summaryrefslogtreecommitdiff
path: root/usr.sbin
AgeCommit message (Collapse)Author
2009-03-13More paranoia when parsing empty updates. Make sure they are really empty andClaudio Jeker
don't come with some additional stuff attached to them. OK henning@
2009-03-13Correctly encode MP unreach NLRI so that IPv6 prefixes get removed correctly.Claudio Jeker
One bug was hiding another bug and only foundry based routers where unhappy about these bad updates. Found by Arnoud Vermeer and Elisa Jasinska at ams-ix. OK henning@
2009-03-13When commiting the buf_left() change adding len to the check was dropped andClaudio Jeker
so a warning later on could be hit in some cases. Found by dlg@ OK dlg@
2009-03-12Add new function time_to_text to correctly display the date.pea
Use it to display the date in received from header and when we store headers. ok jacekm@
2009-03-12lsa_self() did too many things at once, and had too much logicStefan Sperling
buried inside of it that its caller relied on. So split it up as follows: lsa_self() Check whether an LSA is self-originated. lsa_flush() Flush an LSA from the LSDB. lsa_reflood() Prepare an LSA for reflooding (actual reflooding currently requires sending an imsg which must be done by the caller). ok claudio@
2009-03-11getmxbyname() returning a value != 0 does not necessarily means it failedpea
ok gilles@
2009-03-11fix log_info(), while other processes know about message uid, the smtpGilles Chehade
process only knows about message id bug spotted by pea@
2009-03-10implement basic logging, needs more work; ok gilles@Jacek Masiulaniec
2009-03-10when calling external mda, use restricted environment; ok gilles@Jacek Masiulaniec
2009-03-10run external mda with cwd set to $HOME or /; ok gilles@Jacek Masiulaniec
2009-03-10kill few lines, saving one seteuid(2) call; ok gilles@Jacek Masiulaniec
2009-03-10- Use setsid(2) to create new process group for external mda.Jacek Masiulaniec
- Unignore SIGPIPE, otherwise it remains ignored in forked mda. - Use closefrom(2) to close all descriptors apart from stdin/stdout/stderr. ok gilles@
2009-03-10The linked() function had an identity crisis and referred to itselfStefan Sperling
as "spf_calc" in fatal error messages.
2009-03-10Revert previous, I committed the wrong file, should have been rde_spf.c.Stefan Sperling
2009-03-10The linked() function had an identity crisis and referred to itselfStefan Sperling
as "spf_calc" in fatal error messages.
2009-03-10it's simpler to use pipe(2) than socketpair(2) to communicate withJacek Masiulaniec
external mda; ok gilles@
2009-03-10by default drop privs to www/www, not nobody/nogroup if User/GroupMartynas Venckus
entries are not present; or it's being run configless "sure" henning@, "makes sense" merdely@, ok sthen@
2009-03-10fork(2) or socketpair(2) failures are temporary, delivery attempt should beJacek Masiulaniec
retried later; ok gilles@
2009-03-10ascribe copyright to code taken from OpenSSH, pointed out by deraadtJacek Masiulaniec
2009-03-09run external mda directly, not via sh -c; this steals addargs() APIJacek Masiulaniec
from OpenSSH; ok gilles@
2009-03-09Drop ALIAS_TEXT, plain maps got implemented in a different way; ok gilles@Jacek Masiulaniec
2009-03-09add hunk that should have been included in rev. 1.12, fixes occasionalJacek Masiulaniec
crash; ok gilles@
2009-03-09add basic support for outgoing authentication (AUTH PLAIN over ssl) whichGilles Chehade
can be turned on by adding "enable auth" to a "relay via" rule. this made me rework the mx resolution so that it is done by the mta process and not the runner process anymore.
2009-03-08adapt example to reflect a recent change in parse.yGilles Chehade
2009-03-08supporting delivery to a mbox that's not in _PATH_MAILDIR is not supported,Gilles Chehade
if someone comes with good rationale why this is needed, we'll consider it, meanwhile it's more work than it looks like and it brings a lot of pain. discussed with jacekm@ and deraadt@
2009-03-08when operating in enqueue mode, it was easy to make smtpctl fatal() byGilles Chehade
writing a small app that sent out of order imsg's. prevent this by use of a state machine and read event masking. issue spotted by jacekm@, temporary fix by me. there are ideas around this, but we want to experiment them a bit and they are low priority.
2009-03-08shrink struct message a bit by removing a couple fields which are no longerGilles Chehade
used and by moving the rcpt count in struct session where it really belongs while at it, remove some unused splay tree generation in mfa
2009-03-08~/.forward files handling was fixed recently so that it is the privilegedGilles Chehade
process that does the opening, this commit does some cleanup, and fixes a bug I experienced today which was caused by a use-after-free. I did some testing to make sure a user cannot cause smtpd to deadlock, or loop, with broken setups (self-referencing forwards/aliases, empty files, broken files...), but if you are playing with aliases/forwards PLEASE let me know of any bug you run into.
2009-03-08Remove #ifdef'd code which had a TODO comment essentially askingStefan Sperling
"Do we need anything fancy to determine whether *-prefix-LSAs are self-originated?" The answer is "No, we don't, see section 4.6 of RFC5340." ok claudio@
2009-03-07Get rid of rde_nbr structure as it is no more needed in RDE to makeMichele Marchetto
routing decisions. ok claudio@
2009-03-07tweak code to use same comparison operations as PackageNames.Marc Espie
so the "special code" to handle weird suffixes and epoch names (v*) finally comes into operation. regress tests still pass, I still expect some breakage...
2009-03-07introduce versionspecs as a derivative object from version.Marc Espie
Allows an operator such as <=. also overrides the compare operator for the pnum part, because specifically, in pkgspecs, if the pnum is not specified, it stands for "any pnum will do"... yes, that's hairy...
2009-03-07Add lsa_find_tree() to allow searching for LSAs in a specific LSA tree.Stefan Sperling
We had code marked XXX searching an LSA tree manually using RB_FIND(), switch it over to lsa_find_tree(). Make lsa_find() use the new function, too, to avoid code duplication. ok claudio@
2009-03-06missing prototypeGilles Chehade
2009-03-06introduce map_dblookup() which allows us to query db maps for plain entriesGilles Chehade
and catch (and warn) about invalid map types.
2009-03-06make_plain() deals with a c-string, val->size should contain the nul-byteGilles Chehade
or we will truncate the last character of every value we store in a map.
2009-03-06fix a bug in the generation of plain maps which would cause the value notGilles Chehade
to be correctly inserted into the map.
2009-03-06Make RDE aware of multicast group members per interface. This is needed toMichele Marchetto
make unicast routing decisions. ok claudio@
2009-03-05DOMAINNNAME -> DOMAINNAME;Jason McIntyre
2009-03-05call may_check_digest after extractionMarc Espie
2009-03-05more stuff to check digests during extraction, if wanted.Marc Espie
Fix read/write of digitalsignature stuff. don't integrate manual-installs, since it's highly variable. create correct category for digitalsignature, so it gets written out.
2009-03-04typo;Michele Marchetto
unknon -> unknown
2009-03-04I should know outside data must be vis(3)'d.Kevin Steves
Don't log kiss code for now.
2009-03-04received refid should not be converted to host byte order; ok henning@Kevin Steves
2009-03-04log reason when not synced; ok henning@Kevin Steves
2009-03-04print alarm condition from leap indicator; ok henning@ otto@Kevin Steves
2009-03-04Introduce and use buf_size(buf) instead of buf->wpos -- at least in the nonClaudio Jeker
buf/imsg specific code. buf_close() will no force a truncation of the buffer to the wpos but actually add code in imsg.c to detect and report such silly behaviour. Makes the buf API a bit more sane.
2009-03-04plug a memory leak, remove lka session from the the lka session tree whenGilles Chehade
we are done expanding aliases/forwards, and cleanup a bit the expansion code so that I can soon remove some of the duplication.
2009-03-03when forwards/aliases expansion fails in an lka session, make sure that mfaGilles Chehade
is notified so that the session does not hang
2009-03-03Fix a long standing issue where ~/.forward files were opened by user _smtpdGilles Chehade
causing them not to be handled when a user's homedir is set to mode 0700. I still need to do some cleanup and make sure it works as it should, but this diff provides better behavior than what we had.