wireguard-openbsd/libexec/spamd/spamd.c, branch jd/simplify-queueing

By now we are already confident that pledge(2) "just works(tm)" and that it can

2019-08-06T13:34:36Z

be used to effectively remove filesystem access. That being said, in spamd(8) when I pledge(2)d it the main priv process got "stdio inet" which means there's no fs access at all so calling chroot(2)/chdir(2) here doesn't get us any additional protection. Just remove them. OK deraadt@ and no objections from schwarze@

More "explicitely" -> "explicitly" in various comments.

2018-10-22T17:31:24Z

ok guenther@ tb@ deraadt@

nuke trailing whitespace

2018-04-26T08:57:07Z

Make blacklist entries override the whitelist. When running spamd

2017-10-18T17:31:01Z

in greylisting mode, it is not uncommon for an IP to get whitelisted before it shows up on a spam blacklist. With this change, spamd will check its blacklists before adding a WHITE entry to the pf table. If the IP matches a blacklist, the WHITE entry will be removed. OK phessler@

Check for asprintf() returning -1 instead of assuming that the

2017-10-12T16:22:33Z

pointer will remain unchanged when fails. OK deraadt@

fix missing \ on \n, spotted by Edgar Pettijohn

2017-04-06T15:30:12Z

check EAGAIN in the correct place,

2017-01-23T09:21:04Z

noticed and ok phessler@

Switch spamd to nonblocking descriptors so we can count on getting a

2017-01-23T09:09:15Z

short write when the socket buffers are full, instead of blocking. ok benno@ claudio@

- spamd(8)'s -l accepts an IP address as argument to bind(2) and it calls

2017-01-17T23:28:04Z

inet_pton(3) to check if it's valid and since that function doesn't provide a proper errno (POSIX doesn't mandate to do so) then if a string is given we may get this message: spamd: inet_pton: Undefined error: 0 - Instead replace that code to use getaddrinfo(3) from which is possible to get a proper error message, and at the same time being able to parse IPs and hostnames (if either the IP or host is not local then the next bind(2) will fail) - By default without arguments, spamd(8) will still bind(2) to 127.0.0.1 as it did before With feedback from deraadt@ and OK beck@

Check return value of tls_config_set_protocols(3) and bail out in case of

2016-11-30T07:54:36Z

failure Feedback and OK jsing@