Configuration: ClientTimeout ends a stalled write after one timeout, also after a partial send (#377)
84c7169
Logins: 1, 2, 4 s after failed logins, AuthMinLength 10, no dummy check (#370)
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
7f0c932
Caching and Large Groups: newscacheclean removes article files of groups without a database (#355)
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2dc6254
Wiki: empty-range walks, Read routing and active list, compress idle limit, group name check
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
7bd686c
COMPRESS DEFLATE to news servers (Options compress, zlib): Configuration, Installation, Upstream Servers and TLS, NNTP Commands
dbda54a
Development: the Hurd skips of cCorruptDB and cLockDowngrade (#257, #343)
61ac99d
One newscacheclean/prefetching updatenews at a time; client name lookup limit
From PRs #335 and #339.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
07bdacf
MaxConnectionsPerHost; updatenews posts the other articles while one server is down
From PRs #333 and #340.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
f07c59f
HDR, XHDR, XPAT: unfolding and TABs (PR #326)
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
89fc9a3
ConnectTimeout default 30, MaxConnections log, log rotation on SIGHUP, unreadable spooled articles
From PRs #330, #336, #337 and #338.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
946c48c
Fix what the full 1.3.23 review found in the wiki
Two tables cut in two by a blank line (reply codes on Access and
Authentication, newscache options on Installation); spool directory
mode 0750 as the repo docs say; configure --enable-sysv-init,
--with-initdir and --disable-assertions; the changes/ workflow for NEWS
on Development; the unit-test list; options that need a restart after
SIGHUP; PostTo defaults to Read, and AccessList lists default to each
other; 483, 501 invalid message-id / NUL in command and the 400 replies
on NNTP Commands; CAPABILITIES' AUTHINFO without USER.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
555ca00
Upgrade notes: first fill of the active list, posting flags (#284, #289)
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
3627b93
Lock files in the spool, updatenews -l, the reply before the goodbye (#272-#277)
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
9fa1080
Log control bytes, big article files, SIGTERM without reconnect (#267-#271)
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
49542de
TLS for clients: "from 1.3.23" again instead of "on main"
The pages describe main; "from 1.3.23" stays right after the release,
"on main" doesn't.
6fe3b36
Update wiki for current main behavior
Document bounded and adaptive upstream replies, multi-server posting dates and stalled client writes. Correct stale client TLS, authentication, command and spool statistics descriptions.
Co-Authored-By: GPT-6.1 Terra <noreply@openai.com>
ac4843d
TLS for Clients: new page (TLSListenTo, certificates, AuthRequiresTLS, -t); links from Home, sidebar, Configuration, Installation, Access, Troubleshooting
545c42c
Wiki: failed-login delay at most 1 s (#147), log redaction (#146), MD5 on big-endian (#148)
dcc8481
Wiki: changes of #137-#145 (configure options, PAM_RHOST, config open errors, newscacheclean -s -t, upgrade notes)
6536a91
updatenews -l alone works as -g -l (#136); newscache -o without the config (#133); XDEBUG dumps with CRLF (#135)
7a8ad59
Replies: 502/440 for commands the entry doesn't allow (#132), 482 after a failed PASS or USER (#130, #131)
76ea2bc
Development: the macOS CI jobs run only when started by hand
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
a694595
Home: report security vulnerabilities privately (SECURITY.md)
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
c408000
Wiki: program options as in the corrected man pages
From #126: newscache -h, and -o reads the configuration first;
newscacheclean -c, -s, -p, -t, -v, -h; updatenews -c, -v, -h, -g wins
over -o, -l only with -g, and what it does without -a, -g, -o and -l.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
de0f963
Wiki: which logins are required, allow authentication, 500 What?
From the corrected docs (#126): only "Authentication unix" without
fields requires a login; file:, pam, pam+file and unix with fields are
optional. "allow authentication" only keeps a client connected so that
it can log in. Where no login can add a right, a command that needs it
gets "500 What?", POST included.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
6c539d3
Wiki: Configuration: Server-only Retries/ReadTimeout, ConfigVersion, Hostname, Nice options
From the corrected newscache.conf(5) (#126): Retries and ReadTimeout
are options of a Server entry only; ConfigVersion accepts only 5 and may
be left out; Hostname is the host name in generated Message-IDs; the
Nice defaults, NiceServer also for the sessions, NiceClient without
effect; User/Password, ConnectTimeout, ConnectBackoff and dontgenmsgid
as described there. Also rejoins the server option table, which had a
blank line before its last row.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
226f388
Wiki: Home: 1.3.22 is out, what's next on main
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
806d43e
Wiki: daemon and log files, upgrading from 1.3.22
Installation: SIGTERM ends the sessions at once, the warning without
Username, the log directory needn't be writable for news when the
programs start as root, autogen stops when autoreconf fails.
Troubleshooting: log file links, fds 0-2 on /dev/null, config errors,
481, and what changes for users of 1.3.22.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
13ecede
Wiki: GNU/Hurd, current unit checks
NewsCache builds on Debian GNU/Hurd (#119): libcrypt-dev must be
installed there, and the e2e tests are skipped (no Go). The list of
unit checks adds cNewsgroupList, cLogger and cUtil.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
a64228d
Wiki: reply codes per RFC 3977/4643
Failed login 481, PASS without USER 482, AUTHINFO after a login or
without Authentication 502; greeting and MODE READER 201 when the client
may not post; MODE READER and CAPABILITIES before the login; 403 for
upstream failures and internal faults; POST answers only 240 or 441
after the article; GROUP/LISTGROUP 411 only for a missing group, 412
when the current group is gone; 420 for OVER/XOVER/XHDR without a
current article; 501 Line too long; NEWGROUPS in LIST ACTIVE format;
LIST ACTIVE and LIST NEWSGROUPS keep to the client's List. Also prefix
length errors, the Newsgroups split, pam+file lines and plainpass.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
ecfca1c