2 * Copyright (c) 1998-2003, 2006, 2012, 2013 Proofpoint, Inc. and its suppliers.
4 * Copyright (c) 1983, 1995-1997 Eric P. Allman. All rights reserved.
5 * Copyright (c) 1988, 1993
6 * The Regents of the University of California. All rights reserved.
8 * By using this file, you agree to the terms and conditions set
9 * forth in the LICENSE file which can be found at the top level of
10 * the sendmail distribution.
16 SM_RCSID("@(#)$Id: savemail.c,v 8.319 2013-11-22 20:51:56 ca Exp $")
18 static bool errbody __P((MCI *, ENVELOPE *, char *));
19 static bool pruneroute __P((char *));
22 ** SAVEMAIL -- Save mail on error
24 ** If mailing back errors, mail it back to the originator
25 ** together with an error message; otherwise, just put it in
26 ** dead.letter in the user's home directory (if he exists on
30 ** e -- the envelope containing the message in error.
31 ** sendbody -- if true, also send back the body of the
32 ** message; otherwise just send the header.
35 ** true if savemail panic'ed, (i.e., the data file should
36 ** be preserved by dropenvelope())
39 ** Saves the letter, by writing or mailing it back to the
40 ** sender, or by putting it in dead.letter in her home
44 /* defines for state machine */
45 #define ESM_REPORT 0 /* report to sender's terminal */
46 #define ESM_MAIL 1 /* mail back to sender */
47 #define ESM_QUIET 2 /* mail has already been returned */
48 #define ESM_DEADLETTER 3 /* save in ~/dead.letter */
49 #define ESM_POSTMASTER 4 /* return to postmaster */
50 #define ESM_DEADLETTERDROP 5 /* save in DeadLetterDrop */
51 #define ESM_PANIC 6 /* call loseqfile() */
52 #define ESM_DONE 7 /* message is successfully delivered */
59 register SM_FILE_T *fp;
62 auto ADDRESS *q = NULL;
67 char buf[MAXLINE + 1];
68 char dlbuf[MAXPATHLEN];
74 sm_dprintf("\nsavemail, errormode = %c, id = %s, ExitStat = %d\n e_from=",
75 e->e_errormode, e->e_id == NULL ? "NONE" : e->e_id,
77 printaddr(sm_debug_file(), &e->e_from, false);
82 /* can't return a message with no id */
87 ** In the unhappy event we don't know who to return the mail
88 ** to, make someone up.
91 if (e->e_from.q_paddr == NULL)
93 e->e_sender = "Postmaster";
94 if (parseaddr(e->e_sender, &e->e_from,
95 RF_COPYPARSE|RF_SENDERADDR,
96 '\0', NULL, e, false) == NULL)
98 syserr("553 5.3.5 Cannot parse Postmaster!");
99 finis(true, true, EX_SOFTWARE);
105 ** Basic state machine.
107 ** This machine runs through the following states:
109 ** ESM_QUIET Errors have already been printed iff the
111 ** ESM_REPORT Report directly to the sender's terminal.
112 ** ESM_MAIL Mail response to the sender.
113 ** ESM_DEADLETTER Save response in ~/dead.letter.
114 ** ESM_POSTMASTER Mail response to the postmaster.
115 ** ESM_DEADLETTERDROP
116 ** If DeadLetterDrop set, save it there.
117 ** ESM_PANIC Save response anywhere possible.
120 /* determine starting state */
121 switch (e->e_errormode)
138 /* no need to return anything at all */
142 syserr("554 5.3.0 savemail: bogus errormode x%x",
148 /* if this is already an error response, send to postmaster */
149 if (bitset(EF_RESPONSE, e->e_flags))
151 if (e->e_parent != NULL &&
152 bitset(EF_RESPONSE, e->e_parent->e_flags))
154 /* got an error sending a response -- can it */
157 state = ESM_POSTMASTER;
160 while (state != ESM_DONE)
163 sm_dprintf(" state %d\n", state);
168 if (bitnset(M_LOCALMAILER, e->e_from.q_mailer->m_flags))
169 state = ESM_DEADLETTER;
177 ** If the user is still logged in on the same terminal,
178 ** then write the error messages back to hir (sic).
183 #else /* USE_TTYPATH */
185 #endif /* USE_TTYPATH */
187 if (p == NULL || sm_io_reopen(SmFtStdio,
189 p, SM_IO_WRONLY, NULL,
196 expand("\201n", buf, sizeof(buf), e);
197 (void) sm_io_fprintf(smioout, SM_TIME_DEFAULT,
198 "\r\nMessage from %s...\r\n", buf);
199 (void) sm_io_fprintf(smioout, SM_TIME_DEFAULT,
200 "Errors occurred while sending mail.\r\n");
201 if (e->e_xfp != NULL)
203 (void) bfrewind(e->e_xfp);
204 (void) sm_io_fprintf(smioout, SM_TIME_DEFAULT,
205 "Transcript follows:\r\n");
206 while (sm_io_fgets(e->e_xfp, SM_TIME_DEFAULT,
207 buf, sizeof(buf)) >= 0 &&
208 !sm_io_error(smioout))
209 (void) sm_io_fputs(smioout,
215 syserr("Cannot open %s",
216 queuename(e, XSCRPT_LETTER));
217 (void) sm_io_fprintf(smioout, SM_TIME_DEFAULT,
218 "Transcript of session is unavailable.\r\n");
220 (void) sm_io_fprintf(smioout, SM_TIME_DEFAULT,
221 "Original message will be saved in dead.letter.\r\n");
222 state = ESM_DEADLETTER;
227 ** If mailing back, do it.
228 ** Throw away all further output. Don't alias,
229 ** since this could cause loops, e.g., if joe
230 ** mails to joe@x, and for some reason the network
231 ** for @x is down, then the response gets sent to
232 ** joe@x, which gives a response, etc. Also force
233 ** the mail to be delivered even if a version of
234 ** it has already been sent to the sender.
236 ** If this is a configuration or local software
237 ** error, send to the local postmaster as well,
238 ** since the originator can't do anything
239 ** about it anyway. Note that this is a full
240 ** copy of the message (intentionally) so that
241 ** the Postmaster can forward things along.
244 if (ExitStat == EX_CONFIG || ExitStat == EX_SOFTWARE)
246 (void) sendtolist("postmaster", NULLADDR,
247 &e->e_errorqueue, 0, e);
249 if (!emptyaddr(&e->e_from))
251 char from[TOBUFSIZE];
253 if (sm_strlcpy(from, e->e_from.q_paddr,
254 sizeof(from)) >= sizeof(from))
256 state = ESM_POSTMASTER;
260 if (!DontPruneRoutes)
261 (void) pruneroute(from);
263 (void) sendtolist(from, NULLADDR,
264 &e->e_errorqueue, 0, e);
268 ** Deliver a non-delivery report to the
269 ** Postmaster-designate (not necessarily
270 ** Postmaster). This does not include the
271 ** body of the message, for privacy reasons.
272 ** You really shouldn't need this.
275 e->e_flags |= EF_PM_NOTIFY;
277 /* check to see if there are any good addresses */
278 for (q = e->e_errorqueue; q != NULL; q = q->q_next)
280 if (QS_IS_SENDABLE(q->q_state))
285 /* this is an error-error */
286 state = ESM_POSTMASTER;
289 if (returntosender(e->e_message, e->e_errorqueue,
290 sendbody ? RTSF_SEND_BODY
298 /* didn't work -- return to postmaster */
299 state = ESM_POSTMASTER;
304 ** Similar to previous case, but to system postmaster.
308 expand(DoubleBounceAddr, buf, sizeof(buf), e);
311 ** Just drop it on the floor if DoubleBounceAddr
312 ** expands to an empty string.
320 if (sendtolist(buf, NULLADDR, &q, 0, e) <= 0)
322 syserr("553 5.3.0 cannot parse %s!", buf);
323 ExitStat = EX_SOFTWARE;
324 state = ESM_DEADLETTERDROP;
327 flags = RTSF_PM_BOUNCE;
329 flags |= RTSF_SEND_BODY;
330 if (returntosender(e->e_message, q, flags, e) == 0)
336 /* didn't work -- last resort */
337 state = ESM_DEADLETTERDROP;
342 ** Save the message in dead.letter.
343 ** If we weren't mailing back, and the user is
344 ** local, we should save the message in
345 ** ~/dead.letter so that the poor person doesn't
346 ** have to type it over again -- and we all know
347 ** what poor typists UNIX users are.
351 if (bitnset(M_HASPWENT, e->e_from.q_mailer->m_flags))
353 if (e->e_from.q_home != NULL)
354 p = e->e_from.q_home;
355 else if (sm_mbdb_lookup(e->e_from.q_user, &user)
357 *user.mbdb_homedir != '\0')
358 p = user.mbdb_homedir;
360 if (p == NULL || e->e_dfp == NULL)
362 /* no local directory or no data file */
367 /* we have a home directory; write dead.letter */
368 macdefine(&e->e_macro, A_TEMP, 'z', p);
370 /* get the sender for the UnixFromLine */
371 p = macvalue('g', e);
372 macdefine(&e->e_macro, A_PERM, 'g', e->e_sender);
374 expand("\201z/dead.letter", dlbuf, sizeof(dlbuf), e);
375 sff = SFF_CREAT|SFF_REGONLY|SFF_RUNASREALUID;
379 if (writable(dlbuf, NULL, sff) &&
380 mailfile(dlbuf, FileMailer, NULL, sff, e) == EX_OK)
382 int oldverb = Verbose;
384 if (OpMode != MD_DAEMON && OpMode != MD_SMTP)
387 message("Saved message in %s", dlbuf);
389 macdefine(&e->e_macro, A_PERM, 'g', p);
393 macdefine(&e->e_macro, A_PERM, 'g', p);
397 case ESM_DEADLETTERDROP:
399 ** Log the mail in DeadLetterDrop file.
408 if ((SafeFileEnv != NULL && SafeFileEnv[0] != '\0') ||
409 DeadLetterDrop == NULL ||
410 DeadLetterDrop[0] == '\0')
416 sff = SFF_CREAT|SFF_REGONLY|SFF_ROOTOK|SFF_OPENASROOT|SFF_MUSTOWN;
417 if (!writable(DeadLetterDrop, NULL, sff) ||
418 (fp = safefopen(DeadLetterDrop, O_WRONLY|O_APPEND,
419 FileMode, sff)) == NULL)
425 memset(&mcibuf, '\0', sizeof(mcibuf));
427 mcibuf.mci_mailer = FileMailer;
428 if (bitnset(M_7BITS, FileMailer->m_flags))
429 mcibuf.mci_flags |= MCIF_7BIT;
431 /* get the sender for the UnixFromLine */
432 p = macvalue('g', e);
433 macdefine(&e->e_macro, A_PERM, 'g', e->e_sender);
435 if (!putfromline(&mcibuf, e) ||
436 !(*e->e_puthdr)(&mcibuf, e->e_header, e,
438 !(*e->e_putbody)(&mcibuf, e, NULL) ||
439 !putline("\n", &mcibuf) ||
440 sm_io_flush(fp, SM_TIME_DEFAULT) == SM_IO_EOF ||
442 sm_io_close(fp, SM_TIME_DEFAULT) < 0)
446 int oldverb = Verbose;
448 if (OpMode != MD_DAEMON && OpMode != MD_SMTP)
451 message("Saved message in %s",
455 sm_syslog(LOG_NOTICE, e->e_id,
456 "Saved message in %s",
460 macdefine(&e->e_macro, A_PERM, 'g', p);
464 syserr("554 5.3.5 savemail: unknown state %d", state);
468 /* leave the locked queue & transcript files around */
469 loseqfile(e, "savemail panic");
472 syserr("554 savemail: cannot save rejected email anywhere");
480 ** RETURNTOSENDER -- return a message to the sender with an error.
483 ** msg -- the explanatory message.
484 ** returnq -- the queue of people to send the message to.
485 ** flags -- flags tweaking the operation:
486 ** RTSF_SENDBODY -- include body of message (otherwise
487 ** just send the header).
488 ** RTSF_PMBOUNCE -- this is a postmaster bounce.
489 ** e -- the current envelope.
492 ** zero -- if everything went ok.
493 ** else -- some error.
496 ** Returns the current message to the sender via mail.
499 #define MAXRETURNS 6 /* max depth of returning messages */
500 #define ERRORFUDGE 1024 /* nominal size of error message text */
503 returntosender(msg, returnq, flags, e)
507 register ENVELOPE *e;
510 register ENVELOPE *ee;
511 ENVELOPE *oldcur = CurEnv;
512 ENVELOPE errenvelope;
513 static int returndepth = 0;
516 char buf[MAXNAME + 1];
522 msg = "Unable to deliver mail";
526 sm_dprintf("\n*** Return To Sender: msg=\"%s\", depth=%d, e=%p, returnq=",
527 msg, returndepth, e);
528 printaddr(sm_debug_file(), returnq, true);
531 sm_dprintf("Sendq=");
532 printaddr(sm_debug_file(), e->e_sendqueue, true);
536 if (++returndepth >= MAXRETURNS)
538 if (returndepth != MAXRETURNS)
539 syserr("554 5.3.0 returntosender: infinite recursion on %s",
541 /* don't "unrecurse" and fake a clean exit */
546 macdefine(&e->e_macro, A_PERM, 'g', e->e_sender);
547 macdefine(&e->e_macro, A_PERM, 'u', NULL);
549 /* initialize error envelope */
550 ee = newenvelope(&errenvelope, e, sm_rpool_new_x(NULL));
551 macdefine(&ee->e_macro, A_PERM, 'a', "\201b");
552 macdefine(&ee->e_macro, A_PERM, 'r', "");
553 macdefine(&ee->e_macro, A_PERM, 's', "localhost");
554 macdefine(&ee->e_macro, A_PERM, '_', "localhost");
557 ee->e_puthdr = putheader;
558 ee->e_putbody = errbody;
559 ee->e_flags |= EF_RESPONSE|EF_METOO;
560 if (!bitset(EF_OLDSTYLE, e->e_flags))
561 ee->e_flags &= ~EF_OLDSTYLE;
562 if (bitset(EF_DONT_MIME, e->e_flags))
564 ee->e_flags |= EF_DONT_MIME;
567 ** If we can't convert to MIME and we don't pass
568 ** 8-bit, we can't send the body.
571 if (bitset(EF_HAS8BIT, e->e_flags) &&
572 !bitset(MM_PASS8BIT, MimeMode))
573 flags &= ~RTSF_SEND_BODY;
576 ee->e_sendqueue = returnq;
578 if (bitset(RTSF_SEND_BODY, flags) &&
579 !bitset(PRIV_NOBODYRETN, PrivacyFlags))
580 ee->e_msgsize = ERRORFUDGE + e->e_msgsize;
582 ee->e_flags |= EF_NO_BODY_RETN;
584 #if _FFR_BOUNCE_QUEUE
585 if (BounceQueue != NOQGRP)
586 ee->e_qgrp = ee->e_dfqgrp = BounceQueue;
587 #endif /* _FFR_BOUNCE_QUEUE */
588 if (!setnewqueue(ee))
590 syserr("554 5.3.0 returntosender: cannot select queue for %s",
592 ExitStat = EX_UNAVAILABLE;
599 _res.retry = TimeOuts.res_retry[RES_TO_FIRST];
600 _res.retrans = TimeOuts.res_retrans[RES_TO_FIRST];
601 #endif /* NAMED_BIND */
602 for (q = returnq; q != NULL; q = q->q_next)
604 if (QS_IS_BADADDR(q->q_state))
607 q->q_flags &= ~(QHASNOTIFY|Q_PINGFLAGS);
608 q->q_flags |= QPINGONFAILURE;
610 if (!QS_IS_DEAD(q->q_state))
613 if (q->q_alias == NULL)
614 addheader("To", q->q_paddr, 0, ee, true);
619 if (bitset(EF_RESPONSE, e->e_flags))
620 p = "return to sender";
621 else if (bitset(EF_WARNING, e->e_flags))
623 else if (bitset(RTSF_PM_BOUNCE, flags))
624 p = "postmaster notify";
627 sm_syslog(LOG_INFO, e->e_id, "%s: %s: %s",
628 ee->e_id, p, shortenstring(msg, MAXSHORTSTR));
633 addheader("MIME-Version", "1.0", 0, ee, true);
634 (void) sm_snprintf(buf, sizeof(buf), "%s.%ld/%.100s",
635 ee->e_id, (long)curtime(), MyHostName);
636 ee->e_msgboundary = sm_rpool_strdup_x(ee->e_rpool, buf);
637 (void) sm_snprintf(buf, sizeof(buf),
639 "multipart/report; report-type=delivery-status;\n\tboundary=\"%s\"",
641 "multipart/mixed; boundary=\"%s\"",
644 addheader("Content-Type", buf, 0, ee, true);
646 p = hvalue("Content-Transfer-Encoding", e->e_header);
647 if (p != NULL && sm_strcasecmp(p, "binary") != 0)
649 if (p == NULL && bitset(EF_HAS8BIT, e->e_flags))
652 addheader("Content-Transfer-Encoding", p, 0, ee, true);
654 if (strncmp(msg, "Warning:", 8) == 0)
656 addheader("Subject", msg, 0, ee, true);
657 p = "warning-timeout";
659 else if (strncmp(msg, "Postmaster warning:", 19) == 0)
661 addheader("Subject", msg, 0, ee, true);
662 p = "postmaster-warning";
664 else if (strcmp(msg, "Return receipt") == 0)
666 addheader("Subject", msg, 0, ee, true);
667 p = "return-receipt";
669 else if (bitset(RTSF_PM_BOUNCE, flags))
671 (void) sm_snprintf(buf, sizeof(buf),
672 "Postmaster notify: see transcript for details");
673 addheader("Subject", buf, 0, ee, true);
674 p = "postmaster-notification";
678 (void) sm_snprintf(buf, sizeof(buf),
679 "Returned mail: see transcript for details");
680 addheader("Subject", buf, 0, ee, true);
683 (void) sm_snprintf(buf, sizeof(buf), "auto-generated (%s)", p);
684 addheader("Auto-Submitted", buf, 0, ee, true);
686 /* fake up an address header for the from person */
687 expand("\201n", buf, sizeof(buf), e);
688 if (parseaddr(buf, &ee->e_from,
689 RF_COPYALL|RF_SENDERADDR, '\0', NULL, e, false) == NULL)
691 syserr("553 5.3.5 Can't parse myself!");
692 ExitStat = EX_SOFTWARE;
696 ee->e_from.q_flags &= ~(QHASNOTIFY|Q_PINGFLAGS);
697 ee->e_from.q_flags |= QPINGONFAILURE;
698 ee->e_sender = ee->e_from.q_paddr;
700 /* push state into submessage */
702 macdefine(&ee->e_macro, A_PERM, 'f', "\201n");
703 macdefine(&ee->e_macro, A_PERM, 'x', "Mail Delivery Subsystem");
704 eatheader(ee, true, true);
706 /* mark statistics */
707 markstats(ee, NULLADDR, STATS_NORMAL);
709 #if _FFR_BOUNCE_QUEUE
710 if (BounceQueue == NOQGRP)
713 /* actually deliver the error message */
714 sendall(ee, SM_DELIVER);
715 #if _FFR_BOUNCE_QUEUE
718 (void) dropenvelope(ee, true, false);
720 /* check for delivery errors */
722 if (ee->e_parent == NULL ||
723 !bitset(EF_RESPONSE, ee->e_parent->e_flags))
729 for (q = ee->e_sendqueue; q != NULL; q = q->q_next)
731 if (QS_IS_ATTEMPTED(q->q_state))
740 sm_rpool_free(ee->e_rpool);
748 ** ERRBODY -- output the body of an error message.
750 ** Typically this is a copy of the transcript plus a copy of the
751 ** original offending message.
754 ** mci -- the mailer connection information.
755 ** e -- the envelope we are working in.
756 ** separator -- any possible MIME separator (unused).
759 ** true iff body was written successfully
762 ** Outputs the body of an error message.
767 errbody(mci, e, separator)
769 register ENVELOPE *e;
776 register SM_FILE_T *xfile;
778 register ADDRESS *q = NULL;
779 char actual[MAXLINE];
782 if (bitset(MCIF_INHEADER, mci->mci_flags))
784 if (!putline("", mci))
786 mci->mci_flags &= ~MCIF_INHEADER;
788 if (e->e_parent == NULL)
790 syserr("errbody: null parent");
791 if (!putline(" ----- Original message lost -----\n", mci))
797 ** Output MIME header.
800 if (e->e_msgboundary != NULL)
802 (void) sm_strlcpyn(buf, sizeof(buf), 2, "--", e->e_msgboundary);
803 if (!putline("This is a MIME-encapsulated message", mci) ||
805 !putline(buf, mci) ||
811 ** Output introductory information.
815 p = hvalue("subject", e->e_header);
816 if (p != NULL && strncmp(p, "Postmaster ", 11) == 0)
820 for (q = e->e_parent->e_sendqueue; q != NULL; q = q->q_next)
822 if (QS_IS_BADADDR(q->q_state))
826 if (!pm_notify && q == NULL &&
827 !bitset(EF_FATALERRS|EF_SENDRECEIPT, e->e_parent->e_flags))
829 if (!putline(" **********************************************",
831 !putline(" ** THIS IS A WARNING MESSAGE ONLY **",
833 !putline(" ** YOU DO NOT NEED TO RESEND YOUR MESSAGE **",
835 !putline(" **********************************************",
840 (void) sm_snprintf(buf, sizeof(buf),
841 "The original message was received at %s",
842 arpadate(ctime(&e->e_parent->e_ctime)));
843 if (!putline(buf, mci))
845 expand("from \201_", buf, sizeof(buf), e->e_parent);
846 if (!putline(buf, mci))
849 /* include id in postmaster copies */
850 if (pm_notify && e->e_parent->e_id != NULL)
852 (void) sm_strlcpyn(buf, sizeof(buf), 2, "with id ",
854 if (!putline(buf, mci))
857 if (!putline("", mci))
861 ** Output error message header (if specified and available).
864 if (ErrMsgFile != NULL &&
865 !bitset(EF_SENDRECEIPT, e->e_parent->e_flags))
867 if (*ErrMsgFile == '/')
869 long sff = SFF_ROOTOK|SFF_REGONLY;
871 if (DontLockReadFiles)
873 if (!bitnset(DBS_ERRORHEADERINUNSAFEDIRPATH,
875 sff |= SFF_SAFEDIRPATH;
876 xfile = safefopen(ErrMsgFile, O_RDONLY, 0444, sff);
879 while (sm_io_fgets(xfile, SM_TIME_DEFAULT, buf,
887 lbp = translate_dollars(buf, buf, &lbs);
888 expand(lbp, lbp, lbs, e);
889 putok = putline(lbp, mci);
895 (void) sm_io_close(xfile, SM_TIME_DEFAULT);
896 if (!putline("\n", mci))
902 expand(ErrMsgFile, buf, sizeof(buf), e);
903 if (!putline(buf, mci) || !putline("", mci))
909 ** Output message introduction
912 /* permanent fatal errors */
914 for (q = e->e_parent->e_sendqueue; q != NULL; q = q->q_next)
916 if (!QS_IS_BADADDR(q->q_state) ||
917 !bitset(QPINGONFAILURE, q->q_flags))
922 if (!putline(" ----- The following addresses had permanent fatal errors -----",
928 (void) sm_strlcpy(buf, shortenstring(q->q_paddr, MAXSHORTSTR),
930 if (!putline(buf, mci))
932 if (q->q_rstatus != NULL)
934 (void) sm_snprintf(buf, sizeof(buf),
936 shortenstring(exitstat(q->q_rstatus),
938 if (!putline(buf, mci))
941 if (q->q_alias != NULL)
943 (void) sm_snprintf(buf, sizeof(buf),
944 " (expanded from: %s)",
945 shortenstring(q->q_alias->q_paddr,
947 if (!putline(buf, mci))
951 if (!printheader && !putline("", mci))
954 /* transient non-fatal errors */
956 for (q = e->e_parent->e_sendqueue; q != NULL; q = q->q_next)
958 if (QS_IS_BADADDR(q->q_state) ||
959 !bitset(QPRIMARY, q->q_flags) ||
960 !bitset(QBYNDELAY, q->q_flags) ||
961 !bitset(QDELAYED, q->q_flags))
966 if (!putline(" ----- The following addresses had transient non-fatal errors -----",
972 (void) sm_strlcpy(buf, shortenstring(q->q_paddr, MAXSHORTSTR),
974 if (!putline(buf, mci))
976 if (q->q_alias != NULL)
978 (void) sm_snprintf(buf, sizeof(buf),
979 " (expanded from: %s)",
980 shortenstring(q->q_alias->q_paddr,
982 if (!putline(buf, mci))
986 if (!printheader && !putline("", mci))
989 /* successful delivery notifications */
991 for (q = e->e_parent->e_sendqueue; q != NULL; q = q->q_next)
993 if (QS_IS_BADADDR(q->q_state) ||
994 !bitset(QPRIMARY, q->q_flags) ||
995 bitset(QBYNDELAY, q->q_flags) ||
996 bitset(QDELAYED, q->q_flags))
998 else if (bitset(QBYNRELAY, q->q_flags))
999 p = "Deliver-By notify: relayed";
1000 else if (bitset(QBYTRACE, q->q_flags))
1001 p = "Deliver-By trace: relayed";
1002 else if (!bitset(QPINGONSUCCESS, q->q_flags))
1004 else if (bitset(QRELAYED, q->q_flags))
1005 p = "relayed to non-DSN-aware mailer";
1006 else if (bitset(QDELIVERED, q->q_flags))
1008 if (bitset(QEXPANDED, q->q_flags))
1009 p = "successfully delivered to mailing list";
1011 p = "successfully delivered to mailbox";
1013 else if (bitset(QEXPANDED, q->q_flags))
1014 p = "expanded by alias";
1020 if (!putline(" ----- The following addresses had successful delivery notifications -----",
1023 printheader = false;
1026 (void) sm_snprintf(buf, sizeof(buf), "%s (%s)",
1027 shortenstring(q->q_paddr, MAXSHORTSTR), p);
1028 if (!putline(buf, mci))
1030 if (q->q_alias != NULL)
1032 (void) sm_snprintf(buf, sizeof(buf),
1033 " (expanded from: %s)",
1034 shortenstring(q->q_alias->q_paddr,
1036 if (!putline(buf, mci))
1040 if (!printheader && !putline("", mci))
1044 ** Output transcript of errors
1047 (void) sm_io_flush(smioout, SM_TIME_DEFAULT);
1048 if (e->e_parent->e_xfp == NULL)
1050 if (!putline(" ----- Transcript of session is unavailable -----\n",
1059 (void) bfrewind(e->e_parent->e_xfp);
1060 if (e->e_xfp != NULL)
1061 (void) sm_io_flush(e->e_xfp, SM_TIME_DEFAULT);
1062 while ((blen = sm_io_fgets(e->e_parent->e_xfp, SM_TIME_DEFAULT,
1063 buf, sizeof(buf))) >= 0)
1065 if (printheader && !putline(" ----- Transcript of session follows -----\n",
1068 printheader = false;
1069 if (!putxline(buf, blen, mci, PXLF_MAPFROM))
1077 ** Output machine-readable version.
1080 if (e->e_msgboundary != NULL)
1082 (void) sm_strlcpyn(buf, sizeof(buf), 2, "--", e->e_msgboundary);
1083 if (!putline("", mci) ||
1084 !putline(buf, mci) ||
1085 !putline("Content-Type: message/delivery-status", mci) ||
1090 ** Output per-message information.
1093 /* original envelope id from MAIL FROM: line */
1094 if (e->e_parent->e_envid != NULL)
1096 (void) sm_snprintf(buf, sizeof(buf),
1097 "Original-Envelope-Id: %.800s",
1098 xuntextify(e->e_parent->e_envid));
1099 if (!putline(buf, mci))
1103 /* Reporting-MTA: is us (required) */
1104 (void) sm_snprintf(buf, sizeof(buf),
1105 "Reporting-MTA: dns; %.800s", MyHostName);
1106 if (!putline(buf, mci))
1109 /* DSN-Gateway: not relevant since we are not translating */
1111 /* Received-From-MTA: shows where we got this message from */
1112 if (RealHostName != NULL)
1114 /* XXX use $s for type? */
1115 if (e->e_parent->e_from.q_mailer == NULL ||
1116 (p = e->e_parent->e_from.q_mailer->m_mtatype) == NULL)
1118 (void) sm_snprintf(buf, sizeof(buf),
1119 "Received-From-MTA: %s; %.800s",
1121 if (!putline(buf, mci))
1125 /* Arrival-Date: -- when it arrived here */
1126 (void) sm_strlcpyn(buf, sizeof(buf), 2, "Arrival-Date: ",
1127 arpadate(ctime(&e->e_parent->e_ctime)));
1128 if (!putline(buf, mci))
1131 /* Deliver-By-Date: -- when it should have been delivered */
1132 if (IS_DLVR_BY(e->e_parent))
1136 dbyd = e->e_parent->e_ctime + e->e_parent->e_deliver_by;
1137 (void) sm_strlcpyn(buf, sizeof(buf), 2,
1138 "Deliver-By-Date: ",
1139 arpadate(ctime(&dbyd)));
1140 if (!putline(buf, mci))
1145 ** Output per-address information.
1148 for (q = e->e_parent->e_sendqueue; q != NULL; q = q->q_next)
1152 if (QS_IS_BADADDR(q->q_state))
1154 /* RFC 1891, 6.2.6 (b) */
1155 if (bitset(QHASNOTIFY, q->q_flags) &&
1156 !bitset(QPINGONFAILURE, q->q_flags))
1160 else if (!bitset(QPRIMARY, q->q_flags))
1162 else if (bitset(QDELIVERED, q->q_flags))
1164 if (bitset(QEXPANDED, q->q_flags))
1165 action = "delivered (to mailing list)";
1167 action = "delivered (to mailbox)";
1169 else if (bitset(QRELAYED, q->q_flags))
1170 action = "relayed (to non-DSN-aware mailer)";
1171 else if (bitset(QEXPANDED, q->q_flags))
1172 action = "expanded (to multi-recipient alias)";
1173 else if (bitset(QDELAYED, q->q_flags))
1175 else if (bitset(QBYTRACE, q->q_flags))
1176 action = "relayed (Deliver-By trace mode)";
1177 else if (bitset(QBYNDELAY, q->q_flags))
1178 action = "delayed (Deliver-By notify mode)";
1179 else if (bitset(QBYNRELAY, q->q_flags))
1180 action = "relayed (Deliver-By notify mode)";
1184 if (!putline("", mci))
1187 /* Original-Recipient: -- passed from on high */
1188 if (q->q_orcpt != NULL)
1190 p = strchr(q->q_orcpt, ';');
1193 ** p == NULL shouldn't happen due to
1194 ** check in srvrsmtp.c
1195 ** we could log an error in this case.
1201 (void) sm_snprintf(buf, sizeof(buf),
1202 "Original-Recipient: %.100s;%.700s",
1203 q->q_orcpt, xuntextify(p + 1));
1205 if (!putline(buf, mci))
1210 /* Figure out actual recipient */
1212 if (q->q_user[0] != '\0')
1214 if (q->q_mailer != NULL &&
1215 q->q_mailer->m_addrtype != NULL)
1216 p = q->q_mailer->m_addrtype;
1220 if (sm_strcasecmp(p, "rfc822") == 0 &&
1221 strchr(q->q_user, '@') == NULL)
1223 (void) sm_snprintf(actual,
1225 "%s; %.700s@%.100s",
1231 (void) sm_snprintf(actual,
1238 /* Final-Recipient: -- the name from the RCPT command */
1239 if (q->q_finalrcpt == NULL)
1241 /* should never happen */
1242 sm_syslog(LOG_ERR, e->e_id,
1243 "returntosender: q_finalrcpt is NULL");
1245 /* try to fall back to the actual recipient */
1246 if (actual[0] != '\0')
1247 q->q_finalrcpt = sm_rpool_strdup_x(e->e_rpool,
1251 if (q->q_finalrcpt != NULL)
1253 (void) sm_snprintf(buf, sizeof(buf),
1254 "Final-Recipient: %s",
1256 if (!putline(buf, mci))
1260 /* X-Actual-Recipient: -- the real problem address */
1261 if (actual[0] != '\0' &&
1262 q->q_finalrcpt != NULL &&
1263 !bitset(PRIV_NOACTUALRECIPIENT, PrivacyFlags) &&
1264 strcmp(actual, q->q_finalrcpt) != 0)
1266 (void) sm_snprintf(buf, sizeof(buf),
1267 "X-Actual-Recipient: %s",
1269 if (!putline(buf, mci))
1273 /* Action: -- what happened? */
1274 (void) sm_strlcpyn(buf, sizeof(buf), 2, "Action: ",
1276 if (!putline(buf, mci))
1279 /* Status: -- what _really_ happened? */
1280 if (q->q_status != NULL)
1282 else if (QS_IS_BADADDR(q->q_state))
1284 else if (QS_IS_QUEUEUP(q->q_state))
1288 (void) sm_strlcpyn(buf, sizeof(buf), 2, "Status: ", p);
1289 if (!putline(buf, mci))
1292 /* Remote-MTA: -- who was I talking to? */
1293 if (q->q_statmta != NULL)
1295 if (q->q_mailer == NULL ||
1296 (p = q->q_mailer->m_mtatype) == NULL)
1298 (void) sm_snprintf(buf, sizeof(buf),
1299 "Remote-MTA: %s; %.800s",
1301 p = &buf[strlen(buf) - 1];
1304 if (!putline(buf, mci))
1308 /* Diagnostic-Code: -- actual result from other end */
1309 if (q->q_rstatus != NULL)
1311 if (q->q_mailer == NULL ||
1312 (p = q->q_mailer->m_diagtype) == NULL)
1314 (void) sm_snprintf(buf, sizeof(buf),
1315 "Diagnostic-Code: %s; %.800s",
1317 if (!putline(buf, mci))
1321 /* Last-Attempt-Date: -- fine granularity */
1322 if (q->q_statdate == (time_t) 0L)
1323 q->q_statdate = curtime();
1324 (void) sm_strlcpyn(buf, sizeof(buf), 2,
1325 "Last-Attempt-Date: ",
1326 arpadate(ctime(&q->q_statdate)));
1327 if (!putline(buf, mci))
1330 /* Will-Retry-Until: -- for delayed messages only */
1331 if (QS_IS_QUEUEUP(q->q_state))
1335 xdate = e->e_parent->e_ctime +
1336 TimeOuts.to_q_return[e->e_parent->e_timeoutclass];
1337 (void) sm_strlcpyn(buf, sizeof(buf), 2,
1338 "Will-Retry-Until: ",
1339 arpadate(ctime(&xdate)));
1340 if (!putline(buf, mci))
1348 ** Output text of original message
1351 if (!putline("", mci))
1353 if (bitset(EF_HAS_DF, e->e_parent->e_flags))
1355 sendbody = !bitset(EF_NO_BODY_RETN, e->e_parent->e_flags) &&
1356 !bitset(EF_NO_BODY_RETN, e->e_flags);
1358 if (e->e_msgboundary == NULL)
1362 ? " ----- Original message follows -----\n"
1363 : " ----- Message header follows -----\n",
1371 (void) sm_strlcpyn(buf, sizeof(buf), 2, "--",
1374 if (!putline(buf, mci))
1376 (void) sm_strlcpyn(buf, sizeof(buf), 2, "Content-Type: ",
1377 sendbody ? "message/rfc822"
1378 : "text/rfc822-headers");
1379 if (!putline(buf, mci))
1382 p = hvalue("Content-Transfer-Encoding",
1383 e->e_parent->e_header);
1384 if (p != NULL && sm_strcasecmp(p, "binary") != 0)
1387 bitset(EF_HAS8BIT, e->e_parent->e_flags))
1391 (void) sm_snprintf(buf, sizeof(buf),
1392 "Content-Transfer-Encoding: %s",
1394 if (!putline(buf, mci))
1398 if (!putline("", mci))
1401 if (!putheader(mci, e->e_parent->e_header, e->e_parent,
1407 if (!putbody(mci, e->e_parent, e->e_msgboundary))
1410 else if (e->e_msgboundary == NULL)
1412 if (!putline("", mci) ||
1413 !putline(" ----- Message body suppressed -----",
1420 else if (e->e_msgboundary == NULL)
1422 if (!putline(" ----- No message was collected -----\n", mci))
1426 if (e->e_msgboundary != NULL)
1428 (void) sm_strlcpyn(buf, sizeof(buf), 3, "--", e->e_msgboundary,
1430 if (!putline("", mci) || !putline(buf, mci))
1433 if (!putline("", mci) ||
1434 sm_io_flush(mci->mci_out, SM_TIME_DEFAULT) == SM_IO_EOF)
1444 syserr("errbody: I/O error");
1451 ** SMTPTODSN -- convert SMTP to DSN status code
1454 ** smtpstat -- the smtp status code (e.g., 550).
1457 ** The DSN version of the status code.
1459 ** Storage Management:
1460 ** smtptodsn() returns a pointer to a character string literal,
1461 ** which will remain valid forever, and thus does not need to
1462 ** be copied. Current code relies on this property.
1474 case 450: /* Req mail action not taken: mailbox unavailable */
1477 case 451: /* Req action aborted: local error in processing */
1480 case 452: /* Req action not taken: insufficient sys storage */
1483 case 500: /* Syntax error, command unrecognized */
1486 case 501: /* Syntax error in parameters or arguments */
1489 case 502: /* Command not implemented */
1492 case 503: /* Bad sequence of commands */
1495 case 504: /* Command parameter not implemented */
1498 case 550: /* Req mail action not taken: mailbox unavailable */
1501 case 551: /* User not local; please try <...> */
1504 case 552: /* Req mail action aborted: exceeded storage alloc */
1507 case 553: /* Req action not taken: mailbox name not allowed */
1510 case 554: /* Transaction failed */
1514 if (REPLYTYPE(smtpstat) == 2)
1516 if (REPLYTYPE(smtpstat) == 4)
1521 ** XTEXTIFY -- take regular text and turn it into DSN-style xtext
1524 ** t -- the text to convert.
1525 ** taboo -- additional characters that must be encoded.
1528 ** The xtext-ified version of the same string.
1539 static char *bp = NULL;
1540 static int bplen = 0;
1545 /* figure out how long this xtext will have to be */
1547 for (p = t; *p != '\0'; p++)
1549 register int c = (*p & 0xff);
1551 /* ASCII dependence here -- this is the way the spec words it */
1552 if (c < '!' || c > '~' || c == '+' || c == '\\' || c == '(' ||
1553 strchr(taboo, c) != NULL)
1559 /* since nbogus is ssize_t and wrapped, 2 * size_t would wrap */
1560 syserr("!xtextify string too long");
1564 l += nbogus * 2 + 1;
1566 /* now allocate space if necessary for the new string */
1570 sm_free(bp); /* XXX */
1571 bp = sm_pmalloc_x(l);
1575 /* ok, copy the text with byte expansion */
1576 for (p = bp; *t != '\0'; )
1578 register int c = (*t++ & 0xff);
1580 /* ASCII dependence here -- this is the way the spec words it */
1581 if (c < '!' || c > '~' || c == '+' || c == '\\' || c == '(' ||
1582 strchr(taboo, c) != NULL)
1585 *p++ = "0123456789ABCDEF"[c >> 4];
1586 *p++ = "0123456789ABCDEF"[c & 0xf];
1595 ** XUNTEXTIFY -- take xtext and turn it into plain text
1598 ** t -- the xtextified text.
1601 ** The decoded text. No attempt is made to deal with
1602 ** null strings in the resulting text.
1611 static char *bp = NULL;
1612 static int bplen = 0;
1614 /* heuristic -- if no plus sign, just return the input */
1615 if (strchr(t, '+') == NULL)
1618 /* xtext is always longer than decoded text */
1623 sm_free(bp); /* XXX */
1628 /* ok, copy the text with byte compression */
1629 for (p = bp; *t != '\0'; t++)
1631 register int c = *t & 0xff;
1640 if (!isascii(c) || !isxdigit(c))
1642 /* error -- first digit is not hex */
1643 usrerr("bogus xtext: +%c", c);
1649 else if (isupper(c))
1656 if (!isascii(c) || !isxdigit(c))
1658 /* error -- second digit is not hex */
1659 usrerr("bogus xtext: +%x%c", *p >> 4, c);
1665 else if (isupper(c))
1675 ** XTEXTOK -- check if a string is legal xtext
1677 ** Xtext is used in Delivery Status Notifications. The spec was
1678 ** taken from RFC 1891, ``SMTP Service Extension for Delivery
1679 ** Status Notifications''.
1682 ** s -- the string to check.
1685 ** true -- if 's' is legal xtext.
1686 ** false -- if it has any illegal characters in it.
1695 while ((c = *s++) != '\0')
1700 if (!isascii(c) || !isxdigit(c))
1703 if (!isascii(c) || !isxdigit(c))
1706 else if (c < '!' || c > '~' || c == '=')
1713 ** ISATOM -- check if a string is an "atom"
1716 ** s -- the string to check.
1719 ** true -- iff s is an atom
1728 if (s == NULL || *s == '\0')
1730 while ((c = *s++) != '\0')
1732 if (strchr("()<>@,;:\\.[]\"", c) != NULL)
1734 if (c < '!' || c > '~')
1740 ** PRUNEROUTE -- prune an RFC-822 source route
1742 ** Trims down a source route to the last internet-registered hop.
1743 ** This is encouraged by RFC 1123 section 5.3.3.
1746 ** addr -- the address
1749 ** true -- address was modified
1750 ** false -- address could not be pruned
1753 ** modifies addr in-place
1761 char *start, *at, *comma;
1766 char hostbuf[BUFSIZ];
1767 char *mxhosts[MAXMXHOSTS + 1];
1769 /* check to see if this is really a route-addr */
1770 if (*addr != '<' || addr[1] != '@' || addr[strlen(addr) - 1] != '>')
1774 ** Can't simply find the first ':' is the address might be in the
1775 ** form: "<@[IPv6:::1]:user@host>" and the first ':' in inside
1776 ** the IPv6 address.
1781 while (*start != '\0')
1783 if (*start == ':' && braclev <= 0)
1785 else if (*start == '[')
1787 else if (*start == ']' && braclev > 0)
1791 if (braclev > 0 || *start != ':')
1794 at = strrchr(addr, '@');
1795 if (at == NULL || at < start)
1798 /* slice off the angle brackets */
1800 if (i >= sizeof(hostbuf))
1802 (void) sm_strlcpy(hostbuf, at + 1, sizeof(hostbuf));
1803 hostbuf[i - 1] = '\0';
1805 while (start != NULL)
1807 if (getmxrr(hostbuf, mxhosts, NULL, false,
1808 &rcode, true, NULL) > 0)
1810 (void) sm_strlcpy(addr + 1, start + 1,
1816 comma = strrchr(addr, ',');
1817 if (comma != NULL && comma[1] == '@' &&
1818 strlen(comma + 2) < sizeof(hostbuf))
1819 (void) sm_strlcpy(hostbuf, comma + 2, sizeof(hostbuf));
1825 #endif /* NAMED_BIND */