]> git.netwichtig.de Git - user/henk/code/inspircd.git/blobdiff - src/inspircd.cpp
Added 'uniqueness sums': http://www.inspircd.org/wiki/InspIRCd_Server_Protocol#Unique...
[user/henk/code/inspircd.git] / src / inspircd.cpp
index 3c2ab09a8a12b78320b0ab1009fc9506ab75ce7a..d5778e804b334674f9e23fdfd57cf848363e512e 100644 (file)
@@ -27,6 +27,11 @@ using namespace std;
 #include <sys/errno.h>
 #include <sys/ioctl.h>
 #include <sys/utsname.h>
+#ifdef USE_KQUEUE
+#include <sys/types.h>
+#include <sys/event.h>
+#include <sys/time.h>
+#endif
 #include <cstdio>
 #include <time.h>
 #include <string>
@@ -104,7 +109,11 @@ int openSockfd[MAXSOCKS];
 bool nofork = false;
 bool unlimitcore = false;
 
-time_t TIME = time(NULL);
+time_t TIME = time(NULL), OLDTIME = time(NULL);
+
+#ifdef USE_KQUEUE
+int kq, lkq, skq;
+#endif
 
 namespace nspace
 {
@@ -174,15 +183,23 @@ struct InAddr_HashComp
 typedef nspace::hash_map<std::string, userrec*, nspace::hash<string>, StrHashComp> user_hash;
 typedef nspace::hash_map<std::string, chanrec*, nspace::hash<string>, StrHashComp> chan_hash;
 typedef nspace::hash_map<in_addr,string*, nspace::hash<in_addr>, InAddr_HashComp> address_cache;
+typedef nspace::hash_map<std::string, WhoWasUser*, nspace::hash<string>, StrHashComp> whowas_hash;
 typedef std::deque<command_t> command_table;
 
+// This table references users by file descriptor.
+// its an array to make it VERY fast, as all lookups are referenced
+// by an integer, meaning there is no need for a scan/search operation.
+userrec* fd_ref_table[65536];
+
+int statsAccept = 0, statsRefused = 0, statsUnknown = 0, statsCollisions = 0, statsDns = 0, statsDnsGood = 0, statsDnsBad = 0, statsConnects = 0, statsSent= 0, statsRecv = 0;
+
 serverrec* me[32];
 
 FILE *log_file;
 
 user_hash clientlist;
 chan_hash chanlist;
-user_hash whowas;
+whowas_hash whowas;
 command_table cmdlist;
 file_cache MOTD;
 file_cache RULES;
@@ -193,14 +210,10 @@ ClassVector Classes;
 struct linger linger = { 0 };
 char MyExecutable[1024];
 int boundPortCount = 0;
-int portCount = 0, UDPportCount = 0, ports[MAXSOCKS];
+int portCount = 0, SERVERportCount = 0, ports[MAXSOCKS];
 int defaultRoute = 0;
 char ModPath[MAXBUF];
 
-connection C;
-
-long MyKey = C.GenKey();
-
 /* prototypes */
 
 int has_channel(userrec *u, chanrec *c);
@@ -215,6 +228,10 @@ std::stringstream config_f(stringstream::in | stringstream::out);
 
 std::vector<userrec*> all_opers;
 
+static char already_sent[65536];
+
+char lowermap[255];
+
 void AddOper(userrec* user)
 {
        log(DEBUG,"Oper added to optimization list");
@@ -341,7 +358,7 @@ void readfile(file_cache &F, const char* fname)
 void ReadConfig(bool bail, userrec* user)
 {
        char dbg[MAXBUF],pauseval[MAXBUF],Value[MAXBUF],timeout[MAXBUF],NB[MAXBUF],flood[MAXBUF],MW[MAXBUF];
-       char AH[MAXBUF],AP[MAXBUF],AF[MAXBUF],DNT[MAXBUF],pfreq[MAXBUF];
+       char AH[MAXBUF],AP[MAXBUF],AF[MAXBUF],DNT[MAXBUF],pfreq[MAXBUF],thold[MAXBUF],sqmax[MAXBUF],rqmax[MAXBUF];
        ConnectClass c;
        std::stringstream errstr;
        
@@ -446,6 +463,9 @@ void ReadConfig(bool bail, userrec* user)
                ConfValue("connect","timeout",i,timeout,&config_f);
                ConfValue("connect","flood",i,flood,&config_f);
                ConfValue("connect","pingfreq",i,pfreq,&config_f);
+               ConfValue("connect","threshold",i,thold,&config_f);
+               ConfValue("connect","sendq",i,sqmax,&config_f);
+               ConfValue("connect","recvq",i,rqmax,&config_f);
                if (Value[0])
                {
                        strlcpy(c.host,Value,MAXBUF);
@@ -456,6 +476,21 @@ void ReadConfig(bool bail, userrec* user)
                        c.registration_timeout = 90; // default is 2 minutes
                        c.pingtime = 120;
                        c.flood = atoi(flood);
+                       c.threshold = 5;
+                       c.sendqmax = 262144; // 256k
+                       c.recvqmax = 4096;   // 4k
+                       if (atoi(thold)>0)
+                       {
+                               c.threshold = atoi(thold);
+                       }
+                       if (atoi(sqmax)>0)
+                       {
+                               c.sendqmax = atoi(sqmax);
+                       }
+                       if (atoi(rqmax)>0)
+                       {
+                               c.recvqmax = atoi(rqmax);
+                       }
                        if (atoi(timeout)>0)
                        {
                                c.registration_timeout = atoi(timeout);
@@ -560,11 +595,15 @@ void ReadConfig(bool bail, userrec* user)
        }
 }
 
-/* write formatted text to a socket, in same format as printf */
+/* write formatted text to a socket, in same format as printf
+ * New in 1.0 Beta 5 - Nothing is written directly to a users fd any more.
+ * Instead, data builds up in the users sendq and each time around the mainloop
+ * this data is flushed to the user's socket (see userrec::FlushWriteBuf).
+ */
 
 void Write(int sock,char *text, ...)
 {
-       if (sock == FD_MAGIC_NUMBER)
+       if (sock < 0)
                return;
        if (!text)
        {
@@ -574,23 +613,28 @@ void Write(int sock,char *text, ...)
        char textbuffer[MAXBUF];
        va_list argsPtr;
        char tb[MAXBUF];
+       int res;
        
        va_start (argsPtr, text);
        vsnprintf(textbuffer, MAXBUF, text, argsPtr);
        va_end(argsPtr);
        int bytes = snprintf(tb,MAXBUF,"%s\r\n",textbuffer);
        chop(tb);
-       if (sock != -1)
+       if (fd_ref_table[sock])
        {
-               write(sock,tb,bytes > 514 ? 514 : bytes);
+               int MOD_RESULT = 0;
+               FOREACH_RESULT(OnRawSocketWrite(sock,tb,bytes));
+               fd_ref_table[sock]->AddWriteBuf(tb);
+               statsSent += bytes;
        }
+       else log(DEFAULT,"ERROR! attempted write to a user with no fd_ref_table entry!!!");
 }
 
 /* write a server formatted numeric response to a single socket */
 
 void WriteServ(int sock, char* text, ...)
 {
-        if (sock == FD_MAGIC_NUMBER)
+        if (sock < 0)
                 return;
        if (!text)
        {
@@ -598,6 +642,7 @@ void WriteServ(int sock, char* text, ...)
                return;
        }
        char textbuffer[MAXBUF],tb[MAXBUF];
+       int res;
        va_list argsPtr;
        va_start (argsPtr, text);
        
@@ -605,17 +650,21 @@ void WriteServ(int sock, char* text, ...)
        va_end(argsPtr);
        int bytes = snprintf(tb,MAXBUF,":%s %s\r\n",ServerName,textbuffer);
        chop(tb);
-       if (sock != -1)
-       {
-               write(sock,tb,bytes > 514 ? 514 : bytes);
-       }
+        if (fd_ref_table[sock])
+        {
+                int MOD_RESULT = 0;
+                FOREACH_RESULT(OnRawSocketWrite(sock,tb,bytes));
+                fd_ref_table[sock]->AddWriteBuf(tb);
+               statsSent += bytes;
+        }
+       else log(DEFAULT,"ERROR! attempted write to a user with no fd_ref_table entry!!!");
 }
 
 /* write text from an originating user to originating user */
 
 void WriteFrom(int sock, userrec *user,char* text, ...)
 {
-        if (sock == FD_MAGIC_NUMBER)
+        if (sock < 0)
                 return;
        if ((!text) || (!user))
        {
@@ -624,16 +673,21 @@ void WriteFrom(int sock, userrec *user,char* text, ...)
        }
        char textbuffer[MAXBUF],tb[MAXBUF];
        va_list argsPtr;
+       int res;
        va_start (argsPtr, text);
        
        vsnprintf(textbuffer, MAXBUF, text, argsPtr);
        va_end(argsPtr);
        int bytes = snprintf(tb,MAXBUF,":%s!%s@%s %s\r\n",user->nick,user->ident,user->dhost,textbuffer);
        chop(tb);
-       if (sock != -1)
-       {
-               write(sock,tb,bytes > 514 ? 514 : bytes);
-       }
+        if (fd_ref_table[sock])
+        {
+                int MOD_RESULT = 0;
+                FOREACH_RESULT(OnRawSocketWrite(sock,tb,bytes));
+                fd_ref_table[sock]->AddWriteBuf(tb);
+               statsSent += bytes;
+        }
+       else log(DEFAULT,"ERROR! attempted write to a user with no fd_ref_table entry!!!");
 }
 
 /* write text to an destination user from a source user (e.g. user privmsg) */
@@ -822,7 +876,9 @@ void WriteCommon(userrec *u, char* text, ...)
        va_end(argsPtr);
 
        // FIX: Stops a message going to the same person more than once
-       std::vector<int> already_sent;
+       bzero(&already_sent,65536);
+
+       bool sent_to_at_least_one = false;
 
         for (int i = 0; i < MAXCHANS; i++)
         {
@@ -833,26 +889,18 @@ void WriteCommon(userrec *u, char* text, ...)
                         {
                                 char* o = (*ulist)[j];
                                 userrec* otheruser = (userrec*)o;
-                               bool do_send = true;
-                               for (int t = 0; t < already_sent.size(); t++)
-                               {
-                                       if (already_sent[t] == otheruser->fd)
-                                       {
-                                               do_send = false;
-                                               break;
-                                       }
-                               }
-                               if (do_send)
+                               if ((otheruser->fd > 0) && (!already_sent[otheruser->fd]))
                                {
-                                       already_sent.push_back(otheruser->fd);
+                                       already_sent[otheruser->fd] = 1;
                                        WriteFrom(otheruser->fd,u,"%s",textbuffer);
+                                       sent_to_at_least_one = true;
                                }
                         }
                 }
         }
        // if the user was not in any channels, no users will receive the text. Make sure the user
        // receives their OWN message for WriteCommon
-       if (!already_sent.size())
+       if (!sent_to_at_least_one)
        {
                WriteFrom(u->fd,u,"%s",textbuffer);
        }
@@ -880,7 +928,7 @@ void WriteCommonExcept(userrec *u, char* text, ...)
        vsnprintf(textbuffer, MAXBUF, text, argsPtr);
        va_end(argsPtr);
 
-       std::vector<int> already_sent;
+        bzero(&already_sent,65536);
 
         for (int i = 0; i < MAXCHANS; i++)
         {
@@ -893,18 +941,9 @@ void WriteCommonExcept(userrec *u, char* text, ...)
                                 userrec* otheruser = (userrec*)o;
                                if (u != otheruser)
                                {
-                                       bool do_send = true;
-                                       for (int t = 0; t < already_sent.size(); t++)
-                                       {
-                                               if (already_sent[t] == otheruser->fd)
-                                               {
-                                                       do_send = false;
-                                                       break;
-                                               }
-                                       }
-                                       if (do_send)
+                                       if ((otheruser->fd > 0) && (!already_sent[otheruser->fd]))
                                        {
-                                               already_sent.push_back(otheruser->fd);
+                                               already_sent[otheruser->fd] = 1;
                                                WriteFrom(otheruser->fd,u,"%s",textbuffer);
                                        }
                                }
@@ -941,6 +980,41 @@ void WriteOpers(char* text, ...)
        }
 }
 
+void NoticeAllOpers(userrec *source, bool local_only, char* text, ...)
+{
+        if ((!text) || (!source))
+        {
+                log(DEFAULT,"*** BUG *** NoticeAllOpers was given an invalid parameter");
+                return;
+        }
+
+        char textbuffer[MAXBUF];
+        va_list argsPtr;
+        va_start (argsPtr, text);
+        vsnprintf(textbuffer, MAXBUF, text, argsPtr);
+        va_end(argsPtr);
+
+        for (std::vector<userrec*>::iterator i = all_opers.begin(); i != all_opers.end(); i++)
+        {
+                userrec* a = *i;
+                if ((a) && (a->fd != FD_MAGIC_NUMBER))
+                {
+                        if (strchr(a->modes,'s'))
+                        {
+                                // send server notices to all with +s
+                                WriteServ(a->fd,"NOTICE %s :*** Notice From %s: %s",a->nick,source->nick,textbuffer);
+                        }
+                }
+        }
+
+        if (!local_only)
+        {
+                char buffer[MAXBUF];
+                snprintf(buffer,MAXBUF,"V %s @* :%s",source->nick,textbuffer);
+                NetSendToAll(buffer);
+        }
+}
+
 // returns TRUE of any users on channel C occupy server 'servername'.
 
 bool ChanAnyOnThisServer(chanrec *c,char* servername)
@@ -985,8 +1059,8 @@ bool CommonOnThisServer(userrec* u,const char* servername)
 void NetSendToCommon(userrec* u, char* s)
 {
        char buffer[MAXBUF];
-       snprintf(buffer,MAXBUF,"%s",s);
-       
+       snprintf(buffer,MAXBUF,"%s %s",CreateSum().c_str(),s);
+
        log(DEBUG,"NetSendToCommon: '%s' '%s'",u->nick,s);
 
         std::string msg = buffer;
@@ -1012,7 +1086,7 @@ void NetSendToCommon(userrec* u, char* s)
 void NetSendToAll(char* s)
 {
        char buffer[MAXBUF];
-       snprintf(buffer,MAXBUF,"%s",s);
+       snprintf(buffer,MAXBUF,"%s %s",CreateSum().c_str(),s);
        
        log(DEBUG,"NetSendToAll: '%s'",s);
 
@@ -1032,10 +1106,33 @@ void NetSendToAll(char* s)
        }
 }
 
+void NetSendToAll_WithSum(char* s,char* u)
+{
+        char buffer[MAXBUF];
+        snprintf(buffer,MAXBUF,":%s %s",u,s);
+
+        log(DEBUG,"NetSendToAll: '%s'",s);
+
+        std::string msg = buffer;
+        FOREACH_MOD OnPacketTransmit(msg,s);
+        strlcpy(buffer,msg.c_str(),MAXBUF);
+
+        for (int j = 0; j < 32; j++)
+        {
+                if (me[j] != NULL)
+                {
+                        for (int k = 0; k < me[j]->connectors.size(); k++)
+                        {
+                                me[j]->SendPacket(buffer,me[j]->connectors[k].GetServerName().c_str());
+                        }
+                }
+        }
+}
+
 void NetSendToAllAlive(char* s)
 {
        char buffer[MAXBUF];
-       snprintf(buffer,MAXBUF,"%s",s);
+        snprintf(buffer,MAXBUF,"%s %s",CreateSum().c_str(),s);
        
        log(DEBUG,"NetSendToAllAlive: '%s'",s);
 
@@ -1066,7 +1163,7 @@ void NetSendToAllAlive(char* s)
 void NetSendToOne(char* target,char* s)
 {
        char buffer[MAXBUF];
-       snprintf(buffer,MAXBUF,"%s",s);
+        snprintf(buffer,MAXBUF,"%s %s",CreateSum().c_str(),s);
        
        log(DEBUG,"NetSendToOne: '%s' '%s'",target,s);
 
@@ -1092,7 +1189,7 @@ void NetSendToOne(char* target,char* s)
 void NetSendToAllExcept(const char* target,char* s)
 {
        char buffer[MAXBUF];
-       snprintf(buffer,MAXBUF,"%s",s);
+        snprintf(buffer,MAXBUF,"%s %s",CreateSum().c_str(),s);
        
        log(DEBUG,"NetSendToAllExcept: '%s' '%s'",target,s);
        
@@ -1115,6 +1212,32 @@ void NetSendToAllExcept(const char* target,char* s)
        }
 }
 
+void NetSendToAllExcept_WithSum(const char* target,char* s,char* u)
+{
+        char buffer[MAXBUF];
+        snprintf(buffer,MAXBUF,":%s %s",u,s);
+
+        log(DEBUG,"NetSendToAllExcept: '%s' '%s'",target,s);
+
+        std::string msg = buffer;
+        FOREACH_MOD OnPacketTransmit(msg,s);
+        strlcpy(buffer,msg.c_str(),MAXBUF);
+
+        for (int j = 0; j < 32; j++)
+        {
+                if (me[j] != NULL)
+                {
+                        for (int k = 0; k < me[j]->connectors.size(); k++)
+                        {
+                                if (strcasecmp(me[j]->connectors[k].GetServerName().c_str(),target))
+                                {
+                                        me[j]->SendPacket(buffer,me[j]->connectors[k].GetServerName().c_str());
+                                }
+                        }
+                }
+       }
+}
+
 
 void WriteMode(const char* modes, int flags, const char* text, ...)
 {
@@ -1171,6 +1294,37 @@ void WriteMode(const char* modes, int flags, const char* text, ...)
 }
 
 
+void NoticeAll(userrec *source, bool local_only, char* text, ...)
+{
+        if ((!text) || (!source))
+        {
+                log(DEFAULT,"*** BUG *** NoticeAll was given an invalid parameter");
+                return;
+        }
+
+        char textbuffer[MAXBUF];
+        va_list argsPtr;
+        va_start (argsPtr, text);
+        vsnprintf(textbuffer, MAXBUF, text, argsPtr);
+        va_end(argsPtr);
+
+        for (user_hash::const_iterator i = clientlist.begin(); i != clientlist.end(); i++)
+        {
+                if ((i->second) && (i->second->fd != FD_MAGIC_NUMBER))
+                {
+                       WriteFrom(i->second->fd,source,"NOTICE $* :%s",textbuffer);
+                }
+        }
+
+        if (!local_only)
+        {
+                char buffer[MAXBUF];
+                snprintf(buffer,MAXBUF,"V %s * :%s",source->nick,textbuffer);
+                NetSendToAll(buffer);
+        }
+
+}
+
 void WriteWallOps(userrec *source, bool local_only, char* text, ...)  
 {  
        if ((!text) || (!source))
@@ -1216,19 +1370,10 @@ void WriteWallOps(userrec *source, bool local_only, char* text, ...)
 
 void strlower(char *n)
 {
-       if (!n)
+       if (n)
        {
-               return;
-       }
-       for (int i = 0; n[i] != 0; i++)
-       {
-               n[i] = tolower(n[i]);
-               if (n[i] == '[')
-                       n[i] = '{';
-               if (n[i] == ']')
-                       n[i] = '}';
-               if (n[i] == '\\')
-                       n[i] = '|';
+               for (char* t = n; *t; t++)
+                       *t = lowermap[*t];
        }
 }
 
@@ -1293,7 +1438,6 @@ void purge_empty_chans(userrec* u)
        {
                if (u->chans[f].channel)
                {
-                       u->chans[f].channel->DecUserCounter();
                        u->chans[f].channel->DelUser((char*)u);
                }
        }
@@ -1343,11 +1487,11 @@ char* chanmodes(chanrec *chan)
 
        strcpy(scratch,"");
        strcpy(sparam,"");
-       if (chan->noexternal)
+       if (chan->binarymodes & CM_NOEXTERNAL)
        {
                strlcat(scratch,"n",MAXMODES);
        }
-       if (chan->topiclock)
+       if (chan->binarymodes & CM_TOPICLOCK)
        {
                strlcat(scratch,"t",MAXMODES);
        }
@@ -1359,19 +1503,19 @@ char* chanmodes(chanrec *chan)
        {
                strlcat(scratch,"l",MAXMODES);
        }
-       if (chan->inviteonly)
+       if (chan->binarymodes & CM_INVITEONLY)
        {
                strlcat(scratch,"i",MAXMODES);
        }
-       if (chan->moderated)
+       if (chan->binarymodes & CM_MODERATED)
        {
                strlcat(scratch,"m",MAXMODES);
        }
-       if (chan->secret)
+       if (chan->binarymodes & CM_SECRET)
        {
                strlcat(scratch,"s",MAXMODES);
        }
-       if (chan->c_private)
+       if (chan->binarymodes & CM_PRIVATE)
        {
                strlcat(scratch,"p",MAXMODES);
        }
@@ -1417,32 +1561,31 @@ void userlist(userrec *user,chanrec *c)
        }
 
        snprintf(list,MAXBUF,"353 %s = %s :", user->nick, c->name);
-       for (user_hash::const_iterator i = clientlist.begin(); i != clientlist.end(); i++)
+
+        std::vector<char*> *ulist = c->GetUsers();
+       for (int i = 0; i < ulist->size(); i++)
        {
-               if (has_channel(i->second,c))
+               char* o = (*ulist)[i];
+               userrec* otheruser = (userrec*)o;
+               if ((!has_channel(user,c)) && (strchr(otheruser->modes,'i')))
                {
-                       if (isnick(i->second->nick))
-                       {
-                               if ((!has_channel(i->second,c)) && (strchr(i->second->modes,'i')))
-                               {
-                                       /* user is +i, and source not on the channel, does not show
-                                        * nick in NAMES list */
-                                       continue;
-                               }
-                               strlcat(list,cmode(i->second,c),MAXBUF);
-                               strlcat(list,i->second->nick,MAXBUF);
-                               strlcat(list," ",MAXBUF);
-                               if (strlen(list)>(480-NICKMAX))
-                               {
-                                       /* list overflowed into
-                                        * multiple numerics */
-                                       WriteServ(user->fd,"%s",list);
-                                       snprintf(list,MAXBUF,"353 %s = %s :", user->nick, c->name);
-                               }
-                       }
+                       /* user is +i, and source not on the channel, does not show
+                        * nick in NAMES list */
+                       continue;
+               }
+               strlcat(list,cmode(otheruser,c),MAXBUF);
+               strlcat(list,otheruser->nick,MAXBUF);
+               strlcat(list," ",MAXBUF);
+               if (strlen(list)>(480-NICKMAX))
+               {
+                       /* list overflowed into
+                        * multiple numerics */
+                       WriteServ(user->fd,"%s",list);
+                       snprintf(list,MAXBUF,"353 %s = %s :", user->nick, c->name);
                }
        }
-       /* if whats left in the list isnt empty, send it */     if (list[strlen(list)-1] != ':')
+       /* if whats left in the list isnt empty, send it */
+       if (list[strlen(list)-1] != ':')
        {
                WriteServ(user->fd,"%s",list);
        }
@@ -1546,8 +1689,7 @@ chanrec* add_channel(userrec *user, const char* cn, const char* key, bool overri
                        chanlist[cname] = new chanrec();
 
                        strlcpy(chanlist[cname]->name, cname,CHANMAX);
-                       chanlist[cname]->topiclock = 1;
-                       chanlist[cname]->noexternal = 1;
+                       chanlist[cname]->binarymodes = CM_TOPICLOCK | CM_NOEXTERNAL;
                        chanlist[cname]->created = TIME;
                        strcpy(chanlist[cname]->topic, "");
                        strncpy(chanlist[cname]->setby, user->nick,NICKMAX);
@@ -1612,7 +1754,7 @@ chanrec* add_channel(userrec *user, const char* cn, const char* key, bool overri
                                        FOREACH_RESULT(OnCheckInvite(user, Ptr));
                                        if (MOD_RESULT == 0)
                                        {
-                                               if (Ptr->inviteonly)
+                                               if (Ptr->binarymodes & CM_INVITEONLY)
                                                {
                                                        log(DEBUG,"add_channel: channel is +i");
                                                        if (user->IsInvited(Ptr->name))
@@ -1704,7 +1846,6 @@ chanrec* add_channel(userrec *user, const char* cn, const char* key, bool overri
                                user->chans[index].uc_modes = 0;
                        }
                        user->chans[index].channel = Ptr;
-                       Ptr->IncUserCounter();
                        Ptr->AddUser((char*)user);
                        WriteChannel(Ptr,user,"JOIN :%s",Ptr->name);
                        
@@ -1807,7 +1948,6 @@ chanrec* del_channel(userrec *user, const char* cname, const char* reason, bool
                }
        }
 
-       Ptr->DecUserCounter();
        Ptr->DelUser((char*)user);
        
        /* if there are no users left on the channel */
@@ -1821,7 +1961,7 @@ chanrec* del_channel(userrec *user, const char* cname, const char* reason, bool
                if (iter != chanlist.end())
                {
                        log(DEBUG,"del_channel: destroyed: %s",Ptr->name);
-                       if (iter->second) delete iter->second;
+                       delete Ptr;
                        chanlist.erase(iter);
                }
        }
@@ -1892,7 +2032,6 @@ void kick_channel(userrec *src,userrec *user, chanrec *Ptr, char* reason)
                }
        }
 
-       Ptr->DecUserCounter();
        Ptr->DelUser((char*)user);
 
        /* if there are no users left on the channel */
@@ -1906,7 +2045,7 @@ void kick_channel(userrec *src,userrec *user, chanrec *Ptr, char* reason)
                if (iter != chanlist.end())
                {
                        log(DEBUG,"del_channel: destroyed: %s",Ptr->name);
-                       if (iter->second) delete iter->second;
+                       delete Ptr;
                        chanlist.erase(iter);
                }
        }
@@ -2096,7 +2235,6 @@ void kill_link(userrec *user,const char* r)
        Write(user->fd,"ERROR :Closing link (%s@%s) [%s]",user->ident,user->host,reason);
        log(DEBUG,"closing fd %lu",(unsigned long)user->fd);
 
-       /* bugfix, cant close() a nonblocking socket (sux!) */
        if (user->registered == 7) {
                FOREACH_MOD OnUserQuit(user);
                WriteCommonExcept(user,"QUIT :%s",reason);
@@ -2111,8 +2249,18 @@ void kill_link(userrec *user,const char* r)
 
        if (user->fd > -1)
        {
-               shutdown(user->fd,2);
-               close(user->fd);
+               FOREACH_MOD OnRawSocketClose(user->fd);
+#ifdef USE_KQUEUE
+               struct kevent ke;
+               EV_SET(&ke, user->fd, EVFILT_READ, EV_DELETE, 0, 0, NULL);
+               int i = kevent(kq, &ke, 1, 0, 0, NULL);
+               if (i == -1)
+               {
+                       log(DEBUG,"kqueue: Failed to remove user from queue!");
+               }
+#endif
+                shutdown(user->fd,2);
+                close(user->fd);
        }
        
        if (user->registered == 7) {
@@ -2126,12 +2274,12 @@ void kill_link(userrec *user,const char* r)
 
        if (iter != clientlist.end())
        {
-               log(DEBUG,"deleting user hash value %lu",(unsigned long)iter->second);
-               if ((iter->second) && (user->registered == 7)) {
-                       if (iter->second) delete iter->second;
-               }
+               log(DEBUG,"deleting user hash value %lu",(unsigned long)user);
+               if (user->fd > -1)
+                       fd_ref_table[user->fd] = NULL;
                clientlist.erase(iter);
        }
+       delete user;
 }
 
 void kill_link_silent(userrec *user,const char* r)
@@ -2151,7 +2299,6 @@ void kill_link_silent(userrec *user,const char* r)
        Write(user->fd,"ERROR :Closing link (%s@%s) [%s]",user->ident,user->host,reason);
        log(DEBUG,"closing fd %lu",(unsigned long)user->fd);
 
-       /* bugfix, cant close() a nonblocking socket (sux!) */
        if (user->registered == 7) {
                FOREACH_MOD OnUserQuit(user);
                WriteCommonExcept(user,"QUIT :%s",reason);
@@ -2166,6 +2313,16 @@ void kill_link_silent(userrec *user,const char* r)
 
         if (user->fd > -1)
         {
+               FOREACH_MOD OnRawSocketClose(user->fd);
+#ifdef USE_KQUEUE
+                struct kevent ke;
+                EV_SET(&ke, user->fd, EVFILT_READ, EV_DELETE, 0, 0, NULL);
+                int i = kevent(kq, &ke, 1, 0, 0, NULL);
+                if (i == -1)
+                {
+                        log(DEBUG,"kqueue: Failed to remove user from queue!");
+                }
+#endif
                 shutdown(user->fd,2);
                 close(user->fd);
         }
@@ -2176,12 +2333,12 @@ void kill_link_silent(userrec *user,const char* r)
        
        if (iter != clientlist.end())
        {
-               log(DEBUG,"deleting user hash value %lu",(unsigned long)iter->second);
-               if ((iter->second) && (user->registered == 7)) {
-                       if (iter->second) delete iter->second;
-               }
+               log(DEBUG,"deleting user hash value %lu",(unsigned long)user);
+                if (user->fd > -1)
+                        fd_ref_table[user->fd] = NULL;
                clientlist.erase(iter);
        }
+       delete user;
 }
 
 
@@ -2250,7 +2407,7 @@ void Error(int status)
 }
 
 
-int main(int argc, char **argv)
+int main(int argc, char** argv)
 {
        Start();
        srand(time(NULL));
@@ -2278,7 +2435,18 @@ int main(int argc, char **argv)
        }
        strlcpy(MyExecutable,argv[0],MAXBUF);
        
-       if (InspIRCd() == ERROR)
+       // initialize the lowercase mapping table
+       for (int cn = 0; cn < 256; cn++)
+               lowermap[cn] = cn;
+       // lowercase the uppercase chars
+       for (int cn = 65; cn < 91; cn++)
+               lowermap[cn] = tolower(cn);
+       // now replace the specific chars for scandanavian comparison
+       lowermap['['] = '{';
+       lowermap[']'] = '}';
+       lowermap['\\'] = '|';
+
+       if (InspIRCd(argv,argc) == ERROR)
        {
                log(DEFAULT,"main: daemon function bailed");
                printf("ERROR: could not initialise. Shutting down.\n");
@@ -2315,8 +2483,8 @@ userrec* ReHashNick(char* Old, char* New)
 
        log(DEBUG,"ReHashNick: Found hashed nick %s",Old);
 
-       clientlist[New] = new userrec();
-       clientlist[New] = oldnick->second;
+       userrec* olduser = oldnick->second;
+       clientlist[New] = olduser;
        clientlist.erase(oldnick);
 
        log(DEBUG,"ReHashNick: Nick rehashed as %s",New);
@@ -2327,12 +2495,12 @@ userrec* ReHashNick(char* Old, char* New)
 /* adds or updates an entry in the whowas list */
 void AddWhoWas(userrec* u)
 {
-       user_hash::iterator iter = whowas.find(u->nick);
-       userrec *a = new userrec();
+       whowas_hash::iterator iter = whowas.find(u->nick);
+       WhoWasUser *a = new WhoWasUser();
        strlcpy(a->nick,u->nick,NICKMAX);
-       strlcpy(a->ident,u->ident,64);
-       strlcpy(a->dhost,u->dhost,256);
-       strlcpy(a->host,u->host,256);
+       strlcpy(a->ident,u->ident,15);
+       strlcpy(a->dhost,u->dhost,160);
+       strlcpy(a->host,u->host,160);
        strlcpy(a->fullname,u->fullname,128);
        strlcpy(a->server,u->server,256);
        a->signon = u->signon;
@@ -2344,19 +2512,24 @@ void AddWhoWas(userrec* u)
        
        if (iter == whowas.end())
        {
-               if (whowas.size() == WHOWAS_MAX)
+               if (whowas.size() >= WHOWAS_MAX)
                {
-                       for (user_hash::iterator i = whowas.begin(); i != whowas.end(); i++)
+                       for (whowas_hash::iterator i = whowas.begin(); i != whowas.end(); i++)
                        {
                                // 3600 seconds in an hour ;)
                                if ((i->second->signon)<(TIME-(WHOWAS_STALE*3600)))
                                {
+                                       // delete the old one
                                        if (i->second) delete i->second;
+                                       // replace with new one
                                        i->second = a;
                                        log(DEBUG,"added WHOWAS entry, purged an old record");
                                        return;
                                }
                        }
+                       // no space left and user doesnt exist. Don't leave ram in use!
+                       log(DEBUG,"Not able to update whowas (list at WHOWAS_MAX entries and trying to add new?), freeing excess ram");
+                       delete a;
                }
                else
                {
@@ -2385,7 +2558,19 @@ void AddClient(int socket, char* host, int port, bool iscached, char* ip)
 
        iter = clientlist.find(tempnick);
 
-       if (iter != clientlist.end()) return;
+       // fix by brain.
+       // as these nicknames are 'RFC impossible', we can be sure nobody is going to be
+       // using one as a registered connection. As theyre per fd, we can also safely assume
+       // that we wont have collisions. Therefore, if the nick exists in the list, its only
+       // used by a dead socket, erase the iterator so that the new client may reclaim it.
+       // this was probably the cause of 'server ignores me when i hammer it with reconnects'
+       // issue in earlier alphas/betas
+       if (iter != clientlist.end())
+       {
+               userrec* goner = iter->second;
+               delete goner;
+               clientlist.erase(iter);
+       }
 
        /*
         * It is OK to access the value here this way since we know
@@ -2404,16 +2589,19 @@ void AddClient(int socket, char* host, int port, bool iscached, char* ip)
        strncpy(clientlist[tempnick]->host, host,160);
        strncpy(clientlist[tempnick]->dhost, host,160);
        strncpy(clientlist[tempnick]->server, ServerName,256);
-       strncpy(clientlist[tempnick]->ident, "unknown",12);
+       strncpy(clientlist[tempnick]->ident, "unknown",15);
        clientlist[tempnick]->registered = 0;
        clientlist[tempnick]->signon = TIME+dns_timeout;
        clientlist[tempnick]->lastping = 1;
        clientlist[tempnick]->port = port;
-       strncpy(clientlist[tempnick]->ip,ip,32);
+       strncpy(clientlist[tempnick]->ip,ip,16);
 
        // set the registration timeout for this user
        unsigned long class_regtimeout = 90;
        int class_flood = 0;
+       long class_threshold = 5;
+       long class_sqmax = 262144;      // 256kb
+       long class_rqmax = 4096;        // 4k
 
        for (ClassVector::iterator i = Classes.begin(); i != Classes.end(); i++)
        {
@@ -2422,6 +2610,9 @@ void AddClient(int socket, char* host, int port, bool iscached, char* ip)
                        class_regtimeout = (unsigned long)i->registration_timeout;
                        class_flood = i->flood;
                        clientlist[tempnick]->pingmax = i->pingtime;
+                       class_threshold = i->threshold;
+                       class_sqmax = i->sendqmax;
+                       class_rqmax = i->recvqmax;
                        break;
                }
        }
@@ -2429,6 +2620,9 @@ void AddClient(int socket, char* host, int port, bool iscached, char* ip)
        clientlist[tempnick]->nping = TIME+clientlist[tempnick]->pingmax+dns_timeout;
        clientlist[tempnick]->timeout = TIME+class_regtimeout;
        clientlist[tempnick]->flood = class_flood;
+       clientlist[tempnick]->threshold = class_threshold;
+       clientlist[tempnick]->sendqmax = class_sqmax;
+       clientlist[tempnick]->recvqmax = class_rqmax;
 
        for (int i = 0; i < MAXCHANS; i++)
        {
@@ -2437,7 +2631,23 @@ void AddClient(int socket, char* host, int port, bool iscached, char* ip)
        }
 
        if (clientlist.size() == MAXCLIENTS)
+       {
                kill_link(clientlist[tempnick],"No more connections allowed in this class");
+               return;
+       }
+
+       // this is done as a safety check to keep the file descriptors within range of fd_ref_table.
+       // its a pretty big but for the moment valid assumption:
+       // file descriptors are handed out starting at 0, and are recycled as theyre freed.
+       // therefore if there is ever an fd over 65535, 65536 clients must be connected to the
+       // irc server at once (or the irc server otherwise initiating this many connections, files etc)
+       // which for the time being is a physical impossibility (even the largest networks dont have more
+       // than about 10,000 users on ONE server!)
+       if (socket > 65534)
+       {
+               kill_link(clientlist[tempnick],"Server is full");
+               return;
+       }
                
 
         char* e = matches_exception(ip);
@@ -2449,8 +2659,52 @@ void AddClient(int socket, char* host, int port, bool iscached, char* ip)
                        char reason[MAXBUF];
                        snprintf(reason,MAXBUF,"Z-Lined: %s",r);
                        kill_link(clientlist[tempnick],reason);
+                       return;
                }
        }
+       fd_ref_table[socket] = clientlist[tempnick];
+
+#ifdef USE_KQUEUE
+       struct kevent ke;
+       log(DEBUG,"kqueue: Add user to events, kq=%d socket=%d",kq,socket);
+       EV_SET(&ke, socket, EVFILT_READ, EV_ADD, 0, 0, NULL);
+        int i = kevent(kq, &ke, 1, 0, 0, NULL);
+        if (i == -1)
+        {
+               switch (errno)
+               {
+                       case EACCES:
+                               log(DEBUG,"kqueue: EACCES");
+                       break;
+                       case EFAULT:
+                               log(DEBUG,"kqueue: EFAULT");
+                       break;
+                       case EBADF:
+                               log(DEBUG,"kqueue: EBADF=%d",ke.ident);
+                       break;
+                       case EINTR:
+                               log(DEBUG,"kqueue: EINTR");
+                       break;
+                       case EINVAL:
+                               log(DEBUG,"kqueue: EINVAL");
+                       break;
+                       case ENOENT:
+                               log(DEBUG,"kqueue: ENOENT");
+                       break;
+                       case ENOMEM:
+                               log(DEBUG,"kqueue: ENOMEM");
+                       break;
+                       case ESRCH:
+                               log(DEBUG,"kqueue: ESRCH");
+                       break;
+                       default:
+                               log(DEBUG,"kqueue: UNKNOWN!");
+                       break;
+               }
+                log(DEBUG,"kqueue: Failed to add user to queue!");
+        }
+
+#endif
 }
 
 // this function counts all users connected, wether they are registered or NOT.
@@ -2546,21 +2800,25 @@ long local_count()
 
 void ShowMOTD(userrec *user)
 {
+       char buf[65536];
         std::string WholeMOTD = "";
         if (!MOTD.size())
         {
                 WriteServ(user->fd,"422 %s :Message of the day file is missing.",user->nick);
                 return;
         }
-        WholeMOTD = std::string(":") + std::string(ServerName) + std::string(" 375 ") + std::string(user->nick) + std::string(" :- ") + std::string(ServerName) + " message of the day\r\n";
+        snprintf(buf,65535,":%s 375 %s :- %s message of the day\r\n", ServerName, user->nick, ServerName);
+       WholeMOTD = WholeMOTD + buf;
         for (int i = 0; i != MOTD.size(); i++)
         {
-                WholeMOTD = WholeMOTD + std::string(":") + std::string(ServerName) + std::string(" 372 ") + std::string(user->nick) + std::string(" :- ") + MOTD[i] + std::string("\r\n");
+               snprintf(buf,65535,":%s 372 %s :- %s\r\n", ServerName, user->nick, MOTD[i].c_str());
+                WholeMOTD = WholeMOTD + buf;
         }
-        WholeMOTD = WholeMOTD + std::string(":") + std::string(ServerName) + std::string(" 376 ") + std::string(user->nick) + std::string(" :End of message of the day.\r\n");
+       snprintf(buf,65535,":%s 376 %s :End of message of the day.\r\n", ServerName, user->nick);
+        WholeMOTD = WholeMOTD + buf;
         // only one write operation
-        send(user->fd,WholeMOTD.c_str(),WholeMOTD.length(),0);
-
+        user->AddWriteBuf(WholeMOTD);
+       statsSent += WholeMOTD.length();
 }
 
 void ShowRULES(userrec *user)
@@ -2581,7 +2839,7 @@ void ShowRULES(userrec *user)
 /* shows the message of the day, and any other on-logon stuff */
 void FullConnectUser(userrec* user)
 {
-        user->registered = 7;
+       statsConnects++;
         user->idle_lastmsg = TIME;
         log(DEBUG,"ConnectUser: %s",user->nick);
 
@@ -2619,6 +2877,9 @@ void FullConnectUser(userrec* user)
                }
        }
 
+       // fix by brain: move this below the xline checks to prevent spurious quits going onto the net that dont belong
+       user->registered = 7;
+
         WriteServ(user->fd,"NOTICE Auth :Welcome to \002%s\002!",Network);
         WriteServ(user->fd,"001 %s :Welcome to the %s IRC Network %s!%s@%s",user->nick,Network,user->nick,user->ident,user->host);
         WriteServ(user->fd,"002 %s :Your host is %s, running version %s",user->nick,ServerName,VERSION);
@@ -2629,7 +2890,7 @@ void FullConnectUser(userrec* user)
         v << "MESHED WALLCHOPS MODES=13 CHANTYPES=# PREFIX=(ohv)@%+ MAP SAFELIST MAXCHANNELS=" << MAXCHANS;
         v << " MAXBANS=60 NICKLEN=" << NICKMAX;
         v << " TOPICLEN=307 KICKLEN=307 MAXTARGETS=20 AWAYLEN=307 CHANMODES=ohvb,k,l,psmnti NETWORK=";
-        v << std::string(Network);
+        v << Network;
         std::string data005 = v.str();
         FOREACH_MOD On005Numeric(data005);
         // anfl @ #ratbox, efnet reminded me that according to the RFC this cant contain more than 13 tokens per line...
@@ -2651,12 +2912,14 @@ void FullConnectUser(userrec* user)
                 }
         }
         ShowMOTD(user);
-        FOREACH_MOD OnUserConnect(user);
-        WriteOpers("*** Client connecting on port %lu: %s!%s@%s [%s]",(unsigned long)user->port,user->nick,user->ident,user->host,user->ip);
 
         char buffer[MAXBUF];
        snprintf(buffer,MAXBUF,"N %lu %s %s %s %s +%s %s %s :%s",(unsigned long)user->age,user->nick,user->host,user->dhost,user->ident,user->modes,user->ip,ServerName,user->fullname);
         NetSendToAll(buffer);
+
+       // fix by brain: these should be AFTER the N token, so other servers know what the HELL we're on about... :)
+       FOREACH_MOD OnUserConnect(user);
+       WriteOpers("*** Client connecting on port %lu: %s!%s@%s [%s]",(unsigned long)user->port,user->nick,user->ident,user->host,user->ip);
 }
 
 
@@ -2694,7 +2957,12 @@ std::string GetVersionString()
         s1 = savept;
         v2 = strtok_r(s1," ",&savept);
         s1 = savept;
-       snprintf(versiondata,MAXBUF,"%s Rev. %s %s :%s (O=%lu)",VERSION,v2,ServerName,SYSTEM,(unsigned long)OPTIMISATION);
+#ifdef USE_KQUEUE
+       char socketengine[] = "kqueue";
+#else
+       char socketengine[] = "select";
+#endif
+       snprintf(versiondata,MAXBUF,"%s Rev. %s %s :%s (O=%lu) [SE=%s]",VERSION,v2,ServerName,SYSTEM,(unsigned long)OPTIMISATION,socketengine);
        return versiondata;
 }
 
@@ -2706,6 +2974,26 @@ void handle_version(char **parameters, int pcnt, userrec *user)
        }
        else
        {
+               if (!strcmp(parameters[0],"*"))
+               {
+                       for (int j = 0; j < 32; j++)
+                       {
+                               if (me[j] != NULL)
+                               {
+                                       for (int x = 0; x < me[j]->connectors.size(); x++)
+                                       {
+                                               WriteServ(user->fd,"351 %s :Server %d:%d (%s): %s",user->nick,j,x,me[j]->connectors[x].GetServerName().c_str(),me[j]->connectors[x].GetVersionString().c_str());
+                                       }
+                               }
+                       }
+                       return;
+               }
+               if (match(ServerName,parameters[0]))
+               {
+                       WriteServ(user->fd,"351 %s :%s",user->nick,GetVersionString().c_str());
+                       return;
+               }
+               bool displayed = false, found = false;
                 for (int j = 0; j < 32; j++)
                 {
                         if (me[j] != NULL)
@@ -2714,13 +3002,25 @@ void handle_version(char **parameters, int pcnt, userrec *user)
                                 {
                                         if (match(me[j]->connectors[x].GetServerName().c_str(),parameters[0]))
                                         {
-                                               WriteServ(user->fd,"351 %s :%s",user->nick,me[j]->connectors[x].GetVersionString().c_str());
-                                               return;
+                                               found = true;
+                                               if ((me[j]->connectors[x].GetVersionString() != "") && (!displayed))
+                                               {
+                                                       displayed = true;
+                                                       WriteServ(user->fd,"351 %s :%s",user->nick,me[j]->connectors[x].GetVersionString().c_str());
+                                               }
                                        }
                                }
                        }
                }
-               WriteServ(user->fd,"402 %s %s :No such server",user->nick,parameters[0]);
+               if ((!displayed) && (found))
+               {
+                       WriteServ(user->fd,"402 %s %s :Server %s has no version information",user->nick,parameters[0],parameters[0]);
+                       return;
+               }
+               if (!found)
+               {
+                       WriteServ(user->fd,"402 %s %s :No such server",user->nick,parameters[0]);
+               }
        }
        return;
 }
@@ -2839,11 +3139,13 @@ void force_nickchange(userrec* user,const char* newnick)
 
        FOREACH_RESULT(OnUserPreNick(user,newnick));
        if (MOD_RESULT) {
+               statsCollisions++;
                kill_link(user,"Nickname collision");
                return;
        }
        if (matches_qline(newnick))
        {
+               statsCollisions++;
                kill_link(user,"Nickname collision");
                return;
        }
@@ -3050,6 +3352,7 @@ void process_command(userrec *user, char* cmd)
                        {
                                if (strchr("@!\"$%^&*(){}[]_=+;:'#~,<>/?\\|`",command[x]))
                                {
+                                       statsUnknown++;
                                        WriteServ(user->fd,"421 %s %s :Unknown command",user->nick,command);
                                        return;
                                }
@@ -3142,13 +3445,6 @@ void process_command(userrec *user, char* cmd)
                                                        /* ikky /stats counters */
                                                        if (temp)
                                                        {
-                                                               if (user)
-                                                               {
-                                                                       user->bytes_in += strlen(temp);
-                                                                       user->cmds_in++;
-                                                                       user->bytes_out+=strlen(temp);
-                                                                       user->cmds_out++;
-                                                               }
                                                                cmdlist[i].use_count++;
                                                                cmdlist[i].total_bytes+=strlen(temp);
                                                        }
@@ -3179,6 +3475,7 @@ void process_command(userrec *user, char* cmd)
        }
        if ((!cmd_found) && (user))
        {
+               statsUnknown++;
                WriteServ(user->fd,"421 %s %s :Unknown command",user->nick,command);
        }
 }
@@ -3335,7 +3632,7 @@ void DoSync(serverrec* serv, char* tcp_host)
        // send start of sync marker: Y <timestamp>
        // at this point the ircd receiving it starts broadcasting this netburst to all ircds
        // except the ones its receiving it from.
-       snprintf(data,MAXBUF,"Y %lu",(unsigned long)TIME);
+       snprintf(data,MAXBUF,"%s Y %lu",CreateSum().c_str(),(unsigned long)TIME);
        serv->SendPacket(data,tcp_host);
        // send users and channels
 
@@ -3350,7 +3647,7 @@ void DoSync(serverrec* serv, char* tcp_host)
                         {
                                 if (is_uline(me[j]->connectors[k].GetServerName().c_str()))
                                 {
-                                        snprintf(data,MAXBUF,"H %s",me[j]->connectors[k].GetServerName().c_str());
+                                        snprintf(data,MAXBUF,"%s H %s",CreateSum().c_str(),me[j]->connectors[k].GetServerName().c_str());
                                         serv->SendPacket(data,tcp_host);
                                 }
                         }
@@ -3358,17 +3655,17 @@ void DoSync(serverrec* serv, char* tcp_host)
         }
 
        // send our version for the remote side to cache
-       snprintf(data,MAXBUF,"v %s %s",ServerName,GetVersionString().c_str());
+       snprintf(data,MAXBUF,"%s v %s %s",CreateSum().c_str(),ServerName,GetVersionString().c_str());
        serv->SendPacket(data,tcp_host);
 
        // sync the users and channels, give the modules a look-in.
        for (user_hash::iterator u = clientlist.begin(); u != clientlist.end(); u++)
        {
-               snprintf(data,MAXBUF,"N %lu %s %s %s %s +%s %s %s :%s",(unsigned long)u->second->age,u->second->nick,u->second->host,u->second->dhost,u->second->ident,u->second->modes,u->second->ip,u->second->server,u->second->fullname);
+               snprintf(data,MAXBUF,"%s N %lu %s %s %s %s +%s %s %s :%s",CreateSum().c_str(),(unsigned long)u->second->age,u->second->nick,u->second->host,u->second->dhost,u->second->ident,u->second->modes,u->second->ip,u->second->server,u->second->fullname);
                serv->SendPacket(data,tcp_host);
                if (strchr(u->second->modes,'o'))
                {
-                       snprintf(data,MAXBUF,"| %s %s",u->second->nick,u->second->oper);
+                       snprintf(data,MAXBUF,"%s | %s %s",CreateSum().c_str(),u->second->nick,u->second->oper);
                        serv->SendPacket(data,tcp_host);
                }
                for (int i = 0; i <= MODCOUNT; i++)
@@ -3376,14 +3673,14 @@ void DoSync(serverrec* serv, char* tcp_host)
                        string_list l = modules[i]->OnUserSync(u->second);
                        for (int j = 0; j < l.size(); j++)
                        {
-                               strlcpy(data,l[j].c_str(),MAXBUF);
+                               snprintf(data,MAXBUF,"%s %s",CreateSum().c_str(),l[j].c_str());
                                serv->SendPacket(data,tcp_host);
                        }
                }
-               char* chl = chlist(u->second);
+               char* chl = chlist(u->second,u->second);
                if (strcmp(chl,""))
                {
-                       snprintf(data,MAXBUF,"J %s %s",u->second->nick,chl);
+                       snprintf(data,MAXBUF,"%s J %s %s",CreateSum().c_str(),u->second->nick,chl);
                        serv->SendPacket(data,tcp_host);
                }
        }
@@ -3397,27 +3694,27 @@ void DoSync(serverrec* serv, char* tcp_host)
                        string_list l = modules[i]->OnChannelSync(c->second);
                        for (int j = 0; j < l.size(); j++)
                        {
-                               strlcpy(data,l[j].c_str(),MAXBUF);
+                               snprintf(data,MAXBUF,"%s %s",CreateSum().c_str(),l[j].c_str());
                                serv->SendPacket(data,tcp_host);
                        }
                }
                if (c->second->topic[0])
                {
-                       snprintf(data,MAXBUF,"T %lu %s %s :%s",(unsigned long)c->second->topicset,c->second->setby,c->second->name,c->second->topic);
+                       snprintf(data,MAXBUF,"%s T %lu %s %s :%s",CreateSum().c_str(),(unsigned long)c->second->topicset,c->second->setby,c->second->name,c->second->topic);
                        serv->SendPacket(data,tcp_host);
                }
                // send current banlist
                
                for (BanList::iterator b = c->second->bans.begin(); b != c->second->bans.end(); b++)
                {
-                       snprintf(data,MAXBUF,"M %s +b %s",c->second->name,b->data);
+                       snprintf(data,MAXBUF,"%s M %s +b %s",CreateSum().c_str(),c->second->name,b->data);
                        serv->SendPacket(data,tcp_host);
                }
        }
        // sync global zlines, glines, etc
        sync_xlines(serv,tcp_host);
 
-       snprintf(data,MAXBUF,"F %lu",(unsigned long)TIME);
+       snprintf(data,MAXBUF,"%s F %lu",CreateSum().c_str(),(unsigned long)TIME);
        serv->SendPacket(data,tcp_host);
        log(DEBUG,"Sent sync");
        // ircd sends its serverlist after the end of sync here
@@ -3581,9 +3878,10 @@ void erase_module(int j)
 
 bool UnloadModule(const char* filename)
 {
+       std::string filename_str = filename;
        for (int j = 0; j != module_names.size(); j++)
        {
-               if (module_names[j] == std::string(filename))
+               if (module_names[j] == filename_str)
                {
                        if (modules[j]->GetVersion().Flags & VF_STATIC)
                        {
@@ -3643,10 +3941,37 @@ bool DirValid(char* dirandfile)
        else return false;
 }
 
+std::string GetFullProgDir(char** argv, int argc)
+{
+       char work[MAXBUF];
+       strlcpy(work,argv[0],MAXBUF);
+       int p = strlen(work);
+       // we just want the dir
+       while (strlen(work))
+       {
+               if (work[p] == '/')
+               {
+                       work[p] = '\0';
+                       break;
+               }
+               work[p--] = '\0';
+       }
+       char buffer[MAXBUF], otherdir[MAXBUF];
+       // Get the current working directory
+       if( getcwd( buffer, MAXBUF ) == NULL )
+               return "";
+       chdir(work);
+       if( getcwd( otherdir, MAXBUF ) == NULL )
+               return "";
+       chdir(buffer);
+       return otherdir;
+}
+
 bool LoadModule(const char* filename)
 {
        char modfile[MAXBUF];
        snprintf(modfile,MAXBUF,"%s/%s",ModPath,filename);
+       std::string filename_str = filename;
        if (!DirValid(modfile))
        {
                log(DEFAULT,"Module %s is not within the modules directory.",modfile);
@@ -3658,7 +3983,7 @@ bool LoadModule(const char* filename)
         {
                for (int j = 0; j < module_names.size(); j++)
                {
-                       if (module_names[j] == std::string(filename))
+                       if (module_names[j] == filename_str)
                        {
                                log(DEFAULT,"Module %s is already loaded, cannot load a module twice!",modfile);
                                snprintf(MODERR,MAXBUF,"Module already loaded");
@@ -3699,7 +4024,7 @@ bool LoadModule(const char* filename)
        return true;
 }
 
-int InspIRCd(void)
+int InspIRCd(char** argv, int argc)
 {
        struct sockaddr_in client,server;
        char addrs[MAXBUF][255];
@@ -3711,12 +4036,14 @@ int InspIRCd(void)
        fd_set selectFds;
        timeval tv;
 
-       log_file = fopen("ircd.log","a+");
+       std::string logpath = GetFullProgDir(argv,argc) + "/ircd.log";
+       log_file = fopen(logpath.c_str(),"a+");
        if (!log_file)
        {
-               printf("ERROR: Could not write to logfile ircd.log, bailing!\n\n");
+               printf("ERROR: Could not write to logfile %s, bailing!\n\n",logpath.c_str());
                Exit(ERROR);
        }
+       printf("Logging to %s...\n",logpath.c_str());
 
        log(DEFAULT,"$Id$");
        if (geteuid() == 0)
@@ -3774,9 +4101,9 @@ int InspIRCd(void)
                log(DEBUG,"InspIRCd: startup: read binding %s:%s [%s] from config",Addr,configToken, Type);
        }
        portCount = clientportcount;
-       UDPportCount = serverportcount;
+       SERVERportCount = serverportcount;
          
-       log(DEBUG,"InspIRCd: startup: read %lu total client ports and %lu total server ports",(unsigned long)portCount,(unsigned long)UDPportCount);
+       log(DEBUG,"InspIRCd: startup: read %lu total client ports and %lu total server ports",(unsigned long)portCount,(unsigned long)SERVERportCount);
        log(DEBUG,"InspIRCd: startup: InspIRCd is now starting!");
        
        printf("\n");
@@ -3804,7 +4131,9 @@ int InspIRCd(void)
        WritePID(PID);
          
        /* setup select call */
+#ifndef USE_KQUEUE
        FD_ZERO(&selectFds);
+#endif
        log(DEBUG,"InspIRCd: startup: zero selects");
        log(VERBOSE,"InspIRCd: startup: portCount = %lu", (unsigned long)portCount);
        
@@ -3852,24 +4181,78 @@ int InspIRCd(void)
                 }
         }
 
+       // BUGFIX: We cannot initialize this before forking, as the kqueue data is not inherited by child processes!
+#ifdef USE_KQUEUE
+        kq = kqueue();
+       lkq = kqueue();
+       skq = kqueue();
+        if ((kq == -1) || (lkq == -1) || (skq == -1))
+        {
+                log(DEFAULT,"main: kqueue() failed!");
+                printf("ERROR: could not initialise kqueue event system. Shutting down.\n");
+                Exit(ERROR);
+        }
+#endif
+
+
+#ifdef USE_KQUEUE
+       log(DEFAULT,"kqueue socket engine is enabled. Filling listen list.");
+       for (count = 0; count < boundPortCount; count++)
+       {
+               struct kevent ke;
+               log(DEBUG,"kqueue: Add listening socket to events, kq=%d socket=%d",lkq,openSockfd[count]);
+               EV_SET(&ke, openSockfd[count], EVFILT_READ, EV_ADD, 0, 5, NULL);
+               int i = kevent(lkq, &ke, 1, 0, 0, NULL);
+               if (i == -1)
+               {
+                       log(DEFAULT,"main: add listen ports to kqueue failed!");
+                       printf("ERROR: could not initialise listening sockets in kqueue. Shutting down.\n");
+               }
+       }
+        for (int t = 0; t != SERVERportCount; t++)
+        {
+                struct kevent ke;
+                if (me[t])
+                {
+                       log(DEBUG,"kqueue: Add listening SERVER socket to events, kq=%d socket=%d",skq,me[t]->fd);
+                       EV_SET(&ke, me[t]->fd, EVFILT_READ, EV_ADD, 0, 5, NULL);
+                       int i = kevent(skq, &ke, 1, 0, 0, NULL);
+                       if (i == -1)
+                       {
+                               log(DEFAULT,"main: add server listen ports to kqueue failed!");
+                               printf("ERROR: could not initialise listening server sockets in kqueue. Shutting down.\n");
+                       }
+               }
+        }
+
+
+#else
+       log(DEFAULT,"Using standard select socket engine.");
+#endif
+
        WritePID(PID);
 
        length = sizeof (client);
-       char udp_msg[MAXBUF],tcp_host[MAXBUF];
+       char tcp_msg[MAXBUF],tcp_host[MAXBUF],tcp_sum[MAXBUF];
 
+#ifdef USE_KQUEUE
+        struct kevent ke;
+       struct kevent ke_list[33];
+        struct timespec ts;
+#endif
         fd_set serverfds;
         timeval tvs;
         tvs.tv_usec = 10000L;
         tvs.tv_sec = 0;
        tv.tv_sec = 0;
        tv.tv_usec = 10000L;
-        char data[65535];
+        char data[65536];
        timeval tval;
        fd_set sfd;
         tval.tv_usec = 10000L;
         tval.tv_sec = 0;
         int total_in_this_set = 0;
-       int v = 0;
+       int i = 0, v = 0, j = 0, cycle_iter = 0;
        bool expire_run = false;
          
        /* main loop, this never returns */
@@ -3878,13 +4261,16 @@ int InspIRCd(void)
 #ifdef _POSIX_PRIORITY_SCHEDULING
                sched_yield();
 #endif
-                // poll dns queue
-                dns_poll();
+#ifndef USE_KQUEUE
                FD_ZERO(&sfd);
+#endif
 
                // we only read time() once per iteration rather than tons of times!
+               OLDTIME = TIME;
                TIME = time(NULL);
 
+               dns_poll();
+
                // *FIX* Instead of closing sockets in kill_link when they receive the ERROR :blah line, we should queue
                // them in a list, then reap the list every second or so.
                if (((TIME % 5) == 0) && (!expire_run))
@@ -3900,25 +4286,35 @@ int InspIRCd(void)
                // fix by brain - this must be below any manipulation of the hashmap by modules
                user_hash::iterator count2 = clientlist.begin();
 
+#ifdef USE_KQUEUE
+               ts.tv_sec = 0;
+               ts.tv_nsec = 30000L;
+               i = kevent(skq, NULL, 0, &ke, 1, &ts);
+               if (i > 0)
+               {
+                       log(DEBUG,"kqueue: Listening server socket event, i=%d, ke.ident=%d",i,ke.ident);
+                       for (int x = 0; x != SERVERportCount; x++)
+                       {
+                               if ((me[x]) && (ke.ident == me[x]->fd))
+                               {
+
+#else
                FD_ZERO(&serverfds);
-               
-               for (int x = 0; x != UDPportCount; x++)
+               for (int x = 0; x != SERVERportCount; x++)
                {
                        if (me[x])
                                FD_SET(me[x]->fd, &serverfds);
                }
-               
-               // serverFds timevals went here
-               
                tvs.tv_usec = 30000L;
                tvs.tv_sec = 0;
                int servresult = select(32767, &serverfds, NULL, NULL, &tvs);
                if (servresult > 0)
                {
-                       for (int x = 0; x != UDPportCount; x++)
+                       for (int x = 0; x != SERVERportCount; x++)
                        {
                                if ((me[x]) && (FD_ISSET (me[x]->fd, &serverfds)))
                                {
+#endif
                                        char remotehost[MAXBUF],resolved[MAXBUF];
                                        length = sizeof (client);
                                        incomingSockfd = accept (me[x]->fd, (sockaddr *) &client, &length);
@@ -3937,47 +4333,52 @@ int InspIRCd(void)
                        }
                }
      
-               for (int x = 0; x < UDPportCount; x++)
+               for (int x = 0; x < SERVERportCount; x++)
                {
                        std::deque<std::string> msgs;
+                       std::deque<std::string> sums;
                        msgs.clear();
-                       if ((me[x]) && (me[x]->RecvPacket(msgs, tcp_host)))
+                       sums.clear();
+                       if ((me[x]) && (me[x]->RecvPacket(msgs, tcp_host, sums)))
                        {
                                for (int ctr = 0; ctr < msgs.size(); ctr++)
                                {
-                                       strlcpy(udp_msg,msgs[ctr].c_str(),MAXBUF);
-                                       log(DEBUG,"Processing: %s",udp_msg);
-                                       if (!udp_msg[0])
+                                       strlcpy(tcp_msg,msgs[ctr].c_str(),MAXBUF);
+                                       strlcpy(tcp_sum,msgs[ctr].c_str(),MAXBUF);
+                                       log(DEBUG,"Processing: %s",tcp_msg);
+                                       if (!tcp_msg[0])
                                        {
                                                log(DEBUG,"Invalid string from %s [route%lu]",tcp_host,(unsigned long)x);
                                                break;
                                        }
                                        // during a netburst, send all data to all other linked servers
-                                       if ((((nb_start>0) && (udp_msg[0] != 'Y') && (udp_msg[0] != 'X') && (udp_msg[0] != 'F'))) || (is_uline(tcp_host)))
+                                       if ((((nb_start>0) && (tcp_msg[0] != 'Y') && (tcp_msg[0] != 'X') && (tcp_msg[0] != 'F'))) || (is_uline(tcp_host)))
                                        {
                                                if (is_uline(tcp_host))
                                                {
-                                                       if ((udp_msg[0] != 'Y') && (udp_msg[0] != 'X') && (udp_msg[0] != 'F'))
+                                                       if ((tcp_msg[0] != 'Y') && (tcp_msg[0] != 'X') && (tcp_msg[0] != 'F'))
                                                        {
-                                                               NetSendToAllExcept(tcp_host,udp_msg);
+                                                               NetSendToAllExcept_WithSum(tcp_host,tcp_msg,tcp_sum);
                                                        }
                                                }
                                                else
-                                                       NetSendToAllExcept(tcp_host,udp_msg);
+                                                       NetSendToAllExcept_WithSum(tcp_host,tcp_msg,tcp_sum);
                                        }
-                                       std::string msg = udp_msg;
+                                       std::string msg = tcp_msg;
                                        FOREACH_MOD OnPacketReceive(msg,tcp_host);
-                                       strlcpy(udp_msg,msg.c_str(),MAXBUF);
-                                       handle_link_packet(udp_msg, tcp_host, me[x]);
+                                       strlcpy(tcp_msg,msg.c_str(),MAXBUF);
+                                       handle_link_packet(tcp_msg, tcp_host, me[x], tcp_sum);
                                }
                                goto label;
                        }
                }
        
-
        while (count2 != clientlist.end())
        {
+#ifndef USE_KQUEUE
                FD_ZERO(&sfd);
+#endif
+
                total_in_this_set = 0;
 
                user_hash::iterator xcount = count2;
@@ -3985,56 +4386,74 @@ int InspIRCd(void)
 
                if (count2 == clientlist.end()) break;
 
+               userrec* curr = NULL;
+
                if (count2->second)
-               if (count2->second->fd != 0)
+                       curr = count2->second;
+
+               if ((curr) && (curr->fd != 0))
                {
+#ifdef _POSIX_PRIORITY_SCHEDULING
+        sched_yield();
+#endif
                        // assemble up to 64 sockets into an fd_set
                        // to implement a pooling mechanism.
                        //
                        // This should be up to 64x faster than the
                        // old implementation.
-                       while (total_in_this_set < 64)
+#ifndef USE_KQUEUE
+                       while (total_in_this_set < 1024)
                        {
                                if (count2 != clientlist.end())
                                {
+                                       curr = count2->second;
                                        // we don't check the state of remote users.
-                                       if ((count2->second->fd != -1) && (count2->second->fd != FD_MAGIC_NUMBER))
+                                       if ((curr->fd != -1) && (curr->fd != FD_MAGIC_NUMBER))
                                        {
-                                               FD_SET (count2->second->fd, &sfd);
+                                               curr->FlushWriteBuf();
+                                               if (curr->GetWriteError() != "")
+                                               {
+                                                       log(DEBUG,"InspIRCd: write error: %s",curr->GetWriteError().c_str());
+                                                       kill_link(curr,curr->GetWriteError().c_str());
+                                                       goto label;
+                                               }
+
+                                               FD_SET (curr->fd, &sfd);
 
                                                // registration timeout -- didnt send USER/NICK/HOST in the time specified in
                                                // their connection class.
-                                               if ((TIME > count2->second->timeout) && (count2->second->registered != 7)) 
+                                               if ((TIME > curr->timeout) && (curr->registered != 7)) 
                                                {
-                                                       log(DEBUG,"InspIRCd: registration timeout: %s",count2->second->nick);
-                                                       kill_link(count2->second,"Registration timeout");
+                                                       log(DEBUG,"InspIRCd: registration timeout: %s",curr->nick);
+                                                       kill_link(curr,"Registration timeout");
                                                        goto label;
                                                }
-                                               if ((TIME > count2->second->signon) && (count2->second->registered == 3) && (AllModulesReportReady(count2->second)))
+                                               if ((TIME > curr->signon) && (curr->registered == 3) && (AllModulesReportReady(curr)))
                                                {
                                                        log(DEBUG,"signon exceed, registered=3, and modules ready, OK");
-                                                       count2->second->dns_done = true;
-                                                       FullConnectUser(count2->second);
+                                                       curr->dns_done = true;
+                                                       statsDnsBad++;
+                                                       FullConnectUser(curr);
                                                        goto label;
                                                }
-                                               if ((count2->second->dns_done) && (count2->second->registered == 3) && (AllModulesReportReady(count2->second))) // both NICK and USER... and DNS
+                                               if ((curr->dns_done) && (curr->registered == 3) && (AllModulesReportReady(curr))) // both NICK and USER... and DNS
                                                {
                                                        log(DEBUG,"dns done, registered=3, and modules ready, OK");
-                                                       FullConnectUser(count2->second);
+                                                       FullConnectUser(curr);
                                                        goto label;
                                                }
-                                               if ((TIME > count2->second->nping) && (isnick(count2->second->nick)) && (count2->second->registered == 7))
+                                               if ((TIME > curr->nping) && (isnick(curr->nick)) && (curr->registered == 7))
                                                {
-                                                       if ((!count2->second->lastping) && (count2->second->registered == 7))
+                                                       if ((!curr->lastping) && (curr->registered == 7))
                                                        {
-                                                               log(DEBUG,"InspIRCd: ping timeout: %s",count2->second->nick);
-                                                               kill_link(count2->second,"Ping timeout");
+                                                               log(DEBUG,"InspIRCd: ping timeout: %s",curr->nick);
+                                                               kill_link(curr,"Ping timeout");
                                                                goto label;
                                                        }
-                                                       Write(count2->second->fd,"PING :%s",ServerName);
-                                                       log(DEBUG,"InspIRCd: pinging: %s",count2->second->nick);
-                                                       count2->second->lastping = 0;
-                                                       count2->second->nping = TIME+count2->second->pingmax;   // was hard coded to 120
+                                                       Write(curr->fd,"PING :%s",ServerName);
+                                                       log(DEBUG,"InspIRCd: pinging: %s",curr->nick);
+                                                       curr->lastping = 0;
+                                                       curr->nping = TIME+curr->pingmax;       // was hard coded to 120
                                                }
                                        }
                                        count2++;
@@ -4042,32 +4461,122 @@ int InspIRCd(void)
                                }
                                else break;
                        }
-   
                        endingiter = count2;
                                count2 = xcount; // roll back to where we were
+#else
+                       // KQUEUE: We don't go through a loop to fill the fd_set so instead we must manually do this loop every now and again.
+                       // TODO: We dont need to do all this EVERY loop iteration, tone down the visits to this if we're using kqueue.
+                       cycle_iter++;
+                       if (cycle_iter > 10) while (count2 != clientlist.end())
+                       {
+                               cycle_iter = 0;
+                               if (count2 != clientlist.end())
+                               {
+                                       curr = count2->second;
+                                       // we don't check the state of remote users.
+                                       if ((curr->fd != -1) && (curr->fd != FD_MAGIC_NUMBER))
+                                       {
+
+                                                curr->FlushWriteBuf();
+                                                if (curr->GetWriteError() != "")
+                                                {
+                                                        log(DEBUG,"InspIRCd: write error: %s",curr->GetWriteError().c_str());
+                                                        kill_link(curr,curr->GetWriteError().c_str());
+                                                        goto label;
+                                                }
+
+                                               // registration timeout -- didnt send USER/NICK/HOST in the time specified in
+                                               // their connection class.
+                                               if ((TIME > curr->timeout) && (curr->registered != 7))
+                                               {
+                                                       log(DEBUG,"InspIRCd: registration timeout: %s",curr->nick);
+                                                       kill_link(curr,"Registration timeout");
+                                                       goto label;
+                                               }
+                                               if ((TIME > curr->signon) && (curr->registered == 3) && (AllModulesReportReady(curr)))
+                                               {
+                                                       log(DEBUG,"signon exceed, registered=3, and modules ready, OK: %d %d",TIME,curr->signon);
+                                                       curr->dns_done = true;
+                                                       statsDnsBad++;
+                                                       FullConnectUser(curr);
+                                                       goto label;
+                                               }
+                                               if ((curr->dns_done) && (curr->registered == 3) && (AllModulesReportReady(curr)))
+                                               {
+                                                       log(DEBUG,"dns done, registered=3, and modules ready, OK");
+                                                       FullConnectUser(curr);
+                                                       goto label;
+                                               }
+                                               if ((TIME > curr->nping) && (isnick(curr->nick)) && (curr->registered == 7))
+                                               {
+                                                       if ((!curr->lastping) && (curr->registered == 7))
+                                                       {
+                                                               log(DEBUG,"InspIRCd: ping timeout: %s",curr->nick);
+                                                               kill_link(curr,"Ping timeout");
+                                                               goto label;
+                                                       }
+                                                       Write(curr->fd,"PING :%s",ServerName);
+                                                       log(DEBUG,"InspIRCd: pinging: %s",curr->nick);
+                                                       curr->lastping = 0;
+                                                       curr->nping = TIME+curr->pingmax;       // was hard coded to 120
+                                               }
+                                       }
+                               }
+                               else break;
+                               count2++;
+                       }
+                       // increment the counter right to the end of the list, as kqueue processes everything in one go
+#endif
         
                        v = 0;
 
-                       // tvals defined here
-
+#ifdef USE_KQUEUE
+                       ts.tv_sec = 0;
+                       ts.tv_nsec = 1000L;
+                       // for now, we only read 1 event. We could read soooo many more :)
+                       int i = kevent(kq, NULL, 0, &ke, 1, &ts);
+                       if (i > 0)
+                       {
+                               log(DEBUG,"kevent call: kq=%d, i=%d",kq,i);
+                               // KQUEUE: kevent gives us ONE fd which is ready to have something done to it. Do something to it.
+                               userrec* cu = fd_ref_table[ke.ident];
+#else
                        tval.tv_usec = 1000L;
                        selectResult2 = select(65535, &sfd, NULL, NULL, &tval);
                        
                        // now loop through all of the items in this pool if any are waiting
-                       //if (selectResult2 > 0)
+                       if (selectResult2 > 0)
                        for (user_hash::iterator count2a = xcount; count2a != endingiter; count2a++)
                        {
+                               // SELECT: we have to iterate...
+                               userrec* cu = count2a->second;
+#endif
 
 #ifdef _POSIX_PRIORITY_SCHEDULING
                                sched_yield();
 #endif
-
                                result = EAGAIN;
-                               if ((count2a->second->fd != FD_MAGIC_NUMBER) && (count2a->second->fd != -1) && (FD_ISSET (count2a->second->fd, &sfd)))
+#ifdef USE_KQUEUE
+                               // KQUEUE: We already know we have a valid FD. No checks needed.
+                               if ((cu->fd != FD_MAGIC_NUMBER) && (cu->fd != -1))
+#else
+                               // SELECT: We don't know if our FD is valid.
+                               if ((cu->fd != FD_MAGIC_NUMBER) && (cu->fd != -1) && (FD_ISSET (cu->fd, &sfd)))
+#endif
                                {
-                                       result = read(count2a->second->fd, data, 65535);
+                                       log(DEBUG,"Data waiting on socket %d",cu->fd);
+                                       int MOD_RESULT = 0;
+                                       int result2 = 0;
+                                       FOREACH_RESULT(OnRawSocketRead(cu->fd,data,65535,result2));
+                                       if (!MOD_RESULT)
+                                       {
+                                               result = read(cu->fd, data, 65535);
+                                       }
+                                       else result = result2;
+                                       log(DEBUG,"Read result: %d",result);
                                        if (result)
                                        {
+                                               statsRecv += result;
                                                // perform a check on the raw buffer as an array (not a string!) to remove
                                                // characters 0 and 7 which are illegal in the RFC - replace them with spaces.
                                                // hopefully this should stop even more people whining about "Unknown command: *"
@@ -4078,10 +4587,27 @@ int InspIRCd(void)
                                                }
                                                if (result > 0)
                                                        data[result] = '\0';
-                                               userrec* current = count2a->second;
+                                               userrec* current = cu;
                                                int currfd = current->fd;
                                                int floodlines = 0;
-                                               current->AddBuffer(data);
+                                               // add the data to the users buffer
+                                               if (result > 0)
+                                               if (!current->AddBuffer(data))
+                                               {
+                                                       // AddBuffer returned false, theres too much data in the user's buffer and theyre up to no good.
+                                                        if (current->registered == 7)
+                                                        {
+                                                                kill_link(current,"RecvQ exceeded");
+                                                        }
+                                                        else
+                                                        {
+                                                                WriteOpers("*** Excess flood from %s",current->ip);
+                                                                log(DEFAULT,"Excess flood from: %s",current->ip);
+                                                                add_zline(120,ServerName,"Flood from unregistered connection",current->ip);
+                                                                apply_lines();
+                                                        }
+                                                        goto label;
+                                               }
                                                if (current->recvq.length() > NetBufferSize)
                                                {
                                                        if (current->registered == 7)
@@ -4103,7 +4629,7 @@ int InspIRCd(void)
                                                        floodlines++;
                                                        if (TIME > current->reset_due)
                                                        {
-                                                               current->reset_due = TIME+3;
+                                                               current->reset_due = TIME + current->threshold;
                                                                current->lines_in = 0;
                                                        }
                                                        current->lines_in++;
@@ -4132,6 +4658,8 @@ int InspIRCd(void)
                                                        char sanitized[MAXBUF];
                                                        // use GetBuffer to copy single lines into the sanitized string
                                                        std::string single_line = current->GetBuffer();
+                                                        current->bytes_in += single_line.length();
+                                                        current->cmds_in++;
                                                        if (single_line.length()>512)
                                                        {
                                                                log(DEFAULT,"Excess flood from: %s!%s@%s",current->nick,current->ident,current->host);
@@ -4142,22 +4670,16 @@ int InspIRCd(void)
                                                        strlcpy(sanitized,single_line.c_str(),MAXBUF);
                                                        if (*sanitized)
                                                        {
+                                                               userrec* old_comp = fd_ref_table[currfd];
                                                                // we're gonna re-scan to check if the nick is gone, after every
                                                                // command - if it has, we're gonna bail
-                                                               bool find_again = false;
                                                                process_buffer(sanitized,current);
-                                                               // look for the user's record in case it's changed
-                                                               for (user_hash::iterator c2 = clientlist.begin(); c2 != clientlist.end(); c2++)
-                                                               {
-                                                                       if (c2->second->fd == currfd)
-                                                                       {
-                                                                               // found again, update pointer
-                                                                               current == c2->second;
-                                                                               find_again = true;
-                                                                               break;
-                                                                       }
-                                                               }
-                                                               if (!find_again)
+                                                               // look for the user's record in case it's changed... if theyve quit,
+                                                               // we cant do anything more with their buffer, so bail.
+                                                               // there used to be an ugly, slow loop here. Now we have a reference
+                                                               // table, life is much easier (and FASTER)
+                                                               userrec* new_comp = fd_ref_table[currfd];
+                                                               if ((currfd < 0) || (!fd_ref_table[currfd]) || (old_comp != new_comp))
                                                                        goto label;
 
                                                        }
@@ -4167,8 +4689,8 @@ int InspIRCd(void)
 
                                        if ((result == -1) && (errno != EAGAIN) && (errno != EINTR))
                                        {
-                                               log(DEBUG,"killing: %s",count2a->second->nick);
-                                               kill_link(count2a->second,strerror(errno));
+                                               log(DEBUG,"killing: %s",cu->nick);
+                                               kill_link(cu,strerror(errno));
                                                goto label;
                                        }
                                }
@@ -4179,14 +4701,18 @@ int InspIRCd(void)
                                else
                                if (result == 0)
                                {
+#ifndef USE_KQUEUE
                                        if (count2->second)
                                        {
-                                               log(DEBUG,"InspIRCd: Exited: %s",count2a->second->nick);
-                                               kill_link(count2a->second,"Client exited");
+#endif
+                                               log(DEBUG,"InspIRCd: Exited: %s",cu->nick);
+                                               kill_link(cu,"Client exited");
                                                // must bail here? kill_link removes the hash, corrupting the iterator
                                                log(DEBUG,"Bailing from client exit");
                                                goto label;
+#ifndef USE_KQUEUE
                                        }
+#endif
                                }
                                else if (result > 0)
                                {
@@ -4203,6 +4729,7 @@ int InspIRCd(void)
         sched_yield();
 #endif
        
+#ifndef USE_KQUEUE
        // set up select call
        for (count = 0; count < boundPortCount; count++)
        {
@@ -4215,11 +4742,27 @@ int InspIRCd(void)
        /* select is reporting a waiting socket. Poll them all to find out which */
        if (selectResult > 0)
        {
-               char target[MAXBUF], resolved[MAXBUF];
-               for (count = 0; count < boundPortCount; count++)                
+               for (count = 0; count < boundPortCount; count++)
                {
                        if (FD_ISSET (openSockfd[count], &selectFds))
                        {
+#else
+       ts.tv_sec = 0;
+       ts.tv_nsec = 30000L;
+       i = kevent(lkq, NULL, 0, ke_list, 32, &ts);
+       if (i > 0) for (j = 0; j < i; j++)
+       {
+               log(DEBUG,"kqueue: Listening socket event, i=%d, ke.ident=%d",i,ke.ident);
+               // this isnt as efficient as it could be, we could create a reference table
+               // to reference bound ports by fd, but this isnt a big bottleneck as the actual
+               // number of listening ports on the average ircd is a small number (less than 20)
+               // compared to the number of clients (possibly over 2000)
+               for (count = 0; count < boundPortCount; count++)
+               {
+                       if (ke_list[j].ident == openSockfd[count])
+                       {
+#endif
+                               char target[MAXBUF], resolved[MAXBUF];
                                length = sizeof (client);
                                incomingSockfd = accept (openSockfd[count], (struct sockaddr *) &client, &length);
                              
@@ -4230,13 +4773,16 @@ int InspIRCd(void)
                                {
                                        WriteOpers("*** WARNING: Accept failed on port %lu (%s)",(unsigned long)ports[count],target);
                                        log(DEBUG,"InspIRCd: accept failed: %lu",(unsigned long)ports[count]);
+                                       statsRefused++;
                                }
                                else
                                {
+                                       FOREACH_MOD OnRawSocketAccept(incomingSockfd, resolved, ports[count]);
+                                       statsAccept++;
                                        AddClient(incomingSockfd, resolved, ports[count], false, inet_ntoa (client.sin_addr));
                                        log(DEBUG,"InspIRCd: adding client on port %lu fd=%lu",(unsigned long)ports[count],(unsigned long)incomingSockfd);
                                }
-                               goto label;
+                               //goto label;
                        }
                }
        }
@@ -4244,6 +4790,7 @@ int InspIRCd(void)
        if (0) {};
 #ifdef _POSIX_PRIORITY_SCHEDULING
         sched_yield();
+       sched_yield();
 #endif
 }
 /* not reached */