Skip to content
Snippets Groups Projects
  1. May 27, 2016
  2. May 25, 2016
  3. May 19, 2016
    • rswindell's avatar
      Implement IP temporary ban: · ee159c40
      rswindell authored
      By default, after 20 consecutive (unique) failed login attempts, *or*
      a failed login attempt wtih a name from the name.can filter file.
      The default temporary ban duration is 10 minutes.
      The temporary ban thershold is configurable via LoginAttemptTempBanThreshold
      in sbbs.ini and the ban duration is configurable via LoginAttemptTempBanDuration
      (in seconds).
      ee159c40
  4. May 18, 2016
  5. May 13, 2016
    • rswindell's avatar
      Fix bug introduced in rev 167 (the IPv6 commit): · b4049a3e
      rswindell authored
      calling Socket.bind() with an undefined hostname parameter would result in a
      getaddrinfo() failure, e.g. on Windows, WSAHOST_NOT_FOUND 11001
      The ircd.js passes the value of server.interface_ip_address to socket.bind()
      and when run from jsexec, this property is not defined. So you couldn't run the
      ircd from jsexec or you'd get "!Error 0 binding socket to TCP port xxx".
      Also now setting the socket last_error value upon getaddrinfo() failure so
      if there is a failure, the error message won't include the erroneous "Error 0".
      b4049a3e
    • deuce's avatar
      Fix socket.send() so that it returns the number of bytes sent. The · 698ca0bd
      deuce authored
      underlying send() function is free to send a subset of the bytes, and
      occasionally does (especially on non-blocking sockets).  The return value
      was true if all bytes were sent or false if not all bytes were sent.
      
      The new behaviour is to return the number of bytes sent or null on failure.
      
      This is mostly compatible with existing code which appears to universally use
      if (!sock.send(str))
      
      Cases where it's not compatible are when a zero-length string is sent.  The
      handling of errors is slightly different now too... previously, if you
      retransmitted on failure, the stream would "stutter" now it will have
      "holes".
      698ca0bd
  6. May 09, 2016
    • rswindell's avatar
      Introduced sbbsecho.ini advanced setting (not yet exposed in echocfg): · 4ea509a0
      rswindell authored
      StrictPacketPasswords (default is "true").
      If you want SBBSecho v3 to behave like SBBSecho v2 with regards to packet
      passwords for linked-nodes with *no* configured packet password, set this value
      to "true" in your sbbsecho.ini file. I don't recommend doing this if you care
      about the "security" of your echomail, but some sysops have been bitten by the
      strict enforcement of the configured password in SBBSecho v3.
      
      I also fixed some (but not all) of the signed/unsigned value comparison
      warnings reported by msvc2013. Hopefully this didn't introduce any stupid bugs.
      4ea509a0
    • rswindell's avatar
      Fix login_attempted() for IPv4 at least (I can't test for IPv6, Deuce?). · 8a042fb5
      rswindell authored
      This has been broken (did not track consecutive failed login attempts from
      the same client IP address) since the IPv6 commit of Aug-2015. I only noticed
      this wasn't working when I was documenting the "auto-block hackers" feature
      on the Wiki and noticed that every failed login (even those from the same IP)
      was listed as a separate entry in the "Failed Logins" list (e.g.
      sbbsctrl->View->Login Attempts). Ugh.
      8a042fb5
  7. Apr 30, 2016
  8. Apr 27, 2016
  9. Apr 24, 2016
  10. Apr 23, 2016
  11. Apr 21, 2016
  12. Apr 20, 2016
  13. Apr 19, 2016
  14. Apr 16, 2016
  15. Apr 15, 2016
  16. Apr 14, 2016
  17. Apr 12, 2016
    • rswindell's avatar
      Bug-fix: Don't use the "current user" record (sbbs_t::useron var) for · 875b886b
      rswindell authored
      anything in msgtoqwk() since in the case of packing REP packets for QWK
      networking, there is no "current user" and this led to a bug where
      (at least sometimes, in some scenarios) the REP packet would be created in
      QWK Extended (QWKE) mode leading to other problems on the hub. QWKE mode
      is not needed for Synchronet/QWKnet since we have the HEADERS.DAT file
      which covers all the header fields otherwise "fixed" via QWKE kludge lines.
      If the QWKnet account on the Synchronet hub was not configured for QWKE
      mode, then QWKE kludge lines (e.g. "Subject:") could be interpretted as
      body text and other kludge lines (e.g. @VIA, @TZ, etc.) would not be parsed
      and removed from the imported body text, leading to extraneous metadata in
      QWK-networked messages. As a work-around for QWKnet nodes using existing
      versions of SBBS (without this fix), enable QWKE mode for your QWKnet acount
      on the hub (e.g. VERT).
      875b886b
  18. Apr 11, 2016
    • rswindell's avatar
      Address warnings reported by GCC 4.9.2. · 36c8d644
      rswindell authored
      36c8d644
    • rswindell's avatar
      SBBSecho v3.0: · 2205e969
      rswindell authored
      - If you are upgrading from SBBSecho v2.x, run "jsexec sbbsecho_upgrade.js"
        to convert your ctrl/sbbsecho.cfg to the new ctrl/sbbsecho.ini.
      - Major code overhaul/re-write/modernization
      - ArcMail/Attach/FD mode NOT TESTED: beware if you're using this style mailer!
      - New features:
      + Easier to manage configuration file (sbbsecho.ini)
      + Multiple sysop aliases supported (for receiving netmail)
      + Mutual-exclusion-lock file (ctrl/sbbsecho.bsy) to prevent accidental
         concurrent invocations of SBBSecho
      + FileBoxes (optional inbox and outbox per node, only in BSO mode)
      + EchoList 4-char "flags" are now 25-char "keys" and much easier to deal with
      + Maximum msg age configurable for NetMail and EchoMail (separately)
      + Configurable "Area Manager" user name (default: SYSOP)
      + Configurable "Default Recipient" for netmail (default: SYSOP)
      + Far fewer command-line options, more settings in EchoCfg
      + Old command-lines will still work, but most of the legacy options are just
         ignored now. Run "sbbsecho -?" for command-line syntax and options.
      Other improvements:
      + All Fido kludes, including PATH and SEEN-BY lines are stored in the
         Synchronet Message Base, always (can't be disabled)
      + Better security for inbound EchoMail (passwords are always enforced)
      + More comprehensive log output (the log output is more of a priority than the
        console output now)
      + Increased accuracy for recipient user name/alias matching
      + Higher-level of uniqueness to generated packet filenames
      + All temporary files (e.g. packets in process) are created in an
         SBBSecho-specific temporary file directory
      + No longer auto-terminates when any local key is pressed: use Ctrl-C/Break
         instead to initiate a graceful premature termination
      + Much more help text in echocfg
      + Better organization of settings in echocfg
      + Optional per-node "comments" for use in echocfg->Linked Nodes
      2205e969
    • rswindell's avatar
      Define FIDO_AREATAG_LEN (35 chars). · c1736ae3
      rswindell authored
      c1736ae3
Loading