Age | Commit message (Collapse) | Author |
|
|
|
|
|
|
|
|
|
OK mvs@, eric@
|
|
used. With this there should be no more embedded scopes left and therefor
in6addr_to_text() can be removed. getnameinfo() will just do the right
thing now.
OK eric@
|
|
From gilles@
OK millert@ giovanni@
|
|
undocumented, at least for now;
|
|
leading to a crash. From gilles@
|
|
the sockaddr it contains, as expected by freeaddrinfo().
Move the allocation to a helper function for clarity.
comments from martijn@ millert@
ok millert@
|
|
From gilles@
|
|
flag.
Manpage order feedback jmc@
OK eric@
|
|
workaround for the memory-leak in asr.
smtp_session part from eric@
OK eric@ gilles@
|
|
are created equal.
From gilles@
|
|
From gilles@
OK millert@ eric@
|
|
Pointed out by jmatthew and requested by florian.
|
|
slightly relax the ORCPT check by not enforcing that a
domain is required, allowing e.g.: ORCPT=rfc822;root
originally reported via github issue #1084 by Leo Gaspard
with input from gilles
ok kn
|
|
requested by deraadt@
|
|
This is based around NETWORK-SERVICES-MIB from RFC2788 and MTA-MIB from
RFC2789, but does not export the full spec. Hopefully this will expand in
the future.
People who want to use this against net-snmp (currently the only option
known to me at the time of writing) may want to add -I -mta_sendmail to the
flags, so net-snmp doesn't throw garbage into the mib-2.28 subtree.
|
|
Pointed out by AIsha Tammy (openbsd <dot> bugs <at> aisha <dot> cc)
Original diff by Edgar Pettijohn (edgar <at> pettijohn-web <dot> com)
OK tb@
|
|
Authentication-Results header.
OK giovanni@
|
|
It is possible to have a user name of the form foo@bar in the URL.
When splitting user name from host name, split at the last '@', not
the first one. From Josh Rickmar
|
|
OK jmc@ martijn@
|
|
const char *. Remove the const so things compile a little cleaner.
Pointer out by Mark Patruck <mark <at> wrapped <dot> cx>. Thanks
|
|
Originally reported by and OK on earlier version giovanni@
Looks good to deraadt@
feedback and OK jmc@
feedback semarie@
OK sthen@
|
|
ok martijn
|
|
ok beck@
"looks reasonable" millert@
|
|
ok millert@
|
|
Fixes an uninitialized variable and a potential stack overflow
with IPv6 connections. From Leah Neukirchen; OK eric@ deraadt@
|
|
From gilles@, OK deraadt@ jung@
|
|
usernames, but only for email addresses. fixes an issue where
usernames always expand to the @ wildcard if defined in the virtual
alias file.
discussed with Gilles Chehade
ok millert@
|
|
from Gilles Chehade
|
|
from Ryan Kavanagh
|
|
ok millert@
|
|
|
|
Fixes a possible crash and caching issue when manually moving an
envelope to the queue with smtpctl discover.
ok millert@
|
|
and bump protocol version.
discussed with jung@, martijn@ and Gilles.
ok jung@
|
|
desired name of the MX not being present in the certificate, log that
this is he reason for the failure and the name we couldn't find in
the cert.
ok millert@ martijn@
|
|
|
|
ok millert@
|
|
strlen().
ok millert@
|
|
Otherwise, if neither -r nor -u is specified, it will be used uninitialized.
Found by tobhe@; OK tobhe@ deraadt@
|
|
From Hiltjo Posthuma
|
|
Among the fixes are:
- Don't count a leading dot, since it's part of smtp and not the
message.
- Let qp_encoded_write handle line wrappings, since it can do a better
job at the bookkeeping than the caller
- Make sure a soft linebreak that starts with a dot is escaped for the
SMTP-layer
- Only encode a space character if it's followed by a hard linebreak,
since this is the only case mandated by RFC5321 and it gives a more
readable output and saves a few additional bytes.
- Fix that we actually limit the encoded linelength to 76 characters as
specified in RFC5321.
Feedback and OK eric@
|
|
We should only exit the loop that creates the queue file if we
successfully created the file or we've exceeded the max number of
tries. From gilles@ based on feedback from Qualys.
|
|
Similar to a diff from Hiltjo Posthum. OK jung@ deraadt@
|
|
|
|
An out of bounds read in smtpd allows an attacker to inject arbitrary
commands into the envelope file which are then executed as root.
Separately, missing privilege revocation in smtpctl allows arbitrary
commands to be run with the _smtpq group.
|
|
similar to what deraadt@ recently did in other manual pages.
|
|
the prefix to be rejected as it contains a character not allowed in address
reported by Scott Vanderbilt
|