2 * Copyright (c) 1998-2006, 2008, 2009 Sendmail, Inc. and its suppliers.
4 * Copyright (c) 1983, 1995-1997 Eric P. Allman. All rights reserved.
5 * Copyright (c) 1988, 1993
6 * The Regents of the University of California. All rights reserved.
8 * By using this file, you agree to the terms and conditions set
9 * forth in the LICENSE file which can be found at the top level of
10 * the sendmail distribution.
16 SM_RCSID("@(#)$Id: usersmtp.c,v 8.473 2009/06/17 17:26:51 ca Exp $")
21 static void esmtp_check __P((char *, bool, MAILER *, MCI *, ENVELOPE *));
22 static void helo_options __P((char *, bool, MAILER *, MCI *, ENVELOPE *));
23 static int smtprcptstat __P((ADDRESS *, MAILER *, MCI *, ENVELOPE *));
26 extern void *sm_sasl_malloc __P((unsigned long));
27 extern void sm_sasl_free __P((void *));
31 ** USERSMTP -- run SMTP protocol from the user end.
33 ** This protocol is described in RFC821.
36 #define REPLYCLASS(r) (((r) / 10) % 10) /* second digit of reply code */
37 #define SMTPCLOSING 421 /* "Service Shutting Down" */
39 #define ENHSCN(e, d) ((e) == NULL ? (d) : (e))
41 #define ENHSCN_RPOOL(e, d, rpool) \
42 ((e) == NULL ? (d) : sm_rpool_strdup_x(rpool, e))
44 static char SmtpMsgBuffer[MAXLINE]; /* buffer for commands */
45 static char SmtpReplyBuffer[MAXLINE]; /* buffer for replies */
46 static bool SmtpNeedIntro; /* need "while talking" in transcript */
48 ** SMTPINIT -- initialize SMTP.
50 ** Opens the connection and sends the initial protocol.
53 ** m -- mailer to create connection to.
54 ** mci -- the mailer connection info.
56 ** onlyhelo -- send only helo command?
62 ** creates connection and sends initial protocol.
66 smtpinit(m, mci, e, onlyhelo)
81 sm_dprintf("smtpinit ");
82 mci_dump(sm_debug_file(), mci, false);
86 ** Open the connection to the mailer.
90 SmtpMsgBuffer[0] = '\0';
91 CurHostName = mci->mci_host; /* XXX UGLY XXX */
92 if (CurHostName == NULL)
93 CurHostName = MyHostName;
95 state = mci->mci_state;
101 /* need to clear old information */
113 /* shouldn't happen */
118 syserr("451 4.4.0 smtpinit: state CLOSED (was %d)", state);
127 mci->mci_state = MCIS_OPENING;
131 ** Get the greeting message.
132 ** This should appear spontaneously. Give it five minutes to
136 SmtpPhase = mci->mci_phase = "client greeting";
137 sm_setproctitle(true, e, "%s %s: %s",
138 qid_printname(e), CurHostName, mci->mci_phase);
139 r = reply(m, mci, e, TimeOuts.to_initial, esmtp_check, NULL,
143 if (REPLYTYPE(r) == 4)
145 if (REPLYTYPE(r) != 2)
149 ** Send the HELO command.
150 ** My mother taught me to always introduce myself.
154 if (bitnset(M_ESMTP, m->m_flags) || bitnset(M_LMTP, m->m_flags))
155 mci->mci_flags |= MCIF_ESMTP;
156 hn = mci->mci_heloname ? mci->mci_heloname : MyHostName;
159 #if _FFR_IGNORE_EXT_ON_HELO
160 mci->mci_flags &= ~MCIF_HELO;
161 #endif /* _FFR_IGNORE_EXT_ON_HELO */
162 if (bitnset(M_LMTP, m->m_flags))
164 smtpmessage("LHLO %s", m, mci, hn);
165 SmtpPhase = mci->mci_phase = "client LHLO";
167 else if (bitset(MCIF_ESMTP, mci->mci_flags) &&
168 !bitnset(M_FSMTP, m->m_flags))
170 smtpmessage("EHLO %s", m, mci, hn);
171 SmtpPhase = mci->mci_phase = "client EHLO";
175 smtpmessage("HELO %s", m, mci, hn);
176 SmtpPhase = mci->mci_phase = "client HELO";
177 #if _FFR_IGNORE_EXT_ON_HELO
178 mci->mci_flags |= MCIF_HELO;
179 #endif /* _FFR_IGNORE_EXT_ON_HELO */
181 sm_setproctitle(true, e, "%s %s: %s", qid_printname(e),
182 CurHostName, mci->mci_phase);
184 bitnset(M_LMTP, m->m_flags) ? TimeOuts.to_lhlo
186 helo_options, NULL, XS_DEFAULT);
189 else if (REPLYTYPE(r) == 5)
191 if (bitset(MCIF_ESMTP, mci->mci_flags) &&
192 !bitnset(M_LMTP, m->m_flags))
194 /* try old SMTP instead */
195 mci->mci_flags &= ~MCIF_ESMTP;
200 else if (REPLYTYPE(r) != 2)
204 ** Check to see if we actually ended up talking to ourself.
205 ** This means we didn't know about an alias or MX, or we managed
206 ** to connect to an echo server.
209 p = strchr(&SmtpReplyBuffer[4], ' ');
212 if (!bitnset(M_NOLOOPCHECK, m->m_flags) &&
213 !bitnset(M_LMTP, m->m_flags) &&
214 sm_strcasecmp(&SmtpReplyBuffer[4], MyHostName) == 0)
216 syserr("553 5.3.5 %s config error: mail loops back to me (MX problem?)",
218 mci_setstat(mci, EX_CONFIG, "5.3.5",
219 "553 5.3.5 system config error");
226 ** If this is expected to be another sendmail, send some internal
228 ** If we're running as MSP, "propagate" -v flag if possible.
231 if ((UseMSP && Verbose && bitset(MCIF_VERB, mci->mci_flags))
232 # if !_FFR_DEPRECATE_MAILER_FLAG_I
233 || bitnset(M_INTERNAL, m->m_flags)
234 # endif /* !_FFR_DEPRECATE_MAILER_FLAG_I */
237 /* tell it to be verbose */
238 smtpmessage("VERB", m, mci);
239 r = reply(m, mci, e, TimeOuts.to_miscshort, NULL, &enhsc,
245 if (mci->mci_state != MCIS_CLOSED)
247 mci->mci_state = MCIS_OPEN;
251 /* got a 421 error code during startup */
254 mci_setstat(mci, EX_TEMPFAIL, ENHSCN(enhsc, "4.4.2"), NULL);
255 if (mci->mci_state != MCIS_CLOSED)
260 /* XXX should use code from other end iff ENHANCEDSTATUSCODES */
261 mci_setstat(mci, EX_TEMPFAIL, ENHSCN(enhsc, "4.5.0"),
263 if (mci->mci_state != MCIS_CLOSED)
268 mci_setstat(mci, EX_UNAVAILABLE, "5.5.0", SmtpReplyBuffer);
273 ** ESMTP_CHECK -- check to see if this implementation likes ESMTP protocol
276 ** line -- the response line.
277 ** firstline -- set if this is the first line of the reply.
279 ** mci -- the mailer connection info.
280 ** e -- the envelope.
287 esmtp_check(line, firstline, m, mci, e)
294 if (strstr(line, "ESMTP") != NULL)
295 mci->mci_flags |= MCIF_ESMTP;
298 ** Dirty hack below. Quoting the author:
299 ** This was a response to people who wanted SMTP transmission to be
300 ** just-send-8 by default. Essentially, you could put this tag into
301 ** your greeting message to behave as though the F=8 flag was set on
305 if (strstr(line, "8BIT-OK") != NULL)
306 mci->mci_flags |= MCIF_8BITOK;
310 /* specify prototype so compiler can check calls */
311 static char *str_union __P((char *, char *, SM_RPOOL_T *));
314 ** STR_UNION -- create the union of two lists
317 ** s1, s2 -- lists of items (separated by single blanks).
318 ** rpool -- resource pool from which result is allocated.
321 ** the union of both lists.
325 str_union(s1, s2, rpool)
329 char *hr, *h1, *h, *res;
332 if (s1 == NULL || *s1 == '\0')
334 if (s2 == NULL || *s2 == '\0')
339 res = (char *) sm_rpool_malloc(rpool, rl + 2);
346 (void) sm_strlcpy(res, s1, rl);
351 /* walk through s2 */
352 while (h != NULL && *h1 != '\0')
354 /* is there something after the current word? */
355 if ((h = strchr(h1, ' ')) != NULL)
359 /* does the current word appear in s1 ? */
360 if (iteminlist(h1, s1, " ") == NULL)
362 /* add space as delimiter */
368 /* advance pointer in result list */
374 /* there are more items */
384 ** HELO_OPTIONS -- process the options on a HELO line.
387 ** line -- the response line.
388 ** firstline -- set if this is the first line of the reply.
390 ** mci -- the mailer connection info.
391 ** e -- the envelope (unused).
398 helo_options(line, firstline, m, mci, e)
406 #if _FFR_IGNORE_EXT_ON_HELO
407 static bool logged = false;
408 #endif /* _FFR_IGNORE_EXT_ON_HELO */
413 mci->mci_saslcap = NULL;
415 #if _FFR_IGNORE_EXT_ON_HELO
417 #endif /* _FFR_IGNORE_EXT_ON_HELO */
420 #if _FFR_IGNORE_EXT_ON_HELO
421 else if (bitset(MCIF_HELO, mci->mci_flags))
423 if (LogLevel > 8 && !logged)
425 sm_syslog(LOG_WARNING, NOQID,
426 "server=%s [%s] returned extensions despite HELO command",
427 macvalue(macid("{server_name}"), e),
428 macvalue(macid("{server_addr}"), e));
433 #endif /* _FFR_IGNORE_EXT_ON_HELO */
435 if (strlen(line) < 5)
438 p = strpbrk(line, " =");
441 if (sm_strcasecmp(line, "size") == 0)
443 mci->mci_flags |= MCIF_SIZE;
445 mci->mci_maxsize = atol(p);
447 else if (sm_strcasecmp(line, "8bitmime") == 0)
449 mci->mci_flags |= MCIF_8BITMIME;
450 mci->mci_flags &= ~MCIF_7BIT;
452 else if (sm_strcasecmp(line, "expn") == 0)
453 mci->mci_flags |= MCIF_EXPN;
454 else if (sm_strcasecmp(line, "dsn") == 0)
455 mci->mci_flags |= MCIF_DSN;
456 else if (sm_strcasecmp(line, "enhancedstatuscodes") == 0)
457 mci->mci_flags |= MCIF_ENHSTAT;
458 else if (sm_strcasecmp(line, "pipelining") == 0)
459 mci->mci_flags |= MCIF_PIPELINED;
460 else if (sm_strcasecmp(line, "verb") == 0)
461 mci->mci_flags |= MCIF_VERB;
463 else if (sm_strcasecmp(line, "starttls") == 0)
464 mci->mci_flags |= MCIF_TLS;
465 #endif /* STARTTLS */
466 else if (sm_strcasecmp(line, "deliverby") == 0)
468 mci->mci_flags |= MCIF_DLVR_BY;
470 mci->mci_min_by = atol(p);
473 else if (sm_strcasecmp(line, "auth") == 0)
475 if (p != NULL && *p != '\0')
477 if (mci->mci_saslcap != NULL)
480 ** Create the union with previous auth
481 ** offerings because we recognize "auth "
482 ** and "auth=" (old format).
485 mci->mci_saslcap = str_union(mci->mci_saslcap,
487 mci->mci_flags |= MCIF_AUTH;
494 mci->mci_saslcap = (char *)
495 sm_rpool_malloc(mci->mci_rpool, l);
496 if (mci->mci_saslcap != NULL)
498 (void) sm_strlcpy(mci->mci_saslcap, p,
500 mci->mci_flags |= MCIF_AUTH;
509 static int getsimple __P((void *, int, const char **, unsigned *));
510 static int getsecret __P((sasl_conn_t *, void *, int, sasl_secret_t **));
511 static int saslgetrealm __P((void *, int, const char **, const char **));
512 static int readauth __P((char *, bool, SASL_AI_T *m, SM_RPOOL_T *));
513 static int getauth __P((MCI *, ENVELOPE *, SASL_AI_T *));
514 static char *removemech __P((char *, char *, SM_RPOOL_T *));
515 static int attemptauth __P((MAILER *, MCI *, ENVELOPE *, SASL_AI_T *));
517 static sasl_callback_t callbacks[] =
519 { SASL_CB_GETREALM, &saslgetrealm, NULL },
520 #define CB_GETREALM_IDX 0
521 { SASL_CB_PASS, &getsecret, NULL },
522 #define CB_PASS_IDX 1
523 { SASL_CB_USER, &getsimple, NULL },
524 #define CB_USER_IDX 2
525 { SASL_CB_AUTHNAME, &getsimple, NULL },
526 #define CB_AUTHNAME_IDX 3
527 { SASL_CB_VERIFYFILE, &safesaslfile, NULL },
528 #define CB_SAFESASL_IDX 4
529 { SASL_CB_LIST_END, NULL, NULL }
533 ** INIT_SASL_CLIENT -- initialize client side of Cyrus-SASL
539 ** SASL_OK -- if successful.
540 ** SASL error code -- otherwise.
543 ** checks/sets sasl_clt_init.
546 ** Callbacks are ignored if sasl_client_init() has
547 ** been called before (by a library such as libnss_ldap)
550 static bool sasl_clt_init = false;
559 result = sasl_client_init(callbacks);
561 /* should we retry later again or just remember that it failed? */
562 if (result == SASL_OK)
563 sasl_clt_init = true;
567 ** STOP_SASL_CLIENT -- shutdown client side of Cyrus-SASL
576 ** checks/sets sasl_clt_init.
584 sasl_clt_init = false;
588 ** GETSASLDATA -- process the challenges from the SASL protocol
590 ** This gets the relevant sasl response data out of the reply
594 ** line -- the response line.
595 ** firstline -- set if this is the first line of the reply.
597 ** mci -- the mailer connection info.
598 ** e -- the envelope (unused).
604 static void getsasldata __P((char *, bool, MAILER *, MCI *, ENVELOPE *));
607 getsasldata(line, firstline, m, mci, e)
618 # endif /* SASL < 20000 */
620 /* if not a continue we don't care about it */
624 !isascii(line[1]) || !isdigit(line[1]) ||
625 !isascii(line[2]) || !isdigit(line[2]))
627 SM_FREE_CLR(mci->mci_sasl_string);
631 /* forget about "334 " */
635 /* XXX put this into a macro/function? It's duplicated below */
636 if (mci->mci_sasl_string != NULL)
638 if (mci->mci_sasl_string_len <= len)
640 sm_free(mci->mci_sasl_string); /* XXX */
641 mci->mci_sasl_string = xalloc(len + 1);
645 mci->mci_sasl_string = xalloc(len + 1);
647 result = sasl_decode64(line, len, mci->mci_sasl_string, len + 1,
648 (unsigned int *) &mci->mci_sasl_string_len);
649 if (result != SASL_OK)
651 mci->mci_sasl_string_len = 0;
652 *mci->mci_sasl_string = '\0';
654 # else /* SASL >= 20000 */
655 out = (char *) sm_rpool_malloc_x(mci->mci_rpool, len + 1);
656 result = sasl_decode64(line, len, out, (unsigned int *) &len);
657 if (result != SASL_OK)
664 ** mci_sasl_string is "shared" with Cyrus-SASL library; hence
665 ** it can't be in an rpool unless we use the same memory
666 ** management mechanism (with same rpool!) for Cyrus SASL.
669 if (mci->mci_sasl_string != NULL)
671 if (mci->mci_sasl_string_len <= len)
673 sm_free(mci->mci_sasl_string); /* XXX */
674 mci->mci_sasl_string = xalloc(len + 1);
678 mci->mci_sasl_string = xalloc(len + 1);
680 memcpy(mci->mci_sasl_string, out, len);
681 mci->mci_sasl_string[len] = '\0';
682 mci->mci_sasl_string_len = len;
683 # endif /* SASL >= 20000 */
687 ** READAUTH -- read auth values from a file
690 ** filename -- name of file to read.
691 ** safe -- if set, this is a safe read.
692 ** sai -- where to store auth_info.
693 ** rpool -- resource pool for sai.
696 ** EX_OK -- data succesfully read.
697 ** EX_UNAVAILABLE -- no valid filename.
698 ** EX_TEMPFAIL -- temporary failure.
701 static char *sasl_info_name[] =
710 readauth(filename, safe, sai, rpool)
723 if (filename == NULL || filename[0] == '\0')
724 return EX_UNAVAILABLE;
726 #if !_FFR_ALLOW_SASLINFO
728 ** make sure we don't use a program that is not
729 ** accesible to the user who specified a different authinfo file.
730 ** However, currently we don't pass this info (authinfo file
731 ** specified by user) around, so we just turn off program access.
734 if (filename[0] == '|')
739 char *argv[MAXPV + 1];
742 for (p = strtok(&filename[1], " \t"); p != NULL;
743 p = strtok(NULL, " \t"))
750 pid = prog_open(argv, &fd, CurEnv);
754 f = sm_io_open(SmFtStdiofd, SM_TIME_DEFAULT,
755 (void *) &fd, SM_IO_RDONLY, NULL);
758 #endif /* !_FFR_ALLOW_SASLINFO */
761 sff = SFF_REGONLY|SFF_SAFEDIRPATH|SFF_NOWLINK
762 |SFF_NOGWFILES|SFF_NOWWFILES|SFF_NOWRFILES;
763 # if _FFR_GROUPREADABLEAUTHINFOFILE
764 if (!bitnset(DBS_GROUPREADABLEAUTHINFOFILE, DontBlameSendmail))
765 # endif /* _FFR_GROUPREADABLEAUTHINFOFILE */
766 sff |= SFF_NOGRFILES;
767 if (DontLockReadFiles)
770 #if _FFR_ALLOW_SASLINFO
772 ** XXX: make sure we don't read or open files that are not
773 ** accesible to the user who specified a different authinfo
778 #else /* _FFR_ALLOW_SASLINFO */
780 sff |= SFF_OPENASROOT;
781 #endif /* _FFR_ALLOW_SASLINFO */
783 f = safefopen(filename, O_RDONLY, 0, sff);
788 sm_syslog(LOG_ERR, NOQID,
789 "AUTH=client, error: can't open %s: %s",
790 filename, sm_errstring(errno));
795 while (lc <= SASL_MECHLIST &&
796 sm_io_fgets(f, SM_TIME_DEFAULT, buf, sizeof(buf)) != NULL)
800 (*sai)[lc] = sm_rpool_strdup_x(rpool, buf);
801 if ((s = strchr((*sai)[lc], '\n')) != NULL)
807 (void) sm_io_close(f, SM_TIME_DEFAULT);
810 if (lc < SASL_PASSWORD)
813 sm_syslog(LOG_ERR, NOQID,
814 "AUTH=client, error: can't read %s from %s",
815 sasl_info_name[lc + 1], filename);
822 ** GETAUTH -- get authinfo from ruleset call
824 ** {server_name}, {server_addr} must be set
827 ** mci -- the mailer connection structure.
828 ** e -- the envelope (including the sender to specify).
829 ** sai -- pointer to authinfo (result).
832 ** EX_OK -- ruleset was succesfully called, data may not
833 ** be available, sai must be checked.
834 ** EX_UNAVAILABLE -- ruleset unavailable (or failed).
835 ** EX_TEMPFAIL -- temporary failure (from ruleset).
838 ** Fills in sai if successful.
847 int i, r, l, got, ret;
849 char pvpbuf[PSBUFSIZE];
851 r = rscap("authinfo", macvalue(macid("{server_name}"), e),
852 macvalue(macid("{server_addr}"), e), e,
853 &pvp, pvpbuf, sizeof(pvpbuf));
856 return EX_UNAVAILABLE;
858 /* other than expected return value: ok (i.e., no auth) */
859 if (pvp == NULL || pvp[0] == NULL || (pvp[0][0] & 0377) != CANONNET)
861 if (pvp[1] != NULL && sm_strncasecmp(pvp[1], "temp", 4) == 0)
865 ** parse the data, put it into sai
866 ** format: "TDstring" (including the '"' !)
867 ** where T is a tag: 'U', ...
868 ** D is a delimiter: ':' or '='
871 ret = EX_OK; /* default return value */
874 while (i < SASL_ENTRIES)
876 if (pvp[i + 1] == NULL)
878 if (pvp[i + 1][0] != '"')
880 switch (pvp[i + 1][1])
905 l = strlen(pvp[i + 1]);
908 if (l <= 3 || pvp[i + 1][l - 1] != '"')
911 /* remove closing quote */
912 pvp[i + 1][l - 1] = '\0';
914 /* remove "TD and " */
916 (*sai)[r] = (char *) sm_rpool_malloc(mci->mci_rpool, l + 1);
917 if ((*sai)[r] == NULL)
919 if (pvp[i + 1][2] == ':')
921 /* ':text' (just copy) */
922 (void) sm_strlcpy((*sai)[r], pvp[i + 1] + 3, l + 1);
925 else if (pvp[i + 1][2] == '=')
929 /* '=base64' (decode) */
931 ret = sasl_decode64(pvp[i + 1] + 3,
932 (unsigned int) l, (*sai)[r],
933 (unsigned int) l + 1, &len);
934 # else /* SASL >= 20000 */
935 ret = sasl_decode64(pvp[i + 1] + 3,
936 (unsigned int) l, (*sai)[r], &len);
937 # endif /* SASL >= 20000 */
945 sm_syslog(LOG_DEBUG, NOQID, "getauth %s=%s",
946 sasl_info_name[r], (*sai)[r]);
950 /* did we get the expected data? */
951 /* XXX: EXTERNAL mechanism only requires (and only uses) SASL_USER */
952 if (!(bitset(SASL_USER_BIT|SASL_AUTHID_BIT, got) &&
953 bitset(SASL_PASSWORD_BIT, got)))
956 /* no authid? copy uid */
957 if (!bitset(SASL_AUTHID_BIT, got))
959 l = strlen((*sai)[SASL_USER]) + 1;
960 (*sai)[SASL_AUTHID] = (char *) sm_rpool_malloc(mci->mci_rpool,
962 if ((*sai)[SASL_AUTHID] == NULL)
964 (void) sm_strlcpy((*sai)[SASL_AUTHID], (*sai)[SASL_USER], l);
967 /* no uid? copy authid */
968 if (!bitset(SASL_USER_BIT, got))
970 l = strlen((*sai)[SASL_AUTHID]) + 1;
971 (*sai)[SASL_USER] = (char *) sm_rpool_malloc(mci->mci_rpool,
973 if ((*sai)[SASL_USER] == NULL)
975 (void) sm_strlcpy((*sai)[SASL_USER], (*sai)[SASL_AUTHID], l);
983 sm_syslog(LOG_WARNING, NOQID,
984 "AUTH=client, relay=%.64s [%.16s], authinfo %sfailed",
985 macvalue(macid("{server_name}"), e),
986 macvalue(macid("{server_addr}"), e),
987 ret == EX_TEMPFAIL ? "temp" : "");
988 for (i = 0; i <= SASL_MECHLIST; i++)
989 (*sai)[i] = NULL; /* just clear; rpool */
995 ** GETSIMPLE -- callback to get userid or authid
1000 ** result -- (pointer to) result
1001 ** len -- (pointer to) length of result
1004 ** OK/failure values
1008 getsimple(context, id, result, len)
1011 const char **result;
1016 if (result == NULL || context == NULL)
1017 return SASL_BADPARAM;
1018 sai = (SASL_AI_T *) context;
1023 *result = (*sai)[SASL_USER];
1025 sm_syslog(LOG_DEBUG, NOQID, "AUTH username '%s'",
1028 *len = *result != NULL ? strlen(*result) : 0;
1031 case SASL_CB_AUTHNAME:
1032 *result = (*sai)[SASL_AUTHID];
1034 sm_syslog(LOG_DEBUG, NOQID, "AUTH authid '%s'",
1037 *len = *result != NULL ? strlen(*result) : 0;
1040 case SASL_CB_LANGUAGE:
1047 return SASL_BADPARAM;
1052 ** GETSECRET -- callback to get password
1055 ** conn -- connection information
1058 ** psecret -- (pointer to) result
1061 ** OK/failure values
1065 getsecret(conn, context, id, psecret)
1067 SM_UNUSED(void *context);
1069 sasl_secret_t **psecret;
1075 if (conn == NULL || psecret == NULL || id != SASL_CB_PASS)
1076 return SASL_BADPARAM;
1078 mci = (MCI *) context;
1079 authpass = mci->mci_sai[SASL_PASSWORD];
1080 len = strlen(authpass);
1083 ** use an rpool because we are responsible for free()ing the secret,
1084 ** but we can't free() it until after the auth completes
1087 *psecret = (sasl_secret_t *) sm_rpool_malloc(mci->mci_rpool,
1088 sizeof(sasl_secret_t) +
1090 if (*psecret == NULL)
1092 (void) sm_strlcpy((char *) (*psecret)->data, authpass, len + 1);
1093 (*psecret)->len = (unsigned long) len;
1096 # else /* SASL >= 20000 */
1098 ** GETSIMPLE -- callback to get userid or authid
1103 ** result -- (pointer to) result
1104 ** len -- (pointer to) length of result
1107 ** OK/failure values
1111 getsimple(context, id, result, len)
1114 const char **result;
1120 # endif /* SASL > 10509 */
1123 char *authid = NULL;
1125 if (result == NULL || context == NULL)
1126 return SASL_BADPARAM;
1127 sai = (SASL_AI_T *) context;
1130 ** Unfortunately it is not clear whether this routine should
1131 ** return a copy of a string or just a pointer to a string.
1132 ** The Cyrus-SASL plugins treat these return values differently, e.g.,
1133 ** plugins/cram.c free()s authid, plugings/digestmd5.c does not.
1134 ** The best solution to this problem is to fix Cyrus-SASL, but it
1135 ** seems there is nobody who creates patches... Hello CMU!?
1136 ** The second best solution is to have flags that tell this routine
1137 ** whether to return an malloc()ed copy.
1138 ** The next best solution is to always return an malloc()ed copy,
1139 ** and suffer from some memory leak, which is ugly for persistent
1141 ** For now we go with the last solution...
1142 ** We can't use rpools (which would avoid this particular problem)
1143 ** as explained in sasl.c.
1149 l = strlen((*sai)[SASL_USER]) + 1;
1150 s = sm_sasl_malloc(l);
1158 (void) sm_strlcpy(s, (*sai)[SASL_USER], l);
1161 sm_syslog(LOG_DEBUG, NOQID, "AUTH username '%s'",
1164 *len = *result != NULL ? strlen(*result) : 0;
1167 case SASL_CB_AUTHNAME:
1168 h = (*sai)[SASL_AUTHID];
1170 /* XXX maybe other mechanisms too?! */
1171 addrealm = (*sai)[SASL_MECH] != NULL &&
1172 sm_strcasecmp((*sai)[SASL_MECH], "CRAM-MD5") == 0;
1175 ** Add realm to authentication id unless authid contains
1176 ** '@' (i.e., a realm) or the default realm is empty.
1179 if (addrealm && h != NULL && strchr(h, '@') == NULL)
1181 /* has this been done before? */
1182 if ((*sai)[SASL_ID_REALM] == NULL)
1186 realm = (*sai)[SASL_DEFREALM];
1188 /* do not add an empty realm */
1192 (*sai)[SASL_ID_REALM] = NULL;
1196 l = strlen(h) + strlen(realm) + 2;
1198 /* should use rpool, but from where? */
1199 authid = sm_sasl_malloc(l);
1202 (void) sm_snprintf(authid, l,
1205 (*sai)[SASL_ID_REALM] = authid;
1210 (*sai)[SASL_ID_REALM] = NULL;
1215 authid = (*sai)[SASL_ID_REALM];
1218 # endif /* SASL > 10509 */
1220 l = strlen(authid) + 1;
1221 s = sm_sasl_malloc(l);
1229 (void) sm_strlcpy(s, authid, l);
1232 sm_syslog(LOG_DEBUG, NOQID, "AUTH authid '%s'",
1235 *len = authid ? strlen(authid) : 0;
1238 case SASL_CB_LANGUAGE:
1245 return SASL_BADPARAM;
1250 ** GETSECRET -- callback to get password
1253 ** conn -- connection information
1256 ** psecret -- (pointer to) result
1259 ** OK/failure values
1263 getsecret(conn, context, id, psecret)
1265 SM_UNUSED(void *context);
1267 sasl_secret_t **psecret;
1273 if (conn == NULL || psecret == NULL || id != SASL_CB_PASS)
1274 return SASL_BADPARAM;
1276 sai = (SASL_AI_T *) context;
1277 authpass = (*sai)[SASL_PASSWORD];
1278 len = strlen(authpass);
1279 *psecret = (sasl_secret_t *) sm_sasl_malloc(sizeof(sasl_secret_t) +
1281 if (*psecret == NULL)
1283 (void) sm_strlcpy((*psecret)->data, authpass, len + 1);
1284 (*psecret)->len = (unsigned long) len;
1287 # endif /* SASL >= 20000 */
1290 ** SAFESASLFILE -- callback for sasl: is file safe?
1293 ** context -- pointer to context between invocations (unused)
1294 ** file -- name of file to check
1295 ** type -- type of file to check
1298 ** SASL_OK -- file can be used
1299 ** SASL_CONTINUE -- don't use file
1300 ** SASL_FAIL -- failure (not used here)
1306 safesaslfile(context, file, type)
1307 #else /* SASL > 10515 */
1308 safesaslfile(context, file)
1309 #endif /* SASL > 10515 */
1313 # else /* SASL >= 20000 */
1315 # endif /* SASL >= 20000 */
1318 sasl_verify_type_t type;
1319 # else /* SASL >= 20000 */
1321 # endif /* SASL >= 20000 */
1322 #endif /* SASL > 10515 */
1328 #endif /* SASL <= 10515 */
1331 if (file == NULL || *file == '\0')
1333 sff = SFF_SAFEDIRPATH|SFF_NOWLINK|SFF_NOWWFILES|SFF_ROOTOK;
1335 if ((p = strrchr(file, '/')) == NULL)
1340 /* everything beside libs and .conf files must not be readable */
1342 if ((len <= 3 || strncmp(p, "lib", 3) != 0) &&
1343 (len <= 5 || strncmp(p + len - 5, ".conf", 5) != 0))
1345 if (!bitnset(DBS_GROUPREADABLESASLDBFILE, DontBlameSendmail))
1346 sff |= SFF_NORFILES;
1347 if (!bitnset(DBS_GROUPWRITABLESASLDBFILE, DontBlameSendmail))
1348 sff |= SFF_NOGWFILES;
1350 #else /* SASL <= 10515 */
1351 /* files containing passwords should be not readable */
1352 if (type == SASL_VRFY_PASSWD)
1354 if (bitnset(DBS_GROUPREADABLESASLDBFILE, DontBlameSendmail))
1355 sff |= SFF_NOWRFILES;
1357 sff |= SFF_NORFILES;
1358 if (!bitnset(DBS_GROUPWRITABLESASLDBFILE, DontBlameSendmail))
1359 sff |= SFF_NOGWFILES;
1361 #endif /* SASL <= 10515 */
1364 if ((r = safefile(p, RunAsUid, RunAsGid, RunAsUserName, sff,
1365 S_IRUSR, NULL)) == 0)
1367 if (LogLevel > (r != ENOENT ? 8 : 10))
1368 sm_syslog(LOG_WARNING, NOQID, "error: safesasl(%s) failed: %s",
1369 p, sm_errstring(r));
1370 return SASL_CONTINUE;
1374 ** SASLGETREALM -- return the realm for SASL
1376 ** return the realm for the client
1379 ** context -- context shared between invocations
1380 ** availrealms -- list of available realms
1381 ** {realm, realm, ...}
1382 ** result -- pointer to result
1389 saslgetrealm(context, id, availrealms, result)
1392 const char **availrealms;
1393 const char **result;
1398 sai = (SASL_AI_T *) context;
1401 r = (*sai)[SASL_DEFREALM];
1404 sm_syslog(LOG_INFO, NOQID,
1405 "AUTH=client, realm=%s, available realms=%s",
1406 r == NULL ? "<No Realm>" : r,
1407 (availrealms == NULL || *availrealms == NULL)
1408 ? "<No Realms>" : *availrealms);
1410 /* check whether context is in list */
1411 if (availrealms != NULL && *availrealms != NULL)
1413 if (iteminlist(context, (char *)(*availrealms + 1), " ,}") ==
1417 sm_syslog(LOG_ERR, NOQID,
1418 "AUTH=client, realm=%s not in list=%s",
1427 ** ITEMINLIST -- does item appear in list?
1429 ** Check whether item appears in list (which must be separated by a
1430 ** character in delim) as a "word", i.e. it must appear at the begin
1431 ** of the list or after a space, and it must end with a space or the
1435 ** item -- item to search.
1436 ** list -- list of items.
1437 ** delim -- list of delimiters.
1440 ** pointer to occurrence (NULL if not found).
1444 iteminlist(item, list, delim)
1452 if (list == NULL || *list == '\0')
1454 if (item == NULL || *item == '\0')
1458 while (s != NULL && *s != '\0')
1460 if (sm_strncasecmp(s, item, len) == 0 &&
1461 (s[len] == '\0' || strchr(delim, s[len]) != NULL))
1463 s = strpbrk(s, delim);
1471 ** REMOVEMECH -- remove item [rem] from list [list]
1474 ** rem -- item to remove
1475 ** list -- list of items
1476 ** rpool -- resource pool from which result is allocated.
1479 ** pointer to new list (NULL in case of error).
1483 removemech(rem, list, rpool)
1494 if (rem == NULL || *rem == '\0')
1496 /* take out what? */
1500 /* find the item in the list */
1501 if ((needle = iteminlist(rem, list, " ")) == NULL)
1503 /* not in there: return original */
1507 /* length of string without rem */
1508 len = strlen(list) - strlen(rem);
1511 ret = (char *) sm_rpool_malloc_x(rpool, 1);
1515 ret = (char *) sm_rpool_malloc_x(rpool, len);
1516 memset(ret, '\0', len);
1518 /* copy from start to removed item */
1519 memcpy(ret, list, needle - list);
1521 /* length of rest of string past removed item */
1522 len = strlen(needle) - strlen(rem) - 1;
1525 /* not last item -- copy into string */
1526 memcpy(ret + (needle - list),
1527 list + (needle - list) + strlen(rem) + 1,
1531 ret[(needle - list) - 1] = '\0';
1535 ** ATTEMPTAUTH -- try to AUTHenticate using one mechanism
1539 ** mci -- the mailer connection structure.
1540 ** e -- the envelope (including the sender to specify).
1541 ** sai - sasl authinfo
1544 ** EX_OK -- authentication was successful.
1545 ** EX_NOPERM -- authentication failed.
1546 ** EX_IOERR -- authentication dialogue failed (I/O problem?).
1547 ** EX_TEMPFAIL -- temporary failure.
1552 attemptauth(m, mci, e, sai)
1558 int saslresult, smtpresult;
1561 const char *auth_id;
1563 # else /* SASL >= 20000 */
1564 sasl_external_properties_t ssf;
1566 # endif /* SASL >= 20000 */
1567 unsigned int outlen;
1568 sasl_interact_t *client_interact = NULL;
1570 sasl_security_properties_t ssp;
1572 /* MUST NOT be a multiple of 4: bug in some sasl_encode64() versions */
1573 char in64[MAXOUTLEN + 1];
1574 #if NETINET || (NETINET6 && SASL >= 20000)
1575 extern SOCKADDR CurHostAddr;
1576 #endif /* NETINET || (NETINET6 && SASL >= 20000) */
1578 /* no mechanism selected (yet) */
1579 (*sai)[SASL_MECH] = NULL;
1581 /* dispose old connection */
1582 if (mci->mci_conn != NULL)
1583 sasl_dispose(&(mci->mci_conn));
1585 /* make a new client sasl connection */
1588 ** We provide the callbacks again because global callbacks in
1589 ** sasl_client_init() are ignored if SASL has been initialized
1590 ** before, for example, by a library such as libnss-ldap.
1593 saslresult = sasl_client_new(bitnset(M_LMTP, m->m_flags) ? "lmtp"
1595 CurHostName, NULL, NULL, callbacks, 0,
1597 # else /* SASL >= 20000 */
1598 saslresult = sasl_client_new(bitnset(M_LMTP, m->m_flags) ? "lmtp"
1600 CurHostName, NULL, 0, &mci->mci_conn);
1601 # endif /* SASL >= 20000 */
1602 if (saslresult != SASL_OK)
1605 /* set properties */
1606 (void) memset(&ssp, '\0', sizeof(ssp));
1608 /* XXX should these be options settable via .cf ? */
1610 ssp.max_ssf = MaxSLBits;
1611 ssp.maxbufsize = MAXOUTLEN;
1613 ssp.security_flags = SASL_SEC_NOPLAINTEXT;
1616 saslresult = sasl_setprop(mci->mci_conn, SASL_SEC_PROPS, &ssp);
1617 if (saslresult != SASL_OK)
1621 /* external security strength factor, authentication id */
1625 out = macvalue(macid("{cert_subject}"), e);
1626 if (out != NULL && *out != '\0')
1628 out = macvalue(macid("{cipher_bits}"), e);
1629 if (out != NULL && *out != '\0')
1631 # endif /* STARTTLS */
1632 saslresult = sasl_setprop(mci->mci_conn, SASL_SSF_EXTERNAL, &ssf);
1633 if (saslresult != SASL_OK)
1635 saslresult = sasl_setprop(mci->mci_conn, SASL_AUTH_EXTERNAL, auth_id);
1636 if (saslresult != SASL_OK)
1639 # if NETINET || NETINET6
1640 /* set local/remote ipv4 addresses */
1641 if (mci->mci_out != NULL && (
1643 CurHostAddr.sa.sa_family == AF_INET6 ||
1644 # endif /* NETINET6 */
1645 CurHostAddr.sa.sa_family == AF_INET))
1647 SOCKADDR_LEN_T addrsize;
1649 char localip[60], remoteip[60];
1651 switch (CurHostAddr.sa.sa_family)
1654 addrsize = sizeof(struct sockaddr_in);
1658 addrsize = sizeof(struct sockaddr_in6);
1660 # endif /* NETINET6 */
1664 if (iptostring(&CurHostAddr, addrsize,
1665 remoteip, sizeof(remoteip)))
1667 if (sasl_setprop(mci->mci_conn, SASL_IPREMOTEPORT,
1668 remoteip) != SASL_OK)
1671 addrsize = sizeof(saddr_l);
1672 if (getsockname(sm_io_getinfo(mci->mci_out, SM_IO_WHAT_FD,
1674 (struct sockaddr *) &saddr_l, &addrsize) == 0)
1676 if (iptostring(&saddr_l, addrsize,
1677 localip, sizeof(localip)))
1679 if (sasl_setprop(mci->mci_conn,
1681 localip) != SASL_OK)
1686 # endif /* NETINET || NETINET6 */
1688 /* start client side of sasl */
1689 saslresult = sasl_client_start(mci->mci_conn, mci->mci_saslcap,
1692 (const char **) &mechusing);
1693 # else /* SASL >= 20000 */
1694 /* external security strength factor, authentication id */
1698 out = macvalue(macid("{cert_subject}"), e);
1699 if (out != NULL && *out != '\0')
1701 out = macvalue(macid("{cipher_bits}"), e);
1702 if (out != NULL && *out != '\0')
1703 ssf.ssf = atoi(out);
1704 # endif /* STARTTLS */
1705 saslresult = sasl_setprop(mci->mci_conn, SASL_SSF_EXTERNAL, &ssf);
1706 if (saslresult != SASL_OK)
1710 /* set local/remote ipv4 addresses */
1711 if (mci->mci_out != NULL && CurHostAddr.sa.sa_family == AF_INET)
1713 SOCKADDR_LEN_T addrsize;
1714 struct sockaddr_in saddr_l;
1716 if (sasl_setprop(mci->mci_conn, SASL_IP_REMOTE,
1717 (struct sockaddr_in *) &CurHostAddr)
1720 addrsize = sizeof(struct sockaddr_in);
1721 if (getsockname(sm_io_getinfo(mci->mci_out, SM_IO_WHAT_FD,
1723 (struct sockaddr *) &saddr_l, &addrsize) == 0)
1725 if (sasl_setprop(mci->mci_conn, SASL_IP_LOCAL,
1726 &saddr_l) != SASL_OK)
1730 # endif /* NETINET */
1732 /* start client side of sasl */
1733 saslresult = sasl_client_start(mci->mci_conn, mci->mci_saslcap,
1734 NULL, &client_interact,
1736 (const char **) &mechusing);
1737 # endif /* SASL >= 20000 */
1739 if (saslresult != SASL_OK && saslresult != SASL_CONTINUE)
1741 if (saslresult == SASL_NOMECH && LogLevel > 8)
1743 sm_syslog(LOG_NOTICE, e->e_id,
1744 "AUTH=client, available mechanisms do not fulfill requirements");
1749 /* just point current mechanism to the data in the sasl library */
1750 (*sai)[SASL_MECH] = mechusing;
1752 /* send the info across the wire */
1754 /* login and digest-md5 up to 1.5.28 set out="" */
1756 (sm_strcasecmp(mechusing, "LOGIN") == 0 ||
1757 sm_strcasecmp(mechusing, "DIGEST-MD5") == 0))
1760 /* no initial response */
1761 smtpmessage("AUTH %s", m, mci, mechusing);
1763 else if (outlen == 0)
1766 ** zero-length initial response, per RFC 2554 4.:
1767 ** "Unlike a zero-length client answer to a 334 reply, a zero-
1768 ** length initial response is sent as a single equals sign"
1771 smtpmessage("AUTH %s =", m, mci, mechusing);
1775 saslresult = sasl_encode64(out, outlen, in64, sizeof(in64),
1777 if (saslresult != SASL_OK) /* internal error */
1780 sm_syslog(LOG_ERR, e->e_id,
1781 "encode64 for AUTH failed");
1784 smtpmessage("AUTH %s %s", m, mci, mechusing, in64);
1787 sm_sasl_free(out); /* XXX only if no rpool is used */
1788 # endif /* SASL < 20000 */
1791 smtpresult = reply(m, mci, e, TimeOuts.to_auth, getsasldata, NULL,
1796 /* check return code from server */
1797 if (smtpresult == 235)
1799 macdefine(&mci->mci_macro, A_TEMP, macid("{auth_type}"),
1803 if (smtpresult == -1)
1805 if (REPLYTYPE(smtpresult) == 5)
1806 return EX_NOPERM; /* ugly, but ... */
1807 if (REPLYTYPE(smtpresult) != 3)
1809 /* should we fail deliberately, see RFC 2554 4. ? */
1810 /* smtpmessage("*", m, mci); */
1814 saslresult = sasl_client_step(mci->mci_conn,
1815 mci->mci_sasl_string,
1816 mci->mci_sasl_string_len,
1820 if (saslresult != SASL_OK && saslresult != SASL_CONTINUE)
1823 sm_dprintf("AUTH FAIL=%s (%d)\n",
1824 sasl_errstring(saslresult, NULL, NULL),
1827 /* fail deliberately, see RFC 2554 4. */
1828 smtpmessage("*", m, mci);
1831 ** but we should only fail for this authentication
1832 ** mechanism; how to do that?
1835 smtpresult = reply(m, mci, e, TimeOuts.to_auth,
1836 getsasldata, NULL, XS_AUTH);
1842 saslresult = sasl_encode64(out, outlen, in64,
1843 sizeof(in64), NULL);
1844 if (saslresult != SASL_OK)
1846 /* give an error reply to the other side! */
1847 smtpmessage("*", m, mci);
1854 sm_sasl_free(out); /* XXX only if no rpool is used */
1855 # endif /* SASL < 20000 */
1856 smtpmessage("%s", m, mci, in64);
1857 smtpresult = reply(m, mci, e, TimeOuts.to_auth,
1858 getsasldata, NULL, XS_AUTH);
1863 ** SMTPAUTH -- try to AUTHenticate
1865 ** This will try mechanisms in the order the sasl library decided until:
1866 ** - there are no more mechanisms
1867 ** - a mechanism succeeds
1868 ** - the sasl library fails initializing
1872 ** mci -- the mailer connection info.
1873 ** e -- the envelope.
1876 ** EX_OK -- authentication was successful
1877 ** EX_UNAVAILABLE -- authentication not possible, e.g.,
1878 ** no data available.
1879 ** EX_NOPERM -- authentication failed.
1880 ** EX_TEMPFAIL -- temporary failure.
1882 ** Notice: AuthInfo is used for all connections, hence we must
1883 ** return EX_TEMPFAIL only if we really want to retry, i.e.,
1884 ** iff getauth() tempfailed or getauth() was used and
1885 ** authentication tempfailed.
1898 mci->mci_sasl_auth = false;
1899 for (i = 0; i < SASL_MECH ; i++)
1900 mci->mci_sai[i] = NULL;
1902 result = getauth(mci, e, &(mci->mci_sai));
1903 if (result == EX_TEMPFAIL)
1907 /* no data available: don't try to authenticate */
1908 if (result == EX_OK && mci->mci_sai[SASL_AUTHID] == NULL)
1910 if (result != EX_OK)
1912 if (SASLInfo == NULL)
1913 return EX_UNAVAILABLE;
1915 /* read authinfo from file */
1916 result = readauth(SASLInfo, true, &(mci->mci_sai),
1918 if (result != EX_OK)
1920 usedgetauth = false;
1923 /* check whether sufficient data is available */
1924 if (mci->mci_sai[SASL_PASSWORD] == NULL ||
1925 *(mci->mci_sai)[SASL_PASSWORD] == '\0')
1926 return EX_UNAVAILABLE;
1927 if ((mci->mci_sai[SASL_AUTHID] == NULL ||
1928 *(mci->mci_sai)[SASL_AUTHID] == '\0') &&
1929 (mci->mci_sai[SASL_USER] == NULL ||
1930 *(mci->mci_sai)[SASL_USER] == '\0'))
1931 return EX_UNAVAILABLE;
1933 /* set the context for the callback function to sai */
1935 callbacks[CB_PASS_IDX].context = (void *) mci;
1936 # else /* SASL >= 20000 */
1937 callbacks[CB_PASS_IDX].context = (void *) &mci->mci_sai;
1938 # endif /* SASL >= 20000 */
1939 callbacks[CB_USER_IDX].context = (void *) &mci->mci_sai;
1940 callbacks[CB_AUTHNAME_IDX].context = (void *) &mci->mci_sai;
1941 callbacks[CB_GETREALM_IDX].context = (void *) &mci->mci_sai;
1943 callbacks[CB_SAFESASL_IDX].context = (void *) &mci->mci_sai;
1946 /* set default value for realm */
1947 if ((mci->mci_sai)[SASL_DEFREALM] == NULL)
1948 (mci->mci_sai)[SASL_DEFREALM] = sm_rpool_strdup_x(e->e_rpool,
1949 macvalue('j', CurEnv));
1951 /* set default value for list of mechanism to use */
1952 if ((mci->mci_sai)[SASL_MECHLIST] == NULL ||
1953 *(mci->mci_sai)[SASL_MECHLIST] == '\0')
1954 (mci->mci_sai)[SASL_MECHLIST] = AuthMechanisms;
1956 /* create list of mechanisms to try */
1957 mci->mci_saslcap = intersect((mci->mci_sai)[SASL_MECHLIST],
1958 mci->mci_saslcap, mci->mci_rpool);
1960 /* initialize sasl client library */
1961 result = init_sasl_client();
1962 if (result != SASL_OK)
1963 return usedgetauth ? EX_TEMPFAIL : EX_UNAVAILABLE;
1966 result = attemptauth(m, mci, e, &(mci->mci_sai));
1967 if (result == EX_OK)
1968 mci->mci_sasl_auth = true;
1969 else if (result == EX_TEMPFAIL || result == EX_NOPERM)
1971 mci->mci_saslcap = removemech((mci->mci_sai)[SASL_MECH],
1974 if (mci->mci_saslcap == NULL ||
1975 *(mci->mci_saslcap) == '\0')
1976 return usedgetauth ? result
1981 } while (result != EX_OK);
1987 ** SMTPMAILFROM -- send MAIL command
1991 ** mci -- the mailer connection structure.
1992 ** e -- the envelope (including the sender to specify).
1996 smtpmailfrom(m, mci, e)
2005 char buf[MAXNAME + 1];
2006 char optbuf[MAXLINE];
2009 sm_dprintf("smtpmailfrom: CurHost=%s\n", CurHostName);
2013 ** Check if connection is gone, if so
2014 ** it's a tempfail and we use mci_errno
2018 if (mci->mci_state == MCIS_CLOSED)
2020 errno = mci->mci_errno;
2024 /* set up appropriate options to include */
2025 if (bitset(MCIF_SIZE, mci->mci_flags) && e->e_msgsize > 0)
2027 (void) sm_snprintf(optbuf, sizeof(optbuf), " SIZE=%ld",
2029 bufp = &optbuf[strlen(optbuf)];
2037 bodytype = e->e_bodytype;
2038 if (bitset(MCIF_8BITMIME, mci->mci_flags))
2040 if (bodytype == NULL &&
2041 bitset(MM_MIME8BIT, MimeMode) &&
2042 bitset(EF_HAS8BIT, e->e_flags) &&
2043 !bitset(EF_DONT_MIME, e->e_flags) &&
2044 !bitnset(M_8BITS, m->m_flags))
2045 bodytype = "8BITMIME";
2046 if (bodytype != NULL &&
2047 SPACELEFT(optbuf, bufp) > strlen(bodytype) + 7)
2049 (void) sm_snprintf(bufp, SPACELEFT(optbuf, bufp),
2050 " BODY=%s", bodytype);
2051 bufp += strlen(bufp);
2054 else if (bitnset(M_8BITS, m->m_flags) ||
2055 !bitset(EF_HAS8BIT, e->e_flags) ||
2056 bitset(MCIF_8BITOK, mci->mci_flags))
2059 /* just pass it through */
2062 else if (bitset(MM_CVTMIME, MimeMode) &&
2063 !bitset(EF_DONT_MIME, e->e_flags) &&
2064 (!bitset(MM_PASS8BIT, MimeMode) ||
2065 bitset(EF_IS_MIME, e->e_flags)))
2067 /* must convert from 8bit MIME format to 7bit encoded */
2068 mci->mci_flags |= MCIF_CVT8TO7;
2070 #endif /* MIME8TO7 */
2071 else if (!bitset(MM_PASS8BIT, MimeMode))
2073 /* cannot just send a 8-bit version */
2074 extern char MsgBuf[];
2076 usrerrenh("5.6.3", "%s does not support 8BITMIME", CurHostName);
2077 mci_setstat(mci, EX_NOTSTICKY, "5.6.3", MsgBuf);
2081 if (bitset(MCIF_DSN, mci->mci_flags))
2083 if (e->e_envid != NULL &&
2084 SPACELEFT(optbuf, bufp) > strlen(e->e_envid) + 7)
2086 (void) sm_snprintf(bufp, SPACELEFT(optbuf, bufp),
2087 " ENVID=%s", e->e_envid);
2088 bufp += strlen(bufp);
2091 /* RET= parameter */
2092 if (bitset(EF_RET_PARAM, e->e_flags) &&
2093 SPACELEFT(optbuf, bufp) > 9)
2095 (void) sm_snprintf(bufp, SPACELEFT(optbuf, bufp),
2097 bitset(EF_NO_BODY_RETN, e->e_flags) ?
2099 bufp += strlen(bufp);
2103 if (bitset(MCIF_AUTH, mci->mci_flags) && e->e_auth_param != NULL &&
2104 SPACELEFT(optbuf, bufp) > strlen(e->e_auth_param) + 7
2106 && (!bitset(SASL_AUTH_AUTH, SASLOpts) || mci->mci_sasl_auth)
2110 (void) sm_snprintf(bufp, SPACELEFT(optbuf, bufp),
2111 " AUTH=%s", e->e_auth_param);
2112 bufp += strlen(bufp);
2116 ** 17 is the max length required, we could use log() to compute
2117 ** the exact length (and check IS_DLVR_TRACE())
2120 if (bitset(MCIF_DLVR_BY, mci->mci_flags) &&
2121 IS_DLVR_BY(e) && SPACELEFT(optbuf, bufp) > 17)
2126 ** Avoid problems with delays (for R) since the check
2127 ** in deliver() whether min-deliver-time is sufficient.
2128 ** Alternatively we could pass the computed time to this
2132 dby = e->e_deliver_by - (curtime() - e->e_ctime);
2133 if (dby <= 0 && IS_DLVR_RETURN(e))
2134 dby = mci->mci_min_by <= 0 ? 1 : mci->mci_min_by;
2135 (void) sm_snprintf(bufp, SPACELEFT(optbuf, bufp),
2138 IS_DLVR_RETURN(e) ? 'R' : 'N',
2139 IS_DLVR_TRACE(e) ? "T" : "");
2140 bufp += strlen(bufp);
2144 ** Send the MAIL command.
2145 ** Designates the sender.
2148 mci->mci_state = MCIS_MAIL;
2150 if (bitset(EF_RESPONSE, e->e_flags) &&
2151 !bitnset(M_NO_NULL_FROM, m->m_flags))
2154 expand("\201g", buf, sizeof(buf), e);
2157 /* strip off <angle brackets> (put back on below) */
2158 bufp = &buf[strlen(buf) - 1];
2165 if (bitnset(M_LOCALMAILER, e->e_from.q_mailer->m_flags) ||
2166 !bitnset(M_FROMPATH, m->m_flags))
2168 smtpmessage("MAIL From:<%s>%s", m, mci, bufp, optbuf);
2172 smtpmessage("MAIL From:<@%s%c%s>%s", m, mci, MyHostName,
2173 *bufp == '@' ? ',' : ':', bufp, optbuf);
2175 SmtpPhase = mci->mci_phase = "client MAIL";
2176 sm_setproctitle(true, e, "%s %s: %s", qid_printname(e),
2177 CurHostName, mci->mci_phase);
2178 r = reply(m, mci, e, TimeOuts.to_mail, NULL, &enhsc, XS_DEFAULT);
2181 /* communications failure */
2182 mci_setstat(mci, EX_TEMPFAIL, "4.4.2", NULL);
2185 else if (r == SMTPCLOSING)
2187 /* service shutting down: handled by reply() */
2190 else if (REPLYTYPE(r) == 4)
2192 mci_setstat(mci, EX_NOTSTICKY, ENHSCN(enhsc, smtptodsn(r)),
2196 else if (REPLYTYPE(r) == 2)
2202 /* syntax error in arguments */
2203 mci_setstat(mci, EX_NOTSTICKY, ENHSCN(enhsc, "5.5.2"),
2209 /* mailbox name not allowed */
2210 mci_setstat(mci, EX_NOTSTICKY, ENHSCN(enhsc, "5.1.3"),
2216 /* exceeded storage allocation */
2217 mci_setstat(mci, EX_NOTSTICKY, ENHSCN(enhsc, "5.3.4"),
2219 if (bitset(MCIF_SIZE, mci->mci_flags))
2220 e->e_flags |= EF_NO_BODY_RETN;
2221 return EX_UNAVAILABLE;
2223 else if (REPLYTYPE(r) == 5)
2226 mci_setstat(mci, EX_NOTSTICKY, ENHSCN(enhsc, "5.0.0"),
2228 return EX_UNAVAILABLE;
2233 sm_syslog(LOG_CRIT, e->e_id,
2234 "%.100s: SMTP MAIL protocol error: %s",
2236 shortenstring(SmtpReplyBuffer, 403));
2239 /* protocol error -- close up */
2240 mci_setstat(mci, EX_PROTOCOL, ENHSCN(enhsc, "5.5.1"),
2242 smtpquit(m, mci, e);
2246 ** SMTPRCPT -- designate recipient.
2249 ** to -- address of recipient.
2250 ** m -- the mailer we are sending to.
2251 ** mci -- the connection info for this transaction.
2252 ** e -- the envelope for this transaction.
2255 ** exit status corresponding to recipient status.
2258 ** Sends the mail via SMTP.
2262 smtprcpt(to, m, mci, e, ctladdr, xstart)
2271 char optbuf[MAXLINE];
2275 ** If there is status waiting from the other end, read it.
2276 ** This should normally happen because of SMTP pipelining.
2279 while (mci->mci_nextaddr != NULL &&
2280 sm_io_getinfo(mci->mci_in, SM_IO_IS_READABLE, NULL) > 0)
2284 r = smtprcptstat(mci->mci_nextaddr, m, mci, e);
2287 markfailure(e, mci->mci_nextaddr, mci, r, false);
2288 giveresponse(r, mci->mci_nextaddr->q_status, m, mci,
2289 ctladdr, xstart, e, to);
2291 mci->mci_nextaddr = mci->mci_nextaddr->q_pchain;
2293 #endif /* PIPELINING */
2296 ** Check if connection is gone, if so
2297 ** it's a tempfail and we use mci_errno
2301 if (mci->mci_state == MCIS_CLOSED)
2303 errno = mci->mci_errno;
2311 ** Warning: in the following it is assumed that the free space
2312 ** in bufp is sizeof(optbuf)
2315 if (bitset(MCIF_DSN, mci->mci_flags))
2317 if (IS_DLVR_NOTIFY(e) &&
2318 !bitset(MCIF_DLVR_BY, mci->mci_flags))
2320 /* RFC 2852: 4.1.4.2 */
2321 if (!bitset(QHASNOTIFY, to->q_flags))
2322 to->q_flags |= QPINGONFAILURE|QPINGONDELAY|QHASNOTIFY;
2323 else if (bitset(QPINGONSUCCESS, to->q_flags) ||
2324 bitset(QPINGONFAILURE, to->q_flags) ||
2325 bitset(QPINGONDELAY, to->q_flags))
2326 to->q_flags |= QPINGONDELAY;
2329 /* NOTIFY= parameter */
2330 if (bitset(QHASNOTIFY, to->q_flags) &&
2331 bitset(QPRIMARY, to->q_flags) &&
2332 !bitnset(M_LOCALMAILER, m->m_flags))
2334 bool firstone = true;
2336 (void) sm_strlcat(bufp, " NOTIFY=", sizeof(optbuf));
2337 if (bitset(QPINGONSUCCESS, to->q_flags))
2339 (void) sm_strlcat(bufp, "SUCCESS", sizeof(optbuf));
2342 if (bitset(QPINGONFAILURE, to->q_flags))
2345 (void) sm_strlcat(bufp, ",",
2347 (void) sm_strlcat(bufp, "FAILURE", sizeof(optbuf));
2350 if (bitset(QPINGONDELAY, to->q_flags))
2353 (void) sm_strlcat(bufp, ",",
2355 (void) sm_strlcat(bufp, "DELAY", sizeof(optbuf));
2359 (void) sm_strlcat(bufp, "NEVER", sizeof(optbuf));
2360 bufp += strlen(bufp);
2363 /* ORCPT= parameter */
2364 if (to->q_orcpt != NULL &&
2365 SPACELEFT(optbuf, bufp) > strlen(to->q_orcpt) + 7)
2367 (void) sm_snprintf(bufp, SPACELEFT(optbuf, bufp),
2368 " ORCPT=%s", to->q_orcpt);
2369 bufp += strlen(bufp);
2373 smtpmessage("RCPT To:<%s>%s", m, mci, to->q_user, optbuf);
2374 mci->mci_state = MCIS_RCPT;
2376 SmtpPhase = mci->mci_phase = "client RCPT";
2377 sm_setproctitle(true, e, "%s %s: %s", qid_printname(e),
2378 CurHostName, mci->mci_phase);
2382 ** If running SMTP pipelining, we will pick up status later
2385 if (bitset(MCIF_PIPELINED, mci->mci_flags))
2387 #endif /* PIPELINING */
2389 return smtprcptstat(to, m, mci, e);
2392 ** SMTPRCPTSTAT -- get recipient status
2394 ** This is only called during SMTP pipelining
2397 ** to -- address of recipient.
2398 ** m -- mailer being sent to.
2399 ** mci -- the mailer connection information.
2400 ** e -- the envelope for this message.
2403 ** EX_* -- protocol status
2407 smtprcptstat(to, m, mci, e)
2411 register ENVELOPE *e;
2418 ** Check if connection is gone, if so
2419 ** it's a tempfail and we use mci_errno
2423 if (mci->mci_state == MCIS_CLOSED)
2425 errno = mci->mci_errno;
2430 r = reply(m, mci, e, TimeOuts.to_rcpt, NULL, &enhsc, XS_DEFAULT);
2432 to->q_rstatus = sm_rpool_strdup_x(e->e_rpool, SmtpReplyBuffer);
2433 to->q_status = ENHSCN_RPOOL(enhsc, smtptodsn(r), e->e_rpool);
2434 if (!bitnset(M_LMTP, m->m_flags))
2435 to->q_statmta = mci->mci_host;
2436 if (r < 0 || REPLYTYPE(r) == 4)
2438 mci->mci_retryrcpt = true;
2442 else if (REPLYTYPE(r) == 2)
2446 if ((t = mci->mci_tolist) != NULL)
2451 for (p = to->q_paddr; *p != '\0'; *t++ = *p++)
2454 mci->mci_tolist = t;
2458 #endif /* PIPELINING */
2463 to->q_status = ENHSCN_RPOOL(enhsc, "5.1.1", e->e_rpool);
2468 to->q_status = ENHSCN_RPOOL(enhsc, "5.1.6", e->e_rpool);
2473 to->q_status = ENHSCN_RPOOL(enhsc, "5.1.3", e->e_rpool);
2476 else if (REPLYTYPE(r) == 5)
2478 return EX_UNAVAILABLE;
2483 sm_syslog(LOG_CRIT, e->e_id,
2484 "%.100s: SMTP RCPT protocol error: %s",
2486 shortenstring(SmtpReplyBuffer, 403));
2489 mci_setstat(mci, EX_PROTOCOL, ENHSCN(enhsc, "5.5.1"),
2494 ** SMTPDATA -- send the data and clean up the transaction.
2497 ** m -- mailer being sent to.
2498 ** mci -- the mailer connection information.
2499 ** e -- the envelope for this message.
2502 ** exit status corresponding to DATA command.
2506 smtpdata(m, mci, e, ctladdr, xstart)
2509 register ENVELOPE *e;
2520 ** Check if connection is gone, if so
2521 ** it's a tempfail and we use mci_errno
2525 if (mci->mci_state == MCIS_CLOSED)
2527 errno = mci->mci_errno;
2535 ** First send the command and check that it is ok.
2536 ** Then send the data (if there are valid recipients).
2537 ** Follow it up with a dot to terminate.
2538 ** Finally get the results of the transaction.
2541 /* send the command and check ok to proceed */
2542 smtpmessage("DATA", m, mci);
2545 if (mci->mci_nextaddr != NULL)
2547 char *oldto = e->e_to;
2549 /* pick up any pending RCPT responses for SMTP pipelining */
2550 while (mci->mci_nextaddr != NULL)
2554 e->e_to = mci->mci_nextaddr->q_paddr;
2555 r = smtprcptstat(mci->mci_nextaddr, m, mci, e);
2558 markfailure(e, mci->mci_nextaddr, mci, r,
2560 giveresponse(r, mci->mci_nextaddr->q_status, m,
2561 mci, ctladdr, xstart, e,
2563 if (r == EX_TEMPFAIL)
2564 mci->mci_nextaddr->q_state = QS_RETRY;
2566 mci->mci_nextaddr = mci->mci_nextaddr->q_pchain;
2571 ** Connection might be closed in response to a RCPT command,
2572 ** i.e., the server responded with 421. In that case (at
2573 ** least) one RCPT has a temporary failure, hence we don't
2574 ** need to check mci_okrcpts (as it is done below) to figure
2575 ** out which error to return.
2578 if (mci->mci_state == MCIS_CLOSED)
2580 errno = mci->mci_errno;
2584 #endif /* PIPELINING */
2586 /* now proceed with DATA phase */
2587 SmtpPhase = mci->mci_phase = "client DATA 354";
2588 mci->mci_state = MCIS_DATA;
2589 sm_setproctitle(true, e, "%s %s: %s",
2590 qid_printname(e), CurHostName, mci->mci_phase);
2591 r = reply(m, mci, e, TimeOuts.to_datainit, NULL, &enhsc, XS_DEFAULT);
2592 if (r < 0 || REPLYTYPE(r) == 4)
2595 smtpquit(m, mci, e);
2596 errno = mci->mci_errno;
2599 else if (REPLYTYPE(r) == 5)
2601 smtprset(m, mci, e);
2603 if (mci->mci_okrcpts <= 0)
2604 return mci->mci_retryrcpt ? EX_TEMPFAIL
2606 #endif /* PIPELINING */
2607 return EX_UNAVAILABLE;
2609 else if (REPLYTYPE(r) != 3)
2613 sm_syslog(LOG_CRIT, e->e_id,
2614 "%.100s: SMTP DATA-1 protocol error: %s",
2616 shortenstring(SmtpReplyBuffer, 403));
2618 smtprset(m, mci, e);
2619 mci_setstat(mci, EX_PROTOCOL, ENHSCN(enhsc, "5.5.1"),
2622 if (mci->mci_okrcpts <= 0)
2623 return mci->mci_retryrcpt ? EX_TEMPFAIL
2625 #endif /* PIPELINING */
2630 if (mci->mci_okrcpts > 0)
2632 #endif /* PIPELINING */
2635 ** Set timeout around data writes. Make it at least large
2636 ** enough for DNS timeouts on all recipients plus some fudge
2637 ** factor. The main thing is that it should not be infinite.
2642 /* simulate a DATA timeout */
2646 timeout = DATA_PROGRESS_TIMEOUT * 1000;
2647 sm_io_setinfo(mci->mci_out, SM_IO_WHAT_TIMEOUT, &timeout);
2651 ** Output the actual message.
2654 if (!(*e->e_puthdr)(mci, e->e_header, e, M87F_OUTER))
2659 /* simulate a DATA timeout */
2663 if (!(*e->e_putbody)(mci, e, NULL))
2667 ** Cleanup after sending message.
2673 #endif /* PIPELINING */
2675 #if _FFR_CATCH_BROKEN_MTAS
2676 if (sm_io_getinfo(mci->mci_in, SM_IO_IS_READABLE, NULL) > 0)
2678 /* terminate the message */
2679 (void) sm_io_fprintf(mci->mci_out, SM_TIME_DEFAULT, ".%s",
2681 if (TrafficLogFile != NULL)
2682 (void) sm_io_fprintf(TrafficLogFile, SM_TIME_DEFAULT,
2683 "%05d >>> .\n", (int) CurrentPid);
2687 sm_syslog(LOG_CRIT, e->e_id,
2688 "%.100s: SMTP DATA-1 protocol error: remote server returned response before final dot",
2690 mci->mci_errno = EIO;
2691 mci->mci_state = MCIS_ERROR;
2692 mci_setstat(mci, EX_PROTOCOL, "5.5.0", NULL);
2693 smtpquit(m, mci, e);
2696 #endif /* _FFR_CATCH_BROKEN_MTAS */
2698 if (sm_io_error(mci->mci_out))
2700 /* error during processing -- don't send the dot */
2701 mci->mci_errno = EIO;
2702 mci->mci_state = MCIS_ERROR;
2703 mci_setstat(mci, EX_IOERR, "4.4.2", NULL);
2704 smtpquit(m, mci, e);
2708 /* terminate the message */
2709 if (sm_io_fprintf(mci->mci_out, SM_TIME_DEFAULT, "%s.%s",
2710 bitset(MCIF_INLONGLINE, mci->mci_flags) ? m->m_eol : "",
2711 m->m_eol) == SM_IO_EOF)
2713 if (TrafficLogFile != NULL)
2714 (void) sm_io_fprintf(TrafficLogFile, SM_TIME_DEFAULT,
2715 "%05d >>> .\n", (int) CurrentPid);
2719 /* check for the results of the transaction */
2720 SmtpPhase = mci->mci_phase = "client DATA status";
2721 sm_setproctitle(true, e, "%s %s: %s", qid_printname(e),
2722 CurHostName, mci->mci_phase);
2723 if (bitnset(M_LMTP, m->m_flags))
2725 r = reply(m, mci, e, TimeOuts.to_datafinal, NULL, &enhsc, XS_DEFAULT);
2728 if (mci->mci_state == MCIS_DATA)
2729 mci->mci_state = MCIS_OPEN;
2730 xstat = EX_NOTSTICKY;
2732 rstat = EX_TEMPFAIL;
2733 else if (REPLYTYPE(r) == 4)
2734 rstat = xstat = EX_TEMPFAIL;
2735 else if (REPLYTYPE(r) == 2)
2736 rstat = xstat = EX_OK;
2737 else if (REPLYCLASS(r) != 5)
2738 rstat = xstat = EX_PROTOCOL;
2739 else if (REPLYTYPE(r) == 5)
2740 rstat = EX_UNAVAILABLE;
2742 rstat = EX_PROTOCOL;
2743 mci_setstat(mci, xstat, ENHSCN(enhsc, smtptodsn(r)),
2745 if (bitset(MCIF_ENHSTAT, mci->mci_flags) &&
2746 (r = isenhsc(SmtpReplyBuffer + 4, ' ')) > 0)
2750 e->e_statmsg = sm_rpool_strdup_x(e->e_rpool, &SmtpReplyBuffer[r]);
2751 SmtpPhase = mci->mci_phase = "idle";
2752 sm_setproctitle(true, e, "%s: %s", CurHostName, mci->mci_phase);
2753 if (rstat != EX_PROTOCOL)
2757 sm_syslog(LOG_CRIT, e->e_id,
2758 "%.100s: SMTP DATA-2 protocol error: %s",
2760 shortenstring(SmtpReplyBuffer, 403));
2765 mci->mci_errno = errno;
2766 mci->mci_state = MCIS_ERROR;
2767 mci_setstat(mci, EX_TEMPFAIL, "4.4.2", NULL);
2770 ** If putbody() couldn't finish due to a timeout,
2771 ** rewind it here in the timeout handler. See
2772 ** comments at the end of putbody() for reasoning.
2775 if (e->e_dfp != NULL)
2776 (void) bfrewind(e->e_dfp);
2778 errno = mci->mci_errno;
2779 syserr("451 4.4.1 timeout writing message to %s", CurHostName);
2780 smtpquit(m, mci, e);
2785 ** SMTPGETSTAT -- get status code from DATA in LMTP
2788 ** m -- the mailer to which we are sending the message.
2789 ** mci -- the mailer connection structure.
2790 ** e -- the current envelope.
2793 ** The exit status corresponding to the reply code.
2797 smtpgetstat(m, mci, e)
2809 /* check for the results of the transaction */
2810 r = reply(m, mci, e, TimeOuts.to_datafinal, NULL, &enhsc, XS_DEFAULT);
2813 xstat = EX_NOTSTICKY;
2814 if (REPLYTYPE(r) == 4)
2815 status = EX_TEMPFAIL;
2816 else if (REPLYTYPE(r) == 2)
2817 status = xstat = EX_OK;
2818 else if (REPLYCLASS(r) != 5)
2819 status = xstat = EX_PROTOCOL;
2820 else if (REPLYTYPE(r) == 5)
2821 status = EX_UNAVAILABLE;
2823 status = EX_PROTOCOL;
2824 if (bitset(MCIF_ENHSTAT, mci->mci_flags) &&
2825 (off = isenhsc(SmtpReplyBuffer + 4, ' ')) > 0)
2829 e->e_statmsg = sm_rpool_strdup_x(e->e_rpool, &SmtpReplyBuffer[off]);
2830 mci_setstat(mci, xstat, ENHSCN(enhsc, smtptodsn(r)), SmtpReplyBuffer);
2831 if (LogLevel > 1 && status == EX_PROTOCOL)
2833 sm_syslog(LOG_CRIT, e->e_id,
2834 "%.100s: SMTP DATA-3 protocol error: %s",
2836 shortenstring(SmtpReplyBuffer, 403));
2841 ** SMTPQUIT -- close the SMTP connection.
2844 ** m -- a pointer to the mailer.
2845 ** mci -- the mailer connection information.
2846 ** e -- the current envelope.
2852 ** sends the final protocol and closes the connection.
2861 bool oldSuprErrs = SuprErrs;
2865 if (mci->mci_state == MCIS_CLOSED)
2867 mci_close(mci, "smtpquit:1");
2871 oldcurhost = CurHostName;
2872 CurHostName = mci->mci_host; /* XXX UGLY XXX */
2873 if (CurHostName == NULL)
2874 CurHostName = MyHostName;
2877 mci->mci_okrcpts = 0;
2878 #endif /* PIPELINING */
2881 ** Suppress errors here -- we may be processing a different
2882 ** job when we do the quit connection, and we don't want the
2883 ** new job to be penalized for something that isn't it's
2889 /* send the quit message if we haven't gotten I/O error */
2890 if (mci->mci_state != MCIS_ERROR &&
2891 mci->mci_state != MCIS_QUITING)
2893 SmtpPhase = "client QUIT";
2894 mci->mci_state = MCIS_QUITING;
2895 smtpmessage("QUIT", m, mci);
2896 (void) reply(m, mci, e, TimeOuts.to_quit, NULL, NULL,
2898 SuprErrs = oldSuprErrs;
2899 if (mci->mci_state == MCIS_CLOSED)
2903 /* now actually close the connection and pick up the zombie */
2904 rcode = endmailer(mci, e, NULL);
2907 char *mailer = NULL;
2909 if (mci->mci_mailer != NULL &&
2910 mci->mci_mailer->m_name != NULL)
2911 mailer = mci->mci_mailer->m_name;
2913 /* look for naughty mailers */
2914 sm_syslog(LOG_ERR, e->e_id,
2915 "smtpquit: mailer%s%s exited with exit value %d",
2916 mailer == NULL ? "" : " ",
2917 mailer == NULL ? "" : mailer,
2921 SuprErrs = oldSuprErrs;
2924 CurHostName = oldcurhost;
2928 ** SMTPRSET -- send a RSET (reset) command
2931 ** m -- a pointer to the mailer.
2932 ** mci -- the mailer connection information.
2933 ** e -- the current envelope.
2939 ** closes the connection if there is no reply to RSET.
2950 CurHostName = mci->mci_host; /* XXX UGLY XXX */
2951 if (CurHostName == NULL)
2952 CurHostName = MyHostName;
2955 mci->mci_okrcpts = 0;
2956 #endif /* PIPELINING */
2959 ** Check if connection is gone, if so
2960 ** it's a tempfail and we use mci_errno
2964 if (mci->mci_state == MCIS_CLOSED)
2966 errno = mci->mci_errno;
2970 SmtpPhase = "client RSET";
2971 smtpmessage("RSET", m, mci);
2972 r = reply(m, mci, e, TimeOuts.to_rset, NULL, NULL, XS_DEFAULT);
2977 ** Any response is deemed to be acceptable.
2978 ** The standard does not state the proper action
2979 ** to take when a value other than 250 is received.
2981 ** However, if 421 is returned for the RSET, leave
2982 ** mci_state alone (MCIS_SSD can be set in reply()
2983 ** and MCIS_CLOSED can be set in smtpquit() if
2984 ** reply() gets a 421 and calls smtpquit()).
2987 if (mci->mci_state != MCIS_SSD && mci->mci_state != MCIS_CLOSED)
2988 mci->mci_state = MCIS_OPEN;
2989 else if (mci->mci_exitstat == EX_OK)
2990 mci_setstat(mci, EX_TEMPFAIL, "4.5.0", NULL);
2993 ** SMTPPROBE -- check the connection state
2996 ** mci -- the mailer connection information.
3002 ** closes the connection if there is no reply to RSET.
3010 MAILER *m = mci->mci_mailer;
3012 extern ENVELOPE BlankEnvelope;
3014 CurHostName = mci->mci_host; /* XXX UGLY XXX */
3015 if (CurHostName == NULL)
3016 CurHostName = MyHostName;
3019 SmtpPhase = "client probe";
3020 smtpmessage("RSET", m, mci);
3021 r = reply(m, mci, e, TimeOuts.to_miscshort, NULL, NULL, XS_DEFAULT);
3022 if (REPLYTYPE(r) != 2)
3023 smtpquit(m, mci, e);
3027 ** REPLY -- read arpanet reply
3030 ** m -- the mailer we are reading the reply from.
3031 ** mci -- the mailer connection info structure.
3032 ** e -- the current envelope.
3033 ** timeout -- the timeout for reads.
3034 ** pfunc -- processing function called on each line of response.
3035 ** If null, no special processing is done.
3036 ** enhstat -- optional, returns enhanced error code string (if set)
3037 ** rtype -- type of SmtpMsgBuffer: does it contains secret data?
3040 ** reply code it reads.
3043 ** flushes the mail file.
3047 reply(m, mci, e, timeout, pfunc, enhstat, rtype)
3052 void (*pfunc) __P((char *, bool, MAILER *, MCI *, ENVELOPE *));
3056 register char *bufp;
3058 bool firstline = true;
3059 char junkbuf[MAXLINE];
3060 static char enhstatcode[ENHSCLEN];
3064 ** Flush the output before reading response.
3066 ** For SMTP pipelining, it would be better if we didn't do
3067 ** this if there was already data waiting to be read. But
3068 ** to do it properly means pushing it to the I/O library,
3069 ** since it really needs to be done below the buffer layer.
3072 if (mci->mci_out != NULL)
3073 (void) sm_io_flush(mci->mci_out, SM_TIME_DEFAULT);
3076 sm_dprintf("reply\n");
3079 ** Read the input line, being careful not to hang.
3082 bufp = SmtpReplyBuffer;
3083 set_tls_rd_tmo(timeout);
3088 /* actually do the read */
3089 if (e->e_xfp != NULL) /* for debugging */
3090 (void) sm_io_flush(e->e_xfp, SM_TIME_DEFAULT);
3092 /* if we are in the process of closing just give the code */
3093 if (mci->mci_state == MCIS_CLOSED)
3096 /* don't try to read from a non-existent fd */
3097 if (mci->mci_in == NULL)
3099 if (mci->mci_errno == 0)
3100 mci->mci_errno = EBADF;
3102 /* errors on QUIT should be ignored */
3103 if (strncmp(SmtpMsgBuffer, "QUIT", 4) == 0)
3105 errno = mci->mci_errno;
3106 mci_close(mci, "reply:1");
3109 mci->mci_state = MCIS_ERROR;
3110 smtpquit(m, mci, e);
3111 errno = mci->mci_errno;
3115 if (mci->mci_out != NULL)
3116 (void) sm_io_flush(mci->mci_out, SM_TIME_DEFAULT);
3118 /* get the line from the other side */
3119 p = sfgets(bufp, MAXLINE, mci->mci_in, timeout, SmtpPhase);
3121 mci->mci_lastuse = curtime();
3126 extern char MsgBuf[];
3128 /* errors on QUIT should be ignored */
3129 if (strncmp(SmtpMsgBuffer, "QUIT", 4) == 0)
3131 mci_close(mci, "reply:2");
3135 /* if the remote end closed early, fake an error */
3139 (void) sm_snprintf(SmtpReplyBuffer,
3140 sizeof(SmtpReplyBuffer),
3141 "421 4.4.1 Connection reset by %s",
3145 #else /* ECONNRESET */
3147 #endif /* ECONNRESET */
3150 mci->mci_errno = errno;
3151 oldholderrs = HoldErrs;
3153 usrerr("451 4.4.1 reply: read error from %s",
3155 mci_setstat(mci, EX_TEMPFAIL, "4.4.2", MsgBuf);
3157 /* if debugging, pause so we can see state */
3160 mci->mci_state = MCIS_ERROR;
3161 smtpquit(m, mci, e);
3167 if (e->e_to != NULL)
3169 (void) sm_snprintf(p,
3172 shortenstring(e->e_to, MAXSHORTSTR));
3175 (void) sm_snprintf(p, SPACELEFT(wbuf, p),
3176 "reply(%.100s) during %s",
3177 CURHOSTNAME, SmtpPhase);
3181 HoldErrs = oldholderrs;
3185 fixcrlf(bufp, true);
3187 /* EHLO failure is not a real error */
3188 if (e->e_xfp != NULL && (bufp[0] == '4' ||
3189 (bufp[0] == '5' && strncmp(SmtpMsgBuffer, "EHLO", 4) != 0)))
3191 /* serious error -- log the previous command */
3194 /* inform user who we are chatting with */
3195 (void) sm_io_fprintf(CurEnv->e_xfp,
3197 "... while talking to %s:\n",
3199 SmtpNeedIntro = false;
3201 if (SmtpMsgBuffer[0] != '\0')
3203 (void) sm_io_fprintf(e->e_xfp,
3206 (rtype == XS_STARTTLS)
3207 ? "STARTTLS dialogue"
3208 : ((rtype == XS_AUTH)
3211 SmtpMsgBuffer[0] = '\0';
3214 /* now log the message as from the other side */
3215 (void) sm_io_fprintf(e->e_xfp, SM_TIME_DEFAULT,
3219 /* display the input for verbose mode */
3221 nmessage("050 %s", bufp);
3223 /* ignore improperly formatted input */
3224 if (!ISSMTPREPLY(bufp))
3227 if (bitset(MCIF_ENHSTAT, mci->mci_flags) &&
3229 extenhsc(bufp + 4, ' ', enhstatcode) > 0)
3230 *enhstat = enhstatcode;
3232 /* process the line */
3234 (*pfunc)(bufp, firstline, m, mci, e);
3238 /* decode the reply code */
3241 /* extra semantics: 0xx codes are "informational" */
3245 /* if no continuation lines, return this line */
3249 /* first line of real reply -- ignore rest */
3254 ** Now look at SmtpReplyBuffer -- only care about the first
3255 ** line of the response from here on out.
3258 /* save temporary failure messages for posterity */
3259 if (SmtpReplyBuffer[0] == '4')
3260 (void) sm_strlcpy(SmtpError, SmtpReplyBuffer, sizeof(SmtpError));
3262 /* reply code 421 is "Service Shutting Down" */
3263 if (r == SMTPCLOSING && mci->mci_state != MCIS_SSD &&
3264 mci->mci_state != MCIS_QUITING)
3266 /* send the quit protocol */
3267 mci->mci_state = MCIS_SSD;
3268 smtpquit(m, mci, e);
3274 ** SMTPMESSAGE -- send message to server
3278 ** m -- the mailer to control formatting.
3279 ** a, b, c -- parameters
3285 ** writes message to mci->mci_out.
3291 smtpmessage(char *f, MAILER *m, MCI *mci, ...)
3292 #else /* __STDC__ */
3293 smtpmessage(f, m, mci, va_alist)
3298 #endif /* __STDC__ */
3302 SM_VA_START(ap, mci);
3303 (void) sm_vsnprintf(SmtpMsgBuffer, sizeof(SmtpMsgBuffer), f, ap);
3306 if (tTd(18, 1) || Verbose)
3307 nmessage(">>> %s", SmtpMsgBuffer);
3308 if (TrafficLogFile != NULL)
3309 (void) sm_io_fprintf(TrafficLogFile, SM_TIME_DEFAULT,
3310 "%05d >>> %s\n", (int) CurrentPid,
3312 if (mci->mci_out != NULL)
3314 (void) sm_io_fprintf(mci->mci_out, SM_TIME_DEFAULT, "%s%s",
3315 SmtpMsgBuffer, m == NULL ? "\r\n"
3318 else if (tTd(18, 1))
3320 sm_dprintf("smtpmessage: NULL mci_out\n");