diff options
Diffstat (limited to 'usr.sbin/sendmail/src/deliver.c')
| -rw-r--r-- | usr.sbin/sendmail/src/deliver.c | 3486 |
1 files changed, 0 insertions, 3486 deletions
diff --git a/usr.sbin/sendmail/src/deliver.c b/usr.sbin/sendmail/src/deliver.c deleted file mode 100644 index 957551590fcde..0000000000000 --- a/usr.sbin/sendmail/src/deliver.c +++ /dev/null @@ -1,3486 +0,0 @@ -/* - * Copyright (c) 1983, 1995-1997 Eric P. Allman - * Copyright (c) 1988, 1993 - * The Regents of the University of California. All rights reserved. - * - * Redistribution and use in source and binary forms, with or without - * modification, are permitted provided that the following conditions - * are met: - * 1. Redistributions of source code must retain the above copyright - * notice, this list of conditions and the following disclaimer. - * 2. Redistributions in binary form must reproduce the above copyright - * notice, this list of conditions and the following disclaimer in the - * documentation and/or other materials provided with the distribution. - * 3. All advertising materials mentioning features or use of this software - * must display the following acknowledgement: - * This product includes software developed by the University of - * California, Berkeley and its contributors. - * 4. Neither the name of the University nor the names of its contributors - * may be used to endorse or promote products derived from this software - * without specific prior written permission. - * - * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND - * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE - * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE - * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE - * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL - * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS - * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) - * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT - * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY - * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF - * SUCH DAMAGE. - */ - -#ifndef lint -static char sccsid[] = "@(#)deliver.c 8.296 (Berkeley) 10/22/97"; -#endif /* not lint */ - -#include "sendmail.h" -#include <errno.h> -#if NAMED_BIND -#include <resolv.h> - -extern int h_errno; -#endif - -#if HASSETUSERCONTEXT -# include <login_cap.h> -#endif - -#if SMTP -extern char SmtpError[]; -#endif - -/* -** SENDALL -- actually send all the messages. -** -** Parameters: -** e -- the envelope to send. -** mode -- the delivery mode to use. If SM_DEFAULT, use -** the current e->e_sendmode. -** -** Returns: -** none. -** -** Side Effects: -** Scans the send lists and sends everything it finds. -** Delivers any appropriate error messages. -** If we are running in a non-interactive mode, takes the -** appropriate action. -*/ - -void -sendall(e, mode) - ENVELOPE *e; - int mode; -{ - register ADDRESS *q; - char *owner; - int otherowners; - register ENVELOPE *ee; - ENVELOPE *splitenv = NULL; - int oldverbose = Verbose; - bool somedeliveries = FALSE, expensive = FALSE; - pid_t pid; - extern void sendenvelope(); - - /* - ** If we have had global, fatal errors, don't bother sending - ** the message at all if we are in SMTP mode. Local errors - ** (e.g., a single address failing) will still cause the other - ** addresses to be sent. - */ - - if (bitset(EF_FATALERRS, e->e_flags) && - (OpMode == MD_SMTP || OpMode == MD_DAEMON)) - { - e->e_flags |= EF_CLRQUEUE; - return; - } - - /* determine actual delivery mode */ - if (mode == SM_DEFAULT) - { - mode = e->e_sendmode; - if (mode != SM_VERIFY && mode != SM_DEFER && - shouldqueue(e->e_msgpriority, e->e_ctime)) - mode = SM_QUEUE; - } - - if (tTd(13, 1)) - { - extern void printenvflags(); - - printf("\n===== SENDALL: mode %c, id %s, e_from ", - mode, e->e_id); - printaddr(&e->e_from, FALSE); - printf("\te_flags = "); - printenvflags(e); - printf("sendqueue:\n"); - printaddr(e->e_sendqueue, TRUE); - } - - /* - ** Do any preprocessing necessary for the mode we are running. - ** Check to make sure the hop count is reasonable. - ** Delete sends to the sender in mailing lists. - */ - - CurEnv = e; - if (tTd(62, 1)) - checkfds(NULL); - - if (e->e_hopcount > MaxHopCount) - { - errno = 0; -#if QUEUE - queueup(e, mode == SM_QUEUE || mode == SM_DEFER); -#endif - e->e_flags |= EF_FATALERRS|EF_PM_NOTIFY|EF_CLRQUEUE; - syserr("554 Too many hops %d (%d max): from %s via %s, to %s", - e->e_hopcount, MaxHopCount, e->e_from.q_paddr, - RealHostName == NULL ? "localhost" : RealHostName, - e->e_sendqueue->q_paddr); - e->e_sendqueue->q_status = "5.4.6"; - return; - } - - /* - ** Do sender deletion. - ** - ** If the sender has the QQUEUEUP flag set, skip this. - ** This can happen if the name server is hosed when you - ** are trying to send mail. The result is that the sender - ** is instantiated in the queue as a recipient. - */ - - if (!bitset(EF_METOO, e->e_flags) && - !bitset(QQUEUEUP, e->e_from.q_flags)) - { - if (tTd(13, 5)) - { - printf("sendall: QDONTSEND "); - printaddr(&e->e_from, FALSE); - } - e->e_from.q_flags |= QDONTSEND; - (void) recipient(&e->e_from, &e->e_sendqueue, 0, e); - } - - /* - ** Handle alias owners. - ** - ** We scan up the q_alias chain looking for owners. - ** We discard owners that are the same as the return path. - */ - - for (q = e->e_sendqueue; q != NULL; q = q->q_next) - { - register struct address *a; - - for (a = q; a != NULL && a->q_owner == NULL; a = a->q_alias) - continue; - if (a != NULL) - q->q_owner = a->q_owner; - - if (q->q_owner != NULL && - !bitset(QDONTSEND, q->q_flags) && - strcmp(q->q_owner, e->e_from.q_paddr) == 0) - q->q_owner = NULL; - } - - if (tTd(13, 25)) - { - printf("\nAfter first owner pass, sendq =\n"); - printaddr(e->e_sendqueue, TRUE); - } - - owner = ""; - otherowners = 1; - while (owner != NULL && otherowners > 0) - { - if (tTd(13, 28)) - printf("owner = \"%s\", otherowners = %d\n", - owner, otherowners); - owner = NULL; - otherowners = bitset(EF_SENDRECEIPT, e->e_flags) ? 1 : 0; - - for (q = e->e_sendqueue; q != NULL; q = q->q_next) - { - if (tTd(13, 30)) - { - printf("Checking "); - printaddr(q, FALSE); - } - if (bitset(QDONTSEND, q->q_flags)) - { - if (tTd(13, 30)) - printf(" ... QDONTSEND\n"); - continue; - } - if (tTd(13, 29) && !tTd(13, 30)) - { - printf("Checking "); - printaddr(q, FALSE); - } - - if (q->q_owner != NULL) - { - if (owner == NULL) - { - if (tTd(13, 40)) - printf(" ... First owner = \"%s\"\n", - q->q_owner); - owner = q->q_owner; - } - else if (owner != q->q_owner) - { - if (strcmp(owner, q->q_owner) == 0) - { - if (tTd(13, 40)) - printf(" ... Same owner = \"%s\"\n", - owner); - - /* make future comparisons cheap */ - q->q_owner = owner; - } - else - { - if (tTd(13, 40)) - printf(" ... Another owner \"%s\"\n", - q->q_owner); - otherowners++; - } - owner = q->q_owner; - } - else if (tTd(13, 40)) - printf(" ... Same owner = \"%s\"\n", - owner); - } - else - { - if (tTd(13, 40)) - printf(" ... Null owner\n"); - otherowners++; - } - - /* - ** If this mailer is expensive, and if we don't - ** want to make connections now, just mark these - ** addresses and return. This is useful if we - ** want to batch connections to reduce load. This - ** will cause the messages to be queued up, and a - ** daemon will come along to send the messages later. - */ - - if (bitset(QBADADDR|QQUEUEUP, q->q_flags)) - { - if (tTd(13, 30)) - printf(" ... QBADADDR|QQUEUEUP\n"); - continue; - } - if (NoConnect && !Verbose && - bitnset(M_EXPENSIVE, q->q_mailer->m_flags)) - { - if (tTd(13, 30)) - printf(" ... expensive\n"); - q->q_flags |= QQUEUEUP; - expensive = TRUE; - } - else - { - if (tTd(13, 30)) - printf(" ... deliverable\n"); - somedeliveries = TRUE; - } - } - - if (owner != NULL && otherowners > 0) - { - extern HDR *copyheader(); - extern ADDRESS *copyqueue(); - extern void dup_queue_file __P((ENVELOPE *, ENVELOPE *, int)); - - /* - ** Split this envelope into two. - */ - - ee = (ENVELOPE *) xalloc(sizeof(ENVELOPE)); - *ee = *e; - ee->e_id = NULL; - (void) queuename(ee, '\0'); - - if (tTd(13, 1)) - printf("sendall: split %s into %s, owner = \"%s\", otherowners = %d\n", - e->e_id, ee->e_id, owner, otherowners); - - ee->e_header = copyheader(e->e_header); - ee->e_sendqueue = copyqueue(e->e_sendqueue); - ee->e_errorqueue = copyqueue(e->e_errorqueue); - ee->e_flags = e->e_flags & ~(EF_INQUEUE|EF_CLRQUEUE|EF_FATALERRS|EF_SENDRECEIPT|EF_RET_PARAM); - ee->e_flags |= EF_NORECEIPT; - setsender(owner, ee, NULL, '\0', TRUE); - if (tTd(13, 5)) - { - printf("sendall(split): QDONTSEND "); - printaddr(&ee->e_from, FALSE); - } - ee->e_from.q_flags |= QDONTSEND; - ee->e_dfp = NULL; - ee->e_xfp = NULL; - ee->e_errormode = EM_MAIL; - ee->e_sibling = splitenv; - splitenv = ee; - - for (q = e->e_sendqueue; q != NULL; q = q->q_next) - { - if (q->q_owner == owner) - { - q->q_flags |= QDONTSEND; - q->q_flags &= ~(QQUEUEUP|QBADADDR); - if (tTd(13, 6)) - printf("\t... stripping %s from original envelope\n", - q->q_paddr); - } - } - for (q = ee->e_sendqueue; q != NULL; q = q->q_next) - { - if (q->q_owner != owner) - { - q->q_flags |= QDONTSEND; - q->q_flags &= ~(QQUEUEUP|QBADADDR); - if (tTd(13, 6)) - printf("\t... dropping %s from cloned envelope\n", - q->q_paddr); - } - else - { - /* clear DSN parameters */ - q->q_flags &= ~(QHASNOTIFY|Q_PINGFLAGS); - q->q_flags |= DefaultNotify & ~QPINGONSUCCESS; - if (tTd(13, 6)) - printf("\t... moving %s to cloned envelope\n", - q->q_paddr); - } - } - - if (mode != SM_VERIFY && bitset(EF_HAS_DF, e->e_flags)) - dup_queue_file(e, ee, 'd'); - openxscript(ee); - if (LogLevel > 4) - sm_syslog(LOG_INFO, ee->e_id, - "clone %s, owner=%s", - e->e_id, owner); - } - } - - if (owner != NULL) - { - setsender(owner, e, NULL, '\0', TRUE); - if (tTd(13, 5)) - { - printf("sendall(owner): QDONTSEND "); - printaddr(&e->e_from, FALSE); - } - e->e_from.q_flags |= QDONTSEND; - e->e_errormode = EM_MAIL; - e->e_flags |= EF_NORECEIPT; - e->e_flags &= ~EF_FATALERRS; - } - - /* if nothing to be delivered, just queue up everything */ - if (!somedeliveries && mode != SM_QUEUE && mode != SM_DEFER && - mode != SM_VERIFY) - { - if (tTd(13, 29)) - printf("No deliveries: auto-queuing\n"); - mode = SM_QUEUE; - - /* treat this as a delivery in terms of counting tries */ - e->e_dtime = curtime(); - if (!expensive) - e->e_ntries++; - for (ee = splitenv; ee != NULL; ee = ee->e_sibling) - { - ee->e_dtime = curtime(); - if (!expensive) - ee->e_ntries++; - } - } - -# if QUEUE - if ((mode == SM_QUEUE || mode == SM_DEFER || mode == SM_FORK || - (mode != SM_VERIFY && SuperSafe)) && - (!bitset(EF_INQUEUE, e->e_flags) || splitenv != NULL)) - { - /* be sure everything is instantiated in the queue */ - queueup(e, mode == SM_QUEUE || mode == SM_DEFER); - for (ee = splitenv; ee != NULL; ee = ee->e_sibling) - queueup(ee, mode == SM_QUEUE || mode == SM_DEFER); - } -#endif /* QUEUE */ - - if (tTd(62, 10)) - checkfds("after envelope splitting"); - - /* - ** If we belong in background, fork now. - */ - - if (tTd(13, 20)) - { - printf("sendall: final mode = %c\n", mode); - if (tTd(13, 21)) - { - printf("\n================ Final Send Queue(s) =====================\n"); - printf("\n *** Envelope %s, e_from=%s ***\n", - e->e_id, e->e_from.q_paddr); - printaddr(e->e_sendqueue, TRUE); - for (ee = splitenv; ee != NULL; ee = ee->e_sibling) - { - printf("\n *** Envelope %s, e_from=%s ***\n", - ee->e_id, ee->e_from.q_paddr); - printaddr(ee->e_sendqueue, TRUE); - } - printf("==========================================================\n\n"); - } - } - switch (mode) - { - case SM_VERIFY: - Verbose = 2; - break; - - case SM_QUEUE: - case SM_DEFER: - queueonly: - if (e->e_nrcpts > 0) - e->e_flags |= EF_INQUEUE; - dropenvelope(e, FALSE); - for (ee = splitenv; ee != NULL; ee = ee->e_sibling) - { - if (ee->e_nrcpts > 0) - ee->e_flags |= EF_INQUEUE; - dropenvelope(ee, FALSE); - } - return; - - case SM_FORK: - if (e->e_xfp != NULL) - (void) fflush(e->e_xfp); - -# if !HASFLOCK - /* - ** Since fcntl locking has the interesting semantic that - ** the lock is owned by a process, not by an open file - ** descriptor, we have to unlock this envelope, and - ** then restart from scratch in the child. - */ - - unlockqueue(e); - for (ee = splitenv; ee != NULL; ee = ee->e_sibling) - unlockqueue(ee); - -# endif /* !HASFLOCK */ - - pid = fork(); - if (pid < 0) - { - goto queueonly; - } - else if (pid > 0) - { -# if HASFLOCK - /* be sure we leave the temp files to our child */ - /* can't call unlockqueue to avoid unlink of xfp */ - if (e->e_lockfp != NULL) - (void) xfclose(e->e_lockfp, "sendenvelope lockfp", e->e_id); - e->e_lockfp = NULL; - - /* close any random open files in the envelope */ - closexscript(e); - if (e->e_dfp != NULL) - (void) xfclose(e->e_dfp, "sendenvelope dfp", e->e_id); - e->e_dfp = NULL; - e->e_flags &= ~EF_HAS_DF; -# endif - - /* make sure the parent doesn't own the envelope */ - e->e_id = NULL; - - /* catch intermediate zombie */ - (void) waitfor(pid); - return; - } - - /* double fork to avoid zombies */ - pid = fork(); - if (pid > 0) - exit(EX_OK); - - /* be sure we are immune from the terminal */ - disconnect(2, e); - - /* prevent parent from waiting if there was an error */ - if (pid < 0) - { - e->e_flags |= EF_INQUEUE; - finis(); - } - - /* be sure to give error messages in child */ - QuickAbort = FALSE; - - /* - ** Close any cached connections. - ** - ** We don't send the QUIT protocol because the parent - ** still knows about the connection. - ** - ** This should only happen when delivering an error - ** message. - */ - - mci_flush(FALSE, NULL); - -# if HASFLOCK - break; -# else - - /* - ** Now reacquire and run the various queue files. - */ - - for (ee = splitenv; ee != NULL; ee = e->e_sibling) - (void) dowork(ee->e_id, FALSE, FALSE, ee); - (void) dowork(e->e_id, FALSE, FALSE, e); - finis(); -# endif /* !HASFLOCK */ - } - - sendenvelope(e, mode); - dropenvelope(e, TRUE); - for (ee = splitenv; ee != NULL; ee = ee->e_sibling) - { - CurEnv = ee; - if (mode != SM_VERIFY) - openxscript(ee); - sendenvelope(ee, mode); - dropenvelope(ee, TRUE); - } - CurEnv = e; - - Verbose = oldverbose; - if (mode == SM_FORK) - finis(); -} - -void -sendenvelope(e, mode) - register ENVELOPE *e; - char mode; -{ - register ADDRESS *q; - bool didany; - - if (tTd(13, 10)) - printf("sendenvelope(%s) e_flags=0x%lx\n", - e->e_id == NULL ? "[NOQUEUE]" : e->e_id, - e->e_flags); - if (LogLevel > 80) - sm_syslog(LOG_DEBUG, e->e_id, - "sendenvelope, flags=0x%x", - e->e_flags); - - /* - ** If we have had global, fatal errors, don't bother sending - ** the message at all if we are in SMTP mode. Local errors - ** (e.g., a single address failing) will still cause the other - ** addresses to be sent. - */ - - if (bitset(EF_FATALERRS, e->e_flags) && - (OpMode == MD_SMTP || OpMode == MD_DAEMON)) - { - e->e_flags |= EF_CLRQUEUE; - return; - } - - /* - ** Run through the list and send everything. - ** - ** Set EF_GLOBALERRS so that error messages during delivery - ** result in returned mail. - */ - - e->e_nsent = 0; - e->e_flags |= EF_GLOBALERRS; - define(macid("{envid}", NULL), e->e_envid, e); - define(macid("{bodytype}", NULL), e->e_bodytype, e); - didany = FALSE; - - /* now run through the queue */ - for (q = e->e_sendqueue; q != NULL; q = q->q_next) - { -#if XDEBUG - char wbuf[MAXNAME + 20]; - - (void) snprintf(wbuf, sizeof wbuf, "sendall(%.*s)", - MAXNAME, q->q_paddr); - checkfd012(wbuf); -#endif - if (mode == SM_VERIFY) - { - e->e_to = q->q_paddr; - if (!bitset(QDONTSEND|QBADADDR, q->q_flags)) - { - if (q->q_host != NULL && q->q_host[0] != '\0') - message("deliverable: mailer %s, host %s, user %s", - q->q_mailer->m_name, - q->q_host, - q->q_user); - else - message("deliverable: mailer %s, user %s", - q->q_mailer->m_name, - q->q_user); - } - } - else if (!bitset(QDONTSEND|QBADADDR, q->q_flags)) - { - extern int deliver __P((ENVELOPE *, ADDRESS *)); - -# if QUEUE - /* - ** Checkpoint the send list every few addresses - */ - - if (e->e_nsent >= CheckpointInterval) - { - queueup(e, FALSE); - e->e_nsent = 0; - } -# endif /* QUEUE */ - (void) deliver(e, q); - didany = TRUE; - } - } - if (didany) - { - e->e_dtime = curtime(); - e->e_ntries++; - } - -#if XDEBUG - checkfd012("end of sendenvelope"); -#endif -} - /* -** DUP_QUEUE_FILE -- duplicate a queue file into a split queue -** -** Parameters: -** e -- the existing envelope -** ee -- the new envelope -** type -- the queue file type (e.g., 'd') -** -** Returns: -** none -*/ - -void -dup_queue_file(e, ee, type) - struct envelope *e, *ee; - int type; -{ - char f1buf[MAXQFNAME], f2buf[MAXQFNAME]; - - ee->e_dfp = NULL; - ee->e_xfp = NULL; - snprintf(f1buf, sizeof f1buf, "%s", queuename(e, type)); - snprintf(f2buf, sizeof f2buf, "%s", queuename(ee, type)); - if (link(f1buf, f2buf) < 0) - { - int saverrno = errno; - - syserr("sendall: link(%s, %s)", f1buf, f2buf); - if (saverrno == EEXIST) - { - if (unlink(f2buf) < 0) - { - syserr("!sendall: unlink(%s): permanent", - f2buf); - /*NOTREACHED*/ - } - if (link(f1buf, f2buf) < 0) - { - syserr("!sendall: link(%s, %s): permanent", - f1buf, f2buf); - /*NOTREACHED*/ - } - } - } -} - /* -** DOFORK -- do a fork, retrying a couple of times on failure. -** -** This MUST be a macro, since after a vfork we are running -** two processes on the same stack!!! -** -** Parameters: -** none. -** -** Returns: -** From a macro??? You've got to be kidding! -** -** Side Effects: -** Modifies the ==> LOCAL <== variable 'pid', leaving: -** pid of child in parent, zero in child. -** -1 on unrecoverable error. -** -** Notes: -** I'm awfully sorry this looks so awful. That's -** vfork for you..... -*/ - -# define NFORKTRIES 5 - -# ifndef FORK -# define FORK fork -# endif - -# define DOFORK(fORKfN) \ -{\ - register int i;\ -\ - for (i = NFORKTRIES; --i >= 0; )\ - {\ - pid = fORKfN();\ - if (pid >= 0)\ - break;\ - if (i > 0)\ - sleep((unsigned) NFORKTRIES - i);\ - }\ -} - /* -** DOFORK -- simple fork interface to DOFORK. -** -** Parameters: -** none. -** -** Returns: -** pid of child in parent. -** zero in child. -** -1 on error. -** -** Side Effects: -** returns twice, once in parent and once in child. -*/ - -int -dofork() -{ - register pid_t pid = -1; - - DOFORK(fork); - return (pid); -} - /* -** DELIVER -- Deliver a message to a list of addresses. -** -** This routine delivers to everyone on the same host as the -** user on the head of the list. It is clever about mailers -** that don't handle multiple users. It is NOT guaranteed -** that it will deliver to all these addresses however -- so -** deliver should be called once for each address on the -** list. -** -** Parameters: -** e -- the envelope to deliver. -** firstto -- head of the address list to deliver to. -** -** Returns: -** zero -- successfully delivered. -** else -- some failure, see ExitStat for more info. -** -** Side Effects: -** The standard input is passed off to someone. -*/ - -#ifndef NO_UID -# define NO_UID -1 -#endif -#ifndef NO_GID -# define NO_GID -1 -#endif - -int -deliver(e, firstto) - register ENVELOPE *e; - ADDRESS *firstto; -{ - char *host; /* host being sent to */ - char *user; /* user being sent to */ - char **pvp; - register char **mvp; - register char *p; - register MAILER *m; /* mailer for this recipient */ - ADDRESS *volatile ctladdr; - ADDRESS *volatile contextaddr = NULL; - register MCI *volatile mci; - register ADDRESS *to = firstto; - volatile bool clever = FALSE; /* running user smtp to this mailer */ - ADDRESS *volatile tochain = NULL; /* users chain in this mailer call */ - int rcode; /* response code */ - char *firstsig; /* signature of firstto */ - pid_t pid = -1; - char *volatile curhost; - register volatile u_short port = 0; - time_t xstart; - bool suidwarn; - bool anyok; /* at least one address was OK */ - bool goodmxfound = FALSE; /* at least one MX was OK */ - int mpvect[2]; - int rpvect[2]; - char *pv[MAXPV+1]; - char tobuf[TOBUFSIZE]; /* text line of to people */ - char buf[MAXNAME + 1]; - char rpathbuf[MAXNAME + 1]; /* translated return path */ - extern int checkcompat(); - extern void markfailure __P((ENVELOPE *, ADDRESS *, MCI *, int)); - - errno = 0; - if (bitset(QDONTSEND|QBADADDR|QQUEUEUP, to->q_flags)) - return (0); - - suidwarn = geteuid() == 0; - -#if NAMED_BIND - /* unless interactive, try twice, over a minute */ - if (OpMode == MD_DAEMON || OpMode == MD_SMTP) - { - _res.retrans = 30; - _res.retry = 2; - } -#endif - - m = to->q_mailer; - host = to->q_host; - CurEnv = e; /* just in case */ - e->e_statmsg = NULL; -#if SMTP - SmtpError[0] = '\0'; -#endif - xstart = curtime(); - - if (tTd(10, 1)) - printf("\n--deliver, id=%s, mailer=%s, host=`%s', first user=`%s'\n", - e->e_id, m->m_name, host, to->q_user); - if (tTd(10, 100)) - printopenfds(FALSE); - - /* - ** Do initial argv setup. - ** Insert the mailer name. Notice that $x expansion is - ** NOT done on the mailer name. Then, if the mailer has - ** a picky -f flag, we insert it as appropriate. This - ** code does not check for 'pv' overflow; this places a - ** manifest lower limit of 4 for MAXPV. - ** The from address rewrite is expected to make - ** the address relative to the other end. - */ - - /* rewrite from address, using rewriting rules */ - rcode = EX_OK; - if (bitnset(M_UDBENVELOPE, e->e_from.q_mailer->m_flags)) - p = e->e_sender; - else - p = e->e_from.q_paddr; - p = remotename(p, m, RF_SENDERADDR|RF_CANONICAL, &rcode, e); - if (strlen(p) >= (SIZE_T) sizeof rpathbuf) - { - p = shortenstring(p, 203); - syserr("remotename: huge return %s", p); - } - snprintf(rpathbuf, sizeof rpathbuf, "%s", p); - define('g', rpathbuf, e); /* translated return path */ - define('h', host, e); /* to host */ - Errors = 0; - pvp = pv; - *pvp++ = m->m_argv[0]; - - /* insert -f or -r flag as appropriate */ - if (FromFlag && (bitnset(M_FOPT, m->m_flags) || bitnset(M_ROPT, m->m_flags))) - { - if (bitnset(M_FOPT, m->m_flags)) - *pvp++ = "-f"; - else - *pvp++ = "-r"; - *pvp++ = newstr(rpathbuf); - } - - /* - ** Append the other fixed parts of the argv. These run - ** up to the first entry containing "$u". There can only - ** be one of these, and there are only a few more slots - ** in the pv after it. - */ - - for (mvp = m->m_argv; (p = *++mvp) != NULL; ) - { - /* can't use strchr here because of sign extension problems */ - while (*p != '\0') - { - if ((*p++ & 0377) == MACROEXPAND) - { - if (*p == 'u') - break; - } - } - - if (*p != '\0') - break; - - /* this entry is safe -- go ahead and process it */ - expand(*mvp, buf, sizeof buf, e); - *pvp++ = newstr(buf); - if (pvp >= &pv[MAXPV - 3]) - { - syserr("554 Too many parameters to %s before $u", pv[0]); - return (-1); - } - } - - /* - ** If we have no substitution for the user name in the argument - ** list, we know that we must supply the names otherwise -- and - ** SMTP is the answer!! - */ - - if (*mvp == NULL) - { - /* running SMTP */ -# if SMTP - clever = TRUE; - *pvp = NULL; -# else /* SMTP */ - /* oops! we don't implement SMTP */ - syserr("554 SMTP style mailer not implemented"); - return (EX_SOFTWARE); -# endif /* SMTP */ - } - - /* - ** At this point *mvp points to the argument with $u. We - ** run through our address list and append all the addresses - ** we can. If we run out of space, do not fret! We can - ** always send another copy later. - */ - - tobuf[0] = '\0'; - e->e_to = tobuf; - ctladdr = NULL; - firstsig = hostsignature(firstto->q_mailer, firstto->q_host, e); - for (; to != NULL; to = to->q_next) - { - /* avoid sending multiple recipients to dumb mailers */ - if (tobuf[0] != '\0' && !bitnset(M_MUSER, m->m_flags)) - break; - - /* if already sent or not for this host, don't send */ - if (bitset(QDONTSEND|QBADADDR|QQUEUEUP, to->q_flags) || - to->q_mailer != firstto->q_mailer || - strcmp(hostsignature(to->q_mailer, to->q_host, e), firstsig) != 0) - continue; - - /* avoid overflowing tobuf */ - if (sizeof tobuf < (strlen(to->q_paddr) + strlen(tobuf) + 2)) - break; - - if (tTd(10, 1)) - { - printf("\nsend to "); - printaddr(to, FALSE); - } - - /* compute effective uid/gid when sending */ - if (bitnset(M_RUNASRCPT, to->q_mailer->m_flags)) - contextaddr = ctladdr = getctladdr(to); - - if (tTd(10, 2)) - { - printf("ctladdr="); - printaddr(ctladdr, FALSE); - } - - user = to->q_user; - e->e_to = to->q_paddr; - if (tTd(10, 5)) - { - printf("deliver: QDONTSEND "); - printaddr(to, FALSE); - } - to->q_flags |= QDONTSEND; - - /* - ** Check to see that these people are allowed to - ** talk to each other. - */ - - if (m->m_maxsize != 0 && e->e_msgsize > m->m_maxsize) - { - e->e_flags |= EF_NO_BODY_RETN; - to->q_status = "5.2.3"; - usrerr("552 Message is too large; %ld bytes max", m->m_maxsize); - markfailure(e, to, NULL, EX_UNAVAILABLE); - giveresponse(EX_UNAVAILABLE, m, NULL, ctladdr, xstart, e); - continue; - } -#if NAMED_BIND - h_errno = 0; -#endif - - /* do config file checking of compatibility */ - rcode = rscheck("check_compat", - e->e_from.q_paddr, to->q_paddr, e); - if (rcode == EX_OK) - { - /* do in-code checking */ - rcode = checkcompat(to, e); - } - if (rcode != EX_OK) - { - markfailure(e, to, NULL, rcode); - giveresponse(rcode, m, NULL, ctladdr, xstart, e); - continue; - } - - /* - ** Strip quote bits from names if the mailer is dumb - ** about them. - */ - - if (bitnset(M_STRIPQ, m->m_flags)) - { - stripquotes(user); - stripquotes(host); - } - - /* hack attack -- delivermail compatibility */ - if (m == ProgMailer && *user == '|') - user++; - - /* - ** If an error message has already been given, don't - ** bother to send to this address. - ** - ** >>>>>>>>>> This clause assumes that the local mailer - ** >> NOTE >> cannot do any further aliasing; that - ** >>>>>>>>>> function is subsumed by sendmail. - */ - - if (bitset(QBADADDR|QQUEUEUP, to->q_flags)) - continue; - - /* - ** See if this user name is "special". - ** If the user name has a slash in it, assume that this - ** is a file -- send it off without further ado. Note - ** that this type of addresses is not processed along - ** with the others, so we fudge on the To person. - */ - - if (strcmp(m->m_mailer, "[FILE]") == 0) - { - rcode = mailfile(user, ctladdr, SFF_CREAT, e); - giveresponse(rcode, m, NULL, ctladdr, xstart, e); - e->e_nsent++; - if (rcode == EX_OK) - { - to->q_flags |= QSENT; - markstats(e, to); - if (bitnset(M_LOCALMAILER, m->m_flags) && - bitset(QPINGONSUCCESS, to->q_flags)) - { - to->q_flags |= QDELIVERED; - to->q_status = "2.1.5"; - fprintf(e->e_xfp, "%s... Successfully delivered\n", - to->q_paddr); - } - } - to->q_statdate = curtime(); - continue; - } - - /* - ** Address is verified -- add this user to mailer - ** argv, and add it to the print list of recipients. - */ - - /* link together the chain of recipients */ - to->q_tchain = tochain; - tochain = to; - - /* create list of users for error messages */ - (void) strcat(tobuf, ","); - (void) strcat(tobuf, to->q_paddr); - define('u', user, e); /* to user */ - p = to->q_home; - if (p == NULL && ctladdr != NULL) - p = ctladdr->q_home; - define('z', p, e); /* user's home */ - - /* - ** Expand out this user into argument list. - */ - - if (!clever) - { - expand(*mvp, buf, sizeof buf, e); - *pvp++ = newstr(buf); - if (pvp >= &pv[MAXPV - 2]) - { - /* allow some space for trailing parms */ - break; - } - } - } - - /* see if any addresses still exist */ - if (tobuf[0] == '\0') - { - define('g', (char *) NULL, e); - return (0); - } - - /* print out messages as full list */ - e->e_to = tobuf + 1; - - /* - ** Fill out any parameters after the $u parameter. - */ - - while (!clever && *++mvp != NULL) - { - expand(*mvp, buf, sizeof buf, e); - *pvp++ = newstr(buf); - if (pvp >= &pv[MAXPV]) - syserr("554 deliver: pv overflow after $u for %s", pv[0]); - } - *pvp++ = NULL; - - /* - ** Call the mailer. - ** The argument vector gets built, pipes - ** are created as necessary, and we fork & exec as - ** appropriate. - ** If we are running SMTP, we just need to clean up. - */ - - /*XXX this seems a bit wierd */ - if (ctladdr == NULL && m != ProgMailer && m != FileMailer && - bitset(QGOODUID, e->e_from.q_flags)) - ctladdr = &e->e_from; - -#if NAMED_BIND - if (ConfigLevel < 2) - _res.options &= ~(RES_DEFNAMES | RES_DNSRCH); /* XXX */ -#endif - - if (tTd(11, 1)) - { - printf("openmailer:"); - printav(pv); - } - errno = 0; -#if NAMED_BIND - h_errno = 0; -#endif - - CurHostName = NULL; - - /* - ** Deal with the special case of mail handled through an IPC - ** connection. - ** In this case we don't actually fork. We must be - ** running SMTP for this to work. We will return a - ** zero pid to indicate that we are running IPC. - ** We also handle a debug version that just talks to stdin/out. - */ - - curhost = NULL; - SmtpPhase = NULL; - mci = NULL; - -#if XDEBUG - { - char wbuf[MAXLINE]; - - /* make absolutely certain 0, 1, and 2 are in use */ - snprintf(wbuf, sizeof wbuf, "%s... openmailer(%s)", - shortenstring(e->e_to, 203), m->m_name); - checkfd012(wbuf); - } -#endif - - /* check for 8-bit available */ - if (bitset(EF_HAS8BIT, e->e_flags) && - bitnset(M_7BITS, m->m_flags) && - (bitset(EF_DONT_MIME, e->e_flags) || - !(bitset(MM_MIME8BIT, MimeMode) || - (bitset(EF_IS_MIME, e->e_flags) && - bitset(MM_CVTMIME, MimeMode))))) - { - usrerr("554 Cannot send 8-bit data to 7-bit destination"); - rcode = EX_DATAERR; - e->e_status = "5.6.3"; - goto give_up; - } - - if (tTd(62, 8)) - checkfds("before delivery"); - - /* check for Local Person Communication -- not for mortals!!! */ - if (strcmp(m->m_mailer, "[LPC]") == 0) - { - mci = (MCI *) xalloc(sizeof *mci); - bzero((char *) mci, sizeof *mci); - mci->mci_in = stdin; - mci->mci_out = stdout; - mci->mci_state = clever ? MCIS_OPENING : MCIS_OPEN; - mci->mci_mailer = m; - } - else if (strcmp(m->m_mailer, "[IPC]") == 0 || - strcmp(m->m_mailer, "[TCP]") == 0) - { -#if DAEMON - register int i; - - if (pv[0] == NULL || pv[1] == NULL || pv[1][0] == '\0') - { - syserr("null host name for %s mailer", m->m_mailer); - rcode = EX_CONFIG; - goto give_up; - } - - CurHostName = pv[1]; - curhost = hostsignature(m, pv[1], e); - - if (curhost == NULL || curhost[0] == '\0') - { - syserr("null host signature for %s", pv[1]); - rcode = EX_CONFIG; - goto give_up; - } - - if (!clever) - { - syserr("554 non-clever IPC"); - rcode = EX_CONFIG; - goto give_up; - } - if (pv[2] != NULL) - { - port = htons(atoi(pv[2])); - if (port == 0) - { - struct servent *sp = getservbyname(pv[2], "tcp"); - - if (sp == NULL) - syserr("Service %s unknown", pv[2]); - else - port = sp->s_port; - } - } -tryhost: - while (*curhost != '\0') - { - register char *p; - static char hostbuf[MAXNAME + 1]; - extern int makeconnection __P((char *, u_short, MCI *, ENVELOPE *)); - - /* pull the next host from the signature */ - p = strchr(curhost, ':'); - if (p == NULL) - p = (char *) &curhost[strlen(curhost)]; - if (p == curhost) - { - syserr("deliver: null host name in signature"); - curhost++; - continue; - } - i = p - curhost; - if (i >= sizeof hostbuf) - i = sizeof hostbuf - 1; - strncpy(hostbuf, curhost, i); - hostbuf[i] = '\0'; - if (*p != '\0') - p++; - curhost = p; - - /* see if we already know that this host is fried */ - CurHostName = hostbuf; - mci = mci_get(hostbuf, m); - if (mci->mci_state != MCIS_CLOSED) - { - if (tTd(11, 1)) - { - printf("openmailer: "); - mci_dump(mci, FALSE); - } - CurHostName = mci->mci_host; - message("Using cached %sSMTP connection to %s via %s...", - bitset(MCIF_ESMTP, mci->mci_flags) ? "E" : "", - hostbuf, m->m_name); - break; - } - mci->mci_mailer = m; - if (mci->mci_exitstat != EX_OK) - { - if (mci->mci_exitstat == EX_TEMPFAIL) - goodmxfound = TRUE; - continue; - } - - if (mci_lock_host(mci) != EX_OK) - { - mci_setstat(mci, EX_TEMPFAIL, "4.4.5", NULL); - goodmxfound = TRUE; - continue; - } - - /* try the connection */ - setproctitle("%s %s: %s", e->e_id, hostbuf, "user open"); - if (port == 0) - message("Connecting to %s via %s...", - hostbuf, m->m_name); - else - message("Connecting to %s port %d via %s...", - hostbuf, ntohs(port), m->m_name); - i = makeconnection(hostbuf, port, mci, e); - mci->mci_lastuse = curtime(); - mci->mci_exitstat = i; - mci->mci_errno = errno; -#if NAMED_BIND - mci->mci_herrno = h_errno; -#endif - if (i == EX_OK) - { - goodmxfound = TRUE; - mci->mci_state = MCIS_OPENING; - mci_cache(mci); - if (TrafficLogFile != NULL) - fprintf(TrafficLogFile, "%05d === CONNECT %s\n", - (int) getpid(), hostbuf); - break; - } - else - { - if (tTd(11, 1)) - printf("openmailer: makeconnection => stat=%d, errno=%d\n", - i, errno); - if (i == EX_TEMPFAIL) - goodmxfound = TRUE; - mci_unlock_host(mci); - } - - /* enter status of this host */ - setstat(i); - - /* should print some message here for -v mode */ - } - if (mci == NULL) - { - syserr("deliver: no host name"); - rcode = EX_SOFTWARE; - goto give_up; - } - mci->mci_pid = 0; -#else /* no DAEMON */ - syserr("554 openmailer: no IPC"); - if (tTd(11, 1)) - printf("openmailer: NULL\n"); - rcode = EX_UNAVAILABLE; - goto give_up; -#endif /* DAEMON */ - } - else - { - /* flush any expired connections */ - (void) mci_scan(NULL); - - /* announce the connection to verbose listeners */ - if (host == NULL || host[0] == '\0') - message("Connecting to %s...", m->m_name); - else - message("Connecting to %s via %s...", host, m->m_name); - if (TrafficLogFile != NULL) - { - char **av; - - fprintf(TrafficLogFile, "%05d === EXEC", (int) getpid()); - for (av = pv; *av != NULL; av++) - fprintf(TrafficLogFile, " %s", *av); - fprintf(TrafficLogFile, "\n"); - } - -#if XDEBUG - checkfd012("before creating mail pipe"); -#endif - - /* create a pipe to shove the mail through */ - if (pipe(mpvect) < 0) - { - syserr("%s... openmailer(%s): pipe (to mailer)", - shortenstring(e->e_to, 203), m->m_name); - if (tTd(11, 1)) - printf("openmailer: NULL\n"); - rcode = EX_OSERR; - goto give_up; - } - -#if XDEBUG - /* make sure we didn't get one of the standard I/O files */ - if (mpvect[0] < 3 || mpvect[1] < 3) - { - syserr("%s... openmailer(%s): bogus mpvect %d %d", - shortenstring(e->e_to, 203), m->m_name, - mpvect[0], mpvect[1]); - printopenfds(TRUE); - if (tTd(11, 1)) - printf("openmailer: NULL\n"); - rcode = EX_OSERR; - goto give_up; - } - - /* make sure system call isn't dead meat */ - checkfdopen(mpvect[0], "mpvect[0]"); - checkfdopen(mpvect[1], "mpvect[1]"); - if (mpvect[0] == mpvect[1] || - (e->e_lockfp != NULL && - (mpvect[0] == fileno(e->e_lockfp) || - mpvect[1] == fileno(e->e_lockfp)))) - { - if (e->e_lockfp == NULL) - syserr("%s... openmailer(%s): overlapping mpvect %d %d", - shortenstring(e->e_to, 203), m->m_name, - mpvect[0], mpvect[1]); - else - syserr("%s... openmailer(%s): overlapping mpvect %d %d, lockfp = %d", - shortenstring(e->e_to, 203), m->m_name, - mpvect[0], mpvect[1], fileno(e->e_lockfp)); - } -#endif - - /* if this mailer speaks smtp, create a return pipe */ -#if SMTP - if (clever) - { - if (pipe(rpvect) < 0) - { - syserr("%s... openmailer(%s): pipe (from mailer)", - shortenstring(e->e_to, 203), m->m_name); - (void) close(mpvect[0]); - (void) close(mpvect[1]); - if (tTd(11, 1)) - printf("openmailer: NULL\n"); - rcode = EX_OSERR; - goto give_up; - } -# if XDEBUG - checkfdopen(rpvect[0], "rpvect[0]"); - checkfdopen(rpvect[1], "rpvect[1]"); -# endif - } -#endif - - /* - ** Actually fork the mailer process. - ** DOFORK is clever about retrying. - ** - ** Dispose of SIGCHLD signal catchers that may be laying - ** around so that endmail will get it. - */ - - if (e->e_xfp != NULL) - (void) fflush(e->e_xfp); /* for debugging */ - (void) fflush(stdout); -# ifdef SIGCHLD - (void) setsignal(SIGCHLD, SIG_DFL); -# endif /* SIGCHLD */ - DOFORK(FORK); - /* pid is set by DOFORK */ - if (pid < 0) - { - /* failure */ - syserr("%s... openmailer(%s): cannot fork", - shortenstring(e->e_to, 203), m->m_name); - (void) close(mpvect[0]); - (void) close(mpvect[1]); -#if SMTP - if (clever) - { - (void) close(rpvect[0]); - (void) close(rpvect[1]); - } -#endif - if (tTd(11, 1)) - printf("openmailer: NULL\n"); - rcode = EX_OSERR; - goto give_up; - } - else if (pid == 0) - { - int i; - int saveerrno; - int new_euid = NO_UID; - int new_ruid = NO_UID; - int new_gid = NO_GID; - struct stat stb; - extern int DtableSize; - - if (e->e_lockfp != NULL) - (void) close(fileno(e->e_lockfp)); - - /* child -- set up input & exec mailer */ - (void) setsignal(SIGINT, SIG_IGN); - (void) setsignal(SIGHUP, SIG_IGN); - (void) setsignal(SIGTERM, SIG_DFL); - - if (m != FileMailer || stat(tochain->q_user, &stb) < 0) - stb.st_mode = 0; - -#if HASSETUSERCONTEXT - /* - ** Set user resources. - */ - - if (contextaddr != NULL) - { - struct passwd *pwd; - - if (contextaddr->q_ruser != NULL) - pwd = sm_getpwnam(contextaddr->q_ruser); - else - pwd = sm_getpwnam(contextaddr->q_user); - if (pwd != NULL) - (void) setusercontext(NULL, - pwd, pwd->pw_uid, - LOGIN_SETRESOURCES|LOGIN_SETPRIORITY); - } -#endif - - /* tweak niceness */ - if (m->m_nice != 0) - nice(m->m_nice); - - /* reset group id */ - if (bitnset(M_SPECIFIC_UID, m->m_flags)) - new_gid = m->m_gid; - else if (bitset(S_ISGID, stb.st_mode)) - new_gid = stb.st_gid; - else if (ctladdr != NULL && ctladdr->q_gid != 0) - { - if (!DontInitGroups) - (void) initgroups(ctladdr->q_ruser != NULL ? - ctladdr->q_ruser : ctladdr->q_user, - ctladdr->q_gid); - new_gid = ctladdr->q_gid; - } - else - { - if (!DontInitGroups) - (void) initgroups(DefUser, DefGid); - if (m->m_gid == 0) - new_gid = DefGid; - else - new_gid = m->m_gid; - } - if (new_gid != NO_GID && setgid(new_gid) < 0 && suidwarn) - syserr("openmailer: setgid(%ld) failed", - (long) new_gid); - - /* reset user id */ - endpwent(); - if (bitnset(M_SPECIFIC_UID, m->m_flags)) - new_euid = m->m_uid; - if (bitset(S_ISUID, stb.st_mode)) - new_ruid = stb.st_uid; - else if (ctladdr != NULL && ctladdr->q_uid != 0) - new_ruid = ctladdr->q_uid; - else if (m->m_uid != 0) - new_ruid = m->m_uid; - else if (!bitnset(M_SPECIFIC_UID, m->m_flags)) - new_ruid = DefUid; - if (new_euid != NO_UID) - { - vendor_set_uid(new_euid); -#if USESETEUID - if (seteuid(new_euid) < 0 && suidwarn) - syserr("openmailer: seteuid(%ld) failed", - (long) new_euid); -#else -# if HASSETREUID - if (setreuid(new_ruid, new_euid) < 0 && suidwarn) - syserr("openmailer: setreuid(%ld, %ld) failed", - (long) new_ruid, (long) new_euid); -# else - if (new_euid != geteuid() && setuid(new_euid) < 0 && suidwarn) - syserr("openmailer: setuid(%ld) failed", - (long) new_euid); -# endif -#endif - } - else if (new_ruid != NO_UID) - { - vendor_set_uid(new_ruid); - if (setuid(new_ruid) < 0 && suidwarn) - syserr("openmailer: setuid(%ld) failed", - (long) new_ruid); - } - - if (tTd(11, 2)) - printf("openmailer: running as r/euid=%d/%d\n", - (int) getuid(), (int) geteuid()); - - /* move into some "safe" directory */ - if (m->m_execdir != NULL) - { - char *p, *q; - char buf[MAXLINE + 1]; - - for (p = m->m_execdir; p != NULL; p = q) - { - q = strchr(p, ':'); - if (q != NULL) - *q = '\0'; - expand(p, buf, sizeof buf, e); - if (q != NULL) - *q++ = ':'; - if (tTd(11, 20)) - printf("openmailer: trydir %s\n", - buf); - if (buf[0] != '\0' && chdir(buf) >= 0) - break; - } - } - - /* arrange to filter std & diag output of command */ -#if SMTP - if (clever) - { - (void) close(rpvect[0]); - if (dup2(rpvect[1], STDOUT_FILENO) < 0) - { - syserr("%s... openmailer(%s): cannot dup pipe %d for stdout", - shortenstring(e->e_to, 203), - m->m_name, rpvect[1]); - _exit(EX_OSERR); - } - (void) close(rpvect[1]); - } - else if (OpMode == MD_SMTP || OpMode == MD_DAEMON || - HoldErrs || DisConnected) - { - /* put mailer output in transcript */ - if (dup2(fileno(e->e_xfp), STDOUT_FILENO) < 0) - { - syserr("%s... openmailer(%s): cannot dup xscript %d for stdout", - shortenstring(e->e_to, 203), - m->m_name, fileno(e->e_xfp)); - _exit(EX_OSERR); - } - } -#endif - if (dup2(STDOUT_FILENO, STDERR_FILENO) < 0) - { - syserr("%s... openmailer(%s): cannot dup stdout for stderr", - shortenstring(e->e_to, 203), m->m_name); - _exit(EX_OSERR); - } - - /* arrange to get standard input */ - (void) close(mpvect[1]); - if (dup2(mpvect[0], STDIN_FILENO) < 0) - { - syserr("%s... openmailer(%s): cannot dup pipe %d for stdin", - shortenstring(e->e_to, 203), - m->m_name, mpvect[0]); - _exit(EX_OSERR); - } - (void) close(mpvect[0]); - - /* arrange for all the files to be closed */ - for (i = 3; i < DtableSize; i++) - { - register int j; - - if ((j = fcntl(i, F_GETFD, 0)) != -1) - (void) fcntl(i, F_SETFD, j | 1); - } - - /* run disconnected from terminal */ - (void) setsid(); - - /* try to execute the mailer */ - execve(m->m_mailer, (ARGV_T) pv, (ARGV_T) UserEnviron); - saveerrno = errno; - syserr("Cannot exec %s", m->m_mailer); - if (bitnset(M_LOCALMAILER, m->m_flags) || - transienterror(saveerrno)) - _exit(EX_OSERR); - _exit(EX_UNAVAILABLE); - } - - /* - ** Set up return value. - */ - - mci = (MCI *) xalloc(sizeof *mci); - bzero((char *) mci, sizeof *mci); - mci->mci_mailer = m; - mci->mci_state = clever ? MCIS_OPENING : MCIS_OPEN; - mci->mci_pid = pid; - (void) close(mpvect[0]); - mci->mci_out = fdopen(mpvect[1], "w"); - if (mci->mci_out == NULL) - { - syserr("deliver: cannot create mailer output channel, fd=%d", - mpvect[1]); - (void) close(mpvect[1]); -#if SMTP - if (clever) - { - (void) close(rpvect[0]); - (void) close(rpvect[1]); - } -#endif - rcode = EX_OSERR; - goto give_up; - } -#if SMTP - if (clever) - { - (void) close(rpvect[1]); - mci->mci_in = fdopen(rpvect[0], "r"); - if (mci->mci_in == NULL) - { - syserr("deliver: cannot create mailer input channel, fd=%d", - mpvect[1]); - (void) close(rpvect[0]); - fclose(mci->mci_out); - mci->mci_out = NULL; - rcode = EX_OSERR; - goto give_up; - } - } - else -#endif - { - mci->mci_flags |= MCIF_TEMP; - mci->mci_in = NULL; - } - } - - /* - ** If we are in SMTP opening state, send initial protocol. - */ - - if (bitnset(M_7BITS, m->m_flags) && - (!clever || mci->mci_state == MCIS_OPENING)) - mci->mci_flags |= MCIF_7BIT; -#if SMTP - if (clever && mci->mci_state != MCIS_CLOSED) - { - extern void smtpinit __P((MAILER *, MCI *, ENVELOPE *)); - - smtpinit(m, mci, e); - } -#endif - - /* clear out per-message flags from connection structure */ - mci->mci_flags &= ~(MCIF_CVT7TO8|MCIF_CVT8TO7); - - if (bitset(EF_HAS8BIT, e->e_flags) && - !bitset(EF_DONT_MIME, e->e_flags) && - bitnset(M_7BITS, m->m_flags)) - mci->mci_flags |= MCIF_CVT8TO7; - -#if MIME7TO8 - if (bitnset(M_MAKE8BIT, m->m_flags) && - !bitset(MCIF_7BIT, mci->mci_flags) && - (p = hvalue("Content-Transfer-Encoding", e->e_header)) != NULL && - (strcasecmp(p, "quoted-printable") == 0 || - strcasecmp(p, "base64") == 0) && - (p = hvalue("Content-Type", e->e_header)) != NULL) - { - /* may want to convert 7 -> 8 */ - /* XXX should really parse it here -- and use a class XXX */ - if (strncasecmp(p, "text/plain", 10) == 0 && - (p[10] == '\0' || p[10] == ' ' || p[10] == ';')) - mci->mci_flags |= MCIF_CVT7TO8; - } -#endif - - if (tTd(11, 1)) - { - printf("openmailer: "); - mci_dump(mci, FALSE); - } - - if (mci->mci_state != MCIS_OPEN) - { - /* couldn't open the mailer */ - rcode = mci->mci_exitstat; - errno = mci->mci_errno; -#if NAMED_BIND - h_errno = mci->mci_herrno; -#endif - if (rcode == EX_OK) - { - /* shouldn't happen */ - syserr("554 deliver: mci=%lx rcode=%d errno=%d state=%d sig=%s", - (long) mci, rcode, errno, mci->mci_state, - firstsig); - mci_dump_all(TRUE); - rcode = EX_SOFTWARE; - } -#if DAEMON - else if (curhost != NULL && *curhost != '\0') - { - /* try next MX site */ - goto tryhost; - } -#endif - } - else if (!clever) - { - /* - ** Format and send message. - */ - - putfromline(mci, e); - (*e->e_puthdr)(mci, e->e_header, e); - (*e->e_putbody)(mci, e, NULL); - - /* get the exit status */ - rcode = endmailer(mci, e, pv); - } - else -#if SMTP - { - extern int smtpmailfrom __P((MAILER *, MCI *, ENVELOPE *)); - extern int smtprcpt __P((ADDRESS *, MAILER *, MCI *, ENVELOPE *)); - extern int smtpdata __P((MAILER *, MCI *, ENVELOPE *)); - extern int smtpgetstat __P((MAILER *, MCI *, ENVELOPE *)); - - /* - ** Send the MAIL FROM: protocol - */ - - rcode = smtpmailfrom(m, mci, e); - if (rcode == EX_OK) - { - register char *t = tobuf; - register int i; - - /* send the recipient list */ - tobuf[0] = '\0'; - for (to = tochain; to != NULL; to = to->q_tchain) - { - e->e_to = to->q_paddr; - if (strlen(to->q_paddr) + (t - tobuf) + 2 > sizeof tobuf) - { - /* not enough room */ - continue; - } - else if ((i = smtprcpt(to, m, mci, e)) != EX_OK) - { - markfailure(e, to, mci, i); - giveresponse(i, m, mci, ctladdr, xstart, e); - } - else - { - *t++ = ','; - for (p = to->q_paddr; *p; *t++ = *p++) - continue; - *t = '\0'; - } - } - - /* now send the data */ - if (tobuf[0] == '\0') - { - rcode = EX_OK; - e->e_to = NULL; - if (bitset(MCIF_CACHED, mci->mci_flags)) - smtprset(m, mci, e); - } - else - { - e->e_to = tobuf + 1; - rcode = smtpdata(m, mci, e); - } - } -# if DAEMON - if (rcode == EX_TEMPFAIL && curhost != NULL && *curhost != '\0') - { - /* try next MX site */ - goto tryhost; - } -# endif - } -#else /* not SMTP */ - { - syserr("554 deliver: need SMTP compiled to use clever mailer"); - rcode = EX_CONFIG; - goto give_up; - } -#endif /* SMTP */ -#if NAMED_BIND - if (ConfigLevel < 2) - _res.options |= RES_DEFNAMES | RES_DNSRCH; /* XXX */ -#endif - - if (tTd(62, 1)) - checkfds("after delivery"); - - /* - ** Do final status disposal. - ** We check for something in tobuf for the SMTP case. - ** If we got a temporary failure, arrange to queue the - ** addressees. - */ - - give_up: -#if SMTP -# if _FFR_LMTP - if (bitnset(M_LMTP, m->m_flags)) - { - tobuf[0] = '\0'; - anyok = FALSE; - } - else -# endif -#endif - anyok = rcode == EX_OK; - - for (to = tochain; to != NULL; to = to->q_tchain) - { - /* see if address already marked */ - if (bitset(QBADADDR|QQUEUEUP, to->q_flags)) - continue; - -#if SMTP -# if _FFR_LMTP - /* if running LMTP, get the status for each address */ - if (bitnset(M_LMTP, m->m_flags)) - { - rcode = smtpgetstat(m, mci, e); - if (rcode == EX_OK) - { - if (strlen(to->q_paddr) + strlen(tobuf) + 2 >= sizeof tobuf) - { - syserr("LMTP tobuf overflow"); - } - else - { - strcat(tobuf, ","); - strcat(tobuf, to->q_paddr); - } - anyok = TRUE; - } - else - { - e->e_to = to->q_paddr; - markfailure(e, to, mci, rcode); - giveresponse(rcode, m, mci, ctladdr, xstart, e); - e->e_to = tobuf + 1; - continue; - } - } - else -# endif -#endif - { - /* mark bad addresses */ - if (rcode != EX_OK) - { - if (goodmxfound && rcode == EX_NOHOST) - rcode = EX_TEMPFAIL; - markfailure(e, to, mci, rcode); - continue; - } - } - - /* successful delivery */ - to->q_flags |= QSENT; - to->q_statdate = curtime(); - e->e_nsent++; - if (bitnset(M_LOCALMAILER, m->m_flags) && - bitset(QPINGONSUCCESS, to->q_flags)) - { - to->q_flags |= QDELIVERED; - to->q_status = "2.1.5"; - fprintf(e->e_xfp, "%s... Successfully delivered\n", - to->q_paddr); - } - else if (bitset(QPINGONSUCCESS, to->q_flags) && - bitset(QPRIMARY, to->q_flags) && - !bitset(MCIF_DSN, mci->mci_flags)) - { - to->q_flags |= QRELAYED; - fprintf(e->e_xfp, "%s... relayed; expect no further notifications\n", - to->q_paddr); - } - } - -#if SMTP -# if _FFR_LMTP - if (bitnset(M_LMTP, m->m_flags)) - { - /* - ** Global information applies to the last recipient only; - ** clear it out to avoid bogus errors. - */ - - rcode = EX_OK; - e->e_statmsg = NULL; - - /* reset the mci state for the next transaction */ - if (mci != NULL && mci->mci_state == MCIS_ACTIVE) - mci->mci_state = MCIS_OPEN; - } -# endif -#endif - - if (tobuf[0] != '\0') - giveresponse(rcode, m, mci, ctladdr, xstart, e); - if (anyok) - markstats(e, tochain); - mci_store_persistent(mci); - -#if SMTP - /* now close the connection */ - if (clever && mci != NULL && mci->mci_state != MCIS_CLOSED && - !bitset(MCIF_CACHED, mci->mci_flags)) - smtpquit(m, mci, e); -#endif - - /* - ** Restore state and return. - */ - -#if XDEBUG - { - char wbuf[MAXLINE]; - - /* make absolutely certain 0, 1, and 2 are in use */ - snprintf(wbuf, sizeof wbuf, "%s... end of deliver(%s)", - e->e_to == NULL ? "NO-TO-LIST" - : shortenstring(e->e_to, 203), - m->m_name); - checkfd012(wbuf); - } -#endif - - errno = 0; - define('g', (char *) NULL, e); - return (rcode); -} - /* -** MARKFAILURE -- mark a failure on a specific address. -** -** Parameters: -** e -- the envelope we are sending. -** q -- the address to mark. -** mci -- mailer connection information. -** rcode -- the code signifying the particular failure. -** -** Returns: -** none. -** -** Side Effects: -** marks the address (and possibly the envelope) with the -** failure so that an error will be returned or -** the message will be queued, as appropriate. -*/ - -void -markfailure(e, q, mci, rcode) - register ENVELOPE *e; - register ADDRESS *q; - register MCI *mci; - int rcode; -{ - char *stat = NULL; - - switch (rcode) - { - case EX_OK: - break; - - case EX_TEMPFAIL: - case EX_IOERR: - case EX_OSERR: - q->q_flags |= QQUEUEUP; - q->q_flags &= ~QDONTSEND; - break; - - default: - q->q_flags |= QBADADDR; - break; - } - - /* find most specific error code possible */ - if (mci != NULL && mci->mci_status != NULL) - { - q->q_status = mci->mci_status; - q->q_rstatus = mci->mci_rstatus; - } - else if (e->e_status != NULL) - { - q->q_status = e->e_status; - q->q_rstatus = NULL; - } - else - { - switch (rcode) - { - case EX_USAGE: - stat = "5.5.4"; - break; - - case EX_DATAERR: - stat = "5.5.2"; - break; - - case EX_NOUSER: - stat = "5.1.1"; - break; - - case EX_NOHOST: - stat = "5.1.2"; - break; - - case EX_NOINPUT: - case EX_CANTCREAT: - case EX_NOPERM: - stat = "5.3.0"; - break; - - case EX_UNAVAILABLE: - case EX_SOFTWARE: - case EX_OSFILE: - case EX_PROTOCOL: - case EX_CONFIG: - stat = "5.5.0"; - break; - - case EX_OSERR: - case EX_IOERR: - stat = "4.5.0"; - break; - - case EX_TEMPFAIL: - stat = "4.2.0"; - break; - } - if (stat != NULL) - q->q_status = stat; - } - - q->q_statdate = curtime(); - if (CurHostName != NULL && CurHostName[0] != '\0') - q->q_statmta = newstr(CurHostName); - if (rcode != EX_OK && q->q_rstatus == NULL && - q->q_mailer != NULL && q->q_mailer->m_diagtype != NULL && - strcasecmp(q->q_mailer->m_diagtype, "UNIX") == 0) - { - char buf[30]; - - (void) snprintf(buf, sizeof buf, "%d", rcode); - q->q_rstatus = newstr(buf); - } -} - /* -** ENDMAILER -- Wait for mailer to terminate. -** -** We should never get fatal errors (e.g., segmentation -** violation), so we report those specially. For other -** errors, we choose a status message (into statmsg), -** and if it represents an error, we print it. -** -** Parameters: -** pid -- pid of mailer. -** e -- the current envelope. -** pv -- the parameter vector that invoked the mailer -** (for error messages). -** -** Returns: -** exit code of mailer. -** -** Side Effects: -** none. -*/ - -int -endmailer(mci, e, pv) - register MCI *mci; - register ENVELOPE *e; - char **pv; -{ - int st; - - mci_unlock_host(mci); - - /* close any connections */ - if (mci->mci_in != NULL) - (void) xfclose(mci->mci_in, mci->mci_mailer->m_name, "mci_in"); - if (mci->mci_out != NULL) - (void) xfclose(mci->mci_out, mci->mci_mailer->m_name, "mci_out"); - mci->mci_in = mci->mci_out = NULL; - mci->mci_state = MCIS_CLOSED; - - /* in the IPC case there is nothing to wait for */ - if (mci->mci_pid == 0) - return (EX_OK); - -#if _FFR_TIMEOUT_WAIT - put a timeout around the wait -#endif - - /* wait for the mailer process to die and collect status */ - st = waitfor(mci->mci_pid); - if (st == -1) - { - syserr("endmailer %s: wait", mci->mci_mailer->m_name); - return (EX_SOFTWARE); - } - - if (WIFEXITED(st)) - { - /* normal death -- return status */ - return (WEXITSTATUS(st)); - } - - /* it died a horrid death */ - syserr("451 mailer %s died with signal %o", - mci->mci_mailer->m_name, st); - - /* log the arguments */ - if (pv != NULL && e->e_xfp != NULL) - { - register char **av; - - fprintf(e->e_xfp, "Arguments:"); - for (av = pv; *av != NULL; av++) - fprintf(e->e_xfp, " %s", *av); - fprintf(e->e_xfp, "\n"); - } - - ExitStat = EX_TEMPFAIL; - return (EX_TEMPFAIL); -} - /* -** GIVERESPONSE -- Interpret an error response from a mailer -** -** Parameters: -** stat -- the status code from the mailer (high byte -** only; core dumps must have been taken care of -** already). -** m -- the mailer info for this mailer. -** mci -- the mailer connection info -- can be NULL if the -** response is given before the connection is made. -** ctladdr -- the controlling address for the recipient -** address(es). -** xstart -- the transaction start time, for computing -** transaction delays. -** e -- the current envelope. -** -** Returns: -** none. -** -** Side Effects: -** Errors may be incremented. -** ExitStat may be set. -*/ - -void -giveresponse(stat, m, mci, ctladdr, xstart, e) - int stat; - register MAILER *m; - register MCI *mci; - ADDRESS *ctladdr; - time_t xstart; - ENVELOPE *e; -{ - register const char *statmsg; - extern char *SysExMsg[]; - register int i; - extern int N_SysEx; - char buf[MAXLINE]; - - if (e == NULL) - syserr("giveresponse: null envelope"); - - /* - ** Compute status message from code. - */ - - i = stat - EX__BASE; - if (stat == 0) - { - statmsg = "250 Sent"; - if (e->e_statmsg != NULL) - { - (void) snprintf(buf, sizeof buf, "%s (%s)", - statmsg, shortenstring(e->e_statmsg, 403)); - statmsg = buf; - } - } - else if (i < 0 || i > N_SysEx) - { - (void) snprintf(buf, sizeof buf, "554 unknown mailer error %d", - stat); - stat = EX_UNAVAILABLE; - statmsg = buf; - } - else if (stat == EX_TEMPFAIL) - { - char *bp = buf; - - snprintf(bp, SPACELEFT(buf, bp), "%s", SysExMsg[i] + 1); - bp += strlen(bp); -#if NAMED_BIND - if (h_errno == TRY_AGAIN) - statmsg = errstring(h_errno+E_DNSBASE); - else -#endif - { - if (errno != 0) - statmsg = errstring(errno); - else - { -#if SMTP - statmsg = SmtpError; -#else /* SMTP */ - statmsg = NULL; -#endif /* SMTP */ - } - } - if (statmsg != NULL && statmsg[0] != '\0') - snprintf(bp, SPACELEFT(buf, bp), ": %s", statmsg); - statmsg = buf; - } -#if NAMED_BIND - else if (stat == EX_NOHOST && h_errno != 0) - { - statmsg = errstring(h_errno + E_DNSBASE); - (void) snprintf(buf, sizeof buf, "%s (%s)", - SysExMsg[i] + 1, statmsg); - statmsg = buf; - } -#endif - else - { - statmsg = SysExMsg[i]; - if (*statmsg++ == ':') - { - (void) snprintf(buf, sizeof buf, "%s: %s", - statmsg, errstring(errno)); - statmsg = buf; - } - } - - /* - ** Print the message as appropriate - */ - - if (stat == EX_OK || stat == EX_TEMPFAIL) - { - extern char MsgBuf[]; - - message("%s", &statmsg[4]); - if (stat == EX_TEMPFAIL && e->e_xfp != NULL) - fprintf(e->e_xfp, "%s\n", &MsgBuf[4]); - } - else - { - char mbuf[8]; - - Errors++; - snprintf(mbuf, sizeof mbuf, "%.3s %%s", statmsg); - usrerr(mbuf, &statmsg[4]); - } - - /* - ** Final cleanup. - ** Log a record of the transaction. Compute the new - ** ExitStat -- if we already had an error, stick with - ** that. - */ - - if (OpMode != MD_VERIFY && !bitset(EF_VRFYONLY, e->e_flags) && - LogLevel > ((stat == EX_TEMPFAIL) ? 8 : (stat == EX_OK) ? 7 : 6)) - logdelivery(m, mci, &statmsg[4], ctladdr, xstart, e); - - if (tTd(11, 2)) - printf("giveresponse: stat=%d, e->e_message=%s\n", - stat, e->e_message == NULL ? "<NULL>" : e->e_message); - - if (stat != EX_TEMPFAIL) - setstat(stat); - if (stat != EX_OK && (stat != EX_TEMPFAIL || e->e_message == NULL)) - { - if (e->e_message != NULL) - free(e->e_message); - e->e_message = newstr(&statmsg[4]); - } - errno = 0; -#if NAMED_BIND - h_errno = 0; -#endif -} - /* -** LOGDELIVERY -- log the delivery in the system log -** -** Care is taken to avoid logging lines that are too long, because -** some versions of syslog have an unfortunate proclivity for core -** dumping. This is a hack, to be sure, that is at best empirical. -** -** Parameters: -** m -- the mailer info. Can be NULL for initial queue. -** mci -- the mailer connection info -- can be NULL if the -** log is occuring when no connection is active. -** stat -- the message to print for the status. -** ctladdr -- the controlling address for the to list. -** xstart -- the transaction start time, used for -** computing transaction delay. -** e -- the current envelope. -** -** Returns: -** none -** -** Side Effects: -** none -*/ - -void -logdelivery(m, mci, stat, ctladdr, xstart, e) - MAILER *m; - register MCI *mci; - const char *stat; - ADDRESS *ctladdr; - time_t xstart; - register ENVELOPE *e; -{ - register char *bp; - register char *p; - int l; - char buf[1024]; - -# if (SYSLOG_BUFSIZE) >= 256 - /* ctladdr: max 106 bytes */ - bp = buf; - if (ctladdr != NULL) - { - snprintf(bp, SPACELEFT(buf, bp), ", ctladdr=%s", - shortenstring(ctladdr->q_paddr, 83)); - bp += strlen(bp); - if (bitset(QGOODUID, ctladdr->q_flags)) - { - (void) snprintf(bp, SPACELEFT(buf, bp), " (%d/%d)", - ctladdr->q_uid, ctladdr->q_gid); - bp += strlen(bp); - } - } - - /* delay & xdelay: max 41 bytes */ - snprintf(bp, SPACELEFT(buf, bp), ", delay=%s", - pintvl(curtime() - e->e_ctime, TRUE)); - bp += strlen(bp); - - if (xstart != (time_t) 0) - { - snprintf(bp, SPACELEFT(buf, bp), ", xdelay=%s", - pintvl(curtime() - xstart, TRUE)); - bp += strlen(bp); - } - - /* mailer: assume about 19 bytes (max 10 byte mailer name) */ - if (m != NULL) - { - snprintf(bp, SPACELEFT(buf, bp), ", mailer=%s", m->m_name); - bp += strlen(bp); - } - - /* relay: max 66 bytes for IPv4 addresses */ - if (mci != NULL && mci->mci_host != NULL) - { -# if DAEMON - extern SOCKADDR CurHostAddr; -# endif - - snprintf(bp, SPACELEFT(buf, bp), ", relay=%s", - shortenstring(mci->mci_host, 40)); - bp += strlen(bp); - -# if DAEMON - if (CurHostAddr.sa.sa_family != 0) - { - snprintf(bp, SPACELEFT(buf, bp), " [%s]", - anynet_ntoa(&CurHostAddr)); - } -# endif - } - else if (strcmp(stat, "queued") != 0) - { - char *p = macvalue('h', e); - - if (p != NULL && p[0] != '\0') - { - snprintf(bp, SPACELEFT(buf, bp), ", relay=%s", - shortenstring(p, 40)); - } - } - bp += strlen(bp); - -#define STATLEN (((SYSLOG_BUFSIZE) - 100) / 4) -#if (STATLEN) < 63 -# undef STATLEN -# define STATLEN 63 -#endif -#if (STATLEN) > 203 -# undef STATLEN -# define STATLEN 203 -#endif - - /* stat: max 210 bytes */ - if ((bp - buf) > (sizeof buf - ((STATLEN) + 20))) - { - /* desperation move -- truncate data */ - bp = buf + sizeof buf - ((STATLEN) + 17); - strcpy(bp, "..."); - bp += 3; - } - - (void) strcpy(bp, ", stat="); - bp += strlen(bp); - - (void) strcpy(bp, shortenstring(stat, (STATLEN))); - - /* id, to: max 13 + TOBUFSIZE bytes */ - l = SYSLOG_BUFSIZE - 100 - strlen(buf); - p = e->e_to; - while (strlen(p) >= (SIZE_T) l) - { - register char *q = strchr(p + l, ','); - - if (q == NULL) - break; - sm_syslog(LOG_INFO, e->e_id, - "to=%.*s [more]%s", - ++q - p, p, buf); - p = q; - } - sm_syslog(LOG_INFO, e->e_id, "to=%s%s", p, buf); - -# else /* we have a very short log buffer size */ - - l = SYSLOG_BUFSIZE - 85; - p = e->e_to; - while (strlen(p) >= (SIZE_T) l) - { - register char *q = strchr(p + l, ','); - - if (q == NULL) - break; - sm_syslog(LOG_INFO, e->e_id, - "to=%.*s [more]", - ++q - p, p); - p = q; - } - sm_syslog(LOG_INFO, e->e_id, "to=%s", p); - - if (ctladdr != NULL) - { - bp = buf; - snprintf(bp, SPACELEFT(buf, bp), "ctladdr=%s", - shortenstring(ctladdr->q_paddr, 83)); - bp += strlen(bp); - if (bitset(QGOODUID, ctladdr->q_flags)) - { - (void) snprintf(bp, SPACELEFT(buf, bp), " (%d/%d)", - ctladdr->q_uid, ctladdr->q_gid); - bp += strlen(bp); - } - sm_syslog(LOG_INFO, e->e_id, "%s", buf); - } - bp = buf; - snprintf(bp, SPACELEFT(buf, bp), "delay=%s", - pintvl(curtime() - e->e_ctime, TRUE)); - bp += strlen(bp); - if (xstart != (time_t) 0) - { - snprintf(bp, SPACELEFT(buf, bp), ", xdelay=%s", - pintvl(curtime() - xstart, TRUE)); - bp += strlen(bp); - } - - if (m != NULL) - { - snprintf(bp, SPACELEFT(buf, bp), ", mailer=%s", m->m_name); - bp += strlen(bp); - } - sm_syslog(LOG_INFO, e->e_id, "%.1000s", buf); - - buf[0] = '\0'; - bp = buf; - if (mci != NULL && mci->mci_host != NULL) - { -# if DAEMON - extern SOCKADDR CurHostAddr; -# endif - - snprintf(bp, SPACELEFT(buf, bp), "relay=%.100s", mci->mci_host); - bp += strlen(bp); - -# if DAEMON - if (CurHostAddr.sa.sa_family != 0) - snprintf(bp, SPACELEFT(buf, bp), " [%.100s]", - anynet_ntoa(&CurHostAddr)); -# endif - } - else if (strcmp(stat, "queued") != 0) - { - char *p = macvalue('h', e); - - if (p != NULL && p[0] != '\0') - snprintf(buf, sizeof buf, "relay=%.100s", p); - } - if (buf[0] != '\0') - sm_syslog(LOG_INFO, e->e_id, "%.1000s", buf); - - sm_syslog(LOG_INFO, e->e_id, "stat=%s", shortenstring(stat, 63)); -# endif /* short log buffer */ -} - /* -** PUTFROMLINE -- output a UNIX-style from line (or whatever) -** -** This can be made an arbitrary message separator by changing $l -** -** One of the ugliest hacks seen by human eyes is contained herein: -** UUCP wants those stupid "remote from <host>" lines. Why oh why -** does a well-meaning programmer such as myself have to deal with -** this kind of antique garbage???? -** -** Parameters: -** mci -- the connection information. -** e -- the envelope. -** -** Returns: -** none -** -** Side Effects: -** outputs some text to fp. -*/ - -void -putfromline(mci, e) - register MCI *mci; - ENVELOPE *e; -{ - char *template = UnixFromLine; - char buf[MAXLINE]; - char xbuf[MAXLINE]; - - if (bitnset(M_NHDR, mci->mci_mailer->m_flags)) - return; - - if (bitnset(M_UGLYUUCP, mci->mci_mailer->m_flags)) - { - char *bang; - - expand("\201g", buf, sizeof buf, e); - bang = strchr(buf, '!'); - if (bang == NULL) - { - char *at; - char hname[MAXNAME]; - - /* - ** If we can construct a UUCP path, do so - */ - - at = strrchr(buf, '@'); - if (at == NULL) - { - expand( "\201k", hname, sizeof hname, e); - at = hname; - } - else - *at++ = '\0'; - (void) snprintf(xbuf, sizeof xbuf, - "From %.800s \201d remote from %.100s\n", - buf, at); - } - else - { - *bang++ = '\0'; - (void) snprintf(xbuf, sizeof xbuf, - "From %.800s \201d remote from %.100s\n", - bang, buf); - template = xbuf; - } - } - expand(template, buf, sizeof buf, e); - putxline(buf, strlen(buf), mci, PXLF_HEADER); -} - /* -** PUTBODY -- put the body of a message. -** -** Parameters: -** mci -- the connection information. -** e -- the envelope to put out. -** separator -- if non-NULL, a message separator that must -** not be permitted in the resulting message. -** -** Returns: -** none. -** -** Side Effects: -** The message is written onto fp. -*/ - -/* values for output state variable */ -#define OS_HEAD 0 /* at beginning of line */ -#define OS_CR 1 /* read a carriage return */ -#define OS_INLINE 2 /* putting rest of line */ - -void -putbody(mci, e, separator) - register MCI *mci; - register ENVELOPE *e; - char *separator; -{ - char buf[MAXLINE]; - - /* - ** Output the body of the message - */ - - if (e->e_dfp == NULL && bitset(EF_HAS_DF, e->e_flags)) - { - char *df = queuename(e, 'd'); - - e->e_dfp = fopen(df, "r"); - if (e->e_dfp == NULL) - syserr("putbody: Cannot open %s for %s from %s", - df, e->e_to, e->e_from.q_paddr); - } - if (e->e_dfp == NULL) - { - if (bitset(MCIF_INHEADER, mci->mci_flags)) - { - putline("", mci); - mci->mci_flags &= ~MCIF_INHEADER; - } - putline("<<< No Message Collected >>>", mci); - goto endofmessage; - } - if (e->e_dfino == (ino_t) 0) - { - struct stat stbuf; - - if (fstat(fileno(e->e_dfp), &stbuf) < 0) - e->e_dfino = -1; - else - { - e->e_dfdev = stbuf.st_dev; - e->e_dfino = stbuf.st_ino; - } - } - rewind(e->e_dfp); - -#if MIME8TO7 - if (bitset(MCIF_CVT8TO7, mci->mci_flags)) - { - char *boundaries[MAXMIMENESTING + 1]; - - /* - ** Do 8 to 7 bit MIME conversion. - */ - - /* make sure it looks like a MIME message */ - if (hvalue("MIME-Version", e->e_header) == NULL) - putline("MIME-Version: 1.0", mci); - - if (hvalue("Content-Type", e->e_header) == NULL) - { - snprintf(buf, sizeof buf, - "Content-Type: text/plain; charset=%s", - defcharset(e)); - putline(buf, mci); - } - - /* now do the hard work */ - boundaries[0] = NULL; - mime8to7(mci, e->e_header, e, boundaries, M87F_OUTER); - } -# if MIME7TO8 - else if (bitset(MCIF_CVT7TO8, mci->mci_flags)) - { - mime7to8(mci, e->e_header, e); - } -# endif - else -#endif - { - int ostate; - register char *bp; - register char *pbp; - register int c; - register char *xp; - int padc; - char *buflim; - int pos = 0; - char peekbuf[10]; - - /* we can pass it through unmodified */ - if (bitset(MCIF_INHEADER, mci->mci_flags)) - { - putline("", mci); - mci->mci_flags &= ~MCIF_INHEADER; - } - - /* determine end of buffer; allow for short mailer lines */ - buflim = &buf[sizeof buf - 1]; - if (mci->mci_mailer->m_linelimit > 0 && - mci->mci_mailer->m_linelimit < sizeof buf - 1) - buflim = &buf[mci->mci_mailer->m_linelimit - 1]; - - /* copy temp file to output with mapping */ - ostate = OS_HEAD; - bp = buf; - pbp = peekbuf; - while (!ferror(mci->mci_out)) - { - if (pbp > peekbuf) - c = *--pbp; - else if ((c = getc(e->e_dfp)) == EOF) - break; - if (bitset(MCIF_7BIT, mci->mci_flags)) - c &= 0x7f; - switch (ostate) - { - case OS_HEAD: -#if _FFR_NONULLS - if (c == '\0' && - bitnset(M_NONULLS, mci->mci_mailer->m_flags)) - break; -#endif - if (c != '\r' && c != '\n' && bp < buflim) - { - *bp++ = c; - break; - } - - /* check beginning of line for special cases */ - *bp = '\0'; - pos = 0; - padc = EOF; - if (buf[0] == 'F' && - bitnset(M_ESCFROM, mci->mci_mailer->m_flags) && - strncmp(buf, "From ", 5) == 0) - { - padc = '>'; - } - if (buf[0] == '-' && buf[1] == '-' && - separator != NULL) - { - /* possible separator */ - int sl = strlen(separator); - - if (strncmp(&buf[2], separator, sl) == 0) - padc = ' '; - } - if (buf[0] == '.' && - bitnset(M_XDOT, mci->mci_mailer->m_flags)) - { - padc = '.'; - } - - /* now copy out saved line */ - if (TrafficLogFile != NULL) - { - fprintf(TrafficLogFile, "%05d >>> ", - (int) getpid()); - if (padc != EOF) - putc(padc, TrafficLogFile); - for (xp = buf; xp < bp; xp++) - putc(*xp, TrafficLogFile); - if (c == '\n') - fputs(mci->mci_mailer->m_eol, - TrafficLogFile); - } - if (padc != EOF) - { - putc(padc, mci->mci_out); - pos++; - } - for (xp = buf; xp < bp; xp++) - putc(*xp, mci->mci_out); - if (c == '\n') - { - fputs(mci->mci_mailer->m_eol, - mci->mci_out); - pos = 0; - } - else - { - pos += bp - buf; - if (c != '\r') - *pbp++ = c; - } - bp = buf; - - /* determine next state */ - if (c == '\n') - ostate = OS_HEAD; - else if (c == '\r') - ostate = OS_CR; - else - ostate = OS_INLINE; - continue; - - case OS_CR: - if (c == '\n') - { - /* got CRLF */ - fputs(mci->mci_mailer->m_eol, mci->mci_out); - if (TrafficLogFile != NULL) - { - fputs(mci->mci_mailer->m_eol, - TrafficLogFile); - } - ostate = OS_HEAD; - continue; - } - - /* had a naked carriage return */ - *pbp++ = c; - c = '\r'; - ostate = OS_INLINE; - goto putch; - - case OS_INLINE: - if (c == '\r') - { - ostate = OS_CR; - continue; - } -#if _FFR_NONULLS - if (c == '\0' && - bitnset(M_NONULLS, mci->mci_mailer->m_flags)) - break; -#endif -putch: - if (mci->mci_mailer->m_linelimit > 0 && - pos > mci->mci_mailer->m_linelimit && - c != '\n') - { - putc('!', mci->mci_out); - fputs(mci->mci_mailer->m_eol, mci->mci_out); - if (TrafficLogFile != NULL) - { - fprintf(TrafficLogFile, "!%s", - mci->mci_mailer->m_eol); - } - ostate = OS_HEAD; - *pbp++ = c; - continue; - } - if (c == '\n') - { - if (TrafficLogFile != NULL) - fputs(mci->mci_mailer->m_eol, - TrafficLogFile); - fputs(mci->mci_mailer->m_eol, mci->mci_out); - pos = 0; - ostate = OS_HEAD; - } - else - { - if (TrafficLogFile != NULL) - putc(c, TrafficLogFile); - putc(c, mci->mci_out); - pos++; - ostate = OS_INLINE; - } - break; - } - } - - /* make sure we are at the beginning of a line */ - if (bp > buf) - { - if (TrafficLogFile != NULL) - { - for (xp = buf; xp < bp; xp++) - putc(*xp, TrafficLogFile); - } - for (xp = buf; xp < bp; xp++) - putc(*xp, mci->mci_out); - pos += bp - buf; - } - if (pos > 0) - { - if (TrafficLogFile != NULL) - fputs(mci->mci_mailer->m_eol, TrafficLogFile); - fputs(mci->mci_mailer->m_eol, mci->mci_out); - } - } - - if (ferror(e->e_dfp)) - { - syserr("putbody: df%s: read error", e->e_id); - ExitStat = EX_IOERR; - } - -endofmessage: - /* some mailers want extra blank line at end of message */ - if (bitnset(M_BLANKEND, mci->mci_mailer->m_flags) && - buf[0] != '\0' && buf[0] != '\n') - putline("", mci); - - (void) fflush(mci->mci_out); - if (ferror(mci->mci_out) && errno != EPIPE) - { - syserr("putbody: write error"); - ExitStat = EX_IOERR; - } - errno = 0; -} - /* -** MAILFILE -- Send a message to a file. -** -** If the file has the setuid/setgid bits set, but NO execute -** bits, sendmail will try to become the owner of that file -** rather than the real user. Obviously, this only works if -** sendmail runs as root. -** -** This could be done as a subordinate mailer, except that it -** is used implicitly to save messages in ~/dead.letter. We -** view this as being sufficiently important as to include it -** here. For example, if the system is dying, we shouldn't have -** to create another process plus some pipes to save the message. -** -** Parameters: -** filename -- the name of the file to send to. -** ctladdr -- the controlling address header -- includes -** the userid/groupid to be when sending. -** sfflags -- flags for opening. -** e -- the current envelope. -** -** Returns: -** The exit code associated with the operation. -** -** Side Effects: -** none. -*/ - -static jmp_buf CtxMailfileTimeout; -static void mailfiletimeout(); - -int -mailfile(filename, ctladdr, sfflags, e) - char *volatile filename; - ADDRESS *ctladdr; - volatile int sfflags; - register ENVELOPE *e; -{ - register FILE *f; - register pid_t pid = -1; - volatile int mode = ST_MODE_NOFILE; - bool suidwarn = geteuid() == 0; - EVENT *ev; - - if (tTd(11, 1)) - { - printf("mailfile %s\n ctladdr=", filename); - printaddr(ctladdr, FALSE); - } - - if (e->e_xfp != NULL) - fflush(e->e_xfp); - - /* - ** Special case /dev/null. This allows us to restrict file - ** delivery to regular files only. - */ - - if (strcmp(filename, "/dev/null") == 0) - return EX_OK; - - /* - ** Fork so we can change permissions here. - ** Note that we MUST use fork, not vfork, because of - ** the complications of calling subroutines, etc. - */ - - DOFORK(fork); - - if (pid < 0) - return (EX_OSERR); - else if (pid == 0) - { - /* child -- actually write to file */ - struct stat stb; - MCI mcibuf; - volatile int oflags = O_WRONLY|O_APPEND; - - if (e->e_lockfp != NULL) - (void) close(fileno(e->e_lockfp)); - - (void) setsignal(SIGINT, SIG_DFL); - (void) setsignal(SIGHUP, SIG_DFL); - (void) setsignal(SIGTERM, SIG_DFL); - (void) umask(OldUmask); - e->e_to = filename; - ExitStat = EX_OK; - - if (setjmp(CtxMailfileTimeout) != 0) - { - exit(EX_TEMPFAIL); - } - - if (TimeOuts.to_fileopen > 0) - ev = setevent(TimeOuts.to_fileopen, mailfiletimeout, 0); - else - ev = NULL; - -#ifdef HASLSTAT - if (lstat(filename, &stb) < 0) -#else - if (stat(filename, &stb) < 0) -#endif - { - stb.st_mode = ST_MODE_NOFILE; - mode = FileMode; - oflags |= O_CREAT|O_EXCL; - } - else if (bitset(0111, stb.st_mode) || stb.st_nlink != 1 || - (SafeFileEnv != NULL && !S_ISREG(stb.st_mode))) - exit(EX_CANTCREAT); - if (mode == ST_MODE_NOFILE) - mode = stb.st_mode; - - /* limit the errors to those actually caused in the child */ - errno = 0; - ExitStat = EX_OK; - - if (ctladdr != NULL || bitset(SFF_RUNASREALUID, sfflags)) - { - /* ignore setuid and setgid bits */ - mode &= ~(S_ISGID|S_ISUID); - } - - /* we have to open the dfile BEFORE setuid */ - if (e->e_dfp == NULL && bitset(EF_HAS_DF, e->e_flags)) - { - char *df = queuename(e, 'd'); - - e->e_dfp = fopen(df, "r"); - if (e->e_dfp == NULL) - { - syserr("mailfile: Cannot open %s for %s from %s", - df, e->e_to, e->e_from.q_paddr); - } - } - - /* select a new user to run as */ - if (!bitset(SFF_RUNASREALUID, sfflags)) - { - if (bitset(S_ISUID, mode)) - { - RealUserName = NULL; - RealUid = stb.st_uid; - } - else if (ctladdr != NULL && ctladdr->q_uid != 0) - { - if (ctladdr->q_ruser != NULL) - RealUserName = ctladdr->q_ruser; - else - RealUserName = ctladdr->q_user; - RealUid = ctladdr->q_uid; - } - else if (FileMailer != NULL && FileMailer->m_uid != 0) - { - RealUserName = DefUser; - RealUid = FileMailer->m_uid; - } - else - { - RealUserName = DefUser; - RealUid = DefUid; - } - - /* select a new group to run as */ - if (bitset(S_ISGID, mode)) - RealGid = stb.st_gid; - else if (ctladdr != NULL && ctladdr->q_uid != 0) - RealGid = ctladdr->q_gid; - else if (FileMailer != NULL && FileMailer->m_gid != 0) - RealGid = FileMailer->m_gid; - else - RealGid = DefGid; - } - - /* last ditch */ - if (!bitset(SFF_ROOTOK, sfflags)) - { - if (RealUid == 0) - RealUid = DefUid; - if (RealGid == 0) - RealGid = DefGid; - } - - /* set group id list (needs /etc/group access) */ - if (RealUserName != NULL && !DontInitGroups) - (void) initgroups(RealUserName, RealGid); - - /* if you have a safe environment, go into it */ - if (SafeFileEnv != NULL && SafeFileEnv[0] != '\0') - { - int i; - - if (chroot(SafeFileEnv) < 0) - { - syserr("mailfile: Cannot chroot(%s)", - SafeFileEnv); - exit(EX_CANTCREAT); - } - i = strlen(SafeFileEnv); - if (strncmp(SafeFileEnv, filename, i) == 0) - filename += i; - } - if (chdir("/") < 0) - syserr("mailfile: cannot chdir(/)"); - - /* now reset the group and user ids */ - endpwent(); - if (setgid(RealGid) < 0 && suidwarn) - syserr("mailfile: setgid(%ld) failed", (long) RealGid); - vendor_set_uid(RealUid); - if (setuid(RealUid) < 0 && suidwarn) - syserr("mailfile: setuid(%ld) failed", (long) RealUid); - - sfflags |= SFF_NOPATHCHECK|SFF_NOLINK; - sfflags &= ~SFF_OPENASROOT; - f = safefopen(filename, oflags, FileMode, sfflags); - if (f == NULL) - { - message("554 cannot open: %s", errstring(errno)); - exit(EX_CANTCREAT); - } - if (filechanged(filename, fileno(f), &stb, sfflags)) - { - message("554 file changed after open"); - exit(EX_CANTCREAT); - } - if (fstat(fileno(f), &stb) < 0) - { - message("554 cannot fstat %s", errstring(errno)); - exit(EX_CANTCREAT); - } - - if (ev != NULL) - clrevent(ev); - - bzero(&mcibuf, sizeof mcibuf); - mcibuf.mci_mailer = FileMailer; - mcibuf.mci_out = f; - if (bitnset(M_7BITS, FileMailer->m_flags)) - mcibuf.mci_flags |= MCIF_7BIT; - - putfromline(&mcibuf, e); - (*e->e_puthdr)(&mcibuf, e->e_header, e); - (*e->e_putbody)(&mcibuf, e, NULL); - putline("\n", &mcibuf); - if (fflush(f) < 0 || ferror(f)) - { - message("451 I/O error: %s", errstring(errno)); - setstat(EX_IOERR); - } - - /* reset ISUID & ISGID bits for paranoid systems */ -#if HASFCHMOD - (void) fchmod(fileno(f), (MODE_T) stb.st_mode); -#else - (void) chmod(filename, (MODE_T) stb.st_mode); -#endif - (void) xfclose(f, "mailfile", filename); - (void) fflush(stdout); - setuid(RealUid); - exit(ExitStat); - /*NOTREACHED*/ - } - else - { - /* parent -- wait for exit status */ - int st; - - st = waitfor(pid); - if (WIFEXITED(st)) - return (WEXITSTATUS(st)); - else - { - syserr("child died on signal %d", st); - return (EX_UNAVAILABLE); - } - /*NOTREACHED*/ - } - return EX_UNAVAILABLE; /* avoid compiler warning on IRIX */ -} - -static void -mailfiletimeout() -{ - longjmp(CtxMailfileTimeout, 1); -} - /* -** HOSTSIGNATURE -- return the "signature" for a host. -** -** The signature describes how we are going to send this -- it -** can be just the hostname (for non-Internet hosts) or can be -** an ordered list of MX hosts. -** -** Parameters: -** m -- the mailer describing this host. -** host -- the host name. -** e -- the current envelope. -** -** Returns: -** The signature for this host. -** -** Side Effects: -** Can tweak the symbol table. -*/ - -char * -hostsignature(m, host, e) - register MAILER *m; - char *host; - ENVELOPE *e; -{ - register char *p; - register STAB *s; - int i; - int len; -#if NAMED_BIND - int nmx; - char *hp; - char *endp; - int oldoptions = _res.options; - char *mxhosts[MAXMXHOSTS + 1]; -#endif - - /* - ** Check to see if this uses IPC -- if not, it can't have MX records. - */ - - p = m->m_mailer; - if (strcmp(p, "[IPC]") != 0 && strcmp(p, "[TCP]") != 0) - { - /* just an ordinary mailer */ - return host; - } - - /* - ** Look it up in the symbol table. - */ - - s = stab(host, ST_HOSTSIG, ST_ENTER); - if (s->s_hostsig != NULL) - return s->s_hostsig; - - /* - ** Not already there -- create a signature. - */ - -#if NAMED_BIND - if (ConfigLevel < 2) - _res.options &= ~(RES_DEFNAMES | RES_DNSRCH); /* XXX */ - - for (hp = host; hp != NULL; hp = endp) - { - endp = strchr(hp, ':'); - if (endp != NULL) - *endp = '\0'; - - if (bitnset(M_NOMX, m->m_flags)) - { - /* skip MX lookups */ - nmx = 1; - mxhosts[0] = hp; - } - else - { - auto int rcode; - - nmx = getmxrr(hp, mxhosts, TRUE, &rcode); - if (nmx <= 0) - { - register MCI *mci; - - /* update the connection info for this host */ - mci = mci_get(hp, m); - mci->mci_errno = errno; - mci->mci_herrno = h_errno; - mci->mci_lastuse = curtime(); - mci_setstat(mci, rcode, NULL, NULL); - - /* use the original host name as signature */ - nmx = 1; - mxhosts[0] = hp; - } - } - - len = 0; - for (i = 0; i < nmx; i++) - { - len += strlen(mxhosts[i]) + 1; - } - if (s->s_hostsig != NULL) - len += strlen(s->s_hostsig) + 1; - p = xalloc(len); - if (s->s_hostsig != NULL) - { - (void) strcpy(p, s->s_hostsig); - free(s->s_hostsig); - s->s_hostsig = p; - p += strlen(p); - *p++ = ':'; - } - else - s->s_hostsig = p; - for (i = 0; i < nmx; i++) - { - if (i != 0) - *p++ = ':'; - strcpy(p, mxhosts[i]); - p += strlen(p); - } - if (endp != NULL) - *endp++ = ':'; - } - makelower(s->s_hostsig); - if (ConfigLevel < 2) - _res.options = oldoptions; -#else - /* not using BIND -- the signature is just the host name */ - s->s_hostsig = host; -#endif - if (tTd(17, 1)) - printf("hostsignature(%s) = %s\n", host, s->s_hostsig); - return s->s_hostsig; -} |