1 /*
2 * Copyright (c) 1998-2003, 2006 Sendmail, Inc. and its suppliers.
3 * All rights reserved.
4 * Copyright (c) 1983, 1995-1997 Eric P. Allman. All rights reserved.
5 * Copyright (c) 1988, 1993
6 * The Regents of the University of California. All rights reserved.
7 *
8 * By using this file, you agree to the terms and conditions set
9 * forth in the LICENSE file which can be found at the top level of
10 * the sendmail distribution.
11 *
12 */
13 /*
14 * Copyright (c) 2016 by Delphix. All rights reserved.
15 */
16 #include <sendmail.h>
17
18 SM_RCSID("@(#)$Id: savemail.c,v 8.314 2009/12/18 17:08:01 ca Exp $")
19
20 static bool errbody __P((MCI *, ENVELOPE *, char *));
21 static bool pruneroute __P((char *));
22
23 /*
24 ** SAVEMAIL -- Save mail on error
25 **
26 ** If mailing back errors, mail it back to the originator
27 ** together with an error message; otherwise, just put it in
28 ** dead.letter in the user's home directory (if they exist on
29 ** this machine).
30 **
31 ** Parameters:
32 ** e -- the envelope containing the message in error.
33 ** sendbody -- if true, also send back the body of the
34 ** message; otherwise just send the header.
35 **
36 ** Returns:
37 ** true if savemail panic'ed, (i.e., the data file should
38 ** be preserved by dropenvelope())
39 **
40 ** Side Effects:
41 ** Saves the letter, by writing or mailing it back to the
42 ** sender, or by putting it in dead.letter in their home
43 ** directory.
44 */
45
46 /* defines for state machine */
47 #define ESM_REPORT 0 /* report to sender's terminal */
48 #define ESM_MAIL 1 /* mail back to sender */
49 #define ESM_QUIET 2 /* mail has already been returned */
50 #define ESM_DEADLETTER 3 /* save in ~/dead.letter */
51 #define ESM_POSTMASTER 4 /* return to postmaster */
52 #define ESM_DEADLETTERDROP 5 /* save in DeadLetterDrop */
53 #define ESM_PANIC 6 /* call loseqfile() */
54 #define ESM_DONE 7 /* message is successfully delivered */
55
56 bool
savemail(e,sendbody)57 savemail(e, sendbody)
58 register ENVELOPE *e;
59 bool sendbody;
60 {
61 register SM_FILE_T *fp;
62 bool panic = false;
63 int state;
64 auto ADDRESS *q = NULL;
65 register char *p;
66 MCI mcibuf;
67 int flags;
68 long sff;
69 char buf[MAXLINE + 1];
70 char dlbuf[MAXPATHLEN];
71 SM_MBDB_T user;
72
73
74 if (tTd(6, 1))
75 {
76 sm_dprintf("\nsavemail, errormode = %c, id = %s, ExitStat = %d\n e_from=",
77 e->e_errormode, e->e_id == NULL ? "NONE" : e->e_id,
78 ExitStat);
79 printaddr(sm_debug_file(), &e->e_from, false);
80 }
81
82 if (e->e_id == NULL)
83 {
84 /* can't return a message with no id */
85 return panic;
86 }
87
88 /*
89 ** In the unhappy event we don't know who to return the mail
90 ** to, make someone up.
91 */
92
93 if (e->e_from.q_paddr == NULL)
94 {
95 e->e_sender = "Postmaster";
96 if (parseaddr(e->e_sender, &e->e_from,
97 RF_COPYPARSE|RF_SENDERADDR,
98 '\0', NULL, e, false) == NULL)
99 {
100 syserr("553 5.3.5 Cannot parse Postmaster!");
101 finis(true, true, EX_SOFTWARE);
102 }
103 }
104 e->e_to = NULL;
105
106 /*
107 ** Basic state machine.
108 **
109 ** This machine runs through the following states:
110 **
111 ** ESM_QUIET Errors have already been printed iff the
112 ** sender is local.
113 ** ESM_REPORT Report directly to the sender's terminal.
114 ** ESM_MAIL Mail response to the sender.
115 ** ESM_DEADLETTER Save response in ~/dead.letter.
116 ** ESM_POSTMASTER Mail response to the postmaster.
117 ** ESM_DEADLETTERDROP
118 ** If DeadLetterDrop set, save it there.
119 ** ESM_PANIC Save response anywhere possible.
120 */
121
122 /* determine starting state */
123 switch (e->e_errormode)
124 {
125 case EM_WRITE:
126 state = ESM_REPORT;
127 break;
128
129 case EM_BERKNET:
130 case EM_MAIL:
131 state = ESM_MAIL;
132 break;
133
134 case EM_PRINT:
135 case '\0':
136 state = ESM_QUIET;
137 break;
138
139 case EM_QUIET:
140 /* no need to return anything at all */
141 return panic;
142
143 default:
144 syserr("554 5.3.0 savemail: bogus errormode x%x",
145 e->e_errormode);
146 state = ESM_MAIL;
147 break;
148 }
149
150 /* if this is already an error response, send to postmaster */
151 if (bitset(EF_RESPONSE, e->e_flags))
152 {
153 if (e->e_parent != NULL &&
154 bitset(EF_RESPONSE, e->e_parent->e_flags))
155 {
156 /* got an error sending a response -- can it */
157 return panic;
158 }
159 state = ESM_POSTMASTER;
160 }
161
162 while (state != ESM_DONE)
163 {
164 if (tTd(6, 5))
165 sm_dprintf(" state %d\n", state);
166
167 switch (state)
168 {
169 case ESM_QUIET:
170 if (bitnset(M_LOCALMAILER, e->e_from.q_mailer->m_flags))
171 state = ESM_DEADLETTER;
172 else
173 state = ESM_MAIL;
174 break;
175
176 case ESM_REPORT:
177
178 /*
179 ** If the user is still logged in on the same terminal,
180 ** then write the error messages back to hir (sic).
181 */
182
183 #if USE_TTYPATH
184 p = ttypath();
185 #else /* USE_TTYPATH */
186 p = NULL;
187 #endif /* USE_TTYPATH */
188
189 if (p == NULL || sm_io_reopen(SmFtStdio,
190 SM_TIME_DEFAULT,
191 p, SM_IO_WRONLY, NULL,
192 smioout) == NULL)
193 {
194 state = ESM_MAIL;
195 break;
196 }
197
198 expand("\201n", buf, sizeof(buf), e);
199 (void) sm_io_fprintf(smioout, SM_TIME_DEFAULT,
200 "\r\nMessage from %s...\r\n", buf);
201 (void) sm_io_fprintf(smioout, SM_TIME_DEFAULT,
202 "Errors occurred while sending mail.\r\n");
203 if (e->e_xfp != NULL)
204 {
205 (void) bfrewind(e->e_xfp);
206 (void) sm_io_fprintf(smioout, SM_TIME_DEFAULT,
207 "Transcript follows:\r\n");
208 while (sm_io_fgets(e->e_xfp, SM_TIME_DEFAULT,
209 buf, sizeof(buf)) != NULL &&
210 !sm_io_error(smioout))
211 (void) sm_io_fputs(smioout,
212 SM_TIME_DEFAULT,
213 buf);
214 }
215 else
216 {
217 syserr("Cannot open %s",
218 queuename(e, XSCRPT_LETTER));
219 (void) sm_io_fprintf(smioout, SM_TIME_DEFAULT,
220 "Transcript of session is unavailable.\r\n");
221 }
222 (void) sm_io_fprintf(smioout, SM_TIME_DEFAULT,
223 "Original message will be saved in dead.letter.\r\n");
224 state = ESM_DEADLETTER;
225 break;
226
227 case ESM_MAIL:
228 /*
229 ** If mailing back, do it.
230 ** Throw away all further output. Don't alias,
231 ** since this could cause loops, e.g., if joe
232 ** mails to joe@x, and for some reason the network
233 ** for @x is down, then the response gets sent to
234 ** joe@x, which gives a response, etc. Also force
235 ** the mail to be delivered even if a version of
236 ** it has already been sent to the sender.
237 **
238 ** If this is a configuration or local software
239 ** error, send to the local postmaster as well,
240 ** since the originator can't do anything
241 ** about it anyway. Note that this is a full
242 ** copy of the message (intentionally) so that
243 ** the Postmaster can forward things along.
244 */
245
246 if (ExitStat == EX_CONFIG || ExitStat == EX_SOFTWARE)
247 {
248 (void) sendtolist("postmaster", NULLADDR,
249 &e->e_errorqueue, 0, e);
250 }
251 if (!emptyaddr(&e->e_from))
252 {
253 char from[TOBUFSIZE];
254
255 if (sm_strlcpy(from, e->e_from.q_paddr,
256 sizeof(from)) >= sizeof(from))
257 {
258 state = ESM_POSTMASTER;
259 break;
260 }
261
262 if (!DontPruneRoutes)
263 (void) pruneroute(from);
264
265 (void) sendtolist(from, NULLADDR,
266 &e->e_errorqueue, 0, e);
267 }
268
269 /*
270 ** Deliver a non-delivery report to the
271 ** Postmaster-designate (not necessarily
272 ** Postmaster). This does not include the
273 ** body of the message, for privacy reasons.
274 ** You really shouldn't need this.
275 */
276
277 e->e_flags |= EF_PM_NOTIFY;
278
279 /* check to see if there are any good addresses */
280 for (q = e->e_errorqueue; q != NULL; q = q->q_next)
281 {
282 if (QS_IS_SENDABLE(q->q_state))
283 break;
284 }
285 if (q == NULL)
286 {
287 /* this is an error-error */
288 state = ESM_POSTMASTER;
289 break;
290 }
291 if (returntosender(e->e_message, e->e_errorqueue,
292 sendbody ? RTSF_SEND_BODY
293 : RTSF_NO_BODY,
294 e) == 0)
295 {
296 state = ESM_DONE;
297 break;
298 }
299
300 /* didn't work -- return to postmaster */
301 state = ESM_POSTMASTER;
302 break;
303
304 case ESM_POSTMASTER:
305 /*
306 ** Similar to previous case, but to system postmaster.
307 */
308
309 q = NULL;
310 expand(DoubleBounceAddr, buf, sizeof(buf), e);
311
312 /*
313 ** Just drop it on the floor if DoubleBounceAddr
314 ** expands to an empty string.
315 */
316
317 if (*buf == '\0')
318 {
319 state = ESM_DONE;
320 break;
321 }
322 if (sendtolist(buf, NULLADDR, &q, 0, e) <= 0)
323 {
324 syserr("553 5.3.0 cannot parse %s!", buf);
325 ExitStat = EX_SOFTWARE;
326 state = ESM_DEADLETTERDROP;
327 break;
328 }
329 flags = RTSF_PM_BOUNCE;
330 if (sendbody)
331 flags |= RTSF_SEND_BODY;
332 if (returntosender(e->e_message, q, flags, e) == 0)
333 {
334 state = ESM_DONE;
335 break;
336 }
337
338 /* didn't work -- last resort */
339 state = ESM_DEADLETTERDROP;
340 break;
341
342 case ESM_DEADLETTER:
343 /*
344 ** Save the message in dead.letter.
345 ** If we weren't mailing back, and the user is
346 ** local, we should save the message in
347 ** ~/dead.letter so that the poor person doesn't
348 ** have to type it over again -- and we all know
349 ** what poor typists UNIX users are.
350 */
351
352 p = NULL;
353 if (bitnset(M_HASPWENT, e->e_from.q_mailer->m_flags))
354 {
355 if (e->e_from.q_home != NULL)
356 p = e->e_from.q_home;
357 else if (sm_mbdb_lookup(e->e_from.q_user, &user)
358 == EX_OK &&
359 *user.mbdb_homedir != '\0')
360 p = user.mbdb_homedir;
361 }
362 if (p == NULL || e->e_dfp == NULL)
363 {
364 /* no local directory or no data file */
365 state = ESM_MAIL;
366 break;
367 }
368
369 /* we have a home directory; write dead.letter */
370 macdefine(&e->e_macro, A_TEMP, 'z', p);
371
372 /* get the sender for the UnixFromLine */
373 p = macvalue('g', e);
374 macdefine(&e->e_macro, A_PERM, 'g', e->e_sender);
375
376 expand("\201z/dead.letter", dlbuf, sizeof(dlbuf), e);
377 sff = SFF_CREAT|SFF_REGONLY|SFF_RUNASREALUID;
378 if (RealUid == 0)
379 sff |= SFF_ROOTOK;
380 e->e_to = dlbuf;
381 if (writable(dlbuf, NULL, sff) &&
382 mailfile(dlbuf, FileMailer, NULL, sff, e) == EX_OK)
383 {
384 int oldverb = Verbose;
385
386 if (OpMode != MD_DAEMON && OpMode != MD_SMTP)
387 Verbose = 1;
388 if (Verbose > 0)
389 message("Saved message in %s", dlbuf);
390 Verbose = oldverb;
391 macdefine(&e->e_macro, A_PERM, 'g', p);
392 state = ESM_DONE;
393 break;
394 }
395 macdefine(&e->e_macro, A_PERM, 'g', p);
396 state = ESM_MAIL;
397 break;
398
399 case ESM_DEADLETTERDROP:
400 /*
401 ** Log the mail in DeadLetterDrop file.
402 */
403
404 if (e->e_class < 0)
405 {
406 state = ESM_DONE;
407 break;
408 }
409
410 if ((SafeFileEnv != NULL && SafeFileEnv[0] != '\0') ||
411 DeadLetterDrop == NULL ||
412 DeadLetterDrop[0] == '\0')
413 {
414 state = ESM_PANIC;
415 break;
416 }
417
418 sff = SFF_CREAT|SFF_REGONLY|SFF_ROOTOK|SFF_OPENASROOT|SFF_MUSTOWN;
419 if (!writable(DeadLetterDrop, NULL, sff) ||
420 (fp = safefopen(DeadLetterDrop, O_WRONLY|O_APPEND,
421 FileMode, sff)) == NULL)
422 {
423 state = ESM_PANIC;
424 break;
425 }
426
427 memset(&mcibuf, '\0', sizeof(mcibuf));
428 mcibuf.mci_out = fp;
429 mcibuf.mci_mailer = FileMailer;
430 if (bitnset(M_7BITS, FileMailer->m_flags))
431 mcibuf.mci_flags |= MCIF_7BIT;
432
433 /* get the sender for the UnixFromLine */
434 p = macvalue('g', e);
435 macdefine(&e->e_macro, A_PERM, 'g', e->e_sender);
436
437 if (!putfromline(&mcibuf, e) ||
438 !(*e->e_puthdr)(&mcibuf, e->e_header, e,
439 M87F_OUTER) ||
440 !(*e->e_putbody)(&mcibuf, e, NULL) ||
441 !putline("\n", &mcibuf) ||
442 sm_io_flush(fp, SM_TIME_DEFAULT) == SM_IO_EOF ||
443 sm_io_error(fp) ||
444 sm_io_close(fp, SM_TIME_DEFAULT) < 0)
445 state = ESM_PANIC;
446 else
447 {
448 int oldverb = Verbose;
449
450 if (OpMode != MD_DAEMON && OpMode != MD_SMTP)
451 Verbose = 1;
452 if (Verbose > 0)
453 message("Saved message in %s",
454 DeadLetterDrop);
455 Verbose = oldverb;
456 if (LogLevel > 3)
457 sm_syslog(LOG_NOTICE, e->e_id,
458 "Saved message in %s",
459 DeadLetterDrop);
460 state = ESM_DONE;
461 }
462 macdefine(&e->e_macro, A_PERM, 'g', p);
463 break;
464
465 default:
466 syserr("554 5.3.5 savemail: unknown state %d", state);
467 /* FALLTHROUGH */
468
469 case ESM_PANIC:
470 /* leave the locked queue & transcript files around */
471 loseqfile(e, "savemail panic");
472 panic = true;
473 errno = 0;
474 syserr("554 savemail: cannot save rejected email anywhere");
475 state = ESM_DONE;
476 break;
477 }
478 }
479 return panic;
480 }
481 /*
482 ** RETURNTOSENDER -- return a message to the sender with an error.
483 **
484 ** Parameters:
485 ** msg -- the explanatory message.
486 ** returnq -- the queue of people to send the message to.
487 ** flags -- flags tweaking the operation:
488 ** RTSF_SENDBODY -- include body of message (otherwise
489 ** just send the header).
490 ** RTSF_PMBOUNCE -- this is a postmaster bounce.
491 ** e -- the current envelope.
492 **
493 ** Returns:
494 ** zero -- if everything went ok.
495 ** else -- some error.
496 **
497 ** Side Effects:
498 ** Returns the current message to the sender via mail.
499 */
500
501 #define MAXRETURNS 6 /* max depth of returning messages */
502 #define ERRORFUDGE 1024 /* nominal size of error message text */
503
504 int
returntosender(msg,returnq,flags,e)505 returntosender(msg, returnq, flags, e)
506 char *msg;
507 ADDRESS *returnq;
508 int flags;
509 register ENVELOPE *e;
510 {
511 register ENVELOPE *ee;
512 ENVELOPE *oldcur = CurEnv;
513 ENVELOPE errenvelope;
514 static int returndepth = 0;
515 register ADDRESS *q;
516 char *p;
517 char buf[MAXNAME + 1];
518
519 if (returnq == NULL)
520 return -1;
521
522 if (msg == NULL)
523 msg = "Unable to deliver mail";
524
525 if (tTd(6, 1))
526 {
527 sm_dprintf("\n*** Return To Sender: msg=\"%s\", depth=%d, e=%p, returnq=",
528 msg, returndepth, e);
529 printaddr(sm_debug_file(), returnq, true);
530 if (tTd(6, 20))
531 {
532 sm_dprintf("Sendq=");
533 printaddr(sm_debug_file(), e->e_sendqueue, true);
534 }
535 }
536
537 if (++returndepth >= MAXRETURNS)
538 {
539 if (returndepth != MAXRETURNS)
540 syserr("554 5.3.0 returntosender: infinite recursion on %s",
541 returnq->q_paddr);
542 /* don't "unrecurse" and fake a clean exit */
543 /* returndepth--; */
544 return 0;
545 }
546
547 macdefine(&e->e_macro, A_PERM, 'g', e->e_sender);
548 macdefine(&e->e_macro, A_PERM, 'u', NULL);
549
550 /* initialize error envelope */
551 ee = newenvelope(&errenvelope, e, sm_rpool_new_x(NULL));
552 macdefine(&ee->e_macro, A_PERM, 'a', "\201b");
553 macdefine(&ee->e_macro, A_PERM, 'r', "");
554 macdefine(&ee->e_macro, A_PERM, 's', "localhost");
555 macdefine(&ee->e_macro, A_PERM, '_', "localhost");
556 clrsessenvelope(ee);
557
558 ee->e_puthdr = putheader;
559 ee->e_putbody = errbody;
560 ee->e_flags |= EF_RESPONSE|EF_METOO;
561 if (!bitset(EF_OLDSTYLE, e->e_flags))
562 ee->e_flags &= ~EF_OLDSTYLE;
563 if (bitset(EF_DONT_MIME, e->e_flags))
564 {
565 ee->e_flags |= EF_DONT_MIME;
566
567 /*
568 ** If we can't convert to MIME and we don't pass
569 ** 8-bit, we can't send the body.
570 */
571
572 if (bitset(EF_HAS8BIT, e->e_flags) &&
573 !bitset(MM_PASS8BIT, MimeMode))
574 flags &= ~RTSF_SEND_BODY;
575 }
576
577 ee->e_sendqueue = returnq;
578 ee->e_msgsize = 0;
579 if (bitset(RTSF_SEND_BODY, flags) &&
580 !bitset(PRIV_NOBODYRETN, PrivacyFlags))
581 ee->e_msgsize = ERRORFUDGE + e->e_msgsize;
582 else
583 ee->e_flags |= EF_NO_BODY_RETN;
584
585 if (!setnewqueue(ee))
586 {
587 syserr("554 5.3.0 returntosender: cannot select queue for %s",
588 returnq->q_paddr);
589 ExitStat = EX_UNAVAILABLE;
590 returndepth--;
591 return -1;
592 }
593 initsys(ee);
594
595 #if NAMED_BIND
596 _res.retry = TimeOuts.res_retry[RES_TO_FIRST];
597 _res.retrans = TimeOuts.res_retrans[RES_TO_FIRST];
598 #endif /* NAMED_BIND */
599 for (q = returnq; q != NULL; q = q->q_next)
600 {
601 if (QS_IS_BADADDR(q->q_state))
602 continue;
603
604 q->q_flags &= ~(QHASNOTIFY|Q_PINGFLAGS);
605 q->q_flags |= QPINGONFAILURE;
606
607 if (!QS_IS_DEAD(q->q_state))
608 ee->e_nrcpts++;
609
610 if (q->q_alias == NULL)
611 addheader("To", q->q_paddr, 0, ee, true);
612 }
613
614 if (LogLevel > 5)
615 {
616 if (bitset(EF_RESPONSE, e->e_flags))
617 p = "return to sender";
618 else if (bitset(EF_WARNING, e->e_flags))
619 p = "sender notify";
620 else if (bitset(RTSF_PM_BOUNCE, flags))
621 p = "postmaster notify";
622 else
623 p = "DSN";
624 sm_syslog(LOG_INFO, e->e_id, "%s: %s: %s",
625 ee->e_id, p, shortenstring(msg, MAXSHORTSTR));
626 }
627
628 if (SendMIMEErrors)
629 {
630 addheader("MIME-Version", "1.0", 0, ee, true);
631 (void) sm_snprintf(buf, sizeof(buf), "%s.%ld/%.100s",
632 ee->e_id, (long)curtime(), MyHostName);
633 ee->e_msgboundary = sm_rpool_strdup_x(ee->e_rpool, buf);
634 (void) sm_snprintf(buf, sizeof(buf),
635 #if DSN
636 "multipart/report; report-type=delivery-status;\n\tboundary=\"%s\"",
637 #else /* DSN */
638 "multipart/mixed; boundary=\"%s\"",
639 #endif /* DSN */
640 ee->e_msgboundary);
641 addheader("Content-Type", buf, 0, ee, true);
642
643 p = hvalue("Content-Transfer-Encoding", e->e_header);
644 if (p != NULL && sm_strcasecmp(p, "binary") != 0)
645 p = NULL;
646 if (p == NULL && bitset(EF_HAS8BIT, e->e_flags))
647 p = "8bit";
648 if (p != NULL)
649 addheader("Content-Transfer-Encoding", p, 0, ee, true);
650 }
651 if (strncmp(msg, "Warning:", 8) == 0)
652 {
653 addheader("Subject", msg, 0, ee, true);
654 p = "warning-timeout";
655 }
656 else if (strncmp(msg, "Postmaster warning:", 19) == 0)
657 {
658 addheader("Subject", msg, 0, ee, true);
659 p = "postmaster-warning";
660 }
661 else if (strcmp(msg, "Return receipt") == 0)
662 {
663 addheader("Subject", msg, 0, ee, true);
664 p = "return-receipt";
665 }
666 else if (bitset(RTSF_PM_BOUNCE, flags))
667 {
668 (void) sm_snprintf(buf, sizeof(buf),
669 "Postmaster notify: see transcript for details");
670 addheader("Subject", buf, 0, ee, true);
671 p = "postmaster-notification";
672 }
673 else
674 {
675 (void) sm_snprintf(buf, sizeof(buf),
676 "Returned mail: see transcript for details");
677 addheader("Subject", buf, 0, ee, true);
678 p = "failure";
679 }
680 (void) sm_snprintf(buf, sizeof(buf), "auto-generated (%s)", p);
681 addheader("Auto-Submitted", buf, 0, ee, true);
682
683 /* fake up an address header for the from person */
684 expand("\201n", buf, sizeof(buf), e);
685 if (parseaddr(buf, &ee->e_from,
686 RF_COPYALL|RF_SENDERADDR, '\0', NULL, e, false) == NULL)
687 {
688 syserr("553 5.3.5 Can't parse myself!");
689 ExitStat = EX_SOFTWARE;
690 returndepth--;
691 return -1;
692 }
693 ee->e_from.q_flags &= ~(QHASNOTIFY|Q_PINGFLAGS);
694 ee->e_from.q_flags |= QPINGONFAILURE;
695 ee->e_sender = ee->e_from.q_paddr;
696
697 /* push state into submessage */
698 CurEnv = ee;
699 macdefine(&ee->e_macro, A_PERM, 'f', "\201n");
700 macdefine(&ee->e_macro, A_PERM, 'x', "Mail Delivery Subsystem");
701 eatheader(ee, true, true);
702
703 /* mark statistics */
704 markstats(ee, NULLADDR, STATS_NORMAL);
705
706 /* actually deliver the error message */
707 sendall(ee, SM_DELIVER);
708
709 /* restore state */
710 (void) dropenvelope(ee, true, false);
711 sm_rpool_free(ee->e_rpool);
712 CurEnv = oldcur;
713 returndepth--;
714
715 /* check for delivery errors */
716 if (ee->e_parent == NULL ||
717 !bitset(EF_RESPONSE, ee->e_parent->e_flags))
718 return 0;
719 for (q = ee->e_sendqueue; q != NULL; q = q->q_next)
720 {
721 if (QS_IS_ATTEMPTED(q->q_state))
722 return 0;
723 }
724 return -1;
725 }
726 /*
727 ** ERRBODY -- output the body of an error message.
728 **
729 ** Typically this is a copy of the transcript plus a copy of the
730 ** original offending message.
731 **
732 ** Parameters:
733 ** mci -- the mailer connection information.
734 ** e -- the envelope we are working in.
735 ** separator -- any possible MIME separator (unused).
736 **
737 ** Returns:
738 ** true iff body was written successfully
739 **
740 ** Side Effects:
741 ** Outputs the body of an error message.
742 */
743
744 /* ARGSUSED2 */
745 static bool
errbody(mci,e,separator)746 errbody(mci, e, separator)
747 register MCI *mci;
748 register ENVELOPE *e;
749 char *separator;
750 {
751 bool printheader;
752 bool sendbody;
753 bool pm_notify;
754 int save_errno;
755 register SM_FILE_T *xfile;
756 char *p;
757 register ADDRESS *q = NULL;
758 char actual[MAXLINE];
759 char buf[MAXLINE];
760
761 if (bitset(MCIF_INHEADER, mci->mci_flags))
762 {
763 if (!putline("", mci))
764 goto writeerr;
765 mci->mci_flags &= ~MCIF_INHEADER;
766 }
767 if (e->e_parent == NULL)
768 {
769 syserr("errbody: null parent");
770 if (!putline(" ----- Original message lost -----\n", mci))
771 goto writeerr;
772 return true;
773 }
774
775 /*
776 ** Output MIME header.
777 */
778
779 if (e->e_msgboundary != NULL)
780 {
781 (void) sm_strlcpyn(buf, sizeof(buf), 2, "--", e->e_msgboundary);
782 if (!putline("This is a MIME-encapsulated message", mci) ||
783 !putline("", mci) ||
784 !putline(buf, mci) ||
785 !putline("", mci))
786 goto writeerr;
787 }
788
789 /*
790 ** Output introductory information.
791 */
792
793 pm_notify = false;
794 p = hvalue("subject", e->e_header);
795 if (p != NULL && strncmp(p, "Postmaster ", 11) == 0)
796 pm_notify = true;
797 else
798 {
799 for (q = e->e_parent->e_sendqueue; q != NULL; q = q->q_next)
800 {
801 if (QS_IS_BADADDR(q->q_state))
802 break;
803 }
804 }
805 if (!pm_notify && q == NULL &&
806 !bitset(EF_FATALERRS|EF_SENDRECEIPT, e->e_parent->e_flags))
807 {
808 if (!putline(" **********************************************",
809 mci) ||
810 !putline(" ** THIS IS A WARNING MESSAGE ONLY **",
811 mci) ||
812 !putline(" ** YOU DO NOT NEED TO RESEND YOUR MESSAGE **",
813 mci) ||
814 !putline(" **********************************************",
815 mci) ||
816 !putline("", mci))
817 goto writeerr;
818 }
819 (void) sm_snprintf(buf, sizeof(buf),
820 "The original message was received at %s",
821 arpadate(ctime(&e->e_parent->e_ctime)));
822 if (!putline(buf, mci))
823 goto writeerr;
824 expand("from \201_", buf, sizeof(buf), e->e_parent);
825 if (!putline(buf, mci))
826 goto writeerr;
827
828 /* include id in postmaster copies */
829 if (pm_notify && e->e_parent->e_id != NULL)
830 {
831 (void) sm_strlcpyn(buf, sizeof(buf), 2, "with id ",
832 e->e_parent->e_id);
833 if (!putline(buf, mci))
834 goto writeerr;
835 }
836 if (!putline("", mci))
837 goto writeerr;
838
839 /*
840 ** Output error message header (if specified and available).
841 */
842
843 if (ErrMsgFile != NULL &&
844 !bitset(EF_SENDRECEIPT, e->e_parent->e_flags))
845 {
846 if (*ErrMsgFile == '/')
847 {
848 long sff = SFF_ROOTOK|SFF_REGONLY;
849
850 if (DontLockReadFiles)
851 sff |= SFF_NOLOCK;
852 if (!bitnset(DBS_ERRORHEADERINUNSAFEDIRPATH,
853 DontBlameSendmail))
854 sff |= SFF_SAFEDIRPATH;
855 xfile = safefopen(ErrMsgFile, O_RDONLY, 0444, sff);
856 if (xfile != NULL)
857 {
858 while (sm_io_fgets(xfile, SM_TIME_DEFAULT, buf,
859 sizeof(buf)) != NULL)
860 {
861 int lbs;
862 bool putok;
863 char *lbp;
864
865 lbs = sizeof(buf);
866 lbp = translate_dollars(buf, buf, &lbs);
867 expand(lbp, lbp, lbs, e);
868 putok = putline(lbp, mci);
869 if (lbp != buf)
870 sm_free(lbp);
871 if (!putok)
872 goto writeerr;
873 }
874 (void) sm_io_close(xfile, SM_TIME_DEFAULT);
875 if (!putline("\n", mci))
876 goto writeerr;
877 }
878 }
879 else
880 {
881 expand(ErrMsgFile, buf, sizeof(buf), e);
882 if (!putline(buf, mci) || !putline("", mci))
883 goto writeerr;
884 }
885 }
886
887 /*
888 ** Output message introduction
889 */
890
891 /* permanent fatal errors */
892 printheader = true;
893 for (q = e->e_parent->e_sendqueue; q != NULL; q = q->q_next)
894 {
895 if (!QS_IS_BADADDR(q->q_state) ||
896 !bitset(QPINGONFAILURE, q->q_flags))
897 continue;
898
899 if (printheader)
900 {
901 if (!putline(" ----- The following addresses had permanent fatal errors -----",
902 mci))
903 goto writeerr;
904 printheader = false;
905 }
906
907 (void) sm_strlcpy(buf, shortenstring(q->q_paddr, MAXSHORTSTR),
908 sizeof(buf));
909 if (!putline(buf, mci))
910 goto writeerr;
911 if (q->q_rstatus != NULL)
912 {
913 (void) sm_snprintf(buf, sizeof(buf),
914 " (reason: %s)",
915 shortenstring(exitstat(q->q_rstatus),
916 MAXSHORTSTR));
917 if (!putline(buf, mci))
918 goto writeerr;
919 }
920 if (q->q_alias != NULL)
921 {
922 (void) sm_snprintf(buf, sizeof(buf),
923 " (expanded from: %s)",
924 shortenstring(q->q_alias->q_paddr,
925 MAXSHORTSTR));
926 if (!putline(buf, mci))
927 goto writeerr;
928 }
929 }
930 if (!printheader && !putline("", mci))
931 goto writeerr;
932
933 /* transient non-fatal errors */
934 printheader = true;
935 for (q = e->e_parent->e_sendqueue; q != NULL; q = q->q_next)
936 {
937 if (QS_IS_BADADDR(q->q_state) ||
938 !bitset(QPRIMARY, q->q_flags) ||
939 !bitset(QBYNDELAY, q->q_flags) ||
940 !bitset(QDELAYED, q->q_flags))
941 continue;
942
943 if (printheader)
944 {
945 if (!putline(" ----- The following addresses had transient non-fatal errors -----",
946 mci))
947 goto writeerr;
948 printheader = false;
949 }
950
951 (void) sm_strlcpy(buf, shortenstring(q->q_paddr, MAXSHORTSTR),
952 sizeof(buf));
953 if (!putline(buf, mci))
954 goto writeerr;
955 if (q->q_alias != NULL)
956 {
957 (void) sm_snprintf(buf, sizeof(buf),
958 " (expanded from: %s)",
959 shortenstring(q->q_alias->q_paddr,
960 MAXSHORTSTR));
961 if (!putline(buf, mci))
962 goto writeerr;
963 }
964 }
965 if (!printheader && !putline("", mci))
966 goto writeerr;
967
968 /* successful delivery notifications */
969 printheader = true;
970 for (q = e->e_parent->e_sendqueue; q != NULL; q = q->q_next)
971 {
972 if (QS_IS_BADADDR(q->q_state) ||
973 !bitset(QPRIMARY, q->q_flags) ||
974 bitset(QBYNDELAY, q->q_flags) ||
975 bitset(QDELAYED, q->q_flags))
976 continue;
977 else if (bitset(QBYNRELAY, q->q_flags))
978 p = "Deliver-By notify: relayed";
979 else if (bitset(QBYTRACE, q->q_flags))
980 p = "Deliver-By trace: relayed";
981 else if (!bitset(QPINGONSUCCESS, q->q_flags))
982 continue;
983 else if (bitset(QRELAYED, q->q_flags))
984 p = "relayed to non-DSN-aware mailer";
985 else if (bitset(QDELIVERED, q->q_flags))
986 {
987 if (bitset(QEXPANDED, q->q_flags))
988 p = "successfully delivered to mailing list";
989 else
990 p = "successfully delivered to mailbox";
991 }
992 else if (bitset(QEXPANDED, q->q_flags))
993 p = "expanded by alias";
994 else
995 continue;
996
997 if (printheader)
998 {
999 if (!putline(" ----- The following addresses had successful delivery notifications -----",
1000 mci))
1001 goto writeerr;
1002 printheader = false;
1003 }
1004
1005 (void) sm_snprintf(buf, sizeof(buf), "%s (%s)",
1006 shortenstring(q->q_paddr, MAXSHORTSTR), p);
1007 if (!putline(buf, mci))
1008 goto writeerr;
1009 if (q->q_alias != NULL)
1010 {
1011 (void) sm_snprintf(buf, sizeof(buf),
1012 " (expanded from: %s)",
1013 shortenstring(q->q_alias->q_paddr,
1014 MAXSHORTSTR));
1015 if (!putline(buf, mci))
1016 goto writeerr;
1017 }
1018 }
1019 if (!printheader && !putline("", mci))
1020 goto writeerr;
1021
1022 /*
1023 ** Output transcript of errors
1024 */
1025
1026 (void) sm_io_flush(smioout, SM_TIME_DEFAULT);
1027 if (e->e_parent->e_xfp == NULL)
1028 {
1029 if (!putline(" ----- Transcript of session is unavailable -----\n",
1030 mci))
1031 goto writeerr;
1032 }
1033 else
1034 {
1035 printheader = true;
1036 (void) bfrewind(e->e_parent->e_xfp);
1037 if (e->e_xfp != NULL)
1038 (void) sm_io_flush(e->e_xfp, SM_TIME_DEFAULT);
1039 while (sm_io_fgets(e->e_parent->e_xfp, SM_TIME_DEFAULT, buf,
1040 sizeof(buf)) != NULL)
1041 {
1042 if (printheader && !putline(" ----- Transcript of session follows -----\n",
1043 mci))
1044 goto writeerr;
1045 printheader = false;
1046 if (!putline(buf, mci))
1047 goto writeerr;
1048 }
1049 }
1050 errno = 0;
1051
1052 #if DSN
1053 /*
1054 ** Output machine-readable version.
1055 */
1056
1057 if (e->e_msgboundary != NULL)
1058 {
1059 (void) sm_strlcpyn(buf, sizeof(buf), 2, "--", e->e_msgboundary);
1060 if (!putline("", mci) ||
1061 !putline(buf, mci) ||
1062 !putline("Content-Type: message/delivery-status", mci) ||
1063 !putline("", mci))
1064 goto writeerr;
1065
1066 /*
1067 ** Output per-message information.
1068 */
1069
1070 /* original envelope id from MAIL FROM: line */
1071 if (e->e_parent->e_envid != NULL)
1072 {
1073 (void) sm_snprintf(buf, sizeof(buf),
1074 "Original-Envelope-Id: %.800s",
1075 xuntextify(e->e_parent->e_envid));
1076 if (!putline(buf, mci))
1077 goto writeerr;
1078 }
1079
1080 /* Reporting-MTA: is us (required) */
1081 (void) sm_snprintf(buf, sizeof(buf),
1082 "Reporting-MTA: dns; %.800s", MyHostName);
1083 if (!putline(buf, mci))
1084 goto writeerr;
1085
1086 /* DSN-Gateway: not relevant since we are not translating */
1087
1088 /* Received-From-MTA: shows where we got this message from */
1089 if (RealHostName != NULL)
1090 {
1091 /* XXX use $s for type? */
1092 if (e->e_parent->e_from.q_mailer == NULL ||
1093 (p = e->e_parent->e_from.q_mailer->m_mtatype) == NULL)
1094 p = "dns";
1095 (void) sm_snprintf(buf, sizeof(buf),
1096 "Received-From-MTA: %s; %.800s",
1097 p, RealHostName);
1098 if (!putline(buf, mci))
1099 goto writeerr;
1100 }
1101
1102 /* Arrival-Date: -- when it arrived here */
1103 (void) sm_strlcpyn(buf, sizeof(buf), 2, "Arrival-Date: ",
1104 arpadate(ctime(&e->e_parent->e_ctime)));
1105 if (!putline(buf, mci))
1106 goto writeerr;
1107
1108 /* Deliver-By-Date: -- when it should have been delivered */
1109 if (IS_DLVR_BY(e->e_parent))
1110 {
1111 time_t dbyd;
1112
1113 dbyd = e->e_parent->e_ctime + e->e_parent->e_deliver_by;
1114 (void) sm_strlcpyn(buf, sizeof(buf), 2,
1115 "Deliver-By-Date: ",
1116 arpadate(ctime(&dbyd)));
1117 if (!putline(buf, mci))
1118 goto writeerr;
1119 }
1120
1121 /*
1122 ** Output per-address information.
1123 */
1124
1125 for (q = e->e_parent->e_sendqueue; q != NULL; q = q->q_next)
1126 {
1127 char *action;
1128
1129 if (QS_IS_BADADDR(q->q_state))
1130 {
1131 /* RFC 1891, 6.2.6 (b) */
1132 if (bitset(QHASNOTIFY, q->q_flags) &&
1133 !bitset(QPINGONFAILURE, q->q_flags))
1134 continue;
1135 action = "failed";
1136 }
1137 else if (!bitset(QPRIMARY, q->q_flags))
1138 continue;
1139 else if (bitset(QDELIVERED, q->q_flags))
1140 {
1141 if (bitset(QEXPANDED, q->q_flags))
1142 action = "delivered (to mailing list)";
1143 else
1144 action = "delivered (to mailbox)";
1145 }
1146 else if (bitset(QRELAYED, q->q_flags))
1147 action = "relayed (to non-DSN-aware mailer)";
1148 else if (bitset(QEXPANDED, q->q_flags))
1149 action = "expanded (to multi-recipient alias)";
1150 else if (bitset(QDELAYED, q->q_flags))
1151 action = "delayed";
1152 else if (bitset(QBYTRACE, q->q_flags))
1153 action = "relayed (Deliver-By trace mode)";
1154 else if (bitset(QBYNDELAY, q->q_flags))
1155 action = "delayed (Deliver-By notify mode)";
1156 else if (bitset(QBYNRELAY, q->q_flags))
1157 action = "relayed (Deliver-By notify mode)";
1158 else
1159 continue;
1160
1161 if (!putline("", mci))
1162 goto writeerr;
1163
1164 /* Original-Recipient: -- passed from on high */
1165 if (q->q_orcpt != NULL)
1166 {
1167 (void) sm_snprintf(buf, sizeof(buf),
1168 "Original-Recipient: %.800s",
1169 q->q_orcpt);
1170 if (!putline(buf, mci))
1171 goto writeerr;
1172 }
1173
1174 /* Figure out actual recipient */
1175 actual[0] = '\0';
1176 if (q->q_user[0] != '\0')
1177 {
1178 if (q->q_mailer != NULL &&
1179 q->q_mailer->m_addrtype != NULL)
1180 p = q->q_mailer->m_addrtype;
1181 else
1182 p = "rfc822";
1183
1184 if (sm_strcasecmp(p, "rfc822") == 0 &&
1185 strchr(q->q_user, '@') == NULL)
1186 {
1187 (void) sm_snprintf(actual,
1188 sizeof(actual),
1189 "%s; %.700s@%.100s",
1190 p, q->q_user,
1191 MyHostName);
1192 }
1193 else
1194 {
1195 (void) sm_snprintf(actual,
1196 sizeof(actual),
1197 "%s; %.800s",
1198 p, q->q_user);
1199 }
1200 }
1201
1202 /* Final-Recipient: -- the name from the RCPT command */
1203 if (q->q_finalrcpt == NULL)
1204 {
1205 /* should never happen */
1206 sm_syslog(LOG_ERR, e->e_id,
1207 "returntosender: q_finalrcpt is NULL");
1208
1209 /* try to fall back to the actual recipient */
1210 if (actual[0] != '\0')
1211 q->q_finalrcpt = sm_rpool_strdup_x(e->e_rpool,
1212 actual);
1213 }
1214
1215 if (q->q_finalrcpt != NULL)
1216 {
1217 (void) sm_snprintf(buf, sizeof(buf),
1218 "Final-Recipient: %s",
1219 q->q_finalrcpt);
1220 if (!putline(buf, mci))
1221 goto writeerr;
1222 }
1223
1224 /* X-Actual-Recipient: -- the real problem address */
1225 if (actual[0] != '\0' &&
1226 q->q_finalrcpt != NULL &&
1227 !bitset(PRIV_NOACTUALRECIPIENT, PrivacyFlags) &&
1228 strcmp(actual, q->q_finalrcpt) != 0)
1229 {
1230 (void) sm_snprintf(buf, sizeof(buf),
1231 "X-Actual-Recipient: %s",
1232 actual);
1233 if (!putline(buf, mci))
1234 goto writeerr;
1235 }
1236
1237 /* Action: -- what happened? */
1238 (void) sm_strlcpyn(buf, sizeof(buf), 2, "Action: ",
1239 action);
1240 if (!putline(buf, mci))
1241 goto writeerr;
1242
1243 /* Status: -- what _really_ happened? */
1244 if (q->q_status != NULL)
1245 p = q->q_status;
1246 else if (QS_IS_BADADDR(q->q_state))
1247 p = "5.0.0";
1248 else if (QS_IS_QUEUEUP(q->q_state))
1249 p = "4.0.0";
1250 else
1251 p = "2.0.0";
1252 (void) sm_strlcpyn(buf, sizeof(buf), 2, "Status: ", p);
1253 if (!putline(buf, mci))
1254 goto writeerr;
1255
1256 /* Remote-MTA: -- who was I talking to? */
1257 if (q->q_statmta != NULL)
1258 {
1259 if (q->q_mailer == NULL ||
1260 (p = q->q_mailer->m_mtatype) == NULL)
1261 p = "dns";
1262 (void) sm_snprintf(buf, sizeof(buf),
1263 "Remote-MTA: %s; %.800s",
1264 p, q->q_statmta);
1265 p = &buf[strlen(buf) - 1];
1266 if (*p == '.')
1267 *p = '\0';
1268 if (!putline(buf, mci))
1269 goto writeerr;
1270 }
1271
1272 /* Diagnostic-Code: -- actual result from other end */
1273 if (q->q_rstatus != NULL)
1274 {
1275 if (q->q_mailer == NULL ||
1276 (p = q->q_mailer->m_diagtype) == NULL)
1277 p = "smtp";
1278 (void) sm_snprintf(buf, sizeof(buf),
1279 "Diagnostic-Code: %s; %.800s",
1280 p, q->q_rstatus);
1281 if (!putline(buf, mci))
1282 goto writeerr;
1283 }
1284
1285 /* Last-Attempt-Date: -- fine granularity */
1286 if (q->q_statdate == (time_t) 0L)
1287 q->q_statdate = curtime();
1288 (void) sm_strlcpyn(buf, sizeof(buf), 2,
1289 "Last-Attempt-Date: ",
1290 arpadate(ctime(&q->q_statdate)));
1291 if (!putline(buf, mci))
1292 goto writeerr;
1293
1294 /* Will-Retry-Until: -- for delayed messages only */
1295 if (QS_IS_QUEUEUP(q->q_state))
1296 {
1297 time_t xdate;
1298
1299 xdate = e->e_parent->e_ctime +
1300 TimeOuts.to_q_return[e->e_parent->e_timeoutclass];
1301 (void) sm_strlcpyn(buf, sizeof(buf), 2,
1302 "Will-Retry-Until: ",
1303 arpadate(ctime(&xdate)));
1304 if (!putline(buf, mci))
1305 goto writeerr;
1306 }
1307 }
1308 }
1309 #endif /* DSN */
1310
1311 /*
1312 ** Output text of original message
1313 */
1314
1315 if (!putline("", mci))
1316 goto writeerr;
1317 if (bitset(EF_HAS_DF, e->e_parent->e_flags))
1318 {
1319 sendbody = !bitset(EF_NO_BODY_RETN, e->e_parent->e_flags) &&
1320 !bitset(EF_NO_BODY_RETN, e->e_flags);
1321
1322 if (e->e_msgboundary == NULL)
1323 {
1324 if (!putline(
1325 sendbody
1326 ? " ----- Original message follows -----\n"
1327 : " ----- Message header follows -----\n",
1328 mci))
1329 {
1330 goto writeerr;
1331 }
1332 }
1333 else
1334 {
1335 (void) sm_strlcpyn(buf, sizeof(buf), 2, "--",
1336 e->e_msgboundary);
1337
1338 if (!putline(buf, mci))
1339 goto writeerr;
1340 (void) sm_strlcpyn(buf, sizeof(buf), 2, "Content-Type: ",
1341 sendbody ? "message/rfc822"
1342 : "text/rfc822-headers");
1343 if (!putline(buf, mci))
1344 goto writeerr;
1345
1346 p = hvalue("Content-Transfer-Encoding",
1347 e->e_parent->e_header);
1348 if (p != NULL && sm_strcasecmp(p, "binary") != 0)
1349 p = NULL;
1350 if (p == NULL &&
1351 bitset(EF_HAS8BIT, e->e_parent->e_flags))
1352 p = "8bit";
1353 if (p != NULL)
1354 {
1355 (void) sm_snprintf(buf, sizeof(buf),
1356 "Content-Transfer-Encoding: %s",
1357 p);
1358 if (!putline(buf, mci))
1359 goto writeerr;
1360 }
1361 }
1362 if (!putline("", mci))
1363 goto writeerr;
1364 save_errno = errno;
1365 if (!putheader(mci, e->e_parent->e_header, e->e_parent,
1366 M87F_OUTER))
1367 goto writeerr;
1368 errno = save_errno;
1369 if (sendbody)
1370 {
1371 if (!putbody(mci, e->e_parent, e->e_msgboundary))
1372 goto writeerr;
1373 }
1374 else if (e->e_msgboundary == NULL)
1375 {
1376 if (!putline("", mci) ||
1377 !putline(" ----- Message body suppressed -----",
1378 mci))
1379 {
1380 goto writeerr;
1381 }
1382 }
1383 }
1384 else if (e->e_msgboundary == NULL)
1385 {
1386 if (!putline(" ----- No message was collected -----\n", mci))
1387 goto writeerr;
1388 }
1389
1390 if (e->e_msgboundary != NULL)
1391 {
1392 (void) sm_strlcpyn(buf, sizeof(buf), 3, "--", e->e_msgboundary,
1393 "--");
1394 if (!putline("", mci) || !putline(buf, mci))
1395 goto writeerr;
1396 }
1397 if (!putline("", mci) ||
1398 sm_io_flush(mci->mci_out, SM_TIME_DEFAULT) == SM_IO_EOF)
1399 goto writeerr;
1400
1401 /*
1402 ** Cleanup and exit
1403 */
1404
1405 if (errno != 0)
1406 {
1407 writeerr:
1408 syserr("errbody: I/O error");
1409 return false;
1410 }
1411 return true;
1412 }
1413
1414 /*
1415 ** SMTPTODSN -- convert SMTP to DSN status code
1416 **
1417 ** Parameters:
1418 ** smtpstat -- the smtp status code (e.g., 550).
1419 **
1420 ** Returns:
1421 ** The DSN version of the status code.
1422 **
1423 ** Storage Management:
1424 ** smtptodsn() returns a pointer to a character string literal,
1425 ** which will remain valid forever, and thus does not need to
1426 ** be copied. Current code relies on this property.
1427 */
1428
1429 char *
smtptodsn(smtpstat)1430 smtptodsn(smtpstat)
1431 int smtpstat;
1432 {
1433 if (smtpstat < 0)
1434 return "4.4.2";
1435
1436 switch (smtpstat)
1437 {
1438 case 450: /* Req mail action not taken: mailbox unavailable */
1439 return "4.2.0";
1440
1441 case 451: /* Req action aborted: local error in processing */
1442 return "4.3.0";
1443
1444 case 452: /* Req action not taken: insufficient sys storage */
1445 return "4.3.1";
1446
1447 case 500: /* Syntax error, command unrecognized */
1448 return "5.5.2";
1449
1450 case 501: /* Syntax error in parameters or arguments */
1451 return "5.5.4";
1452
1453 case 502: /* Command not implemented */
1454 return "5.5.1";
1455
1456 case 503: /* Bad sequence of commands */
1457 return "5.5.1";
1458
1459 case 504: /* Command parameter not implemented */
1460 return "5.5.4";
1461
1462 case 550: /* Req mail action not taken: mailbox unavailable */
1463 return "5.2.0";
1464
1465 case 551: /* User not local; please try <...> */
1466 return "5.1.6";
1467
1468 case 552: /* Req mail action aborted: exceeded storage alloc */
1469 return "5.2.2";
1470
1471 case 553: /* Req action not taken: mailbox name not allowed */
1472 return "5.1.0";
1473
1474 case 554: /* Transaction failed */
1475 return "5.0.0";
1476 }
1477
1478 if (REPLYTYPE(smtpstat) == 2)
1479 return "2.0.0";
1480 if (REPLYTYPE(smtpstat) == 4)
1481 return "4.0.0";
1482 return "5.0.0";
1483 }
1484 /*
1485 ** XTEXTIFY -- take regular text and turn it into DSN-style xtext
1486 **
1487 ** Parameters:
1488 ** t -- the text to convert.
1489 ** taboo -- additional characters that must be encoded.
1490 **
1491 ** Returns:
1492 ** The xtext-ified version of the same string.
1493 */
1494
1495 char *
xtextify(t,taboo)1496 xtextify(t, taboo)
1497 register char *t;
1498 char *taboo;
1499 {
1500 register char *p;
1501 int l;
1502 int nbogus;
1503 static char *bp = NULL;
1504 static int bplen = 0;
1505
1506 if (taboo == NULL)
1507 taboo = "";
1508
1509 /* figure out how long this xtext will have to be */
1510 nbogus = l = 0;
1511 for (p = t; *p != '\0'; p++)
1512 {
1513 register int c = (*p & 0xff);
1514
1515 /* ASCII dependence here -- this is the way the spec words it */
1516 if (c < '!' || c > '~' || c == '+' || c == '\\' || c == '(' ||
1517 strchr(taboo, c) != NULL)
1518 nbogus++;
1519 l++;
1520 }
1521 if (nbogus < 0)
1522 {
1523 /* since nbogus is ssize_t and wrapped, 2 * size_t would wrap */
1524 syserr("!xtextify string too long");
1525 }
1526 if (nbogus == 0)
1527 return t;
1528 l += nbogus * 2 + 1;
1529
1530 /* now allocate space if necessary for the new string */
1531 if (l > bplen)
1532 {
1533 if (bp != NULL)
1534 sm_free(bp); /* XXX */
1535 bp = sm_pmalloc_x(l);
1536 bplen = l;
1537 }
1538
1539 /* ok, copy the text with byte expansion */
1540 for (p = bp; *t != '\0'; )
1541 {
1542 register int c = (*t++ & 0xff);
1543
1544 /* ASCII dependence here -- this is the way the spec words it */
1545 if (c < '!' || c > '~' || c == '+' || c == '\\' || c == '(' ||
1546 strchr(taboo, c) != NULL)
1547 {
1548 *p++ = '+';
1549 *p++ = "0123456789ABCDEF"[c >> 4];
1550 *p++ = "0123456789ABCDEF"[c & 0xf];
1551 }
1552 else
1553 *p++ = c;
1554 }
1555 *p = '\0';
1556 return bp;
1557 }
1558 /*
1559 ** XUNTEXTIFY -- take xtext and turn it into plain text
1560 **
1561 ** Parameters:
1562 ** t -- the xtextified text.
1563 **
1564 ** Returns:
1565 ** The decoded text. No attempt is made to deal with
1566 ** null strings in the resulting text.
1567 */
1568
1569 char *
xuntextify(t)1570 xuntextify(t)
1571 register char *t;
1572 {
1573 register char *p;
1574 int l;
1575 static char *bp = NULL;
1576 static int bplen = 0;
1577
1578 /* heuristic -- if no plus sign, just return the input */
1579 if (strchr(t, '+') == NULL)
1580 return t;
1581
1582 /* xtext is always longer than decoded text */
1583 l = strlen(t);
1584 if (l > bplen)
1585 {
1586 if (bp != NULL)
1587 sm_free(bp); /* XXX */
1588 bp = xalloc(l);
1589 bplen = l;
1590 }
1591
1592 /* ok, copy the text with byte compression */
1593 for (p = bp; *t != '\0'; t++)
1594 {
1595 register int c = *t & 0xff;
1596
1597 if (c != '+')
1598 {
1599 *p++ = c;
1600 continue;
1601 }
1602
1603 c = *++t & 0xff;
1604 if (!isascii(c) || !isxdigit(c))
1605 {
1606 /* error -- first digit is not hex */
1607 usrerr("bogus xtext: +%c", c);
1608 t--;
1609 continue;
1610 }
1611 if (isdigit(c))
1612 c -= '0';
1613 else if (isupper(c))
1614 c -= 'A' - 10;
1615 else
1616 c -= 'a' - 10;
1617 *p = c << 4;
1618
1619 c = *++t & 0xff;
1620 if (!isascii(c) || !isxdigit(c))
1621 {
1622 /* error -- second digit is not hex */
1623 usrerr("bogus xtext: +%x%c", *p >> 4, c);
1624 t--;
1625 continue;
1626 }
1627 if (isdigit(c))
1628 c -= '0';
1629 else if (isupper(c))
1630 c -= 'A' - 10;
1631 else
1632 c -= 'a' - 10;
1633 *p++ |= c;
1634 }
1635 *p = '\0';
1636 return bp;
1637 }
1638 /*
1639 ** XTEXTOK -- check if a string is legal xtext
1640 **
1641 ** Xtext is used in Delivery Status Notifications. The spec was
1642 ** taken from RFC 1891, ``SMTP Service Extension for Delivery
1643 ** Status Notifications''.
1644 **
1645 ** Parameters:
1646 ** s -- the string to check.
1647 **
1648 ** Returns:
1649 ** true -- if 's' is legal xtext.
1650 ** false -- if it has any illegal characters in it.
1651 */
1652
1653 bool
xtextok(s)1654 xtextok(s)
1655 char *s;
1656 {
1657 int c;
1658
1659 while ((c = *s++) != '\0')
1660 {
1661 if (c == '+')
1662 {
1663 c = *s++;
1664 if (!isascii(c) || !isxdigit(c))
1665 return false;
1666 c = *s++;
1667 if (!isascii(c) || !isxdigit(c))
1668 return false;
1669 }
1670 else if (c < '!' || c > '~' || c == '=')
1671 return false;
1672 }
1673 return true;
1674 }
1675 /*
1676 ** PRUNEROUTE -- prune an RFC-822 source route
1677 **
1678 ** Trims down a source route to the last internet-registered hop.
1679 ** This is encouraged by RFC 1123 section 5.3.3.
1680 **
1681 ** Parameters:
1682 ** addr -- the address
1683 **
1684 ** Returns:
1685 ** true -- address was modified
1686 ** false -- address could not be pruned
1687 **
1688 ** Side Effects:
1689 ** modifies addr in-place
1690 */
1691
1692 static bool
pruneroute(addr)1693 pruneroute(addr)
1694 char *addr;
1695 {
1696 #if NAMED_BIND
1697 char *start, *at, *comma;
1698 char c;
1699 int braclev;
1700 int rcode;
1701 int i;
1702 char hostbuf[BUFSIZ];
1703 char *mxhosts[MAXMXHOSTS + 1];
1704
1705 /* check to see if this is really a route-addr */
1706 if (*addr != '<' || addr[1] != '@' || addr[strlen(addr) - 1] != '>')
1707 return false;
1708
1709 /*
1710 ** Can't simply find the first ':' is the address might be in the
1711 ** form: "<@[IPv6:::1]:user@host>" and the first ':' in inside
1712 ** the IPv6 address.
1713 */
1714
1715 start = addr;
1716 braclev = 0;
1717 while (*start != '\0')
1718 {
1719 if (*start == ':' && braclev <= 0)
1720 break;
1721 else if (*start == '[')
1722 braclev++;
1723 else if (*start == ']' && braclev > 0)
1724 braclev--;
1725 start++;
1726 }
1727 if (braclev > 0 || *start != ':')
1728 return false;
1729
1730 at = strrchr(addr, '@');
1731 if (at == NULL || at < start)
1732 return false;
1733
1734 /* slice off the angle brackets */
1735 i = strlen(at + 1);
1736 if (i >= sizeof(hostbuf))
1737 return false;
1738 (void) sm_strlcpy(hostbuf, at + 1, sizeof(hostbuf));
1739 hostbuf[i - 1] = '\0';
1740
1741 while (start != NULL)
1742 {
1743 if (getmxrr(hostbuf, mxhosts, NULL, false,
1744 &rcode, true, NULL) > 0)
1745 {
1746 (void) sm_strlcpy(addr + 1, start + 1,
1747 strlen(addr) - 1);
1748 return true;
1749 }
1750 c = *start;
1751 *start = '\0';
1752 comma = strrchr(addr, ',');
1753 if (comma != NULL && comma[1] == '@' &&
1754 strlen(comma + 2) < sizeof(hostbuf))
1755 (void) sm_strlcpy(hostbuf, comma + 2, sizeof(hostbuf));
1756 else
1757 comma = NULL;
1758 *start = c;
1759 start = comma;
1760 }
1761 #endif /* NAMED_BIND */
1762 return false;
1763 }
1764