summaryrefslogtreecommitdiffstats
path: root/libexec/spamd/spamd.c
AgeCommit message (Expand)AuthorFilesLines
2019-08-06By now we are already confident that pledge(2) "just works(tm)" and that it canmestre1-10/+1
2018-10-22More "explicitely" -> "explicitly" in various comments.krw1-2/+2
2018-04-26nuke trailing whitespacebeck1-3/+3
2017-10-18Make blacklist entries override the whitelist. When running spamdmillert1-2/+56
2017-10-12Check for asprintf() returning -1 instead of assuming that themillert1-2/+3
2017-04-06fix missing \ on \n, spotted by Edgar Pettijohnbeck1-2/+2
2017-01-23check EAGAIN in the correct place,beck1-3/+3
2017-01-23Switch spamd to nonblocking descriptors so we can count on getting abeck1-2/+9
2017-01-17- spamd(8)'s -l accepts an IP address as argument to bind(2) and it callsmestre1-11/+17
2016-11-30Check return value of tls_config_set_protocols(3) and bail out in case ofmestre1-2/+3
2016-11-08Remove redundant & when clearing hostname variable, as per otto@'s requestmestre1-2/+2
2016-11-07Replace bzero(3) with memset(3)mestre1-2/+2
2016-09-06must close our fd unconditionally and not just in the !TLS case; tls_closehenning1-3/+3
2016-07-13Adjust existing tls_config_set_cipher() callers for TLS cipher groupjsing1-2/+2
2016-05-17tyopjca1-2/+2
2016-04-27Remove pledge(2)'s that are called before chroot(2) since in the near futuremestre1-4/+1
2016-04-10per rfc, ehlo responses contain hostname, then options. from dyn+bsdtedu1-2/+4
2016-03-25- Both checks for pw are not needed since it was already done at the start ofmestre1-7/+5
2016-03-10- add a define for "_spamd" user like others OpenBSD daemons;gsoares1-5/+14
2015-12-12Remove NULL-checks before free(). ok tb@mmcc1-5/+3
2015-12-10tighten the pledge for spamd, from Ricardo Mestre <serial@helheim.mooo.com>beck1-27/+36
2015-12-08Initially pledge spamdbeck1-12/+24
2015-12-05adjust to newer tls_read/_write semantics.henning1-21/+53
2015-12-02in response to EHLO, don't offer STARTTLS if we already completed thehenning1-2/+3
2015-12-02I misread the standard when adding TLS; clients are supposed to start overhenning1-2/+2
2015-12-02fix error messages to say tls_write after tls_write and not tls_read...henning1-3/+4
2015-09-10read, tls_read, and tls_write return ssize_tbeck1-3/+3
2015-09-10fix after libtls api changesbeck1-12/+17
2015-05-18Change spamd to use divert-to instead of rdr-to.reyk1-12/+5
2015-04-18Convert many atoi() calls to strtonum(), adding range checks and failurederaadt1-18/+15
2015-03-12Use poll(2) instead of select(2). A pointer to the struct pollfdmillert1-97/+103
2015-02-22Set the TLS ciphers to "compat" mode, restoring the previous behaviour.jsing1-2/+5
2015-02-12Change TLS_PROTOCOLS_DEFAULT to be TLSv1.2 only. Add a TLS_PROTOCOLS_ALLjsing1-1/+3
2015-02-07add STARTTLS support, using the shiny libtls.henning1-12/+122
2015-01-16Replace <sys/param.h> with <limits.h> and other less dirty headers wherederaadt1-8/+12
2015-01-13Move debug printf for duplicate af to correct location.millert1-7/+9
2015-01-13Remove bogus getopt.h include.millert1-2/+1
2015-01-13Use address-family specific lists of addr/mask entries instead ofmillert1-25/+86
2014-12-30Use a 1MB realloc() increment instead of an 8KB one for the configmillert1-24/+12
2014-12-29Minor cleanup:millert1-26/+10
2014-11-23Delete a bunch of unnecessary #includesguenther1-3/+2
2014-10-09obvious reallocarray() conversionsderaadt1-2/+2
2014-03-26strdup() returns NULL if out of memory, we should check it.gsoares1-1/+3
2013-11-19repair format strings for time_t, and some missing protosderaadt1-7/+15
2012-06-19use warn() instead of perror(), like the rest of the code doesderaadt1-7/+7
2012-04-19rate-limit accept(); small tweaks and such along the way from gilles,deraadt1-33/+72
2012-04-18merge some whitespace changes before bigger changesderaadt1-4/+7
2012-04-13Don't assume that the new conffd is a unset in the fd_set, it could be aderaadt1-3/+2
2010-01-14drop connections to confused clients who do repeated command failures -beck1-2/+10
2010-01-11KNFbeck1-8/+8