failed login attempts, *or*
      a failed login attempt wtih a name from the name.can filter file.
      The default temporary ban duration is 10 minutes.
      The temporary ban thershold is configurable via LoginAttemptTempBanThreshold
      in sbbs.ini and the ban duration is configurable via LoginAttemptTempBanDuration
      (in seconds).
      ee159c40
  6. May 18, 2016
  7. May 13, 2016
    • rswindell's avatar
      Fix bug introduced in rev 167 (the IPv6 commit): · b4049a3e
      rswindell authored
      calling Socket.bind() with an undefined hostname parameter would result in a
      getaddrinfo() failure, e.g. on Windows, WSAHOST_NOT_FOUND 11001
      The ircd.js passes the value of server.interface_ip_address to socket.bind()
      and when run from jsexec, this property is not defined. So you couldn't run the
      ircd from jsexec or you'd get "!Error 0 binding socket to TCP port xxx".
      Also now setting the socket last_error value upon getaddrinfo() failure so
      if there is a failure, the error message won't include the erroneous "Error 0".
      b4049a3e
    • deuce's avatar
      Fix socket.send() so that it returns the number of bytes sent. The · 698ca0bd
      deuce authored
      underlying send() function is free to send a subset of the bytes, and
      occasionally does (especially on non-blocking sockets).  The return value
      was true if all bytes were sent or false if not all bytes were sent.
      
      The new behaviour is to return the number of bytes sent or null on failure.
      
      This is mostly compatible with existing code which appears to universally use
      if (!sock.send(str))
      
      Cases where it's not compatible are when a zero-length string is sent.  The
      handling of errors is slightly different now too... previously, if you
      retransmitted on failure, the stream would "stutter" now it will have
      "holes".
      698ca0bd
  8. May 09, 2016
    • rswindell's avatar
      Introduced sbbsecho.ini advanced setting (not yet exposed in echocfg): · 4ea509a0
      rswindell authored
      StrictPacketPasswords (default is "true").
      If you want SBBSecho v3 to behave like SBBSecho v2 with regards to packet
      passwords for linked-nodes with *no* configured packet password, set this value
      to "true" in your sbbsecho.ini file. I don't recommend doing this if you care
      about the "security" of your echomail, but some sysops have been bitten by the
      strict enforcement of the configured password in SBBSecho v3.
      
      I also fixed some (but not all) of the signed/unsigned value comparison
      warnings reported by msvc2013. Hopefully this didn't introduce any stupid bugs.
      4ea509a0
    • rswindell's avatar
      Fix login_attempted() for IPv4 at least (I can't test for IPv6, Deuce?). · 8a042fb5
      rswindell authored
      This has been broken (did not track consecutive failed login attempts from
      the same client IP address) since the IPv6 commit of Aug-2015. I only noticed
      this wasn't working when I was documenting the "auto-block hackers" feature
      on the Wiki and noticed that every failed login (even those from the same IP)
      was listed as a separate entry in the "Failed Logins" list (e.g.
      sbbsctrl->View->Login Attempts). Ugh.
      8a042fb5
  9. Apr 30, 2016
  10. Apr 28, 2016
  11. Apr 27, 2016
  12. Apr 24, 2016
  13. Apr 23, 2016
  14. Apr 21, 2016
  15. Apr 20, 2016
  16. Apr 19, 2016
  17. Apr 16, 2016
  18. Apr 15, 2016
Loading