https://gitlab.synchro.net/main/sbbs/-/commit/37fd7991752e8a0851b71760
Modified Files:
exec/irc.js
Log Message:
irc.js: pass the user's real IP address to the IRC server via WEBIRC
Every BBS user reached the IRC server from the BBS's own IP address, so
IP bans placed on the server or by services could not target an individual
user without banning the whole BBS, and a banned user could get around a
ban by connecting through the BBS.
When configured, send WEBIRC with the user's IP address and hostname
before registering, as web gateways such as chat.synchro.net do. The
password is sent only when the IP address actually connected to is listed
in webirc_servers, never by server name: a round-robin name such as irc.synchro.net can resolve to servers run by others.
New [irc] options in ctrl/modopts.ini: webirc_password (matching the
server's [WebIRC] Password) and webirc_servers (comma-separated IP
addresses). Without them, behavior is unchanged.
Co-Authored-By: Claude Opus 5.5 <
noreply@anthropic.com>
--- SBBSecho 3.38-Linux
* Origin: Vertrauen - [vert/cvs/bbs].synchro.net (1:103/705)