summaryrefslogtreecommitdiff
path: root/usr.sbin/smtpd
AgeCommit message (Collapse)Author
2017-08-14remove useless indirection for reading the file contentEric Faurot
ok gilles@
2017-08-13bypass the filter code for incoming smtp sessions.Eric Faurot
experimental support for filters has been removed from the config parser already, and we want to get rid of the remaining code. ok gilles@
2017-08-09add mail.mda MDA in charge of running a third-party MDA, not linked yetGilles Chehade
2017-08-09at the exception of mail.local, smtpd never executes an MDA as root.Gilles Chehade
the check is performed daemon-side before even forking the child process, but let's also check euid in the mda we ship in case someone executes them by hand and needs to see an explicit error message.
2017-08-06a long time ago, we made a change to the format of envelopes and introducedGilles Chehade
a function to upgrade from v1 to v2 on the fly. this was meant to stay just for the transition in one release. 3 years and 8 months later, it's finally time we remove it ;-) ok eric@, sunil@
2017-08-04the PURGE_EVERYTHING flag used to purge config bits was inaccurateGilles Chehade
ok eric@
2017-07-31handle empty output correctly in mda_getlastline()Gilles Chehade
diff from Casper Ti. Vector, ok eric@
2017-07-31cmd_dump() is unusedGilles Chehade
spotted by deraadt
2017-07-27smtpctl(8): Use an int to determine mode instead of __progname.Sunil Nimmagadda
Ok millert@ gilles@
2017-07-11Remove "listen secure" syntax from smtpd.conf. It's broken since a couple ofMartin Natano
months and noone complained. Users should replace existing "listen secure" directives with two separate "tls" and "smtps" listeners. i.e. a line like listen on $iface tls pki $pki has to be replaced with listen on $iface tls pki $pki listen on $iface smtps pki $pki Relaying syntax is not affected by this change. suggested by eric ok gilles
2017-07-03no need to generate y.tab.h if nothing uses it, set YFLAGS to nothingMarc Espie
instead of CLEANFILES += y.tab.h okay millert@
2017-06-19fix descriptor leak in the smtp congestion mechanismGilles Chehade
diff from Henri Kemppainen; ok gilles@ eric@
2017-06-07reword "listen on socket" somewhat; ok gillesJason McIntyre
2017-05-31typo; from Edgar PettijohnTheo de Raadt
2017-05-29rm xr mailaddr.7Ted Unangst
2017-05-28reinstate the description of "mask-source" to "listen on socket": my changesJason McIntyre
two revisions previous inadvertently removed it; ok gilles
2017-05-28mark up "masquerade";Jason McIntyre
2017-05-28split the two "listen on" directives into two separate items;Jason McIntyre
the markup that we were using wouldn;t have worked with groff anyway but, more worringly, it didn;t work with mandoc either;
2017-05-26move variables expansion out of lka_session into their own file, this is aGilles Chehade
mechanical diff to simplify a bit the lka code and prepare for moving variables outside of the lookup process into the chrooted mda process. no functional change for now. ok eric@
2017-05-24Fix a possible fatal() when smtpd is configured to *force* relaying overGilles Chehade
SMTPS, that the connection succeeds, but that something causes a failure in the TLS code path afterwards. Session gets downgraded so it can use a plaintext connector but since it's not allowed to do so, it fatal()-s. This didn't impact STARTTLS, only SMTPS. Issue experienced a few times by stsp@ triggered by a suspend. ok eric@
2017-05-24document that "for local" is the default; while here,Jason McIntyre
paste in the "table <aliases>" text; ok gilles
2017-05-23"update table" is for tables of type file only; ok gillesJason McIntyre
2017-05-22- filters are currently broken, do not allow using them until we're doneGilles Chehade
2017-05-22stub for the smtp filter protocol, currently always returns -1Gilles Chehade
2017-05-19- switch to recallocarrayEric Faurot
- remove pre-allocation - use a better growth pattern ok gilles@ deraadt@
2017-05-17Introduce more use of freezero(). Also, remove ptr conditionals beforeTheo de Raadt
many functions which are free(NULL)-compat ok gilles
2017-05-12queue is not owned by _smtpd but _smtpq so a bug in lookup process does notGilles Chehade
allow read/write of envelopes and messages, unfortunately the purge_task() function which is in charge of garbage collecting left-overs from aborted transactions is still executed as _smtpd preventing it from working. issue reported by Philippe Meunier, fix from Edgar Pettijohn
2017-05-01in function used for tracing, display unknown lookup types as "???"Gilles Chehade
diff from Wolf480pl
2017-04-29fix argument check, this should never trigger because it is a libexec called byJoerg Jung
smtpd, but for the sake of correctness from Edgar Pettijohn ok gilles@
2017-04-04document comments in table files; help/ok gillesJason McIntyre
2017-03-30Disable client-initiated renegotiation.Joel Sing
ok gilles@ eric@ deraadt@
2017-03-21From a syslog perspective it does not make sense to log fatal andAlexander Bluhm
warn with the same severity. Switch log_warn() to LOG_ERR and keep fatal() at LOG_CRIT. OK reyk@ florian@
2017-03-17switch to recallocarray() and remove useless pre-allocation.Eric Faurot
prodded by deraadt@ ok gilles@
2017-03-17realloc() -> recallocarray().Eric Faurot
use calloc() for initial allocation. prodded by deraadt@ ok gilles@
2017-02-14fix man page, diff from jmc@Gilles Chehade
2017-02-14add standalone maildir MDA (work in progress) which will soon obsolete theGilles Chehade
builtin delivery_maildir backend, + makefiles, not linked to build yet ok eric@, sunil@
2017-02-14add standalone mda for file delivery which will later obsoleteGilles Chehade
builtin delivery_file + set of makefiles, not linked to build ok sunil@, eric@
2017-02-14prepare Makefiles but don't link to the build yetGilles Chehade
2017-02-14add new implementation of a standalone LMTP client which will deprecate theGilles Chehade
builtin delivery_lmtp.c ok sunil@, jung@
2017-02-13fix incoming tls-require regression, introduced with last parse.y cleanupGilles Chehade
causing the flag not to be propagated down to the listener ok eric@
2017-02-13allow negation of authenticated keyword:Gilles Chehade
accept ! authenticated [...] ok sunil@, jung@
2017-02-06Bump bcrypt version to $2b$ and increase number of rounds in two examples.Theo Buehler
2017-02-04Cast char to unsigned char for isspace()Philip Guenther
ok gilles@
2017-02-03Stop assuming that in_{addr,port}_t are typedefed in <sys/types.h> andPhilip Guenther
instead pull in <netinet/in.h> or <arpa/inet.h> when those are needed. ok florian@ beck@ millert@
2017-01-09Stop accessing verbose and debug variables from log.c directly.Reyk Floeter
This replaces log_verbose() and "extern int verbose" with the two functions log_setverbose() and log_getverbose(). Pointed out by benno@ OK krw@ eric@ gilles@ (OK gilles@ for the snmpd bits as well)
2017-01-09smtpd joins the 7 other daemons that share the same log.c file.Reyk Floeter
The only major difference was the "log_trace" concept that is only used by smtpd - move it from log.c into util.c and make it a local concept. This also needed to rename the global "verbose" variable to "tracing" in a few places. OK krw@ gilles@ eric@
2017-01-08delete three macro lines that have no effect, found with mandoc -TlintIngo Schwarze
2017-01-05Replace hand-rolled for(;;) emptying of 'symhead' TAILQ with moreKenneth R Westerback
modern TAILQ_FOREACH_SAFE(). No intentional functional change. ok millert@ bluhm@ gilles@
2017-01-05Replace symset()'s hand-rolled for(;;) traversal of 'symhead' TAILQKenneth R Westerback
with more modern TAILQ_FOREACH(). This what symget() was already doing. Add paranoia '{}' around body of symget()'s TAILQ_FOREACH(). No intentional functional change. ok bluhm@ otto@
2017-01-03document forward(5); from mkJason McIntyre
ok gilles