17c478bd9Sstevel@tonic-gate /* 2445f2479Sjbeck * Copyright (c) 1998-2006 Sendmail, Inc. and its suppliers. 37c478bd9Sstevel@tonic-gate * All rights reserved. 47c478bd9Sstevel@tonic-gate * Copyright (c) 1983, 1995-1997 Eric P. Allman. All rights reserved. 57c478bd9Sstevel@tonic-gate * Copyright (c) 1988, 1993 67c478bd9Sstevel@tonic-gate * The Regents of the University of California. All rights reserved. 77c478bd9Sstevel@tonic-gate * 87c478bd9Sstevel@tonic-gate * By using this file, you agree to the terms and conditions set 97c478bd9Sstevel@tonic-gate * forth in the LICENSE file which can be found at the top level of 107c478bd9Sstevel@tonic-gate * the sendmail distribution. 117c478bd9Sstevel@tonic-gate * 127c478bd9Sstevel@tonic-gate */ 137c478bd9Sstevel@tonic-gate 147c478bd9Sstevel@tonic-gate #pragma ident "%Z%%M% %I% %E% SMI" 157c478bd9Sstevel@tonic-gate 167c478bd9Sstevel@tonic-gate #include <sendmail.h> 177c478bd9Sstevel@tonic-gate #if MILTER 187c478bd9Sstevel@tonic-gate # include <libmilter/mfapi.h> 197c478bd9Sstevel@tonic-gate # include <libmilter/mfdef.h> 207c478bd9Sstevel@tonic-gate #endif /* MILTER */ 217c478bd9Sstevel@tonic-gate 22*3ee0e492Sjbeck SM_RCSID("@(#)$Id: srvrsmtp.c,v 8.924.2.2 2006/05/31 20:56:37 ca Exp $") 237c478bd9Sstevel@tonic-gate 2449218d4fSjbeck #include <sm/time.h> 257c478bd9Sstevel@tonic-gate #include <sm/fdset.h> 267c478bd9Sstevel@tonic-gate 277c478bd9Sstevel@tonic-gate #if SASL || STARTTLS 287c478bd9Sstevel@tonic-gate # include "sfsasl.h" 297c478bd9Sstevel@tonic-gate #endif /* SASL || STARTTLS */ 307c478bd9Sstevel@tonic-gate #if SASL 317c478bd9Sstevel@tonic-gate # define ENC64LEN(l) (((l) + 2) * 4 / 3 + 1) 327c478bd9Sstevel@tonic-gate static int saslmechs __P((sasl_conn_t *, char **)); 337c478bd9Sstevel@tonic-gate #endif /* SASL */ 347c478bd9Sstevel@tonic-gate #if STARTTLS 357c478bd9Sstevel@tonic-gate # include <sysexits.h> 367c478bd9Sstevel@tonic-gate 377c478bd9Sstevel@tonic-gate static SSL_CTX *srv_ctx = NULL; /* TLS server context */ 387c478bd9Sstevel@tonic-gate static SSL *srv_ssl = NULL; /* per connection context */ 397c478bd9Sstevel@tonic-gate 407c478bd9Sstevel@tonic-gate static bool tls_ok_srv = false; 41445f2479Sjbeck #if _FFR_DM_ONE 42445f2479Sjbeck static bool NotFirstDelivery = false; 43445f2479Sjbeck #endif /* _FFR_DM_ONE */ 447c478bd9Sstevel@tonic-gate 457c478bd9Sstevel@tonic-gate extern void tls_set_verify __P((SSL_CTX *, SSL *, bool)); 467c478bd9Sstevel@tonic-gate # define TLS_VERIFY_CLIENT() tls_set_verify(srv_ctx, srv_ssl, \ 477c478bd9Sstevel@tonic-gate bitset(SRV_VRFY_CLT, features)) 487c478bd9Sstevel@tonic-gate #endif /* STARTTLS */ 497c478bd9Sstevel@tonic-gate 507c478bd9Sstevel@tonic-gate /* server features */ 517c478bd9Sstevel@tonic-gate #define SRV_NONE 0x0000 /* none... */ 527c478bd9Sstevel@tonic-gate #define SRV_OFFER_TLS 0x0001 /* offer STARTTLS */ 537c478bd9Sstevel@tonic-gate #define SRV_VRFY_CLT 0x0002 /* request a cert */ 547c478bd9Sstevel@tonic-gate #define SRV_OFFER_AUTH 0x0004 /* offer AUTH */ 557c478bd9Sstevel@tonic-gate #define SRV_OFFER_ETRN 0x0008 /* offer ETRN */ 567c478bd9Sstevel@tonic-gate #define SRV_OFFER_VRFY 0x0010 /* offer VRFY (not yet used) */ 577c478bd9Sstevel@tonic-gate #define SRV_OFFER_EXPN 0x0020 /* offer EXPN */ 587c478bd9Sstevel@tonic-gate #define SRV_OFFER_VERB 0x0040 /* offer VERB */ 597c478bd9Sstevel@tonic-gate #define SRV_OFFER_DSN 0x0080 /* offer DSN */ 607c478bd9Sstevel@tonic-gate #if PIPELINING 617c478bd9Sstevel@tonic-gate # define SRV_OFFER_PIPE 0x0100 /* offer PIPELINING */ 627c478bd9Sstevel@tonic-gate # if _FFR_NO_PIPE 637c478bd9Sstevel@tonic-gate # define SRV_NO_PIPE 0x0200 /* disable PIPELINING, sleep if used */ 647c478bd9Sstevel@tonic-gate # endif /* _FFR_NO_PIPE */ 657c478bd9Sstevel@tonic-gate #endif /* PIPELINING */ 667c478bd9Sstevel@tonic-gate #define SRV_REQ_AUTH 0x0400 /* require AUTH */ 677c478bd9Sstevel@tonic-gate #define SRV_REQ_SEC 0x0800 /* require security - equiv to AuthOptions=p */ 687c478bd9Sstevel@tonic-gate #define SRV_TMP_FAIL 0x1000 /* ruleset caused a temporary failure */ 697c478bd9Sstevel@tonic-gate 707c478bd9Sstevel@tonic-gate static unsigned int srvfeatures __P((ENVELOPE *, char *, unsigned int)); 717c478bd9Sstevel@tonic-gate 727c478bd9Sstevel@tonic-gate #define STOP_ATTACK ((time_t) -1) 737c478bd9Sstevel@tonic-gate static time_t checksmtpattack __P((volatile unsigned int *, unsigned int, 747c478bd9Sstevel@tonic-gate bool, char *, ENVELOPE *)); 75*3ee0e492Sjbeck static void mail_esmtp_args __P((char *, char *, ENVELOPE *, unsigned int)); 767c478bd9Sstevel@tonic-gate static void printvrfyaddr __P((ADDRESS *, bool, bool)); 77*3ee0e492Sjbeck static void rcpt_esmtp_args __P((ADDRESS *, char *, char *, ENVELOPE *, 78*3ee0e492Sjbeck unsigned int)); 797c478bd9Sstevel@tonic-gate static char *skipword __P((char *volatile, char *)); 807c478bd9Sstevel@tonic-gate static void setup_smtpd_io __P((void)); 817c478bd9Sstevel@tonic-gate 827c478bd9Sstevel@tonic-gate #if SASL 837c478bd9Sstevel@tonic-gate # if SASL >= 20000 847c478bd9Sstevel@tonic-gate static int reset_saslconn __P((sasl_conn_t **_conn, char *_hostname, 857c478bd9Sstevel@tonic-gate char *_remoteip, char *_localip, 867c478bd9Sstevel@tonic-gate char *_auth_id, sasl_ssf_t *_ext_ssf)); 877c478bd9Sstevel@tonic-gate 887c478bd9Sstevel@tonic-gate # define RESET_SASLCONN \ 897c478bd9Sstevel@tonic-gate do \ 907c478bd9Sstevel@tonic-gate { \ 917c478bd9Sstevel@tonic-gate result = reset_saslconn(&conn, AuthRealm, remoteip, \ 927c478bd9Sstevel@tonic-gate localip, auth_id, &ext_ssf); \ 937c478bd9Sstevel@tonic-gate if (result != SASL_OK) \ 947c478bd9Sstevel@tonic-gate sasl_ok = false; \ 957c478bd9Sstevel@tonic-gate } while (0) 967c478bd9Sstevel@tonic-gate 977c478bd9Sstevel@tonic-gate # else /* SASL >= 20000 */ 987c478bd9Sstevel@tonic-gate static int reset_saslconn __P((sasl_conn_t **_conn, char *_hostname, 997c478bd9Sstevel@tonic-gate struct sockaddr_in *_saddr_r, 1007c478bd9Sstevel@tonic-gate struct sockaddr_in *_saddr_l, 1017c478bd9Sstevel@tonic-gate sasl_external_properties_t *_ext_ssf)); 1027c478bd9Sstevel@tonic-gate # define RESET_SASLCONN \ 1037c478bd9Sstevel@tonic-gate do \ 1047c478bd9Sstevel@tonic-gate { \ 1057c478bd9Sstevel@tonic-gate result = reset_saslconn(&conn, AuthRealm, &saddr_r, \ 1067c478bd9Sstevel@tonic-gate &saddr_l, &ext_ssf); \ 1077c478bd9Sstevel@tonic-gate if (result != SASL_OK) \ 1087c478bd9Sstevel@tonic-gate sasl_ok = false; \ 1097c478bd9Sstevel@tonic-gate } while (0) 1107c478bd9Sstevel@tonic-gate 1117c478bd9Sstevel@tonic-gate # endif /* SASL >= 20000 */ 1127c478bd9Sstevel@tonic-gate #endif /* SASL */ 1137c478bd9Sstevel@tonic-gate 1147c478bd9Sstevel@tonic-gate extern ENVELOPE BlankEnvelope; 1157c478bd9Sstevel@tonic-gate 1167c478bd9Sstevel@tonic-gate #define NBADRCPTS \ 1177c478bd9Sstevel@tonic-gate do \ 1187c478bd9Sstevel@tonic-gate { \ 1197c478bd9Sstevel@tonic-gate char buf[16]; \ 1207c478bd9Sstevel@tonic-gate (void) sm_snprintf(buf, sizeof buf, "%d", \ 1217c478bd9Sstevel@tonic-gate BadRcptThrottle > 0 && n_badrcpts > BadRcptThrottle \ 1227c478bd9Sstevel@tonic-gate ? n_badrcpts - 1 : n_badrcpts); \ 1237c478bd9Sstevel@tonic-gate macdefine(&e->e_macro, A_TEMP, macid("{nbadrcpts}"), buf); \ 1247c478bd9Sstevel@tonic-gate } while (0) 1257c478bd9Sstevel@tonic-gate 1267c478bd9Sstevel@tonic-gate #define SKIP_SPACE(s) while (isascii(*s) && isspace(*s)) \ 1277c478bd9Sstevel@tonic-gate (s)++ 1287c478bd9Sstevel@tonic-gate 1297c478bd9Sstevel@tonic-gate /* 1307c478bd9Sstevel@tonic-gate ** SMTP -- run the SMTP protocol. 1317c478bd9Sstevel@tonic-gate ** 1327c478bd9Sstevel@tonic-gate ** Parameters: 1337c478bd9Sstevel@tonic-gate ** nullserver -- if non-NULL, rejection message for 1347c478bd9Sstevel@tonic-gate ** (almost) all SMTP commands. 1357c478bd9Sstevel@tonic-gate ** d_flags -- daemon flags 1367c478bd9Sstevel@tonic-gate ** e -- the envelope. 1377c478bd9Sstevel@tonic-gate ** 1387c478bd9Sstevel@tonic-gate ** Returns: 1397c478bd9Sstevel@tonic-gate ** never. 1407c478bd9Sstevel@tonic-gate ** 1417c478bd9Sstevel@tonic-gate ** Side Effects: 1427c478bd9Sstevel@tonic-gate ** Reads commands from the input channel and processes them. 1437c478bd9Sstevel@tonic-gate */ 1447c478bd9Sstevel@tonic-gate 1457c478bd9Sstevel@tonic-gate /* 1467c478bd9Sstevel@tonic-gate ** Notice: The smtp server doesn't have a session context like the client 1477c478bd9Sstevel@tonic-gate ** side has (mci). Therefore some data (session oriented) is allocated 1487c478bd9Sstevel@tonic-gate ** or assigned to the "wrong" structure (esp. STARTTLS, AUTH). 1497c478bd9Sstevel@tonic-gate ** This should be fixed in a successor version. 1507c478bd9Sstevel@tonic-gate */ 1517c478bd9Sstevel@tonic-gate 1527c478bd9Sstevel@tonic-gate struct cmd 1537c478bd9Sstevel@tonic-gate { 1547c478bd9Sstevel@tonic-gate char *cmd_name; /* command name */ 1557c478bd9Sstevel@tonic-gate int cmd_code; /* internal code, see below */ 1567c478bd9Sstevel@tonic-gate }; 1577c478bd9Sstevel@tonic-gate 1587c478bd9Sstevel@tonic-gate /* values for cmd_code */ 1597c478bd9Sstevel@tonic-gate #define CMDERROR 0 /* bad command */ 1607c478bd9Sstevel@tonic-gate #define CMDMAIL 1 /* mail -- designate sender */ 1617c478bd9Sstevel@tonic-gate #define CMDRCPT 2 /* rcpt -- designate recipient */ 1627c478bd9Sstevel@tonic-gate #define CMDDATA 3 /* data -- send message text */ 1637c478bd9Sstevel@tonic-gate #define CMDRSET 4 /* rset -- reset state */ 1647c478bd9Sstevel@tonic-gate #define CMDVRFY 5 /* vrfy -- verify address */ 1657c478bd9Sstevel@tonic-gate #define CMDEXPN 6 /* expn -- expand address */ 1667c478bd9Sstevel@tonic-gate #define CMDNOOP 7 /* noop -- do nothing */ 1677c478bd9Sstevel@tonic-gate #define CMDQUIT 8 /* quit -- close connection and die */ 1687c478bd9Sstevel@tonic-gate #define CMDHELO 9 /* helo -- be polite */ 1697c478bd9Sstevel@tonic-gate #define CMDHELP 10 /* help -- give usage info */ 1707c478bd9Sstevel@tonic-gate #define CMDEHLO 11 /* ehlo -- extended helo (RFC 1425) */ 1717c478bd9Sstevel@tonic-gate #define CMDETRN 12 /* etrn -- flush queue */ 1727c478bd9Sstevel@tonic-gate #if SASL 1737c478bd9Sstevel@tonic-gate # define CMDAUTH 13 /* auth -- SASL authenticate */ 1747c478bd9Sstevel@tonic-gate #endif /* SASL */ 1757c478bd9Sstevel@tonic-gate #if STARTTLS 1767c478bd9Sstevel@tonic-gate # define CMDSTLS 14 /* STARTTLS -- start TLS session */ 1777c478bd9Sstevel@tonic-gate #endif /* STARTTLS */ 1787c478bd9Sstevel@tonic-gate /* non-standard commands */ 1797c478bd9Sstevel@tonic-gate #define CMDVERB 17 /* verb -- go into verbose mode */ 1807c478bd9Sstevel@tonic-gate /* unimplemented commands from RFC 821 */ 1817c478bd9Sstevel@tonic-gate #define CMDUNIMPL 19 /* unimplemented rfc821 commands */ 1827c478bd9Sstevel@tonic-gate /* use this to catch and log "door handle" attempts on your system */ 1837c478bd9Sstevel@tonic-gate #define CMDLOGBOGUS 23 /* bogus command that should be logged */ 1847c478bd9Sstevel@tonic-gate /* debugging-only commands, only enabled if SMTPDEBUG is defined */ 1857c478bd9Sstevel@tonic-gate #define CMDDBGQSHOW 24 /* showq -- show send queue */ 1867c478bd9Sstevel@tonic-gate #define CMDDBGDEBUG 25 /* debug -- set debug mode */ 1877c478bd9Sstevel@tonic-gate 1887c478bd9Sstevel@tonic-gate /* 1897c478bd9Sstevel@tonic-gate ** Note: If you change this list, remember to update 'helpfile' 1907c478bd9Sstevel@tonic-gate */ 1917c478bd9Sstevel@tonic-gate 1927c478bd9Sstevel@tonic-gate static struct cmd CmdTab[] = 1937c478bd9Sstevel@tonic-gate { 1947c478bd9Sstevel@tonic-gate { "mail", CMDMAIL }, 1957c478bd9Sstevel@tonic-gate { "rcpt", CMDRCPT }, 1967c478bd9Sstevel@tonic-gate { "data", CMDDATA }, 1977c478bd9Sstevel@tonic-gate { "rset", CMDRSET }, 1987c478bd9Sstevel@tonic-gate { "vrfy", CMDVRFY }, 1997c478bd9Sstevel@tonic-gate { "expn", CMDEXPN }, 2007c478bd9Sstevel@tonic-gate { "help", CMDHELP }, 2017c478bd9Sstevel@tonic-gate { "noop", CMDNOOP }, 2027c478bd9Sstevel@tonic-gate { "quit", CMDQUIT }, 2037c478bd9Sstevel@tonic-gate { "helo", CMDHELO }, 2047c478bd9Sstevel@tonic-gate { "ehlo", CMDEHLO }, 2057c478bd9Sstevel@tonic-gate { "etrn", CMDETRN }, 2067c478bd9Sstevel@tonic-gate { "verb", CMDVERB }, 2077c478bd9Sstevel@tonic-gate { "send", CMDUNIMPL }, 2087c478bd9Sstevel@tonic-gate { "saml", CMDUNIMPL }, 2097c478bd9Sstevel@tonic-gate { "soml", CMDUNIMPL }, 2107c478bd9Sstevel@tonic-gate { "turn", CMDUNIMPL }, 2117c478bd9Sstevel@tonic-gate #if SASL 2127c478bd9Sstevel@tonic-gate { "auth", CMDAUTH, }, 2137c478bd9Sstevel@tonic-gate #endif /* SASL */ 2147c478bd9Sstevel@tonic-gate #if STARTTLS 2157c478bd9Sstevel@tonic-gate { "starttls", CMDSTLS, }, 2167c478bd9Sstevel@tonic-gate #endif /* STARTTLS */ 2177c478bd9Sstevel@tonic-gate /* remaining commands are here only to trap and log attempts to use them */ 2187c478bd9Sstevel@tonic-gate { "showq", CMDDBGQSHOW }, 2197c478bd9Sstevel@tonic-gate { "debug", CMDDBGDEBUG }, 2207c478bd9Sstevel@tonic-gate { "wiz", CMDLOGBOGUS }, 2217c478bd9Sstevel@tonic-gate 2227c478bd9Sstevel@tonic-gate { NULL, CMDERROR } 2237c478bd9Sstevel@tonic-gate }; 2247c478bd9Sstevel@tonic-gate 2257c478bd9Sstevel@tonic-gate static char *CurSmtpClient; /* who's at the other end of channel */ 2267c478bd9Sstevel@tonic-gate 2277c478bd9Sstevel@tonic-gate #ifndef MAXBADCOMMANDS 2287c478bd9Sstevel@tonic-gate # define MAXBADCOMMANDS 25 /* maximum number of bad commands */ 2297c478bd9Sstevel@tonic-gate #endif /* ! MAXBADCOMMANDS */ 2307c478bd9Sstevel@tonic-gate #ifndef MAXHELOCOMMANDS 2317c478bd9Sstevel@tonic-gate # define MAXHELOCOMMANDS 3 /* max HELO/EHLO commands before slowdown */ 2327c478bd9Sstevel@tonic-gate #endif /* ! MAXHELOCOMMANDS */ 2337c478bd9Sstevel@tonic-gate #ifndef MAXVRFYCOMMANDS 2347c478bd9Sstevel@tonic-gate # define MAXVRFYCOMMANDS 6 /* max VRFY/EXPN commands before slowdown */ 2357c478bd9Sstevel@tonic-gate #endif /* ! MAXVRFYCOMMANDS */ 2367c478bd9Sstevel@tonic-gate #ifndef MAXETRNCOMMANDS 2377c478bd9Sstevel@tonic-gate # define MAXETRNCOMMANDS 8 /* max ETRN commands before slowdown */ 2387c478bd9Sstevel@tonic-gate #endif /* ! MAXETRNCOMMANDS */ 2397c478bd9Sstevel@tonic-gate #ifndef MAXTIMEOUT 2407c478bd9Sstevel@tonic-gate # define MAXTIMEOUT (4 * 60) /* max timeout for bad commands */ 2417c478bd9Sstevel@tonic-gate #endif /* ! MAXTIMEOUT */ 2427c478bd9Sstevel@tonic-gate 2437c478bd9Sstevel@tonic-gate /* 2447c478bd9Sstevel@tonic-gate ** Maximum shift value to compute timeout for bad commands. 2457c478bd9Sstevel@tonic-gate ** This introduces an upper limit of 2^MAXSHIFT for the timeout. 2467c478bd9Sstevel@tonic-gate */ 2477c478bd9Sstevel@tonic-gate 2487c478bd9Sstevel@tonic-gate #ifndef MAXSHIFT 2497c478bd9Sstevel@tonic-gate # define MAXSHIFT 8 2507c478bd9Sstevel@tonic-gate #endif /* ! MAXSHIFT */ 2517c478bd9Sstevel@tonic-gate #if MAXSHIFT > 31 2527c478bd9Sstevel@tonic-gate ERROR _MAXSHIFT > 31 is invalid 2537c478bd9Sstevel@tonic-gate #endif /* MAXSHIFT */ 2547c478bd9Sstevel@tonic-gate 2557c478bd9Sstevel@tonic-gate 2567c478bd9Sstevel@tonic-gate #if MAXBADCOMMANDS > 0 2577c478bd9Sstevel@tonic-gate # define STOP_IF_ATTACK(r) do \ 2587c478bd9Sstevel@tonic-gate { \ 2597c478bd9Sstevel@tonic-gate if ((r) == STOP_ATTACK) \ 2607c478bd9Sstevel@tonic-gate goto stopattack; \ 2617c478bd9Sstevel@tonic-gate } while (0) 2627c478bd9Sstevel@tonic-gate 2637c478bd9Sstevel@tonic-gate #else /* MAXBADCOMMANDS > 0 */ 2647c478bd9Sstevel@tonic-gate # define STOP_IF_ATTACK(r) r 2657c478bd9Sstevel@tonic-gate #endif /* MAXBADCOMMANDS > 0 */ 2667c478bd9Sstevel@tonic-gate 2677c478bd9Sstevel@tonic-gate 2687c478bd9Sstevel@tonic-gate #if SM_HEAP_CHECK 2697c478bd9Sstevel@tonic-gate static SM_DEBUG_T DebugLeakSmtp = SM_DEBUG_INITIALIZER("leak_smtp", 2707c478bd9Sstevel@tonic-gate "@(#)$Debug: leak_smtp - trace memory leaks during SMTP processing $"); 2717c478bd9Sstevel@tonic-gate #endif /* SM_HEAP_CHECK */ 2727c478bd9Sstevel@tonic-gate 2737c478bd9Sstevel@tonic-gate typedef struct 2747c478bd9Sstevel@tonic-gate { 2757c478bd9Sstevel@tonic-gate bool sm_gotmail; /* mail command received */ 2767c478bd9Sstevel@tonic-gate unsigned int sm_nrcpts; /* number of successful RCPT commands */ 2777c478bd9Sstevel@tonic-gate bool sm_discard; 2787c478bd9Sstevel@tonic-gate #if MILTER 2797c478bd9Sstevel@tonic-gate bool sm_milterize; 2807c478bd9Sstevel@tonic-gate bool sm_milterlist; /* any filters in the list? */ 2817c478bd9Sstevel@tonic-gate #endif /* MILTER */ 2827c478bd9Sstevel@tonic-gate char *sm_quarmsg; /* carry quarantining across messages */ 2837c478bd9Sstevel@tonic-gate } SMTP_T; 2847c478bd9Sstevel@tonic-gate 2857c478bd9Sstevel@tonic-gate static bool smtp_data __P((SMTP_T *, ENVELOPE *)); 2867c478bd9Sstevel@tonic-gate 2877c478bd9Sstevel@tonic-gate #define MSG_TEMPFAIL "451 4.3.2 Please try again later" 2887c478bd9Sstevel@tonic-gate 2897c478bd9Sstevel@tonic-gate #if MILTER 2907c478bd9Sstevel@tonic-gate # define MILTER_ABORT(e) milter_abort((e)) 2917c478bd9Sstevel@tonic-gate 2927c478bd9Sstevel@tonic-gate # define MILTER_REPLY(str) \ 2937c478bd9Sstevel@tonic-gate { \ 2947c478bd9Sstevel@tonic-gate int savelogusrerrs = LogUsrErrs; \ 2957c478bd9Sstevel@tonic-gate \ 2967c478bd9Sstevel@tonic-gate switch (state) \ 2977c478bd9Sstevel@tonic-gate { \ 298445f2479Sjbeck case SMFIR_SHUTDOWN: \ 299445f2479Sjbeck if (MilterLogLevel > 3) \ 300445f2479Sjbeck { \ 301445f2479Sjbeck sm_syslog(LOG_INFO, e->e_id, \ 302445f2479Sjbeck "Milter: %s=%s, reject=421, errormode=4", \ 303445f2479Sjbeck str, addr); \ 304445f2479Sjbeck LogUsrErrs = false; \ 305445f2479Sjbeck } \ 306445f2479Sjbeck { \ 307445f2479Sjbeck bool tsave = QuickAbort; \ 308445f2479Sjbeck \ 309445f2479Sjbeck QuickAbort = false; \ 310445f2479Sjbeck usrerr("421 4.3.0 closing connection"); \ 311445f2479Sjbeck QuickAbort = tsave; \ 312445f2479Sjbeck e->e_sendqueue = NULL; \ 313445f2479Sjbeck goto doquit; \ 314445f2479Sjbeck } \ 315445f2479Sjbeck break; \ 3167c478bd9Sstevel@tonic-gate case SMFIR_REPLYCODE: \ 3177c478bd9Sstevel@tonic-gate if (MilterLogLevel > 3) \ 3187c478bd9Sstevel@tonic-gate { \ 3197c478bd9Sstevel@tonic-gate sm_syslog(LOG_INFO, e->e_id, \ 3207c478bd9Sstevel@tonic-gate "Milter: %s=%s, reject=%s", \ 3217c478bd9Sstevel@tonic-gate str, addr, response); \ 3227c478bd9Sstevel@tonic-gate LogUsrErrs = false; \ 3237c478bd9Sstevel@tonic-gate } \ 32449218d4fSjbeck if (strncmp(response, "421 ", 4) == 0 \ 32549218d4fSjbeck || strncmp(response, "421-", 4) == 0) \ 3267c478bd9Sstevel@tonic-gate { \ 3277c478bd9Sstevel@tonic-gate bool tsave = QuickAbort; \ 3287c478bd9Sstevel@tonic-gate \ 3297c478bd9Sstevel@tonic-gate QuickAbort = false; \ 3307c478bd9Sstevel@tonic-gate usrerr(response); \ 3317c478bd9Sstevel@tonic-gate QuickAbort = tsave; \ 3327c478bd9Sstevel@tonic-gate e->e_sendqueue = NULL; \ 3337c478bd9Sstevel@tonic-gate goto doquit; \ 3347c478bd9Sstevel@tonic-gate } \ 3357c478bd9Sstevel@tonic-gate else \ 3367c478bd9Sstevel@tonic-gate usrerr(response); \ 3377c478bd9Sstevel@tonic-gate break; \ 3387c478bd9Sstevel@tonic-gate \ 3397c478bd9Sstevel@tonic-gate case SMFIR_REJECT: \ 3407c478bd9Sstevel@tonic-gate if (MilterLogLevel > 3) \ 3417c478bd9Sstevel@tonic-gate { \ 3427c478bd9Sstevel@tonic-gate sm_syslog(LOG_INFO, e->e_id, \ 3437c478bd9Sstevel@tonic-gate "Milter: %s=%s, reject=550 5.7.1 Command rejected", \ 3447c478bd9Sstevel@tonic-gate str, addr); \ 3457c478bd9Sstevel@tonic-gate LogUsrErrs = false; \ 3467c478bd9Sstevel@tonic-gate } \ 3477c478bd9Sstevel@tonic-gate usrerr("550 5.7.1 Command rejected"); \ 3487c478bd9Sstevel@tonic-gate break; \ 3497c478bd9Sstevel@tonic-gate \ 3507c478bd9Sstevel@tonic-gate case SMFIR_DISCARD: \ 3517c478bd9Sstevel@tonic-gate if (MilterLogLevel > 3) \ 3527c478bd9Sstevel@tonic-gate sm_syslog(LOG_INFO, e->e_id, \ 3537c478bd9Sstevel@tonic-gate "Milter: %s=%s, discard", \ 3547c478bd9Sstevel@tonic-gate str, addr); \ 3557c478bd9Sstevel@tonic-gate e->e_flags |= EF_DISCARD; \ 3567c478bd9Sstevel@tonic-gate break; \ 3577c478bd9Sstevel@tonic-gate \ 3587c478bd9Sstevel@tonic-gate case SMFIR_TEMPFAIL: \ 3597c478bd9Sstevel@tonic-gate if (MilterLogLevel > 3) \ 3607c478bd9Sstevel@tonic-gate { \ 3617c478bd9Sstevel@tonic-gate sm_syslog(LOG_INFO, e->e_id, \ 3627c478bd9Sstevel@tonic-gate "Milter: %s=%s, reject=%s", \ 3637c478bd9Sstevel@tonic-gate str, addr, MSG_TEMPFAIL); \ 3647c478bd9Sstevel@tonic-gate LogUsrErrs = false; \ 3657c478bd9Sstevel@tonic-gate } \ 3667c478bd9Sstevel@tonic-gate usrerr(MSG_TEMPFAIL); \ 3677c478bd9Sstevel@tonic-gate break; \ 3687c478bd9Sstevel@tonic-gate } \ 3697c478bd9Sstevel@tonic-gate LogUsrErrs = savelogusrerrs; \ 3707c478bd9Sstevel@tonic-gate if (response != NULL) \ 3717c478bd9Sstevel@tonic-gate sm_free(response); /* XXX */ \ 3727c478bd9Sstevel@tonic-gate } 3737c478bd9Sstevel@tonic-gate 3747c478bd9Sstevel@tonic-gate #else /* MILTER */ 3757c478bd9Sstevel@tonic-gate # define MILTER_ABORT(e) 3767c478bd9Sstevel@tonic-gate #endif /* MILTER */ 3777c478bd9Sstevel@tonic-gate 3787c478bd9Sstevel@tonic-gate /* clear all SMTP state (for HELO/EHLO/RSET) */ 3797c478bd9Sstevel@tonic-gate #define CLEAR_STATE(cmd) \ 3807c478bd9Sstevel@tonic-gate do \ 3817c478bd9Sstevel@tonic-gate { \ 3827c478bd9Sstevel@tonic-gate /* abort milter filters */ \ 3837c478bd9Sstevel@tonic-gate MILTER_ABORT(e); \ 3847c478bd9Sstevel@tonic-gate \ 3857c478bd9Sstevel@tonic-gate if (smtp.sm_nrcpts > 0) \ 3867c478bd9Sstevel@tonic-gate { \ 3877c478bd9Sstevel@tonic-gate logundelrcpts(e, cmd, 10, false); \ 3887c478bd9Sstevel@tonic-gate smtp.sm_nrcpts = 0; \ 3897c478bd9Sstevel@tonic-gate macdefine(&e->e_macro, A_PERM, \ 3907c478bd9Sstevel@tonic-gate macid("{nrcpts}"), "0"); \ 3917c478bd9Sstevel@tonic-gate } \ 3927c478bd9Sstevel@tonic-gate \ 3937c478bd9Sstevel@tonic-gate e->e_sendqueue = NULL; \ 3947c478bd9Sstevel@tonic-gate e->e_flags |= EF_CLRQUEUE; \ 3957c478bd9Sstevel@tonic-gate \ 3967c478bd9Sstevel@tonic-gate if (LogLevel > 4 && bitset(EF_LOGSENDER, e->e_flags)) \ 3977c478bd9Sstevel@tonic-gate logsender(e, NULL); \ 3987c478bd9Sstevel@tonic-gate e->e_flags &= ~EF_LOGSENDER; \ 3997c478bd9Sstevel@tonic-gate \ 4007c478bd9Sstevel@tonic-gate /* clean up a bit */ \ 4017c478bd9Sstevel@tonic-gate smtp.sm_gotmail = false; \ 4027c478bd9Sstevel@tonic-gate SuprErrs = true; \ 4037c478bd9Sstevel@tonic-gate dropenvelope(e, true, false); \ 4047c478bd9Sstevel@tonic-gate sm_rpool_free(e->e_rpool); \ 4057c478bd9Sstevel@tonic-gate e = newenvelope(e, CurEnv, sm_rpool_new_x(NULL)); \ 4067c478bd9Sstevel@tonic-gate CurEnv = e; \ 4077c478bd9Sstevel@tonic-gate \ 4087c478bd9Sstevel@tonic-gate /* put back discard bit */ \ 4097c478bd9Sstevel@tonic-gate if (smtp.sm_discard) \ 4107c478bd9Sstevel@tonic-gate e->e_flags |= EF_DISCARD; \ 4117c478bd9Sstevel@tonic-gate \ 4127c478bd9Sstevel@tonic-gate /* restore connection quarantining */ \ 4137c478bd9Sstevel@tonic-gate if (smtp.sm_quarmsg == NULL) \ 4147c478bd9Sstevel@tonic-gate { \ 4157c478bd9Sstevel@tonic-gate e->e_quarmsg = NULL; \ 4167c478bd9Sstevel@tonic-gate macdefine(&e->e_macro, A_PERM, \ 4177c478bd9Sstevel@tonic-gate macid("{quarantine}"), ""); \ 4187c478bd9Sstevel@tonic-gate } \ 4197c478bd9Sstevel@tonic-gate else \ 4207c478bd9Sstevel@tonic-gate { \ 4217c478bd9Sstevel@tonic-gate e->e_quarmsg = sm_rpool_strdup_x(e->e_rpool, \ 4227c478bd9Sstevel@tonic-gate smtp.sm_quarmsg); \ 4237c478bd9Sstevel@tonic-gate macdefine(&e->e_macro, A_PERM, macid("{quarantine}"), \ 4247c478bd9Sstevel@tonic-gate e->e_quarmsg); \ 4257c478bd9Sstevel@tonic-gate } \ 4267c478bd9Sstevel@tonic-gate } while (0) 4277c478bd9Sstevel@tonic-gate 4287c478bd9Sstevel@tonic-gate /* sleep to flatten out connection load */ 4297c478bd9Sstevel@tonic-gate #define MIN_DELAY_LOG 15 /* wait before logging this again */ 4307c478bd9Sstevel@tonic-gate 4317c478bd9Sstevel@tonic-gate /* is it worth setting the process title for 1s? */ 4327c478bd9Sstevel@tonic-gate #define DELAY_CONN(cmd) \ 4337c478bd9Sstevel@tonic-gate if (DelayLA > 0 && (CurrentLA = getla()) >= DelayLA) \ 4347c478bd9Sstevel@tonic-gate { \ 4357c478bd9Sstevel@tonic-gate time_t dnow; \ 4367c478bd9Sstevel@tonic-gate \ 4377c478bd9Sstevel@tonic-gate sm_setproctitle(true, e, \ 4387c478bd9Sstevel@tonic-gate "%s: %s: delaying %s: load average: %d", \ 4397c478bd9Sstevel@tonic-gate qid_printname(e), CurSmtpClient, \ 4407c478bd9Sstevel@tonic-gate cmd, DelayLA); \ 4417c478bd9Sstevel@tonic-gate if (LogLevel > 8 && (dnow = curtime()) > log_delay) \ 4427c478bd9Sstevel@tonic-gate { \ 4437c478bd9Sstevel@tonic-gate sm_syslog(LOG_INFO, e->e_id, \ 4447c478bd9Sstevel@tonic-gate "delaying=%s, load average=%d >= %d", \ 4457c478bd9Sstevel@tonic-gate cmd, CurrentLA, DelayLA); \ 4467c478bd9Sstevel@tonic-gate log_delay = dnow + MIN_DELAY_LOG; \ 4477c478bd9Sstevel@tonic-gate } \ 4487c478bd9Sstevel@tonic-gate (void) sleep(1); \ 4497c478bd9Sstevel@tonic-gate sm_setproctitle(true, e, "%s %s: %.80s", \ 4507c478bd9Sstevel@tonic-gate qid_printname(e), CurSmtpClient, inp); \ 4517c478bd9Sstevel@tonic-gate } 4527c478bd9Sstevel@tonic-gate 4537c478bd9Sstevel@tonic-gate 4547c478bd9Sstevel@tonic-gate void 4557c478bd9Sstevel@tonic-gate smtp(nullserver, d_flags, e) 4567c478bd9Sstevel@tonic-gate char *volatile nullserver; 4577c478bd9Sstevel@tonic-gate BITMAP256 d_flags; 4587c478bd9Sstevel@tonic-gate register ENVELOPE *volatile e; 4597c478bd9Sstevel@tonic-gate { 4607c478bd9Sstevel@tonic-gate register char *volatile p; 4617c478bd9Sstevel@tonic-gate register struct cmd *volatile c = NULL; 4627c478bd9Sstevel@tonic-gate char *cmd; 4637c478bd9Sstevel@tonic-gate auto ADDRESS *vrfyqueue; 4647c478bd9Sstevel@tonic-gate ADDRESS *a; 4657c478bd9Sstevel@tonic-gate volatile bool gothello; /* helo command received */ 4667c478bd9Sstevel@tonic-gate bool vrfy; /* set if this is a vrfy command */ 4677c478bd9Sstevel@tonic-gate char *volatile protocol; /* sending protocol */ 4687c478bd9Sstevel@tonic-gate char *volatile sendinghost; /* sending hostname */ 4697c478bd9Sstevel@tonic-gate char *volatile peerhostname; /* name of SMTP peer or "localhost" */ 4707c478bd9Sstevel@tonic-gate auto char *delimptr; 4717c478bd9Sstevel@tonic-gate char *id; 4727c478bd9Sstevel@tonic-gate volatile unsigned int n_badcmds = 0; /* count of bad commands */ 4737c478bd9Sstevel@tonic-gate volatile unsigned int n_badrcpts = 0; /* number of rejected RCPT */ 4747c478bd9Sstevel@tonic-gate volatile unsigned int n_verifies = 0; /* count of VRFY/EXPN */ 4757c478bd9Sstevel@tonic-gate volatile unsigned int n_etrn = 0; /* count of ETRN */ 4767c478bd9Sstevel@tonic-gate volatile unsigned int n_noop = 0; /* count of NOOP/VERB/etc */ 4777c478bd9Sstevel@tonic-gate volatile unsigned int n_helo = 0; /* count of HELO/EHLO */ 4787c478bd9Sstevel@tonic-gate volatile int save_sevenbitinput; 4797c478bd9Sstevel@tonic-gate bool ok; 4807c478bd9Sstevel@tonic-gate #if _FFR_BLOCK_PROXIES 4817c478bd9Sstevel@tonic-gate volatile bool first; 4827c478bd9Sstevel@tonic-gate #endif /* _FFR_BLOCK_PROXIES */ 4837c478bd9Sstevel@tonic-gate volatile bool tempfail = false; 4847c478bd9Sstevel@tonic-gate volatile time_t wt; /* timeout after too many commands */ 4857c478bd9Sstevel@tonic-gate volatile time_t previous; /* time after checksmtpattack() */ 4867c478bd9Sstevel@tonic-gate volatile bool lognullconnection = true; 4877c478bd9Sstevel@tonic-gate register char *q; 4887c478bd9Sstevel@tonic-gate SMTP_T smtp; 4897c478bd9Sstevel@tonic-gate char *addr; 4907c478bd9Sstevel@tonic-gate char *greetcode = "220"; 4917c478bd9Sstevel@tonic-gate char *hostname; /* my hostname ($j) */ 4927c478bd9Sstevel@tonic-gate QUEUE_CHAR *new; 4937c478bd9Sstevel@tonic-gate int argno; 4947c478bd9Sstevel@tonic-gate char *args[MAXSMTPARGS]; 4957c478bd9Sstevel@tonic-gate char inp[MAXLINE]; 4967c478bd9Sstevel@tonic-gate char cmdbuf[MAXLINE]; 4977c478bd9Sstevel@tonic-gate #if SASL 4987c478bd9Sstevel@tonic-gate sasl_conn_t *conn; 4997c478bd9Sstevel@tonic-gate volatile bool sasl_ok; 5007c478bd9Sstevel@tonic-gate volatile unsigned int n_auth = 0; /* count of AUTH commands */ 5017c478bd9Sstevel@tonic-gate bool ismore; 5027c478bd9Sstevel@tonic-gate int result; 5037c478bd9Sstevel@tonic-gate volatile int authenticating; 5047c478bd9Sstevel@tonic-gate char *user; 5057c478bd9Sstevel@tonic-gate char *in, *out2; 5067c478bd9Sstevel@tonic-gate # if SASL >= 20000 5077c478bd9Sstevel@tonic-gate char *auth_id; 5087c478bd9Sstevel@tonic-gate const char *out; 5097c478bd9Sstevel@tonic-gate sasl_ssf_t ext_ssf; 5107c478bd9Sstevel@tonic-gate char localip[60], remoteip[60]; 5117c478bd9Sstevel@tonic-gate # else /* SASL >= 20000 */ 5127c478bd9Sstevel@tonic-gate char *out; 5137c478bd9Sstevel@tonic-gate const char *errstr; 5147c478bd9Sstevel@tonic-gate sasl_external_properties_t ext_ssf; 5157c478bd9Sstevel@tonic-gate struct sockaddr_in saddr_l; 5167c478bd9Sstevel@tonic-gate struct sockaddr_in saddr_r; 5177c478bd9Sstevel@tonic-gate # endif /* SASL >= 20000 */ 5187c478bd9Sstevel@tonic-gate sasl_security_properties_t ssp; 5197c478bd9Sstevel@tonic-gate sasl_ssf_t *ssf; 5207c478bd9Sstevel@tonic-gate unsigned int inlen, out2len; 5217c478bd9Sstevel@tonic-gate unsigned int outlen; 5227c478bd9Sstevel@tonic-gate char *volatile auth_type; 5237c478bd9Sstevel@tonic-gate char *mechlist; 5247c478bd9Sstevel@tonic-gate volatile unsigned int n_mechs; 5257c478bd9Sstevel@tonic-gate unsigned int len; 5267c478bd9Sstevel@tonic-gate #endif /* SASL */ 5277c478bd9Sstevel@tonic-gate int r; 5287c478bd9Sstevel@tonic-gate #if STARTTLS 5297c478bd9Sstevel@tonic-gate int rfd, wfd; 5307c478bd9Sstevel@tonic-gate volatile bool tls_active = false; 5317c478bd9Sstevel@tonic-gate volatile bool smtps = bitnset(D_SMTPS, d_flags); 5327c478bd9Sstevel@tonic-gate bool saveQuickAbort; 5337c478bd9Sstevel@tonic-gate bool saveSuprErrs; 5347c478bd9Sstevel@tonic-gate time_t tlsstart; 5357c478bd9Sstevel@tonic-gate #endif /* STARTTLS */ 5367c478bd9Sstevel@tonic-gate volatile unsigned int features; 5377c478bd9Sstevel@tonic-gate #if PIPELINING 5387c478bd9Sstevel@tonic-gate # if _FFR_NO_PIPE 5397c478bd9Sstevel@tonic-gate int np_log = 0; 5407c478bd9Sstevel@tonic-gate # endif /* _FFR_NO_PIPE */ 5417c478bd9Sstevel@tonic-gate #endif /* PIPELINING */ 5427c478bd9Sstevel@tonic-gate volatile time_t log_delay = (time_t) 0; 5437c478bd9Sstevel@tonic-gate 5447c478bd9Sstevel@tonic-gate save_sevenbitinput = SevenBitInput; 5457c478bd9Sstevel@tonic-gate smtp.sm_nrcpts = 0; 5467c478bd9Sstevel@tonic-gate #if MILTER 5477c478bd9Sstevel@tonic-gate smtp.sm_milterize = (nullserver == NULL); 5487c478bd9Sstevel@tonic-gate smtp.sm_milterlist = false; 5497c478bd9Sstevel@tonic-gate #endif /* MILTER */ 5507c478bd9Sstevel@tonic-gate 5517c478bd9Sstevel@tonic-gate /* setup I/O fd correctly for the SMTP server */ 5527c478bd9Sstevel@tonic-gate setup_smtpd_io(); 5537c478bd9Sstevel@tonic-gate 5547c478bd9Sstevel@tonic-gate #if SM_HEAP_CHECK 5557c478bd9Sstevel@tonic-gate if (sm_debug_active(&DebugLeakSmtp, 1)) 5567c478bd9Sstevel@tonic-gate { 5577c478bd9Sstevel@tonic-gate sm_heap_newgroup(); 5587c478bd9Sstevel@tonic-gate sm_dprintf("smtp() heap group #%d\n", sm_heap_group()); 5597c478bd9Sstevel@tonic-gate } 5607c478bd9Sstevel@tonic-gate #endif /* SM_HEAP_CHECK */ 5617c478bd9Sstevel@tonic-gate 5627c478bd9Sstevel@tonic-gate /* XXX the rpool should be set when e is initialized in main() */ 5637c478bd9Sstevel@tonic-gate e->e_rpool = sm_rpool_new_x(NULL); 5647c478bd9Sstevel@tonic-gate e->e_macro.mac_rpool = e->e_rpool; 5657c478bd9Sstevel@tonic-gate 5667c478bd9Sstevel@tonic-gate settime(e); 5677c478bd9Sstevel@tonic-gate sm_getla(); 5687c478bd9Sstevel@tonic-gate peerhostname = RealHostName; 5697c478bd9Sstevel@tonic-gate if (peerhostname == NULL) 5707c478bd9Sstevel@tonic-gate peerhostname = "localhost"; 5717c478bd9Sstevel@tonic-gate CurHostName = peerhostname; 5727c478bd9Sstevel@tonic-gate CurSmtpClient = macvalue('_', e); 5737c478bd9Sstevel@tonic-gate if (CurSmtpClient == NULL) 5747c478bd9Sstevel@tonic-gate CurSmtpClient = CurHostName; 5757c478bd9Sstevel@tonic-gate 5767c478bd9Sstevel@tonic-gate /* check_relay may have set discard bit, save for later */ 5777c478bd9Sstevel@tonic-gate smtp.sm_discard = bitset(EF_DISCARD, e->e_flags); 5787c478bd9Sstevel@tonic-gate 5797c478bd9Sstevel@tonic-gate #if PIPELINING 5807c478bd9Sstevel@tonic-gate /* auto-flush output when reading input */ 5817c478bd9Sstevel@tonic-gate (void) sm_io_autoflush(InChannel, OutChannel); 5827c478bd9Sstevel@tonic-gate #endif /* PIPELINING */ 5837c478bd9Sstevel@tonic-gate 5847c478bd9Sstevel@tonic-gate sm_setproctitle(true, e, "server %s startup", CurSmtpClient); 5857c478bd9Sstevel@tonic-gate 5867c478bd9Sstevel@tonic-gate /* Set default features for server. */ 5877c478bd9Sstevel@tonic-gate features = ((bitset(PRIV_NOETRN, PrivacyFlags) || 5887c478bd9Sstevel@tonic-gate bitnset(D_NOETRN, d_flags)) ? SRV_NONE : SRV_OFFER_ETRN) 5897c478bd9Sstevel@tonic-gate | (bitnset(D_AUTHREQ, d_flags) ? SRV_REQ_AUTH : SRV_NONE) 5907c478bd9Sstevel@tonic-gate | (bitset(PRIV_NOEXPN, PrivacyFlags) ? SRV_NONE 5917c478bd9Sstevel@tonic-gate : (SRV_OFFER_EXPN 5927c478bd9Sstevel@tonic-gate | (bitset(PRIV_NOVERB, PrivacyFlags) 5937c478bd9Sstevel@tonic-gate ? SRV_NONE : SRV_OFFER_VERB))) 594*3ee0e492Sjbeck | ((bitset(PRIV_NORECEIPTS, PrivacyFlags) || !SendMIMEErrors) 595*3ee0e492Sjbeck ? SRV_NONE : SRV_OFFER_DSN) 5967c478bd9Sstevel@tonic-gate #if SASL 5977c478bd9Sstevel@tonic-gate | (bitnset(D_NOAUTH, d_flags) ? SRV_NONE : SRV_OFFER_AUTH) 5987c478bd9Sstevel@tonic-gate | (bitset(SASL_SEC_NOPLAINTEXT, SASLOpts) ? SRV_REQ_SEC 5997c478bd9Sstevel@tonic-gate : SRV_NONE) 6007c478bd9Sstevel@tonic-gate #endif /* SASL */ 6017c478bd9Sstevel@tonic-gate #if PIPELINING 6027c478bd9Sstevel@tonic-gate | SRV_OFFER_PIPE 6037c478bd9Sstevel@tonic-gate #endif /* PIPELINING */ 6047c478bd9Sstevel@tonic-gate #if STARTTLS 6057c478bd9Sstevel@tonic-gate | (bitnset(D_NOTLS, d_flags) ? SRV_NONE : SRV_OFFER_TLS) 6067c478bd9Sstevel@tonic-gate | (bitset(TLS_I_NO_VRFY, TLS_Srv_Opts) ? SRV_NONE 6077c478bd9Sstevel@tonic-gate : SRV_VRFY_CLT) 6087c478bd9Sstevel@tonic-gate #endif /* STARTTLS */ 6097c478bd9Sstevel@tonic-gate ; 6107c478bd9Sstevel@tonic-gate if (nullserver == NULL) 6117c478bd9Sstevel@tonic-gate { 6127c478bd9Sstevel@tonic-gate features = srvfeatures(e, CurSmtpClient, features); 6137c478bd9Sstevel@tonic-gate if (bitset(SRV_TMP_FAIL, features)) 6147c478bd9Sstevel@tonic-gate { 6157c478bd9Sstevel@tonic-gate if (LogLevel > 4) 6167c478bd9Sstevel@tonic-gate sm_syslog(LOG_ERR, NOQID, 6177c478bd9Sstevel@tonic-gate "ERROR: srv_features=tempfail, relay=%.100s, access temporarily disabled", 6187c478bd9Sstevel@tonic-gate CurSmtpClient); 6197c478bd9Sstevel@tonic-gate nullserver = "450 4.3.0 Please try again later."; 6207c478bd9Sstevel@tonic-gate } 6217c478bd9Sstevel@tonic-gate else 6227c478bd9Sstevel@tonic-gate { 6237c478bd9Sstevel@tonic-gate #if PIPELINING 6247c478bd9Sstevel@tonic-gate # if _FFR_NO_PIPE 6257c478bd9Sstevel@tonic-gate if (bitset(SRV_NO_PIPE, features)) 6267c478bd9Sstevel@tonic-gate { 6277c478bd9Sstevel@tonic-gate /* for consistency */ 6287c478bd9Sstevel@tonic-gate features &= ~SRV_OFFER_PIPE; 6297c478bd9Sstevel@tonic-gate } 6307c478bd9Sstevel@tonic-gate # endif /* _FFR_NO_PIPE */ 6317c478bd9Sstevel@tonic-gate #endif /* PIPELINING */ 6327c478bd9Sstevel@tonic-gate #if SASL 6337c478bd9Sstevel@tonic-gate if (bitset(SRV_REQ_SEC, features)) 6347c478bd9Sstevel@tonic-gate SASLOpts |= SASL_SEC_NOPLAINTEXT; 6357c478bd9Sstevel@tonic-gate else 6367c478bd9Sstevel@tonic-gate SASLOpts &= ~SASL_SEC_NOPLAINTEXT; 6377c478bd9Sstevel@tonic-gate #endif /* SASL */ 6387c478bd9Sstevel@tonic-gate } 6397c478bd9Sstevel@tonic-gate } 6407c478bd9Sstevel@tonic-gate else if (strncmp(nullserver, "421 ", 4) == 0) 6417c478bd9Sstevel@tonic-gate { 6427c478bd9Sstevel@tonic-gate message(nullserver); 6437c478bd9Sstevel@tonic-gate goto doquit; 6447c478bd9Sstevel@tonic-gate } 6457c478bd9Sstevel@tonic-gate 6467c478bd9Sstevel@tonic-gate hostname = macvalue('j', e); 6477c478bd9Sstevel@tonic-gate #if SASL 6487c478bd9Sstevel@tonic-gate if (AuthRealm == NULL) 6497c478bd9Sstevel@tonic-gate AuthRealm = hostname; 6507c478bd9Sstevel@tonic-gate sasl_ok = bitset(SRV_OFFER_AUTH, features); 6517c478bd9Sstevel@tonic-gate n_mechs = 0; 6527c478bd9Sstevel@tonic-gate authenticating = SASL_NOT_AUTH; 6537c478bd9Sstevel@tonic-gate 6547c478bd9Sstevel@tonic-gate /* SASL server new connection */ 6557c478bd9Sstevel@tonic-gate if (sasl_ok) 6567c478bd9Sstevel@tonic-gate { 6577c478bd9Sstevel@tonic-gate # if SASL >= 20000 6587c478bd9Sstevel@tonic-gate result = sasl_server_new("smtp", AuthRealm, NULL, NULL, NULL, 6597c478bd9Sstevel@tonic-gate NULL, 0, &conn); 6607c478bd9Sstevel@tonic-gate # elif SASL > 10505 6617c478bd9Sstevel@tonic-gate /* use empty realm: only works in SASL > 1.5.5 */ 6627c478bd9Sstevel@tonic-gate result = sasl_server_new("smtp", AuthRealm, "", NULL, 0, &conn); 6637c478bd9Sstevel@tonic-gate # else /* SASL >= 20000 */ 6647c478bd9Sstevel@tonic-gate /* use no realm -> realm is set to hostname by SASL lib */ 6657c478bd9Sstevel@tonic-gate result = sasl_server_new("smtp", AuthRealm, NULL, NULL, 0, 6667c478bd9Sstevel@tonic-gate &conn); 6677c478bd9Sstevel@tonic-gate # endif /* SASL >= 20000 */ 6687c478bd9Sstevel@tonic-gate sasl_ok = result == SASL_OK; 6697c478bd9Sstevel@tonic-gate if (!sasl_ok) 6707c478bd9Sstevel@tonic-gate { 6717c478bd9Sstevel@tonic-gate if (LogLevel > 9) 6727c478bd9Sstevel@tonic-gate sm_syslog(LOG_WARNING, NOQID, 6737c478bd9Sstevel@tonic-gate "AUTH error: sasl_server_new failed=%d", 6747c478bd9Sstevel@tonic-gate result); 6757c478bd9Sstevel@tonic-gate } 6767c478bd9Sstevel@tonic-gate } 6777c478bd9Sstevel@tonic-gate if (sasl_ok) 6787c478bd9Sstevel@tonic-gate { 6797c478bd9Sstevel@tonic-gate /* 6807c478bd9Sstevel@tonic-gate ** SASL set properties for sasl 6817c478bd9Sstevel@tonic-gate ** set local/remote IP 6827c478bd9Sstevel@tonic-gate ** XXX Cyrus SASL v1 only supports IPv4 6837c478bd9Sstevel@tonic-gate ** 6847c478bd9Sstevel@tonic-gate ** XXX where exactly are these used/required? 6857c478bd9Sstevel@tonic-gate ** Kerberos_v4 6867c478bd9Sstevel@tonic-gate */ 6877c478bd9Sstevel@tonic-gate 6887c478bd9Sstevel@tonic-gate # if SASL >= 20000 6897c478bd9Sstevel@tonic-gate localip[0] = remoteip[0] = '\0'; 6907c478bd9Sstevel@tonic-gate # if NETINET || NETINET6 6917c478bd9Sstevel@tonic-gate in = macvalue(macid("{daemon_family}"), e); 6927c478bd9Sstevel@tonic-gate if (in != NULL && ( 6937c478bd9Sstevel@tonic-gate # if NETINET6 6947c478bd9Sstevel@tonic-gate strcmp(in, "inet6") == 0 || 6957c478bd9Sstevel@tonic-gate # endif /* NETINET6 */ 6967c478bd9Sstevel@tonic-gate strcmp(in, "inet") == 0)) 6977c478bd9Sstevel@tonic-gate { 6987c478bd9Sstevel@tonic-gate SOCKADDR_LEN_T addrsize; 6997c478bd9Sstevel@tonic-gate SOCKADDR saddr_l; 7007c478bd9Sstevel@tonic-gate SOCKADDR saddr_r; 7017c478bd9Sstevel@tonic-gate 7027c478bd9Sstevel@tonic-gate addrsize = sizeof(saddr_r); 7037c478bd9Sstevel@tonic-gate if (getpeername(sm_io_getinfo(InChannel, SM_IO_WHAT_FD, 7047c478bd9Sstevel@tonic-gate NULL), 7057c478bd9Sstevel@tonic-gate (struct sockaddr *) &saddr_r, 7067c478bd9Sstevel@tonic-gate &addrsize) == 0) 7077c478bd9Sstevel@tonic-gate { 7087c478bd9Sstevel@tonic-gate if (iptostring(&saddr_r, addrsize, 7097c478bd9Sstevel@tonic-gate remoteip, sizeof remoteip)) 7107c478bd9Sstevel@tonic-gate { 7117c478bd9Sstevel@tonic-gate sasl_setprop(conn, SASL_IPREMOTEPORT, 7127c478bd9Sstevel@tonic-gate remoteip); 7137c478bd9Sstevel@tonic-gate } 7147c478bd9Sstevel@tonic-gate addrsize = sizeof(saddr_l); 7157c478bd9Sstevel@tonic-gate if (getsockname(sm_io_getinfo(InChannel, 7167c478bd9Sstevel@tonic-gate SM_IO_WHAT_FD, 7177c478bd9Sstevel@tonic-gate NULL), 7187c478bd9Sstevel@tonic-gate (struct sockaddr *) &saddr_l, 7197c478bd9Sstevel@tonic-gate &addrsize) == 0) 7207c478bd9Sstevel@tonic-gate { 7217c478bd9Sstevel@tonic-gate if (iptostring(&saddr_l, addrsize, 7227c478bd9Sstevel@tonic-gate localip, 7237c478bd9Sstevel@tonic-gate sizeof localip)) 7247c478bd9Sstevel@tonic-gate { 7257c478bd9Sstevel@tonic-gate sasl_setprop(conn, 7267c478bd9Sstevel@tonic-gate SASL_IPLOCALPORT, 7277c478bd9Sstevel@tonic-gate localip); 7287c478bd9Sstevel@tonic-gate } 7297c478bd9Sstevel@tonic-gate } 7307c478bd9Sstevel@tonic-gate } 7317c478bd9Sstevel@tonic-gate } 7327c478bd9Sstevel@tonic-gate # endif /* NETINET || NETINET6 */ 7337c478bd9Sstevel@tonic-gate # else /* SASL >= 20000 */ 7347c478bd9Sstevel@tonic-gate # if NETINET 7357c478bd9Sstevel@tonic-gate in = macvalue(macid("{daemon_family}"), e); 7367c478bd9Sstevel@tonic-gate if (in != NULL && strcmp(in, "inet") == 0) 7377c478bd9Sstevel@tonic-gate { 7387c478bd9Sstevel@tonic-gate SOCKADDR_LEN_T addrsize; 7397c478bd9Sstevel@tonic-gate 7407c478bd9Sstevel@tonic-gate addrsize = sizeof(struct sockaddr_in); 7417c478bd9Sstevel@tonic-gate if (getpeername(sm_io_getinfo(InChannel, SM_IO_WHAT_FD, 7427c478bd9Sstevel@tonic-gate NULL), 7437c478bd9Sstevel@tonic-gate (struct sockaddr *)&saddr_r, 7447c478bd9Sstevel@tonic-gate &addrsize) == 0) 7457c478bd9Sstevel@tonic-gate { 7467c478bd9Sstevel@tonic-gate sasl_setprop(conn, SASL_IP_REMOTE, &saddr_r); 7477c478bd9Sstevel@tonic-gate addrsize = sizeof(struct sockaddr_in); 7487c478bd9Sstevel@tonic-gate if (getsockname(sm_io_getinfo(InChannel, 7497c478bd9Sstevel@tonic-gate SM_IO_WHAT_FD, 7507c478bd9Sstevel@tonic-gate NULL), 7517c478bd9Sstevel@tonic-gate (struct sockaddr *)&saddr_l, 7527c478bd9Sstevel@tonic-gate &addrsize) == 0) 7537c478bd9Sstevel@tonic-gate sasl_setprop(conn, SASL_IP_LOCAL, 7547c478bd9Sstevel@tonic-gate &saddr_l); 7557c478bd9Sstevel@tonic-gate } 7567c478bd9Sstevel@tonic-gate } 7577c478bd9Sstevel@tonic-gate # endif /* NETINET */ 7587c478bd9Sstevel@tonic-gate # endif /* SASL >= 20000 */ 7597c478bd9Sstevel@tonic-gate 7607c478bd9Sstevel@tonic-gate auth_type = NULL; 7617c478bd9Sstevel@tonic-gate mechlist = NULL; 7627c478bd9Sstevel@tonic-gate user = NULL; 7637c478bd9Sstevel@tonic-gate # if 0 7647c478bd9Sstevel@tonic-gate macdefine(&BlankEnvelope.e_macro, A_PERM, 7657c478bd9Sstevel@tonic-gate macid("{auth_author}"), NULL); 7667c478bd9Sstevel@tonic-gate # endif /* 0 */ 7677c478bd9Sstevel@tonic-gate 7687c478bd9Sstevel@tonic-gate /* set properties */ 7697c478bd9Sstevel@tonic-gate (void) memset(&ssp, '\0', sizeof ssp); 7707c478bd9Sstevel@tonic-gate 7717c478bd9Sstevel@tonic-gate /* XXX should these be options settable via .cf ? */ 7727c478bd9Sstevel@tonic-gate /* ssp.min_ssf = 0; is default due to memset() */ 7737c478bd9Sstevel@tonic-gate { 7747c478bd9Sstevel@tonic-gate ssp.max_ssf = MaxSLBits; 7757c478bd9Sstevel@tonic-gate ssp.maxbufsize = MAXOUTLEN; 7767c478bd9Sstevel@tonic-gate } 7777c478bd9Sstevel@tonic-gate ssp.security_flags = SASLOpts & SASL_SEC_MASK; 7787c478bd9Sstevel@tonic-gate sasl_ok = sasl_setprop(conn, SASL_SEC_PROPS, &ssp) == SASL_OK; 7797c478bd9Sstevel@tonic-gate 7807c478bd9Sstevel@tonic-gate if (sasl_ok) 7817c478bd9Sstevel@tonic-gate { 7827c478bd9Sstevel@tonic-gate /* 7837c478bd9Sstevel@tonic-gate ** external security strength factor; 7847c478bd9Sstevel@tonic-gate ** currently we have none so zero 7857c478bd9Sstevel@tonic-gate */ 7867c478bd9Sstevel@tonic-gate 7877c478bd9Sstevel@tonic-gate # if SASL >= 20000 7887c478bd9Sstevel@tonic-gate ext_ssf = 0; 7897c478bd9Sstevel@tonic-gate auth_id = NULL; 7907c478bd9Sstevel@tonic-gate sasl_ok = ((sasl_setprop(conn, SASL_SSF_EXTERNAL, 7917c478bd9Sstevel@tonic-gate &ext_ssf) == SASL_OK) && 7927c478bd9Sstevel@tonic-gate (sasl_setprop(conn, SASL_AUTH_EXTERNAL, 7937c478bd9Sstevel@tonic-gate auth_id) == SASL_OK)); 7947c478bd9Sstevel@tonic-gate # else /* SASL >= 20000 */ 7957c478bd9Sstevel@tonic-gate ext_ssf.ssf = 0; 7967c478bd9Sstevel@tonic-gate ext_ssf.auth_id = NULL; 7977c478bd9Sstevel@tonic-gate sasl_ok = sasl_setprop(conn, SASL_SSF_EXTERNAL, 7987c478bd9Sstevel@tonic-gate &ext_ssf) == SASL_OK; 7997c478bd9Sstevel@tonic-gate # endif /* SASL >= 20000 */ 8007c478bd9Sstevel@tonic-gate } 8017c478bd9Sstevel@tonic-gate if (sasl_ok) 8027c478bd9Sstevel@tonic-gate n_mechs = saslmechs(conn, &mechlist); 8037c478bd9Sstevel@tonic-gate } 8047c478bd9Sstevel@tonic-gate #endif /* SASL */ 8057c478bd9Sstevel@tonic-gate 8067c478bd9Sstevel@tonic-gate #if STARTTLS 8077c478bd9Sstevel@tonic-gate #endif /* STARTTLS */ 8087c478bd9Sstevel@tonic-gate 8097c478bd9Sstevel@tonic-gate #if MILTER 8107c478bd9Sstevel@tonic-gate if (smtp.sm_milterize) 8117c478bd9Sstevel@tonic-gate { 8127c478bd9Sstevel@tonic-gate char state; 8137c478bd9Sstevel@tonic-gate 8147c478bd9Sstevel@tonic-gate /* initialize mail filter connection */ 8157c478bd9Sstevel@tonic-gate smtp.sm_milterlist = milter_init(e, &state); 8167c478bd9Sstevel@tonic-gate switch (state) 8177c478bd9Sstevel@tonic-gate { 8187c478bd9Sstevel@tonic-gate case SMFIR_REJECT: 8197c478bd9Sstevel@tonic-gate if (MilterLogLevel > 3) 8207c478bd9Sstevel@tonic-gate sm_syslog(LOG_INFO, e->e_id, 8217c478bd9Sstevel@tonic-gate "Milter: initialization failed, rejecting commands"); 8227c478bd9Sstevel@tonic-gate greetcode = "554"; 8237c478bd9Sstevel@tonic-gate nullserver = "Command rejected"; 8247c478bd9Sstevel@tonic-gate smtp.sm_milterize = false; 8257c478bd9Sstevel@tonic-gate break; 8267c478bd9Sstevel@tonic-gate 8277c478bd9Sstevel@tonic-gate case SMFIR_TEMPFAIL: 8287c478bd9Sstevel@tonic-gate if (MilterLogLevel > 3) 8297c478bd9Sstevel@tonic-gate sm_syslog(LOG_INFO, e->e_id, 8307c478bd9Sstevel@tonic-gate "Milter: initialization failed, temp failing commands"); 8317c478bd9Sstevel@tonic-gate tempfail = true; 8327c478bd9Sstevel@tonic-gate smtp.sm_milterize = false; 8337c478bd9Sstevel@tonic-gate break; 834445f2479Sjbeck 835445f2479Sjbeck case SMFIR_SHUTDOWN: 836445f2479Sjbeck if (MilterLogLevel > 3) 837445f2479Sjbeck sm_syslog(LOG_INFO, e->e_id, 838445f2479Sjbeck "Milter: initialization failed, closing connection"); 839445f2479Sjbeck tempfail = true; 840445f2479Sjbeck smtp.sm_milterize = false; 841445f2479Sjbeck message("421 4.7.0 %s closing connection", 842445f2479Sjbeck MyHostName); 843445f2479Sjbeck 844445f2479Sjbeck /* arrange to ignore send list */ 845445f2479Sjbeck e->e_sendqueue = NULL; 846445f2479Sjbeck goto doquit; 8477c478bd9Sstevel@tonic-gate } 8487c478bd9Sstevel@tonic-gate } 8497c478bd9Sstevel@tonic-gate 8507c478bd9Sstevel@tonic-gate if (smtp.sm_milterlist && smtp.sm_milterize && 8517c478bd9Sstevel@tonic-gate !bitset(EF_DISCARD, e->e_flags)) 8527c478bd9Sstevel@tonic-gate { 8537c478bd9Sstevel@tonic-gate char state; 8547c478bd9Sstevel@tonic-gate char *response; 8557c478bd9Sstevel@tonic-gate 8567c478bd9Sstevel@tonic-gate response = milter_connect(peerhostname, RealHostAddr, 8577c478bd9Sstevel@tonic-gate e, &state); 8587c478bd9Sstevel@tonic-gate switch (state) 8597c478bd9Sstevel@tonic-gate { 8607c478bd9Sstevel@tonic-gate case SMFIR_REPLYCODE: /* REPLYCODE shouldn't happen */ 8617c478bd9Sstevel@tonic-gate case SMFIR_REJECT: 8627c478bd9Sstevel@tonic-gate if (MilterLogLevel > 3) 8637c478bd9Sstevel@tonic-gate sm_syslog(LOG_INFO, e->e_id, 8647c478bd9Sstevel@tonic-gate "Milter: connect: host=%s, addr=%s, rejecting commands", 8657c478bd9Sstevel@tonic-gate peerhostname, 8667c478bd9Sstevel@tonic-gate anynet_ntoa(&RealHostAddr)); 8677c478bd9Sstevel@tonic-gate greetcode = "554"; 8687c478bd9Sstevel@tonic-gate nullserver = "Command rejected"; 8697c478bd9Sstevel@tonic-gate smtp.sm_milterize = false; 8707c478bd9Sstevel@tonic-gate break; 8717c478bd9Sstevel@tonic-gate 8727c478bd9Sstevel@tonic-gate case SMFIR_TEMPFAIL: 8737c478bd9Sstevel@tonic-gate if (MilterLogLevel > 3) 8747c478bd9Sstevel@tonic-gate sm_syslog(LOG_INFO, e->e_id, 8757c478bd9Sstevel@tonic-gate "Milter: connect: host=%s, addr=%s, temp failing commands", 8767c478bd9Sstevel@tonic-gate peerhostname, 8777c478bd9Sstevel@tonic-gate anynet_ntoa(&RealHostAddr)); 8787c478bd9Sstevel@tonic-gate tempfail = true; 8797c478bd9Sstevel@tonic-gate smtp.sm_milterize = false; 8807c478bd9Sstevel@tonic-gate break; 8817c478bd9Sstevel@tonic-gate 8827c478bd9Sstevel@tonic-gate case SMFIR_SHUTDOWN: 8837c478bd9Sstevel@tonic-gate if (MilterLogLevel > 3) 8847c478bd9Sstevel@tonic-gate sm_syslog(LOG_INFO, e->e_id, 8857c478bd9Sstevel@tonic-gate "Milter: connect: host=%s, addr=%s, shutdown", 8867c478bd9Sstevel@tonic-gate peerhostname, 8877c478bd9Sstevel@tonic-gate anynet_ntoa(&RealHostAddr)); 8887c478bd9Sstevel@tonic-gate tempfail = true; 8897c478bd9Sstevel@tonic-gate smtp.sm_milterize = false; 8907c478bd9Sstevel@tonic-gate message("421 4.7.0 %s closing connection", 8917c478bd9Sstevel@tonic-gate MyHostName); 8927c478bd9Sstevel@tonic-gate 8937c478bd9Sstevel@tonic-gate /* arrange to ignore send list */ 8947c478bd9Sstevel@tonic-gate e->e_sendqueue = NULL; 8957c478bd9Sstevel@tonic-gate goto doquit; 8967c478bd9Sstevel@tonic-gate } 8977c478bd9Sstevel@tonic-gate if (response != NULL) 8987c478bd9Sstevel@tonic-gate sm_free(response); /* XXX */ 8997c478bd9Sstevel@tonic-gate } 9007c478bd9Sstevel@tonic-gate #endif /* MILTER */ 9017c478bd9Sstevel@tonic-gate 9027c478bd9Sstevel@tonic-gate /* 9037c478bd9Sstevel@tonic-gate ** Broken proxies and SMTP slammers 9047c478bd9Sstevel@tonic-gate ** push data without waiting, catch them 9057c478bd9Sstevel@tonic-gate */ 9067c478bd9Sstevel@tonic-gate 9077c478bd9Sstevel@tonic-gate if ( 9087c478bd9Sstevel@tonic-gate #if STARTTLS 9097c478bd9Sstevel@tonic-gate !smtps && 9107c478bd9Sstevel@tonic-gate #endif /* STARTTLS */ 9117c478bd9Sstevel@tonic-gate *greetcode == '2') 9127c478bd9Sstevel@tonic-gate { 9137c478bd9Sstevel@tonic-gate time_t msecs = 0; 9147c478bd9Sstevel@tonic-gate char **pvp; 9157c478bd9Sstevel@tonic-gate char pvpbuf[PSBUFSIZE]; 9167c478bd9Sstevel@tonic-gate 9177c478bd9Sstevel@tonic-gate /* Ask the rulesets how long to pause */ 9187c478bd9Sstevel@tonic-gate pvp = NULL; 9197c478bd9Sstevel@tonic-gate r = rscap("greet_pause", peerhostname, 9207c478bd9Sstevel@tonic-gate anynet_ntoa(&RealHostAddr), e, 9217c478bd9Sstevel@tonic-gate &pvp, pvpbuf, sizeof(pvpbuf)); 9227c478bd9Sstevel@tonic-gate if (r == EX_OK && pvp != NULL && pvp[0] != NULL && 9237c478bd9Sstevel@tonic-gate (pvp[0][0] & 0377) == CANONNET && pvp[1] != NULL) 9247c478bd9Sstevel@tonic-gate { 9257c478bd9Sstevel@tonic-gate msecs = strtol(pvp[1], NULL, 10); 9267c478bd9Sstevel@tonic-gate } 9277c478bd9Sstevel@tonic-gate 9287c478bd9Sstevel@tonic-gate if (msecs > 0) 9297c478bd9Sstevel@tonic-gate { 9307c478bd9Sstevel@tonic-gate int fd; 9317c478bd9Sstevel@tonic-gate fd_set readfds; 9327c478bd9Sstevel@tonic-gate struct timeval timeout; 93349218d4fSjbeck #if _FFR_LOG_GREET_PAUSE 93449218d4fSjbeck struct timeval bp, ep, tp; /* {begin,end,total}pause */ 93549218d4fSjbeck #endif /* _FFR_LOG_GREET_PAUSE */ 9367c478bd9Sstevel@tonic-gate 9377c478bd9Sstevel@tonic-gate /* pause for a moment */ 9387c478bd9Sstevel@tonic-gate timeout.tv_sec = msecs / 1000; 9397c478bd9Sstevel@tonic-gate timeout.tv_usec = (msecs % 1000) * 1000; 9407c478bd9Sstevel@tonic-gate 9417c478bd9Sstevel@tonic-gate /* Obey RFC 2821: 4.3.5.2: 220 timeout of 5 minutes */ 9427c478bd9Sstevel@tonic-gate if (timeout.tv_sec >= 300) 9437c478bd9Sstevel@tonic-gate { 9447c478bd9Sstevel@tonic-gate timeout.tv_sec = 300; 9457c478bd9Sstevel@tonic-gate timeout.tv_usec = 0; 9467c478bd9Sstevel@tonic-gate } 9477c478bd9Sstevel@tonic-gate 9487c478bd9Sstevel@tonic-gate /* check if data is on the socket during the pause */ 9497c478bd9Sstevel@tonic-gate fd = sm_io_getinfo(InChannel, SM_IO_WHAT_FD, NULL); 9507c478bd9Sstevel@tonic-gate FD_ZERO(&readfds); 9517c478bd9Sstevel@tonic-gate SM_FD_SET(fd, &readfds); 95249218d4fSjbeck #if _FFR_LOG_GREET_PAUSE 95349218d4fSjbeck gettimeofday(&bp, NULL); 95449218d4fSjbeck #endif /* _FFR_LOG_GREET_PAUSE */ 9557c478bd9Sstevel@tonic-gate if (select(fd + 1, FDSET_CAST &readfds, 9567c478bd9Sstevel@tonic-gate NULL, NULL, &timeout) > 0 && 9577c478bd9Sstevel@tonic-gate FD_ISSET(fd, &readfds)) 9587c478bd9Sstevel@tonic-gate { 95949218d4fSjbeck #if _FFR_LOG_GREET_PAUSE 96049218d4fSjbeck gettimeofday(&ep, NULL); 96149218d4fSjbeck timersub(&ep, &bp, &tp); 96249218d4fSjbeck #endif /* _FFR_LOG_GREET_PAUSE */ 9637c478bd9Sstevel@tonic-gate greetcode = "554"; 9647c478bd9Sstevel@tonic-gate nullserver = "Command rejected"; 9657c478bd9Sstevel@tonic-gate sm_syslog(LOG_INFO, e->e_id, 96649218d4fSjbeck #if _FFR_LOG_GREET_PAUSE 96749218d4fSjbeck "rejecting commands from %s [%s] after %d seconds due to pre-greeting traffic", 96849218d4fSjbeck #else /* _FFR_LOG_GREET_PAUSE */ 9697c478bd9Sstevel@tonic-gate "rejecting commands from %s [%s] due to pre-greeting traffic", 97049218d4fSjbeck #endif /* _FFR_LOG_GREET_PAUSE */ 9717c478bd9Sstevel@tonic-gate peerhostname, 97249218d4fSjbeck anynet_ntoa(&RealHostAddr) 97349218d4fSjbeck #if _FFR_LOG_GREET_PAUSE 97449218d4fSjbeck , (int) tp.tv_sec + 97549218d4fSjbeck (tp.tv_usec >= 500000 ? 1 : 0) 97649218d4fSjbeck #endif /* _FFR_LOG_GREET_PAUSE */ 97749218d4fSjbeck ); 9787c478bd9Sstevel@tonic-gate } 9797c478bd9Sstevel@tonic-gate } 9807c478bd9Sstevel@tonic-gate } 9817c478bd9Sstevel@tonic-gate 9827c478bd9Sstevel@tonic-gate #if STARTTLS 9837c478bd9Sstevel@tonic-gate /* If this an smtps connection, start TLS now */ 9847c478bd9Sstevel@tonic-gate if (smtps) 9857c478bd9Sstevel@tonic-gate { 9867c478bd9Sstevel@tonic-gate Errors = 0; 9877c478bd9Sstevel@tonic-gate goto starttls; 9887c478bd9Sstevel@tonic-gate } 9897c478bd9Sstevel@tonic-gate 9907c478bd9Sstevel@tonic-gate greeting: 9917c478bd9Sstevel@tonic-gate 9927c478bd9Sstevel@tonic-gate #endif /* STARTTLS */ 9937c478bd9Sstevel@tonic-gate 9947c478bd9Sstevel@tonic-gate /* output the first line, inserting "ESMTP" as second word */ 9957c478bd9Sstevel@tonic-gate if (*greetcode == '5') 9967c478bd9Sstevel@tonic-gate (void) sm_snprintf(inp, sizeof inp, "%s not accepting messages", 9977c478bd9Sstevel@tonic-gate hostname); 9987c478bd9Sstevel@tonic-gate else 9997c478bd9Sstevel@tonic-gate expand(SmtpGreeting, inp, sizeof inp, e); 10007c478bd9Sstevel@tonic-gate 10017c478bd9Sstevel@tonic-gate p = strchr(inp, '\n'); 10027c478bd9Sstevel@tonic-gate if (p != NULL) 10037c478bd9Sstevel@tonic-gate *p++ = '\0'; 10047c478bd9Sstevel@tonic-gate id = strchr(inp, ' '); 10057c478bd9Sstevel@tonic-gate if (id == NULL) 10067c478bd9Sstevel@tonic-gate id = &inp[strlen(inp)]; 10077c478bd9Sstevel@tonic-gate if (p == NULL) 10087c478bd9Sstevel@tonic-gate (void) sm_snprintf(cmdbuf, sizeof cmdbuf, 10097c478bd9Sstevel@tonic-gate "%s %%.*s ESMTP%%s", greetcode); 10107c478bd9Sstevel@tonic-gate else 10117c478bd9Sstevel@tonic-gate (void) sm_snprintf(cmdbuf, sizeof cmdbuf, 10127c478bd9Sstevel@tonic-gate "%s-%%.*s ESMTP%%s", greetcode); 10137c478bd9Sstevel@tonic-gate message(cmdbuf, (int) (id - inp), inp, id); 10147c478bd9Sstevel@tonic-gate 10157c478bd9Sstevel@tonic-gate /* output remaining lines */ 10167c478bd9Sstevel@tonic-gate while ((id = p) != NULL && (p = strchr(id, '\n')) != NULL) 10177c478bd9Sstevel@tonic-gate { 10187c478bd9Sstevel@tonic-gate *p++ = '\0'; 10197c478bd9Sstevel@tonic-gate if (isascii(*id) && isspace(*id)) 10207c478bd9Sstevel@tonic-gate id++; 10217c478bd9Sstevel@tonic-gate (void) sm_strlcpyn(cmdbuf, sizeof cmdbuf, 2, greetcode, "-%s"); 10227c478bd9Sstevel@tonic-gate message(cmdbuf, id); 10237c478bd9Sstevel@tonic-gate } 10247c478bd9Sstevel@tonic-gate if (id != NULL) 10257c478bd9Sstevel@tonic-gate { 10267c478bd9Sstevel@tonic-gate if (isascii(*id) && isspace(*id)) 10277c478bd9Sstevel@tonic-gate id++; 10287c478bd9Sstevel@tonic-gate (void) sm_strlcpyn(cmdbuf, sizeof cmdbuf, 2, greetcode, " %s"); 10297c478bd9Sstevel@tonic-gate message(cmdbuf, id); 10307c478bd9Sstevel@tonic-gate } 10317c478bd9Sstevel@tonic-gate 10327c478bd9Sstevel@tonic-gate protocol = NULL; 10337c478bd9Sstevel@tonic-gate sendinghost = macvalue('s', e); 10347c478bd9Sstevel@tonic-gate 10357c478bd9Sstevel@tonic-gate /* If quarantining by a connect/ehlo action, save between messages */ 10367c478bd9Sstevel@tonic-gate if (e->e_quarmsg == NULL) 10377c478bd9Sstevel@tonic-gate smtp.sm_quarmsg = NULL; 10387c478bd9Sstevel@tonic-gate else 10397c478bd9Sstevel@tonic-gate smtp.sm_quarmsg = newstr(e->e_quarmsg); 10407c478bd9Sstevel@tonic-gate 10417c478bd9Sstevel@tonic-gate /* sendinghost's storage must outlive the current envelope */ 10427c478bd9Sstevel@tonic-gate if (sendinghost != NULL) 10437c478bd9Sstevel@tonic-gate sendinghost = sm_strdup_x(sendinghost); 10447c478bd9Sstevel@tonic-gate #if _FFR_BLOCK_PROXIES 10457c478bd9Sstevel@tonic-gate first = true; 10467c478bd9Sstevel@tonic-gate #endif /* _FFR_BLOCK_PROXIES */ 10477c478bd9Sstevel@tonic-gate gothello = false; 10487c478bd9Sstevel@tonic-gate smtp.sm_gotmail = false; 10497c478bd9Sstevel@tonic-gate for (;;) 10507c478bd9Sstevel@tonic-gate { 10517c478bd9Sstevel@tonic-gate SM_TRY 10527c478bd9Sstevel@tonic-gate { 10537c478bd9Sstevel@tonic-gate QuickAbort = false; 10547c478bd9Sstevel@tonic-gate HoldErrs = false; 10557c478bd9Sstevel@tonic-gate SuprErrs = false; 10567c478bd9Sstevel@tonic-gate LogUsrErrs = false; 10577c478bd9Sstevel@tonic-gate OnlyOneError = true; 10587c478bd9Sstevel@tonic-gate e->e_flags &= ~(EF_VRFYONLY|EF_GLOBALERRS); 10597c478bd9Sstevel@tonic-gate 10607c478bd9Sstevel@tonic-gate /* setup for the read */ 10617c478bd9Sstevel@tonic-gate e->e_to = NULL; 10627c478bd9Sstevel@tonic-gate Errors = 0; 10637c478bd9Sstevel@tonic-gate FileName = NULL; 10647c478bd9Sstevel@tonic-gate (void) sm_io_flush(smioout, SM_TIME_DEFAULT); 10657c478bd9Sstevel@tonic-gate 10667c478bd9Sstevel@tonic-gate /* read the input line */ 10677c478bd9Sstevel@tonic-gate SmtpPhase = "server cmd read"; 10687c478bd9Sstevel@tonic-gate sm_setproctitle(true, e, "server %s cmd read", CurSmtpClient); 10697c478bd9Sstevel@tonic-gate #if SASL 10707c478bd9Sstevel@tonic-gate /* 10717c478bd9Sstevel@tonic-gate ** XXX SMTP AUTH requires accepting any length, 10727c478bd9Sstevel@tonic-gate ** at least for challenge/response 10737c478bd9Sstevel@tonic-gate */ 10747c478bd9Sstevel@tonic-gate #endif /* SASL */ 10757c478bd9Sstevel@tonic-gate 10767c478bd9Sstevel@tonic-gate /* handle errors */ 10777c478bd9Sstevel@tonic-gate if (sm_io_error(OutChannel) || 10787c478bd9Sstevel@tonic-gate (p = sfgets(inp, sizeof inp, InChannel, 10797c478bd9Sstevel@tonic-gate TimeOuts.to_nextcommand, SmtpPhase)) == NULL) 10807c478bd9Sstevel@tonic-gate { 10817c478bd9Sstevel@tonic-gate char *d; 10827c478bd9Sstevel@tonic-gate 10837c478bd9Sstevel@tonic-gate d = macvalue(macid("{daemon_name}"), e); 10847c478bd9Sstevel@tonic-gate if (d == NULL) 10857c478bd9Sstevel@tonic-gate d = "stdin"; 10867c478bd9Sstevel@tonic-gate /* end of file, just die */ 10877c478bd9Sstevel@tonic-gate disconnect(1, e); 10887c478bd9Sstevel@tonic-gate 10897c478bd9Sstevel@tonic-gate #if MILTER 10907c478bd9Sstevel@tonic-gate /* close out milter filters */ 10917c478bd9Sstevel@tonic-gate milter_quit(e); 10927c478bd9Sstevel@tonic-gate #endif /* MILTER */ 10937c478bd9Sstevel@tonic-gate 10947c478bd9Sstevel@tonic-gate message("421 4.4.1 %s Lost input channel from %s", 10957c478bd9Sstevel@tonic-gate MyHostName, CurSmtpClient); 10967c478bd9Sstevel@tonic-gate if (LogLevel > (smtp.sm_gotmail ? 1 : 19)) 10977c478bd9Sstevel@tonic-gate sm_syslog(LOG_NOTICE, e->e_id, 10987c478bd9Sstevel@tonic-gate "lost input channel from %s to %s after %s", 10997c478bd9Sstevel@tonic-gate CurSmtpClient, d, 11007c478bd9Sstevel@tonic-gate (c == NULL || c->cmd_name == NULL) ? "startup" : c->cmd_name); 11017c478bd9Sstevel@tonic-gate /* 11027c478bd9Sstevel@tonic-gate ** If have not accepted mail (DATA), do not bounce 11037c478bd9Sstevel@tonic-gate ** bad addresses back to sender. 11047c478bd9Sstevel@tonic-gate */ 11057c478bd9Sstevel@tonic-gate 11067c478bd9Sstevel@tonic-gate if (bitset(EF_CLRQUEUE, e->e_flags)) 11077c478bd9Sstevel@tonic-gate e->e_sendqueue = NULL; 11087c478bd9Sstevel@tonic-gate goto doquit; 11097c478bd9Sstevel@tonic-gate } 11107c478bd9Sstevel@tonic-gate 11117c478bd9Sstevel@tonic-gate #if _FFR_BLOCK_PROXIES 11127c478bd9Sstevel@tonic-gate if (first) 11137c478bd9Sstevel@tonic-gate { 11147c478bd9Sstevel@tonic-gate size_t inplen, cmdlen; 11157c478bd9Sstevel@tonic-gate int idx; 11167c478bd9Sstevel@tonic-gate char *http_cmd; 11177c478bd9Sstevel@tonic-gate static char *http_cmds[] = { "GET", "POST", 11187c478bd9Sstevel@tonic-gate "CONNECT", "USER", NULL }; 11197c478bd9Sstevel@tonic-gate 11207c478bd9Sstevel@tonic-gate inplen = strlen(inp); 11217c478bd9Sstevel@tonic-gate for (idx = 0; (http_cmd = http_cmds[idx]) != NULL; 11227c478bd9Sstevel@tonic-gate idx++) 11237c478bd9Sstevel@tonic-gate { 11247c478bd9Sstevel@tonic-gate cmdlen = strlen(http_cmd); 11257c478bd9Sstevel@tonic-gate if (cmdlen < inplen && 11267c478bd9Sstevel@tonic-gate sm_strncasecmp(inp, http_cmd, cmdlen) == 0 && 11277c478bd9Sstevel@tonic-gate isascii(inp[cmdlen]) && isspace(inp[cmdlen])) 11287c478bd9Sstevel@tonic-gate { 11297c478bd9Sstevel@tonic-gate /* Open proxy, drop it */ 11307c478bd9Sstevel@tonic-gate message("421 4.7.0 %s Rejecting open proxy %s", 11317c478bd9Sstevel@tonic-gate MyHostName, CurSmtpClient); 11327c478bd9Sstevel@tonic-gate sm_syslog(LOG_INFO, e->e_id, 11337c478bd9Sstevel@tonic-gate "%s: probable open proxy: command=%.40s", 11347c478bd9Sstevel@tonic-gate CurSmtpClient, inp); 11357c478bd9Sstevel@tonic-gate goto doquit; 11367c478bd9Sstevel@tonic-gate } 11377c478bd9Sstevel@tonic-gate } 11387c478bd9Sstevel@tonic-gate first = false; 11397c478bd9Sstevel@tonic-gate } 11407c478bd9Sstevel@tonic-gate #endif /* _FFR_BLOCK_PROXIES */ 11417c478bd9Sstevel@tonic-gate 11427c478bd9Sstevel@tonic-gate /* clean up end of line */ 11437c478bd9Sstevel@tonic-gate fixcrlf(inp, true); 11447c478bd9Sstevel@tonic-gate 11457c478bd9Sstevel@tonic-gate #if PIPELINING 11467c478bd9Sstevel@tonic-gate # if _FFR_NO_PIPE 11477c478bd9Sstevel@tonic-gate /* 11487c478bd9Sstevel@tonic-gate ** if there is more input and pipelining is disabled: 11497c478bd9Sstevel@tonic-gate ** delay ... (and maybe discard the input?) 11507c478bd9Sstevel@tonic-gate ** XXX this doesn't really work, at least in tests using 11517c478bd9Sstevel@tonic-gate ** telnet SM_IO_IS_READABLE only returns 1 if there were 11527c478bd9Sstevel@tonic-gate ** more than 2 input lines available. 11537c478bd9Sstevel@tonic-gate */ 11547c478bd9Sstevel@tonic-gate 11557c478bd9Sstevel@tonic-gate if (bitset(SRV_NO_PIPE, features) && 11567c478bd9Sstevel@tonic-gate sm_io_getinfo(InChannel, SM_IO_IS_READABLE, NULL) > 0) 11577c478bd9Sstevel@tonic-gate { 11587c478bd9Sstevel@tonic-gate if (++np_log < 3) 11597c478bd9Sstevel@tonic-gate sm_syslog(LOG_INFO, NOQID, 11607c478bd9Sstevel@tonic-gate "unauthorized PIPELINING, sleeping"); 11617c478bd9Sstevel@tonic-gate sleep(1); 11627c478bd9Sstevel@tonic-gate } 11637c478bd9Sstevel@tonic-gate 11647c478bd9Sstevel@tonic-gate # endif /* _FFR_NO_PIPE */ 11657c478bd9Sstevel@tonic-gate #endif /* PIPELINING */ 11667c478bd9Sstevel@tonic-gate 11677c478bd9Sstevel@tonic-gate #if SASL 11687c478bd9Sstevel@tonic-gate if (authenticating == SASL_PROC_AUTH) 11697c478bd9Sstevel@tonic-gate { 11707c478bd9Sstevel@tonic-gate # if 0 11717c478bd9Sstevel@tonic-gate if (*inp == '\0') 11727c478bd9Sstevel@tonic-gate { 11737c478bd9Sstevel@tonic-gate authenticating = SASL_NOT_AUTH; 11747c478bd9Sstevel@tonic-gate message("501 5.5.2 missing input"); 11757c478bd9Sstevel@tonic-gate RESET_SASLCONN; 11767c478bd9Sstevel@tonic-gate continue; 11777c478bd9Sstevel@tonic-gate } 11787c478bd9Sstevel@tonic-gate # endif /* 0 */ 11797c478bd9Sstevel@tonic-gate if (*inp == '*' && *(inp + 1) == '\0') 11807c478bd9Sstevel@tonic-gate { 11817c478bd9Sstevel@tonic-gate authenticating = SASL_NOT_AUTH; 11827c478bd9Sstevel@tonic-gate 11837c478bd9Sstevel@tonic-gate /* rfc 2254 4. */ 11847c478bd9Sstevel@tonic-gate message("501 5.0.0 AUTH aborted"); 11857c478bd9Sstevel@tonic-gate RESET_SASLCONN; 11867c478bd9Sstevel@tonic-gate continue; 11877c478bd9Sstevel@tonic-gate } 11887c478bd9Sstevel@tonic-gate 11897c478bd9Sstevel@tonic-gate /* could this be shorter? XXX */ 11907c478bd9Sstevel@tonic-gate # if SASL >= 20000 11917c478bd9Sstevel@tonic-gate in = xalloc(strlen(inp) + 1); 11927c478bd9Sstevel@tonic-gate result = sasl_decode64(inp, strlen(inp), in, 11937c478bd9Sstevel@tonic-gate strlen(inp), &inlen); 11947c478bd9Sstevel@tonic-gate # else /* SASL >= 20000 */ 11957c478bd9Sstevel@tonic-gate out = xalloc(strlen(inp)); 11967c478bd9Sstevel@tonic-gate result = sasl_decode64(inp, strlen(inp), out, &outlen); 11977c478bd9Sstevel@tonic-gate # endif /* SASL >= 20000 */ 11987c478bd9Sstevel@tonic-gate if (result != SASL_OK) 11997c478bd9Sstevel@tonic-gate { 12007c478bd9Sstevel@tonic-gate authenticating = SASL_NOT_AUTH; 12017c478bd9Sstevel@tonic-gate 12027c478bd9Sstevel@tonic-gate /* rfc 2254 4. */ 12037c478bd9Sstevel@tonic-gate message("501 5.5.4 cannot decode AUTH parameter %s", 12047c478bd9Sstevel@tonic-gate inp); 12057c478bd9Sstevel@tonic-gate # if SASL >= 20000 12067c478bd9Sstevel@tonic-gate sm_free(in); 12077c478bd9Sstevel@tonic-gate # endif /* SASL >= 20000 */ 12087c478bd9Sstevel@tonic-gate RESET_SASLCONN; 12097c478bd9Sstevel@tonic-gate continue; 12107c478bd9Sstevel@tonic-gate } 12117c478bd9Sstevel@tonic-gate 12127c478bd9Sstevel@tonic-gate # if SASL >= 20000 12137c478bd9Sstevel@tonic-gate result = sasl_server_step(conn, in, inlen, 12147c478bd9Sstevel@tonic-gate &out, &outlen); 12157c478bd9Sstevel@tonic-gate sm_free(in); 12167c478bd9Sstevel@tonic-gate # else /* SASL >= 20000 */ 12177c478bd9Sstevel@tonic-gate result = sasl_server_step(conn, out, outlen, 12187c478bd9Sstevel@tonic-gate &out, &outlen, &errstr); 12197c478bd9Sstevel@tonic-gate # endif /* SASL >= 20000 */ 12207c478bd9Sstevel@tonic-gate 12217c478bd9Sstevel@tonic-gate /* get an OK if we're done */ 12227c478bd9Sstevel@tonic-gate if (result == SASL_OK) 12237c478bd9Sstevel@tonic-gate { 12247c478bd9Sstevel@tonic-gate authenticated: 12257c478bd9Sstevel@tonic-gate message("235 2.0.0 OK Authenticated"); 12267c478bd9Sstevel@tonic-gate authenticating = SASL_IS_AUTH; 12277c478bd9Sstevel@tonic-gate macdefine(&BlankEnvelope.e_macro, A_TEMP, 12287c478bd9Sstevel@tonic-gate macid("{auth_type}"), auth_type); 12297c478bd9Sstevel@tonic-gate 12307c478bd9Sstevel@tonic-gate # if SASL >= 20000 12317c478bd9Sstevel@tonic-gate user = macvalue(macid("{auth_authen}"), e); 12327c478bd9Sstevel@tonic-gate 12337c478bd9Sstevel@tonic-gate /* get security strength (features) */ 12347c478bd9Sstevel@tonic-gate result = sasl_getprop(conn, SASL_SSF, 12357c478bd9Sstevel@tonic-gate (const void **) &ssf); 12367c478bd9Sstevel@tonic-gate # else /* SASL >= 20000 */ 12377c478bd9Sstevel@tonic-gate result = sasl_getprop(conn, SASL_USERNAME, 12387c478bd9Sstevel@tonic-gate (void **)&user); 12397c478bd9Sstevel@tonic-gate if (result != SASL_OK) 12407c478bd9Sstevel@tonic-gate { 12417c478bd9Sstevel@tonic-gate user = ""; 12427c478bd9Sstevel@tonic-gate macdefine(&BlankEnvelope.e_macro, 12437c478bd9Sstevel@tonic-gate A_PERM, 12447c478bd9Sstevel@tonic-gate macid("{auth_authen}"), NULL); 12457c478bd9Sstevel@tonic-gate } 12467c478bd9Sstevel@tonic-gate else 12477c478bd9Sstevel@tonic-gate { 12487c478bd9Sstevel@tonic-gate macdefine(&BlankEnvelope.e_macro, 12497c478bd9Sstevel@tonic-gate A_TEMP, 12507c478bd9Sstevel@tonic-gate macid("{auth_authen}"), 12517c478bd9Sstevel@tonic-gate xtextify(user, "<>\")")); 12527c478bd9Sstevel@tonic-gate } 12537c478bd9Sstevel@tonic-gate 12547c478bd9Sstevel@tonic-gate # if 0 12557c478bd9Sstevel@tonic-gate /* get realm? */ 12567c478bd9Sstevel@tonic-gate sasl_getprop(conn, SASL_REALM, (void **) &data); 12577c478bd9Sstevel@tonic-gate # endif /* 0 */ 12587c478bd9Sstevel@tonic-gate 12597c478bd9Sstevel@tonic-gate /* get security strength (features) */ 12607c478bd9Sstevel@tonic-gate result = sasl_getprop(conn, SASL_SSF, 12617c478bd9Sstevel@tonic-gate (void **) &ssf); 12627c478bd9Sstevel@tonic-gate # endif /* SASL >= 20000 */ 12637c478bd9Sstevel@tonic-gate if (result != SASL_OK) 12647c478bd9Sstevel@tonic-gate { 12657c478bd9Sstevel@tonic-gate macdefine(&BlankEnvelope.e_macro, 12667c478bd9Sstevel@tonic-gate A_PERM, 12677c478bd9Sstevel@tonic-gate macid("{auth_ssf}"), "0"); 12687c478bd9Sstevel@tonic-gate ssf = NULL; 12697c478bd9Sstevel@tonic-gate } 12707c478bd9Sstevel@tonic-gate else 12717c478bd9Sstevel@tonic-gate { 12727c478bd9Sstevel@tonic-gate char pbuf[8]; 12737c478bd9Sstevel@tonic-gate 12747c478bd9Sstevel@tonic-gate (void) sm_snprintf(pbuf, sizeof pbuf, 12757c478bd9Sstevel@tonic-gate "%u", *ssf); 12767c478bd9Sstevel@tonic-gate macdefine(&BlankEnvelope.e_macro, 12777c478bd9Sstevel@tonic-gate A_TEMP, 12787c478bd9Sstevel@tonic-gate macid("{auth_ssf}"), pbuf); 12797c478bd9Sstevel@tonic-gate if (tTd(95, 8)) 12807c478bd9Sstevel@tonic-gate sm_dprintf("AUTH auth_ssf: %u\n", 12817c478bd9Sstevel@tonic-gate *ssf); 12827c478bd9Sstevel@tonic-gate } 12837c478bd9Sstevel@tonic-gate 12847c478bd9Sstevel@tonic-gate /* 12857c478bd9Sstevel@tonic-gate ** Only switch to encrypted connection 12867c478bd9Sstevel@tonic-gate ** if a security layer has been negotiated 12877c478bd9Sstevel@tonic-gate */ 12887c478bd9Sstevel@tonic-gate 12897c478bd9Sstevel@tonic-gate if (ssf != NULL && *ssf > 0) 12907c478bd9Sstevel@tonic-gate { 1291*3ee0e492Sjbeck int tmo; 1292*3ee0e492Sjbeck 12937c478bd9Sstevel@tonic-gate /* 12947c478bd9Sstevel@tonic-gate ** Convert I/O layer to use SASL. 12957c478bd9Sstevel@tonic-gate ** If the call fails, the connection 12967c478bd9Sstevel@tonic-gate ** is aborted. 12977c478bd9Sstevel@tonic-gate */ 12987c478bd9Sstevel@tonic-gate 1299*3ee0e492Sjbeck tmo = TimeOuts.to_datablock * 1000; 13007c478bd9Sstevel@tonic-gate if (sfdcsasl(&InChannel, &OutChannel, 1301*3ee0e492Sjbeck conn, tmo) == 0) 13027c478bd9Sstevel@tonic-gate { 13037c478bd9Sstevel@tonic-gate /* restart dialogue */ 13047c478bd9Sstevel@tonic-gate n_helo = 0; 13057c478bd9Sstevel@tonic-gate # if PIPELINING 13067c478bd9Sstevel@tonic-gate (void) sm_io_autoflush(InChannel, 13077c478bd9Sstevel@tonic-gate OutChannel); 13087c478bd9Sstevel@tonic-gate # endif /* PIPELINING */ 13097c478bd9Sstevel@tonic-gate } 13107c478bd9Sstevel@tonic-gate else 13117c478bd9Sstevel@tonic-gate syserr("503 5.3.3 SASL TLS failed"); 13127c478bd9Sstevel@tonic-gate } 13137c478bd9Sstevel@tonic-gate 13147c478bd9Sstevel@tonic-gate /* NULL pointer ok since it's our function */ 13157c478bd9Sstevel@tonic-gate if (LogLevel > 8) 13167c478bd9Sstevel@tonic-gate sm_syslog(LOG_INFO, NOQID, 13177c478bd9Sstevel@tonic-gate "AUTH=server, relay=%s, authid=%.128s, mech=%.16s, bits=%d", 13187c478bd9Sstevel@tonic-gate CurSmtpClient, 13197c478bd9Sstevel@tonic-gate shortenstring(user, 128), 13207c478bd9Sstevel@tonic-gate auth_type, *ssf); 13217c478bd9Sstevel@tonic-gate } 13227c478bd9Sstevel@tonic-gate else if (result == SASL_CONTINUE) 13237c478bd9Sstevel@tonic-gate { 13247c478bd9Sstevel@tonic-gate len = ENC64LEN(outlen); 13257c478bd9Sstevel@tonic-gate out2 = xalloc(len); 13267c478bd9Sstevel@tonic-gate result = sasl_encode64(out, outlen, out2, len, 13277c478bd9Sstevel@tonic-gate &out2len); 13287c478bd9Sstevel@tonic-gate if (result != SASL_OK) 13297c478bd9Sstevel@tonic-gate { 13307c478bd9Sstevel@tonic-gate /* correct code? XXX */ 13317c478bd9Sstevel@tonic-gate /* 454 Temp. authentication failure */ 13327c478bd9Sstevel@tonic-gate message("454 4.5.4 Internal error: unable to encode64"); 13337c478bd9Sstevel@tonic-gate if (LogLevel > 5) 13347c478bd9Sstevel@tonic-gate sm_syslog(LOG_WARNING, e->e_id, 13357c478bd9Sstevel@tonic-gate "AUTH encode64 error [%d for \"%s\"]", 13367c478bd9Sstevel@tonic-gate result, out); 13377c478bd9Sstevel@tonic-gate /* start over? */ 13387c478bd9Sstevel@tonic-gate authenticating = SASL_NOT_AUTH; 13397c478bd9Sstevel@tonic-gate } 13407c478bd9Sstevel@tonic-gate else 13417c478bd9Sstevel@tonic-gate { 13427c478bd9Sstevel@tonic-gate message("334 %s", out2); 13437c478bd9Sstevel@tonic-gate if (tTd(95, 2)) 13447c478bd9Sstevel@tonic-gate sm_dprintf("AUTH continue: msg='%s' len=%u\n", 13457c478bd9Sstevel@tonic-gate out2, out2len); 13467c478bd9Sstevel@tonic-gate } 13477c478bd9Sstevel@tonic-gate # if SASL >= 20000 13487c478bd9Sstevel@tonic-gate sm_free(out2); 13497c478bd9Sstevel@tonic-gate # endif /* SASL >= 20000 */ 13507c478bd9Sstevel@tonic-gate } 13517c478bd9Sstevel@tonic-gate else 13527c478bd9Sstevel@tonic-gate { 13537c478bd9Sstevel@tonic-gate /* not SASL_OK or SASL_CONT */ 13547c478bd9Sstevel@tonic-gate message("535 5.7.0 authentication failed"); 13557c478bd9Sstevel@tonic-gate if (LogLevel > 9) 13567c478bd9Sstevel@tonic-gate sm_syslog(LOG_WARNING, e->e_id, 13577c478bd9Sstevel@tonic-gate "AUTH failure (%s): %s (%d) %s", 13587c478bd9Sstevel@tonic-gate auth_type, 13597c478bd9Sstevel@tonic-gate sasl_errstring(result, NULL, 13607c478bd9Sstevel@tonic-gate NULL), 13617c478bd9Sstevel@tonic-gate result, 13627c478bd9Sstevel@tonic-gate # if SASL >= 20000 13637c478bd9Sstevel@tonic-gate sasl_errdetail(conn)); 13647c478bd9Sstevel@tonic-gate # else /* SASL >= 20000 */ 13657c478bd9Sstevel@tonic-gate errstr == NULL ? "" : errstr); 13667c478bd9Sstevel@tonic-gate # endif /* SASL >= 20000 */ 13677c478bd9Sstevel@tonic-gate RESET_SASLCONN; 13687c478bd9Sstevel@tonic-gate authenticating = SASL_NOT_AUTH; 13697c478bd9Sstevel@tonic-gate } 13707c478bd9Sstevel@tonic-gate } 13717c478bd9Sstevel@tonic-gate else 13727c478bd9Sstevel@tonic-gate { 13737c478bd9Sstevel@tonic-gate /* don't want to do any of this if authenticating */ 13747c478bd9Sstevel@tonic-gate #endif /* SASL */ 13757c478bd9Sstevel@tonic-gate 13767c478bd9Sstevel@tonic-gate /* echo command to transcript */ 13777c478bd9Sstevel@tonic-gate if (e->e_xfp != NULL) 13787c478bd9Sstevel@tonic-gate (void) sm_io_fprintf(e->e_xfp, SM_TIME_DEFAULT, 13797c478bd9Sstevel@tonic-gate "<<< %s\n", inp); 13807c478bd9Sstevel@tonic-gate 13817c478bd9Sstevel@tonic-gate if (LogLevel > 14) 13827c478bd9Sstevel@tonic-gate sm_syslog(LOG_INFO, e->e_id, "<-- %s", inp); 13837c478bd9Sstevel@tonic-gate 13847c478bd9Sstevel@tonic-gate /* break off command */ 13857c478bd9Sstevel@tonic-gate for (p = inp; isascii(*p) && isspace(*p); p++) 13867c478bd9Sstevel@tonic-gate continue; 13877c478bd9Sstevel@tonic-gate cmd = cmdbuf; 13887c478bd9Sstevel@tonic-gate while (*p != '\0' && 13897c478bd9Sstevel@tonic-gate !(isascii(*p) && isspace(*p)) && 13907c478bd9Sstevel@tonic-gate cmd < &cmdbuf[sizeof cmdbuf - 2]) 13917c478bd9Sstevel@tonic-gate *cmd++ = *p++; 13927c478bd9Sstevel@tonic-gate *cmd = '\0'; 13937c478bd9Sstevel@tonic-gate 13947c478bd9Sstevel@tonic-gate /* throw away leading whitespace */ 13957c478bd9Sstevel@tonic-gate SKIP_SPACE(p); 13967c478bd9Sstevel@tonic-gate 13977c478bd9Sstevel@tonic-gate /* decode command */ 13987c478bd9Sstevel@tonic-gate for (c = CmdTab; c->cmd_name != NULL; c++) 13997c478bd9Sstevel@tonic-gate { 14007c478bd9Sstevel@tonic-gate if (sm_strcasecmp(c->cmd_name, cmdbuf) == 0) 14017c478bd9Sstevel@tonic-gate break; 14027c478bd9Sstevel@tonic-gate } 14037c478bd9Sstevel@tonic-gate 14047c478bd9Sstevel@tonic-gate /* reset errors */ 14057c478bd9Sstevel@tonic-gate errno = 0; 14067c478bd9Sstevel@tonic-gate 14077c478bd9Sstevel@tonic-gate /* check whether a "non-null" command has been used */ 14087c478bd9Sstevel@tonic-gate switch (c->cmd_code) 14097c478bd9Sstevel@tonic-gate { 14107c478bd9Sstevel@tonic-gate #if SASL 14117c478bd9Sstevel@tonic-gate case CMDAUTH: 14127c478bd9Sstevel@tonic-gate /* avoid information leak; take first two words? */ 14137c478bd9Sstevel@tonic-gate q = "AUTH"; 14147c478bd9Sstevel@tonic-gate break; 14157c478bd9Sstevel@tonic-gate #endif /* SASL */ 14167c478bd9Sstevel@tonic-gate 14177c478bd9Sstevel@tonic-gate case CMDMAIL: 14187c478bd9Sstevel@tonic-gate case CMDEXPN: 14197c478bd9Sstevel@tonic-gate case CMDVRFY: 14207c478bd9Sstevel@tonic-gate case CMDETRN: 14217c478bd9Sstevel@tonic-gate lognullconnection = false; 14227c478bd9Sstevel@tonic-gate /* FALLTHROUGH */ 14237c478bd9Sstevel@tonic-gate default: 14247c478bd9Sstevel@tonic-gate q = inp; 14257c478bd9Sstevel@tonic-gate break; 14267c478bd9Sstevel@tonic-gate } 14277c478bd9Sstevel@tonic-gate 14287c478bd9Sstevel@tonic-gate if (e->e_id == NULL) 14297c478bd9Sstevel@tonic-gate sm_setproctitle(true, e, "%s: %.80s", 14307c478bd9Sstevel@tonic-gate CurSmtpClient, q); 14317c478bd9Sstevel@tonic-gate else 14327c478bd9Sstevel@tonic-gate sm_setproctitle(true, e, "%s %s: %.80s", 14337c478bd9Sstevel@tonic-gate qid_printname(e), 14347c478bd9Sstevel@tonic-gate CurSmtpClient, q); 14357c478bd9Sstevel@tonic-gate 14367c478bd9Sstevel@tonic-gate /* 14377c478bd9Sstevel@tonic-gate ** Process command. 14387c478bd9Sstevel@tonic-gate ** 14397c478bd9Sstevel@tonic-gate ** If we are running as a null server, return 550 14407c478bd9Sstevel@tonic-gate ** to almost everything. 14417c478bd9Sstevel@tonic-gate */ 14427c478bd9Sstevel@tonic-gate 14437c478bd9Sstevel@tonic-gate if (nullserver != NULL || bitnset(D_ETRNONLY, d_flags)) 14447c478bd9Sstevel@tonic-gate { 14457c478bd9Sstevel@tonic-gate switch (c->cmd_code) 14467c478bd9Sstevel@tonic-gate { 14477c478bd9Sstevel@tonic-gate case CMDQUIT: 14487c478bd9Sstevel@tonic-gate case CMDHELO: 14497c478bd9Sstevel@tonic-gate case CMDEHLO: 14507c478bd9Sstevel@tonic-gate case CMDNOOP: 14517c478bd9Sstevel@tonic-gate case CMDRSET: 14527c478bd9Sstevel@tonic-gate case CMDERROR: 14537c478bd9Sstevel@tonic-gate /* process normally */ 14547c478bd9Sstevel@tonic-gate break; 14557c478bd9Sstevel@tonic-gate 14567c478bd9Sstevel@tonic-gate case CMDETRN: 14577c478bd9Sstevel@tonic-gate if (bitnset(D_ETRNONLY, d_flags) && 14587c478bd9Sstevel@tonic-gate nullserver == NULL) 14597c478bd9Sstevel@tonic-gate break; 14607c478bd9Sstevel@tonic-gate DELAY_CONN("ETRN"); 14617c478bd9Sstevel@tonic-gate /* FALLTHROUGH */ 14627c478bd9Sstevel@tonic-gate 14637c478bd9Sstevel@tonic-gate default: 14647c478bd9Sstevel@tonic-gate #if MAXBADCOMMANDS > 0 14657c478bd9Sstevel@tonic-gate /* theoretically this could overflow */ 14667c478bd9Sstevel@tonic-gate if (nullserver != NULL && 14677c478bd9Sstevel@tonic-gate ++n_badcmds > MAXBADCOMMANDS) 14687c478bd9Sstevel@tonic-gate { 14697c478bd9Sstevel@tonic-gate message("421 4.7.0 %s Too many bad commands; closing connection", 14707c478bd9Sstevel@tonic-gate MyHostName); 14717c478bd9Sstevel@tonic-gate 14727c478bd9Sstevel@tonic-gate /* arrange to ignore send list */ 14737c478bd9Sstevel@tonic-gate e->e_sendqueue = NULL; 14747c478bd9Sstevel@tonic-gate goto doquit; 14757c478bd9Sstevel@tonic-gate } 14767c478bd9Sstevel@tonic-gate #endif /* MAXBADCOMMANDS > 0 */ 14777c478bd9Sstevel@tonic-gate if (nullserver != NULL) 14787c478bd9Sstevel@tonic-gate { 14797c478bd9Sstevel@tonic-gate if (ISSMTPREPLY(nullserver)) 14807c478bd9Sstevel@tonic-gate usrerr(nullserver); 14817c478bd9Sstevel@tonic-gate else 14827c478bd9Sstevel@tonic-gate usrerr("550 5.0.0 %s", 14837c478bd9Sstevel@tonic-gate nullserver); 14847c478bd9Sstevel@tonic-gate } 14857c478bd9Sstevel@tonic-gate else 14867c478bd9Sstevel@tonic-gate usrerr("452 4.4.5 Insufficient disk space; try again later"); 14877c478bd9Sstevel@tonic-gate continue; 14887c478bd9Sstevel@tonic-gate } 14897c478bd9Sstevel@tonic-gate } 14907c478bd9Sstevel@tonic-gate 14917c478bd9Sstevel@tonic-gate switch (c->cmd_code) 14927c478bd9Sstevel@tonic-gate { 14937c478bd9Sstevel@tonic-gate #if SASL 14947c478bd9Sstevel@tonic-gate case CMDAUTH: /* sasl */ 14957c478bd9Sstevel@tonic-gate DELAY_CONN("AUTH"); 14967c478bd9Sstevel@tonic-gate if (!sasl_ok || n_mechs <= 0) 14977c478bd9Sstevel@tonic-gate { 14987c478bd9Sstevel@tonic-gate message("503 5.3.3 AUTH not available"); 14997c478bd9Sstevel@tonic-gate break; 15007c478bd9Sstevel@tonic-gate } 15017c478bd9Sstevel@tonic-gate if (authenticating == SASL_IS_AUTH) 15027c478bd9Sstevel@tonic-gate { 15037c478bd9Sstevel@tonic-gate message("503 5.5.0 Already Authenticated"); 15047c478bd9Sstevel@tonic-gate break; 15057c478bd9Sstevel@tonic-gate } 15067c478bd9Sstevel@tonic-gate if (smtp.sm_gotmail) 15077c478bd9Sstevel@tonic-gate { 15087c478bd9Sstevel@tonic-gate message("503 5.5.0 AUTH not permitted during a mail transaction"); 15097c478bd9Sstevel@tonic-gate break; 15107c478bd9Sstevel@tonic-gate } 15117c478bd9Sstevel@tonic-gate if (tempfail) 15127c478bd9Sstevel@tonic-gate { 15137c478bd9Sstevel@tonic-gate if (LogLevel > 9) 15147c478bd9Sstevel@tonic-gate sm_syslog(LOG_INFO, e->e_id, 15157c478bd9Sstevel@tonic-gate "SMTP AUTH command (%.100s) from %s tempfailed (due to previous checks)", 15167c478bd9Sstevel@tonic-gate p, CurSmtpClient); 15177c478bd9Sstevel@tonic-gate usrerr("454 4.3.0 Please try again later"); 15187c478bd9Sstevel@tonic-gate break; 15197c478bd9Sstevel@tonic-gate } 15207c478bd9Sstevel@tonic-gate 15217c478bd9Sstevel@tonic-gate ismore = false; 15227c478bd9Sstevel@tonic-gate 15237c478bd9Sstevel@tonic-gate /* crude way to avoid crack attempts */ 15247c478bd9Sstevel@tonic-gate STOP_IF_ATTACK(checksmtpattack(&n_auth, n_mechs + 1, 15257c478bd9Sstevel@tonic-gate true, "AUTH", e)); 15267c478bd9Sstevel@tonic-gate 15277c478bd9Sstevel@tonic-gate /* make sure mechanism (p) is a valid string */ 15287c478bd9Sstevel@tonic-gate for (q = p; *q != '\0' && isascii(*q); q++) 15297c478bd9Sstevel@tonic-gate { 15307c478bd9Sstevel@tonic-gate if (isspace(*q)) 15317c478bd9Sstevel@tonic-gate { 15327c478bd9Sstevel@tonic-gate *q = '\0'; 15337c478bd9Sstevel@tonic-gate while (*++q != '\0' && 15347c478bd9Sstevel@tonic-gate isascii(*q) && isspace(*q)) 15357c478bd9Sstevel@tonic-gate continue; 15367c478bd9Sstevel@tonic-gate *(q - 1) = '\0'; 15377c478bd9Sstevel@tonic-gate ismore = (*q != '\0'); 15387c478bd9Sstevel@tonic-gate break; 15397c478bd9Sstevel@tonic-gate } 15407c478bd9Sstevel@tonic-gate } 15417c478bd9Sstevel@tonic-gate 15427c478bd9Sstevel@tonic-gate if (*p == '\0') 15437c478bd9Sstevel@tonic-gate { 15447c478bd9Sstevel@tonic-gate message("501 5.5.2 AUTH mechanism must be specified"); 15457c478bd9Sstevel@tonic-gate break; 15467c478bd9Sstevel@tonic-gate } 15477c478bd9Sstevel@tonic-gate 15487c478bd9Sstevel@tonic-gate /* check whether mechanism is available */ 15497c478bd9Sstevel@tonic-gate if (iteminlist(p, mechlist, " ") == NULL) 15507c478bd9Sstevel@tonic-gate { 15517c478bd9Sstevel@tonic-gate message("504 5.3.3 AUTH mechanism %.32s not available", 15527c478bd9Sstevel@tonic-gate p); 15537c478bd9Sstevel@tonic-gate break; 15547c478bd9Sstevel@tonic-gate } 15557c478bd9Sstevel@tonic-gate 15567c478bd9Sstevel@tonic-gate if (ismore) 15577c478bd9Sstevel@tonic-gate { 15587c478bd9Sstevel@tonic-gate /* could this be shorter? XXX */ 15597c478bd9Sstevel@tonic-gate # if SASL >= 20000 15607c478bd9Sstevel@tonic-gate in = xalloc(strlen(q) + 1); 15617c478bd9Sstevel@tonic-gate result = sasl_decode64(q, strlen(q), in, 15627c478bd9Sstevel@tonic-gate strlen(q), &inlen); 15637c478bd9Sstevel@tonic-gate # else /* SASL >= 20000 */ 15647c478bd9Sstevel@tonic-gate in = sm_rpool_malloc(e->e_rpool, strlen(q)); 15657c478bd9Sstevel@tonic-gate result = sasl_decode64(q, strlen(q), in, 15667c478bd9Sstevel@tonic-gate &inlen); 15677c478bd9Sstevel@tonic-gate # endif /* SASL >= 20000 */ 15687c478bd9Sstevel@tonic-gate if (result != SASL_OK) 15697c478bd9Sstevel@tonic-gate { 15707c478bd9Sstevel@tonic-gate message("501 5.5.4 cannot BASE64 decode '%s'", 15717c478bd9Sstevel@tonic-gate q); 15727c478bd9Sstevel@tonic-gate if (LogLevel > 5) 15737c478bd9Sstevel@tonic-gate sm_syslog(LOG_WARNING, e->e_id, 15747c478bd9Sstevel@tonic-gate "AUTH decode64 error [%d for \"%s\"]", 15757c478bd9Sstevel@tonic-gate result, q); 15767c478bd9Sstevel@tonic-gate /* start over? */ 15777c478bd9Sstevel@tonic-gate authenticating = SASL_NOT_AUTH; 15787c478bd9Sstevel@tonic-gate # if SASL >= 20000 15797c478bd9Sstevel@tonic-gate sm_free(in); 15807c478bd9Sstevel@tonic-gate # endif /* SASL >= 20000 */ 15817c478bd9Sstevel@tonic-gate in = NULL; 15827c478bd9Sstevel@tonic-gate inlen = 0; 15837c478bd9Sstevel@tonic-gate break; 15847c478bd9Sstevel@tonic-gate } 15857c478bd9Sstevel@tonic-gate } 15867c478bd9Sstevel@tonic-gate else 15877c478bd9Sstevel@tonic-gate { 15887c478bd9Sstevel@tonic-gate in = NULL; 15897c478bd9Sstevel@tonic-gate inlen = 0; 15907c478bd9Sstevel@tonic-gate } 15917c478bd9Sstevel@tonic-gate 15927c478bd9Sstevel@tonic-gate /* see if that auth type exists */ 15937c478bd9Sstevel@tonic-gate # if SASL >= 20000 15947c478bd9Sstevel@tonic-gate result = sasl_server_start(conn, p, in, inlen, 15957c478bd9Sstevel@tonic-gate &out, &outlen); 15967c478bd9Sstevel@tonic-gate if (in != NULL) 15977c478bd9Sstevel@tonic-gate sm_free(in); 15987c478bd9Sstevel@tonic-gate # else /* SASL >= 20000 */ 15997c478bd9Sstevel@tonic-gate result = sasl_server_start(conn, p, in, inlen, 16007c478bd9Sstevel@tonic-gate &out, &outlen, &errstr); 16017c478bd9Sstevel@tonic-gate # endif /* SASL >= 20000 */ 16027c478bd9Sstevel@tonic-gate 16037c478bd9Sstevel@tonic-gate if (result != SASL_OK && result != SASL_CONTINUE) 16047c478bd9Sstevel@tonic-gate { 16057c478bd9Sstevel@tonic-gate message("535 5.7.0 authentication failed"); 16067c478bd9Sstevel@tonic-gate if (LogLevel > 9) 16077c478bd9Sstevel@tonic-gate sm_syslog(LOG_ERR, e->e_id, 16087c478bd9Sstevel@tonic-gate "AUTH failure (%s): %s (%d) %s", 16097c478bd9Sstevel@tonic-gate p, 16107c478bd9Sstevel@tonic-gate sasl_errstring(result, NULL, 16117c478bd9Sstevel@tonic-gate NULL), 16127c478bd9Sstevel@tonic-gate result, 16137c478bd9Sstevel@tonic-gate # if SASL >= 20000 16147c478bd9Sstevel@tonic-gate sasl_errdetail(conn)); 16157c478bd9Sstevel@tonic-gate # else /* SASL >= 20000 */ 16167c478bd9Sstevel@tonic-gate errstr); 16177c478bd9Sstevel@tonic-gate # endif /* SASL >= 20000 */ 16187c478bd9Sstevel@tonic-gate RESET_SASLCONN; 16197c478bd9Sstevel@tonic-gate break; 16207c478bd9Sstevel@tonic-gate } 16217c478bd9Sstevel@tonic-gate auth_type = newstr(p); 16227c478bd9Sstevel@tonic-gate 16237c478bd9Sstevel@tonic-gate if (result == SASL_OK) 16247c478bd9Sstevel@tonic-gate { 16257c478bd9Sstevel@tonic-gate /* ugly, but same code */ 16267c478bd9Sstevel@tonic-gate goto authenticated; 16277c478bd9Sstevel@tonic-gate /* authenticated by the initial response */ 16287c478bd9Sstevel@tonic-gate } 16297c478bd9Sstevel@tonic-gate 16307c478bd9Sstevel@tonic-gate /* len is at least 2 */ 16317c478bd9Sstevel@tonic-gate len = ENC64LEN(outlen); 16327c478bd9Sstevel@tonic-gate out2 = xalloc(len); 16337c478bd9Sstevel@tonic-gate result = sasl_encode64(out, outlen, out2, len, 16347c478bd9Sstevel@tonic-gate &out2len); 16357c478bd9Sstevel@tonic-gate 16367c478bd9Sstevel@tonic-gate if (result != SASL_OK) 16377c478bd9Sstevel@tonic-gate { 16387c478bd9Sstevel@tonic-gate message("454 4.5.4 Temporary authentication failure"); 16397c478bd9Sstevel@tonic-gate if (LogLevel > 5) 16407c478bd9Sstevel@tonic-gate sm_syslog(LOG_WARNING, e->e_id, 16417c478bd9Sstevel@tonic-gate "AUTH encode64 error [%d for \"%s\"]", 16427c478bd9Sstevel@tonic-gate result, out); 16437c478bd9Sstevel@tonic-gate 16447c478bd9Sstevel@tonic-gate /* start over? */ 16457c478bd9Sstevel@tonic-gate authenticating = SASL_NOT_AUTH; 16467c478bd9Sstevel@tonic-gate RESET_SASLCONN; 16477c478bd9Sstevel@tonic-gate } 16487c478bd9Sstevel@tonic-gate else 16497c478bd9Sstevel@tonic-gate { 16507c478bd9Sstevel@tonic-gate message("334 %s", out2); 16517c478bd9Sstevel@tonic-gate authenticating = SASL_PROC_AUTH; 16527c478bd9Sstevel@tonic-gate } 16537c478bd9Sstevel@tonic-gate # if SASL >= 20000 16547c478bd9Sstevel@tonic-gate sm_free(out2); 16557c478bd9Sstevel@tonic-gate # endif /* SASL >= 20000 */ 16567c478bd9Sstevel@tonic-gate break; 16577c478bd9Sstevel@tonic-gate #endif /* SASL */ 16587c478bd9Sstevel@tonic-gate 16597c478bd9Sstevel@tonic-gate #if STARTTLS 16607c478bd9Sstevel@tonic-gate case CMDSTLS: /* starttls */ 16617c478bd9Sstevel@tonic-gate DELAY_CONN("STARTTLS"); 16627c478bd9Sstevel@tonic-gate if (*p != '\0') 16637c478bd9Sstevel@tonic-gate { 16647c478bd9Sstevel@tonic-gate message("501 5.5.2 Syntax error (no parameters allowed)"); 16657c478bd9Sstevel@tonic-gate break; 16667c478bd9Sstevel@tonic-gate } 16677c478bd9Sstevel@tonic-gate if (!bitset(SRV_OFFER_TLS, features)) 16687c478bd9Sstevel@tonic-gate { 16697c478bd9Sstevel@tonic-gate message("503 5.5.0 TLS not available"); 16707c478bd9Sstevel@tonic-gate break; 16717c478bd9Sstevel@tonic-gate } 16727c478bd9Sstevel@tonic-gate if (!tls_ok_srv) 16737c478bd9Sstevel@tonic-gate { 16747c478bd9Sstevel@tonic-gate message("454 4.3.3 TLS not available after start"); 16757c478bd9Sstevel@tonic-gate break; 16767c478bd9Sstevel@tonic-gate } 16777c478bd9Sstevel@tonic-gate if (smtp.sm_gotmail) 16787c478bd9Sstevel@tonic-gate { 16797c478bd9Sstevel@tonic-gate message("503 5.5.0 TLS not permitted during a mail transaction"); 16807c478bd9Sstevel@tonic-gate break; 16817c478bd9Sstevel@tonic-gate } 16827c478bd9Sstevel@tonic-gate if (tempfail) 16837c478bd9Sstevel@tonic-gate { 16847c478bd9Sstevel@tonic-gate if (LogLevel > 9) 16857c478bd9Sstevel@tonic-gate sm_syslog(LOG_INFO, e->e_id, 16867c478bd9Sstevel@tonic-gate "SMTP STARTTLS command (%.100s) from %s tempfailed (due to previous checks)", 16877c478bd9Sstevel@tonic-gate p, CurSmtpClient); 16887c478bd9Sstevel@tonic-gate usrerr("454 4.7.0 Please try again later"); 16897c478bd9Sstevel@tonic-gate break; 16907c478bd9Sstevel@tonic-gate } 16917c478bd9Sstevel@tonic-gate starttls: 16927c478bd9Sstevel@tonic-gate # if TLS_NO_RSA 16937c478bd9Sstevel@tonic-gate /* 16947c478bd9Sstevel@tonic-gate ** XXX do we need a temp key ? 16957c478bd9Sstevel@tonic-gate */ 16967c478bd9Sstevel@tonic-gate # else /* TLS_NO_RSA */ 16977c478bd9Sstevel@tonic-gate # endif /* TLS_NO_RSA */ 16987c478bd9Sstevel@tonic-gate 16997c478bd9Sstevel@tonic-gate # if TLS_VRFY_PER_CTX 17007c478bd9Sstevel@tonic-gate /* 17017c478bd9Sstevel@tonic-gate ** Note: this sets the verification globally 17027c478bd9Sstevel@tonic-gate ** (per SSL_CTX) 17037c478bd9Sstevel@tonic-gate ** it's ok since it applies only to one transaction 17047c478bd9Sstevel@tonic-gate */ 17057c478bd9Sstevel@tonic-gate 17067c478bd9Sstevel@tonic-gate TLS_VERIFY_CLIENT(); 17077c478bd9Sstevel@tonic-gate # endif /* TLS_VRFY_PER_CTX */ 17087c478bd9Sstevel@tonic-gate 17097c478bd9Sstevel@tonic-gate if (srv_ssl != NULL) 17107c478bd9Sstevel@tonic-gate SSL_clear(srv_ssl); 17117c478bd9Sstevel@tonic-gate else if ((srv_ssl = SSL_new(srv_ctx)) == NULL) 17127c478bd9Sstevel@tonic-gate { 17137c478bd9Sstevel@tonic-gate message("454 4.3.3 TLS not available: error generating SSL handle"); 17147c478bd9Sstevel@tonic-gate if (LogLevel > 8) 17157c478bd9Sstevel@tonic-gate tlslogerr("server"); 17167c478bd9Sstevel@tonic-gate goto tls_done; 17177c478bd9Sstevel@tonic-gate } 17187c478bd9Sstevel@tonic-gate 17197c478bd9Sstevel@tonic-gate # if !TLS_VRFY_PER_CTX 17207c478bd9Sstevel@tonic-gate /* 17217c478bd9Sstevel@tonic-gate ** this could be used if it were possible to set 17227c478bd9Sstevel@tonic-gate ** verification per SSL (connection) 17237c478bd9Sstevel@tonic-gate ** not just per SSL_CTX (global) 17247c478bd9Sstevel@tonic-gate */ 17257c478bd9Sstevel@tonic-gate 17267c478bd9Sstevel@tonic-gate TLS_VERIFY_CLIENT(); 17277c478bd9Sstevel@tonic-gate # endif /* !TLS_VRFY_PER_CTX */ 17287c478bd9Sstevel@tonic-gate 17297c478bd9Sstevel@tonic-gate rfd = sm_io_getinfo(InChannel, SM_IO_WHAT_FD, NULL); 17307c478bd9Sstevel@tonic-gate wfd = sm_io_getinfo(OutChannel, SM_IO_WHAT_FD, NULL); 17317c478bd9Sstevel@tonic-gate 17327c478bd9Sstevel@tonic-gate if (rfd < 0 || wfd < 0 || 17337c478bd9Sstevel@tonic-gate SSL_set_rfd(srv_ssl, rfd) <= 0 || 17347c478bd9Sstevel@tonic-gate SSL_set_wfd(srv_ssl, wfd) <= 0) 17357c478bd9Sstevel@tonic-gate { 17367c478bd9Sstevel@tonic-gate message("454 4.3.3 TLS not available: error set fd"); 17377c478bd9Sstevel@tonic-gate SSL_free(srv_ssl); 17387c478bd9Sstevel@tonic-gate srv_ssl = NULL; 17397c478bd9Sstevel@tonic-gate goto tls_done; 17407c478bd9Sstevel@tonic-gate } 17417c478bd9Sstevel@tonic-gate if (!smtps) 17427c478bd9Sstevel@tonic-gate message("220 2.0.0 Ready to start TLS"); 17437c478bd9Sstevel@tonic-gate # if PIPELINING 17447c478bd9Sstevel@tonic-gate (void) sm_io_flush(OutChannel, SM_TIME_DEFAULT); 17457c478bd9Sstevel@tonic-gate # endif /* PIPELINING */ 17467c478bd9Sstevel@tonic-gate 17477c478bd9Sstevel@tonic-gate SSL_set_accept_state(srv_ssl); 17487c478bd9Sstevel@tonic-gate 17497c478bd9Sstevel@tonic-gate # define SSL_ACC(s) SSL_accept(s) 17507c478bd9Sstevel@tonic-gate 17517c478bd9Sstevel@tonic-gate tlsstart = curtime(); 17527c478bd9Sstevel@tonic-gate ssl_retry: 17537c478bd9Sstevel@tonic-gate if ((r = SSL_ACC(srv_ssl)) <= 0) 17547c478bd9Sstevel@tonic-gate { 1755445f2479Sjbeck int i, ssl_err; 17567c478bd9Sstevel@tonic-gate 1757445f2479Sjbeck ssl_err = SSL_get_error(srv_ssl, r); 1758445f2479Sjbeck i = tls_retry(srv_ssl, rfd, wfd, tlsstart, 1759445f2479Sjbeck TimeOuts.to_starttls, ssl_err, 1760445f2479Sjbeck "server"); 1761445f2479Sjbeck if (i > 0) 17627c478bd9Sstevel@tonic-gate goto ssl_retry; 17637c478bd9Sstevel@tonic-gate 17647c478bd9Sstevel@tonic-gate if (LogLevel > 5) 17657c478bd9Sstevel@tonic-gate { 17667c478bd9Sstevel@tonic-gate sm_syslog(LOG_WARNING, NOQID, 1767445f2479Sjbeck "STARTTLS=server, error: accept failed=%d, SSL_error=%d, errno=%d, retry=%d", 1768445f2479Sjbeck r, ssl_err, errno, i); 17697c478bd9Sstevel@tonic-gate if (LogLevel > 8) 17707c478bd9Sstevel@tonic-gate tlslogerr("server"); 17717c478bd9Sstevel@tonic-gate } 17727c478bd9Sstevel@tonic-gate tls_ok_srv = false; 17737c478bd9Sstevel@tonic-gate SSL_free(srv_ssl); 17747c478bd9Sstevel@tonic-gate srv_ssl = NULL; 17757c478bd9Sstevel@tonic-gate 17767c478bd9Sstevel@tonic-gate /* 17777c478bd9Sstevel@tonic-gate ** according to the next draft of 17787c478bd9Sstevel@tonic-gate ** RFC 2487 the connection should be dropped 17797c478bd9Sstevel@tonic-gate */ 17807c478bd9Sstevel@tonic-gate 17817c478bd9Sstevel@tonic-gate /* arrange to ignore any current send list */ 17827c478bd9Sstevel@tonic-gate e->e_sendqueue = NULL; 17837c478bd9Sstevel@tonic-gate goto doquit; 17847c478bd9Sstevel@tonic-gate } 17857c478bd9Sstevel@tonic-gate 17867c478bd9Sstevel@tonic-gate /* ignore return code for now, it's in {verify} */ 17877c478bd9Sstevel@tonic-gate (void) tls_get_info(srv_ssl, true, 17887c478bd9Sstevel@tonic-gate CurSmtpClient, 17897c478bd9Sstevel@tonic-gate &BlankEnvelope.e_macro, 17907c478bd9Sstevel@tonic-gate bitset(SRV_VRFY_CLT, features)); 17917c478bd9Sstevel@tonic-gate 17927c478bd9Sstevel@tonic-gate /* 17937c478bd9Sstevel@tonic-gate ** call Stls_client to find out whether 17947c478bd9Sstevel@tonic-gate ** to accept the connection from the client 17957c478bd9Sstevel@tonic-gate */ 17967c478bd9Sstevel@tonic-gate 17977c478bd9Sstevel@tonic-gate saveQuickAbort = QuickAbort; 17987c478bd9Sstevel@tonic-gate saveSuprErrs = SuprErrs; 17997c478bd9Sstevel@tonic-gate SuprErrs = true; 18007c478bd9Sstevel@tonic-gate QuickAbort = false; 18017c478bd9Sstevel@tonic-gate if (rscheck("tls_client", 18027c478bd9Sstevel@tonic-gate macvalue(macid("{verify}"), e), 18037c478bd9Sstevel@tonic-gate "STARTTLS", e, 18047c478bd9Sstevel@tonic-gate RSF_RMCOMM|RSF_COUNT, 18057c478bd9Sstevel@tonic-gate 5, NULL, NOQID) != EX_OK || 18067c478bd9Sstevel@tonic-gate Errors > 0) 18077c478bd9Sstevel@tonic-gate { 18087c478bd9Sstevel@tonic-gate extern char MsgBuf[]; 18097c478bd9Sstevel@tonic-gate 18107c478bd9Sstevel@tonic-gate if (MsgBuf[0] != '\0' && ISSMTPREPLY(MsgBuf)) 18117c478bd9Sstevel@tonic-gate nullserver = newstr(MsgBuf); 18127c478bd9Sstevel@tonic-gate else 18137c478bd9Sstevel@tonic-gate nullserver = "503 5.7.0 Authentication required."; 18147c478bd9Sstevel@tonic-gate } 18157c478bd9Sstevel@tonic-gate QuickAbort = saveQuickAbort; 18167c478bd9Sstevel@tonic-gate SuprErrs = saveSuprErrs; 18177c478bd9Sstevel@tonic-gate 18187c478bd9Sstevel@tonic-gate tls_ok_srv = false; /* don't offer STARTTLS again */ 18197c478bd9Sstevel@tonic-gate n_helo = 0; 18207c478bd9Sstevel@tonic-gate # if SASL 18217c478bd9Sstevel@tonic-gate if (sasl_ok) 18227c478bd9Sstevel@tonic-gate { 18237c478bd9Sstevel@tonic-gate int cipher_bits; 18247c478bd9Sstevel@tonic-gate bool verified; 18257c478bd9Sstevel@tonic-gate char *s, *v, *c; 18267c478bd9Sstevel@tonic-gate 18277c478bd9Sstevel@tonic-gate s = macvalue(macid("{cipher_bits}"), e); 18287c478bd9Sstevel@tonic-gate v = macvalue(macid("{verify}"), e); 18297c478bd9Sstevel@tonic-gate c = macvalue(macid("{cert_subject}"), e); 18307c478bd9Sstevel@tonic-gate verified = (v != NULL && strcmp(v, "OK") == 0); 18317c478bd9Sstevel@tonic-gate if (s != NULL && (cipher_bits = atoi(s)) > 0) 18327c478bd9Sstevel@tonic-gate { 18337c478bd9Sstevel@tonic-gate # if SASL >= 20000 18347c478bd9Sstevel@tonic-gate ext_ssf = cipher_bits; 18357c478bd9Sstevel@tonic-gate auth_id = verified ? c : NULL; 18367c478bd9Sstevel@tonic-gate sasl_ok = ((sasl_setprop(conn, 18377c478bd9Sstevel@tonic-gate SASL_SSF_EXTERNAL, 18387c478bd9Sstevel@tonic-gate &ext_ssf) == SASL_OK) && 18397c478bd9Sstevel@tonic-gate (sasl_setprop(conn, 18407c478bd9Sstevel@tonic-gate SASL_AUTH_EXTERNAL, 18417c478bd9Sstevel@tonic-gate auth_id) == SASL_OK)); 18427c478bd9Sstevel@tonic-gate # else /* SASL >= 20000 */ 18437c478bd9Sstevel@tonic-gate ext_ssf.ssf = cipher_bits; 18447c478bd9Sstevel@tonic-gate ext_ssf.auth_id = verified ? c : NULL; 18457c478bd9Sstevel@tonic-gate sasl_ok = sasl_setprop(conn, 18467c478bd9Sstevel@tonic-gate SASL_SSF_EXTERNAL, 18477c478bd9Sstevel@tonic-gate &ext_ssf) == SASL_OK; 18487c478bd9Sstevel@tonic-gate # endif /* SASL >= 20000 */ 18497c478bd9Sstevel@tonic-gate mechlist = NULL; 18507c478bd9Sstevel@tonic-gate if (sasl_ok) 18517c478bd9Sstevel@tonic-gate n_mechs = saslmechs(conn, 18527c478bd9Sstevel@tonic-gate &mechlist); 18537c478bd9Sstevel@tonic-gate } 18547c478bd9Sstevel@tonic-gate } 18557c478bd9Sstevel@tonic-gate # endif /* SASL */ 18567c478bd9Sstevel@tonic-gate 18577c478bd9Sstevel@tonic-gate /* switch to secure connection */ 18587c478bd9Sstevel@tonic-gate if (sfdctls(&InChannel, &OutChannel, srv_ssl) == 0) 18597c478bd9Sstevel@tonic-gate { 18607c478bd9Sstevel@tonic-gate tls_active = true; 18617c478bd9Sstevel@tonic-gate # if PIPELINING 18627c478bd9Sstevel@tonic-gate (void) sm_io_autoflush(InChannel, OutChannel); 18637c478bd9Sstevel@tonic-gate # endif /* PIPELINING */ 18647c478bd9Sstevel@tonic-gate } 18657c478bd9Sstevel@tonic-gate else 18667c478bd9Sstevel@tonic-gate { 18677c478bd9Sstevel@tonic-gate /* 18687c478bd9Sstevel@tonic-gate ** XXX this is an internal error 18697c478bd9Sstevel@tonic-gate ** how to deal with it? 18707c478bd9Sstevel@tonic-gate ** we can't generate an error message 18717c478bd9Sstevel@tonic-gate ** since the other side switched to an 18727c478bd9Sstevel@tonic-gate ** encrypted layer, but we could not... 18737c478bd9Sstevel@tonic-gate ** just "hang up"? 18747c478bd9Sstevel@tonic-gate */ 18757c478bd9Sstevel@tonic-gate 18767c478bd9Sstevel@tonic-gate nullserver = "454 4.3.3 TLS not available: can't switch to encrypted layer"; 18777c478bd9Sstevel@tonic-gate syserr("STARTTLS: can't switch to encrypted layer"); 18787c478bd9Sstevel@tonic-gate } 18797c478bd9Sstevel@tonic-gate tls_done: 18807c478bd9Sstevel@tonic-gate if (smtps) 18817c478bd9Sstevel@tonic-gate { 18827c478bd9Sstevel@tonic-gate if (tls_active) 18837c478bd9Sstevel@tonic-gate goto greeting; 18847c478bd9Sstevel@tonic-gate else 18857c478bd9Sstevel@tonic-gate goto doquit; 18867c478bd9Sstevel@tonic-gate } 18877c478bd9Sstevel@tonic-gate break; 18887c478bd9Sstevel@tonic-gate #endif /* STARTTLS */ 18897c478bd9Sstevel@tonic-gate 18907c478bd9Sstevel@tonic-gate case CMDHELO: /* hello -- introduce yourself */ 18917c478bd9Sstevel@tonic-gate case CMDEHLO: /* extended hello */ 18927c478bd9Sstevel@tonic-gate DELAY_CONN("EHLO"); 18937c478bd9Sstevel@tonic-gate if (c->cmd_code == CMDEHLO) 18947c478bd9Sstevel@tonic-gate { 18957c478bd9Sstevel@tonic-gate protocol = "ESMTP"; 18967c478bd9Sstevel@tonic-gate SmtpPhase = "server EHLO"; 18977c478bd9Sstevel@tonic-gate } 18987c478bd9Sstevel@tonic-gate else 18997c478bd9Sstevel@tonic-gate { 19007c478bd9Sstevel@tonic-gate protocol = "SMTP"; 19017c478bd9Sstevel@tonic-gate SmtpPhase = "server HELO"; 19027c478bd9Sstevel@tonic-gate } 19037c478bd9Sstevel@tonic-gate 19047c478bd9Sstevel@tonic-gate /* avoid denial-of-service */ 19057c478bd9Sstevel@tonic-gate STOP_IF_ATTACK(checksmtpattack(&n_helo, MAXHELOCOMMANDS, 19067c478bd9Sstevel@tonic-gate true, "HELO/EHLO", e)); 19077c478bd9Sstevel@tonic-gate 19087c478bd9Sstevel@tonic-gate #if 0 19097c478bd9Sstevel@tonic-gate /* RFC2821 4.1.4 allows duplicate HELO/EHLO */ 19107c478bd9Sstevel@tonic-gate /* check for duplicate HELO/EHLO per RFC 1651 4.2 */ 19117c478bd9Sstevel@tonic-gate if (gothello) 19127c478bd9Sstevel@tonic-gate { 19137c478bd9Sstevel@tonic-gate usrerr("503 %s Duplicate HELO/EHLO", 19147c478bd9Sstevel@tonic-gate MyHostName); 19157c478bd9Sstevel@tonic-gate break; 19167c478bd9Sstevel@tonic-gate } 19177c478bd9Sstevel@tonic-gate #endif /* 0 */ 19187c478bd9Sstevel@tonic-gate 19197c478bd9Sstevel@tonic-gate /* check for valid domain name (re 1123 5.2.5) */ 19207c478bd9Sstevel@tonic-gate if (*p == '\0' && !AllowBogusHELO) 19217c478bd9Sstevel@tonic-gate { 19227c478bd9Sstevel@tonic-gate usrerr("501 %s requires domain address", 19237c478bd9Sstevel@tonic-gate cmdbuf); 19247c478bd9Sstevel@tonic-gate break; 19257c478bd9Sstevel@tonic-gate } 19267c478bd9Sstevel@tonic-gate 19277c478bd9Sstevel@tonic-gate /* check for long domain name (hides Received: info) */ 19287c478bd9Sstevel@tonic-gate if (strlen(p) > MAXNAME) 19297c478bd9Sstevel@tonic-gate { 19307c478bd9Sstevel@tonic-gate usrerr("501 Invalid domain name"); 19317c478bd9Sstevel@tonic-gate if (LogLevel > 9) 19327c478bd9Sstevel@tonic-gate sm_syslog(LOG_INFO, CurEnv->e_id, 19337c478bd9Sstevel@tonic-gate "invalid domain name (too long) from %s", 19347c478bd9Sstevel@tonic-gate CurSmtpClient); 19357c478bd9Sstevel@tonic-gate break; 19367c478bd9Sstevel@tonic-gate } 19377c478bd9Sstevel@tonic-gate 19387c478bd9Sstevel@tonic-gate ok = true; 19397c478bd9Sstevel@tonic-gate for (q = p; *q != '\0'; q++) 19407c478bd9Sstevel@tonic-gate { 19417c478bd9Sstevel@tonic-gate if (!isascii(*q)) 19427c478bd9Sstevel@tonic-gate break; 19437c478bd9Sstevel@tonic-gate if (isalnum(*q)) 19447c478bd9Sstevel@tonic-gate continue; 19457c478bd9Sstevel@tonic-gate if (isspace(*q)) 19467c478bd9Sstevel@tonic-gate { 19477c478bd9Sstevel@tonic-gate *q = '\0'; 19487c478bd9Sstevel@tonic-gate 19497c478bd9Sstevel@tonic-gate /* only complain if strict check */ 19507c478bd9Sstevel@tonic-gate ok = AllowBogusHELO; 19517c478bd9Sstevel@tonic-gate 19527c478bd9Sstevel@tonic-gate /* allow trailing whitespace */ 19537c478bd9Sstevel@tonic-gate while (!ok && *++q != '\0' && 19547c478bd9Sstevel@tonic-gate isspace(*q)) 19557c478bd9Sstevel@tonic-gate ; 19567c478bd9Sstevel@tonic-gate if (*q == '\0') 19577c478bd9Sstevel@tonic-gate ok = true; 19587c478bd9Sstevel@tonic-gate break; 19597c478bd9Sstevel@tonic-gate } 19607c478bd9Sstevel@tonic-gate if (strchr("[].-_#:", *q) == NULL) 19617c478bd9Sstevel@tonic-gate break; 19627c478bd9Sstevel@tonic-gate } 19637c478bd9Sstevel@tonic-gate 19647c478bd9Sstevel@tonic-gate if (*q == '\0' && ok) 19657c478bd9Sstevel@tonic-gate { 19667c478bd9Sstevel@tonic-gate q = "pleased to meet you"; 19677c478bd9Sstevel@tonic-gate sendinghost = sm_strdup_x(p); 19687c478bd9Sstevel@tonic-gate } 19697c478bd9Sstevel@tonic-gate else if (!AllowBogusHELO) 19707c478bd9Sstevel@tonic-gate { 19717c478bd9Sstevel@tonic-gate usrerr("501 Invalid domain name"); 19727c478bd9Sstevel@tonic-gate if (LogLevel > 9) 19737c478bd9Sstevel@tonic-gate sm_syslog(LOG_INFO, CurEnv->e_id, 19747c478bd9Sstevel@tonic-gate "invalid domain name (%s) from %.100s", 19757c478bd9Sstevel@tonic-gate p, CurSmtpClient); 19767c478bd9Sstevel@tonic-gate break; 19777c478bd9Sstevel@tonic-gate } 19787c478bd9Sstevel@tonic-gate else 19797c478bd9Sstevel@tonic-gate { 19807c478bd9Sstevel@tonic-gate q = "accepting invalid domain name"; 19817c478bd9Sstevel@tonic-gate } 19827c478bd9Sstevel@tonic-gate 1983445f2479Sjbeck if (gothello || smtp.sm_gotmail) 19847c478bd9Sstevel@tonic-gate CLEAR_STATE(cmdbuf); 19857c478bd9Sstevel@tonic-gate 19867c478bd9Sstevel@tonic-gate #if MILTER 19877c478bd9Sstevel@tonic-gate if (smtp.sm_milterlist && smtp.sm_milterize && 19887c478bd9Sstevel@tonic-gate !bitset(EF_DISCARD, e->e_flags)) 19897c478bd9Sstevel@tonic-gate { 19907c478bd9Sstevel@tonic-gate char state; 19917c478bd9Sstevel@tonic-gate char *response; 19927c478bd9Sstevel@tonic-gate 19937c478bd9Sstevel@tonic-gate response = milter_helo(p, e, &state); 19947c478bd9Sstevel@tonic-gate switch (state) 19957c478bd9Sstevel@tonic-gate { 19967c478bd9Sstevel@tonic-gate case SMFIR_REPLYCODE: 19977c478bd9Sstevel@tonic-gate if (MilterLogLevel > 3) 19987c478bd9Sstevel@tonic-gate sm_syslog(LOG_INFO, e->e_id, 19997c478bd9Sstevel@tonic-gate "Milter: helo=%s, reject=%s", 20007c478bd9Sstevel@tonic-gate p, response); 20017c478bd9Sstevel@tonic-gate nullserver = newstr(response); 20027c478bd9Sstevel@tonic-gate smtp.sm_milterize = false; 20037c478bd9Sstevel@tonic-gate break; 20047c478bd9Sstevel@tonic-gate 20057c478bd9Sstevel@tonic-gate case SMFIR_REJECT: 20067c478bd9Sstevel@tonic-gate if (MilterLogLevel > 3) 20077c478bd9Sstevel@tonic-gate sm_syslog(LOG_INFO, e->e_id, 20087c478bd9Sstevel@tonic-gate "Milter: helo=%s, reject=Command rejected", 20097c478bd9Sstevel@tonic-gate p); 20107c478bd9Sstevel@tonic-gate nullserver = "Command rejected"; 20117c478bd9Sstevel@tonic-gate smtp.sm_milterize = false; 20127c478bd9Sstevel@tonic-gate break; 20137c478bd9Sstevel@tonic-gate 20147c478bd9Sstevel@tonic-gate case SMFIR_TEMPFAIL: 20157c478bd9Sstevel@tonic-gate if (MilterLogLevel > 3) 20167c478bd9Sstevel@tonic-gate sm_syslog(LOG_INFO, e->e_id, 20177c478bd9Sstevel@tonic-gate "Milter: helo=%s, reject=%s", 20187c478bd9Sstevel@tonic-gate p, MSG_TEMPFAIL); 20197c478bd9Sstevel@tonic-gate tempfail = true; 20207c478bd9Sstevel@tonic-gate smtp.sm_milterize = false; 20217c478bd9Sstevel@tonic-gate break; 2022445f2479Sjbeck 2023445f2479Sjbeck case SMFIR_SHUTDOWN: 2024445f2479Sjbeck if (MilterLogLevel > 3) 2025445f2479Sjbeck sm_syslog(LOG_INFO, e->e_id, 2026*3ee0e492Sjbeck "Milter: helo=%s, reject=421 4.7.0 %s closing connection", 2027445f2479Sjbeck p, MyHostName); 2028445f2479Sjbeck tempfail = true; 2029445f2479Sjbeck smtp.sm_milterize = false; 2030445f2479Sjbeck message("421 4.7.0 %s closing connection", 2031445f2479Sjbeck MyHostName); 2032445f2479Sjbeck /* arrange to ignore send list */ 2033445f2479Sjbeck e->e_sendqueue = NULL; 2034445f2479Sjbeck goto doquit; 20357c478bd9Sstevel@tonic-gate } 20367c478bd9Sstevel@tonic-gate if (response != NULL) 20377c478bd9Sstevel@tonic-gate sm_free(response); 20387c478bd9Sstevel@tonic-gate 20397c478bd9Sstevel@tonic-gate /* 20407c478bd9Sstevel@tonic-gate ** If quarantining by a connect/ehlo action, 20417c478bd9Sstevel@tonic-gate ** save between messages 20427c478bd9Sstevel@tonic-gate */ 20437c478bd9Sstevel@tonic-gate 20447c478bd9Sstevel@tonic-gate if (smtp.sm_quarmsg == NULL && 20457c478bd9Sstevel@tonic-gate e->e_quarmsg != NULL) 20467c478bd9Sstevel@tonic-gate smtp.sm_quarmsg = newstr(e->e_quarmsg); 20477c478bd9Sstevel@tonic-gate } 20487c478bd9Sstevel@tonic-gate #endif /* MILTER */ 20497c478bd9Sstevel@tonic-gate gothello = true; 20507c478bd9Sstevel@tonic-gate 20517c478bd9Sstevel@tonic-gate /* print HELO response message */ 20527c478bd9Sstevel@tonic-gate if (c->cmd_code != CMDEHLO) 20537c478bd9Sstevel@tonic-gate { 20547c478bd9Sstevel@tonic-gate message("250 %s Hello %s, %s", 20557c478bd9Sstevel@tonic-gate MyHostName, CurSmtpClient, q); 20567c478bd9Sstevel@tonic-gate break; 20577c478bd9Sstevel@tonic-gate } 20587c478bd9Sstevel@tonic-gate 20597c478bd9Sstevel@tonic-gate message("250-%s Hello %s, %s", 20607c478bd9Sstevel@tonic-gate MyHostName, CurSmtpClient, q); 20617c478bd9Sstevel@tonic-gate 20627c478bd9Sstevel@tonic-gate /* offer ENHSC even for nullserver */ 20637c478bd9Sstevel@tonic-gate if (nullserver != NULL) 20647c478bd9Sstevel@tonic-gate { 20657c478bd9Sstevel@tonic-gate message("250 ENHANCEDSTATUSCODES"); 20667c478bd9Sstevel@tonic-gate break; 20677c478bd9Sstevel@tonic-gate } 20687c478bd9Sstevel@tonic-gate 20697c478bd9Sstevel@tonic-gate /* 20707c478bd9Sstevel@tonic-gate ** print EHLO features list 20717c478bd9Sstevel@tonic-gate ** 20727c478bd9Sstevel@tonic-gate ** Note: If you change this list, 20737c478bd9Sstevel@tonic-gate ** remember to update 'helpfile' 20747c478bd9Sstevel@tonic-gate */ 20757c478bd9Sstevel@tonic-gate 20767c478bd9Sstevel@tonic-gate message("250-ENHANCEDSTATUSCODES"); 20777c478bd9Sstevel@tonic-gate #if PIPELINING 20787c478bd9Sstevel@tonic-gate if (bitset(SRV_OFFER_PIPE, features)) 20797c478bd9Sstevel@tonic-gate message("250-PIPELINING"); 20807c478bd9Sstevel@tonic-gate #endif /* PIPELINING */ 20817c478bd9Sstevel@tonic-gate if (bitset(SRV_OFFER_EXPN, features)) 20827c478bd9Sstevel@tonic-gate { 20837c478bd9Sstevel@tonic-gate message("250-EXPN"); 20847c478bd9Sstevel@tonic-gate if (bitset(SRV_OFFER_VERB, features)) 20857c478bd9Sstevel@tonic-gate message("250-VERB"); 20867c478bd9Sstevel@tonic-gate } 20877c478bd9Sstevel@tonic-gate #if MIME8TO7 20887c478bd9Sstevel@tonic-gate message("250-8BITMIME"); 20897c478bd9Sstevel@tonic-gate #endif /* MIME8TO7 */ 20907c478bd9Sstevel@tonic-gate if (MaxMessageSize > 0) 20917c478bd9Sstevel@tonic-gate message("250-SIZE %ld", MaxMessageSize); 20927c478bd9Sstevel@tonic-gate else 20937c478bd9Sstevel@tonic-gate message("250-SIZE"); 20947c478bd9Sstevel@tonic-gate #if DSN 20957c478bd9Sstevel@tonic-gate if (SendMIMEErrors && bitset(SRV_OFFER_DSN, features)) 20967c478bd9Sstevel@tonic-gate message("250-DSN"); 20977c478bd9Sstevel@tonic-gate #endif /* DSN */ 20987c478bd9Sstevel@tonic-gate if (bitset(SRV_OFFER_ETRN, features)) 20997c478bd9Sstevel@tonic-gate message("250-ETRN"); 21007c478bd9Sstevel@tonic-gate #if SASL 21017c478bd9Sstevel@tonic-gate if (sasl_ok && mechlist != NULL && *mechlist != '\0') 21027c478bd9Sstevel@tonic-gate message("250-AUTH %s", mechlist); 21037c478bd9Sstevel@tonic-gate #endif /* SASL */ 21047c478bd9Sstevel@tonic-gate #if STARTTLS 21057c478bd9Sstevel@tonic-gate if (tls_ok_srv && 21067c478bd9Sstevel@tonic-gate bitset(SRV_OFFER_TLS, features)) 21077c478bd9Sstevel@tonic-gate message("250-STARTTLS"); 21087c478bd9Sstevel@tonic-gate #endif /* STARTTLS */ 21097c478bd9Sstevel@tonic-gate if (DeliverByMin > 0) 21107c478bd9Sstevel@tonic-gate message("250-DELIVERBY %ld", 21117c478bd9Sstevel@tonic-gate (long) DeliverByMin); 21127c478bd9Sstevel@tonic-gate else if (DeliverByMin == 0) 21137c478bd9Sstevel@tonic-gate message("250-DELIVERBY"); 21147c478bd9Sstevel@tonic-gate 21157c478bd9Sstevel@tonic-gate /* < 0: no deliver-by */ 21167c478bd9Sstevel@tonic-gate 21177c478bd9Sstevel@tonic-gate message("250 HELP"); 21187c478bd9Sstevel@tonic-gate break; 21197c478bd9Sstevel@tonic-gate 21207c478bd9Sstevel@tonic-gate case CMDMAIL: /* mail -- designate sender */ 21217c478bd9Sstevel@tonic-gate SmtpPhase = "server MAIL"; 21227c478bd9Sstevel@tonic-gate DELAY_CONN("MAIL"); 21237c478bd9Sstevel@tonic-gate 21247c478bd9Sstevel@tonic-gate /* check for validity of this command */ 21257c478bd9Sstevel@tonic-gate if (!gothello && bitset(PRIV_NEEDMAILHELO, PrivacyFlags)) 21267c478bd9Sstevel@tonic-gate { 21277c478bd9Sstevel@tonic-gate usrerr("503 5.0.0 Polite people say HELO first"); 21287c478bd9Sstevel@tonic-gate break; 21297c478bd9Sstevel@tonic-gate } 21307c478bd9Sstevel@tonic-gate if (smtp.sm_gotmail) 21317c478bd9Sstevel@tonic-gate { 21327c478bd9Sstevel@tonic-gate usrerr("503 5.5.0 Sender already specified"); 21337c478bd9Sstevel@tonic-gate break; 21347c478bd9Sstevel@tonic-gate } 21357c478bd9Sstevel@tonic-gate #if SASL 21367c478bd9Sstevel@tonic-gate if (bitset(SRV_REQ_AUTH, features) && 21377c478bd9Sstevel@tonic-gate authenticating != SASL_IS_AUTH) 21387c478bd9Sstevel@tonic-gate { 21397c478bd9Sstevel@tonic-gate usrerr("530 5.7.0 Authentication required"); 21407c478bd9Sstevel@tonic-gate break; 21417c478bd9Sstevel@tonic-gate } 21427c478bd9Sstevel@tonic-gate #endif /* SASL */ 21437c478bd9Sstevel@tonic-gate 21447c478bd9Sstevel@tonic-gate p = skipword(p, "from"); 21457c478bd9Sstevel@tonic-gate if (p == NULL) 21467c478bd9Sstevel@tonic-gate break; 21477c478bd9Sstevel@tonic-gate if (tempfail) 21487c478bd9Sstevel@tonic-gate { 21497c478bd9Sstevel@tonic-gate if (LogLevel > 9) 21507c478bd9Sstevel@tonic-gate sm_syslog(LOG_INFO, e->e_id, 21517c478bd9Sstevel@tonic-gate "SMTP MAIL command (%.100s) from %s tempfailed (due to previous checks)", 21527c478bd9Sstevel@tonic-gate p, CurSmtpClient); 21537c478bd9Sstevel@tonic-gate usrerr(MSG_TEMPFAIL); 21547c478bd9Sstevel@tonic-gate break; 21557c478bd9Sstevel@tonic-gate } 21567c478bd9Sstevel@tonic-gate 21577c478bd9Sstevel@tonic-gate /* make sure we know who the sending host is */ 21587c478bd9Sstevel@tonic-gate if (sendinghost == NULL) 21597c478bd9Sstevel@tonic-gate sendinghost = peerhostname; 21607c478bd9Sstevel@tonic-gate 21617c478bd9Sstevel@tonic-gate 21627c478bd9Sstevel@tonic-gate #if SM_HEAP_CHECK 21637c478bd9Sstevel@tonic-gate if (sm_debug_active(&DebugLeakSmtp, 1)) 21647c478bd9Sstevel@tonic-gate { 21657c478bd9Sstevel@tonic-gate sm_heap_newgroup(); 21667c478bd9Sstevel@tonic-gate sm_dprintf("smtp() heap group #%d\n", 21677c478bd9Sstevel@tonic-gate sm_heap_group()); 21687c478bd9Sstevel@tonic-gate } 21697c478bd9Sstevel@tonic-gate #endif /* SM_HEAP_CHECK */ 21707c478bd9Sstevel@tonic-gate 21717c478bd9Sstevel@tonic-gate if (Errors > 0) 21727c478bd9Sstevel@tonic-gate goto undo_no_pm; 21737c478bd9Sstevel@tonic-gate if (!gothello) 21747c478bd9Sstevel@tonic-gate { 21757c478bd9Sstevel@tonic-gate auth_warning(e, "%s didn't use HELO protocol", 21767c478bd9Sstevel@tonic-gate CurSmtpClient); 21777c478bd9Sstevel@tonic-gate } 21787c478bd9Sstevel@tonic-gate #ifdef PICKY_HELO_CHECK 21797c478bd9Sstevel@tonic-gate if (sm_strcasecmp(sendinghost, peerhostname) != 0 && 21807c478bd9Sstevel@tonic-gate (sm_strcasecmp(peerhostname, "localhost") != 0 || 21817c478bd9Sstevel@tonic-gate sm_strcasecmp(sendinghost, MyHostName) != 0)) 21827c478bd9Sstevel@tonic-gate { 21837c478bd9Sstevel@tonic-gate auth_warning(e, "Host %s claimed to be %s", 21847c478bd9Sstevel@tonic-gate CurSmtpClient, sendinghost); 21857c478bd9Sstevel@tonic-gate } 21867c478bd9Sstevel@tonic-gate #endif /* PICKY_HELO_CHECK */ 21877c478bd9Sstevel@tonic-gate 21887c478bd9Sstevel@tonic-gate if (protocol == NULL) 21897c478bd9Sstevel@tonic-gate protocol = "SMTP"; 21907c478bd9Sstevel@tonic-gate macdefine(&e->e_macro, A_PERM, 'r', protocol); 21917c478bd9Sstevel@tonic-gate macdefine(&e->e_macro, A_PERM, 's', sendinghost); 21927c478bd9Sstevel@tonic-gate 21937c478bd9Sstevel@tonic-gate if (Errors > 0) 21947c478bd9Sstevel@tonic-gate goto undo_no_pm; 21957c478bd9Sstevel@tonic-gate smtp.sm_nrcpts = 0; 21967c478bd9Sstevel@tonic-gate n_badrcpts = 0; 21977c478bd9Sstevel@tonic-gate macdefine(&e->e_macro, A_PERM, macid("{ntries}"), "0"); 21987c478bd9Sstevel@tonic-gate macdefine(&e->e_macro, A_PERM, macid("{nrcpts}"), "0"); 21997c478bd9Sstevel@tonic-gate macdefine(&e->e_macro, A_PERM, macid("{nbadrcpts}"), 22007c478bd9Sstevel@tonic-gate "0"); 22017c478bd9Sstevel@tonic-gate e->e_flags |= EF_CLRQUEUE; 22027c478bd9Sstevel@tonic-gate sm_setproctitle(true, e, "%s %s: %.80s", 22037c478bd9Sstevel@tonic-gate qid_printname(e), 22047c478bd9Sstevel@tonic-gate CurSmtpClient, inp); 22057c478bd9Sstevel@tonic-gate 22067c478bd9Sstevel@tonic-gate /* do the processing */ 22077c478bd9Sstevel@tonic-gate SM_TRY 22087c478bd9Sstevel@tonic-gate { 22097c478bd9Sstevel@tonic-gate extern char *FullName; 22107c478bd9Sstevel@tonic-gate 22117c478bd9Sstevel@tonic-gate QuickAbort = true; 22127c478bd9Sstevel@tonic-gate SM_FREE_CLR(FullName); 22137c478bd9Sstevel@tonic-gate 22147c478bd9Sstevel@tonic-gate /* must parse sender first */ 22157c478bd9Sstevel@tonic-gate delimptr = NULL; 22167c478bd9Sstevel@tonic-gate setsender(p, e, &delimptr, ' ', false); 22177c478bd9Sstevel@tonic-gate if (delimptr != NULL && *delimptr != '\0') 22187c478bd9Sstevel@tonic-gate *delimptr++ = '\0'; 22197c478bd9Sstevel@tonic-gate if (Errors > 0) 22207c478bd9Sstevel@tonic-gate sm_exc_raisenew_x(&EtypeQuickAbort, 1); 22217c478bd9Sstevel@tonic-gate 22227c478bd9Sstevel@tonic-gate /* Successfully set e_from, allow logging */ 22237c478bd9Sstevel@tonic-gate e->e_flags |= EF_LOGSENDER; 22247c478bd9Sstevel@tonic-gate 22257c478bd9Sstevel@tonic-gate /* put resulting triple from parseaddr() into macros */ 22267c478bd9Sstevel@tonic-gate if (e->e_from.q_mailer != NULL) 22277c478bd9Sstevel@tonic-gate macdefine(&e->e_macro, A_PERM, 22287c478bd9Sstevel@tonic-gate macid("{mail_mailer}"), 22297c478bd9Sstevel@tonic-gate e->e_from.q_mailer->m_name); 22307c478bd9Sstevel@tonic-gate else 22317c478bd9Sstevel@tonic-gate macdefine(&e->e_macro, A_PERM, 22327c478bd9Sstevel@tonic-gate macid("{mail_mailer}"), NULL); 22337c478bd9Sstevel@tonic-gate if (e->e_from.q_host != NULL) 22347c478bd9Sstevel@tonic-gate macdefine(&e->e_macro, A_PERM, 22357c478bd9Sstevel@tonic-gate macid("{mail_host}"), 22367c478bd9Sstevel@tonic-gate e->e_from.q_host); 22377c478bd9Sstevel@tonic-gate else 22387c478bd9Sstevel@tonic-gate macdefine(&e->e_macro, A_PERM, 22397c478bd9Sstevel@tonic-gate macid("{mail_host}"), "localhost"); 22407c478bd9Sstevel@tonic-gate if (e->e_from.q_user != NULL) 22417c478bd9Sstevel@tonic-gate macdefine(&e->e_macro, A_PERM, 22427c478bd9Sstevel@tonic-gate macid("{mail_addr}"), 22437c478bd9Sstevel@tonic-gate e->e_from.q_user); 22447c478bd9Sstevel@tonic-gate else 22457c478bd9Sstevel@tonic-gate macdefine(&e->e_macro, A_PERM, 22467c478bd9Sstevel@tonic-gate macid("{mail_addr}"), NULL); 22477c478bd9Sstevel@tonic-gate if (Errors > 0) 22487c478bd9Sstevel@tonic-gate sm_exc_raisenew_x(&EtypeQuickAbort, 1); 22497c478bd9Sstevel@tonic-gate 22507c478bd9Sstevel@tonic-gate /* check for possible spoofing */ 22517c478bd9Sstevel@tonic-gate if (RealUid != 0 && OpMode == MD_SMTP && 22527c478bd9Sstevel@tonic-gate !wordinclass(RealUserName, 't') && 22537c478bd9Sstevel@tonic-gate (!bitnset(M_LOCALMAILER, 22547c478bd9Sstevel@tonic-gate e->e_from.q_mailer->m_flags) || 22557c478bd9Sstevel@tonic-gate strcmp(e->e_from.q_user, RealUserName) != 0)) 22567c478bd9Sstevel@tonic-gate { 22577c478bd9Sstevel@tonic-gate auth_warning(e, "%s owned process doing -bs", 22587c478bd9Sstevel@tonic-gate RealUserName); 22597c478bd9Sstevel@tonic-gate } 22607c478bd9Sstevel@tonic-gate 22617c478bd9Sstevel@tonic-gate /* reset to default value */ 22627c478bd9Sstevel@tonic-gate SevenBitInput = save_sevenbitinput; 22637c478bd9Sstevel@tonic-gate 22647c478bd9Sstevel@tonic-gate /* now parse ESMTP arguments */ 22657c478bd9Sstevel@tonic-gate e->e_msgsize = 0; 22667c478bd9Sstevel@tonic-gate addr = p; 22677c478bd9Sstevel@tonic-gate argno = 0; 22687c478bd9Sstevel@tonic-gate args[argno++] = p; 22697c478bd9Sstevel@tonic-gate p = delimptr; 22707c478bd9Sstevel@tonic-gate while (p != NULL && *p != '\0') 22717c478bd9Sstevel@tonic-gate { 22727c478bd9Sstevel@tonic-gate char *kp; 22737c478bd9Sstevel@tonic-gate char *vp = NULL; 22747c478bd9Sstevel@tonic-gate char *equal = NULL; 22757c478bd9Sstevel@tonic-gate 22767c478bd9Sstevel@tonic-gate /* locate the beginning of the keyword */ 22777c478bd9Sstevel@tonic-gate SKIP_SPACE(p); 22787c478bd9Sstevel@tonic-gate if (*p == '\0') 22797c478bd9Sstevel@tonic-gate break; 22807c478bd9Sstevel@tonic-gate kp = p; 22817c478bd9Sstevel@tonic-gate 22827c478bd9Sstevel@tonic-gate /* skip to the value portion */ 22837c478bd9Sstevel@tonic-gate while ((isascii(*p) && isalnum(*p)) || *p == '-') 22847c478bd9Sstevel@tonic-gate p++; 22857c478bd9Sstevel@tonic-gate if (*p == '=') 22867c478bd9Sstevel@tonic-gate { 22877c478bd9Sstevel@tonic-gate equal = p; 22887c478bd9Sstevel@tonic-gate *p++ = '\0'; 22897c478bd9Sstevel@tonic-gate vp = p; 22907c478bd9Sstevel@tonic-gate 22917c478bd9Sstevel@tonic-gate /* skip to the end of the value */ 22927c478bd9Sstevel@tonic-gate while (*p != '\0' && *p != ' ' && 22937c478bd9Sstevel@tonic-gate !(isascii(*p) && iscntrl(*p)) && 22947c478bd9Sstevel@tonic-gate *p != '=') 22957c478bd9Sstevel@tonic-gate p++; 22967c478bd9Sstevel@tonic-gate } 22977c478bd9Sstevel@tonic-gate 22987c478bd9Sstevel@tonic-gate if (*p != '\0') 22997c478bd9Sstevel@tonic-gate *p++ = '\0'; 23007c478bd9Sstevel@tonic-gate 23017c478bd9Sstevel@tonic-gate if (tTd(19, 1)) 23027c478bd9Sstevel@tonic-gate sm_dprintf("MAIL: got arg %s=\"%s\"\n", kp, 23037c478bd9Sstevel@tonic-gate vp == NULL ? "<null>" : vp); 23047c478bd9Sstevel@tonic-gate 2305*3ee0e492Sjbeck mail_esmtp_args(kp, vp, e, features); 23067c478bd9Sstevel@tonic-gate if (equal != NULL) 23077c478bd9Sstevel@tonic-gate *equal = '='; 23087c478bd9Sstevel@tonic-gate args[argno++] = kp; 23097c478bd9Sstevel@tonic-gate if (argno >= MAXSMTPARGS - 1) 23107c478bd9Sstevel@tonic-gate usrerr("501 5.5.4 Too many parameters"); 23117c478bd9Sstevel@tonic-gate if (Errors > 0) 23127c478bd9Sstevel@tonic-gate sm_exc_raisenew_x(&EtypeQuickAbort, 1); 23137c478bd9Sstevel@tonic-gate } 23147c478bd9Sstevel@tonic-gate args[argno] = NULL; 23157c478bd9Sstevel@tonic-gate if (Errors > 0) 23167c478bd9Sstevel@tonic-gate sm_exc_raisenew_x(&EtypeQuickAbort, 1); 23177c478bd9Sstevel@tonic-gate 23187c478bd9Sstevel@tonic-gate #if SASL 23197c478bd9Sstevel@tonic-gate # if _FFR_AUTH_PASSING 23207c478bd9Sstevel@tonic-gate /* set the default AUTH= if the sender didn't */ 23217c478bd9Sstevel@tonic-gate if (e->e_auth_param == NULL) 23227c478bd9Sstevel@tonic-gate { 23237c478bd9Sstevel@tonic-gate /* XXX only do this for an MSA? */ 23247c478bd9Sstevel@tonic-gate e->e_auth_param = macvalue(macid("{auth_authen}"), 23257c478bd9Sstevel@tonic-gate e); 23267c478bd9Sstevel@tonic-gate if (e->e_auth_param == NULL) 23277c478bd9Sstevel@tonic-gate e->e_auth_param = "<>"; 23287c478bd9Sstevel@tonic-gate 23297c478bd9Sstevel@tonic-gate /* 23307c478bd9Sstevel@tonic-gate ** XXX should we invoke Strust_auth now? 23317c478bd9Sstevel@tonic-gate ** authorizing as the client that just 23327c478bd9Sstevel@tonic-gate ** authenticated, so we'll trust implicitly 23337c478bd9Sstevel@tonic-gate */ 23347c478bd9Sstevel@tonic-gate } 23357c478bd9Sstevel@tonic-gate # endif /* _FFR_AUTH_PASSING */ 23367c478bd9Sstevel@tonic-gate #endif /* SASL */ 23377c478bd9Sstevel@tonic-gate 23387c478bd9Sstevel@tonic-gate /* do config file checking of the sender */ 23397c478bd9Sstevel@tonic-gate macdefine(&e->e_macro, A_PERM, 23407c478bd9Sstevel@tonic-gate macid("{addr_type}"), "e s"); 23417c478bd9Sstevel@tonic-gate #if _FFR_MAIL_MACRO 23427c478bd9Sstevel@tonic-gate /* make the "real" sender address available */ 23437c478bd9Sstevel@tonic-gate macdefine(&e->e_macro, A_TEMP, macid("{mail_from}"), 23447c478bd9Sstevel@tonic-gate e->e_from.q_paddr); 23457c478bd9Sstevel@tonic-gate #endif /* _FFR_MAIL_MACRO */ 23467c478bd9Sstevel@tonic-gate if (rscheck("check_mail", addr, 23477c478bd9Sstevel@tonic-gate NULL, e, RSF_RMCOMM|RSF_COUNT, 3, 23487c478bd9Sstevel@tonic-gate NULL, e->e_id) != EX_OK || 23497c478bd9Sstevel@tonic-gate Errors > 0) 23507c478bd9Sstevel@tonic-gate sm_exc_raisenew_x(&EtypeQuickAbort, 1); 23517c478bd9Sstevel@tonic-gate macdefine(&e->e_macro, A_PERM, 23527c478bd9Sstevel@tonic-gate macid("{addr_type}"), NULL); 23537c478bd9Sstevel@tonic-gate 23547c478bd9Sstevel@tonic-gate if (MaxMessageSize > 0 && 23557c478bd9Sstevel@tonic-gate (e->e_msgsize > MaxMessageSize || 23567c478bd9Sstevel@tonic-gate e->e_msgsize < 0)) 23577c478bd9Sstevel@tonic-gate { 23587c478bd9Sstevel@tonic-gate usrerr("552 5.2.3 Message size exceeds fixed maximum message size (%ld)", 23597c478bd9Sstevel@tonic-gate MaxMessageSize); 23607c478bd9Sstevel@tonic-gate sm_exc_raisenew_x(&EtypeQuickAbort, 1); 23617c478bd9Sstevel@tonic-gate } 23627c478bd9Sstevel@tonic-gate 23637c478bd9Sstevel@tonic-gate /* 23647c478bd9Sstevel@tonic-gate ** XXX always check whether there is at least one fs 23657c478bd9Sstevel@tonic-gate ** with enough space? 23667c478bd9Sstevel@tonic-gate ** However, this may not help much: the queue group 23677c478bd9Sstevel@tonic-gate ** selection may later on select a FS that hasn't 23687c478bd9Sstevel@tonic-gate ** enough space. 23697c478bd9Sstevel@tonic-gate */ 23707c478bd9Sstevel@tonic-gate 23717c478bd9Sstevel@tonic-gate if ((NumFileSys == 1 || NumQueue == 1) && 23727c478bd9Sstevel@tonic-gate !enoughdiskspace(e->e_msgsize, e) 23737c478bd9Sstevel@tonic-gate #if _FFR_ANY_FREE_FS 23747c478bd9Sstevel@tonic-gate && !filesys_free(e->e_msgsize) 23757c478bd9Sstevel@tonic-gate #endif /* _FFR_ANY_FREE_FS */ 23767c478bd9Sstevel@tonic-gate ) 23777c478bd9Sstevel@tonic-gate { 23787c478bd9Sstevel@tonic-gate /* 23797c478bd9Sstevel@tonic-gate ** We perform this test again when the 23807c478bd9Sstevel@tonic-gate ** queue directory is selected, in collect. 23817c478bd9Sstevel@tonic-gate */ 23827c478bd9Sstevel@tonic-gate 23837c478bd9Sstevel@tonic-gate usrerr("452 4.4.5 Insufficient disk space; try again later"); 23847c478bd9Sstevel@tonic-gate sm_exc_raisenew_x(&EtypeQuickAbort, 1); 23857c478bd9Sstevel@tonic-gate } 23867c478bd9Sstevel@tonic-gate if (Errors > 0) 23877c478bd9Sstevel@tonic-gate sm_exc_raisenew_x(&EtypeQuickAbort, 1); 23887c478bd9Sstevel@tonic-gate 23897c478bd9Sstevel@tonic-gate LogUsrErrs = true; 23907c478bd9Sstevel@tonic-gate #if MILTER 23917c478bd9Sstevel@tonic-gate if (smtp.sm_milterlist && smtp.sm_milterize && 23927c478bd9Sstevel@tonic-gate !bitset(EF_DISCARD, e->e_flags)) 23937c478bd9Sstevel@tonic-gate { 23947c478bd9Sstevel@tonic-gate char state; 23957c478bd9Sstevel@tonic-gate char *response; 23967c478bd9Sstevel@tonic-gate 23977c478bd9Sstevel@tonic-gate response = milter_envfrom(args, e, &state); 23987c478bd9Sstevel@tonic-gate MILTER_REPLY("from"); 23997c478bd9Sstevel@tonic-gate } 24007c478bd9Sstevel@tonic-gate #endif /* MILTER */ 24017c478bd9Sstevel@tonic-gate if (Errors > 0) 24027c478bd9Sstevel@tonic-gate sm_exc_raisenew_x(&EtypeQuickAbort, 1); 24037c478bd9Sstevel@tonic-gate 24047c478bd9Sstevel@tonic-gate message("250 2.1.0 Sender ok"); 24057c478bd9Sstevel@tonic-gate smtp.sm_gotmail = true; 24067c478bd9Sstevel@tonic-gate } 24077c478bd9Sstevel@tonic-gate SM_EXCEPT(exc, "[!F]*") 24087c478bd9Sstevel@tonic-gate { 24097c478bd9Sstevel@tonic-gate /* 24107c478bd9Sstevel@tonic-gate ** An error occurred while processing a MAIL command. 24117c478bd9Sstevel@tonic-gate ** Jump to the common error handling code. 24127c478bd9Sstevel@tonic-gate */ 24137c478bd9Sstevel@tonic-gate 24147c478bd9Sstevel@tonic-gate sm_exc_free(exc); 24157c478bd9Sstevel@tonic-gate goto undo_no_pm; 24167c478bd9Sstevel@tonic-gate } 24177c478bd9Sstevel@tonic-gate SM_END_TRY 24187c478bd9Sstevel@tonic-gate break; 24197c478bd9Sstevel@tonic-gate 24207c478bd9Sstevel@tonic-gate undo_no_pm: 24217c478bd9Sstevel@tonic-gate e->e_flags &= ~EF_PM_NOTIFY; 24227c478bd9Sstevel@tonic-gate undo: 24237c478bd9Sstevel@tonic-gate break; 24247c478bd9Sstevel@tonic-gate 24257c478bd9Sstevel@tonic-gate case CMDRCPT: /* rcpt -- designate recipient */ 24267c478bd9Sstevel@tonic-gate DELAY_CONN("RCPT"); 24277c478bd9Sstevel@tonic-gate if (BadRcptThrottle > 0 && 24287c478bd9Sstevel@tonic-gate n_badrcpts >= BadRcptThrottle) 24297c478bd9Sstevel@tonic-gate { 24307c478bd9Sstevel@tonic-gate if (LogLevel > 5 && 24317c478bd9Sstevel@tonic-gate n_badrcpts == BadRcptThrottle) 24327c478bd9Sstevel@tonic-gate { 24337c478bd9Sstevel@tonic-gate sm_syslog(LOG_INFO, e->e_id, 24347c478bd9Sstevel@tonic-gate "%s: Possible SMTP RCPT flood, throttling.", 24357c478bd9Sstevel@tonic-gate CurSmtpClient); 24367c478bd9Sstevel@tonic-gate 24377c478bd9Sstevel@tonic-gate /* To avoid duplicated message */ 24387c478bd9Sstevel@tonic-gate n_badrcpts++; 24397c478bd9Sstevel@tonic-gate } 24407c478bd9Sstevel@tonic-gate NBADRCPTS; 24417c478bd9Sstevel@tonic-gate 24427c478bd9Sstevel@tonic-gate /* 24437c478bd9Sstevel@tonic-gate ** Don't use exponential backoff for now. 24447c478bd9Sstevel@tonic-gate ** Some servers will open more connections 24457c478bd9Sstevel@tonic-gate ** and actually overload the receiver even 24467c478bd9Sstevel@tonic-gate ** more. 24477c478bd9Sstevel@tonic-gate */ 24487c478bd9Sstevel@tonic-gate 24497c478bd9Sstevel@tonic-gate (void) sleep(1); 24507c478bd9Sstevel@tonic-gate } 24517c478bd9Sstevel@tonic-gate if (!smtp.sm_gotmail) 24527c478bd9Sstevel@tonic-gate { 24537c478bd9Sstevel@tonic-gate usrerr("503 5.0.0 Need MAIL before RCPT"); 24547c478bd9Sstevel@tonic-gate break; 24557c478bd9Sstevel@tonic-gate } 24567c478bd9Sstevel@tonic-gate SmtpPhase = "server RCPT"; 24577c478bd9Sstevel@tonic-gate SM_TRY 24587c478bd9Sstevel@tonic-gate { 24597c478bd9Sstevel@tonic-gate QuickAbort = true; 24607c478bd9Sstevel@tonic-gate LogUsrErrs = true; 24617c478bd9Sstevel@tonic-gate 24627c478bd9Sstevel@tonic-gate /* limit flooding of our machine */ 24637c478bd9Sstevel@tonic-gate if (MaxRcptPerMsg > 0 && 24647c478bd9Sstevel@tonic-gate smtp.sm_nrcpts >= MaxRcptPerMsg) 24657c478bd9Sstevel@tonic-gate { 24667c478bd9Sstevel@tonic-gate /* sleep(1); / * slow down? */ 24677c478bd9Sstevel@tonic-gate usrerr("452 4.5.3 Too many recipients"); 24687c478bd9Sstevel@tonic-gate goto rcpt_done; 24697c478bd9Sstevel@tonic-gate } 24707c478bd9Sstevel@tonic-gate 2471445f2479Sjbeck if (e->e_sendmode != SM_DELIVER 2472445f2479Sjbeck #if _FFR_DM_ONE 2473445f2479Sjbeck && (NotFirstDelivery || SM_DM_ONE != e->e_sendmode) 2474445f2479Sjbeck #endif /* _FFR_DM_ONE */ 2475445f2479Sjbeck ) 24767c478bd9Sstevel@tonic-gate e->e_flags |= EF_VRFYONLY; 24777c478bd9Sstevel@tonic-gate 24787c478bd9Sstevel@tonic-gate #if MILTER 24797c478bd9Sstevel@tonic-gate /* 24807c478bd9Sstevel@tonic-gate ** If the filter will be deleting recipients, 24817c478bd9Sstevel@tonic-gate ** don't expand them at RCPT time (in the call 24827c478bd9Sstevel@tonic-gate ** to recipient()). If they are expanded, it 24837c478bd9Sstevel@tonic-gate ** is impossible for removefromlist() to figure 24847c478bd9Sstevel@tonic-gate ** out the expanded members of the original 24857c478bd9Sstevel@tonic-gate ** recipient and mark them as QS_DONTSEND. 24867c478bd9Sstevel@tonic-gate */ 24877c478bd9Sstevel@tonic-gate 24887c478bd9Sstevel@tonic-gate if (milter_can_delrcpts()) 24897c478bd9Sstevel@tonic-gate e->e_flags |= EF_VRFYONLY; 24907c478bd9Sstevel@tonic-gate #endif /* MILTER */ 24917c478bd9Sstevel@tonic-gate 24927c478bd9Sstevel@tonic-gate p = skipword(p, "to"); 24937c478bd9Sstevel@tonic-gate if (p == NULL) 24947c478bd9Sstevel@tonic-gate goto rcpt_done; 24957c478bd9Sstevel@tonic-gate macdefine(&e->e_macro, A_PERM, 24967c478bd9Sstevel@tonic-gate macid("{addr_type}"), "e r"); 24977c478bd9Sstevel@tonic-gate a = parseaddr(p, NULLADDR, RF_COPYALL, ' ', &delimptr, 24987c478bd9Sstevel@tonic-gate e, true); 24997c478bd9Sstevel@tonic-gate macdefine(&e->e_macro, A_PERM, 25007c478bd9Sstevel@tonic-gate macid("{addr_type}"), NULL); 25017c478bd9Sstevel@tonic-gate if (Errors > 0) 25027c478bd9Sstevel@tonic-gate goto rcpt_done; 25037c478bd9Sstevel@tonic-gate if (a == NULL) 25047c478bd9Sstevel@tonic-gate { 25057c478bd9Sstevel@tonic-gate usrerr("501 5.0.0 Missing recipient"); 25067c478bd9Sstevel@tonic-gate goto rcpt_done; 25077c478bd9Sstevel@tonic-gate } 25087c478bd9Sstevel@tonic-gate 25097c478bd9Sstevel@tonic-gate if (delimptr != NULL && *delimptr != '\0') 25107c478bd9Sstevel@tonic-gate *delimptr++ = '\0'; 25117c478bd9Sstevel@tonic-gate 25127c478bd9Sstevel@tonic-gate /* put resulting triple from parseaddr() into macros */ 25137c478bd9Sstevel@tonic-gate if (a->q_mailer != NULL) 25147c478bd9Sstevel@tonic-gate macdefine(&e->e_macro, A_PERM, 25157c478bd9Sstevel@tonic-gate macid("{rcpt_mailer}"), 25167c478bd9Sstevel@tonic-gate a->q_mailer->m_name); 25177c478bd9Sstevel@tonic-gate else 25187c478bd9Sstevel@tonic-gate macdefine(&e->e_macro, A_PERM, 25197c478bd9Sstevel@tonic-gate macid("{rcpt_mailer}"), NULL); 25207c478bd9Sstevel@tonic-gate if (a->q_host != NULL) 25217c478bd9Sstevel@tonic-gate macdefine(&e->e_macro, A_PERM, 25227c478bd9Sstevel@tonic-gate macid("{rcpt_host}"), a->q_host); 25237c478bd9Sstevel@tonic-gate else 25247c478bd9Sstevel@tonic-gate macdefine(&e->e_macro, A_PERM, 25257c478bd9Sstevel@tonic-gate macid("{rcpt_host}"), "localhost"); 25267c478bd9Sstevel@tonic-gate if (a->q_user != NULL) 25277c478bd9Sstevel@tonic-gate macdefine(&e->e_macro, A_PERM, 25287c478bd9Sstevel@tonic-gate macid("{rcpt_addr}"), a->q_user); 25297c478bd9Sstevel@tonic-gate else 25307c478bd9Sstevel@tonic-gate macdefine(&e->e_macro, A_PERM, 25317c478bd9Sstevel@tonic-gate macid("{rcpt_addr}"), NULL); 25327c478bd9Sstevel@tonic-gate if (Errors > 0) 25337c478bd9Sstevel@tonic-gate goto rcpt_done; 25347c478bd9Sstevel@tonic-gate 25357c478bd9Sstevel@tonic-gate /* now parse ESMTP arguments */ 25367c478bd9Sstevel@tonic-gate addr = p; 25377c478bd9Sstevel@tonic-gate argno = 0; 25387c478bd9Sstevel@tonic-gate args[argno++] = p; 25397c478bd9Sstevel@tonic-gate p = delimptr; 25407c478bd9Sstevel@tonic-gate while (p != NULL && *p != '\0') 25417c478bd9Sstevel@tonic-gate { 25427c478bd9Sstevel@tonic-gate char *kp; 25437c478bd9Sstevel@tonic-gate char *vp = NULL; 25447c478bd9Sstevel@tonic-gate char *equal = NULL; 25457c478bd9Sstevel@tonic-gate 25467c478bd9Sstevel@tonic-gate /* locate the beginning of the keyword */ 25477c478bd9Sstevel@tonic-gate SKIP_SPACE(p); 25487c478bd9Sstevel@tonic-gate if (*p == '\0') 25497c478bd9Sstevel@tonic-gate break; 25507c478bd9Sstevel@tonic-gate kp = p; 25517c478bd9Sstevel@tonic-gate 25527c478bd9Sstevel@tonic-gate /* skip to the value portion */ 25537c478bd9Sstevel@tonic-gate while ((isascii(*p) && isalnum(*p)) || *p == '-') 25547c478bd9Sstevel@tonic-gate p++; 25557c478bd9Sstevel@tonic-gate if (*p == '=') 25567c478bd9Sstevel@tonic-gate { 25577c478bd9Sstevel@tonic-gate equal = p; 25587c478bd9Sstevel@tonic-gate *p++ = '\0'; 25597c478bd9Sstevel@tonic-gate vp = p; 25607c478bd9Sstevel@tonic-gate 25617c478bd9Sstevel@tonic-gate /* skip to the end of the value */ 25627c478bd9Sstevel@tonic-gate while (*p != '\0' && *p != ' ' && 25637c478bd9Sstevel@tonic-gate !(isascii(*p) && iscntrl(*p)) && 25647c478bd9Sstevel@tonic-gate *p != '=') 25657c478bd9Sstevel@tonic-gate p++; 25667c478bd9Sstevel@tonic-gate } 25677c478bd9Sstevel@tonic-gate 25687c478bd9Sstevel@tonic-gate if (*p != '\0') 25697c478bd9Sstevel@tonic-gate *p++ = '\0'; 25707c478bd9Sstevel@tonic-gate 25717c478bd9Sstevel@tonic-gate if (tTd(19, 1)) 25727c478bd9Sstevel@tonic-gate sm_dprintf("RCPT: got arg %s=\"%s\"\n", kp, 25737c478bd9Sstevel@tonic-gate vp == NULL ? "<null>" : vp); 25747c478bd9Sstevel@tonic-gate 2575*3ee0e492Sjbeck rcpt_esmtp_args(a, kp, vp, e, features); 25767c478bd9Sstevel@tonic-gate if (equal != NULL) 25777c478bd9Sstevel@tonic-gate *equal = '='; 25787c478bd9Sstevel@tonic-gate args[argno++] = kp; 25797c478bd9Sstevel@tonic-gate if (argno >= MAXSMTPARGS - 1) 25807c478bd9Sstevel@tonic-gate usrerr("501 5.5.4 Too many parameters"); 25817c478bd9Sstevel@tonic-gate if (Errors > 0) 25827c478bd9Sstevel@tonic-gate break; 25837c478bd9Sstevel@tonic-gate } 25847c478bd9Sstevel@tonic-gate args[argno] = NULL; 25857c478bd9Sstevel@tonic-gate if (Errors > 0) 25867c478bd9Sstevel@tonic-gate goto rcpt_done; 25877c478bd9Sstevel@tonic-gate 25887c478bd9Sstevel@tonic-gate /* do config file checking of the recipient */ 25897c478bd9Sstevel@tonic-gate macdefine(&e->e_macro, A_PERM, 25907c478bd9Sstevel@tonic-gate macid("{addr_type}"), "e r"); 25917c478bd9Sstevel@tonic-gate if (rscheck("check_rcpt", addr, 25927c478bd9Sstevel@tonic-gate NULL, e, RSF_RMCOMM|RSF_COUNT, 3, 25937c478bd9Sstevel@tonic-gate NULL, e->e_id) != EX_OK || 25947c478bd9Sstevel@tonic-gate Errors > 0) 25957c478bd9Sstevel@tonic-gate goto rcpt_done; 25967c478bd9Sstevel@tonic-gate macdefine(&e->e_macro, A_PERM, 25977c478bd9Sstevel@tonic-gate macid("{addr_type}"), NULL); 25987c478bd9Sstevel@tonic-gate 25997c478bd9Sstevel@tonic-gate /* If discarding, don't bother to verify user */ 26007c478bd9Sstevel@tonic-gate if (bitset(EF_DISCARD, e->e_flags)) 26017c478bd9Sstevel@tonic-gate a->q_state = QS_VERIFIED; 26027c478bd9Sstevel@tonic-gate 26037c478bd9Sstevel@tonic-gate #if MILTER 26047c478bd9Sstevel@tonic-gate if (smtp.sm_milterlist && smtp.sm_milterize && 26057c478bd9Sstevel@tonic-gate !bitset(EF_DISCARD, e->e_flags)) 26067c478bd9Sstevel@tonic-gate { 26077c478bd9Sstevel@tonic-gate char state; 26087c478bd9Sstevel@tonic-gate char *response; 26097c478bd9Sstevel@tonic-gate 26107c478bd9Sstevel@tonic-gate response = milter_envrcpt(args, e, &state); 26117c478bd9Sstevel@tonic-gate MILTER_REPLY("to"); 26127c478bd9Sstevel@tonic-gate } 26137c478bd9Sstevel@tonic-gate #endif /* MILTER */ 26147c478bd9Sstevel@tonic-gate 26157c478bd9Sstevel@tonic-gate macdefine(&e->e_macro, A_PERM, 26167c478bd9Sstevel@tonic-gate macid("{rcpt_mailer}"), NULL); 26177c478bd9Sstevel@tonic-gate macdefine(&e->e_macro, A_PERM, 26187c478bd9Sstevel@tonic-gate macid("{rcpt_host}"), NULL); 26197c478bd9Sstevel@tonic-gate macdefine(&e->e_macro, A_PERM, 26207c478bd9Sstevel@tonic-gate macid("{rcpt_addr}"), NULL); 26217c478bd9Sstevel@tonic-gate macdefine(&e->e_macro, A_PERM, 26227c478bd9Sstevel@tonic-gate macid("{dsn_notify}"), NULL); 26237c478bd9Sstevel@tonic-gate if (Errors > 0) 26247c478bd9Sstevel@tonic-gate goto rcpt_done; 26257c478bd9Sstevel@tonic-gate 26267c478bd9Sstevel@tonic-gate /* save in recipient list after ESMTP mods */ 26277c478bd9Sstevel@tonic-gate a = recipient(a, &e->e_sendqueue, 0, e); 26287c478bd9Sstevel@tonic-gate if (Errors > 0) 26297c478bd9Sstevel@tonic-gate goto rcpt_done; 26307c478bd9Sstevel@tonic-gate 26317c478bd9Sstevel@tonic-gate /* no errors during parsing, but might be a duplicate */ 26327c478bd9Sstevel@tonic-gate e->e_to = a->q_paddr; 26337c478bd9Sstevel@tonic-gate if (!QS_IS_BADADDR(a->q_state)) 26347c478bd9Sstevel@tonic-gate { 26357c478bd9Sstevel@tonic-gate if (smtp.sm_nrcpts == 0) 26367c478bd9Sstevel@tonic-gate initsys(e); 26377c478bd9Sstevel@tonic-gate message("250 2.1.5 Recipient ok%s", 26387c478bd9Sstevel@tonic-gate QS_IS_QUEUEUP(a->q_state) ? 26397c478bd9Sstevel@tonic-gate " (will queue)" : ""); 26407c478bd9Sstevel@tonic-gate smtp.sm_nrcpts++; 26417c478bd9Sstevel@tonic-gate } 26427c478bd9Sstevel@tonic-gate else 26437c478bd9Sstevel@tonic-gate { 26447c478bd9Sstevel@tonic-gate /* punt -- should keep message in ADDRESS.... */ 26457c478bd9Sstevel@tonic-gate usrerr("550 5.1.1 Addressee unknown"); 26467c478bd9Sstevel@tonic-gate } 26477c478bd9Sstevel@tonic-gate rcpt_done: 26487c478bd9Sstevel@tonic-gate if (Errors > 0) 26497c478bd9Sstevel@tonic-gate { 26507c478bd9Sstevel@tonic-gate ++n_badrcpts; 26517c478bd9Sstevel@tonic-gate NBADRCPTS; 26527c478bd9Sstevel@tonic-gate } 26537c478bd9Sstevel@tonic-gate } 26547c478bd9Sstevel@tonic-gate SM_EXCEPT(exc, "[!F]*") 26557c478bd9Sstevel@tonic-gate { 26567c478bd9Sstevel@tonic-gate /* An exception occurred while processing RCPT */ 26577c478bd9Sstevel@tonic-gate e->e_flags &= ~(EF_FATALERRS|EF_PM_NOTIFY); 26587c478bd9Sstevel@tonic-gate ++n_badrcpts; 26597c478bd9Sstevel@tonic-gate NBADRCPTS; 26607c478bd9Sstevel@tonic-gate } 26617c478bd9Sstevel@tonic-gate SM_END_TRY 26627c478bd9Sstevel@tonic-gate break; 26637c478bd9Sstevel@tonic-gate 26647c478bd9Sstevel@tonic-gate case CMDDATA: /* data -- text of mail */ 26657c478bd9Sstevel@tonic-gate DELAY_CONN("DATA"); 26667c478bd9Sstevel@tonic-gate if (!smtp_data(&smtp, e)) 26677c478bd9Sstevel@tonic-gate goto doquit; 26687c478bd9Sstevel@tonic-gate break; 26697c478bd9Sstevel@tonic-gate 26707c478bd9Sstevel@tonic-gate case CMDRSET: /* rset -- reset state */ 26717c478bd9Sstevel@tonic-gate if (tTd(94, 100)) 26727c478bd9Sstevel@tonic-gate message("451 4.0.0 Test failure"); 26737c478bd9Sstevel@tonic-gate else 26747c478bd9Sstevel@tonic-gate message("250 2.0.0 Reset state"); 26757c478bd9Sstevel@tonic-gate CLEAR_STATE(cmdbuf); 26767c478bd9Sstevel@tonic-gate break; 26777c478bd9Sstevel@tonic-gate 26787c478bd9Sstevel@tonic-gate case CMDVRFY: /* vrfy -- verify address */ 26797c478bd9Sstevel@tonic-gate case CMDEXPN: /* expn -- expand address */ 26807c478bd9Sstevel@tonic-gate vrfy = c->cmd_code == CMDVRFY; 26817c478bd9Sstevel@tonic-gate DELAY_CONN(vrfy ? "VRFY" : "EXPN"); 26827c478bd9Sstevel@tonic-gate if (tempfail) 26837c478bd9Sstevel@tonic-gate { 26847c478bd9Sstevel@tonic-gate if (LogLevel > 9) 26857c478bd9Sstevel@tonic-gate sm_syslog(LOG_INFO, e->e_id, 26867c478bd9Sstevel@tonic-gate "SMTP %s command (%.100s) from %s tempfailed (due to previous checks)", 26877c478bd9Sstevel@tonic-gate vrfy ? "VRFY" : "EXPN", 26887c478bd9Sstevel@tonic-gate p, CurSmtpClient); 26897c478bd9Sstevel@tonic-gate 26907c478bd9Sstevel@tonic-gate /* RFC 821 doesn't allow 4xy reply code */ 26917c478bd9Sstevel@tonic-gate usrerr("550 5.7.1 Please try again later"); 26927c478bd9Sstevel@tonic-gate break; 26937c478bd9Sstevel@tonic-gate } 26947c478bd9Sstevel@tonic-gate wt = checksmtpattack(&n_verifies, MAXVRFYCOMMANDS, 26957c478bd9Sstevel@tonic-gate false, vrfy ? "VRFY" : "EXPN", e); 26967c478bd9Sstevel@tonic-gate STOP_IF_ATTACK(wt); 26977c478bd9Sstevel@tonic-gate previous = curtime(); 26987c478bd9Sstevel@tonic-gate if ((vrfy && bitset(PRIV_NOVRFY, PrivacyFlags)) || 26997c478bd9Sstevel@tonic-gate (!vrfy && !bitset(SRV_OFFER_EXPN, features))) 27007c478bd9Sstevel@tonic-gate { 27017c478bd9Sstevel@tonic-gate if (vrfy) 27027c478bd9Sstevel@tonic-gate message("252 2.5.2 Cannot VRFY user; try RCPT to attempt delivery (or try finger)"); 27037c478bd9Sstevel@tonic-gate else 27047c478bd9Sstevel@tonic-gate message("502 5.7.0 Sorry, we do not allow this operation"); 27057c478bd9Sstevel@tonic-gate if (LogLevel > 5) 27067c478bd9Sstevel@tonic-gate sm_syslog(LOG_INFO, e->e_id, 27077c478bd9Sstevel@tonic-gate "%s: %s [rejected]", 27087c478bd9Sstevel@tonic-gate CurSmtpClient, 27097c478bd9Sstevel@tonic-gate shortenstring(inp, MAXSHORTSTR)); 27107c478bd9Sstevel@tonic-gate break; 27117c478bd9Sstevel@tonic-gate } 27127c478bd9Sstevel@tonic-gate else if (!gothello && 27137c478bd9Sstevel@tonic-gate bitset(vrfy ? PRIV_NEEDVRFYHELO : PRIV_NEEDEXPNHELO, 27147c478bd9Sstevel@tonic-gate PrivacyFlags)) 27157c478bd9Sstevel@tonic-gate { 27167c478bd9Sstevel@tonic-gate usrerr("503 5.0.0 I demand that you introduce yourself first"); 27177c478bd9Sstevel@tonic-gate break; 27187c478bd9Sstevel@tonic-gate } 27197c478bd9Sstevel@tonic-gate if (Errors > 0) 27207c478bd9Sstevel@tonic-gate break; 27217c478bd9Sstevel@tonic-gate if (LogLevel > 5) 27227c478bd9Sstevel@tonic-gate sm_syslog(LOG_INFO, e->e_id, "%s: %s", 27237c478bd9Sstevel@tonic-gate CurSmtpClient, 27247c478bd9Sstevel@tonic-gate shortenstring(inp, MAXSHORTSTR)); 27257c478bd9Sstevel@tonic-gate SM_TRY 27267c478bd9Sstevel@tonic-gate { 27277c478bd9Sstevel@tonic-gate QuickAbort = true; 27287c478bd9Sstevel@tonic-gate vrfyqueue = NULL; 27297c478bd9Sstevel@tonic-gate if (vrfy) 27307c478bd9Sstevel@tonic-gate e->e_flags |= EF_VRFYONLY; 27317c478bd9Sstevel@tonic-gate while (*p != '\0' && isascii(*p) && isspace(*p)) 27327c478bd9Sstevel@tonic-gate p++; 27337c478bd9Sstevel@tonic-gate if (*p == '\0') 27347c478bd9Sstevel@tonic-gate { 27357c478bd9Sstevel@tonic-gate usrerr("501 5.5.2 Argument required"); 27367c478bd9Sstevel@tonic-gate } 27377c478bd9Sstevel@tonic-gate else 27387c478bd9Sstevel@tonic-gate { 27397c478bd9Sstevel@tonic-gate /* do config file checking of the address */ 27407c478bd9Sstevel@tonic-gate if (rscheck(vrfy ? "check_vrfy" : "check_expn", 27417c478bd9Sstevel@tonic-gate p, NULL, e, RSF_RMCOMM, 27427c478bd9Sstevel@tonic-gate 3, NULL, NOQID) != EX_OK || 27437c478bd9Sstevel@tonic-gate Errors > 0) 27447c478bd9Sstevel@tonic-gate sm_exc_raisenew_x(&EtypeQuickAbort, 1); 27457c478bd9Sstevel@tonic-gate (void) sendtolist(p, NULLADDR, &vrfyqueue, 0, e); 27467c478bd9Sstevel@tonic-gate } 27477c478bd9Sstevel@tonic-gate if (wt > 0) 27487c478bd9Sstevel@tonic-gate { 27497c478bd9Sstevel@tonic-gate time_t t; 27507c478bd9Sstevel@tonic-gate 27517c478bd9Sstevel@tonic-gate t = wt - (curtime() - previous); 27527c478bd9Sstevel@tonic-gate if (t > 0) 27537c478bd9Sstevel@tonic-gate (void) sleep(t); 27547c478bd9Sstevel@tonic-gate } 27557c478bd9Sstevel@tonic-gate if (Errors > 0) 27567c478bd9Sstevel@tonic-gate sm_exc_raisenew_x(&EtypeQuickAbort, 1); 27577c478bd9Sstevel@tonic-gate if (vrfyqueue == NULL) 27587c478bd9Sstevel@tonic-gate { 27597c478bd9Sstevel@tonic-gate usrerr("554 5.5.2 Nothing to %s", vrfy ? "VRFY" : "EXPN"); 27607c478bd9Sstevel@tonic-gate } 27617c478bd9Sstevel@tonic-gate while (vrfyqueue != NULL) 27627c478bd9Sstevel@tonic-gate { 27637c478bd9Sstevel@tonic-gate if (!QS_IS_UNDELIVERED(vrfyqueue->q_state)) 27647c478bd9Sstevel@tonic-gate { 27657c478bd9Sstevel@tonic-gate vrfyqueue = vrfyqueue->q_next; 27667c478bd9Sstevel@tonic-gate continue; 27677c478bd9Sstevel@tonic-gate } 27687c478bd9Sstevel@tonic-gate 27697c478bd9Sstevel@tonic-gate /* see if there is more in the vrfy list */ 27707c478bd9Sstevel@tonic-gate a = vrfyqueue; 27717c478bd9Sstevel@tonic-gate while ((a = a->q_next) != NULL && 27727c478bd9Sstevel@tonic-gate (!QS_IS_UNDELIVERED(a->q_state))) 27737c478bd9Sstevel@tonic-gate continue; 27747c478bd9Sstevel@tonic-gate printvrfyaddr(vrfyqueue, a == NULL, vrfy); 27757c478bd9Sstevel@tonic-gate vrfyqueue = a; 27767c478bd9Sstevel@tonic-gate } 27777c478bd9Sstevel@tonic-gate } 27787c478bd9Sstevel@tonic-gate SM_EXCEPT(exc, "[!F]*") 27797c478bd9Sstevel@tonic-gate { 27807c478bd9Sstevel@tonic-gate /* 27817c478bd9Sstevel@tonic-gate ** An exception occurred while processing VRFY/EXPN 27827c478bd9Sstevel@tonic-gate */ 27837c478bd9Sstevel@tonic-gate 27847c478bd9Sstevel@tonic-gate sm_exc_free(exc); 27857c478bd9Sstevel@tonic-gate goto undo; 27867c478bd9Sstevel@tonic-gate } 27877c478bd9Sstevel@tonic-gate SM_END_TRY 27887c478bd9Sstevel@tonic-gate break; 27897c478bd9Sstevel@tonic-gate 27907c478bd9Sstevel@tonic-gate case CMDETRN: /* etrn -- force queue flush */ 27917c478bd9Sstevel@tonic-gate DELAY_CONN("ETRN"); 27927c478bd9Sstevel@tonic-gate 27937c478bd9Sstevel@tonic-gate /* Don't leak queue information via debug flags */ 27947c478bd9Sstevel@tonic-gate if (!bitset(SRV_OFFER_ETRN, features) || UseMSP || 27957c478bd9Sstevel@tonic-gate (RealUid != 0 && RealUid != TrustedUid && 27967c478bd9Sstevel@tonic-gate OpMode == MD_SMTP)) 27977c478bd9Sstevel@tonic-gate { 27987c478bd9Sstevel@tonic-gate /* different message for MSA ? */ 27997c478bd9Sstevel@tonic-gate message("502 5.7.0 Sorry, we do not allow this operation"); 28007c478bd9Sstevel@tonic-gate if (LogLevel > 5) 28017c478bd9Sstevel@tonic-gate sm_syslog(LOG_INFO, e->e_id, 28027c478bd9Sstevel@tonic-gate "%s: %s [rejected]", 28037c478bd9Sstevel@tonic-gate CurSmtpClient, 28047c478bd9Sstevel@tonic-gate shortenstring(inp, MAXSHORTSTR)); 28057c478bd9Sstevel@tonic-gate break; 28067c478bd9Sstevel@tonic-gate } 28077c478bd9Sstevel@tonic-gate if (tempfail) 28087c478bd9Sstevel@tonic-gate { 28097c478bd9Sstevel@tonic-gate if (LogLevel > 9) 28107c478bd9Sstevel@tonic-gate sm_syslog(LOG_INFO, e->e_id, 28117c478bd9Sstevel@tonic-gate "SMTP ETRN command (%.100s) from %s tempfailed (due to previous checks)", 28127c478bd9Sstevel@tonic-gate p, CurSmtpClient); 28137c478bd9Sstevel@tonic-gate usrerr(MSG_TEMPFAIL); 28147c478bd9Sstevel@tonic-gate break; 28157c478bd9Sstevel@tonic-gate } 28167c478bd9Sstevel@tonic-gate 28177c478bd9Sstevel@tonic-gate if (strlen(p) <= 0) 28187c478bd9Sstevel@tonic-gate { 28197c478bd9Sstevel@tonic-gate usrerr("500 5.5.2 Parameter required"); 28207c478bd9Sstevel@tonic-gate break; 28217c478bd9Sstevel@tonic-gate } 28227c478bd9Sstevel@tonic-gate 28237c478bd9Sstevel@tonic-gate /* crude way to avoid denial-of-service attacks */ 28247c478bd9Sstevel@tonic-gate STOP_IF_ATTACK(checksmtpattack(&n_etrn, MAXETRNCOMMANDS, 28257c478bd9Sstevel@tonic-gate true, "ETRN", e)); 28267c478bd9Sstevel@tonic-gate 28277c478bd9Sstevel@tonic-gate /* 28287c478bd9Sstevel@tonic-gate ** Do config file checking of the parameter. 28297c478bd9Sstevel@tonic-gate ** Even though we have srv_features now, we still 28307c478bd9Sstevel@tonic-gate ** need this ruleset because the former is called 28317c478bd9Sstevel@tonic-gate ** when the connection has been established, while 28327c478bd9Sstevel@tonic-gate ** this ruleset is called when the command is 28337c478bd9Sstevel@tonic-gate ** actually issued and therefore has all information 28347c478bd9Sstevel@tonic-gate ** available to make a decision. 28357c478bd9Sstevel@tonic-gate */ 28367c478bd9Sstevel@tonic-gate 28377c478bd9Sstevel@tonic-gate if (rscheck("check_etrn", p, NULL, e, 28387c478bd9Sstevel@tonic-gate RSF_RMCOMM, 3, NULL, NOQID) != EX_OK || 28397c478bd9Sstevel@tonic-gate Errors > 0) 28407c478bd9Sstevel@tonic-gate break; 28417c478bd9Sstevel@tonic-gate 28427c478bd9Sstevel@tonic-gate if (LogLevel > 5) 28437c478bd9Sstevel@tonic-gate sm_syslog(LOG_INFO, e->e_id, 28447c478bd9Sstevel@tonic-gate "%s: ETRN %s", CurSmtpClient, 28457c478bd9Sstevel@tonic-gate shortenstring(p, MAXSHORTSTR)); 28467c478bd9Sstevel@tonic-gate 28477c478bd9Sstevel@tonic-gate id = p; 28487c478bd9Sstevel@tonic-gate if (*id == '#') 28497c478bd9Sstevel@tonic-gate { 28507c478bd9Sstevel@tonic-gate int i, qgrp; 28517c478bd9Sstevel@tonic-gate 28527c478bd9Sstevel@tonic-gate id++; 28537c478bd9Sstevel@tonic-gate qgrp = name2qid(id); 28547c478bd9Sstevel@tonic-gate if (!ISVALIDQGRP(qgrp)) 28557c478bd9Sstevel@tonic-gate { 28567c478bd9Sstevel@tonic-gate usrerr("459 4.5.4 Queue %s unknown", 28577c478bd9Sstevel@tonic-gate id); 28587c478bd9Sstevel@tonic-gate break; 28597c478bd9Sstevel@tonic-gate } 28607c478bd9Sstevel@tonic-gate for (i = 0; i < NumQueue && Queue[i] != NULL; 28617c478bd9Sstevel@tonic-gate i++) 28627c478bd9Sstevel@tonic-gate Queue[i]->qg_nextrun = (time_t) -1; 28637c478bd9Sstevel@tonic-gate Queue[qgrp]->qg_nextrun = 0; 28647c478bd9Sstevel@tonic-gate ok = run_work_group(Queue[qgrp]->qg_wgrp, 28657c478bd9Sstevel@tonic-gate RWG_FORK|RWG_FORCE); 28667c478bd9Sstevel@tonic-gate if (ok && Errors == 0) 28677c478bd9Sstevel@tonic-gate message("250 2.0.0 Queuing for queue group %s started", id); 28687c478bd9Sstevel@tonic-gate break; 28697c478bd9Sstevel@tonic-gate } 28707c478bd9Sstevel@tonic-gate 28717c478bd9Sstevel@tonic-gate if (*id == '@') 28727c478bd9Sstevel@tonic-gate id++; 28737c478bd9Sstevel@tonic-gate else 28747c478bd9Sstevel@tonic-gate *--id = '@'; 28757c478bd9Sstevel@tonic-gate 28767c478bd9Sstevel@tonic-gate new = (QUEUE_CHAR *) sm_malloc(sizeof(QUEUE_CHAR)); 28777c478bd9Sstevel@tonic-gate if (new == NULL) 28787c478bd9Sstevel@tonic-gate { 28797c478bd9Sstevel@tonic-gate syserr("500 5.5.0 ETRN out of memory"); 28807c478bd9Sstevel@tonic-gate break; 28817c478bd9Sstevel@tonic-gate } 28827c478bd9Sstevel@tonic-gate new->queue_match = id; 28837c478bd9Sstevel@tonic-gate new->queue_negate = false; 28847c478bd9Sstevel@tonic-gate new->queue_next = NULL; 28857c478bd9Sstevel@tonic-gate QueueLimitRecipient = new; 28867c478bd9Sstevel@tonic-gate ok = runqueue(true, false, false, true); 28877c478bd9Sstevel@tonic-gate sm_free(QueueLimitRecipient); /* XXX */ 28887c478bd9Sstevel@tonic-gate QueueLimitRecipient = NULL; 28897c478bd9Sstevel@tonic-gate if (ok && Errors == 0) 28907c478bd9Sstevel@tonic-gate message("250 2.0.0 Queuing for node %s started", p); 28917c478bd9Sstevel@tonic-gate break; 28927c478bd9Sstevel@tonic-gate 28937c478bd9Sstevel@tonic-gate case CMDHELP: /* help -- give user info */ 28947c478bd9Sstevel@tonic-gate DELAY_CONN("HELP"); 28957c478bd9Sstevel@tonic-gate help(p, e); 28967c478bd9Sstevel@tonic-gate break; 28977c478bd9Sstevel@tonic-gate 28987c478bd9Sstevel@tonic-gate case CMDNOOP: /* noop -- do nothing */ 28997c478bd9Sstevel@tonic-gate DELAY_CONN("NOOP"); 2900445f2479Sjbeck STOP_IF_ATTACK(checksmtpattack(&n_noop, MaxNOOPCommands, 29017c478bd9Sstevel@tonic-gate true, "NOOP", e)); 29027c478bd9Sstevel@tonic-gate message("250 2.0.0 OK"); 29037c478bd9Sstevel@tonic-gate break; 29047c478bd9Sstevel@tonic-gate 29057c478bd9Sstevel@tonic-gate case CMDQUIT: /* quit -- leave mail */ 29067c478bd9Sstevel@tonic-gate message("221 2.0.0 %s closing connection", MyHostName); 29077c478bd9Sstevel@tonic-gate #if PIPELINING 29087c478bd9Sstevel@tonic-gate (void) sm_io_flush(OutChannel, SM_TIME_DEFAULT); 29097c478bd9Sstevel@tonic-gate #endif /* PIPELINING */ 29107c478bd9Sstevel@tonic-gate 29117c478bd9Sstevel@tonic-gate if (smtp.sm_nrcpts > 0) 29127c478bd9Sstevel@tonic-gate logundelrcpts(e, "aborted by sender", 9, false); 29137c478bd9Sstevel@tonic-gate 29147c478bd9Sstevel@tonic-gate /* arrange to ignore any current send list */ 29157c478bd9Sstevel@tonic-gate e->e_sendqueue = NULL; 29167c478bd9Sstevel@tonic-gate 29177c478bd9Sstevel@tonic-gate #if STARTTLS 29187c478bd9Sstevel@tonic-gate /* shutdown TLS connection */ 29197c478bd9Sstevel@tonic-gate if (tls_active) 29207c478bd9Sstevel@tonic-gate { 29217c478bd9Sstevel@tonic-gate (void) endtls(srv_ssl, "server"); 29227c478bd9Sstevel@tonic-gate tls_active = false; 29237c478bd9Sstevel@tonic-gate } 29247c478bd9Sstevel@tonic-gate #endif /* STARTTLS */ 29257c478bd9Sstevel@tonic-gate #if SASL 29267c478bd9Sstevel@tonic-gate if (authenticating == SASL_IS_AUTH) 29277c478bd9Sstevel@tonic-gate { 29287c478bd9Sstevel@tonic-gate sasl_dispose(&conn); 29297c478bd9Sstevel@tonic-gate authenticating = SASL_NOT_AUTH; 29307c478bd9Sstevel@tonic-gate /* XXX sasl_done(); this is a child */ 29317c478bd9Sstevel@tonic-gate } 29327c478bd9Sstevel@tonic-gate #endif /* SASL */ 29337c478bd9Sstevel@tonic-gate 29347c478bd9Sstevel@tonic-gate doquit: 29357c478bd9Sstevel@tonic-gate /* avoid future 050 messages */ 29367c478bd9Sstevel@tonic-gate disconnect(1, e); 29377c478bd9Sstevel@tonic-gate 29387c478bd9Sstevel@tonic-gate #if MILTER 29397c478bd9Sstevel@tonic-gate /* close out milter filters */ 29407c478bd9Sstevel@tonic-gate milter_quit(e); 29417c478bd9Sstevel@tonic-gate #endif /* MILTER */ 29427c478bd9Sstevel@tonic-gate 29437c478bd9Sstevel@tonic-gate if (LogLevel > 4 && bitset(EF_LOGSENDER, e->e_flags)) 29447c478bd9Sstevel@tonic-gate logsender(e, NULL); 29457c478bd9Sstevel@tonic-gate e->e_flags &= ~EF_LOGSENDER; 29467c478bd9Sstevel@tonic-gate 29477c478bd9Sstevel@tonic-gate if (lognullconnection && LogLevel > 5 && 29487c478bd9Sstevel@tonic-gate nullserver == NULL) 29497c478bd9Sstevel@tonic-gate { 29507c478bd9Sstevel@tonic-gate char *d; 29517c478bd9Sstevel@tonic-gate 29527c478bd9Sstevel@tonic-gate d = macvalue(macid("{daemon_name}"), e); 29537c478bd9Sstevel@tonic-gate if (d == NULL) 29547c478bd9Sstevel@tonic-gate d = "stdin"; 29557c478bd9Sstevel@tonic-gate 29567c478bd9Sstevel@tonic-gate /* 29577c478bd9Sstevel@tonic-gate ** even though this id is "bogus", it makes 29587c478bd9Sstevel@tonic-gate ** it simpler to "grep" related events, e.g., 29597c478bd9Sstevel@tonic-gate ** timeouts for the same connection. 29607c478bd9Sstevel@tonic-gate */ 29617c478bd9Sstevel@tonic-gate 29627c478bd9Sstevel@tonic-gate sm_syslog(LOG_INFO, e->e_id, 29637c478bd9Sstevel@tonic-gate "%s did not issue MAIL/EXPN/VRFY/ETRN during connection to %s", 29647c478bd9Sstevel@tonic-gate CurSmtpClient, d); 29657c478bd9Sstevel@tonic-gate } 29667c478bd9Sstevel@tonic-gate if (tTd(93, 100)) 29677c478bd9Sstevel@tonic-gate { 29687c478bd9Sstevel@tonic-gate /* return to handle next connection */ 29697c478bd9Sstevel@tonic-gate return; 29707c478bd9Sstevel@tonic-gate } 29717c478bd9Sstevel@tonic-gate finis(true, true, ExitStat); 29727c478bd9Sstevel@tonic-gate /* NOTREACHED */ 29737c478bd9Sstevel@tonic-gate 2974445f2479Sjbeck /* just to avoid bogus warning from some compilers */ 2975445f2479Sjbeck exit(EX_OSERR); 2976445f2479Sjbeck 29777c478bd9Sstevel@tonic-gate case CMDVERB: /* set verbose mode */ 29787c478bd9Sstevel@tonic-gate DELAY_CONN("VERB"); 29797c478bd9Sstevel@tonic-gate if (!bitset(SRV_OFFER_EXPN, features) || 29807c478bd9Sstevel@tonic-gate !bitset(SRV_OFFER_VERB, features)) 29817c478bd9Sstevel@tonic-gate { 29827c478bd9Sstevel@tonic-gate /* this would give out the same info */ 29837c478bd9Sstevel@tonic-gate message("502 5.7.0 Verbose unavailable"); 29847c478bd9Sstevel@tonic-gate break; 29857c478bd9Sstevel@tonic-gate } 2986445f2479Sjbeck STOP_IF_ATTACK(checksmtpattack(&n_noop, MaxNOOPCommands, 29877c478bd9Sstevel@tonic-gate true, "VERB", e)); 29887c478bd9Sstevel@tonic-gate Verbose = 1; 29897c478bd9Sstevel@tonic-gate set_delivery_mode(SM_DELIVER, e); 29907c478bd9Sstevel@tonic-gate message("250 2.0.0 Verbose mode"); 29917c478bd9Sstevel@tonic-gate break; 29927c478bd9Sstevel@tonic-gate 29937c478bd9Sstevel@tonic-gate #if SMTPDEBUG 29947c478bd9Sstevel@tonic-gate case CMDDBGQSHOW: /* show queues */ 29957c478bd9Sstevel@tonic-gate (void) sm_io_fprintf(smioout, SM_TIME_DEFAULT, 29967c478bd9Sstevel@tonic-gate "Send Queue="); 29977c478bd9Sstevel@tonic-gate printaddr(smioout, e->e_sendqueue, true); 29987c478bd9Sstevel@tonic-gate break; 29997c478bd9Sstevel@tonic-gate 30007c478bd9Sstevel@tonic-gate case CMDDBGDEBUG: /* set debug mode */ 30017c478bd9Sstevel@tonic-gate tTsetup(tTdvect, sizeof tTdvect, "0-99.1"); 30027c478bd9Sstevel@tonic-gate tTflag(p); 30037c478bd9Sstevel@tonic-gate message("200 2.0.0 Debug set"); 30047c478bd9Sstevel@tonic-gate break; 30057c478bd9Sstevel@tonic-gate 30067c478bd9Sstevel@tonic-gate #else /* SMTPDEBUG */ 30077c478bd9Sstevel@tonic-gate case CMDDBGQSHOW: /* show queues */ 30087c478bd9Sstevel@tonic-gate case CMDDBGDEBUG: /* set debug mode */ 30097c478bd9Sstevel@tonic-gate #endif /* SMTPDEBUG */ 30107c478bd9Sstevel@tonic-gate case CMDLOGBOGUS: /* bogus command */ 30117c478bd9Sstevel@tonic-gate DELAY_CONN("Bogus"); 30127c478bd9Sstevel@tonic-gate if (LogLevel > 0) 30137c478bd9Sstevel@tonic-gate sm_syslog(LOG_CRIT, e->e_id, 30147c478bd9Sstevel@tonic-gate "\"%s\" command from %s (%.100s)", 30157c478bd9Sstevel@tonic-gate c->cmd_name, CurSmtpClient, 30167c478bd9Sstevel@tonic-gate anynet_ntoa(&RealHostAddr)); 30177c478bd9Sstevel@tonic-gate /* FALLTHROUGH */ 30187c478bd9Sstevel@tonic-gate 30197c478bd9Sstevel@tonic-gate case CMDERROR: /* unknown command */ 30207c478bd9Sstevel@tonic-gate #if MAXBADCOMMANDS > 0 30217c478bd9Sstevel@tonic-gate if (++n_badcmds > MAXBADCOMMANDS) 30227c478bd9Sstevel@tonic-gate { 30237c478bd9Sstevel@tonic-gate stopattack: 30247c478bd9Sstevel@tonic-gate message("421 4.7.0 %s Too many bad commands; closing connection", 30257c478bd9Sstevel@tonic-gate MyHostName); 30267c478bd9Sstevel@tonic-gate 30277c478bd9Sstevel@tonic-gate /* arrange to ignore any current send list */ 30287c478bd9Sstevel@tonic-gate e->e_sendqueue = NULL; 30297c478bd9Sstevel@tonic-gate goto doquit; 30307c478bd9Sstevel@tonic-gate } 30317c478bd9Sstevel@tonic-gate #endif /* MAXBADCOMMANDS > 0 */ 30327c478bd9Sstevel@tonic-gate 30337c478bd9Sstevel@tonic-gate #if MILTER && SMFI_VERSION > 2 30347c478bd9Sstevel@tonic-gate if (smtp.sm_milterlist && smtp.sm_milterize && 30357c478bd9Sstevel@tonic-gate !bitset(EF_DISCARD, e->e_flags)) 30367c478bd9Sstevel@tonic-gate { 30377c478bd9Sstevel@tonic-gate char state; 30387c478bd9Sstevel@tonic-gate char *response; 30397c478bd9Sstevel@tonic-gate 30407c478bd9Sstevel@tonic-gate if (MilterLogLevel > 9) 30417c478bd9Sstevel@tonic-gate sm_syslog(LOG_INFO, e->e_id, 30427c478bd9Sstevel@tonic-gate "Sending \"%s\" to Milter", inp); 30437c478bd9Sstevel@tonic-gate response = milter_unknown(inp, e, &state); 30447c478bd9Sstevel@tonic-gate MILTER_REPLY("unknown"); 30457c478bd9Sstevel@tonic-gate if (state == SMFIR_REPLYCODE || 30467c478bd9Sstevel@tonic-gate state == SMFIR_REJECT || 3047445f2479Sjbeck state == SMFIR_TEMPFAIL || 3048445f2479Sjbeck state == SMFIR_SHUTDOWN) 30497c478bd9Sstevel@tonic-gate { 30507c478bd9Sstevel@tonic-gate /* MILTER_REPLY already gave an error */ 30517c478bd9Sstevel@tonic-gate break; 30527c478bd9Sstevel@tonic-gate } 30537c478bd9Sstevel@tonic-gate } 30547c478bd9Sstevel@tonic-gate #endif /* MILTER && SMFI_VERSION > 2 */ 30557c478bd9Sstevel@tonic-gate 30567c478bd9Sstevel@tonic-gate usrerr("500 5.5.1 Command unrecognized: \"%s\"", 30577c478bd9Sstevel@tonic-gate shortenstring(inp, MAXSHORTSTR)); 30587c478bd9Sstevel@tonic-gate break; 30597c478bd9Sstevel@tonic-gate 30607c478bd9Sstevel@tonic-gate case CMDUNIMPL: 30617c478bd9Sstevel@tonic-gate DELAY_CONN("Unimpl"); 30627c478bd9Sstevel@tonic-gate usrerr("502 5.5.1 Command not implemented: \"%s\"", 30637c478bd9Sstevel@tonic-gate shortenstring(inp, MAXSHORTSTR)); 30647c478bd9Sstevel@tonic-gate break; 30657c478bd9Sstevel@tonic-gate 30667c478bd9Sstevel@tonic-gate default: 30677c478bd9Sstevel@tonic-gate DELAY_CONN("default"); 30687c478bd9Sstevel@tonic-gate errno = 0; 30697c478bd9Sstevel@tonic-gate syserr("500 5.5.0 smtp: unknown code %d", c->cmd_code); 30707c478bd9Sstevel@tonic-gate break; 30717c478bd9Sstevel@tonic-gate } 30727c478bd9Sstevel@tonic-gate #if SASL 30737c478bd9Sstevel@tonic-gate } 30747c478bd9Sstevel@tonic-gate #endif /* SASL */ 30757c478bd9Sstevel@tonic-gate } 30767c478bd9Sstevel@tonic-gate SM_EXCEPT(exc, "[!F]*") 30777c478bd9Sstevel@tonic-gate { 30787c478bd9Sstevel@tonic-gate /* 30797c478bd9Sstevel@tonic-gate ** The only possible exception is "E:mta.quickabort". 30807c478bd9Sstevel@tonic-gate ** There is nothing to do except fall through and loop. 30817c478bd9Sstevel@tonic-gate */ 30827c478bd9Sstevel@tonic-gate } 30837c478bd9Sstevel@tonic-gate SM_END_TRY 30847c478bd9Sstevel@tonic-gate } 30857c478bd9Sstevel@tonic-gate } 30867c478bd9Sstevel@tonic-gate /* 30877c478bd9Sstevel@tonic-gate ** SMTP_DATA -- implement the SMTP DATA command. 30887c478bd9Sstevel@tonic-gate ** 30897c478bd9Sstevel@tonic-gate ** Parameters: 30907c478bd9Sstevel@tonic-gate ** smtp -- status of SMTP connection. 30917c478bd9Sstevel@tonic-gate ** e -- envelope. 30927c478bd9Sstevel@tonic-gate ** 30937c478bd9Sstevel@tonic-gate ** Returns: 30947c478bd9Sstevel@tonic-gate ** true iff SMTP session can continue. 30957c478bd9Sstevel@tonic-gate ** 30967c478bd9Sstevel@tonic-gate ** Side Effects: 30977c478bd9Sstevel@tonic-gate ** possibly sends message. 30987c478bd9Sstevel@tonic-gate */ 30997c478bd9Sstevel@tonic-gate 31007c478bd9Sstevel@tonic-gate static bool 31017c478bd9Sstevel@tonic-gate smtp_data(smtp, e) 31027c478bd9Sstevel@tonic-gate SMTP_T *smtp; 31037c478bd9Sstevel@tonic-gate ENVELOPE *e; 31047c478bd9Sstevel@tonic-gate { 31057c478bd9Sstevel@tonic-gate #if MILTER 31067c478bd9Sstevel@tonic-gate bool milteraccept; 31077c478bd9Sstevel@tonic-gate #endif /* MILTER */ 31087c478bd9Sstevel@tonic-gate bool aborting; 31097c478bd9Sstevel@tonic-gate bool doublequeue; 31107c478bd9Sstevel@tonic-gate ADDRESS *a; 31117c478bd9Sstevel@tonic-gate ENVELOPE *ee; 31127c478bd9Sstevel@tonic-gate char *id; 31137c478bd9Sstevel@tonic-gate char *oldid; 31147c478bd9Sstevel@tonic-gate char buf[32]; 3115445f2479Sjbeck bool rv = true; 31167c478bd9Sstevel@tonic-gate 31177c478bd9Sstevel@tonic-gate SmtpPhase = "server DATA"; 31187c478bd9Sstevel@tonic-gate if (!smtp->sm_gotmail) 31197c478bd9Sstevel@tonic-gate { 31207c478bd9Sstevel@tonic-gate usrerr("503 5.0.0 Need MAIL command"); 31217c478bd9Sstevel@tonic-gate return true; 31227c478bd9Sstevel@tonic-gate } 31237c478bd9Sstevel@tonic-gate else if (smtp->sm_nrcpts <= 0) 31247c478bd9Sstevel@tonic-gate { 31257c478bd9Sstevel@tonic-gate usrerr("503 5.0.0 Need RCPT (recipient)"); 31267c478bd9Sstevel@tonic-gate return true; 31277c478bd9Sstevel@tonic-gate } 31287c478bd9Sstevel@tonic-gate (void) sm_snprintf(buf, sizeof buf, "%u", smtp->sm_nrcpts); 31297c478bd9Sstevel@tonic-gate if (rscheck("check_data", buf, NULL, e, 31307c478bd9Sstevel@tonic-gate RSF_RMCOMM|RSF_UNSTRUCTURED|RSF_COUNT, 3, NULL, 31317c478bd9Sstevel@tonic-gate e->e_id) != EX_OK) 31327c478bd9Sstevel@tonic-gate return true; 31337c478bd9Sstevel@tonic-gate 31347c478bd9Sstevel@tonic-gate #if MILTER && SMFI_VERSION > 3 31357c478bd9Sstevel@tonic-gate if (smtp->sm_milterlist && smtp->sm_milterize && 31367c478bd9Sstevel@tonic-gate !bitset(EF_DISCARD, e->e_flags)) 31377c478bd9Sstevel@tonic-gate { 31387c478bd9Sstevel@tonic-gate char state; 31397c478bd9Sstevel@tonic-gate char *response; 31407c478bd9Sstevel@tonic-gate int savelogusrerrs = LogUsrErrs; 31417c478bd9Sstevel@tonic-gate 31427c478bd9Sstevel@tonic-gate response = milter_data_cmd(e, &state); 31437c478bd9Sstevel@tonic-gate switch (state) 31447c478bd9Sstevel@tonic-gate { 31457c478bd9Sstevel@tonic-gate case SMFIR_REPLYCODE: 31467c478bd9Sstevel@tonic-gate if (MilterLogLevel > 3) 31477c478bd9Sstevel@tonic-gate { 31487c478bd9Sstevel@tonic-gate sm_syslog(LOG_INFO, e->e_id, 31497c478bd9Sstevel@tonic-gate "Milter: cmd=data, reject=%s", 31507c478bd9Sstevel@tonic-gate response); 31517c478bd9Sstevel@tonic-gate LogUsrErrs = false; 31527c478bd9Sstevel@tonic-gate } 31537c478bd9Sstevel@tonic-gate usrerr(response); 315449218d4fSjbeck if (strncmp(response, "421 ", 4) == 0 315549218d4fSjbeck || strncmp(response, "421-", 4) == 0) 31567c478bd9Sstevel@tonic-gate { 31577c478bd9Sstevel@tonic-gate e->e_sendqueue = NULL; 31587c478bd9Sstevel@tonic-gate return false; 31597c478bd9Sstevel@tonic-gate } 31607c478bd9Sstevel@tonic-gate return true; 31617c478bd9Sstevel@tonic-gate 31627c478bd9Sstevel@tonic-gate case SMFIR_REJECT: 31637c478bd9Sstevel@tonic-gate if (MilterLogLevel > 3) 31647c478bd9Sstevel@tonic-gate { 31657c478bd9Sstevel@tonic-gate sm_syslog(LOG_INFO, e->e_id, 31667c478bd9Sstevel@tonic-gate "Milter: cmd=data, reject=550 5.7.1 Command rejected"); 31677c478bd9Sstevel@tonic-gate LogUsrErrs = false; 31687c478bd9Sstevel@tonic-gate } 31697c478bd9Sstevel@tonic-gate usrerr("550 5.7.1 Command rejected"); 31707c478bd9Sstevel@tonic-gate return true; 31717c478bd9Sstevel@tonic-gate 31727c478bd9Sstevel@tonic-gate case SMFIR_DISCARD: 31737c478bd9Sstevel@tonic-gate if (MilterLogLevel > 3) 31747c478bd9Sstevel@tonic-gate sm_syslog(LOG_INFO, e->e_id, 31757c478bd9Sstevel@tonic-gate "Milter: cmd=data, discard"); 31767c478bd9Sstevel@tonic-gate e->e_flags |= EF_DISCARD; 31777c478bd9Sstevel@tonic-gate break; 31787c478bd9Sstevel@tonic-gate 31797c478bd9Sstevel@tonic-gate case SMFIR_TEMPFAIL: 31807c478bd9Sstevel@tonic-gate if (MilterLogLevel > 3) 31817c478bd9Sstevel@tonic-gate { 31827c478bd9Sstevel@tonic-gate sm_syslog(LOG_INFO, e->e_id, 31837c478bd9Sstevel@tonic-gate "Milter: cmd=data, reject=%s", 31847c478bd9Sstevel@tonic-gate MSG_TEMPFAIL); 31857c478bd9Sstevel@tonic-gate LogUsrErrs = false; 31867c478bd9Sstevel@tonic-gate } 31877c478bd9Sstevel@tonic-gate usrerr(MSG_TEMPFAIL); 31887c478bd9Sstevel@tonic-gate return true; 3189445f2479Sjbeck 3190445f2479Sjbeck case SMFIR_SHUTDOWN: 3191445f2479Sjbeck if (MilterLogLevel > 3) 3192445f2479Sjbeck { 3193445f2479Sjbeck sm_syslog(LOG_INFO, e->e_id, 3194445f2479Sjbeck "Milter: cmd=data, reject=421 4.7.0 %s closing connection", 3195445f2479Sjbeck MyHostName); 3196445f2479Sjbeck LogUsrErrs = false; 3197445f2479Sjbeck } 3198445f2479Sjbeck usrerr("421 4.7.0 %s closing connection", MyHostName); 3199445f2479Sjbeck e->e_sendqueue = NULL; 3200445f2479Sjbeck return false; 32017c478bd9Sstevel@tonic-gate } 32027c478bd9Sstevel@tonic-gate LogUsrErrs = savelogusrerrs; 32037c478bd9Sstevel@tonic-gate if (response != NULL) 32047c478bd9Sstevel@tonic-gate sm_free(response); /* XXX */ 32057c478bd9Sstevel@tonic-gate } 32067c478bd9Sstevel@tonic-gate #endif /* MILTER && SMFI_VERSION > 3 */ 32077c478bd9Sstevel@tonic-gate 32087c478bd9Sstevel@tonic-gate /* put back discard bit */ 32097c478bd9Sstevel@tonic-gate if (smtp->sm_discard) 32107c478bd9Sstevel@tonic-gate e->e_flags |= EF_DISCARD; 32117c478bd9Sstevel@tonic-gate 32127c478bd9Sstevel@tonic-gate /* check to see if we need to re-expand aliases */ 32137c478bd9Sstevel@tonic-gate /* also reset QS_BADADDR on already-diagnosted addrs */ 32147c478bd9Sstevel@tonic-gate doublequeue = false; 32157c478bd9Sstevel@tonic-gate for (a = e->e_sendqueue; a != NULL; a = a->q_next) 32167c478bd9Sstevel@tonic-gate { 32177c478bd9Sstevel@tonic-gate if (QS_IS_VERIFIED(a->q_state) && 32187c478bd9Sstevel@tonic-gate !bitset(EF_DISCARD, e->e_flags)) 32197c478bd9Sstevel@tonic-gate { 32207c478bd9Sstevel@tonic-gate /* need to re-expand aliases */ 32217c478bd9Sstevel@tonic-gate doublequeue = true; 32227c478bd9Sstevel@tonic-gate } 32237c478bd9Sstevel@tonic-gate if (QS_IS_BADADDR(a->q_state)) 32247c478bd9Sstevel@tonic-gate { 32257c478bd9Sstevel@tonic-gate /* make this "go away" */ 32267c478bd9Sstevel@tonic-gate a->q_state = QS_DONTSEND; 32277c478bd9Sstevel@tonic-gate } 32287c478bd9Sstevel@tonic-gate } 32297c478bd9Sstevel@tonic-gate 32307c478bd9Sstevel@tonic-gate /* collect the text of the message */ 32317c478bd9Sstevel@tonic-gate SmtpPhase = "collect"; 32327c478bd9Sstevel@tonic-gate buffer_errors(); 32337c478bd9Sstevel@tonic-gate 32347c478bd9Sstevel@tonic-gate collect(InChannel, true, NULL, e, true); 32357c478bd9Sstevel@tonic-gate 32367c478bd9Sstevel@tonic-gate /* redefine message size */ 32377c478bd9Sstevel@tonic-gate (void) sm_snprintf(buf, sizeof buf, "%ld", e->e_msgsize); 32387c478bd9Sstevel@tonic-gate macdefine(&e->e_macro, A_TEMP, macid("{msg_size}"), buf); 32397c478bd9Sstevel@tonic-gate 32407c478bd9Sstevel@tonic-gate #if _FFR_CHECK_EOM 32417c478bd9Sstevel@tonic-gate /* rscheck() will set Errors or EF_DISCARD if it trips */ 32427c478bd9Sstevel@tonic-gate (void) rscheck("check_eom", buf, NULL, e, RSF_UNSTRUCTURED|RSF_COUNT, 32437c478bd9Sstevel@tonic-gate 3, NULL, e->e_id); 32447c478bd9Sstevel@tonic-gate #endif /* _FFR_CHECK_EOM */ 32457c478bd9Sstevel@tonic-gate 32467c478bd9Sstevel@tonic-gate #if MILTER 32477c478bd9Sstevel@tonic-gate milteraccept = true; 32487c478bd9Sstevel@tonic-gate if (smtp->sm_milterlist && smtp->sm_milterize && 32497c478bd9Sstevel@tonic-gate Errors <= 0 && 32507c478bd9Sstevel@tonic-gate !bitset(EF_DISCARD, e->e_flags)) 32517c478bd9Sstevel@tonic-gate { 32527c478bd9Sstevel@tonic-gate char state; 32537c478bd9Sstevel@tonic-gate char *response; 32547c478bd9Sstevel@tonic-gate 32557c478bd9Sstevel@tonic-gate response = milter_data(e, &state); 32567c478bd9Sstevel@tonic-gate switch (state) 32577c478bd9Sstevel@tonic-gate { 32587c478bd9Sstevel@tonic-gate case SMFIR_REPLYCODE: 32597c478bd9Sstevel@tonic-gate if (MilterLogLevel > 3) 32607c478bd9Sstevel@tonic-gate sm_syslog(LOG_INFO, e->e_id, 32617c478bd9Sstevel@tonic-gate "Milter: data, reject=%s", 32627c478bd9Sstevel@tonic-gate response); 32637c478bd9Sstevel@tonic-gate milteraccept = false; 32647c478bd9Sstevel@tonic-gate usrerr(response); 32657c478bd9Sstevel@tonic-gate break; 32667c478bd9Sstevel@tonic-gate 32677c478bd9Sstevel@tonic-gate case SMFIR_REJECT: 32687c478bd9Sstevel@tonic-gate milteraccept = false; 32697c478bd9Sstevel@tonic-gate if (MilterLogLevel > 3) 32707c478bd9Sstevel@tonic-gate sm_syslog(LOG_INFO, e->e_id, 32717c478bd9Sstevel@tonic-gate "Milter: data, reject=554 5.7.1 Command rejected"); 32727c478bd9Sstevel@tonic-gate usrerr("554 5.7.1 Command rejected"); 32737c478bd9Sstevel@tonic-gate break; 32747c478bd9Sstevel@tonic-gate 32757c478bd9Sstevel@tonic-gate case SMFIR_DISCARD: 32767c478bd9Sstevel@tonic-gate if (MilterLogLevel > 3) 32777c478bd9Sstevel@tonic-gate sm_syslog(LOG_INFO, e->e_id, 32787c478bd9Sstevel@tonic-gate "Milter: data, discard"); 32797c478bd9Sstevel@tonic-gate milteraccept = false; 32807c478bd9Sstevel@tonic-gate e->e_flags |= EF_DISCARD; 32817c478bd9Sstevel@tonic-gate break; 32827c478bd9Sstevel@tonic-gate 32837c478bd9Sstevel@tonic-gate case SMFIR_TEMPFAIL: 32847c478bd9Sstevel@tonic-gate if (MilterLogLevel > 3) 32857c478bd9Sstevel@tonic-gate sm_syslog(LOG_INFO, e->e_id, 32867c478bd9Sstevel@tonic-gate "Milter: data, reject=%s", 32877c478bd9Sstevel@tonic-gate MSG_TEMPFAIL); 32887c478bd9Sstevel@tonic-gate milteraccept = false; 32897c478bd9Sstevel@tonic-gate usrerr(MSG_TEMPFAIL); 32907c478bd9Sstevel@tonic-gate break; 3291445f2479Sjbeck 3292445f2479Sjbeck case SMFIR_SHUTDOWN: 3293445f2479Sjbeck if (MilterLogLevel > 3) 3294445f2479Sjbeck sm_syslog(LOG_INFO, e->e_id, 3295445f2479Sjbeck "Milter: data, reject=421 4.7.0 %s closing connection", 3296445f2479Sjbeck MyHostName); 3297445f2479Sjbeck milteraccept = false; 3298445f2479Sjbeck usrerr("421 4.7.0 %s closing connection", MyHostName); 3299445f2479Sjbeck rv = false; 3300445f2479Sjbeck break; 33017c478bd9Sstevel@tonic-gate } 33027c478bd9Sstevel@tonic-gate if (response != NULL) 33037c478bd9Sstevel@tonic-gate sm_free(response); 33047c478bd9Sstevel@tonic-gate } 33057c478bd9Sstevel@tonic-gate 33067c478bd9Sstevel@tonic-gate /* Milter may have changed message size */ 33077c478bd9Sstevel@tonic-gate (void) sm_snprintf(buf, sizeof buf, "%ld", e->e_msgsize); 33087c478bd9Sstevel@tonic-gate macdefine(&e->e_macro, A_TEMP, macid("{msg_size}"), buf); 33097c478bd9Sstevel@tonic-gate 33107c478bd9Sstevel@tonic-gate /* abort message filters that didn't get the body & log msg is OK */ 33117c478bd9Sstevel@tonic-gate if (smtp->sm_milterlist && smtp->sm_milterize) 33127c478bd9Sstevel@tonic-gate { 33137c478bd9Sstevel@tonic-gate milter_abort(e); 33147c478bd9Sstevel@tonic-gate if (milteraccept && MilterLogLevel > 9) 33157c478bd9Sstevel@tonic-gate sm_syslog(LOG_INFO, e->e_id, "Milter accept: message"); 33167c478bd9Sstevel@tonic-gate } 33177c478bd9Sstevel@tonic-gate 33187c478bd9Sstevel@tonic-gate /* 33197c478bd9Sstevel@tonic-gate ** If SuperSafe is SAFE_REALLY_POSTMILTER, and we don't have milter or 33207c478bd9Sstevel@tonic-gate ** milter accepted message, sync it now 33217c478bd9Sstevel@tonic-gate ** 33227c478bd9Sstevel@tonic-gate ** XXX This is almost a copy of the code in collect(): put it into 33237c478bd9Sstevel@tonic-gate ** a function that is called from both places? 33247c478bd9Sstevel@tonic-gate */ 33257c478bd9Sstevel@tonic-gate 33267c478bd9Sstevel@tonic-gate if (milteraccept && SuperSafe == SAFE_REALLY_POSTMILTER) 33277c478bd9Sstevel@tonic-gate { 33287c478bd9Sstevel@tonic-gate int afd; 33297c478bd9Sstevel@tonic-gate SM_FILE_T *volatile df; 33307c478bd9Sstevel@tonic-gate char *dfname; 33317c478bd9Sstevel@tonic-gate 33327c478bd9Sstevel@tonic-gate df = e->e_dfp; 33337c478bd9Sstevel@tonic-gate dfname = queuename(e, DATAFL_LETTER); 33347c478bd9Sstevel@tonic-gate if (sm_io_setinfo(df, SM_BF_COMMIT, NULL) < 0 33357c478bd9Sstevel@tonic-gate && errno != EINVAL) 33367c478bd9Sstevel@tonic-gate { 33377c478bd9Sstevel@tonic-gate int save_errno; 33387c478bd9Sstevel@tonic-gate 33397c478bd9Sstevel@tonic-gate save_errno = errno; 33407c478bd9Sstevel@tonic-gate if (save_errno == EEXIST) 33417c478bd9Sstevel@tonic-gate { 33427c478bd9Sstevel@tonic-gate struct stat st; 33437c478bd9Sstevel@tonic-gate int dfd; 33447c478bd9Sstevel@tonic-gate 33457c478bd9Sstevel@tonic-gate if (stat(dfname, &st) < 0) 33467c478bd9Sstevel@tonic-gate st.st_size = -1; 33477c478bd9Sstevel@tonic-gate errno = EEXIST; 33487c478bd9Sstevel@tonic-gate syserr("@collect: bfcommit(%s): already on disk, size=%ld", 33497c478bd9Sstevel@tonic-gate dfname, (long) st.st_size); 33507c478bd9Sstevel@tonic-gate dfd = sm_io_getinfo(df, SM_IO_WHAT_FD, NULL); 33517c478bd9Sstevel@tonic-gate if (dfd >= 0) 33527c478bd9Sstevel@tonic-gate dumpfd(dfd, true, true); 33537c478bd9Sstevel@tonic-gate } 33547c478bd9Sstevel@tonic-gate errno = save_errno; 33557c478bd9Sstevel@tonic-gate dferror(df, "bfcommit", e); 33567c478bd9Sstevel@tonic-gate flush_errors(true); 33577c478bd9Sstevel@tonic-gate finis(save_errno != EEXIST, true, ExitStat); 33587c478bd9Sstevel@tonic-gate } 33597c478bd9Sstevel@tonic-gate else if ((afd = sm_io_getinfo(df, SM_IO_WHAT_FD, NULL)) < 0) 33607c478bd9Sstevel@tonic-gate { 33617c478bd9Sstevel@tonic-gate dferror(df, "sm_io_getinfo", e); 33627c478bd9Sstevel@tonic-gate flush_errors(true); 33637c478bd9Sstevel@tonic-gate finis(true, true, ExitStat); 33647c478bd9Sstevel@tonic-gate /* NOTREACHED */ 33657c478bd9Sstevel@tonic-gate } 33667c478bd9Sstevel@tonic-gate else if (fsync(afd) < 0) 33677c478bd9Sstevel@tonic-gate { 33687c478bd9Sstevel@tonic-gate dferror(df, "fsync", e); 33697c478bd9Sstevel@tonic-gate flush_errors(true); 33707c478bd9Sstevel@tonic-gate finis(true, true, ExitStat); 33717c478bd9Sstevel@tonic-gate /* NOTREACHED */ 33727c478bd9Sstevel@tonic-gate } 33737c478bd9Sstevel@tonic-gate else if (sm_io_close(df, SM_TIME_DEFAULT) < 0) 33747c478bd9Sstevel@tonic-gate { 33757c478bd9Sstevel@tonic-gate dferror(df, "sm_io_close", e); 33767c478bd9Sstevel@tonic-gate flush_errors(true); 33777c478bd9Sstevel@tonic-gate finis(true, true, ExitStat); 33787c478bd9Sstevel@tonic-gate /* NOTREACHED */ 33797c478bd9Sstevel@tonic-gate } 33807c478bd9Sstevel@tonic-gate 33817c478bd9Sstevel@tonic-gate /* Now reopen the df file */ 33827c478bd9Sstevel@tonic-gate e->e_dfp = sm_io_open(SmFtStdio, SM_TIME_DEFAULT, dfname, 33837c478bd9Sstevel@tonic-gate SM_IO_RDONLY, NULL); 33847c478bd9Sstevel@tonic-gate if (e->e_dfp == NULL) 33857c478bd9Sstevel@tonic-gate { 33867c478bd9Sstevel@tonic-gate /* we haven't acked receipt yet, so just chuck this */ 33877c478bd9Sstevel@tonic-gate syserr("@Cannot reopen %s", dfname); 33887c478bd9Sstevel@tonic-gate finis(true, true, ExitStat); 33897c478bd9Sstevel@tonic-gate /* NOTREACHED */ 33907c478bd9Sstevel@tonic-gate } 33917c478bd9Sstevel@tonic-gate } 33927c478bd9Sstevel@tonic-gate #endif /* MILTER */ 33937c478bd9Sstevel@tonic-gate 33947c478bd9Sstevel@tonic-gate /* Check if quarantining stats should be updated */ 33957c478bd9Sstevel@tonic-gate if (e->e_quarmsg != NULL) 33967c478bd9Sstevel@tonic-gate markstats(e, NULL, STATS_QUARANTINE); 33977c478bd9Sstevel@tonic-gate 33987c478bd9Sstevel@tonic-gate /* 33997c478bd9Sstevel@tonic-gate ** If a header/body check (header checks or milter) 34007c478bd9Sstevel@tonic-gate ** set EF_DISCARD, don't queueup the message -- 34017c478bd9Sstevel@tonic-gate ** that would lose the EF_DISCARD bit and deliver 34027c478bd9Sstevel@tonic-gate ** the message. 34037c478bd9Sstevel@tonic-gate */ 34047c478bd9Sstevel@tonic-gate 34057c478bd9Sstevel@tonic-gate if (bitset(EF_DISCARD, e->e_flags)) 34067c478bd9Sstevel@tonic-gate doublequeue = false; 34077c478bd9Sstevel@tonic-gate 34087c478bd9Sstevel@tonic-gate aborting = Errors > 0; 34097c478bd9Sstevel@tonic-gate if (!(aborting || bitset(EF_DISCARD, e->e_flags)) && 34107c478bd9Sstevel@tonic-gate (QueueMode == QM_QUARANTINE || e->e_quarmsg == NULL) && 34117c478bd9Sstevel@tonic-gate !split_by_recipient(e)) 34127c478bd9Sstevel@tonic-gate aborting = bitset(EF_FATALERRS, e->e_flags); 34137c478bd9Sstevel@tonic-gate 34147c478bd9Sstevel@tonic-gate if (aborting) 34157c478bd9Sstevel@tonic-gate { 34167c478bd9Sstevel@tonic-gate /* Log who the mail would have gone to */ 34177c478bd9Sstevel@tonic-gate logundelrcpts(e, e->e_message, 8, false); 34187c478bd9Sstevel@tonic-gate flush_errors(true); 34197c478bd9Sstevel@tonic-gate buffer_errors(); 34207c478bd9Sstevel@tonic-gate goto abortmessage; 34217c478bd9Sstevel@tonic-gate } 34227c478bd9Sstevel@tonic-gate 34237c478bd9Sstevel@tonic-gate /* from now on, we have to operate silently */ 34247c478bd9Sstevel@tonic-gate buffer_errors(); 34257c478bd9Sstevel@tonic-gate 34267c478bd9Sstevel@tonic-gate #if 0 34277c478bd9Sstevel@tonic-gate /* 34287c478bd9Sstevel@tonic-gate ** Clear message, it may contain an error from the SMTP dialogue. 34297c478bd9Sstevel@tonic-gate ** This error must not show up in the queue. 34307c478bd9Sstevel@tonic-gate ** Some error message should show up, e.g., alias database 34317c478bd9Sstevel@tonic-gate ** not available, but others shouldn't, e.g., from check_rcpt. 34327c478bd9Sstevel@tonic-gate */ 34337c478bd9Sstevel@tonic-gate 34347c478bd9Sstevel@tonic-gate e->e_message = NULL; 34357c478bd9Sstevel@tonic-gate #endif /* 0 */ 34367c478bd9Sstevel@tonic-gate 34377c478bd9Sstevel@tonic-gate /* 34387c478bd9Sstevel@tonic-gate ** Arrange to send to everyone. 34397c478bd9Sstevel@tonic-gate ** If sending to multiple people, mail back 34407c478bd9Sstevel@tonic-gate ** errors rather than reporting directly. 34417c478bd9Sstevel@tonic-gate ** In any case, don't mail back errors for 34427c478bd9Sstevel@tonic-gate ** anything that has happened up to 34437c478bd9Sstevel@tonic-gate ** now (the other end will do this). 34447c478bd9Sstevel@tonic-gate ** Truncate our transcript -- the mail has gotten 34457c478bd9Sstevel@tonic-gate ** to us successfully, and if we have 34467c478bd9Sstevel@tonic-gate ** to mail this back, it will be easier 34477c478bd9Sstevel@tonic-gate ** on the reader. 34487c478bd9Sstevel@tonic-gate ** Then send to everyone. 34497c478bd9Sstevel@tonic-gate ** Finally give a reply code. If an error has 34507c478bd9Sstevel@tonic-gate ** already been given, don't mail a 34517c478bd9Sstevel@tonic-gate ** message back. 34527c478bd9Sstevel@tonic-gate ** We goose error returns by clearing error bit. 34537c478bd9Sstevel@tonic-gate */ 34547c478bd9Sstevel@tonic-gate 34557c478bd9Sstevel@tonic-gate SmtpPhase = "delivery"; 34567c478bd9Sstevel@tonic-gate (void) sm_io_setinfo(e->e_xfp, SM_BF_TRUNCATE, NULL); 34577c478bd9Sstevel@tonic-gate id = e->e_id; 34587c478bd9Sstevel@tonic-gate 34597c478bd9Sstevel@tonic-gate #if NAMED_BIND 34607c478bd9Sstevel@tonic-gate _res.retry = TimeOuts.res_retry[RES_TO_FIRST]; 34617c478bd9Sstevel@tonic-gate _res.retrans = TimeOuts.res_retrans[RES_TO_FIRST]; 34627c478bd9Sstevel@tonic-gate #endif /* NAMED_BIND */ 34637c478bd9Sstevel@tonic-gate 34647c478bd9Sstevel@tonic-gate for (ee = e; ee != NULL; ee = ee->e_sibling) 34657c478bd9Sstevel@tonic-gate { 34667c478bd9Sstevel@tonic-gate /* make sure we actually do delivery */ 34677c478bd9Sstevel@tonic-gate ee->e_flags &= ~EF_CLRQUEUE; 34687c478bd9Sstevel@tonic-gate 34697c478bd9Sstevel@tonic-gate /* from now on, operate silently */ 34707c478bd9Sstevel@tonic-gate ee->e_errormode = EM_MAIL; 34717c478bd9Sstevel@tonic-gate 34727c478bd9Sstevel@tonic-gate if (doublequeue) 34737c478bd9Sstevel@tonic-gate { 34747c478bd9Sstevel@tonic-gate /* make sure it is in the queue */ 34757c478bd9Sstevel@tonic-gate queueup(ee, false, true); 34767c478bd9Sstevel@tonic-gate } 34777c478bd9Sstevel@tonic-gate else 34787c478bd9Sstevel@tonic-gate { 3479445f2479Sjbeck int mode; 3480445f2479Sjbeck 34817c478bd9Sstevel@tonic-gate /* send to all recipients */ 3482445f2479Sjbeck mode = SM_DEFAULT; 3483445f2479Sjbeck #if _FFR_DM_ONE 3484445f2479Sjbeck if (SM_DM_ONE == e->e_sendmode) 3485445f2479Sjbeck { 3486445f2479Sjbeck if (NotFirstDelivery) 3487445f2479Sjbeck { 3488445f2479Sjbeck mode = SM_QUEUE; 3489445f2479Sjbeck e->e_sendmode = SM_QUEUE; 3490445f2479Sjbeck } 3491445f2479Sjbeck else 3492445f2479Sjbeck { 3493445f2479Sjbeck mode = SM_FORK; 3494445f2479Sjbeck NotFirstDelivery = true; 3495445f2479Sjbeck } 3496445f2479Sjbeck } 3497445f2479Sjbeck #endif /* _FFR_DM_ONE */ 3498445f2479Sjbeck sendall(ee, mode); 34997c478bd9Sstevel@tonic-gate } 35007c478bd9Sstevel@tonic-gate ee->e_to = NULL; 35017c478bd9Sstevel@tonic-gate } 35027c478bd9Sstevel@tonic-gate 35037c478bd9Sstevel@tonic-gate /* put back id for SMTP logging in putoutmsg() */ 35047c478bd9Sstevel@tonic-gate oldid = CurEnv->e_id; 35057c478bd9Sstevel@tonic-gate CurEnv->e_id = id; 35067c478bd9Sstevel@tonic-gate 35077c478bd9Sstevel@tonic-gate /* issue success message */ 3508445f2479Sjbeck #if _FFR_MSG_ACCEPT 3509445f2479Sjbeck if (MessageAccept != NULL && *MessageAccept != '\0') 3510445f2479Sjbeck { 3511445f2479Sjbeck char msg[MAXLINE]; 3512445f2479Sjbeck 3513445f2479Sjbeck expand(MessageAccept, msg, sizeof msg, e); 3514445f2479Sjbeck message("250 2.0.0 %s", msg); 3515445f2479Sjbeck } 3516445f2479Sjbeck else 3517445f2479Sjbeck #endif /* _FFR_MSG_ACCEPT */ 35187c478bd9Sstevel@tonic-gate message("250 2.0.0 %s Message accepted for delivery", id); 35197c478bd9Sstevel@tonic-gate CurEnv->e_id = oldid; 35207c478bd9Sstevel@tonic-gate 35217c478bd9Sstevel@tonic-gate /* if we just queued, poke it */ 35227c478bd9Sstevel@tonic-gate if (doublequeue) 35237c478bd9Sstevel@tonic-gate { 35247c478bd9Sstevel@tonic-gate bool anything_to_send = false; 35257c478bd9Sstevel@tonic-gate 35267c478bd9Sstevel@tonic-gate sm_getla(); 35277c478bd9Sstevel@tonic-gate for (ee = e; ee != NULL; ee = ee->e_sibling) 35287c478bd9Sstevel@tonic-gate { 35297c478bd9Sstevel@tonic-gate if (WILL_BE_QUEUED(ee->e_sendmode)) 35307c478bd9Sstevel@tonic-gate continue; 35317c478bd9Sstevel@tonic-gate if (shouldqueue(ee->e_msgpriority, ee->e_ctime)) 35327c478bd9Sstevel@tonic-gate { 35337c478bd9Sstevel@tonic-gate ee->e_sendmode = SM_QUEUE; 35347c478bd9Sstevel@tonic-gate continue; 35357c478bd9Sstevel@tonic-gate } 35367c478bd9Sstevel@tonic-gate else if (QueueMode != QM_QUARANTINE && 35377c478bd9Sstevel@tonic-gate ee->e_quarmsg != NULL) 35387c478bd9Sstevel@tonic-gate { 35397c478bd9Sstevel@tonic-gate ee->e_sendmode = SM_QUEUE; 35407c478bd9Sstevel@tonic-gate continue; 35417c478bd9Sstevel@tonic-gate } 35427c478bd9Sstevel@tonic-gate anything_to_send = true; 35437c478bd9Sstevel@tonic-gate 35447c478bd9Sstevel@tonic-gate /* close all the queue files */ 35457c478bd9Sstevel@tonic-gate closexscript(ee); 35467c478bd9Sstevel@tonic-gate if (ee->e_dfp != NULL) 35477c478bd9Sstevel@tonic-gate { 35487c478bd9Sstevel@tonic-gate (void) sm_io_close(ee->e_dfp, SM_TIME_DEFAULT); 35497c478bd9Sstevel@tonic-gate ee->e_dfp = NULL; 35507c478bd9Sstevel@tonic-gate } 35517c478bd9Sstevel@tonic-gate unlockqueue(ee); 35527c478bd9Sstevel@tonic-gate } 35537c478bd9Sstevel@tonic-gate if (anything_to_send) 35547c478bd9Sstevel@tonic-gate { 35557c478bd9Sstevel@tonic-gate #if PIPELINING 35567c478bd9Sstevel@tonic-gate /* 35577c478bd9Sstevel@tonic-gate ** XXX if we don't do this, we get 250 twice 35587c478bd9Sstevel@tonic-gate ** because it is also flushed in the child. 35597c478bd9Sstevel@tonic-gate */ 35607c478bd9Sstevel@tonic-gate 35617c478bd9Sstevel@tonic-gate (void) sm_io_flush(OutChannel, SM_TIME_DEFAULT); 35627c478bd9Sstevel@tonic-gate #endif /* PIPELINING */ 35637c478bd9Sstevel@tonic-gate (void) doworklist(e, true, true); 35647c478bd9Sstevel@tonic-gate } 35657c478bd9Sstevel@tonic-gate } 35667c478bd9Sstevel@tonic-gate 35677c478bd9Sstevel@tonic-gate abortmessage: 35687c478bd9Sstevel@tonic-gate if (LogLevel > 4 && bitset(EF_LOGSENDER, e->e_flags)) 35697c478bd9Sstevel@tonic-gate logsender(e, NULL); 35707c478bd9Sstevel@tonic-gate e->e_flags &= ~EF_LOGSENDER; 35717c478bd9Sstevel@tonic-gate 35727c478bd9Sstevel@tonic-gate /* clean up a bit */ 35737c478bd9Sstevel@tonic-gate smtp->sm_gotmail = false; 35747c478bd9Sstevel@tonic-gate 35757c478bd9Sstevel@tonic-gate /* 35767c478bd9Sstevel@tonic-gate ** Call dropenvelope if and only if the envelope is *not* 35777c478bd9Sstevel@tonic-gate ** being processed by the child process forked by doworklist(). 35787c478bd9Sstevel@tonic-gate */ 35797c478bd9Sstevel@tonic-gate 35807c478bd9Sstevel@tonic-gate if (aborting || bitset(EF_DISCARD, e->e_flags)) 35817c478bd9Sstevel@tonic-gate dropenvelope(e, true, false); 35827c478bd9Sstevel@tonic-gate else 35837c478bd9Sstevel@tonic-gate { 35847c478bd9Sstevel@tonic-gate for (ee = e; ee != NULL; ee = ee->e_sibling) 35857c478bd9Sstevel@tonic-gate { 35867c478bd9Sstevel@tonic-gate if (!doublequeue && 35877c478bd9Sstevel@tonic-gate QueueMode != QM_QUARANTINE && 35887c478bd9Sstevel@tonic-gate ee->e_quarmsg != NULL) 35897c478bd9Sstevel@tonic-gate { 35907c478bd9Sstevel@tonic-gate dropenvelope(ee, true, false); 35917c478bd9Sstevel@tonic-gate continue; 35927c478bd9Sstevel@tonic-gate } 35937c478bd9Sstevel@tonic-gate if (WILL_BE_QUEUED(ee->e_sendmode)) 35947c478bd9Sstevel@tonic-gate dropenvelope(ee, true, false); 35957c478bd9Sstevel@tonic-gate } 35967c478bd9Sstevel@tonic-gate } 35977c478bd9Sstevel@tonic-gate sm_rpool_free(e->e_rpool); 35987c478bd9Sstevel@tonic-gate 35997c478bd9Sstevel@tonic-gate /* 36007c478bd9Sstevel@tonic-gate ** At this point, e == &MainEnvelope, but if we did splitting, 36017c478bd9Sstevel@tonic-gate ** then CurEnv may point to an envelope structure that was just 36027c478bd9Sstevel@tonic-gate ** freed with the rpool. So reset CurEnv *before* calling 36037c478bd9Sstevel@tonic-gate ** newenvelope. 36047c478bd9Sstevel@tonic-gate */ 36057c478bd9Sstevel@tonic-gate 36067c478bd9Sstevel@tonic-gate CurEnv = e; 36077c478bd9Sstevel@tonic-gate newenvelope(e, e, sm_rpool_new_x(NULL)); 36087c478bd9Sstevel@tonic-gate e->e_flags = BlankEnvelope.e_flags; 36097c478bd9Sstevel@tonic-gate 36107c478bd9Sstevel@tonic-gate /* restore connection quarantining */ 36117c478bd9Sstevel@tonic-gate if (smtp->sm_quarmsg == NULL) 36127c478bd9Sstevel@tonic-gate { 36137c478bd9Sstevel@tonic-gate e->e_quarmsg = NULL; 36147c478bd9Sstevel@tonic-gate macdefine(&e->e_macro, A_PERM, macid("{quarantine}"), ""); 36157c478bd9Sstevel@tonic-gate } 36167c478bd9Sstevel@tonic-gate else 36177c478bd9Sstevel@tonic-gate { 36187c478bd9Sstevel@tonic-gate e->e_quarmsg = sm_rpool_strdup_x(e->e_rpool, smtp->sm_quarmsg); 36197c478bd9Sstevel@tonic-gate macdefine(&e->e_macro, A_PERM, 36207c478bd9Sstevel@tonic-gate macid("{quarantine}"), e->e_quarmsg); 36217c478bd9Sstevel@tonic-gate } 3622445f2479Sjbeck return rv; 36237c478bd9Sstevel@tonic-gate } 36247c478bd9Sstevel@tonic-gate /* 36257c478bd9Sstevel@tonic-gate ** LOGUNDELRCPTS -- log undelivered (or all) recipients. 36267c478bd9Sstevel@tonic-gate ** 36277c478bd9Sstevel@tonic-gate ** Parameters: 36287c478bd9Sstevel@tonic-gate ** e -- envelope. 36297c478bd9Sstevel@tonic-gate ** msg -- message for Stat= 36307c478bd9Sstevel@tonic-gate ** level -- log level. 36317c478bd9Sstevel@tonic-gate ** all -- log all recipients. 36327c478bd9Sstevel@tonic-gate ** 36337c478bd9Sstevel@tonic-gate ** Returns: 36347c478bd9Sstevel@tonic-gate ** none. 36357c478bd9Sstevel@tonic-gate ** 36367c478bd9Sstevel@tonic-gate ** Side Effects: 36377c478bd9Sstevel@tonic-gate ** logs undelivered (or all) recipients 36387c478bd9Sstevel@tonic-gate */ 36397c478bd9Sstevel@tonic-gate 36407c478bd9Sstevel@tonic-gate void 36417c478bd9Sstevel@tonic-gate logundelrcpts(e, msg, level, all) 36427c478bd9Sstevel@tonic-gate ENVELOPE *e; 36437c478bd9Sstevel@tonic-gate char *msg; 36447c478bd9Sstevel@tonic-gate int level; 36457c478bd9Sstevel@tonic-gate bool all; 36467c478bd9Sstevel@tonic-gate { 36477c478bd9Sstevel@tonic-gate ADDRESS *a; 36487c478bd9Sstevel@tonic-gate 36497c478bd9Sstevel@tonic-gate if (LogLevel <= level || msg == NULL || *msg == '\0') 36507c478bd9Sstevel@tonic-gate return; 36517c478bd9Sstevel@tonic-gate 36527c478bd9Sstevel@tonic-gate /* Clear $h so relay= doesn't get mislogged by logdelivery() */ 36537c478bd9Sstevel@tonic-gate macdefine(&e->e_macro, A_PERM, 'h', NULL); 36547c478bd9Sstevel@tonic-gate 36557c478bd9Sstevel@tonic-gate /* Log who the mail would have gone to */ 36567c478bd9Sstevel@tonic-gate for (a = e->e_sendqueue; a != NULL; a = a->q_next) 36577c478bd9Sstevel@tonic-gate { 36587c478bd9Sstevel@tonic-gate if (!QS_IS_UNDELIVERED(a->q_state) && !all) 36597c478bd9Sstevel@tonic-gate continue; 36607c478bd9Sstevel@tonic-gate e->e_to = a->q_paddr; 36617c478bd9Sstevel@tonic-gate logdelivery(NULL, NULL, a->q_status, msg, NULL, 36627c478bd9Sstevel@tonic-gate (time_t) 0, e); 36637c478bd9Sstevel@tonic-gate } 36647c478bd9Sstevel@tonic-gate e->e_to = NULL; 36657c478bd9Sstevel@tonic-gate } 36667c478bd9Sstevel@tonic-gate /* 36677c478bd9Sstevel@tonic-gate ** CHECKSMTPATTACK -- check for denial-of-service attack by repetition 36687c478bd9Sstevel@tonic-gate ** 36697c478bd9Sstevel@tonic-gate ** Parameters: 36707c478bd9Sstevel@tonic-gate ** pcounter -- pointer to a counter for this command. 36717c478bd9Sstevel@tonic-gate ** maxcount -- maximum value for this counter before we 36727c478bd9Sstevel@tonic-gate ** slow down. 36737c478bd9Sstevel@tonic-gate ** waitnow -- sleep now (in this routine)? 36747c478bd9Sstevel@tonic-gate ** cname -- command name for logging. 36757c478bd9Sstevel@tonic-gate ** e -- the current envelope. 36767c478bd9Sstevel@tonic-gate ** 36777c478bd9Sstevel@tonic-gate ** Returns: 36787c478bd9Sstevel@tonic-gate ** time to wait, 36797c478bd9Sstevel@tonic-gate ** STOP_ATTACK if twice as many commands as allowed and 36807c478bd9Sstevel@tonic-gate ** MaxChildren > 0. 36817c478bd9Sstevel@tonic-gate ** 36827c478bd9Sstevel@tonic-gate ** Side Effects: 36837c478bd9Sstevel@tonic-gate ** Slows down if we seem to be under attack. 36847c478bd9Sstevel@tonic-gate */ 36857c478bd9Sstevel@tonic-gate 36867c478bd9Sstevel@tonic-gate static time_t 36877c478bd9Sstevel@tonic-gate checksmtpattack(pcounter, maxcount, waitnow, cname, e) 36887c478bd9Sstevel@tonic-gate volatile unsigned int *pcounter; 36897c478bd9Sstevel@tonic-gate unsigned int maxcount; 36907c478bd9Sstevel@tonic-gate bool waitnow; 36917c478bd9Sstevel@tonic-gate char *cname; 36927c478bd9Sstevel@tonic-gate ENVELOPE *e; 36937c478bd9Sstevel@tonic-gate { 36947c478bd9Sstevel@tonic-gate if (maxcount <= 0) /* no limit */ 36957c478bd9Sstevel@tonic-gate return (time_t) 0; 36967c478bd9Sstevel@tonic-gate 36977c478bd9Sstevel@tonic-gate if (++(*pcounter) >= maxcount) 36987c478bd9Sstevel@tonic-gate { 36997c478bd9Sstevel@tonic-gate unsigned int shift; 37007c478bd9Sstevel@tonic-gate time_t s; 37017c478bd9Sstevel@tonic-gate 37027c478bd9Sstevel@tonic-gate if (*pcounter == maxcount && LogLevel > 5) 37037c478bd9Sstevel@tonic-gate { 37047c478bd9Sstevel@tonic-gate sm_syslog(LOG_INFO, e->e_id, 37057c478bd9Sstevel@tonic-gate "%s: possible SMTP attack: command=%.40s, count=%u", 37067c478bd9Sstevel@tonic-gate CurSmtpClient, cname, *pcounter); 37077c478bd9Sstevel@tonic-gate } 37087c478bd9Sstevel@tonic-gate shift = *pcounter - maxcount; 37097c478bd9Sstevel@tonic-gate s = 1 << shift; 37107c478bd9Sstevel@tonic-gate if (shift > MAXSHIFT || s >= MAXTIMEOUT || s <= 0) 37117c478bd9Sstevel@tonic-gate s = MAXTIMEOUT; 37127c478bd9Sstevel@tonic-gate 37137c478bd9Sstevel@tonic-gate #define IS_ATTACK(s) ((MaxChildren > 0 && *pcounter >= maxcount * 2) \ 37147c478bd9Sstevel@tonic-gate ? STOP_ATTACK : (time_t) s) 37157c478bd9Sstevel@tonic-gate 37167c478bd9Sstevel@tonic-gate /* sleep at least 1 second before returning */ 37177c478bd9Sstevel@tonic-gate (void) sleep(*pcounter / maxcount); 37187c478bd9Sstevel@tonic-gate s -= *pcounter / maxcount; 37197c478bd9Sstevel@tonic-gate if (s >= MAXTIMEOUT || s < 0) 37207c478bd9Sstevel@tonic-gate s = MAXTIMEOUT; 37217c478bd9Sstevel@tonic-gate if (waitnow && s > 0) 37227c478bd9Sstevel@tonic-gate { 37237c478bd9Sstevel@tonic-gate (void) sleep(s); 37247c478bd9Sstevel@tonic-gate return IS_ATTACK(0); 37257c478bd9Sstevel@tonic-gate } 37267c478bd9Sstevel@tonic-gate return IS_ATTACK(s); 37277c478bd9Sstevel@tonic-gate } 37287c478bd9Sstevel@tonic-gate return (time_t) 0; 37297c478bd9Sstevel@tonic-gate } 37307c478bd9Sstevel@tonic-gate /* 37317c478bd9Sstevel@tonic-gate ** SETUP_SMTPD_IO -- setup I/O fd correctly for the SMTP server 37327c478bd9Sstevel@tonic-gate ** 37337c478bd9Sstevel@tonic-gate ** Parameters: 37347c478bd9Sstevel@tonic-gate ** none. 37357c478bd9Sstevel@tonic-gate ** 37367c478bd9Sstevel@tonic-gate ** Returns: 37377c478bd9Sstevel@tonic-gate ** nothing. 37387c478bd9Sstevel@tonic-gate ** 37397c478bd9Sstevel@tonic-gate ** Side Effects: 37407c478bd9Sstevel@tonic-gate ** may change I/O fd. 37417c478bd9Sstevel@tonic-gate */ 37427c478bd9Sstevel@tonic-gate 37437c478bd9Sstevel@tonic-gate static void 37447c478bd9Sstevel@tonic-gate setup_smtpd_io() 37457c478bd9Sstevel@tonic-gate { 37467c478bd9Sstevel@tonic-gate int inchfd, outchfd, outfd; 37477c478bd9Sstevel@tonic-gate 37487c478bd9Sstevel@tonic-gate inchfd = sm_io_getinfo(InChannel, SM_IO_WHAT_FD, NULL); 37497c478bd9Sstevel@tonic-gate outchfd = sm_io_getinfo(OutChannel, SM_IO_WHAT_FD, NULL); 37507c478bd9Sstevel@tonic-gate outfd = sm_io_getinfo(smioout, SM_IO_WHAT_FD, NULL); 37517c478bd9Sstevel@tonic-gate if (outchfd != outfd) 37527c478bd9Sstevel@tonic-gate { 37537c478bd9Sstevel@tonic-gate /* arrange for debugging output to go to remote host */ 37547c478bd9Sstevel@tonic-gate (void) dup2(outchfd, outfd); 37557c478bd9Sstevel@tonic-gate } 37567c478bd9Sstevel@tonic-gate 37577c478bd9Sstevel@tonic-gate /* 37587c478bd9Sstevel@tonic-gate ** if InChannel and OutChannel are stdin/stdout 37597c478bd9Sstevel@tonic-gate ** and connected to ttys 37607c478bd9Sstevel@tonic-gate ** and fcntl(STDIN, F_SETFL, O_NONBLOCKING) also changes STDOUT, 37617c478bd9Sstevel@tonic-gate ** then "chain" them together. 37627c478bd9Sstevel@tonic-gate */ 37637c478bd9Sstevel@tonic-gate 37647c478bd9Sstevel@tonic-gate if (inchfd == STDIN_FILENO && outchfd == STDOUT_FILENO && 37657c478bd9Sstevel@tonic-gate isatty(inchfd) && isatty(outchfd)) 37667c478bd9Sstevel@tonic-gate { 37677c478bd9Sstevel@tonic-gate int inmode, outmode; 37687c478bd9Sstevel@tonic-gate 37697c478bd9Sstevel@tonic-gate inmode = fcntl(inchfd, F_GETFL, 0); 37707c478bd9Sstevel@tonic-gate if (inmode == -1) 37717c478bd9Sstevel@tonic-gate { 37727c478bd9Sstevel@tonic-gate if (LogLevel > 11) 37737c478bd9Sstevel@tonic-gate sm_syslog(LOG_INFO, NOQID, 37747c478bd9Sstevel@tonic-gate "fcntl(inchfd, F_GETFL) failed: %s", 37757c478bd9Sstevel@tonic-gate sm_errstring(errno)); 37767c478bd9Sstevel@tonic-gate return; 37777c478bd9Sstevel@tonic-gate } 37787c478bd9Sstevel@tonic-gate outmode = fcntl(outchfd, F_GETFL, 0); 37797c478bd9Sstevel@tonic-gate if (outmode == -1) 37807c478bd9Sstevel@tonic-gate { 37817c478bd9Sstevel@tonic-gate if (LogLevel > 11) 37827c478bd9Sstevel@tonic-gate sm_syslog(LOG_INFO, NOQID, 37837c478bd9Sstevel@tonic-gate "fcntl(outchfd, F_GETFL) failed: %s", 37847c478bd9Sstevel@tonic-gate sm_errstring(errno)); 37857c478bd9Sstevel@tonic-gate return; 37867c478bd9Sstevel@tonic-gate } 37877c478bd9Sstevel@tonic-gate if (bitset(O_NONBLOCK, inmode) || 37887c478bd9Sstevel@tonic-gate bitset(O_NONBLOCK, outmode) || 37897c478bd9Sstevel@tonic-gate fcntl(inchfd, F_SETFL, inmode | O_NONBLOCK) == -1) 37907c478bd9Sstevel@tonic-gate return; 37917c478bd9Sstevel@tonic-gate outmode = fcntl(outchfd, F_GETFL, 0); 37927c478bd9Sstevel@tonic-gate if (outmode != -1 && bitset(O_NONBLOCK, outmode)) 37937c478bd9Sstevel@tonic-gate { 37947c478bd9Sstevel@tonic-gate /* changing InChannel also changes OutChannel */ 37957c478bd9Sstevel@tonic-gate sm_io_automode(OutChannel, InChannel); 37967c478bd9Sstevel@tonic-gate if (tTd(97, 4) && LogLevel > 9) 37977c478bd9Sstevel@tonic-gate sm_syslog(LOG_INFO, NOQID, 37987c478bd9Sstevel@tonic-gate "set automode for I (%d)/O (%d) in SMTP server", 37997c478bd9Sstevel@tonic-gate inchfd, outchfd); 38007c478bd9Sstevel@tonic-gate } 38017c478bd9Sstevel@tonic-gate 38027c478bd9Sstevel@tonic-gate /* undo change of inchfd */ 38037c478bd9Sstevel@tonic-gate (void) fcntl(inchfd, F_SETFL, inmode); 38047c478bd9Sstevel@tonic-gate } 38057c478bd9Sstevel@tonic-gate } 38067c478bd9Sstevel@tonic-gate /* 38077c478bd9Sstevel@tonic-gate ** SKIPWORD -- skip a fixed word. 38087c478bd9Sstevel@tonic-gate ** 38097c478bd9Sstevel@tonic-gate ** Parameters: 38107c478bd9Sstevel@tonic-gate ** p -- place to start looking. 38117c478bd9Sstevel@tonic-gate ** w -- word to skip. 38127c478bd9Sstevel@tonic-gate ** 38137c478bd9Sstevel@tonic-gate ** Returns: 38147c478bd9Sstevel@tonic-gate ** p following w. 38157c478bd9Sstevel@tonic-gate ** NULL on error. 38167c478bd9Sstevel@tonic-gate ** 38177c478bd9Sstevel@tonic-gate ** Side Effects: 38187c478bd9Sstevel@tonic-gate ** clobbers the p data area. 38197c478bd9Sstevel@tonic-gate */ 38207c478bd9Sstevel@tonic-gate 38217c478bd9Sstevel@tonic-gate static char * 38227c478bd9Sstevel@tonic-gate skipword(p, w) 38237c478bd9Sstevel@tonic-gate register char *volatile p; 38247c478bd9Sstevel@tonic-gate char *w; 38257c478bd9Sstevel@tonic-gate { 38267c478bd9Sstevel@tonic-gate register char *q; 38277c478bd9Sstevel@tonic-gate char *firstp = p; 38287c478bd9Sstevel@tonic-gate 38297c478bd9Sstevel@tonic-gate /* find beginning of word */ 38307c478bd9Sstevel@tonic-gate SKIP_SPACE(p); 38317c478bd9Sstevel@tonic-gate q = p; 38327c478bd9Sstevel@tonic-gate 38337c478bd9Sstevel@tonic-gate /* find end of word */ 38347c478bd9Sstevel@tonic-gate while (*p != '\0' && *p != ':' && !(isascii(*p) && isspace(*p))) 38357c478bd9Sstevel@tonic-gate p++; 38367c478bd9Sstevel@tonic-gate while (isascii(*p) && isspace(*p)) 38377c478bd9Sstevel@tonic-gate *p++ = '\0'; 38387c478bd9Sstevel@tonic-gate if (*p != ':') 38397c478bd9Sstevel@tonic-gate { 38407c478bd9Sstevel@tonic-gate syntax: 38417c478bd9Sstevel@tonic-gate usrerr("501 5.5.2 Syntax error in parameters scanning \"%s\"", 38427c478bd9Sstevel@tonic-gate shortenstring(firstp, MAXSHORTSTR)); 38437c478bd9Sstevel@tonic-gate return NULL; 38447c478bd9Sstevel@tonic-gate } 38457c478bd9Sstevel@tonic-gate *p++ = '\0'; 38467c478bd9Sstevel@tonic-gate SKIP_SPACE(p); 38477c478bd9Sstevel@tonic-gate 38487c478bd9Sstevel@tonic-gate if (*p == '\0') 38497c478bd9Sstevel@tonic-gate goto syntax; 38507c478bd9Sstevel@tonic-gate 38517c478bd9Sstevel@tonic-gate /* see if the input word matches desired word */ 38527c478bd9Sstevel@tonic-gate if (sm_strcasecmp(q, w)) 38537c478bd9Sstevel@tonic-gate goto syntax; 38547c478bd9Sstevel@tonic-gate 38557c478bd9Sstevel@tonic-gate return p; 38567c478bd9Sstevel@tonic-gate } 3857*3ee0e492Sjbeck 38587c478bd9Sstevel@tonic-gate /* 38597c478bd9Sstevel@tonic-gate ** MAIL_ESMTP_ARGS -- process ESMTP arguments from MAIL line 38607c478bd9Sstevel@tonic-gate ** 38617c478bd9Sstevel@tonic-gate ** Parameters: 38627c478bd9Sstevel@tonic-gate ** kp -- the parameter key. 38637c478bd9Sstevel@tonic-gate ** vp -- the value of that parameter. 38647c478bd9Sstevel@tonic-gate ** e -- the envelope. 3865*3ee0e492Sjbeck ** features -- current server features 38667c478bd9Sstevel@tonic-gate ** 38677c478bd9Sstevel@tonic-gate ** Returns: 38687c478bd9Sstevel@tonic-gate ** none. 38697c478bd9Sstevel@tonic-gate */ 38707c478bd9Sstevel@tonic-gate 38717c478bd9Sstevel@tonic-gate static void 3872*3ee0e492Sjbeck mail_esmtp_args(kp, vp, e, features) 38737c478bd9Sstevel@tonic-gate char *kp; 38747c478bd9Sstevel@tonic-gate char *vp; 38757c478bd9Sstevel@tonic-gate ENVELOPE *e; 3876*3ee0e492Sjbeck unsigned int features; 38777c478bd9Sstevel@tonic-gate { 38787c478bd9Sstevel@tonic-gate if (sm_strcasecmp(kp, "size") == 0) 38797c478bd9Sstevel@tonic-gate { 38807c478bd9Sstevel@tonic-gate if (vp == NULL) 38817c478bd9Sstevel@tonic-gate { 38827c478bd9Sstevel@tonic-gate usrerr("501 5.5.2 SIZE requires a value"); 38837c478bd9Sstevel@tonic-gate /* NOTREACHED */ 38847c478bd9Sstevel@tonic-gate } 38857c478bd9Sstevel@tonic-gate macdefine(&e->e_macro, A_TEMP, macid("{msg_size}"), vp); 38867c478bd9Sstevel@tonic-gate errno = 0; 38877c478bd9Sstevel@tonic-gate e->e_msgsize = strtol(vp, (char **) NULL, 10); 38887c478bd9Sstevel@tonic-gate if (e->e_msgsize == LONG_MAX && errno == ERANGE) 38897c478bd9Sstevel@tonic-gate { 38907c478bd9Sstevel@tonic-gate usrerr("552 5.2.3 Message size exceeds maximum value"); 38917c478bd9Sstevel@tonic-gate /* NOTREACHED */ 38927c478bd9Sstevel@tonic-gate } 38937c478bd9Sstevel@tonic-gate if (e->e_msgsize < 0) 38947c478bd9Sstevel@tonic-gate { 38957c478bd9Sstevel@tonic-gate usrerr("552 5.2.3 Message size invalid"); 38967c478bd9Sstevel@tonic-gate /* NOTREACHED */ 38977c478bd9Sstevel@tonic-gate } 38987c478bd9Sstevel@tonic-gate } 38997c478bd9Sstevel@tonic-gate else if (sm_strcasecmp(kp, "body") == 0) 39007c478bd9Sstevel@tonic-gate { 39017c478bd9Sstevel@tonic-gate if (vp == NULL) 39027c478bd9Sstevel@tonic-gate { 39037c478bd9Sstevel@tonic-gate usrerr("501 5.5.2 BODY requires a value"); 39047c478bd9Sstevel@tonic-gate /* NOTREACHED */ 39057c478bd9Sstevel@tonic-gate } 39067c478bd9Sstevel@tonic-gate else if (sm_strcasecmp(vp, "8bitmime") == 0) 39077c478bd9Sstevel@tonic-gate { 39087c478bd9Sstevel@tonic-gate SevenBitInput = false; 39097c478bd9Sstevel@tonic-gate } 39107c478bd9Sstevel@tonic-gate else if (sm_strcasecmp(vp, "7bit") == 0) 39117c478bd9Sstevel@tonic-gate { 39127c478bd9Sstevel@tonic-gate SevenBitInput = true; 39137c478bd9Sstevel@tonic-gate } 39147c478bd9Sstevel@tonic-gate else 39157c478bd9Sstevel@tonic-gate { 39167c478bd9Sstevel@tonic-gate usrerr("501 5.5.4 Unknown BODY type %s", vp); 39177c478bd9Sstevel@tonic-gate /* NOTREACHED */ 39187c478bd9Sstevel@tonic-gate } 39197c478bd9Sstevel@tonic-gate e->e_bodytype = sm_rpool_strdup_x(e->e_rpool, vp); 39207c478bd9Sstevel@tonic-gate } 39217c478bd9Sstevel@tonic-gate else if (sm_strcasecmp(kp, "envid") == 0) 39227c478bd9Sstevel@tonic-gate { 3923*3ee0e492Sjbeck if (!bitset(SRV_OFFER_DSN, features)) 39247c478bd9Sstevel@tonic-gate { 39257c478bd9Sstevel@tonic-gate usrerr("504 5.7.0 Sorry, ENVID not supported, we do not allow DSN"); 39267c478bd9Sstevel@tonic-gate /* NOTREACHED */ 39277c478bd9Sstevel@tonic-gate } 39287c478bd9Sstevel@tonic-gate if (vp == NULL) 39297c478bd9Sstevel@tonic-gate { 39307c478bd9Sstevel@tonic-gate usrerr("501 5.5.2 ENVID requires a value"); 39317c478bd9Sstevel@tonic-gate /* NOTREACHED */ 39327c478bd9Sstevel@tonic-gate } 39337c478bd9Sstevel@tonic-gate if (!xtextok(vp)) 39347c478bd9Sstevel@tonic-gate { 39357c478bd9Sstevel@tonic-gate usrerr("501 5.5.4 Syntax error in ENVID parameter value"); 39367c478bd9Sstevel@tonic-gate /* NOTREACHED */ 39377c478bd9Sstevel@tonic-gate } 39387c478bd9Sstevel@tonic-gate if (e->e_envid != NULL) 39397c478bd9Sstevel@tonic-gate { 39407c478bd9Sstevel@tonic-gate usrerr("501 5.5.0 Duplicate ENVID parameter"); 39417c478bd9Sstevel@tonic-gate /* NOTREACHED */ 39427c478bd9Sstevel@tonic-gate } 39437c478bd9Sstevel@tonic-gate e->e_envid = sm_rpool_strdup_x(e->e_rpool, vp); 39447c478bd9Sstevel@tonic-gate macdefine(&e->e_macro, A_PERM, 39457c478bd9Sstevel@tonic-gate macid("{dsn_envid}"), e->e_envid); 39467c478bd9Sstevel@tonic-gate } 39477c478bd9Sstevel@tonic-gate else if (sm_strcasecmp(kp, "ret") == 0) 39487c478bd9Sstevel@tonic-gate { 3949*3ee0e492Sjbeck if (!bitset(SRV_OFFER_DSN, features)) 39507c478bd9Sstevel@tonic-gate { 39517c478bd9Sstevel@tonic-gate usrerr("504 5.7.0 Sorry, RET not supported, we do not allow DSN"); 39527c478bd9Sstevel@tonic-gate /* NOTREACHED */ 39537c478bd9Sstevel@tonic-gate } 39547c478bd9Sstevel@tonic-gate if (vp == NULL) 39557c478bd9Sstevel@tonic-gate { 39567c478bd9Sstevel@tonic-gate usrerr("501 5.5.2 RET requires a value"); 39577c478bd9Sstevel@tonic-gate /* NOTREACHED */ 39587c478bd9Sstevel@tonic-gate } 39597c478bd9Sstevel@tonic-gate if (bitset(EF_RET_PARAM, e->e_flags)) 39607c478bd9Sstevel@tonic-gate { 39617c478bd9Sstevel@tonic-gate usrerr("501 5.5.0 Duplicate RET parameter"); 39627c478bd9Sstevel@tonic-gate /* NOTREACHED */ 39637c478bd9Sstevel@tonic-gate } 39647c478bd9Sstevel@tonic-gate e->e_flags |= EF_RET_PARAM; 39657c478bd9Sstevel@tonic-gate if (sm_strcasecmp(vp, "hdrs") == 0) 39667c478bd9Sstevel@tonic-gate e->e_flags |= EF_NO_BODY_RETN; 39677c478bd9Sstevel@tonic-gate else if (sm_strcasecmp(vp, "full") != 0) 39687c478bd9Sstevel@tonic-gate { 39697c478bd9Sstevel@tonic-gate usrerr("501 5.5.2 Bad argument \"%s\" to RET", vp); 39707c478bd9Sstevel@tonic-gate /* NOTREACHED */ 39717c478bd9Sstevel@tonic-gate } 39727c478bd9Sstevel@tonic-gate macdefine(&e->e_macro, A_TEMP, macid("{dsn_ret}"), vp); 39737c478bd9Sstevel@tonic-gate } 39747c478bd9Sstevel@tonic-gate #if SASL 39757c478bd9Sstevel@tonic-gate else if (sm_strcasecmp(kp, "auth") == 0) 39767c478bd9Sstevel@tonic-gate { 39777c478bd9Sstevel@tonic-gate int len; 39787c478bd9Sstevel@tonic-gate char *q; 39797c478bd9Sstevel@tonic-gate char *auth_param; /* the value of the AUTH=x */ 39807c478bd9Sstevel@tonic-gate bool saveQuickAbort = QuickAbort; 39817c478bd9Sstevel@tonic-gate bool saveSuprErrs = SuprErrs; 39827c478bd9Sstevel@tonic-gate bool saveExitStat = ExitStat; 39837c478bd9Sstevel@tonic-gate 39847c478bd9Sstevel@tonic-gate if (vp == NULL) 39857c478bd9Sstevel@tonic-gate { 39867c478bd9Sstevel@tonic-gate usrerr("501 5.5.2 AUTH= requires a value"); 39877c478bd9Sstevel@tonic-gate /* NOTREACHED */ 39887c478bd9Sstevel@tonic-gate } 39897c478bd9Sstevel@tonic-gate if (e->e_auth_param != NULL) 39907c478bd9Sstevel@tonic-gate { 39917c478bd9Sstevel@tonic-gate usrerr("501 5.5.0 Duplicate AUTH parameter"); 39927c478bd9Sstevel@tonic-gate /* NOTREACHED */ 39937c478bd9Sstevel@tonic-gate } 39947c478bd9Sstevel@tonic-gate if ((q = strchr(vp, ' ')) != NULL) 39957c478bd9Sstevel@tonic-gate len = q - vp + 1; 39967c478bd9Sstevel@tonic-gate else 39977c478bd9Sstevel@tonic-gate len = strlen(vp) + 1; 39987c478bd9Sstevel@tonic-gate auth_param = xalloc(len); 39997c478bd9Sstevel@tonic-gate (void) sm_strlcpy(auth_param, vp, len); 40007c478bd9Sstevel@tonic-gate if (!xtextok(auth_param)) 40017c478bd9Sstevel@tonic-gate { 40027c478bd9Sstevel@tonic-gate usrerr("501 5.5.4 Syntax error in AUTH parameter value"); 40037c478bd9Sstevel@tonic-gate /* just a warning? */ 40047c478bd9Sstevel@tonic-gate /* NOTREACHED */ 40057c478bd9Sstevel@tonic-gate } 40067c478bd9Sstevel@tonic-gate 40077c478bd9Sstevel@tonic-gate /* XXX define this always or only if trusted? */ 40087c478bd9Sstevel@tonic-gate macdefine(&e->e_macro, A_TEMP, macid("{auth_author}"), 40097c478bd9Sstevel@tonic-gate auth_param); 40107c478bd9Sstevel@tonic-gate 40117c478bd9Sstevel@tonic-gate /* 40127c478bd9Sstevel@tonic-gate ** call Strust_auth to find out whether 40137c478bd9Sstevel@tonic-gate ** auth_param is acceptable (trusted) 40147c478bd9Sstevel@tonic-gate ** we shouldn't trust it if not authenticated 40157c478bd9Sstevel@tonic-gate ** (required by RFC, leave it to ruleset?) 40167c478bd9Sstevel@tonic-gate */ 40177c478bd9Sstevel@tonic-gate 40187c478bd9Sstevel@tonic-gate SuprErrs = true; 40197c478bd9Sstevel@tonic-gate QuickAbort = false; 40207c478bd9Sstevel@tonic-gate if (strcmp(auth_param, "<>") != 0 && 40217c478bd9Sstevel@tonic-gate (rscheck("trust_auth", auth_param, NULL, e, RSF_RMCOMM, 40227c478bd9Sstevel@tonic-gate 9, NULL, NOQID) != EX_OK || Errors > 0)) 40237c478bd9Sstevel@tonic-gate { 40247c478bd9Sstevel@tonic-gate if (tTd(95, 8)) 40257c478bd9Sstevel@tonic-gate { 40267c478bd9Sstevel@tonic-gate q = e->e_auth_param; 40277c478bd9Sstevel@tonic-gate sm_dprintf("auth=\"%.100s\" not trusted user=\"%.100s\"\n", 40287c478bd9Sstevel@tonic-gate auth_param, (q == NULL) ? "" : q); 40297c478bd9Sstevel@tonic-gate } 40307c478bd9Sstevel@tonic-gate 40317c478bd9Sstevel@tonic-gate /* not trusted */ 40327c478bd9Sstevel@tonic-gate e->e_auth_param = "<>"; 40337c478bd9Sstevel@tonic-gate # if _FFR_AUTH_PASSING 40347c478bd9Sstevel@tonic-gate macdefine(&BlankEnvelope.e_macro, A_PERM, 40357c478bd9Sstevel@tonic-gate macid("{auth_author}"), NULL); 40367c478bd9Sstevel@tonic-gate # endif /* _FFR_AUTH_PASSING */ 40377c478bd9Sstevel@tonic-gate } 40387c478bd9Sstevel@tonic-gate else 40397c478bd9Sstevel@tonic-gate { 40407c478bd9Sstevel@tonic-gate if (tTd(95, 8)) 40417c478bd9Sstevel@tonic-gate sm_dprintf("auth=\"%.100s\" trusted\n", auth_param); 40427c478bd9Sstevel@tonic-gate e->e_auth_param = sm_rpool_strdup_x(e->e_rpool, 40437c478bd9Sstevel@tonic-gate auth_param); 40447c478bd9Sstevel@tonic-gate } 40457c478bd9Sstevel@tonic-gate sm_free(auth_param); /* XXX */ 40467c478bd9Sstevel@tonic-gate 40477c478bd9Sstevel@tonic-gate /* reset values */ 40487c478bd9Sstevel@tonic-gate Errors = 0; 40497c478bd9Sstevel@tonic-gate QuickAbort = saveQuickAbort; 40507c478bd9Sstevel@tonic-gate SuprErrs = saveSuprErrs; 40517c478bd9Sstevel@tonic-gate ExitStat = saveExitStat; 40527c478bd9Sstevel@tonic-gate } 40537c478bd9Sstevel@tonic-gate #endif /* SASL */ 40547c478bd9Sstevel@tonic-gate #define PRTCHAR(c) ((isascii(c) && isprint(c)) ? (c) : '?') 40557c478bd9Sstevel@tonic-gate 40567c478bd9Sstevel@tonic-gate /* 40577c478bd9Sstevel@tonic-gate ** "by" is only accepted if DeliverByMin >= 0. 40587c478bd9Sstevel@tonic-gate ** We maybe could add this to the list of server_features. 40597c478bd9Sstevel@tonic-gate */ 40607c478bd9Sstevel@tonic-gate 40617c478bd9Sstevel@tonic-gate else if (sm_strcasecmp(kp, "by") == 0 && DeliverByMin >= 0) 40627c478bd9Sstevel@tonic-gate { 40637c478bd9Sstevel@tonic-gate char *s; 40647c478bd9Sstevel@tonic-gate 40657c478bd9Sstevel@tonic-gate if (vp == NULL) 40667c478bd9Sstevel@tonic-gate { 40677c478bd9Sstevel@tonic-gate usrerr("501 5.5.2 BY= requires a value"); 40687c478bd9Sstevel@tonic-gate /* NOTREACHED */ 40697c478bd9Sstevel@tonic-gate } 40707c478bd9Sstevel@tonic-gate errno = 0; 40717c478bd9Sstevel@tonic-gate e->e_deliver_by = strtol(vp, &s, 10); 40727c478bd9Sstevel@tonic-gate if (e->e_deliver_by == LONG_MIN || 40737c478bd9Sstevel@tonic-gate e->e_deliver_by == LONG_MAX || 40747c478bd9Sstevel@tonic-gate e->e_deliver_by > 999999999l || 40757c478bd9Sstevel@tonic-gate e->e_deliver_by < -999999999l) 40767c478bd9Sstevel@tonic-gate { 40777c478bd9Sstevel@tonic-gate usrerr("501 5.5.2 BY=%s out of range", vp); 40787c478bd9Sstevel@tonic-gate /* NOTREACHED */ 40797c478bd9Sstevel@tonic-gate } 40807c478bd9Sstevel@tonic-gate if (s == NULL || *s != ';') 40817c478bd9Sstevel@tonic-gate { 40827c478bd9Sstevel@tonic-gate usrerr("501 5.5.2 BY= missing ';'"); 40837c478bd9Sstevel@tonic-gate /* NOTREACHED */ 40847c478bd9Sstevel@tonic-gate } 40857c478bd9Sstevel@tonic-gate e->e_dlvr_flag = 0; 40867c478bd9Sstevel@tonic-gate ++s; /* XXX: spaces allowed? */ 40877c478bd9Sstevel@tonic-gate SKIP_SPACE(s); 40887c478bd9Sstevel@tonic-gate switch (tolower(*s)) 40897c478bd9Sstevel@tonic-gate { 40907c478bd9Sstevel@tonic-gate case 'n': 40917c478bd9Sstevel@tonic-gate e->e_dlvr_flag = DLVR_NOTIFY; 40927c478bd9Sstevel@tonic-gate break; 40937c478bd9Sstevel@tonic-gate case 'r': 40947c478bd9Sstevel@tonic-gate e->e_dlvr_flag = DLVR_RETURN; 40957c478bd9Sstevel@tonic-gate if (e->e_deliver_by <= 0) 40967c478bd9Sstevel@tonic-gate { 40977c478bd9Sstevel@tonic-gate usrerr("501 5.5.4 mode R requires BY time > 0"); 40987c478bd9Sstevel@tonic-gate /* NOTREACHED */ 40997c478bd9Sstevel@tonic-gate } 41007c478bd9Sstevel@tonic-gate if (DeliverByMin > 0 && e->e_deliver_by > 0 && 41017c478bd9Sstevel@tonic-gate e->e_deliver_by < DeliverByMin) 41027c478bd9Sstevel@tonic-gate { 41037c478bd9Sstevel@tonic-gate usrerr("555 5.5.2 time %ld less than %ld", 41047c478bd9Sstevel@tonic-gate e->e_deliver_by, (long) DeliverByMin); 41057c478bd9Sstevel@tonic-gate /* NOTREACHED */ 41067c478bd9Sstevel@tonic-gate } 41077c478bd9Sstevel@tonic-gate break; 41087c478bd9Sstevel@tonic-gate default: 41097c478bd9Sstevel@tonic-gate usrerr("501 5.5.2 illegal by-mode '%c'", PRTCHAR(*s)); 41107c478bd9Sstevel@tonic-gate /* NOTREACHED */ 41117c478bd9Sstevel@tonic-gate } 41127c478bd9Sstevel@tonic-gate ++s; /* XXX: spaces allowed? */ 41137c478bd9Sstevel@tonic-gate SKIP_SPACE(s); 41147c478bd9Sstevel@tonic-gate switch (tolower(*s)) 41157c478bd9Sstevel@tonic-gate { 41167c478bd9Sstevel@tonic-gate case 't': 41177c478bd9Sstevel@tonic-gate e->e_dlvr_flag |= DLVR_TRACE; 41187c478bd9Sstevel@tonic-gate break; 41197c478bd9Sstevel@tonic-gate case '\0': 41207c478bd9Sstevel@tonic-gate break; 41217c478bd9Sstevel@tonic-gate default: 41227c478bd9Sstevel@tonic-gate usrerr("501 5.5.2 illegal by-trace '%c'", PRTCHAR(*s)); 41237c478bd9Sstevel@tonic-gate /* NOTREACHED */ 41247c478bd9Sstevel@tonic-gate } 41257c478bd9Sstevel@tonic-gate 41267c478bd9Sstevel@tonic-gate /* XXX: check whether more characters follow? */ 41277c478bd9Sstevel@tonic-gate } 41287c478bd9Sstevel@tonic-gate else 41297c478bd9Sstevel@tonic-gate { 41307c478bd9Sstevel@tonic-gate usrerr("555 5.5.4 %s parameter unrecognized", kp); 41317c478bd9Sstevel@tonic-gate /* NOTREACHED */ 41327c478bd9Sstevel@tonic-gate } 41337c478bd9Sstevel@tonic-gate } 41347c478bd9Sstevel@tonic-gate /* 41357c478bd9Sstevel@tonic-gate ** RCPT_ESMTP_ARGS -- process ESMTP arguments from RCPT line 41367c478bd9Sstevel@tonic-gate ** 41377c478bd9Sstevel@tonic-gate ** Parameters: 41387c478bd9Sstevel@tonic-gate ** a -- the address corresponding to the To: parameter. 41397c478bd9Sstevel@tonic-gate ** kp -- the parameter key. 41407c478bd9Sstevel@tonic-gate ** vp -- the value of that parameter. 41417c478bd9Sstevel@tonic-gate ** e -- the envelope. 4142*3ee0e492Sjbeck ** features -- current server features 41437c478bd9Sstevel@tonic-gate ** 41447c478bd9Sstevel@tonic-gate ** Returns: 41457c478bd9Sstevel@tonic-gate ** none. 41467c478bd9Sstevel@tonic-gate */ 41477c478bd9Sstevel@tonic-gate 41487c478bd9Sstevel@tonic-gate static void 4149*3ee0e492Sjbeck rcpt_esmtp_args(a, kp, vp, e, features) 41507c478bd9Sstevel@tonic-gate ADDRESS *a; 41517c478bd9Sstevel@tonic-gate char *kp; 41527c478bd9Sstevel@tonic-gate char *vp; 41537c478bd9Sstevel@tonic-gate ENVELOPE *e; 4154*3ee0e492Sjbeck unsigned int features; 41557c478bd9Sstevel@tonic-gate { 41567c478bd9Sstevel@tonic-gate if (sm_strcasecmp(kp, "notify") == 0) 41577c478bd9Sstevel@tonic-gate { 41587c478bd9Sstevel@tonic-gate char *p; 41597c478bd9Sstevel@tonic-gate 4160*3ee0e492Sjbeck if (!bitset(SRV_OFFER_DSN, features)) 41617c478bd9Sstevel@tonic-gate { 41627c478bd9Sstevel@tonic-gate usrerr("504 5.7.0 Sorry, NOTIFY not supported, we do not allow DSN"); 41637c478bd9Sstevel@tonic-gate /* NOTREACHED */ 41647c478bd9Sstevel@tonic-gate } 41657c478bd9Sstevel@tonic-gate if (vp == NULL) 41667c478bd9Sstevel@tonic-gate { 41677c478bd9Sstevel@tonic-gate usrerr("501 5.5.2 NOTIFY requires a value"); 41687c478bd9Sstevel@tonic-gate /* NOTREACHED */ 41697c478bd9Sstevel@tonic-gate } 41707c478bd9Sstevel@tonic-gate a->q_flags &= ~(QPINGONSUCCESS|QPINGONFAILURE|QPINGONDELAY); 41717c478bd9Sstevel@tonic-gate a->q_flags |= QHASNOTIFY; 41727c478bd9Sstevel@tonic-gate macdefine(&e->e_macro, A_TEMP, macid("{dsn_notify}"), vp); 41737c478bd9Sstevel@tonic-gate 41747c478bd9Sstevel@tonic-gate if (sm_strcasecmp(vp, "never") == 0) 41757c478bd9Sstevel@tonic-gate return; 41767c478bd9Sstevel@tonic-gate for (p = vp; p != NULL; vp = p) 41777c478bd9Sstevel@tonic-gate { 41787c478bd9Sstevel@tonic-gate char *s; 41797c478bd9Sstevel@tonic-gate 41807c478bd9Sstevel@tonic-gate s = p = strchr(p, ','); 41817c478bd9Sstevel@tonic-gate if (p != NULL) 41827c478bd9Sstevel@tonic-gate *p++ = '\0'; 41837c478bd9Sstevel@tonic-gate if (sm_strcasecmp(vp, "success") == 0) 41847c478bd9Sstevel@tonic-gate a->q_flags |= QPINGONSUCCESS; 41857c478bd9Sstevel@tonic-gate else if (sm_strcasecmp(vp, "failure") == 0) 41867c478bd9Sstevel@tonic-gate a->q_flags |= QPINGONFAILURE; 41877c478bd9Sstevel@tonic-gate else if (sm_strcasecmp(vp, "delay") == 0) 41887c478bd9Sstevel@tonic-gate a->q_flags |= QPINGONDELAY; 41897c478bd9Sstevel@tonic-gate else 41907c478bd9Sstevel@tonic-gate { 41917c478bd9Sstevel@tonic-gate usrerr("501 5.5.4 Bad argument \"%s\" to NOTIFY", 41927c478bd9Sstevel@tonic-gate vp); 41937c478bd9Sstevel@tonic-gate /* NOTREACHED */ 41947c478bd9Sstevel@tonic-gate } 41957c478bd9Sstevel@tonic-gate if (s != NULL) 41967c478bd9Sstevel@tonic-gate *s = ','; 41977c478bd9Sstevel@tonic-gate } 41987c478bd9Sstevel@tonic-gate } 41997c478bd9Sstevel@tonic-gate else if (sm_strcasecmp(kp, "orcpt") == 0) 42007c478bd9Sstevel@tonic-gate { 4201*3ee0e492Sjbeck if (!bitset(SRV_OFFER_DSN, features)) 42027c478bd9Sstevel@tonic-gate { 42037c478bd9Sstevel@tonic-gate usrerr("504 5.7.0 Sorry, ORCPT not supported, we do not allow DSN"); 42047c478bd9Sstevel@tonic-gate /* NOTREACHED */ 42057c478bd9Sstevel@tonic-gate } 42067c478bd9Sstevel@tonic-gate if (vp == NULL) 42077c478bd9Sstevel@tonic-gate { 42087c478bd9Sstevel@tonic-gate usrerr("501 5.5.2 ORCPT requires a value"); 42097c478bd9Sstevel@tonic-gate /* NOTREACHED */ 42107c478bd9Sstevel@tonic-gate } 42117c478bd9Sstevel@tonic-gate if (strchr(vp, ';') == NULL || !xtextok(vp)) 42127c478bd9Sstevel@tonic-gate { 42137c478bd9Sstevel@tonic-gate usrerr("501 5.5.4 Syntax error in ORCPT parameter value"); 42147c478bd9Sstevel@tonic-gate /* NOTREACHED */ 42157c478bd9Sstevel@tonic-gate } 42167c478bd9Sstevel@tonic-gate if (a->q_orcpt != NULL) 42177c478bd9Sstevel@tonic-gate { 42187c478bd9Sstevel@tonic-gate usrerr("501 5.5.0 Duplicate ORCPT parameter"); 42197c478bd9Sstevel@tonic-gate /* NOTREACHED */ 42207c478bd9Sstevel@tonic-gate } 42217c478bd9Sstevel@tonic-gate a->q_orcpt = sm_rpool_strdup_x(e->e_rpool, vp); 42227c478bd9Sstevel@tonic-gate } 42237c478bd9Sstevel@tonic-gate else 42247c478bd9Sstevel@tonic-gate { 42257c478bd9Sstevel@tonic-gate usrerr("555 5.5.4 %s parameter unrecognized", kp); 42267c478bd9Sstevel@tonic-gate /* NOTREACHED */ 42277c478bd9Sstevel@tonic-gate } 42287c478bd9Sstevel@tonic-gate } 42297c478bd9Sstevel@tonic-gate /* 42307c478bd9Sstevel@tonic-gate ** PRINTVRFYADDR -- print an entry in the verify queue 42317c478bd9Sstevel@tonic-gate ** 42327c478bd9Sstevel@tonic-gate ** Parameters: 42337c478bd9Sstevel@tonic-gate ** a -- the address to print. 42347c478bd9Sstevel@tonic-gate ** last -- set if this is the last one. 42357c478bd9Sstevel@tonic-gate ** vrfy -- set if this is a VRFY command. 42367c478bd9Sstevel@tonic-gate ** 42377c478bd9Sstevel@tonic-gate ** Returns: 42387c478bd9Sstevel@tonic-gate ** none. 42397c478bd9Sstevel@tonic-gate ** 42407c478bd9Sstevel@tonic-gate ** Side Effects: 42417c478bd9Sstevel@tonic-gate ** Prints the appropriate 250 codes. 42427c478bd9Sstevel@tonic-gate */ 42437c478bd9Sstevel@tonic-gate #define OFFF (3 + 1 + 5 + 1) /* offset in fmt: SMTP reply + enh. code */ 42447c478bd9Sstevel@tonic-gate 42457c478bd9Sstevel@tonic-gate static void 42467c478bd9Sstevel@tonic-gate printvrfyaddr(a, last, vrfy) 42477c478bd9Sstevel@tonic-gate register ADDRESS *a; 42487c478bd9Sstevel@tonic-gate bool last; 42497c478bd9Sstevel@tonic-gate bool vrfy; 42507c478bd9Sstevel@tonic-gate { 42517c478bd9Sstevel@tonic-gate char fmtbuf[30]; 42527c478bd9Sstevel@tonic-gate 42537c478bd9Sstevel@tonic-gate if (vrfy && a->q_mailer != NULL && 42547c478bd9Sstevel@tonic-gate !bitnset(M_VRFY250, a->q_mailer->m_flags)) 42557c478bd9Sstevel@tonic-gate (void) sm_strlcpy(fmtbuf, "252", sizeof fmtbuf); 42567c478bd9Sstevel@tonic-gate else 42577c478bd9Sstevel@tonic-gate (void) sm_strlcpy(fmtbuf, "250", sizeof fmtbuf); 42587c478bd9Sstevel@tonic-gate fmtbuf[3] = last ? ' ' : '-'; 42597c478bd9Sstevel@tonic-gate (void) sm_strlcpy(&fmtbuf[4], "2.1.5 ", sizeof fmtbuf - 4); 42607c478bd9Sstevel@tonic-gate if (a->q_fullname == NULL) 42617c478bd9Sstevel@tonic-gate { 42627c478bd9Sstevel@tonic-gate if ((a->q_mailer == NULL || 42637c478bd9Sstevel@tonic-gate a->q_mailer->m_addrtype == NULL || 42647c478bd9Sstevel@tonic-gate sm_strcasecmp(a->q_mailer->m_addrtype, "rfc822") == 0) && 42657c478bd9Sstevel@tonic-gate strchr(a->q_user, '@') == NULL) 42667c478bd9Sstevel@tonic-gate (void) sm_strlcpy(&fmtbuf[OFFF], "<%s@%s>", 42677c478bd9Sstevel@tonic-gate sizeof fmtbuf - OFFF); 42687c478bd9Sstevel@tonic-gate else 42697c478bd9Sstevel@tonic-gate (void) sm_strlcpy(&fmtbuf[OFFF], "<%s>", 42707c478bd9Sstevel@tonic-gate sizeof fmtbuf - OFFF); 42717c478bd9Sstevel@tonic-gate message(fmtbuf, a->q_user, MyHostName); 42727c478bd9Sstevel@tonic-gate } 42737c478bd9Sstevel@tonic-gate else 42747c478bd9Sstevel@tonic-gate { 42757c478bd9Sstevel@tonic-gate if ((a->q_mailer == NULL || 42767c478bd9Sstevel@tonic-gate a->q_mailer->m_addrtype == NULL || 42777c478bd9Sstevel@tonic-gate sm_strcasecmp(a->q_mailer->m_addrtype, "rfc822") == 0) && 42787c478bd9Sstevel@tonic-gate strchr(a->q_user, '@') == NULL) 42797c478bd9Sstevel@tonic-gate (void) sm_strlcpy(&fmtbuf[OFFF], "%s <%s@%s>", 42807c478bd9Sstevel@tonic-gate sizeof fmtbuf - OFFF); 42817c478bd9Sstevel@tonic-gate else 42827c478bd9Sstevel@tonic-gate (void) sm_strlcpy(&fmtbuf[OFFF], "%s <%s>", 42837c478bd9Sstevel@tonic-gate sizeof fmtbuf - OFFF); 42847c478bd9Sstevel@tonic-gate message(fmtbuf, a->q_fullname, a->q_user, MyHostName); 42857c478bd9Sstevel@tonic-gate } 42867c478bd9Sstevel@tonic-gate } 42877c478bd9Sstevel@tonic-gate 42887c478bd9Sstevel@tonic-gate #if SASL 42897c478bd9Sstevel@tonic-gate /* 42907c478bd9Sstevel@tonic-gate ** SASLMECHS -- get list of possible AUTH mechanisms 42917c478bd9Sstevel@tonic-gate ** 42927c478bd9Sstevel@tonic-gate ** Parameters: 42937c478bd9Sstevel@tonic-gate ** conn -- SASL connection info. 42947c478bd9Sstevel@tonic-gate ** mechlist -- output parameter for list of mechanisms. 42957c478bd9Sstevel@tonic-gate ** 42967c478bd9Sstevel@tonic-gate ** Returns: 42977c478bd9Sstevel@tonic-gate ** number of mechs. 42987c478bd9Sstevel@tonic-gate */ 42997c478bd9Sstevel@tonic-gate 43007c478bd9Sstevel@tonic-gate static int 43017c478bd9Sstevel@tonic-gate saslmechs(conn, mechlist) 43027c478bd9Sstevel@tonic-gate sasl_conn_t *conn; 43037c478bd9Sstevel@tonic-gate char **mechlist; 43047c478bd9Sstevel@tonic-gate { 43057c478bd9Sstevel@tonic-gate int len, num, result; 43067c478bd9Sstevel@tonic-gate 43077c478bd9Sstevel@tonic-gate /* "user" is currently unused */ 43087c478bd9Sstevel@tonic-gate # if SASL >= 20000 43097c478bd9Sstevel@tonic-gate result = sasl_listmech(conn, NULL, 43107c478bd9Sstevel@tonic-gate "", " ", "", (const char **) mechlist, 43117c478bd9Sstevel@tonic-gate (unsigned int *)&len, &num); 43127c478bd9Sstevel@tonic-gate # else /* SASL >= 20000 */ 43137c478bd9Sstevel@tonic-gate result = sasl_listmech(conn, "user", /* XXX */ 43147c478bd9Sstevel@tonic-gate "", " ", "", mechlist, 43157c478bd9Sstevel@tonic-gate (unsigned int *)&len, (unsigned int *)&num); 43167c478bd9Sstevel@tonic-gate # endif /* SASL >= 20000 */ 43177c478bd9Sstevel@tonic-gate if (result != SASL_OK) 43187c478bd9Sstevel@tonic-gate { 43197c478bd9Sstevel@tonic-gate if (LogLevel > 9) 43207c478bd9Sstevel@tonic-gate sm_syslog(LOG_WARNING, NOQID, 43217c478bd9Sstevel@tonic-gate "AUTH error: listmech=%d, num=%d", 43227c478bd9Sstevel@tonic-gate result, num); 43237c478bd9Sstevel@tonic-gate num = 0; 43247c478bd9Sstevel@tonic-gate } 43257c478bd9Sstevel@tonic-gate if (num > 0) 43267c478bd9Sstevel@tonic-gate { 43277c478bd9Sstevel@tonic-gate if (LogLevel > 11) 43287c478bd9Sstevel@tonic-gate sm_syslog(LOG_INFO, NOQID, 43297c478bd9Sstevel@tonic-gate "AUTH: available mech=%s, allowed mech=%s", 43307c478bd9Sstevel@tonic-gate *mechlist, AuthMechanisms); 43317c478bd9Sstevel@tonic-gate *mechlist = intersect(AuthMechanisms, *mechlist, NULL); 43327c478bd9Sstevel@tonic-gate } 43337c478bd9Sstevel@tonic-gate else 43347c478bd9Sstevel@tonic-gate { 43357c478bd9Sstevel@tonic-gate *mechlist = NULL; /* be paranoid... */ 43367c478bd9Sstevel@tonic-gate if (result == SASL_OK && LogLevel > 9) 43377c478bd9Sstevel@tonic-gate sm_syslog(LOG_WARNING, NOQID, 43387c478bd9Sstevel@tonic-gate "AUTH warning: no mechanisms"); 43397c478bd9Sstevel@tonic-gate } 43407c478bd9Sstevel@tonic-gate return num; 43417c478bd9Sstevel@tonic-gate } 43427c478bd9Sstevel@tonic-gate 43437c478bd9Sstevel@tonic-gate # if SASL >= 20000 43447c478bd9Sstevel@tonic-gate /* 43457c478bd9Sstevel@tonic-gate ** PROXY_POLICY -- define proxy policy for AUTH 43467c478bd9Sstevel@tonic-gate ** 43477c478bd9Sstevel@tonic-gate ** Parameters: 43487c478bd9Sstevel@tonic-gate ** conn -- unused. 43497c478bd9Sstevel@tonic-gate ** context -- unused. 43507c478bd9Sstevel@tonic-gate ** requested_user -- authorization identity. 43517c478bd9Sstevel@tonic-gate ** rlen -- authorization identity length. 43527c478bd9Sstevel@tonic-gate ** auth_identity -- authentication identity. 43537c478bd9Sstevel@tonic-gate ** alen -- authentication identity length. 43547c478bd9Sstevel@tonic-gate ** def_realm -- default user realm. 43557c478bd9Sstevel@tonic-gate ** urlen -- user realm length. 43567c478bd9Sstevel@tonic-gate ** propctx -- unused. 43577c478bd9Sstevel@tonic-gate ** 43587c478bd9Sstevel@tonic-gate ** Returns: 43597c478bd9Sstevel@tonic-gate ** ok? 43607c478bd9Sstevel@tonic-gate ** 43617c478bd9Sstevel@tonic-gate ** Side Effects: 43627c478bd9Sstevel@tonic-gate ** sets {auth_authen} macro. 43637c478bd9Sstevel@tonic-gate */ 43647c478bd9Sstevel@tonic-gate 43657c478bd9Sstevel@tonic-gate int 43667c478bd9Sstevel@tonic-gate proxy_policy(conn, context, requested_user, rlen, auth_identity, alen, 43677c478bd9Sstevel@tonic-gate def_realm, urlen, propctx) 43687c478bd9Sstevel@tonic-gate sasl_conn_t *conn; 43697c478bd9Sstevel@tonic-gate void *context; 43707c478bd9Sstevel@tonic-gate const char *requested_user; 43717c478bd9Sstevel@tonic-gate unsigned rlen; 43727c478bd9Sstevel@tonic-gate const char *auth_identity; 43737c478bd9Sstevel@tonic-gate unsigned alen; 43747c478bd9Sstevel@tonic-gate const char *def_realm; 43757c478bd9Sstevel@tonic-gate unsigned urlen; 43767c478bd9Sstevel@tonic-gate struct propctx *propctx; 43777c478bd9Sstevel@tonic-gate { 43787c478bd9Sstevel@tonic-gate if (auth_identity == NULL) 43797c478bd9Sstevel@tonic-gate return SASL_FAIL; 43807c478bd9Sstevel@tonic-gate 43817c478bd9Sstevel@tonic-gate macdefine(&BlankEnvelope.e_macro, A_TEMP, 43827c478bd9Sstevel@tonic-gate macid("{auth_authen}"), (char *) auth_identity); 43837c478bd9Sstevel@tonic-gate 43847c478bd9Sstevel@tonic-gate return SASL_OK; 43857c478bd9Sstevel@tonic-gate } 43867c478bd9Sstevel@tonic-gate # else /* SASL >= 20000 */ 43877c478bd9Sstevel@tonic-gate 43887c478bd9Sstevel@tonic-gate /* 43897c478bd9Sstevel@tonic-gate ** PROXY_POLICY -- define proxy policy for AUTH 43907c478bd9Sstevel@tonic-gate ** 43917c478bd9Sstevel@tonic-gate ** Parameters: 43927c478bd9Sstevel@tonic-gate ** context -- unused. 43937c478bd9Sstevel@tonic-gate ** auth_identity -- authentication identity. 43947c478bd9Sstevel@tonic-gate ** requested_user -- authorization identity. 43957c478bd9Sstevel@tonic-gate ** user -- allowed user (output). 43967c478bd9Sstevel@tonic-gate ** errstr -- possible error string (output). 43977c478bd9Sstevel@tonic-gate ** 43987c478bd9Sstevel@tonic-gate ** Returns: 43997c478bd9Sstevel@tonic-gate ** ok? 44007c478bd9Sstevel@tonic-gate */ 44017c478bd9Sstevel@tonic-gate 44027c478bd9Sstevel@tonic-gate int 44037c478bd9Sstevel@tonic-gate proxy_policy(context, auth_identity, requested_user, user, errstr) 44047c478bd9Sstevel@tonic-gate void *context; 44057c478bd9Sstevel@tonic-gate const char *auth_identity; 44067c478bd9Sstevel@tonic-gate const char *requested_user; 44077c478bd9Sstevel@tonic-gate const char **user; 44087c478bd9Sstevel@tonic-gate const char **errstr; 44097c478bd9Sstevel@tonic-gate { 44107c478bd9Sstevel@tonic-gate if (user == NULL || auth_identity == NULL) 44117c478bd9Sstevel@tonic-gate return SASL_FAIL; 44127c478bd9Sstevel@tonic-gate *user = newstr(auth_identity); 44137c478bd9Sstevel@tonic-gate return SASL_OK; 44147c478bd9Sstevel@tonic-gate } 44157c478bd9Sstevel@tonic-gate # endif /* SASL >= 20000 */ 44167c478bd9Sstevel@tonic-gate #endif /* SASL */ 44177c478bd9Sstevel@tonic-gate 44187c478bd9Sstevel@tonic-gate #if STARTTLS 44197c478bd9Sstevel@tonic-gate /* 44207c478bd9Sstevel@tonic-gate ** INITSRVTLS -- initialize server side TLS 44217c478bd9Sstevel@tonic-gate ** 44227c478bd9Sstevel@tonic-gate ** Parameters: 44237c478bd9Sstevel@tonic-gate ** tls_ok -- should tls initialization be done? 44247c478bd9Sstevel@tonic-gate ** 44257c478bd9Sstevel@tonic-gate ** Returns: 44267c478bd9Sstevel@tonic-gate ** succeeded? 44277c478bd9Sstevel@tonic-gate ** 44287c478bd9Sstevel@tonic-gate ** Side Effects: 44297c478bd9Sstevel@tonic-gate ** sets tls_ok_srv which is a static variable in this module. 44307c478bd9Sstevel@tonic-gate ** Do NOT remove assignments to it! 44317c478bd9Sstevel@tonic-gate */ 44327c478bd9Sstevel@tonic-gate 44337c478bd9Sstevel@tonic-gate bool 44347c478bd9Sstevel@tonic-gate initsrvtls(tls_ok) 44357c478bd9Sstevel@tonic-gate bool tls_ok; 44367c478bd9Sstevel@tonic-gate { 44377c478bd9Sstevel@tonic-gate if (!tls_ok) 44387c478bd9Sstevel@tonic-gate return false; 44397c478bd9Sstevel@tonic-gate 44407c478bd9Sstevel@tonic-gate /* do NOT remove assignment */ 44417c478bd9Sstevel@tonic-gate tls_ok_srv = inittls(&srv_ctx, TLS_Srv_Opts, true, SrvCertFile, 44427c478bd9Sstevel@tonic-gate SrvKeyFile, CACertPath, CACertFile, DHParams); 44437c478bd9Sstevel@tonic-gate return tls_ok_srv; 44447c478bd9Sstevel@tonic-gate } 44457c478bd9Sstevel@tonic-gate #endif /* STARTTLS */ 44467c478bd9Sstevel@tonic-gate /* 44477c478bd9Sstevel@tonic-gate ** SRVFEATURES -- get features for SMTP server 44487c478bd9Sstevel@tonic-gate ** 44497c478bd9Sstevel@tonic-gate ** Parameters: 44507c478bd9Sstevel@tonic-gate ** e -- envelope (should be session context). 44517c478bd9Sstevel@tonic-gate ** clientname -- name of client. 44527c478bd9Sstevel@tonic-gate ** features -- default features for this invocation. 44537c478bd9Sstevel@tonic-gate ** 44547c478bd9Sstevel@tonic-gate ** Returns: 44557c478bd9Sstevel@tonic-gate ** server features. 44567c478bd9Sstevel@tonic-gate */ 44577c478bd9Sstevel@tonic-gate 44587c478bd9Sstevel@tonic-gate /* table with options: it uses just one character, how about strings? */ 44597c478bd9Sstevel@tonic-gate static struct 44607c478bd9Sstevel@tonic-gate { 44617c478bd9Sstevel@tonic-gate char srvf_opt; 44627c478bd9Sstevel@tonic-gate unsigned int srvf_flag; 44637c478bd9Sstevel@tonic-gate } srv_feat_table[] = 44647c478bd9Sstevel@tonic-gate { 44657c478bd9Sstevel@tonic-gate { 'A', SRV_OFFER_AUTH }, 44667c478bd9Sstevel@tonic-gate { 'B', SRV_OFFER_VERB }, 44677c478bd9Sstevel@tonic-gate { 'C', SRV_REQ_SEC }, 44687c478bd9Sstevel@tonic-gate { 'D', SRV_OFFER_DSN }, 44697c478bd9Sstevel@tonic-gate { 'E', SRV_OFFER_ETRN }, 44707c478bd9Sstevel@tonic-gate { 'L', SRV_REQ_AUTH }, 44717c478bd9Sstevel@tonic-gate #if PIPELINING 44727c478bd9Sstevel@tonic-gate # if _FFR_NO_PIPE 44737c478bd9Sstevel@tonic-gate { 'N', SRV_NO_PIPE }, 44747c478bd9Sstevel@tonic-gate # endif /* _FFR_NO_PIPE */ 44757c478bd9Sstevel@tonic-gate { 'P', SRV_OFFER_PIPE }, 44767c478bd9Sstevel@tonic-gate #endif /* PIPELINING */ 44777c478bd9Sstevel@tonic-gate { 'R', SRV_VRFY_CLT }, /* same as V; not documented */ 44787c478bd9Sstevel@tonic-gate { 'S', SRV_OFFER_TLS }, 44797c478bd9Sstevel@tonic-gate /* { 'T', SRV_TMP_FAIL }, */ 44807c478bd9Sstevel@tonic-gate { 'V', SRV_VRFY_CLT }, 44817c478bd9Sstevel@tonic-gate { 'X', SRV_OFFER_EXPN }, 44827c478bd9Sstevel@tonic-gate /* { 'Y', SRV_OFFER_VRFY }, */ 44837c478bd9Sstevel@tonic-gate { '\0', SRV_NONE } 44847c478bd9Sstevel@tonic-gate }; 44857c478bd9Sstevel@tonic-gate 44867c478bd9Sstevel@tonic-gate static unsigned int 44877c478bd9Sstevel@tonic-gate srvfeatures(e, clientname, features) 44887c478bd9Sstevel@tonic-gate ENVELOPE *e; 44897c478bd9Sstevel@tonic-gate char *clientname; 44907c478bd9Sstevel@tonic-gate unsigned int features; 44917c478bd9Sstevel@tonic-gate { 44927c478bd9Sstevel@tonic-gate int r, i, j; 44937c478bd9Sstevel@tonic-gate char **pvp, c, opt; 44947c478bd9Sstevel@tonic-gate char pvpbuf[PSBUFSIZE]; 44957c478bd9Sstevel@tonic-gate 44967c478bd9Sstevel@tonic-gate pvp = NULL; 44977c478bd9Sstevel@tonic-gate r = rscap("srv_features", clientname, "", e, &pvp, pvpbuf, 44987c478bd9Sstevel@tonic-gate sizeof(pvpbuf)); 44997c478bd9Sstevel@tonic-gate if (r != EX_OK) 45007c478bd9Sstevel@tonic-gate return features; 45017c478bd9Sstevel@tonic-gate if (pvp == NULL || pvp[0] == NULL || (pvp[0][0] & 0377) != CANONNET) 45027c478bd9Sstevel@tonic-gate return features; 45037c478bd9Sstevel@tonic-gate if (pvp[1] != NULL && sm_strncasecmp(pvp[1], "temp", 4) == 0) 45047c478bd9Sstevel@tonic-gate return SRV_TMP_FAIL; 45057c478bd9Sstevel@tonic-gate 45067c478bd9Sstevel@tonic-gate /* 45077c478bd9Sstevel@tonic-gate ** General rule (see sendmail.h, d_flags): 45087c478bd9Sstevel@tonic-gate ** lower case: required/offered, upper case: Not required/available 45097c478bd9Sstevel@tonic-gate ** 45107c478bd9Sstevel@tonic-gate ** Since we can change some features per daemon, we have both 45117c478bd9Sstevel@tonic-gate ** cases here: turn on/off a feature. 45127c478bd9Sstevel@tonic-gate */ 45137c478bd9Sstevel@tonic-gate 45147c478bd9Sstevel@tonic-gate for (i = 1; pvp[i] != NULL; i++) 45157c478bd9Sstevel@tonic-gate { 45167c478bd9Sstevel@tonic-gate c = pvp[i][0]; 45177c478bd9Sstevel@tonic-gate j = 0; 45187c478bd9Sstevel@tonic-gate for (;;) 45197c478bd9Sstevel@tonic-gate { 45207c478bd9Sstevel@tonic-gate if ((opt = srv_feat_table[j].srvf_opt) == '\0') 45217c478bd9Sstevel@tonic-gate { 45227c478bd9Sstevel@tonic-gate if (LogLevel > 9) 45237c478bd9Sstevel@tonic-gate sm_syslog(LOG_WARNING, e->e_id, 45247c478bd9Sstevel@tonic-gate "srvfeatures: unknown feature %s", 45257c478bd9Sstevel@tonic-gate pvp[i]); 45267c478bd9Sstevel@tonic-gate break; 45277c478bd9Sstevel@tonic-gate } 45287c478bd9Sstevel@tonic-gate if (c == opt) 45297c478bd9Sstevel@tonic-gate { 45307c478bd9Sstevel@tonic-gate features &= ~(srv_feat_table[j].srvf_flag); 45317c478bd9Sstevel@tonic-gate break; 45327c478bd9Sstevel@tonic-gate } 45337c478bd9Sstevel@tonic-gate if (c == tolower(opt)) 45347c478bd9Sstevel@tonic-gate { 45357c478bd9Sstevel@tonic-gate features |= srv_feat_table[j].srvf_flag; 45367c478bd9Sstevel@tonic-gate break; 45377c478bd9Sstevel@tonic-gate } 45387c478bd9Sstevel@tonic-gate ++j; 45397c478bd9Sstevel@tonic-gate } 45407c478bd9Sstevel@tonic-gate } 45417c478bd9Sstevel@tonic-gate return features; 45427c478bd9Sstevel@tonic-gate } 45437c478bd9Sstevel@tonic-gate 45447c478bd9Sstevel@tonic-gate /* 45457c478bd9Sstevel@tonic-gate ** HELP -- implement the HELP command. 45467c478bd9Sstevel@tonic-gate ** 45477c478bd9Sstevel@tonic-gate ** Parameters: 45487c478bd9Sstevel@tonic-gate ** topic -- the topic we want help for. 45497c478bd9Sstevel@tonic-gate ** e -- envelope. 45507c478bd9Sstevel@tonic-gate ** 45517c478bd9Sstevel@tonic-gate ** Returns: 45527c478bd9Sstevel@tonic-gate ** none. 45537c478bd9Sstevel@tonic-gate ** 45547c478bd9Sstevel@tonic-gate ** Side Effects: 45557c478bd9Sstevel@tonic-gate ** outputs the help file to message output. 45567c478bd9Sstevel@tonic-gate */ 45577c478bd9Sstevel@tonic-gate #define HELPVSTR "#vers " 45587c478bd9Sstevel@tonic-gate #define HELPVERSION 2 45597c478bd9Sstevel@tonic-gate 45607c478bd9Sstevel@tonic-gate void 45617c478bd9Sstevel@tonic-gate help(topic, e) 45627c478bd9Sstevel@tonic-gate char *topic; 45637c478bd9Sstevel@tonic-gate ENVELOPE *e; 45647c478bd9Sstevel@tonic-gate { 45657c478bd9Sstevel@tonic-gate register SM_FILE_T *hf; 45667c478bd9Sstevel@tonic-gate register char *p; 45677c478bd9Sstevel@tonic-gate int len; 45687c478bd9Sstevel@tonic-gate bool noinfo; 45697c478bd9Sstevel@tonic-gate bool first = true; 45707c478bd9Sstevel@tonic-gate long sff = SFF_OPENASROOT|SFF_REGONLY; 45717c478bd9Sstevel@tonic-gate char buf[MAXLINE]; 45727c478bd9Sstevel@tonic-gate char inp[MAXLINE]; 45737c478bd9Sstevel@tonic-gate static int foundvers = -1; 45747c478bd9Sstevel@tonic-gate extern char Version[]; 45757c478bd9Sstevel@tonic-gate 45767c478bd9Sstevel@tonic-gate if (DontLockReadFiles) 45777c478bd9Sstevel@tonic-gate sff |= SFF_NOLOCK; 45787c478bd9Sstevel@tonic-gate if (!bitnset(DBS_HELPFILEINUNSAFEDIRPATH, DontBlameSendmail)) 45797c478bd9Sstevel@tonic-gate sff |= SFF_SAFEDIRPATH; 45807c478bd9Sstevel@tonic-gate 45817c478bd9Sstevel@tonic-gate if (HelpFile == NULL || 45827c478bd9Sstevel@tonic-gate (hf = safefopen(HelpFile, O_RDONLY, 0444, sff)) == NULL) 45837c478bd9Sstevel@tonic-gate { 45847c478bd9Sstevel@tonic-gate /* no help */ 45857c478bd9Sstevel@tonic-gate errno = 0; 45867c478bd9Sstevel@tonic-gate message("502 5.3.0 Sendmail %s -- HELP not implemented", 45877c478bd9Sstevel@tonic-gate Version); 45887c478bd9Sstevel@tonic-gate return; 45897c478bd9Sstevel@tonic-gate } 45907c478bd9Sstevel@tonic-gate 45917c478bd9Sstevel@tonic-gate if (topic == NULL || *topic == '\0') 45927c478bd9Sstevel@tonic-gate { 45937c478bd9Sstevel@tonic-gate topic = "smtp"; 45947c478bd9Sstevel@tonic-gate noinfo = false; 45957c478bd9Sstevel@tonic-gate } 45967c478bd9Sstevel@tonic-gate else 45977c478bd9Sstevel@tonic-gate { 45987c478bd9Sstevel@tonic-gate makelower(topic); 45997c478bd9Sstevel@tonic-gate noinfo = true; 46007c478bd9Sstevel@tonic-gate } 46017c478bd9Sstevel@tonic-gate 46027c478bd9Sstevel@tonic-gate len = strlen(topic); 46037c478bd9Sstevel@tonic-gate 46047c478bd9Sstevel@tonic-gate while (sm_io_fgets(hf, SM_TIME_DEFAULT, buf, sizeof buf) != NULL) 46057c478bd9Sstevel@tonic-gate { 46067c478bd9Sstevel@tonic-gate if (buf[0] == '#') 46077c478bd9Sstevel@tonic-gate { 46087c478bd9Sstevel@tonic-gate if (foundvers < 0 && 46097c478bd9Sstevel@tonic-gate strncmp(buf, HELPVSTR, strlen(HELPVSTR)) == 0) 46107c478bd9Sstevel@tonic-gate { 46117c478bd9Sstevel@tonic-gate int h; 46127c478bd9Sstevel@tonic-gate 46137c478bd9Sstevel@tonic-gate if (sm_io_sscanf(buf + strlen(HELPVSTR), "%d", 46147c478bd9Sstevel@tonic-gate &h) == 1) 46157c478bd9Sstevel@tonic-gate foundvers = h; 46167c478bd9Sstevel@tonic-gate } 46177c478bd9Sstevel@tonic-gate continue; 46187c478bd9Sstevel@tonic-gate } 46197c478bd9Sstevel@tonic-gate if (strncmp(buf, topic, len) == 0) 46207c478bd9Sstevel@tonic-gate { 46217c478bd9Sstevel@tonic-gate if (first) 46227c478bd9Sstevel@tonic-gate { 46237c478bd9Sstevel@tonic-gate first = false; 46247c478bd9Sstevel@tonic-gate 46257c478bd9Sstevel@tonic-gate /* print version if no/old vers# in file */ 46267c478bd9Sstevel@tonic-gate if (foundvers < 2 && !noinfo) 46277c478bd9Sstevel@tonic-gate message("214-2.0.0 This is Sendmail version %s", Version); 46287c478bd9Sstevel@tonic-gate } 46297c478bd9Sstevel@tonic-gate p = strpbrk(buf, " \t"); 46307c478bd9Sstevel@tonic-gate if (p == NULL) 46317c478bd9Sstevel@tonic-gate p = buf + strlen(buf) - 1; 46327c478bd9Sstevel@tonic-gate else 46337c478bd9Sstevel@tonic-gate p++; 46347c478bd9Sstevel@tonic-gate fixcrlf(p, true); 46357c478bd9Sstevel@tonic-gate if (foundvers >= 2) 46367c478bd9Sstevel@tonic-gate { 46377c478bd9Sstevel@tonic-gate translate_dollars(p); 46387c478bd9Sstevel@tonic-gate expand(p, inp, sizeof inp, e); 46397c478bd9Sstevel@tonic-gate p = inp; 46407c478bd9Sstevel@tonic-gate } 46417c478bd9Sstevel@tonic-gate message("214-2.0.0 %s", p); 46427c478bd9Sstevel@tonic-gate noinfo = false; 46437c478bd9Sstevel@tonic-gate } 46447c478bd9Sstevel@tonic-gate } 46457c478bd9Sstevel@tonic-gate 46467c478bd9Sstevel@tonic-gate if (noinfo) 46477c478bd9Sstevel@tonic-gate message("504 5.3.0 HELP topic \"%.10s\" unknown", topic); 46487c478bd9Sstevel@tonic-gate else 46497c478bd9Sstevel@tonic-gate message("214 2.0.0 End of HELP info"); 46507c478bd9Sstevel@tonic-gate 46517c478bd9Sstevel@tonic-gate if (foundvers != 0 && foundvers < HELPVERSION) 46527c478bd9Sstevel@tonic-gate { 46537c478bd9Sstevel@tonic-gate if (LogLevel > 1) 46547c478bd9Sstevel@tonic-gate sm_syslog(LOG_WARNING, e->e_id, 46557c478bd9Sstevel@tonic-gate "%s too old (require version %d)", 46567c478bd9Sstevel@tonic-gate HelpFile, HELPVERSION); 46577c478bd9Sstevel@tonic-gate 46587c478bd9Sstevel@tonic-gate /* avoid log next time */ 46597c478bd9Sstevel@tonic-gate foundvers = 0; 46607c478bd9Sstevel@tonic-gate } 46617c478bd9Sstevel@tonic-gate 46627c478bd9Sstevel@tonic-gate (void) sm_io_close(hf, SM_TIME_DEFAULT); 46637c478bd9Sstevel@tonic-gate } 46647c478bd9Sstevel@tonic-gate 46657c478bd9Sstevel@tonic-gate #if SASL 46667c478bd9Sstevel@tonic-gate /* 46677c478bd9Sstevel@tonic-gate ** RESET_SASLCONN -- reset SASL connection data 46687c478bd9Sstevel@tonic-gate ** 46697c478bd9Sstevel@tonic-gate ** Parameters: 46707c478bd9Sstevel@tonic-gate ** conn -- SASL connection context 46717c478bd9Sstevel@tonic-gate ** hostname -- host name 46727c478bd9Sstevel@tonic-gate ** various connection data 46737c478bd9Sstevel@tonic-gate ** 46747c478bd9Sstevel@tonic-gate ** Returns: 46757c478bd9Sstevel@tonic-gate ** SASL result 46767c478bd9Sstevel@tonic-gate */ 46777c478bd9Sstevel@tonic-gate 46787c478bd9Sstevel@tonic-gate static int 46797c478bd9Sstevel@tonic-gate reset_saslconn(sasl_conn_t **conn, char *hostname, 46807c478bd9Sstevel@tonic-gate # if SASL >= 20000 46817c478bd9Sstevel@tonic-gate char *remoteip, char *localip, 46827c478bd9Sstevel@tonic-gate char *auth_id, sasl_ssf_t * ext_ssf) 46837c478bd9Sstevel@tonic-gate # else /* SASL >= 20000 */ 46847c478bd9Sstevel@tonic-gate struct sockaddr_in *saddr_r, struct sockaddr_in *saddr_l, 46857c478bd9Sstevel@tonic-gate sasl_external_properties_t * ext_ssf) 46867c478bd9Sstevel@tonic-gate # endif /* SASL >= 20000 */ 46877c478bd9Sstevel@tonic-gate { 46887c478bd9Sstevel@tonic-gate int result; 46897c478bd9Sstevel@tonic-gate 46907c478bd9Sstevel@tonic-gate sasl_dispose(conn); 46917c478bd9Sstevel@tonic-gate # if SASL >= 20000 46927c478bd9Sstevel@tonic-gate result = sasl_server_new("smtp", hostname, NULL, NULL, NULL, 46937c478bd9Sstevel@tonic-gate NULL, 0, conn); 46947c478bd9Sstevel@tonic-gate # elif SASL > 10505 46957c478bd9Sstevel@tonic-gate /* use empty realm: only works in SASL > 1.5.5 */ 46967c478bd9Sstevel@tonic-gate result = sasl_server_new("smtp", hostname, "", NULL, 0, conn); 46977c478bd9Sstevel@tonic-gate # else /* SASL >= 20000 */ 46987c478bd9Sstevel@tonic-gate /* use no realm -> realm is set to hostname by SASL lib */ 46997c478bd9Sstevel@tonic-gate result = sasl_server_new("smtp", hostname, NULL, NULL, 0, 47007c478bd9Sstevel@tonic-gate conn); 47017c478bd9Sstevel@tonic-gate # endif /* SASL >= 20000 */ 47027c478bd9Sstevel@tonic-gate if (result != SASL_OK) 47037c478bd9Sstevel@tonic-gate return result; 47047c478bd9Sstevel@tonic-gate 47057c478bd9Sstevel@tonic-gate # if SASL >= 20000 47067c478bd9Sstevel@tonic-gate # if NETINET || NETINET6 47077c478bd9Sstevel@tonic-gate if (remoteip != NULL && *remoteip != '\0') 47087c478bd9Sstevel@tonic-gate result = sasl_setprop(*conn, SASL_IPREMOTEPORT, remoteip); 47097c478bd9Sstevel@tonic-gate if (result != SASL_OK) 47107c478bd9Sstevel@tonic-gate return result; 47117c478bd9Sstevel@tonic-gate 47127c478bd9Sstevel@tonic-gate if (localip != NULL && *localip != '\0') 47137c478bd9Sstevel@tonic-gate result = sasl_setprop(*conn, SASL_IPLOCALPORT, localip); 47147c478bd9Sstevel@tonic-gate if (result != SASL_OK) 47157c478bd9Sstevel@tonic-gate return result; 47167c478bd9Sstevel@tonic-gate # endif /* NETINET || NETINET6 */ 47177c478bd9Sstevel@tonic-gate 47187c478bd9Sstevel@tonic-gate result = sasl_setprop(*conn, SASL_SSF_EXTERNAL, ext_ssf); 47197c478bd9Sstevel@tonic-gate if (result != SASL_OK) 47207c478bd9Sstevel@tonic-gate return result; 47217c478bd9Sstevel@tonic-gate 47227c478bd9Sstevel@tonic-gate result = sasl_setprop(*conn, SASL_AUTH_EXTERNAL, auth_id); 47237c478bd9Sstevel@tonic-gate if (result != SASL_OK) 47247c478bd9Sstevel@tonic-gate return result; 47257c478bd9Sstevel@tonic-gate # else /* SASL >= 20000 */ 47267c478bd9Sstevel@tonic-gate # if NETINET 47277c478bd9Sstevel@tonic-gate if (saddr_r != NULL) 47287c478bd9Sstevel@tonic-gate result = sasl_setprop(*conn, SASL_IP_REMOTE, saddr_r); 47297c478bd9Sstevel@tonic-gate if (result != SASL_OK) 47307c478bd9Sstevel@tonic-gate return result; 47317c478bd9Sstevel@tonic-gate 47327c478bd9Sstevel@tonic-gate if (saddr_l != NULL) 47337c478bd9Sstevel@tonic-gate result = sasl_setprop(*conn, SASL_IP_LOCAL, saddr_l); 47347c478bd9Sstevel@tonic-gate if (result != SASL_OK) 47357c478bd9Sstevel@tonic-gate return result; 47367c478bd9Sstevel@tonic-gate # endif /* NETINET */ 47377c478bd9Sstevel@tonic-gate 47387c478bd9Sstevel@tonic-gate result = sasl_setprop(*conn, SASL_SSF_EXTERNAL, ext_ssf); 47397c478bd9Sstevel@tonic-gate if (result != SASL_OK) 47407c478bd9Sstevel@tonic-gate return result; 47417c478bd9Sstevel@tonic-gate # endif /* SASL >= 20000 */ 47427c478bd9Sstevel@tonic-gate return SASL_OK; 47437c478bd9Sstevel@tonic-gate } 47447c478bd9Sstevel@tonic-gate #endif /* SASL */ 4745