xref: /freebsd/contrib/sendmail/src/milter.c (revision 6b7c9af44b73355e01755ac7a0fb8ffc608b25ab)
1 /*
2  * Copyright (c) 1999-2002 Sendmail, Inc. and its suppliers.
3  *	All rights reserved.
4  *
5  * By using this file, you agree to the terms and conditions set
6  * forth in the LICENSE file which can be found at the top level of
7  * the sendmail distribution.
8  *
9  */
10 
11 #include <sendmail.h>
12 
13 SM_RCSID("@(#)$Id: milter.c,v 8.194 2002/03/05 00:23:47 gshapiro Exp $")
14 
15 #if MILTER
16 # include <libmilter/mfapi.h>
17 # include <libmilter/mfdef.h>
18 
19 # include <errno.h>
20 # include <sys/time.h>
21 
22 # if NETINET || NETINET6
23 #  include <arpa/inet.h>
24 # endif /* NETINET || NETINET6 */
25 
26 # include <sm/fdset.h>
27 
28 static void	milter_connect_timeout __P((void));
29 static void	milter_error __P((struct milter *, ENVELOPE *));
30 static int	milter_open __P((struct milter *, bool, ENVELOPE *));
31 static void	milter_parse_timeouts __P((char *, struct milter *));
32 
33 static char *MilterConnectMacros[MAXFILTERMACROS + 1];
34 static char *MilterHeloMacros[MAXFILTERMACROS + 1];
35 static char *MilterEnvFromMacros[MAXFILTERMACROS + 1];
36 static char *MilterEnvRcptMacros[MAXFILTERMACROS + 1];
37 
38 # define MILTER_CHECK_DONE_MSG() \
39 	if (*state == SMFIR_REPLYCODE || \
40 	    *state == SMFIR_REJECT || \
41 	    *state == SMFIR_DISCARD || \
42 	    *state == SMFIR_TEMPFAIL) \
43 	{ \
44 		/* Abort the filters to let them know we are done with msg */ \
45 		milter_abort(e); \
46 	}
47 
48 # define MILTER_CHECK_ERROR(action) \
49 	if (bitnset(SMF_TEMPFAIL, m->mf_flags)) \
50 		*state = SMFIR_TEMPFAIL; \
51 	else if (bitnset(SMF_REJECT, m->mf_flags)) \
52 		*state = SMFIR_REJECT; \
53 	else \
54 		action;
55 
56 # define MILTER_CHECK_REPLYCODE(default) \
57 	if (response == NULL || \
58 	    strlen(response) + 1 != (size_t) rlen || \
59 	    rlen < 3 || \
60 	    (response[0] != '4' && response[0] != '5') || \
61 	    !isascii(response[1]) || !isdigit(response[1]) || \
62 	    !isascii(response[2]) || !isdigit(response[2])) \
63 	{ \
64 		if (response != NULL) \
65 			sm_free(response); /* XXX */ \
66 		response = newstr(default); \
67 	} \
68 	else \
69 	{ \
70 		char *ptr = response; \
71  \
72 		/* Check for unprotected %'s in the string */ \
73 		while (*ptr != '\0') \
74 		{ \
75 			if (*ptr == '%' && *++ptr != '%') \
76 			{ \
77 				sm_free(response); /* XXX */ \
78 				response = newstr(default); \
79 				break; \
80 			} \
81 			ptr++; \
82 		} \
83 	}
84 
85 # define MILTER_DF_ERROR(msg) \
86 { \
87 	int save_errno = errno; \
88  \
89 	if (tTd(64, 5)) \
90 	{ \
91 		sm_dprintf(msg, dfname, sm_errstring(save_errno)); \
92 		sm_dprintf("\n"); \
93 	} \
94 	if (MilterLogLevel > 0) \
95 		sm_syslog(LOG_ERR, e->e_id, msg, dfname, sm_errstring(save_errno)); \
96 	if (SuperSafe == SAFE_REALLY) \
97 	{ \
98 		if (e->e_dfp != NULL) \
99 		{ \
100 			(void) sm_io_close(e->e_dfp, SM_TIME_DEFAULT); \
101 			e->e_dfp = NULL; \
102 		} \
103 		e->e_flags &= ~EF_HAS_DF; \
104 	} \
105 	errno = save_errno; \
106 }
107 
108 /*
109 **  MILTER_TIMEOUT -- make sure socket is ready in time
110 **
111 **	Parameters:
112 **		routine -- routine name for debug/logging
113 **		secs -- number of seconds in timeout
114 **		write -- waiting to read or write?
115 **		started -- whether this is part of a previous sequence
116 **
117 **	Assumes 'm' is a milter structure for the current socket.
118 */
119 
120 # define MILTER_TIMEOUT(routine, secs, write, started) \
121 { \
122 	int ret; \
123 	int save_errno; \
124 	fd_set fds; \
125 	struct timeval tv; \
126  \
127 	if (SM_FD_SETSIZE > 0 && m->mf_sock >= SM_FD_SETSIZE) \
128 	{ \
129 		if (tTd(64, 5)) \
130 			sm_dprintf("milter_%s(%s): socket %d is larger than FD_SETSIZE %d\n", \
131 				   (routine), m->mf_name, m->mf_sock, \
132 				   SM_FD_SETSIZE); \
133 		if (MilterLogLevel > 0) \
134 			sm_syslog(LOG_ERR, e->e_id, \
135 				  "Milter (%s): socket(%s) %d is larger than FD_SETSIZE %d", \
136 				  m->mf_name, (routine), m->mf_sock, \
137 				  SM_FD_SETSIZE); \
138 		milter_error(m, e); \
139 		return NULL; \
140 	} \
141  \
142 	do \
143 	{ \
144 		FD_ZERO(&fds); \
145 		SM_FD_SET(m->mf_sock, &fds); \
146 		tv.tv_sec = (secs); \
147 		tv.tv_usec = 0; \
148 		ret = select(m->mf_sock + 1, \
149 			     (write) ? NULL : &fds, \
150 			     (write) ? &fds : NULL, \
151 			     NULL, &tv); \
152 	} while (ret < 0 && errno == EINTR); \
153  \
154 	switch (ret) \
155 	{ \
156 	  case 0: \
157 		if (tTd(64, 5)) \
158 			sm_dprintf("milter_%s(%s): timeout\n", (routine), \
159 				   m->mf_name); \
160 		if (MilterLogLevel > 0) \
161 			sm_syslog(LOG_ERR, e->e_id, \
162 				  "Milter (%s): %s %s %s %s", \
163 				  m->mf_name, "timeout", \
164 				  started ? "during" : "before", \
165 				  "data", (routine)); \
166 		milter_error(m, e); \
167 		return NULL; \
168  \
169 	  case -1: \
170 		save_errno = errno; \
171 		if (tTd(64, 5)) \
172 			sm_dprintf("milter_%s(%s): select: %s\n", (routine), \
173 				   m->mf_name, sm_errstring(save_errno)); \
174 		if (MilterLogLevel > 0) \
175 		{ \
176 			sm_syslog(LOG_ERR, e->e_id, \
177 				  "Milter (%s): select(%s): %s", \
178 				  m->mf_name, (routine), \
179 				  sm_errstring(save_errno)); \
180 		} \
181 		milter_error(m, e); \
182 		return NULL; \
183  \
184 	  default: \
185 		if (SM_FD_ISSET(m->mf_sock, &fds)) \
186 			break; \
187 		if (tTd(64, 5)) \
188 			sm_dprintf("milter_%s(%s): socket not ready\n", \
189 				(routine), m->mf_name); \
190 		if (MilterLogLevel > 0) \
191 		{ \
192 			sm_syslog(LOG_ERR, e->e_id, \
193 				  "Milter (%s): socket(%s) not ready", \
194 				  m->mf_name, (routine)); \
195 		} \
196 		milter_error(m, e); \
197 		return NULL; \
198 	} \
199 }
200 
201 /*
202 **  Low level functions
203 */
204 
205 /*
206 **  MILTER_READ -- read from a remote milter filter
207 **
208 **	Parameters:
209 **		m -- milter to read from.
210 **		cmd -- return param for command read.
211 **		rlen -- return length of response string.
212 **		to -- timeout in seconds.
213 **		e -- current envelope.
214 **
215 **	Returns:
216 **		response string (may be NULL)
217 */
218 
219 static char *
220 milter_sysread(m, buf, sz, to, e)
221 	struct milter *m;
222 	char *buf;
223 	ssize_t sz;
224 	time_t to;
225 	ENVELOPE *e;
226 {
227 	time_t readstart = 0;
228 	ssize_t len, curl;
229 	bool started = false;
230 
231 	curl = 0;
232 
233 	if (to > 0)
234 		readstart = curtime();
235 
236 	for (;;)
237 	{
238 		if (to > 0)
239 		{
240 			time_t now;
241 
242 			now = curtime();
243 			if (now - readstart >= to)
244 			{
245 				if (tTd(64, 5))
246 					sm_dprintf("milter_read (%s): %s %s %s",
247 						  m->mf_name, "timeout",
248 						  started ? "during" : "before",
249 						  "data read");
250 				if (MilterLogLevel > 0)
251 					sm_syslog(LOG_ERR, e->e_id,
252 						  "Milter (%s): %s %s %s",
253 						  m->mf_name, "timeout",
254 						  started ? "during" : "before",
255 						  "data read");
256 				milter_error(m, e);
257 				return NULL;
258 			}
259 			to -= now - readstart;
260 			readstart = now;
261 			MILTER_TIMEOUT("read", to, false, started);
262 		}
263 
264 		len = read(m->mf_sock, buf + curl, sz - curl);
265 
266 		if (len < 0)
267 		{
268 			int save_errno = errno;
269 
270 			if (tTd(64, 5))
271 				sm_dprintf("milter_read(%s): read returned %ld: %s\n",
272 					m->mf_name, (long) len,
273 					sm_errstring(save_errno));
274 			if (MilterLogLevel > 0)
275 				sm_syslog(LOG_ERR, e->e_id,
276 					  "Milter (%s): read returned %ld: %s",
277 					  m->mf_name, (long) len,
278 					  sm_errstring(save_errno));
279 			milter_error(m, e);
280 			return NULL;
281 		}
282 
283 		started = true;
284 		curl += len;
285 		if (len == 0 || curl >= sz)
286 			break;
287 
288 	}
289 
290 	if (curl != sz)
291 	{
292 		if (tTd(64, 5))
293 			sm_dprintf("milter_read(%s): cmd read returned %ld, expecting %ld\n",
294 				m->mf_name, (long) curl, (long) sz);
295 		if (MilterLogLevel > 0)
296 			sm_syslog(LOG_ERR, e->e_id,
297 				  "milter_read(%s): cmd read returned %ld, expecting %ld",
298 				  m->mf_name, (long) curl, (long) sz);
299 		milter_error(m, e);
300 		return NULL;
301 	}
302 	return buf;
303 }
304 
305 static char *
306 milter_read(m, cmd, rlen, to, e)
307 	struct milter *m;
308 	char *cmd;
309 	ssize_t *rlen;
310 	time_t to;
311 	ENVELOPE *e;
312 {
313 	time_t readstart = 0;
314 	ssize_t expl;
315 	mi_int32 i;
316 	char *buf;
317 	char data[MILTER_LEN_BYTES + 1];
318 
319 	*rlen = 0;
320 	*cmd = '\0';
321 
322 	if (to > 0)
323 		readstart = curtime();
324 
325 	if (milter_sysread(m, data, sizeof data, to, e) == NULL)
326 		return NULL;
327 
328 	/* reset timeout */
329 	if (to > 0)
330 	{
331 		time_t now;
332 
333 		now = curtime();
334 		if (now - readstart >= to)
335 		{
336 			if (tTd(64, 5))
337 				sm_dprintf("milter_read(%s): timeout before data read\n",
338 					m->mf_name);
339 			if (MilterLogLevel > 0)
340 				sm_syslog(LOG_ERR, e->e_id,
341 					  "Milter read(%s): timeout before data read",
342 					  m->mf_name);
343 			milter_error(m, e);
344 			return NULL;
345 		}
346 		to -= now - readstart;
347 	}
348 
349 	*cmd = data[MILTER_LEN_BYTES];
350 	data[MILTER_LEN_BYTES] = '\0';
351 	(void) memcpy(&i, data, MILTER_LEN_BYTES);
352 	expl = ntohl(i) - 1;
353 
354 	if (tTd(64, 25))
355 		sm_dprintf("milter_read(%s): expecting %ld bytes\n",
356 			m->mf_name, (long) expl);
357 
358 	if (expl < 0)
359 	{
360 		if (tTd(64, 5))
361 			sm_dprintf("milter_read(%s): read size %ld out of range\n",
362 				m->mf_name, (long) expl);
363 		if (MilterLogLevel > 0)
364 			sm_syslog(LOG_ERR, e->e_id,
365 				  "milter_read(%s): read size %ld out of range",
366 				  m->mf_name, (long) expl);
367 		milter_error(m, e);
368 		return NULL;
369 	}
370 
371 	if (expl == 0)
372 		return NULL;
373 
374 	buf = (char *) xalloc(expl);
375 
376 	if (milter_sysread(m, buf, expl, to, e) == NULL)
377 	{
378 		sm_free(buf); /* XXX */
379 		return NULL;
380 	}
381 
382 	if (tTd(64, 50))
383 		sm_dprintf("milter_read(%s): Returning %*s\n",
384 			m->mf_name, (int) expl, buf);
385 	*rlen = expl;
386 	return buf;
387 }
388 /*
389 **  MILTER_WRITE -- write to a remote milter filter
390 **
391 **	Parameters:
392 **		m -- milter to read from.
393 **		cmd -- command to send.
394 **		buf -- optional command data.
395 **		len -- length of buf.
396 **		to -- timeout in seconds.
397 **		e -- current envelope.
398 **
399 **	Returns:
400 **		buf if successful, NULL otherwise
401 **		Not actually used anywhere but function prototype
402 **			must match milter_read()
403 */
404 
405 static char *
406 milter_write(m, cmd, buf, len, to, e)
407 	struct milter *m;
408 	char cmd;
409 	char *buf;
410 	ssize_t len;
411 	time_t to;
412 	ENVELOPE *e;
413 {
414 	time_t writestart = (time_t) 0;
415 	ssize_t sl, i;
416 	mi_int32 nl;
417 	char data[MILTER_LEN_BYTES + 1];
418 	bool started = false;
419 
420 	if (len < 0 || len > MILTER_CHUNK_SIZE)
421 	{
422 		if (tTd(64, 5))
423 			sm_dprintf("milter_write(%s): length %ld out of range\n",
424 				m->mf_name, (long) len);
425 		if (MilterLogLevel > 0)
426 			sm_syslog(LOG_ERR, e->e_id,
427 				  "milter_write(%s): length %ld out of range",
428 				  m->mf_name, (long) len);
429 		milter_error(m, e);
430 		return NULL;
431 	}
432 
433 	if (tTd(64, 20))
434 		sm_dprintf("milter_write(%s): cmd %c, len %ld\n",
435 			   m->mf_name, cmd, (long) len);
436 
437 	nl = htonl(len + 1);	/* add 1 for the cmd char */
438 	(void) memcpy(data, (char *) &nl, MILTER_LEN_BYTES);
439 	data[MILTER_LEN_BYTES] = cmd;
440 	sl = MILTER_LEN_BYTES + 1;
441 
442 	if (to > 0)
443 	{
444 		writestart = curtime();
445 		MILTER_TIMEOUT("write", to, true, started);
446 	}
447 
448 	/* use writev() instead to send the whole stuff at once? */
449 	i = write(m->mf_sock, (void *) data, sl);
450 	if (i != sl)
451 	{
452 		int save_errno = errno;
453 
454 		if (tTd(64, 5))
455 			sm_dprintf("milter_write (%s): write(%c) returned %ld, expected %ld: %s\n",
456 				   m->mf_name, cmd, (long) i, (long) sl,
457 				   sm_errstring(save_errno));
458 		if (MilterLogLevel > 0)
459 			sm_syslog(LOG_ERR, e->e_id,
460 				  "Milter (%s): write(%c) returned %ld, expected %ld: %s",
461 				  m->mf_name, cmd, (long) i, (long) sl,
462 				  sm_errstring(save_errno));
463 		milter_error(m, e);
464 		return buf;
465 	}
466 
467 	if (len <= 0 || buf == NULL)
468 		return buf;
469 
470 	if (tTd(64, 50))
471 		sm_dprintf("milter_write(%s): Sending %*s\n",
472 			   m->mf_name, (int) len, buf);
473 	started = true;
474 
475 	if (to > 0)
476 	{
477 		time_t now;
478 
479 		now = curtime();
480 		if (now - writestart >= to)
481 		{
482 			if (tTd(64, 5))
483 				sm_dprintf("milter_write(%s): timeout before data write\n",
484 					   m->mf_name);
485 			if (MilterLogLevel > 0)
486 				sm_syslog(LOG_ERR, e->e_id,
487 					  "Milter (%s): timeout before data write",
488 					  m->mf_name);
489 			milter_error(m, e);
490 			return NULL;
491 		}
492 		else
493 		{
494 			to -= now - writestart;
495 			MILTER_TIMEOUT("write", to, true, started);
496 		}
497 	}
498 
499 	i = write(m->mf_sock, (void *) buf, len);
500 	if (i != len)
501 	{
502 		int save_errno = errno;
503 
504 		if (tTd(64, 5))
505 			sm_dprintf("milter_write(%s): write(%c) returned %ld, expected %ld: %s\n",
506 				   m->mf_name, cmd, (long) i, (long) sl,
507 				   sm_errstring(save_errno));
508 		if (MilterLogLevel > 0)
509 			sm_syslog(LOG_ERR, e->e_id,
510 				  "Milter (%s): write(%c) returned %ld, expected %ld: %s",
511 				  m->mf_name, cmd, (long) i, (long) len,
512 				  sm_errstring(save_errno));
513 		milter_error(m, e);
514 		return NULL;
515 	}
516 	return buf;
517 }
518 
519 /*
520 **  Utility functions
521 */
522 
523 /*
524 **  MILTER_OPEN -- connect to remote milter filter
525 **
526 **	Parameters:
527 **		m -- milter to connect to.
528 **		parseonly -- parse but don't connect.
529 **		e -- current envelope.
530 **
531 **	Returns:
532 **		connected socket if sucessful && !parseonly,
533 **		0 upon parse success if parseonly,
534 **		-1 otherwise.
535 */
536 
537 static jmp_buf	MilterConnectTimeout;
538 
539 static int
540 milter_open(m, parseonly, e)
541 	struct milter *m;
542 	bool parseonly;
543 	ENVELOPE *e;
544 {
545 	int sock = 0;
546 	SOCKADDR_LEN_T addrlen = 0;
547 	int addrno = 0;
548 	int save_errno;
549 	char *p;
550 	char *colon;
551 	char *at;
552 	struct hostent *hp = NULL;
553 	SOCKADDR addr;
554 
555 	if (m->mf_conn == NULL || m->mf_conn[0] == '\0')
556 	{
557 		if (tTd(64, 5))
558 			sm_dprintf("X%s: empty or missing socket information\n",
559 				   m->mf_name);
560 		if (parseonly)
561 			syserr("X%s: empty or missing socket information",
562 			       m->mf_name);
563 		else if (MilterLogLevel > 10)
564 			sm_syslog(LOG_ERR, e->e_id,
565 				  "Milter (%s): empty or missing socket information",
566 				  m->mf_name);
567 		milter_error(m, e);
568 		return -1;
569 	}
570 
571 	/* protocol:filename or protocol:port@host */
572 	memset(&addr, '\0', sizeof addr);
573 	p = m->mf_conn;
574 	colon = strchr(p, ':');
575 	if (colon != NULL)
576 	{
577 		*colon = '\0';
578 
579 		if (*p == '\0')
580 		{
581 # if NETUNIX
582 			/* default to AF_UNIX */
583 			addr.sa.sa_family = AF_UNIX;
584 # else /* NETUNIX */
585 #  if NETINET
586 			/* default to AF_INET */
587 			addr.sa.sa_family = AF_INET;
588 #  else /* NETINET */
589 #   if NETINET6
590 			/* default to AF_INET6 */
591 			addr.sa.sa_family = AF_INET6;
592 #   else /* NETINET6 */
593 			/* no protocols available */
594 			sm_syslog(LOG_ERR, e->e_id,
595 				  "Milter (%s): no valid socket protocols available",
596 				  m->mf_name);
597 			milter_error(m, e);
598 			return -1;
599 #   endif /* NETINET6 */
600 #  endif /* NETINET */
601 # endif /* NETUNIX */
602 		}
603 # if NETUNIX
604 		else if (sm_strcasecmp(p, "unix") == 0 ||
605 			 sm_strcasecmp(p, "local") == 0)
606 			addr.sa.sa_family = AF_UNIX;
607 # endif /* NETUNIX */
608 # if NETINET
609 		else if (sm_strcasecmp(p, "inet") == 0)
610 			addr.sa.sa_family = AF_INET;
611 # endif /* NETINET */
612 # if NETINET6
613 		else if (sm_strcasecmp(p, "inet6") == 0)
614 			addr.sa.sa_family = AF_INET6;
615 # endif /* NETINET6 */
616 		else
617 		{
618 # ifdef EPROTONOSUPPORT
619 			errno = EPROTONOSUPPORT;
620 # else /* EPROTONOSUPPORT */
621 			errno = EINVAL;
622 # endif /* EPROTONOSUPPORT */
623 			if (tTd(64, 5))
624 				sm_dprintf("X%s: unknown socket type %s\n",
625 					m->mf_name, p);
626 			if (parseonly)
627 				syserr("X%s: unknown socket type %s",
628 				       m->mf_name, p);
629 			else if (MilterLogLevel > 10)
630 				sm_syslog(LOG_ERR, e->e_id,
631 					  "Milter (%s): unknown socket type %s",
632 					  m->mf_name, p);
633 			milter_error(m, e);
634 			return -1;
635 		}
636 		*colon++ = ':';
637 	}
638 	else
639 	{
640 		/* default to AF_UNIX */
641 		addr.sa.sa_family = AF_UNIX;
642 		colon = p;
643 	}
644 
645 # if NETUNIX
646 	if (addr.sa.sa_family == AF_UNIX)
647 	{
648 		long sff = SFF_SAFEDIRPATH|SFF_OPENASROOT|SFF_NOLINK|SFF_EXECOK;
649 
650 		at = colon;
651 		if (strlen(colon) >= sizeof addr.sunix.sun_path)
652 		{
653 			if (tTd(64, 5))
654 				sm_dprintf("X%s: local socket name %s too long\n",
655 					m->mf_name, colon);
656 			errno = EINVAL;
657 			if (parseonly)
658 				syserr("X%s: local socket name %s too long",
659 				       m->mf_name, colon);
660 			else if (MilterLogLevel > 10)
661 				sm_syslog(LOG_ERR, e->e_id,
662 					  "Milter (%s): local socket name %s too long",
663 					  m->mf_name, colon);
664 			milter_error(m, e);
665 			return -1;
666 		}
667 		errno = safefile(colon, RunAsUid, RunAsGid, RunAsUserName, sff,
668 				 S_IRUSR|S_IWUSR, NULL);
669 
670 		/* if just parsing .cf file, socket doesn't need to exist */
671 		if (parseonly && errno == ENOENT)
672 		{
673 			if (OpMode == MD_DAEMON ||
674 			    OpMode == MD_FGDAEMON)
675 				(void) sm_io_fprintf(smioerr, SM_TIME_DEFAULT,
676 						     "WARNING: X%s: local socket name %s missing\n",
677 						     m->mf_name, colon);
678 		}
679 		else if (errno != 0)
680 		{
681 			/* if not safe, don't create */
682 			save_errno = errno;
683 			if (tTd(64, 5))
684 				sm_dprintf("X%s: local socket name %s unsafe\n",
685 					m->mf_name, colon);
686 			errno = save_errno;
687 			if (parseonly)
688 			{
689 				if (OpMode == MD_DAEMON ||
690 				    OpMode == MD_FGDAEMON ||
691 				    OpMode == MD_SMTP)
692 					syserr("X%s: local socket name %s unsafe",
693 					       m->mf_name, colon);
694 			}
695 			else if (MilterLogLevel > 10)
696 				sm_syslog(LOG_ERR, e->e_id,
697 					  "Milter (%s): local socket name %s unsafe",
698 					  m->mf_name, colon);
699 			milter_error(m, e);
700 			return -1;
701 		}
702 
703 		(void) sm_strlcpy(addr.sunix.sun_path, colon,
704 			       sizeof addr.sunix.sun_path);
705 		addrlen = sizeof (struct sockaddr_un);
706 	}
707 	else
708 # endif /* NETUNIX */
709 # if NETINET || NETINET6
710 	if (false
711 #  if NETINET
712 		 || addr.sa.sa_family == AF_INET
713 #  endif /* NETINET */
714 #  if NETINET6
715 		 || addr.sa.sa_family == AF_INET6
716 #  endif /* NETINET6 */
717 		 )
718 	{
719 		unsigned short port;
720 
721 		/* Parse port@host */
722 		at = strchr(colon, '@');
723 		if (at == NULL)
724 		{
725 			if (tTd(64, 5))
726 				sm_dprintf("X%s: bad address %s (expected port@host)\n",
727 					m->mf_name, colon);
728 			if (parseonly)
729 				syserr("X%s: bad address %s (expected port@host)",
730 				       m->mf_name, colon);
731 			else if (MilterLogLevel > 10)
732 				sm_syslog(LOG_ERR, e->e_id,
733 					  "Milter (%s): bad address %s (expected port@host)",
734 					  m->mf_name, colon);
735 			milter_error(m, e);
736 			return -1;
737 		}
738 		*at = '\0';
739 		if (isascii(*colon) && isdigit(*colon))
740 			port = htons((unsigned short) atoi(colon));
741 		else
742 		{
743 #  ifdef NO_GETSERVBYNAME
744 			if (tTd(64, 5))
745 				sm_dprintf("X%s: invalid port number %s\n",
746 					m->mf_name, colon);
747 			if (parseonly)
748 				syserr("X%s: invalid port number %s",
749 				       m->mf_name, colon);
750 			else if (MilterLogLevel > 10)
751 				sm_syslog(LOG_ERR, e->e_id,
752 					  "Milter (%s): invalid port number %s",
753 					  m->mf_name, colon);
754 			milter_error(m, e);
755 			return -1;
756 #  else /* NO_GETSERVBYNAME */
757 			register struct servent *sp;
758 
759 			sp = getservbyname(colon, "tcp");
760 			if (sp == NULL)
761 			{
762 				save_errno = errno;
763 				if (tTd(64, 5))
764 					sm_dprintf("X%s: unknown port name %s\n",
765 						m->mf_name, colon);
766 				errno = save_errno;
767 				if (parseonly)
768 					syserr("X%s: unknown port name %s",
769 					       m->mf_name, colon);
770 				else if (MilterLogLevel > 10)
771 					sm_syslog(LOG_ERR, e->e_id,
772 						  "Milter (%s): unknown port name %s",
773 						  m->mf_name, colon);
774 				milter_error(m, e);
775 				return -1;
776 			}
777 			port = sp->s_port;
778 #  endif /* NO_GETSERVBYNAME */
779 		}
780 		*at++ = '@';
781 		if (*at == '[')
782 		{
783 			char *end;
784 
785 			end = strchr(at, ']');
786 			if (end != NULL)
787 			{
788 				bool found = false;
789 #  if NETINET
790 				unsigned long hid = INADDR_NONE;
791 #  endif /* NETINET */
792 #  if NETINET6
793 				struct sockaddr_in6 hid6;
794 #  endif /* NETINET6 */
795 
796 				*end = '\0';
797 #  if NETINET
798 				if (addr.sa.sa_family == AF_INET &&
799 				    (hid = inet_addr(&at[1])) != INADDR_NONE)
800 				{
801 					addr.sin.sin_addr.s_addr = hid;
802 					addr.sin.sin_port = port;
803 					found = true;
804 				}
805 #  endif /* NETINET */
806 #  if NETINET6
807 				(void) memset(&hid6, '\0', sizeof hid6);
808 				if (addr.sa.sa_family == AF_INET6 &&
809 				    anynet_pton(AF_INET6, &at[1],
810 						&hid6.sin6_addr) == 1)
811 				{
812 					addr.sin6.sin6_addr = hid6.sin6_addr;
813 					addr.sin6.sin6_port = port;
814 					found = true;
815 				}
816 #  endif /* NETINET6 */
817 				*end = ']';
818 				if (!found)
819 				{
820 					if (tTd(64, 5))
821 						sm_dprintf("X%s: Invalid numeric domain spec \"%s\"\n",
822 							m->mf_name, at);
823 					if (parseonly)
824 						syserr("X%s: Invalid numeric domain spec \"%s\"",
825 						       m->mf_name, at);
826 					else if (MilterLogLevel > 10)
827 						sm_syslog(LOG_ERR, e->e_id,
828 							  "Milter (%s): Invalid numeric domain spec \"%s\"",
829 							  m->mf_name, at);
830 					milter_error(m, e);
831 					return -1;
832 				}
833 			}
834 			else
835 			{
836 				if (tTd(64, 5))
837 					sm_dprintf("X%s: Invalid numeric domain spec \"%s\"\n",
838 						m->mf_name, at);
839 				if (parseonly)
840 					syserr("X%s: Invalid numeric domain spec \"%s\"",
841 					       m->mf_name, at);
842 				else if (MilterLogLevel > 10)
843 					sm_syslog(LOG_ERR, e->e_id,
844 						  "Milter (%s): Invalid numeric domain spec \"%s\"",
845 						  m->mf_name, at);
846 				milter_error(m, e);
847 				return -1;
848 			}
849 		}
850 		else
851 		{
852 			hp = sm_gethostbyname(at, addr.sa.sa_family);
853 			if (hp == NULL)
854 			{
855 				save_errno = errno;
856 				if (tTd(64, 5))
857 					sm_dprintf("X%s: Unknown host name %s\n",
858 						   m->mf_name, at);
859 				errno = save_errno;
860 				if (parseonly)
861 					syserr("X%s: Unknown host name %s",
862 					       m->mf_name, at);
863 				else if (MilterLogLevel > 10)
864 					sm_syslog(LOG_ERR, e->e_id,
865 						  "Milter (%s): Unknown host name %s",
866 						  m->mf_name, at);
867 				milter_error(m, e);
868 				return -1;
869 			}
870 			addr.sa.sa_family = hp->h_addrtype;
871 			switch (hp->h_addrtype)
872 			{
873 #  if NETINET
874 			  case AF_INET:
875 				memmove(&addr.sin.sin_addr,
876 					hp->h_addr, INADDRSZ);
877 				addr.sin.sin_port = port;
878 				addrlen = sizeof (struct sockaddr_in);
879 				addrno = 1;
880 				break;
881 #  endif /* NETINET */
882 
883 #  if NETINET6
884 			  case AF_INET6:
885 				memmove(&addr.sin6.sin6_addr,
886 					hp->h_addr, IN6ADDRSZ);
887 				addr.sin6.sin6_port = port;
888 				addrlen = sizeof (struct sockaddr_in6);
889 				addrno = 1;
890 				break;
891 #  endif /* NETINET6 */
892 
893 			  default:
894 				if (tTd(64, 5))
895 					sm_dprintf("X%s: Unknown protocol for %s (%d)\n",
896 						   m->mf_name, at,
897 						   hp->h_addrtype);
898 				if (parseonly)
899 					syserr("X%s: Unknown protocol for %s (%d)",
900 					       m->mf_name, at, hp->h_addrtype);
901 				else if (MilterLogLevel > 10)
902 					sm_syslog(LOG_ERR, e->e_id,
903 						  "Milter (%s): Unknown protocol for %s (%d)",
904 						  m->mf_name, at,
905 						  hp->h_addrtype);
906 				milter_error(m, e);
907 #  if NETINET6
908 				freehostent(hp);
909 #  endif /* NETINET6 */
910 				return -1;
911 			}
912 		}
913 	}
914 	else
915 # endif /* NETINET || NETINET6 */
916 	{
917 		if (tTd(64, 5))
918 			sm_dprintf("X%s: unknown socket protocol\n",
919 				   m->mf_name);
920 		if (parseonly)
921 			syserr("X%s: unknown socket protocol", m->mf_name);
922 		else if (MilterLogLevel > 10)
923 			sm_syslog(LOG_ERR, e->e_id,
924 				  "Milter (%s): unknown socket protocol",
925 				  m->mf_name);
926 		milter_error(m, e);
927 		return -1;
928 	}
929 
930 	/* just parsing through? */
931 	if (parseonly)
932 	{
933 		m->mf_state = SMFS_READY;
934 # if NETINET6
935 		if (hp != NULL)
936 			freehostent(hp);
937 # endif /* NETINET6 */
938 		return 0;
939 	}
940 
941 	/* sanity check */
942 	if (m->mf_state != SMFS_READY &&
943 	    m->mf_state != SMFS_CLOSED)
944 	{
945 		/* shouldn't happen */
946 		if (tTd(64, 1))
947 			sm_dprintf("Milter (%s): Trying to open filter in state %c\n",
948 				   m->mf_name, (char) m->mf_state);
949 		milter_error(m, e);
950 # if NETINET6
951 		if (hp != NULL)
952 			freehostent(hp);
953 # endif /* NETINET6 */
954 		return -1;
955 	}
956 
957 	/* nope, actually connecting */
958 	for (;;)
959 	{
960 		sock = socket(addr.sa.sa_family, SOCK_STREAM, 0);
961 		if (sock < 0)
962 		{
963 			save_errno = errno;
964 			if (tTd(64, 5))
965 				sm_dprintf("Milter (%s): error creating socket: %s\n",
966 					   m->mf_name,
967 					   sm_errstring(save_errno));
968 			if (MilterLogLevel > 0)
969 				sm_syslog(LOG_ERR, e->e_id,
970 					  "Milter (%s): error creating socket: %s",
971 					  m->mf_name, sm_errstring(save_errno));
972 			milter_error(m, e);
973 # if NETINET6
974 			if (hp != NULL)
975 				freehostent(hp);
976 # endif /* NETINET6 */
977 			return -1;
978 		}
979 
980 		if (setjmp(MilterConnectTimeout) == 0)
981 		{
982 			SM_EVENT *ev = NULL;
983 			int i;
984 
985 			if (m->mf_timeout[SMFTO_CONNECT] > 0)
986 				ev = sm_setevent(m->mf_timeout[SMFTO_CONNECT],
987 						 milter_connect_timeout, 0);
988 
989 			i = connect(sock, (struct sockaddr *) &addr, addrlen);
990 			save_errno = errno;
991 			if (ev != NULL)
992 				sm_clrevent(ev);
993 			errno = save_errno;
994 			if (i >= 0)
995 				break;
996 		}
997 
998 		/* couldn't connect.... try next address */
999 		save_errno = errno;
1000 		p = CurHostName;
1001 		CurHostName = at;
1002 		if (tTd(64, 5))
1003 			sm_dprintf("milter_open (%s): open %s failed: %s\n",
1004 				   m->mf_name, at, sm_errstring(save_errno));
1005 		if (MilterLogLevel > 13)
1006 			sm_syslog(LOG_INFO, e->e_id,
1007 				  "Milter (%s): open %s failed: %s",
1008 				  m->mf_name, at, sm_errstring(save_errno));
1009 		CurHostName = p;
1010 		(void) close(sock);
1011 
1012 		/* try next address */
1013 		if (hp != NULL && hp->h_addr_list[addrno] != NULL)
1014 		{
1015 			switch (addr.sa.sa_family)
1016 			{
1017 # if NETINET
1018 			  case AF_INET:
1019 				memmove(&addr.sin.sin_addr,
1020 					hp->h_addr_list[addrno++],
1021 					INADDRSZ);
1022 				break;
1023 # endif /* NETINET */
1024 
1025 # if NETINET6
1026 			  case AF_INET6:
1027 				memmove(&addr.sin6.sin6_addr,
1028 					hp->h_addr_list[addrno++],
1029 					IN6ADDRSZ);
1030 				break;
1031 # endif /* NETINET6 */
1032 
1033 			  default:
1034 				if (tTd(64, 5))
1035 					sm_dprintf("X%s: Unknown protocol for %s (%d)\n",
1036 						   m->mf_name, at,
1037 						   hp->h_addrtype);
1038 				if (MilterLogLevel > 0)
1039 					sm_syslog(LOG_ERR, e->e_id,
1040 						  "Milter (%s): Unknown protocol for %s (%d)",
1041 						  m->mf_name, at,
1042 						  hp->h_addrtype);
1043 				milter_error(m, e);
1044 # if NETINET6
1045 				freehostent(hp);
1046 # endif /* NETINET6 */
1047 				return -1;
1048 			}
1049 			continue;
1050 		}
1051 		p = CurHostName;
1052 		CurHostName = at;
1053 		if (tTd(64, 5))
1054 			sm_dprintf("X%s: error connecting to filter: %s\n",
1055 				   m->mf_name, sm_errstring(save_errno));
1056 		if (MilterLogLevel > 0)
1057 			sm_syslog(LOG_ERR, e->e_id,
1058 				  "Milter (%s): error connecting to filter: %s",
1059 				  m->mf_name, sm_errstring(save_errno));
1060 		CurHostName = p;
1061 		milter_error(m, e);
1062 # if NETINET6
1063 		if (hp != NULL)
1064 			freehostent(hp);
1065 # endif /* NETINET6 */
1066 		return -1;
1067 	}
1068 	m->mf_state = SMFS_OPEN;
1069 # if NETINET6
1070 	if (hp != NULL)
1071 	{
1072 		freehostent(hp);
1073 		hp = NULL;
1074 	}
1075 # endif /* NETINET6 */
1076 	return sock;
1077 }
1078 
1079 static void
1080 milter_connect_timeout()
1081 {
1082 	/*
1083 	**  NOTE: THIS CAN BE CALLED FROM A SIGNAL HANDLER.  DO NOT ADD
1084 	**	ANYTHING TO THIS ROUTINE UNLESS YOU KNOW WHAT YOU ARE
1085 	**	DOING.
1086 	*/
1087 
1088 	errno = ETIMEDOUT;
1089 	longjmp(MilterConnectTimeout, 1);
1090 }
1091 /*
1092 **  MILTER_SETUP -- setup structure for a mail filter
1093 **
1094 **	Parameters:
1095 **		line -- the options line.
1096 **
1097 **	Returns:
1098 **		none
1099 */
1100 
1101 void
1102 milter_setup(line)
1103 	char *line;
1104 {
1105 	char fcode;
1106 	register char *p;
1107 	register struct milter *m;
1108 	STAB *s;
1109 
1110 	/* collect the filter name */
1111 	for (p = line;
1112 	     *p != '\0' && *p != ',' && !(isascii(*p) && isspace(*p));
1113 	     p++)
1114 		continue;
1115 	if (*p != '\0')
1116 		*p++ = '\0';
1117 	if (line[0] == '\0')
1118 	{
1119 		syserr("name required for mail filter");
1120 		return;
1121 	}
1122 	m = (struct milter *) xalloc(sizeof *m);
1123 	memset((char *) m, '\0', sizeof *m);
1124 	m->mf_name = newstr(line);
1125 	m->mf_state = SMFS_READY;
1126 	m->mf_sock = -1;
1127 	m->mf_timeout[SMFTO_CONNECT] = (time_t) 300;
1128 	m->mf_timeout[SMFTO_WRITE] = (time_t) 10;
1129 	m->mf_timeout[SMFTO_READ] = (time_t) 10;
1130 	m->mf_timeout[SMFTO_EOM] = (time_t) 300;
1131 
1132 	/* now scan through and assign info from the fields */
1133 	while (*p != '\0')
1134 	{
1135 		char *delimptr;
1136 
1137 		while (*p != '\0' &&
1138 		       (*p == ',' || (isascii(*p) && isspace(*p))))
1139 			p++;
1140 
1141 		/* p now points to field code */
1142 		fcode = *p;
1143 		while (*p != '\0' && *p != '=' && *p != ',')
1144 			p++;
1145 		if (*p++ != '=')
1146 		{
1147 			syserr("X%s: `=' expected", m->mf_name);
1148 			return;
1149 		}
1150 		while (isascii(*p) && isspace(*p))
1151 			p++;
1152 
1153 		/* p now points to the field body */
1154 		p = munchstring(p, &delimptr, ',');
1155 
1156 		/* install the field into the filter struct */
1157 		switch (fcode)
1158 		{
1159 		  case 'S':		/* socket */
1160 			if (p == NULL)
1161 				m->mf_conn = NULL;
1162 			else
1163 				m->mf_conn = newstr(p);
1164 			break;
1165 
1166 		  case 'F':		/* Milter flags configured on MTA */
1167 			for (; *p != '\0'; p++)
1168 			{
1169 				if (!(isascii(*p) && isspace(*p)))
1170 					setbitn(bitidx(*p), m->mf_flags);
1171 			}
1172 			break;
1173 
1174 		  case 'T':		/* timeouts */
1175 			milter_parse_timeouts(p, m);
1176 			break;
1177 
1178 		  default:
1179 			syserr("X%s: unknown filter equate %c=",
1180 			       m->mf_name, fcode);
1181 			break;
1182 		}
1183 		p = delimptr;
1184 	}
1185 
1186 	/* early check for errors */
1187 	(void) milter_open(m, true, CurEnv);
1188 
1189 	/* enter the filter into the symbol table */
1190 	s = stab(m->mf_name, ST_MILTER, ST_ENTER);
1191 	if (s->s_milter != NULL)
1192 		syserr("X%s: duplicate filter definition", m->mf_name);
1193 	else
1194 		s->s_milter = m;
1195 }
1196 /*
1197 **  MILTER_CONFIG -- parse option list into an array and check config
1198 **
1199 **	Called when reading configuration file.
1200 **
1201 **	Parameters:
1202 **		spec -- the filter list.
1203 **		list -- the array to fill in.
1204 **		max -- the maximum number of entries in list.
1205 **
1206 **	Returns:
1207 **		none
1208 */
1209 
1210 void
1211 milter_config(spec, list, max)
1212 	char *spec;
1213 	struct milter **list;
1214 	int max;
1215 {
1216 	int numitems = 0;
1217 	register char *p;
1218 
1219 	/* leave one for the NULL signifying the end of the list */
1220 	max--;
1221 
1222 	for (p = spec; p != NULL; )
1223 	{
1224 		STAB *s;
1225 
1226 		while (isascii(*p) && isspace(*p))
1227 			p++;
1228 		if (*p == '\0')
1229 			break;
1230 		spec = p;
1231 
1232 		if (numitems >= max)
1233 		{
1234 			syserr("Too many filters defined, %d max", max);
1235 			if (max > 0)
1236 				list[0] = NULL;
1237 			return;
1238 		}
1239 #if _FFR_MILTER_PERDAEMON
1240 		p = strpbrk(p, ";,");
1241 #else /* _FFR_MILTER_PERDAEMON */
1242 		p = strpbrk(p, ",");
1243 #endif /* _FFR_MILTER_PERDAEMON */
1244 		if (p != NULL)
1245 			*p++ = '\0';
1246 
1247 		s = stab(spec, ST_MILTER, ST_FIND);
1248 		if (s == NULL)
1249 		{
1250 			syserr("InputFilter %s not defined", spec);
1251 			ExitStat = EX_CONFIG;
1252 			return;
1253 		}
1254 		list[numitems++] = s->s_milter;
1255 	}
1256 	list[numitems] = NULL;
1257 
1258 	/* if not set, set to LogLevel */
1259 	if (MilterLogLevel == -1)
1260 		MilterLogLevel = LogLevel;
1261 }
1262 /*
1263 **  MILTER_PARSE_TIMEOUTS -- parse timeout list
1264 **
1265 **	Called when reading configuration file.
1266 **
1267 **	Parameters:
1268 **		spec -- the timeout list.
1269 **		m -- milter to set.
1270 **
1271 **	Returns:
1272 **		none
1273 */
1274 
1275 static void
1276 milter_parse_timeouts(spec, m)
1277 	char *spec;
1278 	struct milter *m;
1279 {
1280 	char fcode;
1281 	register char *p;
1282 
1283 	p = spec;
1284 
1285 	/* now scan through and assign info from the fields */
1286 	while (*p != '\0')
1287 	{
1288 		char *delimptr;
1289 
1290 		while (*p != '\0' &&
1291 		       (*p == ';' || (isascii(*p) && isspace(*p))))
1292 			p++;
1293 
1294 		/* p now points to field code */
1295 		fcode = *p;
1296 		while (*p != '\0' && *p != ':')
1297 			p++;
1298 		if (*p++ != ':')
1299 		{
1300 			syserr("X%s, T=: `:' expected", m->mf_name);
1301 			return;
1302 		}
1303 		while (isascii(*p) && isspace(*p))
1304 			p++;
1305 
1306 		/* p now points to the field body */
1307 		p = munchstring(p, &delimptr, ';');
1308 
1309 		/* install the field into the filter struct */
1310 		switch (fcode)
1311 		{
1312 		  case 'C':
1313 			m->mf_timeout[SMFTO_CONNECT] = convtime(p, 's');
1314 			if (tTd(64, 5))
1315 				sm_dprintf("X%s: %c=%lu\n",
1316 					   m->mf_name, fcode,
1317 					   (unsigned long) m->mf_timeout[SMFTO_CONNECT]);
1318 			break;
1319 
1320 		  case 'S':
1321 			m->mf_timeout[SMFTO_WRITE] = convtime(p, 's');
1322 			if (tTd(64, 5))
1323 				sm_dprintf("X%s: %c=%lu\n",
1324 					   m->mf_name, fcode,
1325 					   (unsigned long) m->mf_timeout[SMFTO_WRITE]);
1326 			break;
1327 
1328 		  case 'R':
1329 			m->mf_timeout[SMFTO_READ] = convtime(p, 's');
1330 			if (tTd(64, 5))
1331 				sm_dprintf("X%s: %c=%lu\n",
1332 					   m->mf_name, fcode,
1333 					   (unsigned long) m->mf_timeout[SMFTO_READ]);
1334 			break;
1335 
1336 		  case 'E':
1337 			m->mf_timeout[SMFTO_EOM] = convtime(p, 's');
1338 			if (tTd(64, 5))
1339 				sm_dprintf("X%s: %c=%lu\n",
1340 					   m->mf_name, fcode,
1341 					   (unsigned long) m->mf_timeout[SMFTO_EOM]);
1342 			break;
1343 
1344 		  default:
1345 			if (tTd(64, 5))
1346 				sm_dprintf("X%s: %c unknown\n",
1347 					   m->mf_name, fcode);
1348 			syserr("X%s: unknown filter timeout %c",
1349 			       m->mf_name, fcode);
1350 			break;
1351 		}
1352 		p = delimptr;
1353 	}
1354 }
1355 /*
1356 **  MILTER_SET_OPTION -- set an individual milter option
1357 **
1358 **	Parameters:
1359 **		name -- the name of the option.
1360 **		val -- the value of the option.
1361 **		sticky -- if set, don't let other setoptions override
1362 **			this value.
1363 **
1364 **	Returns:
1365 **		none.
1366 */
1367 
1368 /* set if Milter sub-option is stuck */
1369 static BITMAP256	StickyMilterOpt;
1370 
1371 static struct milteropt
1372 {
1373 	char		*mo_name;	/* long name of milter option */
1374 	unsigned char	mo_code;	/* code for option */
1375 } MilterOptTab[] =
1376 {
1377 # define MO_MACROS_CONNECT		0x01
1378 	{ "macros.connect",		MO_MACROS_CONNECT		},
1379 # define MO_MACROS_HELO			0x02
1380 	{ "macros.helo",		MO_MACROS_HELO			},
1381 # define MO_MACROS_ENVFROM		0x03
1382 	{ "macros.envfrom",		MO_MACROS_ENVFROM		},
1383 # define MO_MACROS_ENVRCPT		0x04
1384 	{ "macros.envrcpt",		MO_MACROS_ENVRCPT		},
1385 # define MO_LOGLEVEL			0x05
1386 	{ "loglevel",			MO_LOGLEVEL			},
1387 	{ NULL,				0				},
1388 };
1389 
1390 void
1391 milter_set_option(name, val, sticky)
1392 	char *name;
1393 	char *val;
1394 	bool sticky;
1395 {
1396 	int nummac = 0;
1397 	register struct milteropt *mo;
1398 	char *p;
1399 	char **macros = NULL;
1400 
1401 	if (tTd(37, 2) || tTd(64, 5))
1402 		sm_dprintf("milter_set_option(%s = %s)", name, val);
1403 
1404 	for (mo = MilterOptTab; mo->mo_name != NULL; mo++)
1405 	{
1406 		if (sm_strcasecmp(mo->mo_name, name) == 0)
1407 			break;
1408 	}
1409 
1410 	if (mo->mo_name == NULL)
1411 	{
1412 		syserr("milter_set_option: invalid Milter option %s", name);
1413 		return;
1414 	}
1415 
1416 	/*
1417 	**  See if this option is preset for us.
1418 	*/
1419 
1420 	if (!sticky && bitnset(mo->mo_code, StickyMilterOpt))
1421 	{
1422 		if (tTd(37, 2) || tTd(64,5))
1423 			sm_dprintf(" (ignored)\n");
1424 		return;
1425 	}
1426 
1427 	if (tTd(37, 2) || tTd(64,5))
1428 		sm_dprintf("\n");
1429 
1430 	switch (mo->mo_code)
1431 	{
1432 	  case MO_LOGLEVEL:
1433 		MilterLogLevel = atoi(val);
1434 		break;
1435 
1436 	  case MO_MACROS_CONNECT:
1437 		if (macros == NULL)
1438 			macros = MilterConnectMacros;
1439 		/* FALLTHROUGH */
1440 
1441 	  case MO_MACROS_HELO:
1442 		if (macros == NULL)
1443 			macros = MilterHeloMacros;
1444 		/* FALLTHROUGH */
1445 
1446 	  case MO_MACROS_ENVFROM:
1447 		if (macros == NULL)
1448 			macros = MilterEnvFromMacros;
1449 		/* FALLTHROUGH */
1450 
1451 	  case MO_MACROS_ENVRCPT:
1452 		if (macros == NULL)
1453 			macros = MilterEnvRcptMacros;
1454 
1455 		p = newstr(val);
1456 		while (*p != '\0')
1457 		{
1458 			char *macro;
1459 
1460 			/* Skip leading commas, spaces */
1461 			while (*p != '\0' &&
1462 			       (*p == ',' || (isascii(*p) && isspace(*p))))
1463 				p++;
1464 
1465 			if (*p == '\0')
1466 				break;
1467 
1468 			/* Find end of macro */
1469 			macro = p;
1470 			while (*p != '\0' && *p != ',' &&
1471 			       isascii(*p) && !isspace(*p))
1472 				p++;
1473 			if (*p != '\0')
1474 				*p++ = '\0';
1475 
1476 			if (nummac >= MAXFILTERMACROS)
1477 			{
1478 				syserr("milter_set_option: too many macros in Milter.%s (max %d)",
1479 				       name, MAXFILTERMACROS);
1480 				macros[nummac] = NULL;
1481 				break;
1482 			}
1483 			macros[nummac++] = macro;
1484 		}
1485 		macros[nummac] = NULL;
1486 		break;
1487 
1488 	  default:
1489 		syserr("milter_set_option: invalid Milter option %s", name);
1490 		break;
1491 	}
1492 	if (sticky)
1493 		setbitn(mo->mo_code, StickyMilterOpt);
1494 }
1495 /*
1496 **  MILTER_REOPEN_DF -- open & truncate the data file (for replbody)
1497 **
1498 **	Parameters:
1499 **		e -- current envelope.
1500 **
1501 **	Returns:
1502 **		0 if succesful, -1 otherwise
1503 */
1504 
1505 static int
1506 milter_reopen_df(e)
1507 	ENVELOPE *e;
1508 {
1509 	char dfname[MAXPATHLEN];
1510 
1511 	(void) sm_strlcpy(dfname, queuename(e, DATAFL_LETTER), sizeof dfname);
1512 
1513 	/*
1514 	**  In SuperSafe == SAFE_REALLY mode, e->e_dfp is a read-only FP so
1515 	**  close and reopen writable (later close and reopen
1516 	**  read only again).
1517 	**
1518 	**  In SuperSafe != SAFE_REALLY mode, e->e_dfp still points at the
1519 	**  buffered file I/O descriptor, still open for writing
1520 	**  so there isn't as much work to do, just truncate it
1521 	**  and go.
1522 	*/
1523 
1524 	if (SuperSafe == SAFE_REALLY)
1525 	{
1526 		/* close read-only data file */
1527 		if (bitset(EF_HAS_DF, e->e_flags) && e->e_dfp != NULL)
1528 		{
1529 			(void) sm_io_close(e->e_dfp, SM_TIME_DEFAULT);
1530 			e->e_flags &= ~EF_HAS_DF;
1531 		}
1532 
1533 		/* open writable */
1534 		if ((e->e_dfp = sm_io_open(SmFtStdio, SM_TIME_DEFAULT, dfname,
1535 					   SM_IO_RDWR, NULL)) == NULL)
1536 		{
1537 			MILTER_DF_ERROR("milter_reopen_df: sm_io_open %s: %s");
1538 			return -1;
1539 		}
1540 	}
1541 	else if (e->e_dfp == NULL)
1542 	{
1543 		/* shouldn't happen */
1544 		errno = ENOENT;
1545 		MILTER_DF_ERROR("milter_reopen_df: NULL e_dfp (%s: %s)");
1546 		return -1;
1547 	}
1548 	return 0;
1549 }
1550 /*
1551 **  MILTER_RESET_DF -- re-open read-only the data file (for replbody)
1552 **
1553 **	Parameters:
1554 **		e -- current envelope.
1555 **
1556 **	Returns:
1557 **		0 if succesful, -1 otherwise
1558 */
1559 
1560 static int
1561 milter_reset_df(e)
1562 	ENVELOPE *e;
1563 {
1564 	int afd;
1565 	char dfname[MAXPATHLEN];
1566 
1567 	(void) sm_strlcpy(dfname, queuename(e, DATAFL_LETTER), sizeof dfname);
1568 
1569 	if (sm_io_flush(e->e_dfp, SM_TIME_DEFAULT) != 0 ||
1570 	    sm_io_error(e->e_dfp))
1571 	{
1572 		MILTER_DF_ERROR("milter_reset_df: error writing/flushing %s: %s");
1573 		return -1;
1574 	}
1575 	else if (SuperSafe != SAFE_REALLY)
1576 	{
1577 		/* skip next few clauses */
1578 		/* EMPTY */
1579 	}
1580 	else if ((afd = sm_io_getinfo(e->e_dfp, SM_IO_WHAT_FD, NULL)) >= 0
1581 		 && fsync(afd) < 0)
1582 	{
1583 		MILTER_DF_ERROR("milter_reset_df: error sync'ing %s: %s");
1584 		return -1;
1585 	}
1586 	else if (sm_io_close(e->e_dfp, SM_TIME_DEFAULT) < 0)
1587 	{
1588 		MILTER_DF_ERROR("milter_reset_df: error closing %s: %s");
1589 		return -1;
1590 	}
1591 	else if ((e->e_dfp = sm_io_open(SmFtStdio, SM_TIME_DEFAULT, dfname,
1592 					SM_IO_RDONLY, NULL)) == NULL)
1593 	{
1594 		MILTER_DF_ERROR("milter_reset_df: error reopening %s: %s");
1595 		return -1;
1596 	}
1597 	else
1598 		e->e_flags |= EF_HAS_DF;
1599 	return 0;
1600 }
1601 /*
1602 **  MILTER_CAN_DELRCPTS -- can any milter filters delete recipients?
1603 **
1604 **	Parameters:
1605 **		none
1606 **
1607 **	Returns:
1608 **		true if any filter deletes recipients, false otherwise
1609 */
1610 
1611 bool
1612 milter_can_delrcpts()
1613 {
1614 	bool can = false;
1615 	int i;
1616 
1617 	if (tTd(64, 10))
1618 		sm_dprintf("milter_can_delrcpts:");
1619 
1620 	for (i = 0; InputFilters[i] != NULL; i++)
1621 	{
1622 		struct milter *m = InputFilters[i];
1623 
1624 		if (bitset(SMFIF_DELRCPT, m->mf_fflags))
1625 		{
1626 			can = true;
1627 			break;
1628 		}
1629 	}
1630 	if (tTd(64, 10))
1631 		sm_dprintf("%s\n", can ? "true" : "false");
1632 
1633 	return can;
1634 }
1635 /*
1636 **  MILTER_QUIT_FILTER -- close down a single filter
1637 **
1638 **	Parameters:
1639 **		m -- milter structure of filter to close down.
1640 **		e -- current envelope.
1641 **
1642 **	Returns:
1643 **		none
1644 */
1645 
1646 static void
1647 milter_quit_filter(m, e)
1648 	struct milter *m;
1649 	ENVELOPE *e;
1650 {
1651 	if (tTd(64, 10))
1652 		sm_dprintf("milter_quit_filter(%s)\n", m->mf_name);
1653 	if (MilterLogLevel > 18)
1654 		sm_syslog(LOG_INFO, e->e_id, "Milter (%s): quit filter",
1655 			  m->mf_name);
1656 
1657 	/* Never replace error state */
1658 	if (m->mf_state == SMFS_ERROR)
1659 		return;
1660 
1661 	if (m->mf_sock < 0 ||
1662 	    m->mf_state == SMFS_CLOSED ||
1663 	    m->mf_state == SMFS_READY)
1664 	{
1665 		m->mf_sock = -1;
1666 		m->mf_state = SMFS_CLOSED;
1667 		return;
1668 	}
1669 
1670 	(void) milter_write(m, SMFIC_QUIT, (char *) NULL, 0,
1671 			    m->mf_timeout[SMFTO_WRITE], e);
1672 	if (m->mf_sock >= 0)
1673 	{
1674 		(void) close(m->mf_sock);
1675 		m->mf_sock = -1;
1676 	}
1677 	if (m->mf_state != SMFS_ERROR)
1678 		m->mf_state = SMFS_CLOSED;
1679 }
1680 /*
1681 **  MILTER_ABORT_FILTER -- tell filter to abort current message
1682 **
1683 **	Parameters:
1684 **		m -- milter structure of filter to abort.
1685 **		e -- current envelope.
1686 **
1687 **	Returns:
1688 **		none
1689 */
1690 
1691 static void
1692 milter_abort_filter(m, e)
1693 	struct milter *m;
1694 	ENVELOPE *e;
1695 {
1696 	if (tTd(64, 10))
1697 		sm_dprintf("milter_abort_filter(%s)\n", m->mf_name);
1698 	if (MilterLogLevel > 10)
1699 		sm_syslog(LOG_INFO, e->e_id, "Milter (%s): abort filter",
1700 			  m->mf_name);
1701 
1702 	if (m->mf_sock < 0 ||
1703 	    m->mf_state != SMFS_INMSG)
1704 		return;
1705 
1706 	(void) milter_write(m, SMFIC_ABORT, (char *) NULL, 0,
1707 			    m->mf_timeout[SMFTO_WRITE], e);
1708 	if (m->mf_state != SMFS_ERROR)
1709 		m->mf_state = SMFS_DONE;
1710 }
1711 /*
1712 **  MILTER_SEND_MACROS -- provide macros to the filters
1713 **
1714 **	Parameters:
1715 **		m -- milter to send macros to.
1716 **		macros -- macros to send for filter smfi_getsymval().
1717 **		cmd -- which command the macros are associated with.
1718 **		e -- current envelope (for macro access).
1719 **
1720 **	Returns:
1721 **		none
1722 */
1723 
1724 static void
1725 milter_send_macros(m, macros, cmd, e)
1726 	struct milter *m;
1727 	char **macros;
1728 	char cmd;
1729 	ENVELOPE *e;
1730 {
1731 	int i;
1732 	int mid;
1733 	char *v;
1734 	char *buf, *bp;
1735 	ssize_t s;
1736 
1737 	/* sanity check */
1738 	if (macros == NULL || macros[0] == NULL)
1739 		return;
1740 
1741 	/* put together data */
1742 	s = 1;			/* for the command character */
1743 	for (i = 0; macros[i] != NULL; i++)
1744 	{
1745 		mid = macid(macros[i]);
1746 		if (mid == 0)
1747 			continue;
1748 		v = macvalue(mid, e);
1749 		if (v == NULL)
1750 			continue;
1751 		s += strlen(macros[i]) + 1 + strlen(v) + 1;
1752 	}
1753 
1754 	if (s < 0)
1755 		return;
1756 
1757 	buf = (char *) xalloc(s);
1758 	bp = buf;
1759 	*bp++ = cmd;
1760 	for (i = 0; macros[i] != NULL; i++)
1761 	{
1762 		mid = macid(macros[i]);
1763 		if (mid == 0)
1764 			continue;
1765 		v = macvalue(mid, e);
1766 		if (v == NULL)
1767 			continue;
1768 
1769 		if (tTd(64, 10))
1770 			sm_dprintf("milter_send_macros(%s, %c): %s=%s\n",
1771 				m->mf_name, cmd, macros[i], v);
1772 
1773 		(void) sm_strlcpy(bp, macros[i], s - (bp - buf));
1774 		bp += strlen(bp) + 1;
1775 		(void) sm_strlcpy(bp, v, s - (bp - buf));
1776 		bp += strlen(bp) + 1;
1777 	}
1778 	(void) milter_write(m, SMFIC_MACRO, buf, s,
1779 			    m->mf_timeout[SMFTO_WRITE], e);
1780 	sm_free(buf); /* XXX */
1781 }
1782 
1783 /*
1784 **  MILTER_SEND_COMMAND -- send a command and return the response for a filter
1785 **
1786 **	Parameters:
1787 **		m -- current milter filter
1788 **		command -- command to send.
1789 **		data -- optional command data.
1790 **		sz -- length of buf.
1791 **		e -- current envelope (for e->e_id).
1792 **		state -- return state word.
1793 **
1794 **	Returns:
1795 **		response string (may be NULL)
1796 */
1797 
1798 static char *
1799 milter_send_command(m, command, data, sz, e, state)
1800 	struct milter *m;
1801 	char command;
1802 	void *data;
1803 	ssize_t sz;
1804 	ENVELOPE *e;
1805 	char *state;
1806 {
1807 	char rcmd;
1808 	ssize_t rlen;
1809 	unsigned long skipflag;
1810 	char *action;
1811 	char *defresponse;
1812 	char *response;
1813 
1814 	if (tTd(64, 10))
1815 		sm_dprintf("milter_send_command(%s): cmd %c len %ld\n",
1816 			m->mf_name, (char) command, (long) sz);
1817 
1818 	/* find skip flag and default failure */
1819 	switch (command)
1820 	{
1821 	  case SMFIC_CONNECT:
1822 		skipflag = SMFIP_NOCONNECT;
1823 		action = "connect";
1824 		defresponse = "554 Command rejected";
1825 		break;
1826 
1827 	  case SMFIC_HELO:
1828 		skipflag = SMFIP_NOHELO;
1829 		action = "helo";
1830 		defresponse = "550 Command rejected";
1831 		break;
1832 
1833 	  case SMFIC_MAIL:
1834 		skipflag = SMFIP_NOMAIL;
1835 		action = "mail";
1836 		defresponse = "550 5.7.1 Command rejected";
1837 		break;
1838 
1839 	  case SMFIC_RCPT:
1840 		skipflag = SMFIP_NORCPT;
1841 		action = "rcpt";
1842 		defresponse = "550 5.7.1 Command rejected";
1843 		break;
1844 
1845 	  case SMFIC_HEADER:
1846 		skipflag = SMFIP_NOHDRS;
1847 		action = "header";
1848 		defresponse = "550 5.7.1 Command rejected";
1849 		break;
1850 
1851 	  case SMFIC_BODY:
1852 		skipflag = SMFIP_NOBODY;
1853 		action = "body";
1854 		defresponse = "554 5.7.1 Command rejected";
1855 		break;
1856 
1857 	  case SMFIC_EOH:
1858 		skipflag = SMFIP_NOEOH;
1859 		action = "eoh";
1860 		defresponse = "550 5.7.1 Command rejected";
1861 		break;
1862 
1863 	  case SMFIC_BODYEOB:
1864 	  case SMFIC_OPTNEG:
1865 	  case SMFIC_MACRO:
1866 	  case SMFIC_ABORT:
1867 	  case SMFIC_QUIT:
1868 		/* NOTE: not handled by milter_send_command() */
1869 		/* FALLTHROUGH */
1870 
1871 	  default:
1872 		skipflag = 0;
1873 		action = "default";
1874 		defresponse = "550 5.7.1 Command rejected";
1875 		break;
1876 	}
1877 
1878 	/* check if filter wants this command */
1879 	if (skipflag != 0 &&
1880 	    bitset(skipflag, m->mf_pflags))
1881 		return NULL;
1882 
1883 	/* send the command to the filter */
1884 	(void) milter_write(m, command, data, sz,
1885 			    m->mf_timeout[SMFTO_WRITE], e);
1886 	if (m->mf_state == SMFS_ERROR)
1887 	{
1888 		MILTER_CHECK_ERROR(return NULL);
1889 		return NULL;
1890 	}
1891 
1892 	/* get the response from the filter */
1893 	response = milter_read(m, &rcmd, &rlen,
1894 			       m->mf_timeout[SMFTO_READ], e);
1895 	if (m->mf_state == SMFS_ERROR)
1896 	{
1897 		MILTER_CHECK_ERROR(return NULL);
1898 		return NULL;
1899 	}
1900 
1901 	if (tTd(64, 10))
1902 		sm_dprintf("milter_send_command(%s): returned %c\n",
1903 			   m->mf_name, (char) rcmd);
1904 
1905 	switch (rcmd)
1906 	{
1907 	  case SMFIR_REPLYCODE:
1908 		MILTER_CHECK_REPLYCODE(defresponse);
1909 		if (MilterLogLevel > 10)
1910 			sm_syslog(LOG_INFO, e->e_id, "milter=%s, action=%s, reject=%s",
1911 				  m->mf_name, action, response);
1912 		*state = rcmd;
1913 		break;
1914 
1915 	  case SMFIR_REJECT:
1916 		if (MilterLogLevel > 10)
1917 			sm_syslog(LOG_INFO, e->e_id, "milter=%s, action=%s, reject",
1918 				  m->mf_name, action);
1919 		*state = rcmd;
1920 		break;
1921 
1922 	  case SMFIR_DISCARD:
1923 		if (MilterLogLevel > 10)
1924 			sm_syslog(LOG_INFO, e->e_id, "milter=%s, action=%s, discard",
1925 				  m->mf_name, action);
1926 		*state = rcmd;
1927 		break;
1928 
1929 	  case SMFIR_TEMPFAIL:
1930 		if (MilterLogLevel > 10)
1931 			sm_syslog(LOG_INFO, e->e_id, "milter=%s, action=%s, tempfail",
1932 				  m->mf_name, action);
1933 		*state = rcmd;
1934 		break;
1935 
1936 	  case SMFIR_ACCEPT:
1937 		/* this filter is done with message/connection */
1938 		if (command == SMFIC_HELO ||
1939 		    command == SMFIC_CONNECT)
1940 			m->mf_state = SMFS_CLOSABLE;
1941 		else
1942 			m->mf_state = SMFS_DONE;
1943 		if (MilterLogLevel > 10)
1944 			sm_syslog(LOG_INFO, e->e_id, "milter=%s, action=%s, accepted",
1945 				  m->mf_name, action);
1946 		break;
1947 
1948 	  case SMFIR_CONTINUE:
1949 		/* if MAIL command is ok, filter is in message state */
1950 		if (command == SMFIC_MAIL)
1951 			m->mf_state = SMFS_INMSG;
1952 		if (MilterLogLevel > 12)
1953 			sm_syslog(LOG_INFO, e->e_id, "milter=%s, action=%s, continue",
1954 				  m->mf_name, action);
1955 		break;
1956 
1957 	  default:
1958 		/* Invalid response to command */
1959 		if (MilterLogLevel > 0)
1960 			sm_syslog(LOG_ERR, e->e_id,
1961 				  "milter_send_command(%s): action=%s returned bogus response %c",
1962 				  m->mf_name, action, rcmd);
1963 		milter_error(m, e);
1964 		break;
1965 	}
1966 
1967 	if (*state != SMFIR_REPLYCODE &&
1968 	    response != NULL)
1969 	{
1970 		sm_free(response); /* XXX */
1971 		response = NULL;
1972 	}
1973 	return response;
1974 }
1975 
1976 /*
1977 **  MILTER_COMMAND -- send a command and return the response for each filter
1978 **
1979 **	Parameters:
1980 **		command -- command to send.
1981 **		data -- optional command data.
1982 **		sz -- length of buf.
1983 **		macros -- macros to send for filter smfi_getsymval().
1984 **		e -- current envelope (for macro access).
1985 **		state -- return state word.
1986 **
1987 **	Returns:
1988 **		response string (may be NULL)
1989 */
1990 
1991 static char *
1992 milter_command(command, data, sz, macros, e, state)
1993 	char command;
1994 	void *data;
1995 	ssize_t sz;
1996 	char **macros;
1997 	ENVELOPE *e;
1998 	char *state;
1999 {
2000 	int i;
2001 	char *response = NULL;
2002 	time_t tn = 0;
2003 
2004 	if (tTd(64, 10))
2005 		sm_dprintf("milter_command: cmd %c len %ld\n",
2006 			(char) command, (long) sz);
2007 
2008 	*state = SMFIR_CONTINUE;
2009 	for (i = 0; InputFilters[i] != NULL; i++)
2010 	{
2011 		struct milter *m = InputFilters[i];
2012 
2013 		/* previous problem? */
2014 		if (m->mf_state == SMFS_ERROR)
2015 		{
2016 			MILTER_CHECK_ERROR(continue);
2017 			break;
2018 		}
2019 
2020 		/* sanity check */
2021 		if (m->mf_sock < 0 ||
2022 		    (m->mf_state != SMFS_OPEN && m->mf_state != SMFS_INMSG))
2023 			continue;
2024 
2025 		/* send macros (regardless of whether we send command) */
2026 		if (macros != NULL && macros[0] != NULL)
2027 		{
2028 			milter_send_macros(m, macros, command, e);
2029 			if (m->mf_state == SMFS_ERROR)
2030 			{
2031 				MILTER_CHECK_ERROR(continue);
2032 				break;
2033 			}
2034 		}
2035 
2036 		if (MilterLogLevel > 21)
2037 			tn = curtime();
2038 
2039 		response = milter_send_command(m, command, data, sz, e, state);
2040 
2041 		if (MilterLogLevel > 21)
2042 		{
2043 			/* log the time it took for the command per filter */
2044 			sm_syslog(LOG_INFO, e->e_id,
2045 				  "Milter (%s): time command (%c), %d",
2046 				  m->mf_name, command, (int) (tn - curtime()));
2047 		}
2048 
2049 		if (*state != SMFIR_CONTINUE)
2050 			break;
2051 	}
2052 	return response;
2053 }
2054 /*
2055 **  MILTER_NEGOTIATE -- get version and flags from filter
2056 **
2057 **	Parameters:
2058 **		m -- milter filter structure.
2059 **		e -- current envelope.
2060 **
2061 **	Returns:
2062 **		0 on success, -1 otherwise
2063 */
2064 
2065 static int
2066 milter_negotiate(m, e)
2067 	struct milter *m;
2068 	ENVELOPE *e;
2069 {
2070 	char rcmd;
2071 	mi_int32 fvers;
2072 	mi_int32 fflags;
2073 	mi_int32 pflags;
2074 	char *response;
2075 	ssize_t rlen;
2076 	char data[MILTER_OPTLEN];
2077 
2078 	/* sanity check */
2079 	if (m->mf_sock < 0 || m->mf_state != SMFS_OPEN)
2080 	{
2081 		if (MilterLogLevel > 0)
2082 			sm_syslog(LOG_ERR, e->e_id,
2083 				  "Milter (%s): negotiate, impossible state",
2084 				  m->mf_name);
2085 		milter_error(m, e);
2086 		return -1;
2087 	}
2088 
2089 	fvers = htonl(SMFI_VERSION);
2090 	fflags = htonl(SMFI_CURR_ACTS);
2091 	pflags = htonl(SMFI_CURR_PROT);
2092 	(void) memcpy(data, (char *) &fvers, MILTER_LEN_BYTES);
2093 	(void) memcpy(data + MILTER_LEN_BYTES,
2094 		      (char *) &fflags, MILTER_LEN_BYTES);
2095 	(void) memcpy(data + (MILTER_LEN_BYTES * 2),
2096 		      (char *) &pflags, MILTER_LEN_BYTES);
2097 	(void) milter_write(m, SMFIC_OPTNEG, data, sizeof data,
2098 			    m->mf_timeout[SMFTO_WRITE], e);
2099 
2100 	if (m->mf_state == SMFS_ERROR)
2101 		return -1;
2102 
2103 	response = milter_read(m, &rcmd, &rlen, m->mf_timeout[SMFTO_READ], e);
2104 	if (m->mf_state == SMFS_ERROR)
2105 		return -1;
2106 
2107 	if (rcmd != SMFIC_OPTNEG)
2108 	{
2109 		if (tTd(64, 5))
2110 			sm_dprintf("milter_negotiate(%s): returned %c instead of %c\n",
2111 				m->mf_name, rcmd, SMFIC_OPTNEG);
2112 		if (MilterLogLevel > 0)
2113 			sm_syslog(LOG_ERR, e->e_id,
2114 				  "Milter (%s): negotiate: returned %c instead of %c",
2115 				  m->mf_name, rcmd, SMFIC_OPTNEG);
2116 		if (response != NULL)
2117 			sm_free(response); /* XXX */
2118 		milter_error(m, e);
2119 		return -1;
2120 	}
2121 
2122 	/* Make sure we have enough bytes for the version */
2123 	if (response == NULL || rlen < MILTER_LEN_BYTES)
2124 	{
2125 		if (tTd(64, 5))
2126 			sm_dprintf("milter_negotiate(%s): did not return valid info\n",
2127 				m->mf_name);
2128 		if (MilterLogLevel > 0)
2129 			sm_syslog(LOG_ERR, e->e_id,
2130 				  "Milter (%s): negotiate: did not return valid info",
2131 				  m->mf_name);
2132 		if (response != NULL)
2133 			sm_free(response); /* XXX */
2134 		milter_error(m, e);
2135 		return -1;
2136 	}
2137 
2138 	/* extract information */
2139 	(void) memcpy((char *) &fvers, response, MILTER_LEN_BYTES);
2140 
2141 	/* Now make sure we have enough for the feature bitmap */
2142 	if (rlen != MILTER_OPTLEN)
2143 	{
2144 		if (tTd(64, 5))
2145 			sm_dprintf("milter_negotiate(%s): did not return enough info\n",
2146 				m->mf_name);
2147 		if (MilterLogLevel > 0)
2148 			sm_syslog(LOG_ERR, e->e_id,
2149 				  "Milter (%s): negotiate: did not return enough info",
2150 				  m->mf_name);
2151 		if (response != NULL)
2152 			sm_free(response); /* XXX */
2153 		milter_error(m, e);
2154 		return -1;
2155 	}
2156 
2157 	(void) memcpy((char *) &fflags, response + MILTER_LEN_BYTES,
2158 		      MILTER_LEN_BYTES);
2159 	(void) memcpy((char *) &pflags, response + (MILTER_LEN_BYTES * 2),
2160 		      MILTER_LEN_BYTES);
2161 	sm_free(response); /* XXX */
2162 	response = NULL;
2163 
2164 	m->mf_fvers = ntohl(fvers);
2165 	m->mf_fflags = ntohl(fflags);
2166 	m->mf_pflags = ntohl(pflags);
2167 
2168 	/* check for version compatibility */
2169 	if (m->mf_fvers == 1 ||
2170 	    m->mf_fvers > SMFI_VERSION)
2171 	{
2172 		if (tTd(64, 5))
2173 			sm_dprintf("milter_negotiate(%s): version %d != MTA milter version %d\n",
2174 				m->mf_name, m->mf_fvers, SMFI_VERSION);
2175 		if (MilterLogLevel > 0)
2176 			sm_syslog(LOG_ERR, e->e_id,
2177 				  "Milter (%s): negotiate: version %d != MTA milter version %d",
2178 				  m->mf_name, m->mf_fvers, SMFI_VERSION);
2179 		milter_error(m, e);
2180 		return -1;
2181 	}
2182 
2183 	/* check for filter feature mismatch */
2184 	if ((m->mf_fflags & SMFI_CURR_ACTS) != m->mf_fflags)
2185 	{
2186 		if (tTd(64, 5))
2187 			sm_dprintf("milter_negotiate(%s): filter abilities 0x%x != MTA milter abilities 0x%lx\n",
2188 				m->mf_name, m->mf_fflags,
2189 				SMFI_CURR_ACTS);
2190 		if (MilterLogLevel > 0)
2191 			sm_syslog(LOG_ERR, e->e_id,
2192 				  "Milter (%s): negotiate: filter abilities 0x%x != MTA milter abilities 0x%lx",
2193 				  m->mf_name, m->mf_fflags,
2194 				  (unsigned long) SMFI_CURR_ACTS);
2195 		milter_error(m, e);
2196 		return -1;
2197 	}
2198 
2199 	/* check for protocol feature mismatch */
2200 	if ((m->mf_pflags & SMFI_CURR_PROT) != m->mf_pflags)
2201 	{
2202 		if (tTd(64, 5))
2203 			sm_dprintf("milter_negotiate(%s): protocol abilities 0x%x != MTA milter abilities 0x%lx\n",
2204 				m->mf_name, m->mf_pflags,
2205 				(unsigned long) SMFI_CURR_PROT);
2206 		if (MilterLogLevel > 0)
2207 			sm_syslog(LOG_ERR, e->e_id,
2208 				  "Milter (%s): negotiate: protocol abilities 0x%x != MTA milter abilities 0x%lx",
2209 				  m->mf_name, m->mf_pflags,
2210 				  (unsigned long) SMFI_CURR_PROT);
2211 		milter_error(m, e);
2212 		return -1;
2213 	}
2214 
2215 	if (tTd(64, 5))
2216 		sm_dprintf("milter_negotiate(%s): version %u, fflags 0x%x, pflags 0x%x\n",
2217 			m->mf_name, m->mf_fvers, m->mf_fflags, m->mf_pflags);
2218 	return 0;
2219 }
2220 /*
2221 **  MILTER_PER_CONNECTION_CHECK -- checks on per-connection commands
2222 **
2223 **	Reduce code duplication by putting these checks in one place
2224 **
2225 **	Parameters:
2226 **		e -- current envelope.
2227 **
2228 **	Returns:
2229 **		none
2230 */
2231 
2232 static void
2233 milter_per_connection_check(e)
2234 	ENVELOPE *e;
2235 {
2236 	int i;
2237 
2238 	/* see if we are done with any of the filters */
2239 	for (i = 0; InputFilters[i] != NULL; i++)
2240 	{
2241 		struct milter *m = InputFilters[i];
2242 
2243 		if (m->mf_state == SMFS_CLOSABLE)
2244 			milter_quit_filter(m, e);
2245 	}
2246 }
2247 /*
2248 **  MILTER_ERROR -- Put a milter filter into error state
2249 **
2250 **	Parameters:
2251 **		m -- the broken filter.
2252 **
2253 **	Returns:
2254 **		none
2255 */
2256 
2257 static void
2258 milter_error(m, e)
2259 	struct milter *m;
2260 	ENVELOPE *e;
2261 {
2262 	/*
2263 	**  We could send a quit here but
2264 	**  we may have gotten here due to
2265 	**  an I/O error so we don't want
2266 	**  to try to make things worse.
2267 	*/
2268 
2269 	if (m->mf_sock >= 0)
2270 	{
2271 		(void) close(m->mf_sock);
2272 		m->mf_sock = -1;
2273 	}
2274 	m->mf_state = SMFS_ERROR;
2275 
2276 	if (MilterLogLevel > 0)
2277 		sm_syslog(LOG_INFO, e->e_id, "Milter (%s): to error state",
2278 			  m->mf_name);
2279 }
2280 /*
2281 **  MILTER_HEADERS -- send headers to a single milter filter
2282 **
2283 **	Parameters:
2284 **		m -- current filter.
2285 **		e -- current envelope.
2286 **		state -- return state from response.
2287 **
2288 **	Returns:
2289 **		response string (may be NULL)
2290 */
2291 
2292 static char *
2293 milter_headers(m, e, state)
2294 	struct milter *m;
2295 	ENVELOPE *e;
2296 	char *state;
2297 {
2298 	char *response = NULL;
2299 	HDR *h;
2300 
2301 	if (MilterLogLevel > 17)
2302 		sm_syslog(LOG_INFO, e->e_id, "Milter (%s): headers, send",
2303 			  m->mf_name);
2304 
2305 	for (h = e->e_header; h != NULL; h = h->h_link)
2306 	{
2307 		char *buf;
2308 		ssize_t s;
2309 
2310 		/* don't send over deleted headers */
2311 		if (h->h_value == NULL)
2312 		{
2313 			/* strip H_USER so not counted in milter_chgheader() */
2314 			h->h_flags &= ~H_USER;
2315 			continue;
2316 		}
2317 
2318 		/* skip auto-generated */
2319 		if (!bitset(H_USER, h->h_flags))
2320 			continue;
2321 
2322 		if (tTd(64, 10))
2323 			sm_dprintf("milter_headers: %s: %s\n",
2324 				h->h_field, h->h_value);
2325 		if (MilterLogLevel > 21)
2326 			sm_syslog(LOG_INFO, e->e_id, "Milter (%s): header, %s",
2327 				  m->mf_name, h->h_field);
2328 
2329 		s = strlen(h->h_field) + 1 + strlen(h->h_value) + 1;
2330 		if (s < 0)
2331 			continue;
2332 		buf = (char *) xalloc(s);
2333 		(void) sm_snprintf(buf, s, "%s%c%s",
2334 			h->h_field, '\0', h->h_value);
2335 
2336 		/* send it over */
2337 		response = milter_send_command(m, SMFIC_HEADER, buf,
2338 					       s, e, state);
2339 		sm_free(buf); /* XXX */
2340 		if (m->mf_state == SMFS_ERROR ||
2341 		    m->mf_state == SMFS_DONE ||
2342 		    *state != SMFIR_CONTINUE)
2343 			break;
2344 	}
2345 	if (MilterLogLevel > 17)
2346 		sm_syslog(LOG_INFO, e->e_id, "Milter (%s): headers, sent",
2347 			  m->mf_name);
2348 	return response;
2349 }
2350 /*
2351 **  MILTER_BODY -- send the body to a filter
2352 **
2353 **	Parameters:
2354 **		m -- current filter.
2355 **		e -- current envelope.
2356 **		state -- return state from response.
2357 **
2358 **	Returns:
2359 **		response string (may be NULL)
2360 */
2361 
2362 static char *
2363 milter_body(m, e, state)
2364 	struct milter *m;
2365 	ENVELOPE *e;
2366 	char *state;
2367 {
2368 	char bufchar = '\0';
2369 	char prevchar = '\0';
2370 	int c;
2371 	char *response = NULL;
2372 	char *bp;
2373 	char buf[MILTER_CHUNK_SIZE];
2374 
2375 	if (tTd(64, 10))
2376 		sm_dprintf("milter_body\n");
2377 
2378 	if (bfrewind(e->e_dfp) < 0)
2379 	{
2380 		ExitStat = EX_IOERR;
2381 		*state = SMFIR_TEMPFAIL;
2382 		syserr("milter_body: %s/%cf%s: rewind error",
2383 		       qid_printqueue(e->e_qgrp, e->e_qdir),
2384 		       DATAFL_LETTER, e->e_id);
2385 		return NULL;
2386 	}
2387 
2388 	if (MilterLogLevel > 17)
2389 		sm_syslog(LOG_INFO, e->e_id, "Milter (%s): body, send",
2390 			  m->mf_name);
2391 	bp = buf;
2392 	while ((c = sm_io_getc(e->e_dfp, SM_TIME_DEFAULT)) != SM_IO_EOF)
2393 	{
2394 		/*  Change LF to CRLF */
2395 		if (c == '\n')
2396 		{
2397 			/* Not a CRLF already? */
2398 			if (prevchar != '\r')
2399 			{
2400 				/* Room for CR now? */
2401 				if (bp + 2 > &buf[sizeof buf])
2402 				{
2403 					/* No room, buffer LF */
2404 					bufchar = c;
2405 
2406 					/* and send CR now */
2407 					c = '\r';
2408 				}
2409 				else
2410 				{
2411 					/* Room to do it now */
2412 					*bp++ = '\r';
2413 					prevchar = '\r';
2414 				}
2415 			}
2416 		}
2417 		*bp++ = (char) c;
2418 		prevchar = c;
2419 		if (bp >= &buf[sizeof buf])
2420 		{
2421 			/* send chunk */
2422 			response = milter_send_command(m, SMFIC_BODY, buf,
2423 						       bp - buf, e, state);
2424 			bp = buf;
2425 			if (bufchar != '\0')
2426 			{
2427 				*bp++ = bufchar;
2428 				bufchar = '\0';
2429 				prevchar = bufchar;
2430 			}
2431 		}
2432 		if (m->mf_state == SMFS_ERROR ||
2433 		    m->mf_state == SMFS_DONE ||
2434 		    *state != SMFIR_CONTINUE)
2435 			break;
2436 	}
2437 
2438 	/* check for read errors */
2439 	if (sm_io_error(e->e_dfp))
2440 	{
2441 		ExitStat = EX_IOERR;
2442 		if (*state == SMFIR_CONTINUE ||
2443 		    *state == SMFIR_ACCEPT)
2444 		{
2445 			*state = SMFIR_TEMPFAIL;
2446 			if (response != NULL)
2447 			{
2448 				sm_free(response); /* XXX */
2449 				response = NULL;
2450 			}
2451 		}
2452 		syserr("milter_body: %s/%cf%s: read error",
2453 		       qid_printqueue(e->e_qgrp, e->e_qdir),
2454 		       DATAFL_LETTER, e->e_id);
2455 		return response;
2456 	}
2457 
2458 	/* send last body chunk */
2459 	if (bp > buf &&
2460 	    m->mf_state != SMFS_ERROR &&
2461 	    m->mf_state != SMFS_DONE &&
2462 	    *state == SMFIR_CONTINUE)
2463 	{
2464 		/* send chunk */
2465 		response = milter_send_command(m, SMFIC_BODY, buf, bp - buf,
2466 					       e, state);
2467 		bp = buf;
2468 	}
2469 	if (MilterLogLevel > 17)
2470 		sm_syslog(LOG_INFO, e->e_id, "Milter (%s): body, sent",
2471 			  m->mf_name);
2472 	return response;
2473 }
2474 
2475 /*
2476 **  Actions
2477 */
2478 
2479 /*
2480 **  MILTER_ADDHEADER -- Add the supplied header to the message
2481 **
2482 **	Parameters:
2483 **		response -- encoded form of header/value.
2484 **		rlen -- length of response.
2485 **		e -- current envelope.
2486 **
2487 **	Returns:
2488 **		none
2489 */
2490 
2491 static void
2492 milter_addheader(response, rlen, e)
2493 	char *response;
2494 	ssize_t rlen;
2495 	ENVELOPE *e;
2496 {
2497 	char *val;
2498 	HDR *h;
2499 
2500 	if (tTd(64, 10))
2501 		sm_dprintf("milter_addheader: ");
2502 
2503 	/* sanity checks */
2504 	if (response == NULL)
2505 	{
2506 		if (tTd(64, 10))
2507 			sm_dprintf("NULL response\n");
2508 		return;
2509 	}
2510 
2511 	if (rlen < 2 || strlen(response) + 1 >= (size_t) rlen)
2512 	{
2513 		if (tTd(64, 10))
2514 			sm_dprintf("didn't follow protocol (total len)\n");
2515 		return;
2516 	}
2517 
2518 	/* Find separating NUL */
2519 	val = response + strlen(response) + 1;
2520 
2521 	/* another sanity check */
2522 	if (strlen(response) + strlen(val) + 2 != (size_t) rlen)
2523 	{
2524 		if (tTd(64, 10))
2525 			sm_dprintf("didn't follow protocol (part len)\n");
2526 		return;
2527 	}
2528 
2529 	if (*response == '\0')
2530 	{
2531 		if (tTd(64, 10))
2532 			sm_dprintf("empty field name\n");
2533 		return;
2534 	}
2535 
2536 	for (h = e->e_header; h != NULL; h = h->h_link)
2537 	{
2538 		if (sm_strcasecmp(h->h_field, response) == 0 &&
2539 		    !bitset(H_USER, h->h_flags) &&
2540 		    !bitset(H_TRACE, h->h_flags))
2541 			break;
2542 	}
2543 
2544 	/* add to e_msgsize */
2545 	e->e_msgsize += strlen(response) + 2 + strlen(val);
2546 
2547 	if (h != NULL)
2548 	{
2549 		if (tTd(64, 10))
2550 			sm_dprintf("Replace default header %s value with %s\n",
2551 				   h->h_field, val);
2552 		if (MilterLogLevel > 8)
2553 			sm_syslog(LOG_INFO, e->e_id,
2554 				  "Milter change: default header %s value with %s",
2555 				  h->h_field, val);
2556 		h->h_value = newstr(val);
2557 		h->h_flags |= H_USER;
2558 	}
2559 	else
2560 	{
2561 		if (tTd(64, 10))
2562 			sm_dprintf("Add %s: %s\n", response, val);
2563 		if (MilterLogLevel > 8)
2564 			sm_syslog(LOG_INFO, e->e_id, "Milter add: header: %s: %s",
2565 				  response, val);
2566 		addheader(newstr(response), val, H_USER, e);
2567 	}
2568 }
2569 /*
2570 **  MILTER_CHANGEHEADER -- Change the supplied header in the message
2571 **
2572 **	Parameters:
2573 **		response -- encoded form of header/index/value.
2574 **		rlen -- length of response.
2575 **		e -- current envelope.
2576 **
2577 **	Returns:
2578 **		none
2579 */
2580 
2581 static void
2582 milter_changeheader(response, rlen, e)
2583 	char *response;
2584 	ssize_t rlen;
2585 	ENVELOPE *e;
2586 {
2587 	mi_int32 i, index;
2588 	char *field, *val;
2589 	HDR *h, *sysheader;
2590 
2591 	if (tTd(64, 10))
2592 		sm_dprintf("milter_changeheader: ");
2593 
2594 	/* sanity checks */
2595 	if (response == NULL)
2596 	{
2597 		if (tTd(64, 10))
2598 			sm_dprintf("NULL response\n");
2599 		return;
2600 	}
2601 
2602 	if (rlen < 2 || strlen(response) + 1 >= (size_t) rlen)
2603 	{
2604 		if (tTd(64, 10))
2605 			sm_dprintf("didn't follow protocol (total len)\n");
2606 		return;
2607 	}
2608 
2609 	/* Find separating NUL */
2610 	(void) memcpy((char *) &i, response, MILTER_LEN_BYTES);
2611 	index = ntohl(i);
2612 	field = response + MILTER_LEN_BYTES;
2613 	val = field + strlen(field) + 1;
2614 
2615 	/* another sanity check */
2616 	if (MILTER_LEN_BYTES + strlen(field) + 1 +
2617 	    strlen(val) + 1 != (size_t) rlen)
2618 	{
2619 		if (tTd(64, 10))
2620 			sm_dprintf("didn't follow protocol (part len)\n");
2621 		return;
2622 	}
2623 
2624 	if (*field == '\0')
2625 	{
2626 		if (tTd(64, 10))
2627 			sm_dprintf("empty field name\n");
2628 		return;
2629 	}
2630 
2631 	sysheader = NULL;
2632 	for (h = e->e_header; h != NULL; h = h->h_link)
2633 	{
2634 		if (sm_strcasecmp(h->h_field, field) == 0)
2635 		{
2636 			if (bitset(H_USER, h->h_flags) &&
2637 			    --index <= 0)
2638 			{
2639 				sysheader = NULL;
2640 				break;
2641 			}
2642 			else if (!bitset(H_USER, h->h_flags) &&
2643 				 !bitset(H_TRACE, h->h_flags))
2644 			{
2645 				/*
2646 				**  DRUMS msg-fmt draft says can only have
2647 				**  multiple occurences of trace fields,
2648 				**  so make sure we replace any non-trace,
2649 				**  non-user field.
2650 				*/
2651 
2652 				sysheader = h;
2653 			}
2654 		}
2655 	}
2656 
2657 	/* if not found as user-provided header at index, use sysheader */
2658 	if (h == NULL)
2659 		h = sysheader;
2660 
2661 	if (h == NULL)
2662 	{
2663 		if (*val == '\0')
2664 		{
2665 			if (tTd(64, 10))
2666 				sm_dprintf("Delete (noop) %s:\n", field);
2667 		}
2668 		else
2669 		{
2670 			/* treat modify value with no existing header as add */
2671 			if (tTd(64, 10))
2672 				sm_dprintf("Add %s: %s\n", field, val);
2673 			addheader(newstr(field), val, H_USER, e);
2674 		}
2675 		return;
2676 	}
2677 
2678 	if (tTd(64, 10))
2679 	{
2680 		if (*val == '\0')
2681 		{
2682 			sm_dprintf("Delete%s %s: %s\n",
2683 				   h == sysheader ? " (default header)" : "",
2684 				   field,
2685 				   h->h_value == NULL ? "<NULL>" : h->h_value);
2686 		}
2687 		else
2688 		{
2689 			sm_dprintf("Change%s %s: from %s to %s\n",
2690 				   h == sysheader ? " (default header)" : "",
2691 				   field,
2692 				   h->h_value == NULL ? "<NULL>" : h->h_value,
2693 				   val);
2694 		}
2695 	}
2696 
2697 	if (MilterLogLevel > 8)
2698 	{
2699 		if (*val == '\0')
2700 		{
2701 			sm_syslog(LOG_INFO, e->e_id,
2702 				  "Milter delete: header %s %s: %s",
2703 				  h == sysheader ? " (default header)" : "",
2704 				  field,
2705 				  h->h_value == NULL ? "<NULL>" : h->h_value);
2706 		}
2707 		else
2708 		{
2709 			sm_syslog(LOG_INFO, e->e_id,
2710 				  "Milter change: header %s %s: from %s to %s",
2711 				  h == sysheader ? " (default header)" : "",
2712 				  field,
2713 				  h->h_value == NULL ? "<NULL>" : h->h_value,
2714 				  val);
2715 		}
2716 	}
2717 
2718 	if (h != sysheader && h->h_value != NULL)
2719 	{
2720 		size_t l;
2721 
2722 		l = strlen(h->h_value);
2723 		if (l > e->e_msgsize)
2724 			e->e_msgsize = 0;
2725 		else
2726 			e->e_msgsize -= l;
2727 		/* rpool, don't free: sm_free(h->h_value); XXX */
2728 	}
2729 
2730 	if (*val == '\0')
2731 	{
2732 		/* Remove "Field: " from message size */
2733 		if (h != sysheader)
2734 		{
2735 			size_t l;
2736 
2737 			l = strlen(h->h_field) + 2;
2738 			if (l > e->e_msgsize)
2739 				e->e_msgsize = 0;
2740 			else
2741 				e->e_msgsize -= l;
2742 		}
2743 		h->h_value = NULL;
2744 	}
2745 	else
2746 	{
2747 		h->h_value = newstr(val);
2748 		h->h_flags |= H_USER;
2749 		e->e_msgsize += strlen(h->h_value);
2750 	}
2751 }
2752 /*
2753 **  MILTER_ADDRCPT -- Add the supplied recipient to the message
2754 **
2755 **	Parameters:
2756 **		response -- encoded form of recipient address.
2757 **		rlen -- length of response.
2758 **		e -- current envelope.
2759 **
2760 **	Returns:
2761 **		none
2762 */
2763 
2764 static void
2765 milter_addrcpt(response, rlen, e)
2766 	char *response;
2767 	ssize_t rlen;
2768 	ENVELOPE *e;
2769 {
2770 	if (tTd(64, 10))
2771 		sm_dprintf("milter_addrcpt: ");
2772 
2773 	/* sanity checks */
2774 	if (response == NULL)
2775 	{
2776 		if (tTd(64, 10))
2777 			sm_dprintf("NULL response\n");
2778 		return;
2779 	}
2780 
2781 	if (*response == '\0' ||
2782 	    strlen(response) + 1 != (size_t) rlen)
2783 	{
2784 		if (tTd(64, 10))
2785 			sm_dprintf("didn't follow protocol (total len %d != rlen %d)\n",
2786 				   (int) strlen(response), (int) (rlen - 1));
2787 		return;
2788 	}
2789 
2790 	if (tTd(64, 10))
2791 		sm_dprintf("%s\n", response);
2792 	if (MilterLogLevel > 8)
2793 		sm_syslog(LOG_INFO, e->e_id, "Milter add: rcpt: %s", response);
2794 	(void) sendtolist(response, NULLADDR, &e->e_sendqueue, 0, e);
2795 	return;
2796 }
2797 /*
2798 **  MILTER_DELRCPT -- Delete the supplied recipient from the message
2799 **
2800 **	Parameters:
2801 **		response -- encoded form of recipient address.
2802 **		rlen -- length of response.
2803 **		e -- current envelope.
2804 **
2805 **	Returns:
2806 **		none
2807 */
2808 
2809 static void
2810 milter_delrcpt(response, rlen, e)
2811 	char *response;
2812 	ssize_t rlen;
2813 	ENVELOPE *e;
2814 {
2815 	if (tTd(64, 10))
2816 		sm_dprintf("milter_delrcpt: ");
2817 
2818 	/* sanity checks */
2819 	if (response == NULL)
2820 	{
2821 		if (tTd(64, 10))
2822 			sm_dprintf("NULL response\n");
2823 		return;
2824 	}
2825 
2826 	if (*response == '\0' ||
2827 	    strlen(response) + 1 != (size_t) rlen)
2828 	{
2829 		if (tTd(64, 10))
2830 			sm_dprintf("didn't follow protocol (total len)\n");
2831 		return;
2832 	}
2833 
2834 	if (tTd(64, 10))
2835 		sm_dprintf("%s\n", response);
2836 	if (MilterLogLevel > 8)
2837 		sm_syslog(LOG_INFO, e->e_id, "Milter delete: rcpt %s",
2838 			  response);
2839 	(void) removefromlist(response, &e->e_sendqueue, e);
2840 	return;
2841 }
2842 /*
2843 **  MILTER_REPLBODY -- Replace the current data file with new body
2844 **
2845 **	Parameters:
2846 **		response -- encoded form of new body.
2847 **		rlen -- length of response.
2848 **		newfilter -- if first time called by a new filter
2849 **		e -- current envelope.
2850 **
2851 **	Returns:
2852 **		0 upon success, -1 upon failure
2853 */
2854 
2855 static int
2856 milter_replbody(response, rlen, newfilter, e)
2857 	char *response;
2858 	ssize_t rlen;
2859 	bool newfilter;
2860 	ENVELOPE *e;
2861 {
2862 	static char prevchar;
2863 	int i;
2864 
2865 	if (tTd(64, 10))
2866 		sm_dprintf("milter_replbody\n");
2867 
2868 	/* If a new filter, reset previous character and truncate data file */
2869 	if (newfilter)
2870 	{
2871 		off_t prevsize;
2872 		char dfname[MAXPATHLEN];
2873 
2874 		(void) sm_strlcpy(dfname, queuename(e, DATAFL_LETTER),
2875 				  sizeof dfname);
2876 
2877 		/* Reset prevchar */
2878 		prevchar = '\0';
2879 
2880 		/* Get the current data file information */
2881 		prevsize = sm_io_getinfo(e->e_dfp, SM_IO_WHAT_SIZE, NULL);
2882 		if (prevsize < 0)
2883 			prevsize = 0;
2884 
2885 		/* truncate current data file */
2886 		if (sm_io_getinfo(e->e_dfp, SM_IO_WHAT_ISTYPE, BF_FILE_TYPE))
2887 		{
2888 			if (sm_io_setinfo(e->e_dfp, SM_BF_TRUNCATE, NULL) < 0)
2889 			{
2890 				MILTER_DF_ERROR("milter_replbody: sm_io truncate %s: %s");
2891 				return -1;
2892 			}
2893 		}
2894 		else
2895 		{
2896 			int err;
2897 
2898 # if NOFTRUNCATE
2899 			/* XXX: Not much we can do except rewind it */
2900 			err = sm_io_error(e->e_dfp);
2901 			(void) sm_io_flush(e->e_dfp, SM_TIME_DEFAULT);
2902 
2903 			/*
2904 			**  Clear error if tried to fflush()
2905 			**  a read-only file pointer and
2906 			**  there wasn't a previous error.
2907 			*/
2908 
2909 			if (err == 0)
2910 				sm_io_clearerr(e->e_dfp);
2911 
2912 			/* errno is set implicitly by fseek() before return */
2913 			err = sm_io_seek(e->e_dfp, SM_TIME_DEFAULT,
2914 					 0, SEEK_SET);
2915 # else /* NOFTRUNCATE */
2916 			err = ftruncate(sm_io_getinfo(e->e_dfp,
2917 						      SM_IO_WHAT_FD, NULL),
2918 					0);
2919 # endif /* NOFTRUNCATE */
2920 			if (err < 0)
2921 			{
2922 				MILTER_DF_ERROR("milter_replbody: sm_io ftruncate %s: %s");
2923 				return -1;
2924 			}
2925 		}
2926 
2927 		if (prevsize > e->e_msgsize)
2928 			e->e_msgsize = 0;
2929 		else
2930 			e->e_msgsize -= prevsize;
2931 	}
2932 
2933 	if (newfilter && MilterLogLevel > 8)
2934 		sm_syslog(LOG_INFO, e->e_id, "Milter message: body replaced");
2935 
2936 	if (response == NULL)
2937 	{
2938 		/* Flush the buffered '\r' */
2939 		if (prevchar == '\r')
2940 		{
2941 			(void) sm_io_putc(e->e_dfp, SM_TIME_DEFAULT, prevchar);
2942 			e->e_msgsize++;
2943 		}
2944 		return 0;
2945 	}
2946 
2947 	for (i = 0; i < rlen; i++)
2948 	{
2949 		/* Buffered char from last chunk */
2950 		if (i == 0 && prevchar == '\r')
2951 		{
2952 			/* Not CRLF, output prevchar */
2953 			if (response[i] != '\n')
2954 			{
2955 				(void) sm_io_putc(e->e_dfp, SM_TIME_DEFAULT,
2956 						  prevchar);
2957 				e->e_msgsize++;
2958 			}
2959 			prevchar = '\0';
2960 		}
2961 
2962 		/* Turn CRLF into LF */
2963 		if (response[i] == '\r')
2964 		{
2965 			/* check if at end of chunk */
2966 			if (i + 1 < rlen)
2967 			{
2968 				/* If LF, strip CR */
2969 				if (response[i + 1] == '\n')
2970 					i++;
2971 			}
2972 			else
2973 			{
2974 				/* check next chunk */
2975 				prevchar = '\r';
2976 				continue;
2977 			}
2978 		}
2979 		(void) sm_io_putc(e->e_dfp, SM_TIME_DEFAULT, response[i]);
2980 		e->e_msgsize++;
2981 	}
2982 	return 0;
2983 }
2984 
2985 /*
2986 **  MTA callouts
2987 */
2988 
2989 /*
2990 **  MILTER_INIT -- open and negotiate with all of the filters
2991 **
2992 **	Parameters:
2993 **		e -- current envelope.
2994 **		state -- return state from response.
2995 **
2996 **	Returns:
2997 **		true iff at least one filter is active
2998 */
2999 
3000 /* ARGSUSED */
3001 bool
3002 milter_init(e, state)
3003 	ENVELOPE *e;
3004 	char *state;
3005 {
3006 	int i;
3007 
3008 	if (tTd(64, 10))
3009 		sm_dprintf("milter_init\n");
3010 
3011 	*state = SMFIR_CONTINUE;
3012 	if (InputFilters[0] == NULL)
3013 	{
3014 		if (MilterLogLevel > 10)
3015 			sm_syslog(LOG_INFO, e->e_id,
3016 				  "Milter: no active filter");
3017 		return false;
3018 	}
3019 
3020 	for (i = 0; InputFilters[i] != NULL; i++)
3021 	{
3022 		struct milter *m = InputFilters[i];
3023 
3024 		m->mf_sock = milter_open(m, false, e);
3025 		if (m->mf_state == SMFS_ERROR)
3026 		{
3027 			MILTER_CHECK_ERROR(continue);
3028 			break;
3029 		}
3030 
3031 		if (m->mf_sock < 0 ||
3032 		    milter_negotiate(m, e) < 0 ||
3033 		    m->mf_state == SMFS_ERROR)
3034 		{
3035 			if (tTd(64, 5))
3036 				sm_dprintf("milter_init(%s): failed to %s\n",
3037 					   m->mf_name,
3038 					   m->mf_sock < 0 ? "open" :
3039 							    "negotiate");
3040 			if (MilterLogLevel > 0)
3041 				sm_syslog(LOG_ERR, e->e_id,
3042 					  "Milter (%s): init failed to %s",
3043 					  m->mf_name,
3044 					  m->mf_sock < 0 ? "open" :
3045 							   "negotiate");
3046 
3047 			/* if negotation failure, close socket */
3048 			milter_error(m, e);
3049 			MILTER_CHECK_ERROR(continue);
3050 		}
3051 		if (MilterLogLevel > 9)
3052 			sm_syslog(LOG_INFO, e->e_id,
3053 				  "Milter (%s): init success to %s",
3054 				  m->mf_name,
3055 				  m->mf_sock < 0 ? "open" : "negotiate");
3056 	}
3057 
3058 	/*
3059 	**  If something temp/perm failed with one of the filters,
3060 	**  we won't be using any of them, so clear any existing
3061 	**  connections.
3062 	*/
3063 
3064 	if (*state != SMFIR_CONTINUE)
3065 		milter_quit(e);
3066 
3067 	return true;
3068 }
3069 /*
3070 **  MILTER_CONNECT -- send connection info to milter filters
3071 **
3072 **	Parameters:
3073 **		hostname -- hostname of remote machine.
3074 **		addr -- address of remote machine.
3075 **		e -- current envelope.
3076 **		state -- return state from response.
3077 **
3078 **	Returns:
3079 **		response string (may be NULL)
3080 */
3081 
3082 char *
3083 milter_connect(hostname, addr, e, state)
3084 	char *hostname;
3085 	SOCKADDR addr;
3086 	ENVELOPE *e;
3087 	char *state;
3088 {
3089 	char family;
3090 	unsigned short port;
3091 	char *buf, *bp;
3092 	char *response;
3093 	char *sockinfo = NULL;
3094 	ssize_t s;
3095 # if NETINET6
3096 	char buf6[INET6_ADDRSTRLEN];
3097 # endif /* NETINET6 */
3098 
3099 	if (tTd(64, 10))
3100 		sm_dprintf("milter_connect(%s)\n", hostname);
3101 	if (MilterLogLevel > 9)
3102 		sm_syslog(LOG_INFO, e->e_id, "Milter: connect to filters");
3103 
3104 	/* gather data */
3105 	switch (addr.sa.sa_family)
3106 	{
3107 # if NETUNIX
3108 	  case AF_UNIX:
3109 		family = SMFIA_UNIX;
3110 		port = htons(0);
3111 		sockinfo = addr.sunix.sun_path;
3112 		break;
3113 # endif /* NETUNIX */
3114 
3115 # if NETINET
3116 	  case AF_INET:
3117 		family = SMFIA_INET;
3118 		port = addr.sin.sin_port;
3119 		sockinfo = (char *) inet_ntoa(addr.sin.sin_addr);
3120 		break;
3121 # endif /* NETINET */
3122 
3123 # if NETINET6
3124 	  case AF_INET6:
3125 		if (IN6_IS_ADDR_V4MAPPED(&addr.sin6.sin6_addr))
3126 			family = SMFIA_INET;
3127 		else
3128 			family = SMFIA_INET6;
3129 		port = addr.sin6.sin6_port;
3130 		sockinfo = anynet_ntop(&addr.sin6.sin6_addr, buf6,
3131 				       sizeof buf6);
3132 		if (sockinfo == NULL)
3133 			sockinfo = "";
3134 		break;
3135 # endif /* NETINET6 */
3136 
3137 	  default:
3138 		family = SMFIA_UNKNOWN;
3139 		break;
3140 	}
3141 
3142 	s = strlen(hostname) + 1 + sizeof(family);
3143 	if (family != SMFIA_UNKNOWN)
3144 		s += sizeof(port) + strlen(sockinfo) + 1;
3145 
3146 	buf = (char *) xalloc(s);
3147 	bp = buf;
3148 
3149 	/* put together data */
3150 	(void) memcpy(bp, hostname, strlen(hostname));
3151 	bp += strlen(hostname);
3152 	*bp++ = '\0';
3153 	(void) memcpy(bp, &family, sizeof family);
3154 	bp += sizeof family;
3155 	if (family != SMFIA_UNKNOWN)
3156 	{
3157 		(void) memcpy(bp, &port, sizeof port);
3158 		bp += sizeof port;
3159 
3160 		/* include trailing '\0' */
3161 		(void) memcpy(bp, sockinfo, strlen(sockinfo) + 1);
3162 	}
3163 
3164 	response = milter_command(SMFIC_CONNECT, buf, s,
3165 				  MilterConnectMacros, e, state);
3166 	sm_free(buf); /* XXX */
3167 
3168 	/*
3169 	**  If this message connection is done for,
3170 	**  close the filters.
3171 	*/
3172 
3173 	if (*state != SMFIR_CONTINUE)
3174 	{
3175 		if (MilterLogLevel > 9)
3176 			sm_syslog(LOG_INFO, e->e_id, "Milter: connect, ending");
3177 		milter_quit(e);
3178 	}
3179 	else
3180 		milter_per_connection_check(e);
3181 
3182 	/*
3183 	**  SMFIR_REPLYCODE can't work with connect due to
3184 	**  the requirements of SMTP.  Therefore, ignore the
3185 	**  reply code text but keep the state it would reflect.
3186 	*/
3187 
3188 	if (*state == SMFIR_REPLYCODE)
3189 	{
3190 		if (response != NULL &&
3191 		    *response == '4')
3192 			*state = SMFIR_TEMPFAIL;
3193 		else
3194 			*state = SMFIR_REJECT;
3195 		if (response != NULL)
3196 		{
3197 			sm_free(response); /* XXX */
3198 			response = NULL;
3199 		}
3200 	}
3201 	return response;
3202 }
3203 /*
3204 **  MILTER_HELO -- send SMTP HELO/EHLO command info to milter filters
3205 **
3206 **	Parameters:
3207 **		helo -- argument to SMTP HELO/EHLO command.
3208 **		e -- current envelope.
3209 **		state -- return state from response.
3210 **
3211 **	Returns:
3212 **		response string (may be NULL)
3213 */
3214 
3215 char *
3216 milter_helo(helo, e, state)
3217 	char *helo;
3218 	ENVELOPE *e;
3219 	char *state;
3220 {
3221 	int i;
3222 	char *response;
3223 
3224 	if (tTd(64, 10))
3225 		sm_dprintf("milter_helo(%s)\n", helo);
3226 
3227 	/* HELO/EHLO can come at any point */
3228 	for (i = 0; InputFilters[i] != NULL; i++)
3229 	{
3230 		struct milter *m = InputFilters[i];
3231 
3232 		switch (m->mf_state)
3233 		{
3234 		  case SMFS_INMSG:
3235 			/* abort in message filters */
3236 			milter_abort_filter(m, e);
3237 			/* FALLTHROUGH */
3238 
3239 		  case SMFS_DONE:
3240 			/* reset done filters */
3241 			m->mf_state = SMFS_OPEN;
3242 			break;
3243 		}
3244 	}
3245 
3246 	response = milter_command(SMFIC_HELO, helo, strlen(helo) + 1,
3247 				  MilterHeloMacros, e, state);
3248 	milter_per_connection_check(e);
3249 	return response;
3250 }
3251 /*
3252 **  MILTER_ENVFROM -- send SMTP MAIL command info to milter filters
3253 **
3254 **	Parameters:
3255 **		args -- SMTP MAIL command args (args[0] == sender).
3256 **		e -- current envelope.
3257 **		state -- return state from response.
3258 **
3259 **	Returns:
3260 **		response string (may be NULL)
3261 */
3262 
3263 char *
3264 milter_envfrom(args, e, state)
3265 	char **args;
3266 	ENVELOPE *e;
3267 	char *state;
3268 {
3269 	int i;
3270 	char *buf, *bp;
3271 	char *response;
3272 	ssize_t s;
3273 
3274 	if (tTd(64, 10))
3275 	{
3276 		sm_dprintf("milter_envfrom:");
3277 		for (i = 0; args[i] != NULL; i++)
3278 			sm_dprintf(" %s", args[i]);
3279 		sm_dprintf("\n");
3280 	}
3281 
3282 	/* sanity check */
3283 	if (args[0] == NULL)
3284 	{
3285 		*state = SMFIR_REJECT;
3286 		if (MilterLogLevel > 10)
3287 			sm_syslog(LOG_INFO, e->e_id,
3288 				  "Milter: reject, no sender");
3289 		return NULL;
3290 	}
3291 
3292 	/* new message, so ... */
3293 	for (i = 0; InputFilters[i] != NULL; i++)
3294 	{
3295 		struct milter *m = InputFilters[i];
3296 
3297 		switch (m->mf_state)
3298 		{
3299 		  case SMFS_INMSG:
3300 			/* abort in message filters */
3301 			milter_abort_filter(m, e);
3302 			/* FALLTHROUGH */
3303 
3304 		  case SMFS_DONE:
3305 			/* reset done filters */
3306 			m->mf_state = SMFS_OPEN;
3307 			break;
3308 		}
3309 	}
3310 
3311 	/* put together data */
3312 	s = 0;
3313 	for (i = 0; args[i] != NULL; i++)
3314 		s += strlen(args[i]) + 1;
3315 
3316 	if (s < 0)
3317 	{
3318 		*state = SMFIR_TEMPFAIL;
3319 		return NULL;
3320 	}
3321 
3322 	buf = (char *) xalloc(s);
3323 	bp = buf;
3324 	for (i = 0; args[i] != NULL; i++)
3325 	{
3326 		(void) sm_strlcpy(bp, args[i], s - (bp - buf));
3327 		bp += strlen(bp) + 1;
3328 	}
3329 
3330 	if (MilterLogLevel > 14)
3331 		sm_syslog(LOG_INFO, e->e_id, "Milter: senders: %s", buf);
3332 
3333 	/* send it over */
3334 	response = milter_command(SMFIC_MAIL, buf, s,
3335 				  MilterEnvFromMacros, e, state);
3336 	sm_free(buf); /* XXX */
3337 
3338 	/*
3339 	**  If filter rejects/discards a per message command,
3340 	**  abort the other filters since we are done with the
3341 	**  current message.
3342 	*/
3343 
3344 	MILTER_CHECK_DONE_MSG();
3345 	if (MilterLogLevel > 10 && *state == SMFIR_REJECT)
3346 		sm_syslog(LOG_INFO, e->e_id, "Milter: reject, senders");
3347 	return response;
3348 }
3349 /*
3350 **  MILTER_ENVRCPT -- send SMTP RCPT command info to milter filters
3351 **
3352 **	Parameters:
3353 **		args -- SMTP MAIL command args (args[0] == recipient).
3354 **		e -- current envelope.
3355 **		state -- return state from response.
3356 **
3357 **	Returns:
3358 **		response string (may be NULL)
3359 */
3360 
3361 char *
3362 milter_envrcpt(args, e, state)
3363 	char **args;
3364 	ENVELOPE *e;
3365 	char *state;
3366 {
3367 	int i;
3368 	char *buf, *bp;
3369 	char *response;
3370 	ssize_t s;
3371 
3372 	if (tTd(64, 10))
3373 	{
3374 		sm_dprintf("milter_envrcpt:");
3375 		for (i = 0; args[i] != NULL; i++)
3376 			sm_dprintf(" %s", args[i]);
3377 		sm_dprintf("\n");
3378 	}
3379 
3380 	/* sanity check */
3381 	if (args[0] == NULL)
3382 	{
3383 		*state = SMFIR_REJECT;
3384 		if (MilterLogLevel > 10)
3385 			sm_syslog(LOG_INFO, e->e_id, "Milter: reject, no rcpt");
3386 		return NULL;
3387 	}
3388 
3389 	/* put together data */
3390 	s = 0;
3391 	for (i = 0; args[i] != NULL; i++)
3392 		s += strlen(args[i]) + 1;
3393 
3394 	if (s < 0)
3395 	{
3396 		*state = SMFIR_TEMPFAIL;
3397 		return NULL;
3398 	}
3399 
3400 	buf = (char *) xalloc(s);
3401 	bp = buf;
3402 	for (i = 0; args[i] != NULL; i++)
3403 	{
3404 		(void) sm_strlcpy(bp, args[i], s - (bp - buf));
3405 		bp += strlen(bp) + 1;
3406 	}
3407 
3408 	if (MilterLogLevel > 14)
3409 		sm_syslog(LOG_INFO, e->e_id, "Milter: rcpts: %s", buf);
3410 
3411 	/* send it over */
3412 	response = milter_command(SMFIC_RCPT, buf, s,
3413 				  MilterEnvRcptMacros, e, state);
3414 	sm_free(buf); /* XXX */
3415 	return response;
3416 }
3417 /*
3418 **  MILTER_DATA -- send message headers/body and gather final message results
3419 **
3420 **	Parameters:
3421 **		e -- current envelope.
3422 **		state -- return state from response.
3423 **
3424 **	Returns:
3425 **		response string (may be NULL)
3426 **
3427 **	Side effects:
3428 **		- Uses e->e_dfp for access to the body
3429 **		- Can call the various milter action routines to
3430 **		  modify the envelope or message.
3431 */
3432 
3433 # define MILTER_CHECK_RESULTS() \
3434 	if (*state == SMFIR_ACCEPT || \
3435 	    m->mf_state == SMFS_DONE || \
3436 	    m->mf_state == SMFS_ERROR) \
3437 	{ \
3438 		if (m->mf_state != SMFS_ERROR) \
3439 			m->mf_state = SMFS_DONE; \
3440 		continue;	/* to next filter */ \
3441 	} \
3442 	if (*state != SMFIR_CONTINUE) \
3443 	{ \
3444 		m->mf_state = SMFS_DONE; \
3445 		goto finishup; \
3446 	}
3447 
3448 char *
3449 milter_data(e, state)
3450 	ENVELOPE *e;
3451 	char *state;
3452 {
3453 	bool replbody = false;		/* milter_replbody() called? */
3454 	bool replfailed = false;	/* milter_replbody() failed? */
3455 	bool rewind = false;		/* rewind data file? */
3456 	bool dfopen = false;		/* data file open for writing? */
3457 	bool newfilter;			/* reset on each new filter */
3458 	char rcmd;
3459 	int i;
3460 	int save_errno;
3461 	char *response = NULL;
3462 	time_t eomsent;
3463 	ssize_t rlen;
3464 
3465 	if (tTd(64, 10))
3466 		sm_dprintf("milter_data\n");
3467 
3468 	*state = SMFIR_CONTINUE;
3469 
3470 	/*
3471 	**  XXX: Should actually send body chunks to each filter
3472 	**  a chunk at a time instead of sending the whole body to
3473 	**  each filter in turn.  However, only if the filters don't
3474 	**  change the body.
3475 	*/
3476 
3477 	for (i = 0; InputFilters[i] != NULL; i++)
3478 	{
3479 		struct milter *m = InputFilters[i];
3480 
3481 		if (*state != SMFIR_CONTINUE &&
3482 		    *state != SMFIR_ACCEPT)
3483 		{
3484 			/*
3485 			**  A previous filter has dealt with the message,
3486 			**  safe to stop processing the filters.
3487 			*/
3488 
3489 			break;
3490 		}
3491 
3492 		/* Now reset state for later evaluation */
3493 		*state = SMFIR_CONTINUE;
3494 		newfilter = true;
3495 
3496 		/* previous problem? */
3497 		if (m->mf_state == SMFS_ERROR)
3498 		{
3499 			MILTER_CHECK_ERROR(continue);
3500 			break;
3501 		}
3502 
3503 		/* sanity checks */
3504 		if (m->mf_sock < 0 ||
3505 		    (m->mf_state != SMFS_OPEN && m->mf_state != SMFS_INMSG))
3506 			continue;
3507 
3508 		m->mf_state = SMFS_INMSG;
3509 
3510 		/* check if filter wants the headers */
3511 		if (!bitset(SMFIP_NOHDRS, m->mf_pflags))
3512 		{
3513 			response = milter_headers(m, e, state);
3514 			MILTER_CHECK_RESULTS();
3515 		}
3516 
3517 		/* check if filter wants EOH */
3518 		if (!bitset(SMFIP_NOEOH, m->mf_pflags))
3519 		{
3520 			if (tTd(64, 10))
3521 				sm_dprintf("milter_data: eoh\n");
3522 
3523 			/* send it over */
3524 			response = milter_send_command(m, SMFIC_EOH, NULL, 0,
3525 						       e, state);
3526 			MILTER_CHECK_RESULTS();
3527 		}
3528 
3529 		/* check if filter wants the body */
3530 		if (!bitset(SMFIP_NOBODY, m->mf_pflags) &&
3531 		    e->e_dfp != NULL)
3532 		{
3533 			rewind = true;
3534 			response = milter_body(m, e, state);
3535 			MILTER_CHECK_RESULTS();
3536 		}
3537 
3538 		/* send the final body chunk */
3539 		(void) milter_write(m, SMFIC_BODYEOB, NULL, 0,
3540 				    m->mf_timeout[SMFTO_WRITE], e);
3541 
3542 		/* Get time EOM sent for timeout */
3543 		eomsent = curtime();
3544 
3545 		/* deal with the possibility of multiple responses */
3546 		while (*state == SMFIR_CONTINUE)
3547 		{
3548 			/* Check total timeout from EOM to final ACK/NAK */
3549 			if (m->mf_timeout[SMFTO_EOM] > 0 &&
3550 			    curtime() - eomsent >= m->mf_timeout[SMFTO_EOM])
3551 			{
3552 				if (tTd(64, 5))
3553 					sm_dprintf("milter_data(%s): EOM ACK/NAK timeout\n",
3554 						m->mf_name);
3555 				if (MilterLogLevel > 0)
3556 					sm_syslog(LOG_ERR, e->e_id,
3557 						  "milter_data(%s): EOM ACK/NAK timeout",
3558 						  m->mf_name);
3559 				milter_error(m, e);
3560 				MILTER_CHECK_ERROR(break);
3561 				break;
3562 			}
3563 
3564 			response = milter_read(m, &rcmd, &rlen,
3565 					       m->mf_timeout[SMFTO_READ], e);
3566 			if (m->mf_state == SMFS_ERROR)
3567 				break;
3568 
3569 			if (tTd(64, 10))
3570 				sm_dprintf("milter_data(%s): state %c\n",
3571 					   m->mf_name, (char) rcmd);
3572 
3573 			switch (rcmd)
3574 			{
3575 			  case SMFIR_REPLYCODE:
3576 				MILTER_CHECK_REPLYCODE("554 5.7.1 Command rejected");
3577 				if (MilterLogLevel > 12)
3578 					sm_syslog(LOG_INFO, e->e_id, "milter=%s, reject=%s",
3579 						  m->mf_name, response);
3580 				*state = rcmd;
3581 				m->mf_state = SMFS_DONE;
3582 				break;
3583 
3584 			  case SMFIR_REJECT: /* log msg at end of function */
3585 				if (MilterLogLevel > 12)
3586 					sm_syslog(LOG_INFO, e->e_id, "milter=%s, reject",
3587 						  m->mf_name);
3588 				*state = rcmd;
3589 				m->mf_state = SMFS_DONE;
3590 				break;
3591 
3592 			  case SMFIR_DISCARD:
3593 				if (MilterLogLevel > 12)
3594 					sm_syslog(LOG_INFO, e->e_id, "milter=%s, discard",
3595 						  m->mf_name);
3596 				*state = rcmd;
3597 				m->mf_state = SMFS_DONE;
3598 				break;
3599 
3600 			  case SMFIR_TEMPFAIL:
3601 				if (MilterLogLevel > 12)
3602 					sm_syslog(LOG_INFO, e->e_id, "milter=%s, tempfail",
3603 						  m->mf_name);
3604 				*state = rcmd;
3605 				m->mf_state = SMFS_DONE;
3606 				break;
3607 
3608 			  case SMFIR_CONTINUE:
3609 			  case SMFIR_ACCEPT:
3610 				/* this filter is done with message */
3611 				if (replfailed)
3612 					*state = SMFIR_TEMPFAIL;
3613 				else
3614 					*state = SMFIR_ACCEPT;
3615 				m->mf_state = SMFS_DONE;
3616 				break;
3617 
3618 			  case SMFIR_PROGRESS:
3619 				break;
3620 
3621 # if _FFR_QUARANTINE
3622 			  case SMFIR_QUARANTINE:
3623 				if (!bitset(SMFIF_QUARANTINE, m->mf_fflags))
3624 				{
3625 					if (MilterLogLevel > 9)
3626 						sm_syslog(LOG_WARNING, e->e_id,
3627 							  "milter_data(%s): lied about quarantining, honoring request anyway",
3628 							  m->mf_name);
3629 				}
3630 				if (response == NULL)
3631 					response = newstr("");
3632 				if (MilterLogLevel > 3)
3633 					sm_syslog(LOG_INFO, e->e_id,
3634 						  "milter=%s, quarantine=%s",
3635 						  m->mf_name, response);
3636 				e->e_quarmsg = sm_rpool_strdup_x(e->e_rpool,
3637 								 response);
3638 				macdefine(&e->e_macro, A_PERM,
3639 					  macid("{quarantine}"), e->e_quarmsg);
3640 				break;
3641 # endif /* _FFR_QUARANTINE */
3642 
3643 			  case SMFIR_ADDHEADER:
3644 				if (!bitset(SMFIF_ADDHDRS, m->mf_fflags))
3645 				{
3646 					if (MilterLogLevel > 9)
3647 						sm_syslog(LOG_WARNING, e->e_id,
3648 							  "milter_data(%s): lied about adding headers, honoring request anyway",
3649 							  m->mf_name);
3650 				}
3651 				milter_addheader(response, rlen, e);
3652 				break;
3653 
3654 			  case SMFIR_CHGHEADER:
3655 				if (!bitset(SMFIF_CHGHDRS, m->mf_fflags))
3656 				{
3657 					if (MilterLogLevel > 9)
3658 						sm_syslog(LOG_WARNING, e->e_id,
3659 							  "milter_data(%s): lied about changing headers, honoring request anyway",
3660 							  m->mf_name);
3661 				}
3662 				milter_changeheader(response, rlen, e);
3663 				break;
3664 
3665 			  case SMFIR_ADDRCPT:
3666 				if (!bitset(SMFIF_ADDRCPT, m->mf_fflags))
3667 				{
3668 					if (MilterLogLevel > 9)
3669 						sm_syslog(LOG_WARNING, e->e_id,
3670 							  "milter_data(%s) lied about adding recipients, honoring request anyway",
3671 							  m->mf_name);
3672 				}
3673 				milter_addrcpt(response, rlen, e);
3674 				break;
3675 
3676 			  case SMFIR_DELRCPT:
3677 				if (!bitset(SMFIF_DELRCPT, m->mf_fflags))
3678 				{
3679 					if (MilterLogLevel > 9)
3680 						sm_syslog(LOG_WARNING, e->e_id,
3681 							  "milter_data(%s): lied about removing recipients, honoring request anyway",
3682 							  m->mf_name);
3683 				}
3684 				milter_delrcpt(response, rlen, e);
3685 				break;
3686 
3687 			  case SMFIR_REPLBODY:
3688 				if (!bitset(SMFIF_MODBODY, m->mf_fflags))
3689 				{
3690 					if (MilterLogLevel > 0)
3691 						sm_syslog(LOG_ERR, e->e_id,
3692 							  "milter_data(%s): lied about replacing body, rejecting request and tempfailing message",
3693 							  m->mf_name);
3694 					replfailed = true;
3695 					break;
3696 				}
3697 
3698 				/* already failed in attempt */
3699 				if (replfailed)
3700 					break;
3701 
3702 				if (!dfopen)
3703 				{
3704 					if (milter_reopen_df(e) < 0)
3705 					{
3706 						replfailed = true;
3707 						break;
3708 					}
3709 					dfopen = true;
3710 					rewind = true;
3711 				}
3712 
3713 				if (milter_replbody(response, rlen,
3714 						    newfilter, e) < 0)
3715 					replfailed = true;
3716 				newfilter = false;
3717 				replbody = true;
3718 				break;
3719 
3720 			  default:
3721 				/* Invalid response to command */
3722 				if (MilterLogLevel > 0)
3723 					sm_syslog(LOG_ERR, e->e_id,
3724 						  "milter_data(%s): returned bogus response %c",
3725 						  m->mf_name, rcmd);
3726 				milter_error(m, e);
3727 				break;
3728 			}
3729 			if (rcmd != SMFIR_REPLYCODE && response != NULL)
3730 			{
3731 				sm_free(response); /* XXX */
3732 				response = NULL;
3733 			}
3734 
3735 			if (m->mf_state == SMFS_ERROR)
3736 				break;
3737 		}
3738 
3739 		if (replbody && !replfailed)
3740 		{
3741 			/* flush possible buffered character */
3742 			milter_replbody(NULL, 0, !replbody, e);
3743 			replbody = false;
3744 		}
3745 
3746 		if (m->mf_state == SMFS_ERROR)
3747 		{
3748 			MILTER_CHECK_ERROR(continue);
3749 			goto finishup;
3750 		}
3751 	}
3752 
3753 finishup:
3754 	/* leave things in the expected state if we touched it */
3755 	if (replfailed)
3756 	{
3757 		if (*state == SMFIR_CONTINUE ||
3758 		    *state == SMFIR_ACCEPT)
3759 		{
3760 			*state = SMFIR_TEMPFAIL;
3761 			SM_FREE_CLR(response);
3762 		}
3763 
3764 		if (dfopen)
3765 		{
3766 			(void) sm_io_close(e->e_dfp, SM_TIME_DEFAULT);
3767 			e->e_dfp = NULL;
3768 			e->e_flags &= ~EF_HAS_DF;
3769 			dfopen = false;
3770 		}
3771 		rewind = false;
3772 	}
3773 
3774 	if ((dfopen && milter_reset_df(e) < 0) ||
3775 	    (rewind && bfrewind(e->e_dfp) < 0))
3776 	{
3777 		save_errno = errno;
3778 		ExitStat = EX_IOERR;
3779 
3780 		/*
3781 		**  If filter told us to keep message but we had
3782 		**  an error, we can't really keep it, tempfail it.
3783 		*/
3784 
3785 		if (*state == SMFIR_CONTINUE ||
3786 		    *state == SMFIR_ACCEPT)
3787 		{
3788 			*state = SMFIR_TEMPFAIL;
3789 			SM_FREE_CLR(response);
3790 		}
3791 
3792 		errno = save_errno;
3793 		syserr("milter_data: %s/%cf%s: read error",
3794 		       qid_printqueue(e->e_qgrp, e->e_qdir),
3795 		       DATAFL_LETTER, e->e_id);
3796 	}
3797 
3798 	MILTER_CHECK_DONE_MSG();
3799 	if (MilterLogLevel > 10 && *state == SMFIR_REJECT)
3800 		sm_syslog(LOG_INFO, e->e_id, "Milter: reject, data");
3801 	return response;
3802 }
3803 /*
3804 **  MILTER_QUIT -- informs the filter(s) we are done and closes connection(s)
3805 **
3806 **	Parameters:
3807 **		e -- current envelope.
3808 **
3809 **	Returns:
3810 **		none
3811 */
3812 
3813 void
3814 milter_quit(e)
3815 	ENVELOPE *e;
3816 {
3817 	int i;
3818 
3819 	if (tTd(64, 10))
3820 		sm_dprintf("milter_quit(%s)\n", e->e_id);
3821 
3822 	for (i = 0; InputFilters[i] != NULL; i++)
3823 		milter_quit_filter(InputFilters[i], e);
3824 }
3825 /*
3826 **  MILTER_ABORT -- informs the filter(s) that we are aborting current message
3827 **
3828 **	Parameters:
3829 **		e -- current envelope.
3830 **
3831 **	Returns:
3832 **		none
3833 */
3834 
3835 void
3836 milter_abort(e)
3837 	ENVELOPE *e;
3838 {
3839 	int i;
3840 
3841 	if (tTd(64, 10))
3842 		sm_dprintf("milter_abort\n");
3843 
3844 	for (i = 0; InputFilters[i] != NULL; i++)
3845 	{
3846 		struct milter *m = InputFilters[i];
3847 
3848 		/* sanity checks */
3849 		if (m->mf_sock < 0 || m->mf_state != SMFS_INMSG)
3850 			continue;
3851 
3852 		milter_abort_filter(m, e);
3853 	}
3854 }
3855 #endif /* MILTER */
3856