Age | Commit message (Collapse) | Author | |
---|---|---|---|
2009-03-13 | More paranoia when parsing empty updates. Make sure they are really empty and | Claudio Jeker | |
don't come with some additional stuff attached to them. OK henning@ | |||
2009-03-13 | Correctly encode MP unreach NLRI so that IPv6 prefixes get removed correctly. | Claudio Jeker | |
One bug was hiding another bug and only foundry based routers where unhappy about these bad updates. Found by Arnoud Vermeer and Elisa Jasinska at ams-ix. OK henning@ | |||
2009-03-13 | When commiting the buf_left() change adding len to the check was dropped and | Claudio Jeker | |
so a warning later on could be hit in some cases. Found by dlg@ OK dlg@ | |||
2009-03-12 | Add new function time_to_text to correctly display the date. | pea | |
Use it to display the date in received from header and when we store headers. ok jacekm@ | |||
2009-03-12 | lsa_self() did too many things at once, and had too much logic | Stefan Sperling | |
buried inside of it that its caller relied on. So split it up as follows: lsa_self() Check whether an LSA is self-originated. lsa_flush() Flush an LSA from the LSDB. lsa_reflood() Prepare an LSA for reflooding (actual reflooding currently requires sending an imsg which must be done by the caller). ok claudio@ | |||
2009-03-11 | getmxbyname() returning a value != 0 does not necessarily means it failed | pea | |
ok gilles@ | |||
2009-03-11 | fix log_info(), while other processes know about message uid, the smtp | Gilles Chehade | |
process only knows about message id bug spotted by pea@ | |||
2009-03-10 | implement basic logging, needs more work; ok gilles@ | Jacek Masiulaniec | |
2009-03-10 | when calling external mda, use restricted environment; ok gilles@ | Jacek Masiulaniec | |
2009-03-10 | run external mda with cwd set to $HOME or /; ok gilles@ | Jacek Masiulaniec | |
2009-03-10 | kill few lines, saving one seteuid(2) call; ok gilles@ | Jacek Masiulaniec | |
2009-03-10 | - Use setsid(2) to create new process group for external mda. | Jacek Masiulaniec | |
- Unignore SIGPIPE, otherwise it remains ignored in forked mda. - Use closefrom(2) to close all descriptors apart from stdin/stdout/stderr. ok gilles@ | |||
2009-03-10 | The linked() function had an identity crisis and referred to itself | Stefan Sperling | |
as "spf_calc" in fatal error messages. | |||
2009-03-10 | Revert previous, I committed the wrong file, should have been rde_spf.c. | Stefan Sperling | |
2009-03-10 | The linked() function had an identity crisis and referred to itself | Stefan Sperling | |
as "spf_calc" in fatal error messages. | |||
2009-03-10 | it's simpler to use pipe(2) than socketpair(2) to communicate with | Jacek Masiulaniec | |
external mda; ok gilles@ | |||
2009-03-10 | by default drop privs to www/www, not nobody/nogroup if User/Group | Martynas Venckus | |
entries are not present; or it's being run configless "sure" henning@, "makes sense" merdely@, ok sthen@ | |||
2009-03-10 | fork(2) or socketpair(2) failures are temporary, delivery attempt should be | Jacek Masiulaniec | |
retried later; ok gilles@ | |||
2009-03-10 | ascribe copyright to code taken from OpenSSH, pointed out by deraadt | Jacek Masiulaniec | |
2009-03-09 | run external mda directly, not via sh -c; this steals addargs() API | Jacek Masiulaniec | |
from OpenSSH; ok gilles@ | |||
2009-03-09 | Drop ALIAS_TEXT, plain maps got implemented in a different way; ok gilles@ | Jacek Masiulaniec | |
2009-03-09 | add hunk that should have been included in rev. 1.12, fixes occasional | Jacek Masiulaniec | |
crash; ok gilles@ | |||
2009-03-09 | add basic support for outgoing authentication (AUTH PLAIN over ssl) which | Gilles Chehade | |
can be turned on by adding "enable auth" to a "relay via" rule. this made me rework the mx resolution so that it is done by the mta process and not the runner process anymore. | |||
2009-03-08 | adapt example to reflect a recent change in parse.y | Gilles Chehade | |
2009-03-08 | supporting delivery to a mbox that's not in _PATH_MAILDIR is not supported, | Gilles Chehade | |
if someone comes with good rationale why this is needed, we'll consider it, meanwhile it's more work than it looks like and it brings a lot of pain. discussed with jacekm@ and deraadt@ | |||
2009-03-08 | when operating in enqueue mode, it was easy to make smtpctl fatal() by | Gilles Chehade | |
writing a small app that sent out of order imsg's. prevent this by use of a state machine and read event masking. issue spotted by jacekm@, temporary fix by me. there are ideas around this, but we want to experiment them a bit and they are low priority. | |||
2009-03-08 | shrink struct message a bit by removing a couple fields which are no longer | Gilles Chehade | |
used and by moving the rcpt count in struct session where it really belongs while at it, remove some unused splay tree generation in mfa | |||
2009-03-08 | ~/.forward files handling was fixed recently so that it is the privileged | Gilles Chehade | |
process that does the opening, this commit does some cleanup, and fixes a bug I experienced today which was caused by a use-after-free. I did some testing to make sure a user cannot cause smtpd to deadlock, or loop, with broken setups (self-referencing forwards/aliases, empty files, broken files...), but if you are playing with aliases/forwards PLEASE let me know of any bug you run into. | |||
2009-03-08 | Remove #ifdef'd code which had a TODO comment essentially asking | Stefan Sperling | |
"Do we need anything fancy to determine whether *-prefix-LSAs are self-originated?" The answer is "No, we don't, see section 4.6 of RFC5340." ok claudio@ | |||
2009-03-07 | Get rid of rde_nbr structure as it is no more needed in RDE to make | Michele Marchetto | |
routing decisions. ok claudio@ | |||
2009-03-07 | tweak code to use same comparison operations as PackageNames. | Marc Espie | |
so the "special code" to handle weird suffixes and epoch names (v*) finally comes into operation. regress tests still pass, I still expect some breakage... | |||
2009-03-07 | introduce versionspecs as a derivative object from version. | Marc Espie | |
Allows an operator such as <=. also overrides the compare operator for the pnum part, because specifically, in pkgspecs, if the pnum is not specified, it stands for "any pnum will do"... yes, that's hairy... | |||
2009-03-07 | Add lsa_find_tree() to allow searching for LSAs in a specific LSA tree. | Stefan Sperling | |
We had code marked XXX searching an LSA tree manually using RB_FIND(), switch it over to lsa_find_tree(). Make lsa_find() use the new function, too, to avoid code duplication. ok claudio@ | |||
2009-03-06 | missing prototype | Gilles Chehade | |
2009-03-06 | introduce map_dblookup() which allows us to query db maps for plain entries | Gilles Chehade | |
and catch (and warn) about invalid map types. | |||
2009-03-06 | make_plain() deals with a c-string, val->size should contain the nul-byte | Gilles Chehade | |
or we will truncate the last character of every value we store in a map. | |||
2009-03-06 | fix a bug in the generation of plain maps which would cause the value not | Gilles Chehade | |
to be correctly inserted into the map. | |||
2009-03-06 | Make RDE aware of multicast group members per interface. This is needed to | Michele Marchetto | |
make unicast routing decisions. ok claudio@ | |||
2009-03-05 | DOMAINNNAME -> DOMAINNAME; | Jason McIntyre | |
2009-03-05 | call may_check_digest after extraction | Marc Espie | |
2009-03-05 | more stuff to check digests during extraction, if wanted. | Marc Espie | |
Fix read/write of digitalsignature stuff. don't integrate manual-installs, since it's highly variable. create correct category for digitalsignature, so it gets written out. | |||
2009-03-04 | typo; | Michele Marchetto | |
unknon -> unknown | |||
2009-03-04 | I should know outside data must be vis(3)'d. | Kevin Steves | |
Don't log kiss code for now. | |||
2009-03-04 | received refid should not be converted to host byte order; ok henning@ | Kevin Steves | |
2009-03-04 | log reason when not synced; ok henning@ | Kevin Steves | |
2009-03-04 | print alarm condition from leap indicator; ok henning@ otto@ | Kevin Steves | |
2009-03-04 | Introduce and use buf_size(buf) instead of buf->wpos -- at least in the non | Claudio Jeker | |
buf/imsg specific code. buf_close() will no force a truncation of the buffer to the wpos but actually add code in imsg.c to detect and report such silly behaviour. Makes the buf API a bit more sane. | |||
2009-03-04 | plug a memory leak, remove lka session from the the lka session tree when | Gilles Chehade | |
we are done expanding aliases/forwards, and cleanup a bit the expansion code so that I can soon remove some of the duplication. | |||
2009-03-03 | when forwards/aliases expansion fails in an lka session, make sure that mfa | Gilles Chehade | |
is notified so that the session does not hang | |||
2009-03-03 | Fix a long standing issue where ~/.forward files were opened by user _smtpd | Gilles Chehade | |
causing them not to be handled when a user's homedir is set to mode 0700. I still need to do some cleanup and make sure it works as it should, but this diff provides better behavior than what we had. |