summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2013-11-07missing manpage, spotted by jmc@Eric Faurot
2013-11-06fix format stringEric Faurot
2013-11-06fix assertion that could lead to orphaned messages left in the queueEric Faurot
after all envelopes are gone.
2013-11-06Much much improved config parser and related changes.Eric Faurot
Simplify code and do not impose an order on conditions and rule options. Format changes that may require smtpd.conf update for some setups: - SSL certificates are no longer automatically loaded, but must be explicitely declared using the "pki" keyword. - "certificate" option becomes "pki" in listener and accept rules. - "ssl://" becomes "secure://" in relay via rules. - "helo" becomes "hostnames" in relay rules New features: - accept rules do not need an explicit action, in which case alias table or .forward must provide one. - new "forward-only" action to force relaying and reject rcpts that expand as local delivery. - "!" (negation) modifier on rule matching conditions. - new "recipient" rule matching condition. - new "verify" option on listeners and relay rules to reject invalid certificates. Other changes: - remember the helo name advertised on incoming mail and use it for sending bounces. - bump envelope version (existing envelopes are updated on-the-fly).
2013-11-04Hook up nginx.conf(5) to the build.Florian Obser
put it in deraadt@, OK schwarze@
2013-11-03minor formatting improvements,Ingo Schwarze
in part discussed with florian@
2013-11-03Document "Embedded Variables"Florian Obser
input on how / where to put it schwarze@
2013-11-03document grammar; written myself; ok florian@Ingo Schwarze
2013-11-03Add a man page for nginx.conf; not yet hooked to the build.Florian Obser
Generated by various scripts and manual cleanup from http://trac.nginx.org/nginx/browser/nginx_org/xml/en/docs/ Caveat: Contains documentation for features not available on OpenBSD (either because they are only available in the commercial version of nginx or because they are not enabled on OpenBSD). Idea / requested by reyk@ Lots of input / help / mdoc(7) crash course by schwarze@ schwarze@ and jmc@ agree to put it in now to work on it in tree.
2013-11-02bunch of format string cleanups, removing %i, signed vs unsigned, and evenTheo de Raadt
a few long long's ok jmatthew
2013-11-01another annoying %iTheo de Raadt
2013-11-01Fix endianess for big endian architecture.Sylvestre Gallon
Works with macppc. ok miod@
2013-10-31Initialize sun_len, pointed out by deraadt@.Florian Obser
While there also check length of socket path, more relevant now since an alternative socket can be specified. OK benno@
2013-10-31another stray %dTheo de Raadt
2013-10-30add "smtpctl show relays" and "smtpctl show hosts" commandsEric Faurot
2013-10-30use more careful format strings to deal with various forms of AS#'sTheo de Raadt
ok claudio benno
2013-10-30another simple %i to %d conversion for obviousnessTheo de Raadt
2013-10-29Fix a potential file descriptor overlap in exec_cgi() by making sureFlorian Obser
that file descriptors zero to two are always open when starting slowcgi. pointed out, with and looks good to deraadt@
2013-10-29add missing heloname field for relayhost.Eric Faurot
differenciate relays with different helotable/heloname. improve code a bit.
2013-10-29emit an extra "config" convenience target that allows oneMarc Espie
to rerun config without changing directories. Lots of inputs by deraadt@, who wanted it to work for movable relative directories.
2013-10-29use "/etc/mail/mailname" instead of "/etc/mailname" and make it a define.Eric Faurot
2013-10-29randomize counter part of generated uidsEric Faurot
2013-10-29Report mta sessions errors on the route rather than on the MX.Eric Faurot
If a route has too many of these errors, disable it for a while. Reset the error counter for a route when it is re-enabled or when it could establish a connection successfully.
2013-10-29sort includesEric Faurot
2013-10-28alias files may be emptyEric Faurot
2013-10-28accept credentials formated as "<user> <passwd>"Eric Faurot
2013-10-28Report the ssl certificate verification status in the mail header.Eric Faurot
Log ssl certificate validation errors. Fix several ssl-related leaks.
2013-10-28handle the case where the filter string is quotedEric Faurot
2013-10-28Set lastmxquery when the MX query returns, not when it is issued.Eric Faurot
This fixes a potential race when several relays share a single domain, resulting in temporary failures and unnecessary delays.
2013-10-28bzero() some structs before using them, to be safe.Eric Faurot
2013-10-28Improve mkuboot's ELF handling. This fixes the problem where mkubootPatrick Wildt
running on 64-bit systems does not create valid images. While there, append kernel symbols at the end of the kernel. ok syl@
2013-10-27Add support for AUTH LOGIN in mta.Eric Faurot
2013-10-27missing m_end()Eric Faurot
2013-10-27use log_* functions instead of err*/warn*Eric Faurot
2013-10-27If a constant string needs a name, use a static const array instead of aPhilip Guenther
pointer or non-const array, as that minimizes the symbols, maximizes the placement into read-only memory, and avoids warnings from gcc -Wformat=2 when they're used as format strings. ok deraadt@
2013-10-27obvious fixes in the external queue code.Eric Faurot
work-in-progress: not supported yet.
2013-10-27fix parsing of inet6 addresses when prefixed with "IPv6:"Eric Faurot
2013-10-27Implement a feedback mechanism which allows the mta to "hold" envelopesEric Faurot
in the scheduler when it has too many tasks for a given relay. The envelopes are put on a wait queue, and are not scheduled again until the mta "releases" some envelopes from that queue. It prevents from having too many inflight envelopes, which are out of reach for the admin.
2013-10-27Make the filter infrastructure move forward.Eric Faurot
This is a work-in-progress and it's not supposed to be useable for now.
2013-10-27Create the control socket in the parent process to abort early ifEric Faurot
another smtpd instance is running. Close the inherited socket in every forked process but control.
2013-10-27enable gpioctl(8) for armv7, and add associated devices on armv7/sunxi.aalm
ok jasper@, patrick@, rapha@
2013-10-26Only use setsockopt(..SO_RTABLE..) if an alternative rtable is specifiedStuart Henderson
on the command line, this repairs traceroute6 if the -V flag is not given. ok matthieu@ deraadt@ (Note that traceroute6's source address selection is not yet rdomain-aware, for now to use another domain with "traceroute -V" requires manually setting the source address with -s.)
2013-10-26fix default schemaEric Faurot
2013-10-26Simplify code for loading and dumping envelopes. Makes it much easierEric Faurot
to deal with automatic upgrade between envelope versions at load time.
2013-10-26%i -> %d in format stringsEric Faurot
2013-10-25local enqueuer improvements:Eric Faurot
- parse the whole input before trying to establish the connection to the local socket: fixes timeout problems when reading the output of a long running program. - use sendmail(8)-like exit status.
2013-10-25allocate key storage dynamically instead of using a fixed size bufferEric Faurot
2013-10-25If the admin issues a remove request for an envelope which is inflight, do notEric Faurot
ignore the request. Instead defer the removal until the envelope returns to the scheduler. Simplify code by a great deal in the process.
2013-10-25Improve reporting in smtpctl and a few fixes.Eric Faurot
When sending a request to the scheduler, wait for the success/failure report from the scheduler. Simplify the code by introducing generic functions for interruptible iteration over envelopes. Report the total number of affected envelopes for schedule, pause, resume and remove envelope operations.
2013-10-25obvious time_t mishandling. Sigh.Theo de Raadt
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-22 16:02:36 +0000