Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | if cipher list is not specified for a relay action, use the global | 2021-04-02 | 1 | -3/+6 | |
| | | | | | | cipher list if defined. otherwise fallback to libtls default. ok millert@ | ||||
* | turn log_trace() into a macro to prevent evaluating the format string | 2021-03-31 | 2 | -10/+9 | |
| | | | | | | parameters when tracing is not enabled. ok millert@ | ||||
* | allow to specify tls protocols and ciphers on relay actions | 2021-03-31 | 4 | -10/+46 | |
| | | | | ok espie@ sthen@ tb@ | ||||
* | do not request client certificate unless required | 2021-03-10 | 1 | -3/+1 | |
| | | | | | | | issue hit by florian@ diff by jsing@ ok tb@ | ||||
* | use the mx hostname for sni on outgoing connection, not the reverse | 2021-03-07 | 1 | -2/+2 | |
| | | | | | | | dns for the peer address. spotted by krw@ ok krw@ tb@ | ||||
* | Start porting smtpd to libtls. | 2021-03-05 | 23 | -577/+549 | |
| | | | | | | | | | | Note that it changes the way SNI works: The certificate to use is now selected by looking at the names found in the certificates themselves, rather than the names of the pki entries in the configuration file. The set of certificates for a tls listener must be defined explicitly by using the pki listener option multiple times. ok tb@ | ||||
* | -h does not display version; from larry hynes | 2021-02-13 | 1 | -3/+3 | |
| | |||||
* | readability fixes; from larry hynes | 2021-02-13 | 1 | -4/+4 | |
| | |||||
* | various readability fixes; from larry hynes | 2021-02-13 | 1 | -19/+19 | |
| | |||||
* | various readability fixes; from larry hynes | 2021-02-13 | 1 | -6/+6 | |
| | |||||
* | add some missing articles; from larry hynes | 2021-02-13 | 1 | -3/+4 | |
| | |||||
* | readability fix; from larry hynes | 2021-02-13 | 1 | -4/+4 | |
| | |||||
* | comma swap; from larry hynes | 2021-02-13 | 1 | -4/+4 | |
| | |||||
* | mark up fixes; from lyndon | 2021-01-27 | 1 | -4/+4 | |
| | |||||
* | makemap does not need a common which it does not use. | 2021-01-27 | 1 | -2/+1 | |
| | |||||
* | Remove unused variables found by clang. Additional unused var spotted by eric@. | 2021-01-23 | 10 | -44/+32 | |
| | | | | OK mvs@, eric@ | ||||
* | Do the KAME embedded scope fixup in the two places where getifaddrs() is | 2021-01-19 | 4 | -37/+29 | |
| | | | | | | | used. With this there should be no more embedded scopes left and therefor in6addr_to_text() can be removed. getnameinfo() will just do the right thing now. OK eric@ | ||||
* | Rename the pony process to dispatcher and klondike to crypto. | 2020-12-31 | 13 | -253/+253 | |
| | | | | | From gilles@ OK millert@ giovanni@ | ||||
* | sync usage() with SYNOPSIS; the -S option remains | 2020-12-29 | 1 | -2/+2 | |
| | | | | undocumented, at least for now; | ||||
* | smtpd's filter state machine can prematurely release resources | 2020-12-23 | 1 | -6/+1 | |
| | | | | leading to a crash. From gilles@ | ||||
* | Fix a memory leak: use a single memory allocation for struct addrinfo and | 2020-12-23 | 1 | -31/+38 | |
| | | | | | | | | | the sockaddr it contains, as expected by freeaddrinfo(). Move the allocation to a helper function for clarity. comments from martijn@ millert@ ok millert@ | ||||
* | Use regfree after we're done with preg. | 2020-12-23 | 1 | -2/+7 | |
| | | | | From gilles@ | ||||
* | The plumbing already allowed for smtp authentication, hook it up to the -a | 2020-12-21 | 2 | -7/+35 | |
| | | | | | | | flag. Manpage order feedback jmc@ OK eric@ | ||||
* | Use NI_NUMERICSERV. We don't use the result and it's faster and is a | 2020-12-21 | 2 | -5/+6 | |
| | | | | | | | workaround for the memory-leak in asr. smtp_session part from eric@ OK eric@ gilles@ | ||||
* | Onlly call event_del if there are events enabled, since not all libevents | 2020-12-20 | 1 | -2/+3 | |
| | | | | | | are created equal. From gilles@ | ||||
* | Free filter_name in lka_filter_end | 2020-12-20 | 1 | -1/+2 | |
| | | | | | From gilles@ OK millert@ eric@ | ||||
* | Sync bsnprintf() with ldapd/util.c r1.13 | 2020-11-29 | 1 | -2/+2 | |
| | | | | Pointed out by jmatthew and requested by florian. | ||||
* | partially revert revision 1.423 which went a bit too far | 2020-11-20 | 1 | -2/+3 | |
| | | | | | | | | | | slightly relax the ORCPT check by not enforcing that a domain is required, allowing e.g.: ORCPT=rfc822;root originally reported via github issue #1084 by Leo Gaspard with input from gilles ok kn | ||||
* | Revert agentx support for now, we're too close to release. | 2020-09-23 | 7 | -416/+13 | |
| | | | | requested by deraadt@ | ||||
* | Add support for agentx to smtpd. | 2020-09-23 | 7 | -14/+417 | |
| | | | | | | | | | | This is based around NETWORK-SERVICES-MIB from RFC2788 and MTA-MIB from RFC2789, but does not export the full spec. Hopefully this will expand in the future. People who want to use this against net-snmp (currently the only option known to me at the time of writing) may want to add -I -mta_sendmail to the flags, so net-snmp doesn't throw garbage into the mib-2.28 subtree. | ||||
* | Allow handling long lines in an aliases table. | 2020-09-22 | 1 | -6/+8 | |
| | | | | | | Pointed out by AIsha Tammy (openbsd <dot> bugs <at> aisha <dot> cc) Original diff by Edgar Pettijohn (edgar <at> pettijohn-web <dot> com) OK tb@ | ||||
* | Add the admd keyword. This can be used by filters interested in the | 2020-09-16 | 4 | -6/+32 | |
| | | | | | | Authentication-Results header. OK giovanni@ | ||||
* | Fix handling of user names containing '@' symbols. | 2020-09-14 | 1 | -2/+2 | |
| | | | | | | It is possible to have a user name of the form foo@bar in the URL. When splitting user name from host name, split at the last '@', not the first one. From Josh Rickmar | ||||
* | Document "pki" option for relay delivery too; from Nick Gasson | 2020-09-14 | 1 | -2/+10 | |
| | | | | OK jmc@ martijn@ | ||||
* | All buffers are in rw-memory, but lookup_record has it defined as | 2020-09-14 | 1 | -2/+2 | |
| | | | | | | const char *. Remove the const so things compile a little cleaner. Pointer out by Mark Patruck <mark <at> wrapped <dot> cx>. Thanks | ||||
* | Make "spf walk" report if an spf-record has macro's and can't be resolved. | 2020-09-14 | 2 | -3/+18 | |
| | | | | | | | | Originally reported by and OK on earlier version giovanni@ Looks good to deraadt@ feedback and OK jmc@ feedback semarie@ OK sthen@ | ||||
* | add missing "regex" keyword; from heddi nabbisen | 2020-08-27 | 1 | -3/+3 | |
| | | | | ok martijn | ||||
* | set TLS SNI when relaying to host | 2020-06-09 | 1 | -1/+22 | |
| | | | | | ok beck@ "looks reasonable" millert@ | ||||
* | Run lmtp deliveries as SMTPD_USER instead of the recipient user. | 2020-06-01 | 2 | -4/+6 | |
| | | | | ok millert@ | ||||
* | Correct getsockname(2)/getpeername(2) usage. | 2020-05-21 | 1 | -7/+11 | |
| | | | | | Fixes an uninitialized variable and a potential stack overflow with IPv6 connections. From Leah Neukirchen; OK eric@ deraadt@ | ||||
* | Only allow forkmda() to be called from a local action dispatcher. | 2020-05-06 | 1 | -1/+3 | |
| | | | | From gilles@, OK deraadt@ jung@ | ||||
* | In virtual alias context, do not try to match catchall entries for | 2020-04-28 | 1 | -1/+5 | |
| | | | | | | | | | | usernames, but only for email addresses. fixes an issue where usernames always expand to the @ wildcard if defined in the virtual alias file. discussed with Gilles Chehade ok millert@ | ||||
* | update filter documentation after protocol change | 2020-04-25 | 1 | -20/+27 | |
| | | | | from Gilles Chehade | ||||
* | point out that the "junk" filter decision adds the X-Spam header | 2020-04-25 | 1 | -5/+13 | |
| | | | | from Ryan Kavanagh | ||||
* | strip trailing CRs at smtp level rather than io level | 2020-04-24 | 6 | -10/+25 | |
| | | | | ok millert@ | ||||
* | ce examples of "Ar arg Ar arg" with "Ar arg arg" and stop the spread; | 2020-04-23 | 2 | -13/+13 | |
| | |||||
* | Check for the dispatcher name in the envelope validation function. | 2020-04-22 | 2 | -11/+5 | |
| | | | | | | | Fixes a possible crash and caching issue when manually moving an envelope to the queue with smtpctl discover. ok millert@ | ||||
* | switch email and result fields in mail-from/rcpt-to event reports | 2020-04-17 | 1 | -4/+4 | |
| | | | | | | | | and bump protocol version. discussed with jung@, martijn@ and Gilles. ok jung@ | ||||
* | When failing to validate a peer TLS certificate in the MTA due to the | 2020-04-10 | 1 | -2/+6 | |
| | | | | | | | | desired name of the MX not being present in the certificate, log that this is he reason for the failure and the name we couldn't find in the cert. ok millert@ martijn@ | ||||
* | bump smtpd version | 2020-04-08 | 1 | -2/+2 | |
| |