Age | Commit message (Collapse) | Author | |
---|---|---|---|
2016-03-25 | Nuke session_socket_blockmode() and session_socket_linger(). Use | Kenneth R Westerback | |
the identical io_set_blocking() and io_set_linger(). Since both are always called to turn off blocking or lingering, nuke the parameter and associated enum in favour of "just doing the right thing". While passing remove the unneeded last parameter to the remaining fcntl(F_GETFL). Finally, rename the functions to io_set_nonblocking() and io_set_nolinger() for clarity. No functional change. Started with a sweep of fcntl() usage inspired by guenther@. ok gilles@ | |||
2016-02-21 | bump version | Gilles Chehade | |
2016-02-13 | handle enqueuer socket as a regular listener that can be configured with | Gilles Chehade | |
"listen on socket". this simplifies a bit of code, removes some special cases and will allow attaching filters & masking source just as on lo0. diff from Peter Bisroev <peter@int19h.net> ok gilles@, jung@ | |||
2016-02-05 | remove no longer relevant ifndef | Joerg Jung | |
suggested by gilles | |||
2016-01-27 | Check imsg data length before use. | Sunil Nimmagadda | |
Ok jung@ gilles@ eric@ | |||
2016-01-04 | switch to /usr/local/libexec when looking for -extras and drop loop iterating | Joerg Jung | |
paths this effectively reverts table.c r1.21 which was mainly introduced for a smooth transition in -current ok gilles | |||
2015-12-13 | smtpd is no longer 5.4.6 | Gilles Chehade | |
2015-12-13 | refactor a bit to move the SNI handling away from smtp_session into smtp | Gilles Chehade | |
ok sunil@, jung@ | |||
2015-12-12 | allow overriding the default cipher-suite | Gilles Chehade | |
ok jung@, sunil@, millert@ | |||
2015-12-12 | add bits so local enqueuer can run filters when they are enabled | Gilles Chehade | |
2015-12-12 | expose foreground_log in smtpd.h so filters can inherit it | Gilles Chehade | |
2015-12-12 | sender and recipient are mail addresses, not pathnames, use proper define | Gilles Chehade | |
2015-12-12 | use smtpd specific define for table name sizes | Gilles Chehade | |
2015-12-12 | pki name and ca name must match a hostname, use HOST_NAME_MAX | Gilles Chehade | |
2015-12-12 | do not limit usernames to LOGIN_NAME_MAX in places where "virtual users" | Gilles Chehade | |
may be used, in such places an email address may be specified. | |||
2015-12-12 | rename an smtpd specific define | Gilles Chehade | |
2015-12-12 | prepare some imsg structures for upcoming diff to support wildcard ca | Gilles Chehade | |
2015-12-11 | rename field member + whitespaces | Gilles Chehade | |
2015-12-11 | add filter.c prototypes, unused for now | Gilles Chehade | |
2015-12-11 | prepare smtpd.h for masquerading | Gilles Chehade | |
2015-12-07 | Merge makemap(8) into smtpctl(8). | Sunil Nimmagadda | |
Ok gilles@, jung@ | |||
2015-12-03 | introduce limit session keyword replacing fixed values | Joerg Jung | |
original diff from Renaud Allard ok gilles | |||
2015-12-01 | add received-auth parameter to listener to identify authenticated sessions | Gilles Chehade | |
in locally appended Received header when enabled ok millert@, jung@ | |||
2015-12-01 | add IMSG_SMTP_CHECK_SENDER in preparation for another diff | Gilles Chehade | |
2015-12-01 | prepare the ground for the CA certificate handling refactor, this commit | Gilles Chehade | |
adds the parse.y bit + structures & members needed but does not make use of it yet | |||
2015-11-30 | add ca_name field to some structures in preparation for a larger | Gilles Chehade | |
diff to refactor handling of CA certificates | |||
2015-11-30 | when looking up tables, start in /usr/local/libexec before /usr/libexec, so | Gilles Chehade | |
ports/packages can be installed in the proper place ok jung@ | |||
2015-11-30 | mechanical rename of some IMSG constants | Gilles Chehade | |
ok sunil@, ok jung@ | |||
2015-11-30 | While delivering to lmtp or mda, accept optional "as user" parameter | Sunil Nimmagadda | |
whose privileges would be used instead of the default. Ok gilles@ jung@ | |||
2015-11-23 | allow table API to lookup for mailaddr mappings | Gilles Chehade | |
ok sunil@, ok jung@ | |||
2015-11-05 | Implement smtpctl uncorrupt <msgid> | Sunil Nimmagadda | |
"uncorrupt" moves envelopes from corrupt bucket back to the queue for further discovery by the daemon. After correcting the corrupt envelopes, admin could now... # smtpctl uncorrupt msgid # smtpctl discover msgid to schedule the messages. Ok gilles@ | |||
2015-10-29 | Implement smtpctl discover <evpid|msgid>. | Sunil Nimmagadda | |
discover subcommand schedules envelopes manually moved to the queue. It triggers a queue walk searching for envelopes with the given id, schedules them and informs the user number of envelopes scheduled. Admins no longer would need to restart the daemon to discover manually moved messages. Ok gilles@ | |||
2015-10-28 | masquerade and senders map require being able to lookup mailaddr structures | Gilles Chehade | |
in tables, prepare for such features by bringing the helpers + smtpd.h part ok millert@ | |||
2015-10-28 | aliases support resolving to maildir:/path | Gilles Chehade | |
ok sunil@ millert@ | |||
2015-10-27 | aliases_virtual_check() has been unneeded for a while | Gilles Chehade | |
ok jung@, ok sunil@, ok millert@ | |||
2015-10-21 | Only enable SSL_VERIFY_PEER when the verify option is set on a listener. | Joel Sing | |
Always enabling SSL_VERIFY_PEER unnecessarily increases the number of messages/bytes in the TLS handshake and increases our attack surface, since we request and then process client certificates. ok gilles@ | |||
2015-10-17 | mailaddr_match() allows comparing two struct mailaddr taking into account | Gilles Chehade | |
catchall and +-tags ok millert@ and jung@ for util.c | |||
2015-10-14 | smtpd in tree is no longer neither 5.4.4, nor 5.4.5, bump SMTPD_VERSION | Gilles Chehade | |
2015-10-09 | turn our local enqueuer setgid _smtpq and restrict access to offline queue, | Gilles Chehade | |
the enqueuer will revoke group and regain real gid right after mkstemp. this would have prevented the symlink/hardlink attacks against offline, and it will avoid having to deal with new ways users can mess with it. ok eric@, ok millert@ | |||
2015-09-07 | when bypassing the enqueuer, insert Message-Id header if none was found and | Gilles Chehade | |
the client has connected from a loopback interface. ok millert@ eric@ | |||
2015-04-19 | Incorrect logic in smtpd(8) can lead to unexpected client disconnect, invalid | Gilles Chehade | |
certificate in SNI negotiation or server crash. spotted by Edwin Torok | |||
2015-01-20 | use <limits.h> comprehensively. For now try to push <> includes to | Theo de Raadt | |
each .c file, and out of the .h files. To avoid overinclude. ok gilles, in principle. If this has been done right, -portable should become easier to maintain. | |||
2014-12-24 | bump version | Eric Faurot | |
2014-12-14 | these are no longer used, remove | Gilles Chehade | |
2014-11-16 | Convert the logic in yyerror(). Instead of creating a temporary | Alexander Bluhm | |
format string, create a temporary message. OK doug@ | |||
2014-10-15 | when From, To and Cc headers present users without domains, append the | Gilles Chehade | |
listener hostname to avoid smtpd relaying a header that will be rewritten by the destination MX. ok eric@ | |||
2014-07-10 | Improve the scheduler, better and simpler. | Eric Faurot | |
- Get rid of the scheduler_batch structure. The scheduler can now return envelopes of different types in a single run, interlacing them to avoid batch effects. - Ask for an acknowledgement from the queue when removing or expiring an envelope to benefit from the inflight envelope limitation mechanism. This ensures that the scheduler always keeps sending envelopes at a rate that the queue can sustain in all cases. - Limit the number of envelopes in a holdq. When a holdq is full, new envelopes are put back in the pending queue instead, with a shorter retry time. - Plumbing for proc-ified schedulers. imsg version bump. smtpctl stop before updating. ok gilles@ | |||
2014-07-09 | add a "no-dsn" listener option to disable DSN extension. | Eric Faurot | |
2014-07-09 | config parser improvements: | Eric Faurot | |
- fail if the same option is specified multiple times on a listener - prompt for queue encryption key after config parsing, not during. - add ip addresses to localnames table - prepare for filters | |||
2014-07-08 | update filter configuration parsing (not plugged yet) | Eric Faurot | |