Age | Commit message (Collapse) | Author | |
---|---|---|---|
2016-01-04 | switch to /usr/local/libexec when looking for -extras and drop loop iterating | Joerg Jung | |
paths this effectively reverts table.c r1.21 which was mainly introduced for a smooth transition in -current ok gilles | |||
2015-12-28 | remove spaces after '!' | Joerg Jung | |
no binary change ok millert | |||
2015-12-12 | remove CA from pki and no longer allow specifying a CA with 'pki' keyword. | Gilles Chehade | |
introduce 'ca' keyword to allow specifying a custom CA. making CA part of pki was a bad idea and several people hit use-cases that plain couldn't work. instead of: pki foobar.org ca "/etc/mail/CA.pem" use now: ca foobar.org certificate "/etc/mail/CA.pem" ok sunil@, jung@ | |||
2015-12-12 | whitespaces | Gilles Chehade | |
2015-12-12 | when using senders map to restrict email address a user may use in SMTP | Gilles Chehade | |
dialogue, if `masquerade' is used as a parameter then rewrite the email address of the DATA From header to the email address in the map. | |||
2015-12-12 | allow overriding the default cipher-suite | Gilles Chehade | |
ok jung@, sunil@, millert@ | |||
2015-12-12 | check in parse.y that pki param is a valid hostname | Gilles Chehade | |
2015-12-12 | prepare bits to enable masquerade in parse.y | Gilles Chehade | |
2015-12-12 | add missing check for failed allocation | Gilles Chehade | |
2015-12-12 | spaces | Gilles Chehade | |
2015-12-12 | add bits so local enqueuer can run filters when they are enabled | Gilles Chehade | |
2015-12-12 | Implement senders map. | Sunil Nimmagadda | |
senders table allows to restrict the addresses that an authenticated user can use in the SMTP dialogue. Ok gilles@ | |||
2015-12-12 | rename an smtpd specific define | Gilles Chehade | |
2015-12-11 | add keywords that are going to be used in upcoming mini diffs | Gilles Chehade | |
2015-12-11 | in add_filter_arg() do not allow the same filter twice in same chain | Gilles Chehade | |
unused for now | |||
2015-12-03 | introduce limit session keyword replacing fixed values | Joerg Jung | |
original diff from Renaud Allard ok gilles | |||
2015-12-02 | whitespaces | Gilles Chehade | |
2015-12-01 | add received-auth parameter to listener to identify authenticated sessions | Gilles Chehade | |
in locally appended Received header when enabled ok millert@, jung@ | |||
2015-12-01 | update enum values in listen options | Gilles Chehade | |
2015-12-01 | reorder header | Gilles Chehade | |
2015-12-01 | prepare the ground for the CA certificate handling refactor, this commit | Gilles Chehade | |
adds the parse.y bit + structures & members needed but does not make use of it yet | |||
2015-11-30 | when looking up tables, start in /usr/local/libexec before /usr/libexec, so | Gilles Chehade | |
ports/packages can be installed in the proper place ok jung@ | |||
2015-11-30 | While delivering to lmtp or mda, accept optional "as user" parameter | Sunil Nimmagadda | |
whose privileges would be used instead of the default. Ok gilles@ jung@ | |||
2015-11-05 | replace u_char and u_int* with standard stdint.h types to ease portable version | Joerg Jung | |
also remove trailing whitespaces while here no binary change ok sunil millert gilles | |||
2015-10-27 | add a rcpt-to parameter to be able to use the original (probably expanded) | Joerg Jung | |
RCPT TO within LMTP sessions ok gilles eric | |||
2015-09-07 | when bypassing the enqueuer, insert Message-Id header if none was found and | Gilles Chehade | |
the client has connected from a loopback interface. ok millert@ eric@ | |||
2015-08-19 | do not cast result from xcalloc(); it is in scope | Theo de Raadt | |
2015-02-08 | Use AI_ADDRCONFIG when resolv hosts on startup. | Reyk Floeter | |
OK henning@ | |||
2015-01-20 | use <limits.h> comprehensively. For now try to push <> includes to | Theo de Raadt | |
each .c file, and out of the .h files. To avoid overinclude. ok gilles, in principle. If this has been done right, -portable should become easier to maintain. | |||
2015-01-16 | Replace <sys/param.h> with <limits.h> and other less dirty headers where | Theo de Raadt | |
possible. Annotate <sys/param.h> lines with their current reasons. Switch to PATH_MAX, NGROUPS_MAX, HOST_NAME_MAX+1, LOGIN_NAME_MAX, etc. Change MIN() and MAX() to local definitions of MINIMUM() and MAXIMUM() where sensible to avoid pulling in the pollution. These are the files confirmed through binary verification. ok guenther, millert, doug (helped with the verification protocol) | |||
2014-11-20 | Don't allow embedded nul characters in strings. | Jonathan Gray | |
Fixes a pfctl crash with an anchor name containing an embedded nul found with the afl fuzzer. pfctl parse.y patch from and ok deraadt@ | |||
2014-11-16 | Convert the logic in yyerror(). Instead of creating a temporary | Alexander Bluhm | |
format string, create a temporary message. OK doug@ | |||
2014-11-14 | Add gcc printf format attributes to yyerror() in parse.y files. | Doug Hogan | |
No yyerror() calls needed to be changed. ok bluhm@ | |||
2014-07-09 | add a "no-dsn" listener option to disable DSN extension. | Eric Faurot | |
2014-07-09 | config parser improvements: | Eric Faurot | |
- fail if the same option is specified multiple times on a listener - prompt for queue encryption key after config parsing, not during. - add ip addresses to localnames table - prepare for filters | |||
2014-07-08 | update filter configuration parsing (not plugged yet) | Eric Faurot | |
2014-04-19 | add missing strlcpy() check in create_filter_chain() that would cause smtpd | Gilles Chehade | |
to fatal at startup if truncation occured and we had enabled filters (void) cast a strlcpy() that cannot truncate | |||
2014-04-19 | add missing strlcpy() checks in create_filter() that would cause smtpd to | Gilles Chehade | |
fatal at startup if truncation occured and we had enabled filters | |||
2014-04-19 | add missing strlcpy() check in is_if_in_group() to detect and warn about | Gilles Chehade | |
the truncation rather than failing the ioctl() call that follows. | |||
2014-04-19 | add missing strlcpy() check when parsing "backup hostname" in smtpd.conf, | Gilles Chehade | |
it could lead to smtpd not finding itself in a MX lookup if a hostname is specified that exceeds the max hostname len. while at it, add a missing free() | |||
2014-04-19 | (void) cast strlcpy() calls that cannot truncate | Gilles Chehade | |
2014-03-25 | reword error message when a table has an invalid configuration file, it has | Gilles Chehade | |
confused a few people ok eric@ | |||
2014-02-04 | pki code cleanup | Eric Faurot | |
- rename "struct ssl" and "cert" to "struct pki" and "cert" to "pki_name" - inherit pki conf on fork instead of passing it through imsg at startup - implement SNI on smtp listeners | |||
2014-01-22 | relax the cfg file secrecy check slightly to allow group readability | Henning Brauer | |
default permissions and mtree NOT changed. prodded by benno, ok phessler benno jmatthew theo pelikan florian | |||
2013-12-26 | bcopy -> memmove | Eric Faurot | |
bzero -> memset | |||
2013-12-05 | bogus ';' | Eric Faurot | |
2013-11-30 | do not hardcode scheduler batch size, and reduce default limit to avoid | Eric Faurot | |
hammering effects. | |||
2013-11-28 | limit the number of envelopes to recall in the hoststat cache. | Eric Faurot | |
2013-11-25 | use u_char for buffers in yylex, for ctype calls, as done in all other | Theo de Raadt | |
parse.y in the tree issue found by millert, ok gilles | |||
2013-11-21 | correctly set verify flag on the listener | Eric Faurot | |