aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* release version6.7.0p1release-6.7.0Gilles Chehade2020-05-131-1/+1
|
* move backGilles Chehade2020-05-13115-0/+0
|
* Only allow forkmda() to be called from a local action dispatcher.millert2020-05-131-1/+3
| | | | From gilles@, OK deraadt@ jung@
* moveGilles Chehade2020-05-13115-0/+0
|
* sudo make installGilles Chehade2020-05-061-2/+1
|
* /etc/mail is required for make installGilles Chehade2020-05-061-0/+1
|
* add pipe2() compat layer, fixes build on OSXGilles Chehade2020-05-063-0/+42
|
* reorderGilles Chehade2020-05-051-1/+9
|
* brew install byaccGilles Chehade2020-05-051-1/+1
|
* bison neededGilles Chehade2020-05-051-1/+1
|
* collapse to a single line for nowGilles Chehade2020-05-051-6/+1
|
* collapse stepsGilles Chehade2020-05-051-3/+6
|
* openssl is installed in /usr/local/opt/openssl@1.1Gilles Chehade2020-05-051-1/+1
|
* makeGilles Chehade2020-05-051-1/+1
|
* brew install libevent and openssl@1.1Gilles Chehade2020-05-051-1/+1
|
* configureGilles Chehade2020-05-051-2/+2
|
* dependencies stepGilles Chehade2020-05-051-0/+2
|
* start a macos workflowGilles Chehade2020-05-051-0/+15
|
* add with-table-db to ensure db code path is builtGilles Chehade2020-05-051-1/+3
|
* fix build on gcc-10Gilles Chehade2020-05-051-1/+0
|
* add fedora-gcc10 ci targetGilles Chehade2020-05-052-0/+67
|
* typo, dnf not dnsGilles Chehade2020-05-051-1/+1
|
* Update fedora.ymlGilles Chehade2020-05-051-1/+1
|
* Update Dockerfile.fedoraGilles Chehade2020-05-050-0/+0
| | | whitespace
* add fedora to CIGilles Chehade2020-05-051-0/+15
|
* add Dockerfile for fedoraGilles Chehade2020-05-051-0/+51
|
* m4Gilles Chehade2020-04-301-0/+179
|
* merge historiesGilles Chehade2020-04-30390-52617/+7
|
* Merge remote-tracking branch 'portable/native'Gilles Chehade2020-04-30112-0/+52610
|\
| * In virtual alias context, do not try to match catchall entries fornativeeric2020-04-281-1/+5
| | | | | | | | | | | | | | | | | | | | usernames, but only for email addresses. fixes an issue where usernames always expand to the @ wildcard if defined in the virtual alias file. discussed with Gilles Chehade ok millert@
| * update filter documentation after protocol changeeric2020-04-251-20/+27
| | | | | | | | from Gilles Chehade
| * point out that the "junk" filter decision adds the X-Spam headereric2020-04-251-5/+13
| | | | | | | | from Ryan Kavanagh
| * strip trailing CRs at smtp level rather than io leveleric2020-04-246-10/+25
| | | | | | | | ok millert@
| * ce examples of "Ar arg Ar arg" with "Ar arg arg" and stop the spread;jmc2020-04-232-13/+13
| |
| * Check for the dispatcher name in the envelope validation function.eric2020-04-222-11/+5
| | | | | | | | | | | | | | Fixes a possible crash and caching issue when manually moving an envelope to the queue with smtpctl discover. ok millert@
| * switch email and result fields in mail-from/rcpt-to event reportseric2020-04-171-4/+4
| | | | | | | | | | | | | | | | and bump protocol version. discussed with jung@, martijn@ and Gilles. ok jung@
| * When failing to validate a peer TLS certificate in the MTA due to thebeck2020-04-101-2/+6
| | | | | | | | | | | | | | | | desired name of the MX not being present in the certificate, log that this is he reason for the failure and the name we couldn't find in the cert. ok millert@ martijn@
| * bump smtpd versioneric2020-04-081-2/+2
| |
| * use CRLF line-ending during the SMTP dialog in the local enqueuereric2020-03-181-17/+18
| | | | | | | | ok millert@
| * Exit when m_get_string() returns NULL to prevent nullptr dereference intobhe2020-03-171-1/+3
| | | | | | | | | | | | strlen(). ok millert@
| * Initialize session.rcptto to NULL before parsing command line optinos.millert2020-03-161-0/+1
| | | | | | | | | | Otherwise, if neither -r nor -u is specified, it will be used uninitialized. Found by tobhe@; OK tobhe@ deraadt@
| * Add missing casts to unsigned char when using ctype(3).millert2020-03-153-6/+6
| | | | | | | | From Hiltjo Posthuma
| * Rewrite qp_encoded_write.martijn2020-03-081-37/+40
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Among the fixes are: - Don't count a leading dot, since it's part of smtp and not the message. - Let qp_encoded_write handle line wrappings, since it can do a better job at the bookkeeping than the caller - Make sure a soft linebreak that starts with a dot is escaped for the SMTP-layer - Only encode a space character if it's followed by a hard linebreak, since this is the only case mandated by RFC5321 and it gives a more readable output and saves a few additional bytes. - Fix that we actually limit the encoded linelength to 76 characters as specified in RFC5321. Feedback and OK eric@
| * fsqueue_envelope_dump() returns 0 on temporary failure, not -1.millert2020-02-251-3/+2
| | | | | | | | | | | | We should only exit the loop that creates the queue file if we successfully created the file or we've exceeded the max number of tries. From gilles@ based on feedback from Qualys.
| * Cast argument of ctype(3) macros to unsigned char, not int.millert2020-02-244-20/+20
| | | | | | | | Similar to a diff from Hiltjo Posthum. OK jung@ deraadt@
| * Bump version to 6.6.4 for errata and to match -portable.millert2020-02-241-2/+2
| |
| * Fix two security vulnerabilities discovered by Qualys.millert2020-02-246-23/+47
| | | | | | | | | | | | | | An out of bounds read in smtpd allows an attacker to inject arbitrary commands into the envelope file which are then executed as root. Separately, missing privilege revocation in smtpctl allows arbitrary commands to be run with the _smtpq group.
| * Standardize argument naming for "sourceaddr" and unify the wording a bit,schwarze2020-02-121-5/+6
| | | | | | | | similar to what deraadt@ recently did in other manual pages.
| * ORCPT addresses are prefixed with an address type, the stricter check causegilles2020-02-032-3/+7
| | | | | | | | | | | | the prefix to be rejected as it contains a character not allowed in address reported by Scott Vanderbilt
| * now that mail.local(8) relies on lockspool(1) for mailbox locking, have thegilles2020-02-034-8/+41
| | | | | | | | | | | | | | mailbox created by smtpd for mbox before privileges are dropped then we can call mail.local(8) with the recipient privileges. ok millert@