WendzelNNTPd

WendzelNNTPd is an easy to configure Usenet server (NNTP daemon). WendzelNNTPd breaks down complicated things into an easy-to-use configuration file and tool. The server is portable (Linux/OpenBSD/FreeBSD/NetBSD and some similar systems), supports IPv4 and IPv6, TLS (SNNTP/NNTPS), AUTHINFO authentication, contains support for Access Control Lists (ACL), Role-based Access Control (RBAC) and supports invisible newsgroups. It currently supports MySQL and SQLite backends.

This server is tailored for workgroups, where users trust each other and where no synchronization with other usenet servers is necessary. For this reason, not all advanced NNTP features are included (e.g. commands for server synchronization). The server is also not a suitable for confidential environments as it lacks TLS support (under development, see below) and strong hardening.

Download

Version 2.2-alpha

The Git repository's master branch contains the latest version (2.2 alpha) that includes TLS support and several more enhancements.

Source (version 2.1.3)

Linux/Unix/*BSD/POSIX: Latest stable release code (v. 2.1.3 -- tgz)

Packages & Executables

Slackware Linux:
- Slackware 14.2: Slackbuilds.org Build Script
- Slackware64-current: Slackware package (v. 2.1.3 -- tgz)
  - Installation via installpkg (filename)
NetBSD:
- WendzelNNTPd port at pkgsrc: WendzelNNTPd-2.1.3
Windows:
- Legacy WendzelNNTPd 1.4.6 branch: WendzelNNTPd-1.4.6-Setup.exe

Why you want a Usenet server

Probably because you are into retro computing and already run a Gopher service! :) WendzelNNTPd is not tailored as a critical service, it is for nerds who like to play with the protocol and want to use it for fun! Also, feel invited to contribute your patches and extensions!

Read my blog posting on WendzelNNTPd.

Features

Runs on Linux, OpenSolaris, *BSD
Supports IPv6
Conservative design philosophy:
- Tiny (approx. 11,000 Lines of Code), to limit potential (security) flaws, including optional features that can be deactivated at compile time.
- Do not implement unnecessary features.
- Do not make things too complicated and check for compatibility with old newsreaders.
Written in C
Database abstraction layer (supports SQLite3 and MySQL)
Supports NNTP authentication (AUTHINFO USER/PASS)
Supports advanced Access Control Lists (ACL) and Role-based Access Control (RBAC)
Automatically prevents double-postings
Supports "invisible newsgroups"
It is open + free software! :)
v.2.2: TLS server authentication and data encryption
v.2.2: Supports multiple connectors with different configurations
v.2.2.: Supports NNTPS ans SNNTP with TLS 1.0-1.3
v.2.2.: Support for client certificate verification (mTLS) and CRL checks

Features Under Development/Call for Testing

The main branch currently provides version 2.2-alpha, including experimental support for PostgreSQL backends, including the option to store postings in the database and eliminate the use of /var/spool/news (thx to Christian Barthel for the patch!). Further, the main branch provides TLS support.