1 /* 2 * Copyright (c) 1983 Eric P. Allman 3 * Copyright (c) 1988, 1993 4 * The Regents of the University of California. All rights reserved. 5 * 6 * %sccs.include.redist.c% 7 */ 8 9 #ifndef lint 10 static char sccsid[] = "@(#)deliver.c 8.92 (Berkeley) 08/07/94"; 11 #endif /* not lint */ 12 13 #include "sendmail.h" 14 #include <netdb.h> 15 #include <errno.h> 16 #if NAMED_BIND 17 #include <resolv.h> 18 19 extern int h_errno; 20 #endif 21 22 extern char SmtpError[]; 23 24 /* 25 ** SENDALL -- actually send all the messages. 26 ** 27 ** Parameters: 28 ** e -- the envelope to send. 29 ** mode -- the delivery mode to use. If SM_DEFAULT, use 30 ** the current e->e_sendmode. 31 ** 32 ** Returns: 33 ** none. 34 ** 35 ** Side Effects: 36 ** Scans the send lists and sends everything it finds. 37 ** Delivers any appropriate error messages. 38 ** If we are running in a non-interactive mode, takes the 39 ** appropriate action. 40 */ 41 42 sendall(e, mode) 43 ENVELOPE *e; 44 char mode; 45 { 46 register ADDRESS *q; 47 char *owner; 48 int otherowners; 49 register ENVELOPE *ee; 50 ENVELOPE *splitenv = NULL; 51 bool announcequeueup; 52 53 /* 54 ** If we have had global, fatal errors, don't bother sending 55 ** the message at all if we are in SMTP mode. Local errors 56 ** (e.g., a single address failing) will still cause the other 57 ** addresses to be sent. 58 */ 59 60 if (bitset(EF_FATALERRS, e->e_flags) && 61 (OpMode == MD_SMTP || OpMode == MD_DAEMON)) 62 { 63 e->e_flags |= EF_CLRQUEUE; 64 return; 65 } 66 67 /* determine actual delivery mode */ 68 CurrentLA = getla(); 69 if (mode == SM_DEFAULT) 70 { 71 mode = e->e_sendmode; 72 if (mode != SM_VERIFY && 73 shouldqueue(e->e_msgpriority, e->e_ctime)) 74 mode = SM_QUEUE; 75 announcequeueup = mode == SM_QUEUE; 76 } 77 else 78 announcequeueup = FALSE; 79 80 if (tTd(13, 1)) 81 { 82 printf("\n===== SENDALL: mode %c, id %s, e_from ", 83 mode, e->e_id); 84 printaddr(&e->e_from, FALSE); 85 printf("sendqueue:\n"); 86 printaddr(e->e_sendqueue, TRUE); 87 } 88 89 /* 90 ** Do any preprocessing necessary for the mode we are running. 91 ** Check to make sure the hop count is reasonable. 92 ** Delete sends to the sender in mailing lists. 93 */ 94 95 CurEnv = e; 96 97 if (e->e_hopcount > MaxHopCount) 98 { 99 errno = 0; 100 e->e_flags |= EF_FATALERRS|EF_PM_NOTIFY|EF_CLRQUEUE; 101 syserr("554 too many hops %d (%d max): from %s via %s, to %s", 102 e->e_hopcount, MaxHopCount, e->e_from.q_paddr, 103 RealHostName == NULL ? "localhost" : RealHostName, 104 e->e_sendqueue->q_paddr); 105 return; 106 } 107 108 /* 109 ** Do sender deletion. 110 ** 111 ** If the sender has the QQUEUEUP flag set, skip this. 112 ** This can happen if the name server is hosed when you 113 ** are trying to send mail. The result is that the sender 114 ** is instantiated in the queue as a recipient. 115 */ 116 117 if (!bitset(EF_METOO, e->e_flags) && 118 !bitset(QQUEUEUP, e->e_from.q_flags)) 119 { 120 if (tTd(13, 5)) 121 { 122 printf("sendall: QDONTSEND "); 123 printaddr(&e->e_from, FALSE); 124 } 125 e->e_from.q_flags |= QDONTSEND; 126 (void) recipient(&e->e_from, &e->e_sendqueue, e); 127 } 128 129 /* 130 ** Handle alias owners. 131 ** 132 ** We scan up the q_alias chain looking for owners. 133 ** We discard owners that are the same as the return path. 134 */ 135 136 for (q = e->e_sendqueue; q != NULL; q = q->q_next) 137 { 138 register struct address *a; 139 140 for (a = q; a != NULL && a->q_owner == NULL; a = a->q_alias) 141 continue; 142 if (a != NULL) 143 q->q_owner = a->q_owner; 144 145 if (q->q_owner != NULL && 146 !bitset(QDONTSEND, q->q_flags) && 147 strcmp(q->q_owner, e->e_from.q_paddr) == 0) 148 q->q_owner = NULL; 149 } 150 151 owner = ""; 152 otherowners = 1; 153 while (owner != NULL && otherowners > 0) 154 { 155 owner = NULL; 156 otherowners = 0; 157 158 for (q = e->e_sendqueue; q != NULL; q = q->q_next) 159 { 160 if (bitset(QDONTSEND, q->q_flags)) 161 continue; 162 163 if (q->q_owner != NULL) 164 { 165 if (owner == NULL) 166 owner = q->q_owner; 167 else if (owner != q->q_owner) 168 { 169 if (strcmp(owner, q->q_owner) == 0) 170 { 171 /* make future comparisons cheap */ 172 q->q_owner = owner; 173 } 174 else 175 { 176 otherowners++; 177 } 178 owner = q->q_owner; 179 } 180 } 181 else 182 { 183 otherowners++; 184 } 185 } 186 187 if (owner != NULL && otherowners > 0) 188 { 189 extern HDR *copyheader(); 190 extern ADDRESS *copyqueue(); 191 192 /* 193 ** Split this envelope into two. 194 */ 195 196 ee = (ENVELOPE *) xalloc(sizeof(ENVELOPE)); 197 *ee = *e; 198 ee->e_id = NULL; 199 (void) queuename(ee, '\0'); 200 201 if (tTd(13, 1)) 202 printf("sendall: split %s into %s\n", 203 e->e_id, ee->e_id); 204 205 ee->e_header = copyheader(e->e_header); 206 ee->e_sendqueue = copyqueue(e->e_sendqueue); 207 ee->e_errorqueue = copyqueue(e->e_errorqueue); 208 ee->e_flags = e->e_flags & ~(EF_INQUEUE|EF_CLRQUEUE|EF_FATALERRS|EF_SENDRECEIPT); 209 ee->e_flags |= EF_NORECEIPT; 210 setsender(owner, ee, NULL, TRUE); 211 if (tTd(13, 5)) 212 { 213 printf("sendall(split): QDONTSEND "); 214 printaddr(&ee->e_from, FALSE); 215 } 216 ee->e_from.q_flags |= QDONTSEND; 217 ee->e_dfp = NULL; 218 ee->e_xfp = NULL; 219 ee->e_df = NULL; 220 ee->e_errormode = EM_MAIL; 221 ee->e_sibling = splitenv; 222 splitenv = ee; 223 224 for (q = e->e_sendqueue; q != NULL; q = q->q_next) 225 if (q->q_owner == owner) 226 { 227 q->q_flags |= QDONTSEND; 228 q->q_flags &= ~QQUEUEUP; 229 } 230 for (q = ee->e_sendqueue; q != NULL; q = q->q_next) 231 if (q->q_owner != owner) 232 { 233 q->q_flags |= QDONTSEND; 234 q->q_flags &= ~QQUEUEUP; 235 } 236 237 if (e->e_df != NULL && mode != SM_VERIFY) 238 { 239 ee->e_dfp = NULL; 240 ee->e_df = queuename(ee, 'd'); 241 ee->e_df = newstr(ee->e_df); 242 if (link(e->e_df, ee->e_df) < 0) 243 { 244 syserr("sendall: link(%s, %s)", 245 e->e_df, ee->e_df); 246 } 247 } 248 #ifdef LOG 249 if (LogLevel > 4) 250 syslog(LOG_INFO, "%s: clone %s, owner=%s", 251 ee->e_id, e->e_id, owner); 252 #endif 253 } 254 } 255 256 if (owner != NULL) 257 { 258 setsender(owner, e, NULL, TRUE); 259 if (tTd(13, 5)) 260 { 261 printf("sendall(owner): QDONTSEND "); 262 printaddr(&e->e_from, FALSE); 263 } 264 e->e_from.q_flags |= QDONTSEND; 265 e->e_errormode = EM_MAIL; 266 e->e_flags |= EF_NORECEIPT; 267 } 268 269 # ifdef QUEUE 270 if ((mode == SM_QUEUE || mode == SM_FORK || 271 (mode != SM_VERIFY && SuperSafe)) && 272 !bitset(EF_INQUEUE, e->e_flags)) 273 { 274 /* be sure everything is instantiated in the queue */ 275 queueup(e, TRUE, announcequeueup); 276 for (ee = splitenv; ee != NULL; ee = ee->e_sibling) 277 queueup(ee, TRUE, announcequeueup); 278 } 279 #endif /* QUEUE */ 280 281 if (splitenv != NULL) 282 { 283 if (tTd(13, 1)) 284 { 285 printf("\nsendall: Split queue; remaining queue:\n"); 286 printaddr(e->e_sendqueue, TRUE); 287 } 288 289 for (ee = splitenv; ee != NULL; ee = ee->e_sibling) 290 { 291 CurEnv = ee; 292 if (mode != SM_VERIFY) 293 openxscript(ee); 294 sendenvelope(ee, mode); 295 dropenvelope(ee); 296 } 297 298 CurEnv = e; 299 } 300 sendenvelope(e, mode); 301 } 302 303 sendenvelope(e, mode) 304 register ENVELOPE *e; 305 char mode; 306 { 307 bool oldverbose; 308 int pid; 309 register ADDRESS *q; 310 char *qf; 311 char *id; 312 313 /* 314 ** If we have had global, fatal errors, don't bother sending 315 ** the message at all if we are in SMTP mode. Local errors 316 ** (e.g., a single address failing) will still cause the other 317 ** addresses to be sent. 318 */ 319 320 if (bitset(EF_FATALERRS, e->e_flags) && 321 (OpMode == MD_SMTP || OpMode == MD_DAEMON)) 322 { 323 e->e_flags |= EF_CLRQUEUE; 324 return; 325 } 326 327 oldverbose = Verbose; 328 switch (mode) 329 { 330 case SM_VERIFY: 331 Verbose = TRUE; 332 break; 333 334 case SM_QUEUE: 335 queueonly: 336 e->e_flags |= EF_INQUEUE|EF_KEEPQUEUE; 337 return; 338 339 case SM_FORK: 340 if (e->e_xfp != NULL) 341 (void) fflush(e->e_xfp); 342 343 # if !HASFLOCK 344 /* 345 ** Since fcntl locking has the interesting semantic that 346 ** the lock is owned by a process, not by an open file 347 ** descriptor, we have to flush this to the queue, and 348 ** then restart from scratch in the child. 349 */ 350 351 /* save id for future use */ 352 id = e->e_id; 353 354 /* now drop the envelope in the parent */ 355 e->e_flags |= EF_INQUEUE|EF_KEEPQUEUE; 356 dropenvelope(e); 357 358 /* and reacquire in the child */ 359 (void) dowork(id, TRUE, FALSE, e); 360 361 return; 362 363 # else /* HASFLOCK */ 364 365 pid = fork(); 366 if (pid < 0) 367 { 368 goto queueonly; 369 } 370 else if (pid > 0) 371 { 372 /* be sure we leave the temp files to our child */ 373 /* can't call unlockqueue to avoid unlink of xfp */ 374 if (e->e_lockfp != NULL) 375 (void) xfclose(e->e_lockfp, "sendenvelope", "lockfp"); 376 e->e_lockfp = NULL; 377 378 /* close any random open files in the envelope */ 379 closexscript(e); 380 if (e->e_dfp != NULL) 381 (void) xfclose(e->e_dfp, "sendenvelope", e->e_df); 382 e->e_dfp = NULL; 383 e->e_id = e->e_df = NULL; 384 385 /* catch intermediate zombie */ 386 (void) waitfor(pid); 387 return; 388 } 389 390 /* double fork to avoid zombies */ 391 pid = fork(); 392 if (pid > 0) 393 exit(EX_OK); 394 395 /* be sure we are immune from the terminal */ 396 disconnect(1, e); 397 398 /* prevent parent from waiting if there was an error */ 399 if (pid < 0) 400 { 401 e->e_flags |= EF_INQUEUE|EF_KEEPQUEUE; 402 finis(); 403 } 404 405 /* 406 ** Close any cached connections. 407 ** 408 ** We don't send the QUIT protocol because the parent 409 ** still knows about the connection. 410 ** 411 ** This should only happen when delivering an error 412 ** message. 413 */ 414 415 mci_flush(FALSE, NULL); 416 417 # endif /* HASFLOCK */ 418 419 break; 420 } 421 422 /* 423 ** Run through the list and send everything. 424 ** 425 ** Set EF_GLOBALERRS so that error messages during delivery 426 ** result in returned mail. 427 */ 428 429 e->e_nsent = 0; 430 e->e_flags |= EF_GLOBALERRS; 431 432 /* now run through the queue */ 433 for (q = e->e_sendqueue; q != NULL; q = q->q_next) 434 { 435 #ifdef XDEBUG 436 char wbuf[MAXNAME + 20]; 437 438 (void) sprintf(wbuf, "sendall(%s)", q->q_paddr); 439 checkfd012(wbuf); 440 #endif 441 if (mode == SM_VERIFY) 442 { 443 e->e_to = q->q_paddr; 444 if (!bitset(QDONTSEND|QBADADDR, q->q_flags)) 445 { 446 if (q->q_host != NULL && q->q_host[0] != '\0') 447 message("deliverable: mailer %s, host %s, user %s", 448 q->q_mailer->m_name, 449 q->q_host, 450 q->q_user); 451 else 452 message("deliverable: mailer %s, user %s", 453 q->q_mailer->m_name, 454 q->q_user); 455 } 456 } 457 else if (!bitset(QDONTSEND|QBADADDR, q->q_flags)) 458 { 459 # ifdef QUEUE 460 /* 461 ** Checkpoint the send list every few addresses 462 */ 463 464 if (e->e_nsent >= CheckpointInterval) 465 { 466 queueup(e, TRUE, FALSE); 467 e->e_nsent = 0; 468 } 469 # endif /* QUEUE */ 470 (void) deliver(e, q); 471 } 472 } 473 Verbose = oldverbose; 474 475 #ifdef XDEBUG 476 checkfd012("end of sendenvelope"); 477 #endif 478 479 if (mode == SM_FORK) 480 finis(); 481 } 482 /* 483 ** DOFORK -- do a fork, retrying a couple of times on failure. 484 ** 485 ** This MUST be a macro, since after a vfork we are running 486 ** two processes on the same stack!!! 487 ** 488 ** Parameters: 489 ** none. 490 ** 491 ** Returns: 492 ** From a macro??? You've got to be kidding! 493 ** 494 ** Side Effects: 495 ** Modifies the ==> LOCAL <== variable 'pid', leaving: 496 ** pid of child in parent, zero in child. 497 ** -1 on unrecoverable error. 498 ** 499 ** Notes: 500 ** I'm awfully sorry this looks so awful. That's 501 ** vfork for you..... 502 */ 503 504 # define NFORKTRIES 5 505 506 # ifndef FORK 507 # define FORK fork 508 # endif 509 510 # define DOFORK(fORKfN) \ 511 {\ 512 register int i;\ 513 \ 514 for (i = NFORKTRIES; --i >= 0; )\ 515 {\ 516 pid = fORKfN();\ 517 if (pid >= 0)\ 518 break;\ 519 if (i > 0)\ 520 sleep((unsigned) NFORKTRIES - i);\ 521 }\ 522 } 523 /* 524 ** DOFORK -- simple fork interface to DOFORK. 525 ** 526 ** Parameters: 527 ** none. 528 ** 529 ** Returns: 530 ** pid of child in parent. 531 ** zero in child. 532 ** -1 on error. 533 ** 534 ** Side Effects: 535 ** returns twice, once in parent and once in child. 536 */ 537 538 dofork() 539 { 540 register int pid; 541 542 DOFORK(fork); 543 return (pid); 544 } 545 /* 546 ** DELIVER -- Deliver a message to a list of addresses. 547 ** 548 ** This routine delivers to everyone on the same host as the 549 ** user on the head of the list. It is clever about mailers 550 ** that don't handle multiple users. It is NOT guaranteed 551 ** that it will deliver to all these addresses however -- so 552 ** deliver should be called once for each address on the 553 ** list. 554 ** 555 ** Parameters: 556 ** e -- the envelope to deliver. 557 ** firstto -- head of the address list to deliver to. 558 ** 559 ** Returns: 560 ** zero -- successfully delivered. 561 ** else -- some failure, see ExitStat for more info. 562 ** 563 ** Side Effects: 564 ** The standard input is passed off to someone. 565 */ 566 567 deliver(e, firstto) 568 register ENVELOPE *e; 569 ADDRESS *firstto; 570 { 571 char *host; /* host being sent to */ 572 char *user; /* user being sent to */ 573 char **pvp; 574 register char **mvp; 575 register char *p; 576 register MAILER *m; /* mailer for this recipient */ 577 ADDRESS *ctladdr; 578 register MCI *mci; 579 register ADDRESS *to = firstto; 580 bool clever = FALSE; /* running user smtp to this mailer */ 581 ADDRESS *tochain = NULL; /* chain of users in this mailer call */ 582 int rcode; /* response code */ 583 char *firstsig; /* signature of firstto */ 584 int pid; 585 char *curhost; 586 int mpvect[2]; 587 int rpvect[2]; 588 char *pv[MAXPV+1]; 589 char tobuf[TOBUFSIZE]; /* text line of to people */ 590 char buf[MAXNAME]; 591 char rpathbuf[MAXNAME]; /* translated return path */ 592 extern int checkcompat(); 593 594 errno = 0; 595 if (bitset(QDONTSEND|QBADADDR|QQUEUEUP, to->q_flags)) 596 return (0); 597 598 #if NAMED_BIND 599 /* unless interactive, try twice, over a minute */ 600 if (OpMode == MD_DAEMON || OpMode == MD_SMTP) 601 { 602 _res.retrans = 30; 603 _res.retry = 2; 604 } 605 #endif 606 607 m = to->q_mailer; 608 host = to->q_host; 609 CurEnv = e; /* just in case */ 610 e->e_statmsg = NULL; 611 SmtpError[0] = '\0'; 612 613 if (tTd(10, 1)) 614 printf("\n--deliver, id=%s, mailer=%s, host=`%s', first user=`%s'\n", 615 e->e_id, m->m_name, host, to->q_user); 616 if (tTd(10, 100)) 617 printopenfds(FALSE); 618 619 /* 620 ** If this mailer is expensive, and if we don't want to make 621 ** connections now, just mark these addresses and return. 622 ** This is useful if we want to batch connections to 623 ** reduce load. This will cause the messages to be 624 ** queued up, and a daemon will come along to send the 625 ** messages later. 626 ** This should be on a per-mailer basis. 627 */ 628 629 if (NoConnect && bitnset(M_EXPENSIVE, m->m_flags) && !Verbose) 630 { 631 for (; to != NULL; to = to->q_next) 632 { 633 if (bitset(QDONTSEND|QBADADDR|QQUEUEUP, to->q_flags) || 634 to->q_mailer != m) 635 continue; 636 to->q_flags |= QQUEUEUP; 637 e->e_to = to->q_paddr; 638 message("queued"); 639 if (LogLevel > 8) 640 logdelivery(m, NULL, "queued", NULL, e); 641 } 642 e->e_to = NULL; 643 return (0); 644 } 645 646 /* 647 ** Do initial argv setup. 648 ** Insert the mailer name. Notice that $x expansion is 649 ** NOT done on the mailer name. Then, if the mailer has 650 ** a picky -f flag, we insert it as appropriate. This 651 ** code does not check for 'pv' overflow; this places a 652 ** manifest lower limit of 4 for MAXPV. 653 ** The from address rewrite is expected to make 654 ** the address relative to the other end. 655 */ 656 657 /* rewrite from address, using rewriting rules */ 658 rcode = EX_OK; 659 (void) strcpy(rpathbuf, remotename(e->e_from.q_paddr, m, 660 RF_SENDERADDR|RF_CANONICAL, 661 &rcode, e)); 662 define('g', rpathbuf, e); /* translated return path */ 663 define('h', host, e); /* to host */ 664 Errors = 0; 665 pvp = pv; 666 *pvp++ = m->m_argv[0]; 667 668 /* insert -f or -r flag as appropriate */ 669 if (FromFlag && (bitnset(M_FOPT, m->m_flags) || bitnset(M_ROPT, m->m_flags))) 670 { 671 if (bitnset(M_FOPT, m->m_flags)) 672 *pvp++ = "-f"; 673 else 674 *pvp++ = "-r"; 675 *pvp++ = newstr(rpathbuf); 676 } 677 678 /* 679 ** Append the other fixed parts of the argv. These run 680 ** up to the first entry containing "$u". There can only 681 ** be one of these, and there are only a few more slots 682 ** in the pv after it. 683 */ 684 685 for (mvp = m->m_argv; (p = *++mvp) != NULL; ) 686 { 687 /* can't use strchr here because of sign extension problems */ 688 while (*p != '\0') 689 { 690 if ((*p++ & 0377) == MACROEXPAND) 691 { 692 if (*p == 'u') 693 break; 694 } 695 } 696 697 if (*p != '\0') 698 break; 699 700 /* this entry is safe -- go ahead and process it */ 701 expand(*mvp, buf, &buf[sizeof buf - 1], e); 702 *pvp++ = newstr(buf); 703 if (pvp >= &pv[MAXPV - 3]) 704 { 705 syserr("554 Too many parameters to %s before $u", pv[0]); 706 return (-1); 707 } 708 } 709 710 /* 711 ** If we have no substitution for the user name in the argument 712 ** list, we know that we must supply the names otherwise -- and 713 ** SMTP is the answer!! 714 */ 715 716 if (*mvp == NULL) 717 { 718 /* running SMTP */ 719 # ifdef SMTP 720 clever = TRUE; 721 *pvp = NULL; 722 # else /* SMTP */ 723 /* oops! we don't implement SMTP */ 724 syserr("554 SMTP style mailer not implemented"); 725 return (EX_SOFTWARE); 726 # endif /* SMTP */ 727 } 728 729 /* 730 ** At this point *mvp points to the argument with $u. We 731 ** run through our address list and append all the addresses 732 ** we can. If we run out of space, do not fret! We can 733 ** always send another copy later. 734 */ 735 736 tobuf[0] = '\0'; 737 e->e_to = tobuf; 738 ctladdr = NULL; 739 firstsig = hostsignature(firstto->q_mailer, firstto->q_host, e); 740 for (; to != NULL; to = to->q_next) 741 { 742 /* avoid sending multiple recipients to dumb mailers */ 743 if (tobuf[0] != '\0' && !bitnset(M_MUSER, m->m_flags)) 744 break; 745 746 /* if already sent or not for this host, don't send */ 747 if (bitset(QDONTSEND|QBADADDR|QQUEUEUP, to->q_flags) || 748 to->q_mailer != firstto->q_mailer || 749 strcmp(hostsignature(to->q_mailer, to->q_host, e), firstsig) != 0) 750 continue; 751 752 /* avoid overflowing tobuf */ 753 if (sizeof tobuf < (strlen(to->q_paddr) + strlen(tobuf) + 2)) 754 break; 755 756 if (tTd(10, 1)) 757 { 758 printf("\nsend to "); 759 printaddr(to, FALSE); 760 } 761 762 /* compute effective uid/gid when sending */ 763 if (bitnset(M_RUNASRCPT, to->q_mailer->m_flags)) 764 ctladdr = getctladdr(to); 765 766 user = to->q_user; 767 e->e_to = to->q_paddr; 768 if (tTd(10, 5)) 769 { 770 printf("deliver: QDONTSEND "); 771 printaddr(to, FALSE); 772 } 773 to->q_flags |= QDONTSEND; 774 775 /* 776 ** Check to see that these people are allowed to 777 ** talk to each other. 778 */ 779 780 if (m->m_maxsize != 0 && e->e_msgsize > m->m_maxsize) 781 { 782 e->e_flags |= EF_NORETURN; 783 usrerr("552 Message is too large; %ld bytes max", m->m_maxsize); 784 giveresponse(EX_UNAVAILABLE, m, NULL, ctladdr, e); 785 continue; 786 } 787 #if NAMED_BIND 788 h_errno = 0; 789 #endif 790 rcode = checkcompat(to, e); 791 if (rcode != EX_OK) 792 { 793 markfailure(e, to, rcode); 794 giveresponse(rcode, m, NULL, ctladdr, e); 795 continue; 796 } 797 798 /* 799 ** Strip quote bits from names if the mailer is dumb 800 ** about them. 801 */ 802 803 if (bitnset(M_STRIPQ, m->m_flags)) 804 { 805 stripquotes(user); 806 stripquotes(host); 807 } 808 809 /* hack attack -- delivermail compatibility */ 810 if (m == ProgMailer && *user == '|') 811 user++; 812 813 /* 814 ** If an error message has already been given, don't 815 ** bother to send to this address. 816 ** 817 ** >>>>>>>>>> This clause assumes that the local mailer 818 ** >> NOTE >> cannot do any further aliasing; that 819 ** >>>>>>>>>> function is subsumed by sendmail. 820 */ 821 822 if (bitset(QBADADDR|QQUEUEUP, to->q_flags)) 823 continue; 824 825 /* save statistics.... */ 826 markstats(e, to); 827 828 /* 829 ** See if this user name is "special". 830 ** If the user name has a slash in it, assume that this 831 ** is a file -- send it off without further ado. Note 832 ** that this type of addresses is not processed along 833 ** with the others, so we fudge on the To person. 834 */ 835 836 if (m == FileMailer) 837 { 838 rcode = mailfile(user, ctladdr, e); 839 giveresponse(rcode, m, NULL, ctladdr, e); 840 if (rcode == EX_OK) 841 to->q_flags |= QSENT; 842 continue; 843 } 844 845 /* 846 ** Address is verified -- add this user to mailer 847 ** argv, and add it to the print list of recipients. 848 */ 849 850 /* link together the chain of recipients */ 851 to->q_tchain = tochain; 852 tochain = to; 853 854 /* create list of users for error messages */ 855 (void) strcat(tobuf, ","); 856 (void) strcat(tobuf, to->q_paddr); 857 define('u', user, e); /* to user */ 858 p = to->q_home; 859 if (p == NULL && ctladdr != NULL) 860 p = ctladdr->q_home; 861 define('z', p, e); /* user's home */ 862 863 /* 864 ** Expand out this user into argument list. 865 */ 866 867 if (!clever) 868 { 869 expand(*mvp, buf, &buf[sizeof buf - 1], e); 870 *pvp++ = newstr(buf); 871 if (pvp >= &pv[MAXPV - 2]) 872 { 873 /* allow some space for trailing parms */ 874 break; 875 } 876 } 877 } 878 879 /* see if any addresses still exist */ 880 if (tobuf[0] == '\0') 881 { 882 define('g', (char *) NULL, e); 883 return (0); 884 } 885 886 /* print out messages as full list */ 887 e->e_to = tobuf + 1; 888 889 /* 890 ** Fill out any parameters after the $u parameter. 891 */ 892 893 while (!clever && *++mvp != NULL) 894 { 895 expand(*mvp, buf, &buf[sizeof buf - 1], e); 896 *pvp++ = newstr(buf); 897 if (pvp >= &pv[MAXPV]) 898 syserr("554 deliver: pv overflow after $u for %s", pv[0]); 899 } 900 *pvp++ = NULL; 901 902 /* 903 ** Call the mailer. 904 ** The argument vector gets built, pipes 905 ** are created as necessary, and we fork & exec as 906 ** appropriate. 907 ** If we are running SMTP, we just need to clean up. 908 */ 909 910 /*XXX this seems a bit wierd */ 911 if (ctladdr == NULL && m != ProgMailer && 912 bitset(QGOODUID, e->e_from.q_flags)) 913 ctladdr = &e->e_from; 914 915 #if NAMED_BIND 916 if (ConfigLevel < 2) 917 _res.options &= ~(RES_DEFNAMES | RES_DNSRCH); /* XXX */ 918 #endif 919 920 if (tTd(11, 1)) 921 { 922 printf("openmailer:"); 923 printav(pv); 924 } 925 errno = 0; 926 #if NAMED_BIND 927 h_errno = 0; 928 #endif 929 930 CurHostName = m->m_mailer; 931 932 /* 933 ** Deal with the special case of mail handled through an IPC 934 ** connection. 935 ** In this case we don't actually fork. We must be 936 ** running SMTP for this to work. We will return a 937 ** zero pid to indicate that we are running IPC. 938 ** We also handle a debug version that just talks to stdin/out. 939 */ 940 941 curhost = NULL; 942 SmtpPhase = NULL; 943 mci = NULL; 944 945 #ifdef XDEBUG 946 { 947 char wbuf[MAXLINE]; 948 949 /* make absolutely certain 0, 1, and 2 are in use */ 950 sprintf(wbuf, "%s... openmailer(%s)", e->e_to, m->m_name); 951 checkfd012(wbuf); 952 } 953 #endif 954 955 /* check for 8-bit available */ 956 if (bitset(EF_HAS8BIT, e->e_flags) && 957 bitnset(M_7BITS, m->m_flags) && 958 !bitset(MM_MIME8BIT, MimeMode)) 959 { 960 usrerr("554 Cannot send 8-bit data to 7-bit destination"); 961 rcode = EX_DATAERR; 962 goto give_up; 963 } 964 965 /* check for Local Person Communication -- not for mortals!!! */ 966 if (strcmp(m->m_mailer, "[LPC]") == 0) 967 { 968 mci = (MCI *) xalloc(sizeof *mci); 969 bzero((char *) mci, sizeof *mci); 970 mci->mci_in = stdin; 971 mci->mci_out = stdout; 972 mci->mci_state = clever ? MCIS_OPENING : MCIS_OPEN; 973 mci->mci_mailer = m; 974 } 975 else if (strcmp(m->m_mailer, "[IPC]") == 0 || 976 strcmp(m->m_mailer, "[TCP]") == 0) 977 { 978 #ifdef DAEMON 979 register int i; 980 register u_short port; 981 982 if (pv[0] == NULL || pv[1] == NULL || pv[1][0] == '\0') 983 { 984 syserr("null host name for %s mailer", m->m_mailer); 985 rcode = EX_CONFIG; 986 goto give_up; 987 } 988 989 CurHostName = pv[1]; 990 curhost = hostsignature(m, pv[1], e); 991 992 if (curhost == NULL || curhost[0] == '\0') 993 { 994 syserr("null host signature for %s", pv[1]); 995 rcode = EX_CONFIG; 996 goto give_up; 997 } 998 999 if (!clever) 1000 { 1001 syserr("554 non-clever IPC"); 1002 rcode = EX_CONFIG; 1003 goto give_up; 1004 } 1005 if (pv[2] != NULL) 1006 port = atoi(pv[2]); 1007 else 1008 port = 0; 1009 tryhost: 1010 while (*curhost != '\0') 1011 { 1012 register char *p; 1013 static char hostbuf[MAXNAME]; 1014 1015 /* pull the next host from the signature */ 1016 p = strchr(curhost, ':'); 1017 if (p == NULL) 1018 p = &curhost[strlen(curhost)]; 1019 if (p == curhost) 1020 { 1021 syserr("deliver: null host name in signature"); 1022 curhost++; 1023 continue; 1024 } 1025 strncpy(hostbuf, curhost, p - curhost); 1026 hostbuf[p - curhost] = '\0'; 1027 if (*p != '\0') 1028 p++; 1029 curhost = p; 1030 1031 /* see if we already know that this host is fried */ 1032 CurHostName = hostbuf; 1033 mci = mci_get(hostbuf, m); 1034 if (mci->mci_state != MCIS_CLOSED) 1035 { 1036 if (tTd(11, 1)) 1037 { 1038 printf("openmailer: "); 1039 mci_dump(mci, FALSE); 1040 } 1041 CurHostName = mci->mci_host; 1042 break; 1043 } 1044 mci->mci_mailer = m; 1045 if (mci->mci_exitstat != EX_OK) 1046 continue; 1047 1048 /* try the connection */ 1049 setproctitle("%s %s: %s", e->e_id, hostbuf, "user open"); 1050 message("Connecting to %s (%s)...", 1051 hostbuf, m->m_name); 1052 i = makeconnection(hostbuf, port, mci, 1053 bitnset(M_SECURE_PORT, m->m_flags)); 1054 mci->mci_exitstat = i; 1055 mci->mci_errno = errno; 1056 #if NAMED_BIND 1057 mci->mci_herrno = h_errno; 1058 #endif 1059 if (i == EX_OK) 1060 { 1061 mci->mci_state = MCIS_OPENING; 1062 mci_cache(mci); 1063 if (TrafficLogFile != NULL) 1064 fprintf(TrafficLogFile, "%05d == CONNECT %s\n", 1065 getpid(), hostbuf); 1066 break; 1067 } 1068 else if (tTd(11, 1)) 1069 printf("openmailer: makeconnection => stat=%d, errno=%d\n", 1070 i, errno); 1071 1072 /* enter status of this host */ 1073 setstat(i); 1074 1075 /* should print some message here for -v mode */ 1076 } 1077 if (mci == NULL) 1078 { 1079 syserr("deliver: no host name"); 1080 rcode = EX_OSERR; 1081 goto give_up; 1082 } 1083 mci->mci_pid = 0; 1084 #else /* no DAEMON */ 1085 syserr("554 openmailer: no IPC"); 1086 if (tTd(11, 1)) 1087 printf("openmailer: NULL\n"); 1088 rcode = EX_UNAVAILABLE; 1089 goto give_up; 1090 #endif /* DAEMON */ 1091 } 1092 else 1093 { 1094 if (TrafficLogFile != NULL) 1095 { 1096 char **av; 1097 1098 fprintf(TrafficLogFile, "%05d === EXEC", getpid()); 1099 for (av = pv; *av != NULL; av++) 1100 fprintf(TrafficLogFile, " %s", *av); 1101 fprintf(TrafficLogFile, "\n"); 1102 } 1103 1104 /* create a pipe to shove the mail through */ 1105 if (pipe(mpvect) < 0) 1106 { 1107 syserr("%s... openmailer(%s): pipe (to mailer)", 1108 e->e_to, m->m_name); 1109 if (tTd(11, 1)) 1110 printf("openmailer: NULL\n"); 1111 rcode = EX_OSERR; 1112 goto give_up; 1113 } 1114 1115 /* if this mailer speaks smtp, create a return pipe */ 1116 if (clever && pipe(rpvect) < 0) 1117 { 1118 syserr("%s... openmailer(%s): pipe (from mailer)", 1119 e->e_to, m->m_name); 1120 (void) close(mpvect[0]); 1121 (void) close(mpvect[1]); 1122 if (tTd(11, 1)) 1123 printf("openmailer: NULL\n"); 1124 rcode = EX_OSERR; 1125 goto give_up; 1126 } 1127 1128 /* 1129 ** Actually fork the mailer process. 1130 ** DOFORK is clever about retrying. 1131 ** 1132 ** Dispose of SIGCHLD signal catchers that may be laying 1133 ** around so that endmail will get it. 1134 */ 1135 1136 if (e->e_xfp != NULL) 1137 (void) fflush(e->e_xfp); /* for debugging */ 1138 (void) fflush(stdout); 1139 # ifdef SIGCHLD 1140 (void) setsignal(SIGCHLD, SIG_DFL); 1141 # endif /* SIGCHLD */ 1142 DOFORK(FORK); 1143 /* pid is set by DOFORK */ 1144 if (pid < 0) 1145 { 1146 /* failure */ 1147 syserr("%s... openmailer(%s): cannot fork", 1148 e->e_to, m->m_name); 1149 (void) close(mpvect[0]); 1150 (void) close(mpvect[1]); 1151 if (clever) 1152 { 1153 (void) close(rpvect[0]); 1154 (void) close(rpvect[1]); 1155 } 1156 if (tTd(11, 1)) 1157 printf("openmailer: NULL\n"); 1158 rcode = EX_OSERR; 1159 goto give_up; 1160 } 1161 else if (pid == 0) 1162 { 1163 int i; 1164 int saveerrno; 1165 char **ep; 1166 char *env[MAXUSERENVIRON]; 1167 extern char **environ; 1168 extern int DtableSize; 1169 1170 /* child -- set up input & exec mailer */ 1171 (void) setsignal(SIGINT, SIG_IGN); 1172 (void) setsignal(SIGHUP, SIG_IGN); 1173 (void) setsignal(SIGTERM, SIG_DFL); 1174 1175 /* reset user and group */ 1176 if (bitnset(M_SPECIFIC_UID, m->m_flags)) 1177 { 1178 (void) setgid(m->m_gid); 1179 (void) setuid(m->m_uid); 1180 } 1181 else if (ctladdr != NULL && ctladdr->q_uid != 0) 1182 { 1183 (void) initgroups(ctladdr->q_ruser? 1184 ctladdr->q_ruser: ctladdr->q_user, 1185 ctladdr->q_gid); 1186 (void) setgid(ctladdr->q_gid); 1187 (void) setuid(ctladdr->q_uid); 1188 } 1189 else 1190 { 1191 (void) initgroups(DefUser, DefGid); 1192 if (m->m_gid == 0) 1193 (void) setgid(DefGid); 1194 else 1195 (void) setgid(m->m_gid); 1196 if (m->m_uid == 0) 1197 (void) setuid(DefUid); 1198 else 1199 (void) setuid(m->m_uid); 1200 } 1201 1202 if (tTd(11, 2)) 1203 printf("openmailer: running as r/euid=%d/%d\n", 1204 getuid(), geteuid()); 1205 1206 /* move into some "safe" directory */ 1207 if (m->m_execdir != NULL) 1208 { 1209 char *p, *q; 1210 char buf[MAXLINE]; 1211 1212 for (p = m->m_execdir; p != NULL; p = q) 1213 { 1214 q = strchr(p, ':'); 1215 if (q != NULL) 1216 *q = '\0'; 1217 expand(p, buf, &buf[sizeof buf] - 1, e); 1218 if (q != NULL) 1219 *q++ = ':'; 1220 if (tTd(11, 20)) 1221 printf("openmailer: trydir %s\n", 1222 buf); 1223 if (buf[0] != '\0' && chdir(buf) >= 0) 1224 break; 1225 } 1226 } 1227 1228 /* arrange to filter std & diag output of command */ 1229 if (clever) 1230 { 1231 (void) close(rpvect[0]); 1232 if (dup2(rpvect[1], STDOUT_FILENO) < 0) 1233 { 1234 syserr("%s... openmailer(%s): cannot dup pipe %d for stdout", 1235 e->e_to, m->m_name, rpvect[1]); 1236 _exit(EX_OSERR); 1237 } 1238 (void) close(rpvect[1]); 1239 } 1240 else if (OpMode == MD_SMTP || OpMode == MD_DAEMON || 1241 HoldErrs || DisConnected) 1242 { 1243 /* put mailer output in transcript */ 1244 if (dup2(fileno(e->e_xfp), STDOUT_FILENO) < 0) 1245 { 1246 syserr("%s... openmailer(%s): cannot dup xscript %d for stdout", 1247 e->e_to, m->m_name, 1248 fileno(e->e_xfp)); 1249 _exit(EX_OSERR); 1250 } 1251 } 1252 if (dup2(STDOUT_FILENO, STDERR_FILENO) < 0) 1253 { 1254 syserr("%s... openmailer(%s): cannot dup stdout for stderr", 1255 e->e_to, m->m_name); 1256 _exit(EX_OSERR); 1257 } 1258 1259 /* arrange to get standard input */ 1260 (void) close(mpvect[1]); 1261 if (dup2(mpvect[0], STDIN_FILENO) < 0) 1262 { 1263 syserr("%s... openmailer(%s): cannot dup pipe %d for stdin", 1264 e->e_to, m->m_name, mpvect[0]); 1265 _exit(EX_OSERR); 1266 } 1267 (void) close(mpvect[0]); 1268 1269 /* arrange for all the files to be closed */ 1270 for (i = 3; i < DtableSize; i++) 1271 { 1272 register int j; 1273 1274 if ((j = fcntl(i, F_GETFD, 0)) != -1) 1275 (void) fcntl(i, F_SETFD, j | 1); 1276 } 1277 1278 /* 1279 ** Set up the mailer environment 1280 ** TZ is timezone information. 1281 ** SYSTYPE is Apollo software sys type (required). 1282 ** ISP is Apollo hardware system type (required). 1283 */ 1284 1285 i = 0; 1286 env[i++] = "AGENT=sendmail"; 1287 for (ep = environ; *ep != NULL; ep++) 1288 { 1289 if (strncmp(*ep, "TZ=", 3) == 0 || 1290 strncmp(*ep, "ISP=", 4) == 0 || 1291 strncmp(*ep, "SYSTYPE=", 8) == 0) 1292 env[i++] = *ep; 1293 } 1294 env[i++] = NULL; 1295 1296 /* run disconnected from terminal */ 1297 (void) setsid(); 1298 1299 /* try to execute the mailer */ 1300 execve(m->m_mailer, pv, env); 1301 saveerrno = errno; 1302 syserr("Cannot exec %s", m->m_mailer); 1303 if (bitnset(M_LOCALMAILER, m->m_flags) || 1304 transienterror(saveerrno)) 1305 _exit(EX_OSERR); 1306 _exit(EX_UNAVAILABLE); 1307 } 1308 1309 /* 1310 ** Set up return value. 1311 */ 1312 1313 mci = (MCI *) xalloc(sizeof *mci); 1314 bzero((char *) mci, sizeof *mci); 1315 mci->mci_mailer = m; 1316 mci->mci_state = clever ? MCIS_OPENING : MCIS_OPEN; 1317 mci->mci_pid = pid; 1318 (void) close(mpvect[0]); 1319 mci->mci_out = fdopen(mpvect[1], "w"); 1320 if (mci->mci_out == NULL) 1321 { 1322 syserr("deliver: cannot create mailer output channel, fd=%d", 1323 mpvect[1]); 1324 (void) close(mpvect[1]); 1325 if (clever) 1326 { 1327 (void) close(rpvect[0]); 1328 (void) close(rpvect[1]); 1329 } 1330 rcode = EX_OSERR; 1331 goto give_up; 1332 } 1333 if (clever) 1334 { 1335 (void) close(rpvect[1]); 1336 mci->mci_in = fdopen(rpvect[0], "r"); 1337 if (mci->mci_in == NULL) 1338 { 1339 syserr("deliver: cannot create mailer input channel, fd=%d", 1340 mpvect[1]); 1341 (void) close(rpvect[0]); 1342 fclose(mci->mci_out); 1343 mci->mci_out = NULL; 1344 rcode = EX_OSERR; 1345 goto give_up; 1346 } 1347 } 1348 else 1349 { 1350 mci->mci_flags |= MCIF_TEMP; 1351 mci->mci_in = NULL; 1352 } 1353 } 1354 1355 if (bitset(EF_HAS8BIT, e->e_flags) && bitnset(M_7BITS, m->m_flags)) 1356 mci->mci_flags |= MCIF_CVT8TO7; 1357 1358 /* 1359 ** If we are in SMTP opening state, send initial protocol. 1360 */ 1361 1362 if (clever && mci->mci_state != MCIS_CLOSED) 1363 { 1364 smtpinit(m, mci, e); 1365 } 1366 if (tTd(11, 1)) 1367 { 1368 printf("openmailer: "); 1369 mci_dump(mci, FALSE); 1370 } 1371 1372 if (mci->mci_state != MCIS_OPEN) 1373 { 1374 /* couldn't open the mailer */ 1375 rcode = mci->mci_exitstat; 1376 errno = mci->mci_errno; 1377 #if NAMED_BIND 1378 h_errno = mci->mci_herrno; 1379 #endif 1380 if (rcode == EX_OK) 1381 { 1382 /* shouldn't happen */ 1383 syserr("554 deliver: rcode=%d, mci_state=%d, sig=%s", 1384 rcode, mci->mci_state, firstsig); 1385 rcode = EX_SOFTWARE; 1386 } 1387 else if (rcode == EX_TEMPFAIL && curhost != NULL && *curhost != '\0') 1388 { 1389 /* try next MX site */ 1390 goto tryhost; 1391 } 1392 } 1393 else if (!clever) 1394 { 1395 /* 1396 ** Format and send message. 1397 */ 1398 1399 putfromline(mci, e); 1400 (*e->e_puthdr)(mci, e->e_header, e); 1401 (*e->e_putbody)(mci, e, NULL); 1402 1403 /* get the exit status */ 1404 rcode = endmailer(mci, e, pv); 1405 } 1406 else 1407 #ifdef SMTP 1408 { 1409 /* 1410 ** Send the MAIL FROM: protocol 1411 */ 1412 1413 rcode = smtpmailfrom(m, mci, e); 1414 if (rcode == EX_OK) 1415 { 1416 register char *t = tobuf; 1417 register int i; 1418 1419 /* send the recipient list */ 1420 tobuf[0] = '\0'; 1421 for (to = tochain; to != NULL; to = to->q_tchain) 1422 { 1423 e->e_to = to->q_paddr; 1424 if ((i = smtprcpt(to, m, mci, e)) != EX_OK) 1425 { 1426 markfailure(e, to, i); 1427 giveresponse(i, m, mci, ctladdr, e); 1428 } 1429 else 1430 { 1431 *t++ = ','; 1432 for (p = to->q_paddr; *p; *t++ = *p++) 1433 continue; 1434 *t = '\0'; 1435 } 1436 } 1437 1438 /* now send the data */ 1439 if (tobuf[0] == '\0') 1440 { 1441 rcode = EX_OK; 1442 e->e_to = NULL; 1443 if (bitset(MCIF_CACHED, mci->mci_flags)) 1444 smtprset(m, mci, e); 1445 } 1446 else 1447 { 1448 e->e_to = tobuf + 1; 1449 rcode = smtpdata(m, mci, e); 1450 } 1451 1452 /* now close the connection */ 1453 if (!bitset(MCIF_CACHED, mci->mci_flags)) 1454 smtpquit(m, mci, e); 1455 } 1456 if (rcode != EX_OK && curhost != NULL && *curhost != '\0') 1457 { 1458 /* try next MX site */ 1459 goto tryhost; 1460 } 1461 } 1462 #else /* not SMTP */ 1463 { 1464 syserr("554 deliver: need SMTP compiled to use clever mailer"); 1465 rcode = EX_CONFIG; 1466 goto give_up; 1467 } 1468 #endif /* SMTP */ 1469 #if NAMED_BIND 1470 if (ConfigLevel < 2) 1471 _res.options |= RES_DEFNAMES | RES_DNSRCH; /* XXX */ 1472 #endif 1473 1474 /* arrange a return receipt if requested */ 1475 if (rcode == EX_OK && e->e_receiptto != NULL && 1476 bitnset(M_LOCALMAILER, m->m_flags)) 1477 { 1478 e->e_flags |= EF_SENDRECEIPT; 1479 /* do we want to send back more info? */ 1480 } 1481 1482 /* 1483 ** Do final status disposal. 1484 ** We check for something in tobuf for the SMTP case. 1485 ** If we got a temporary failure, arrange to queue the 1486 ** addressees. 1487 */ 1488 1489 give_up: 1490 if (tobuf[0] != '\0') 1491 giveresponse(rcode, m, mci, ctladdr, e); 1492 for (to = tochain; to != NULL; to = to->q_tchain) 1493 { 1494 if (rcode != EX_OK) 1495 markfailure(e, to, rcode); 1496 else 1497 { 1498 to->q_flags |= QSENT; 1499 e->e_nsent++; 1500 if (e->e_receiptto != NULL && 1501 bitnset(M_LOCALMAILER, m->m_flags)) 1502 { 1503 fprintf(e->e_xfp, "%s... Successfully delivered\n", 1504 to->q_paddr); 1505 } 1506 } 1507 } 1508 1509 /* 1510 ** Restore state and return. 1511 */ 1512 1513 #ifdef XDEBUG 1514 { 1515 char wbuf[MAXLINE]; 1516 1517 /* make absolutely certain 0, 1, and 2 are in use */ 1518 sprintf(wbuf, "%s... end of deliver(%s)", 1519 e->e_to == NULL ? "NO-TO-LIST" : e->e_to, 1520 m->m_name); 1521 checkfd012(wbuf); 1522 } 1523 #endif 1524 1525 errno = 0; 1526 define('g', (char *) NULL, e); 1527 return (rcode); 1528 } 1529 /* 1530 ** MARKFAILURE -- mark a failure on a specific address. 1531 ** 1532 ** Parameters: 1533 ** e -- the envelope we are sending. 1534 ** q -- the address to mark. 1535 ** rcode -- the code signifying the particular failure. 1536 ** 1537 ** Returns: 1538 ** none. 1539 ** 1540 ** Side Effects: 1541 ** marks the address (and possibly the envelope) with the 1542 ** failure so that an error will be returned or 1543 ** the message will be queued, as appropriate. 1544 */ 1545 1546 markfailure(e, q, rcode) 1547 register ENVELOPE *e; 1548 register ADDRESS *q; 1549 int rcode; 1550 { 1551 char buf[MAXLINE]; 1552 1553 switch (rcode) 1554 { 1555 case EX_OK: 1556 break; 1557 1558 case EX_TEMPFAIL: 1559 case EX_IOERR: 1560 case EX_OSERR: 1561 q->q_flags |= QQUEUEUP; 1562 break; 1563 1564 default: 1565 q->q_flags |= QBADADDR; 1566 break; 1567 } 1568 } 1569 /* 1570 ** ENDMAILER -- Wait for mailer to terminate. 1571 ** 1572 ** We should never get fatal errors (e.g., segmentation 1573 ** violation), so we report those specially. For other 1574 ** errors, we choose a status message (into statmsg), 1575 ** and if it represents an error, we print it. 1576 ** 1577 ** Parameters: 1578 ** pid -- pid of mailer. 1579 ** e -- the current envelope. 1580 ** pv -- the parameter vector that invoked the mailer 1581 ** (for error messages). 1582 ** 1583 ** Returns: 1584 ** exit code of mailer. 1585 ** 1586 ** Side Effects: 1587 ** none. 1588 */ 1589 1590 endmailer(mci, e, pv) 1591 register MCI *mci; 1592 register ENVELOPE *e; 1593 char **pv; 1594 { 1595 int st; 1596 1597 /* close any connections */ 1598 if (mci->mci_in != NULL) 1599 (void) xfclose(mci->mci_in, mci->mci_mailer->m_name, "mci_in"); 1600 if (mci->mci_out != NULL) 1601 (void) xfclose(mci->mci_out, mci->mci_mailer->m_name, "mci_out"); 1602 mci->mci_in = mci->mci_out = NULL; 1603 mci->mci_state = MCIS_CLOSED; 1604 1605 /* in the IPC case there is nothing to wait for */ 1606 if (mci->mci_pid == 0) 1607 return (EX_OK); 1608 1609 /* wait for the mailer process to die and collect status */ 1610 st = waitfor(mci->mci_pid); 1611 if (st == -1) 1612 { 1613 syserr("endmailer %s: wait", pv[0]); 1614 return (EX_SOFTWARE); 1615 } 1616 1617 if (WIFEXITED(st)) 1618 { 1619 /* normal death -- return status */ 1620 return (WEXITSTATUS(st)); 1621 } 1622 1623 /* it died a horrid death */ 1624 syserr("451 mailer %s died with signal %o", 1625 mci->mci_mailer->m_name, st); 1626 1627 /* log the arguments */ 1628 if (pv != NULL && e->e_xfp != NULL) 1629 { 1630 register char **av; 1631 1632 fprintf(e->e_xfp, "Arguments:"); 1633 for (av = pv; *av != NULL; av++) 1634 fprintf(e->e_xfp, " %s", *av); 1635 fprintf(e->e_xfp, "\n"); 1636 } 1637 1638 ExitStat = EX_TEMPFAIL; 1639 return (EX_TEMPFAIL); 1640 } 1641 /* 1642 ** GIVERESPONSE -- Interpret an error response from a mailer 1643 ** 1644 ** Parameters: 1645 ** stat -- the status code from the mailer (high byte 1646 ** only; core dumps must have been taken care of 1647 ** already). 1648 ** m -- the mailer info for this mailer. 1649 ** mci -- the mailer connection info -- can be NULL if the 1650 ** response is given before the connection is made. 1651 ** ctladdr -- the controlling address for the recipient 1652 ** address(es). 1653 ** e -- the current envelope. 1654 ** 1655 ** Returns: 1656 ** none. 1657 ** 1658 ** Side Effects: 1659 ** Errors may be incremented. 1660 ** ExitStat may be set. 1661 */ 1662 1663 giveresponse(stat, m, mci, ctladdr, e) 1664 int stat; 1665 register MAILER *m; 1666 register MCI *mci; 1667 ADDRESS *ctladdr; 1668 ENVELOPE *e; 1669 { 1670 register const char *statmsg; 1671 extern char *SysExMsg[]; 1672 register int i; 1673 extern int N_SysEx; 1674 char buf[MAXLINE]; 1675 1676 /* 1677 ** Compute status message from code. 1678 */ 1679 1680 i = stat - EX__BASE; 1681 if (stat == 0) 1682 { 1683 statmsg = "250 Sent"; 1684 if (e->e_statmsg != NULL) 1685 { 1686 (void) sprintf(buf, "%s (%s)", statmsg, e->e_statmsg); 1687 statmsg = buf; 1688 } 1689 } 1690 else if (i < 0 || i > N_SysEx) 1691 { 1692 (void) sprintf(buf, "554 unknown mailer error %d", stat); 1693 stat = EX_UNAVAILABLE; 1694 statmsg = buf; 1695 } 1696 else if (stat == EX_TEMPFAIL) 1697 { 1698 (void) strcpy(buf, SysExMsg[i] + 1); 1699 #if NAMED_BIND 1700 if (h_errno == TRY_AGAIN) 1701 statmsg = errstring(h_errno+E_DNSBASE); 1702 else 1703 #endif 1704 { 1705 if (errno != 0) 1706 statmsg = errstring(errno); 1707 else 1708 { 1709 #ifdef SMTP 1710 statmsg = SmtpError; 1711 #else /* SMTP */ 1712 statmsg = NULL; 1713 #endif /* SMTP */ 1714 } 1715 } 1716 if (statmsg != NULL && statmsg[0] != '\0') 1717 { 1718 (void) strcat(buf, ": "); 1719 (void) strcat(buf, statmsg); 1720 } 1721 statmsg = buf; 1722 } 1723 #if NAMED_BIND 1724 else if (stat == EX_NOHOST && h_errno != 0) 1725 { 1726 statmsg = errstring(h_errno + E_DNSBASE); 1727 (void) sprintf(buf, "%s (%s)", SysExMsg[i] + 1, statmsg); 1728 statmsg = buf; 1729 } 1730 #endif 1731 else 1732 { 1733 statmsg = SysExMsg[i]; 1734 if (*statmsg++ == ':') 1735 { 1736 (void) sprintf(buf, "%s: %s", statmsg, errstring(errno)); 1737 statmsg = buf; 1738 } 1739 } 1740 1741 /* 1742 ** Print the message as appropriate 1743 */ 1744 1745 if (stat == EX_OK || stat == EX_TEMPFAIL) 1746 { 1747 extern char MsgBuf[]; 1748 1749 message("%s", &statmsg[4]); 1750 if (stat == EX_TEMPFAIL && e->e_xfp != NULL) 1751 fprintf(e->e_xfp, "%s\n", &MsgBuf[4]); 1752 } 1753 else 1754 { 1755 char mbuf[8]; 1756 1757 Errors++; 1758 sprintf(mbuf, "%.3s %%s", statmsg); 1759 usrerr(mbuf, &statmsg[4]); 1760 } 1761 1762 /* 1763 ** Final cleanup. 1764 ** Log a record of the transaction. Compute the new 1765 ** ExitStat -- if we already had an error, stick with 1766 ** that. 1767 */ 1768 1769 if (LogLevel > ((stat == EX_TEMPFAIL) ? 8 : (stat == EX_OK) ? 7 : 6)) 1770 logdelivery(m, mci, &statmsg[4], ctladdr, e); 1771 1772 if (tTd(11, 2)) 1773 printf("giveresponse: stat=%d, e->e_message=%s\n", 1774 stat, e->e_message); 1775 1776 if (stat != EX_TEMPFAIL) 1777 setstat(stat); 1778 if (stat != EX_OK && (stat != EX_TEMPFAIL || e->e_message == NULL)) 1779 { 1780 if (e->e_message != NULL) 1781 free(e->e_message); 1782 e->e_message = newstr(&statmsg[4]); 1783 } 1784 errno = 0; 1785 #if NAMED_BIND 1786 h_errno = 0; 1787 #endif 1788 } 1789 /* 1790 ** LOGDELIVERY -- log the delivery in the system log 1791 ** 1792 ** Care is taken to avoid logging lines that are too long, because 1793 ** some versions of syslog have an unfortunate proclivity for core 1794 ** dumping. This is a hack, to be sure, that is at best empirical. 1795 ** 1796 ** Parameters: 1797 ** m -- the mailer info. Can be NULL for initial queue. 1798 ** mci -- the mailer connection info -- can be NULL if the 1799 ** log is occuring when no connection is active. 1800 ** stat -- the message to print for the status. 1801 ** ctladdr -- the controlling address for the to list. 1802 ** e -- the current envelope. 1803 ** 1804 ** Returns: 1805 ** none 1806 ** 1807 ** Side Effects: 1808 ** none 1809 */ 1810 1811 logdelivery(m, mci, stat, ctladdr, e) 1812 MAILER *m; 1813 register MCI *mci; 1814 char *stat; 1815 ADDRESS *ctladdr; 1816 register ENVELOPE *e; 1817 { 1818 # ifdef LOG 1819 register char *bp; 1820 register char *p; 1821 int l; 1822 char buf[512]; 1823 1824 # if (SYSLOG_BUFSIZE) >= 256 1825 bp = buf; 1826 if (ctladdr != NULL) 1827 { 1828 strcpy(bp, ", ctladdr="); 1829 strcat(bp, shortenstring(ctladdr->q_paddr, 83)); 1830 bp += strlen(bp); 1831 if (bitset(QGOODUID, ctladdr->q_flags)) 1832 { 1833 (void) sprintf(bp, " (%d/%d)", 1834 ctladdr->q_uid, ctladdr->q_gid); 1835 bp += strlen(bp); 1836 } 1837 } 1838 1839 (void) sprintf(bp, ", delay=%s", pintvl(curtime() - e->e_ctime, TRUE)); 1840 bp += strlen(bp); 1841 1842 if (m != NULL) 1843 { 1844 (void) strcpy(bp, ", mailer="); 1845 (void) strcat(bp, m->m_name); 1846 bp += strlen(bp); 1847 } 1848 1849 if (mci != NULL && mci->mci_host != NULL) 1850 { 1851 # ifdef DAEMON 1852 extern SOCKADDR CurHostAddr; 1853 # endif 1854 1855 (void) strcpy(bp, ", relay="); 1856 (void) strcat(bp, mci->mci_host); 1857 1858 # ifdef DAEMON 1859 (void) strcat(bp, " ["); 1860 (void) strcat(bp, anynet_ntoa(&CurHostAddr)); 1861 (void) strcat(bp, "]"); 1862 # endif 1863 } 1864 else if (strcmp(stat, "queued") != 0) 1865 { 1866 char *p = macvalue('h', e); 1867 1868 if (p != NULL && p[0] != '\0') 1869 { 1870 (void) strcpy(bp, ", relay="); 1871 (void) strcat(bp, p); 1872 } 1873 } 1874 bp += strlen(bp); 1875 1876 #define STATLEN (((SYSLOG_BUFSIZE) - 100) / 4) 1877 #if (STATLEN) < 63 1878 # undef STATLEN 1879 # define STATLEN 63 1880 #endif 1881 #if (STATLEN) > 203 1882 # undef STATLEN 1883 # define STATLEN 203 1884 #endif 1885 1886 if ((bp - buf) > (sizeof buf - ((STATLEN) + 20))) 1887 { 1888 /* desperation move -- truncate data */ 1889 bp = buf + sizeof buf - ((STATLEN) + 17); 1890 strcpy(bp, "..."); 1891 bp += 3; 1892 } 1893 1894 (void) strcpy(bp, ", stat="); 1895 bp += strlen(bp); 1896 1897 (void) strcpy(bp, shortenstring(stat, (STATLEN))); 1898 1899 l = SYSLOG_BUFSIZE - 100 - strlen(buf); 1900 p = e->e_to; 1901 while (strlen(p) >= l) 1902 { 1903 register char *q = strchr(p + l, ','); 1904 1905 if (q == NULL) 1906 break; 1907 syslog(LOG_INFO, "%s: to=%.*s [more]%s", 1908 e->e_id, ++q - p, p, buf); 1909 p = q; 1910 } 1911 syslog(LOG_INFO, "%s: to=%s%s", e->e_id, p, buf); 1912 1913 # else /* we have a very short log buffer size */ 1914 1915 l = SYSLOG_BUFSIZE - 85; 1916 p = e->e_to; 1917 while (strlen(p) >= l) 1918 { 1919 register char *q = strchr(p + l, ','); 1920 1921 if (q == NULL) 1922 break; 1923 syslog(LOG_INFO, "%s: to=%.*s [more]", 1924 e->e_id, ++q - p, p); 1925 p = q; 1926 } 1927 syslog(LOG_INFO, "%s: to=%s", e->e_id, p); 1928 1929 if (ctladdr != NULL) 1930 { 1931 bp = buf; 1932 strcpy(buf, "ctladdr="); 1933 bp += strlen(buf); 1934 strcpy(bp, shortenstring(ctladdr->q_paddr, 83)); 1935 bp += strlen(buf); 1936 if (bitset(QGOODUID, ctladdr->q_flags)) 1937 { 1938 (void) sprintf(bp, " (%d/%d)", 1939 ctladdr->q_uid, ctladdr->q_gid); 1940 bp += strlen(bp); 1941 } 1942 syslog(LOG_INFO, "%s: %s", e->e_id, buf); 1943 } 1944 bp = buf; 1945 sprintf(bp, "delay=%s", pintvl(curtime() - e->e_ctime, TRUE)); 1946 bp += strlen(bp); 1947 1948 if (m != NULL) 1949 { 1950 sprintf(bp, ", mailer=%s", m->m_name); 1951 bp += strlen(bp); 1952 } 1953 syslog(LOG_INFO, "%s: %s", e->e_id, buf); 1954 1955 buf[0] = '\0'; 1956 if (mci != NULL && mci->mci_host != NULL) 1957 { 1958 # ifdef DAEMON 1959 extern SOCKADDR CurHostAddr; 1960 # endif 1961 1962 sprintf(buf, "relay=%s", mci->mci_host); 1963 1964 # ifdef DAEMON 1965 (void) strcat(buf, " ["); 1966 (void) strcat(buf, anynet_ntoa(&CurHostAddr)); 1967 (void) strcat(buf, "]"); 1968 # endif 1969 } 1970 else if (strcmp(stat, "queued") != 0) 1971 { 1972 char *p = macvalue('h', e); 1973 1974 if (p != NULL && p[0] != '\0') 1975 sprintf(buf, "relay=%s", p); 1976 } 1977 if (buf[0] != '\0') 1978 syslog(LOG_INFO, "%s: %s", e->e_id, buf); 1979 1980 syslog(LOG_INFO, "%s: stat=%s", e->e_id, shortenstring(stat, 63)); 1981 # endif /* short log buffer */ 1982 # endif /* LOG */ 1983 } 1984 /* 1985 ** PUTFROMLINE -- output a UNIX-style from line (or whatever) 1986 ** 1987 ** This can be made an arbitrary message separator by changing $l 1988 ** 1989 ** One of the ugliest hacks seen by human eyes is contained herein: 1990 ** UUCP wants those stupid "remote from <host>" lines. Why oh why 1991 ** does a well-meaning programmer such as myself have to deal with 1992 ** this kind of antique garbage???? 1993 ** 1994 ** Parameters: 1995 ** mci -- the connection information. 1996 ** e -- the envelope. 1997 ** 1998 ** Returns: 1999 ** none 2000 ** 2001 ** Side Effects: 2002 ** outputs some text to fp. 2003 */ 2004 2005 putfromline(mci, e) 2006 register MCI *mci; 2007 ENVELOPE *e; 2008 { 2009 char *template = "\201l\n"; 2010 char buf[MAXLINE]; 2011 2012 if (bitnset(M_NHDR, mci->mci_mailer->m_flags)) 2013 return; 2014 2015 # ifdef UGLYUUCP 2016 if (bitnset(M_UGLYUUCP, mci->mci_mailer->m_flags)) 2017 { 2018 char *bang; 2019 char xbuf[MAXLINE]; 2020 2021 expand("\201g", buf, &buf[sizeof buf - 1], e); 2022 bang = strchr(buf, '!'); 2023 if (bang == NULL) 2024 { 2025 errno = 0; 2026 syserr("554 No ! in UUCP From address! (%s given)", buf); 2027 } 2028 else 2029 { 2030 *bang++ = '\0'; 2031 (void) sprintf(xbuf, "From %s \201d remote from %s\n", bang, buf); 2032 template = xbuf; 2033 } 2034 } 2035 # endif /* UGLYUUCP */ 2036 expand(template, buf, &buf[sizeof buf - 1], e); 2037 putline(buf, mci); 2038 } 2039 /* 2040 ** PUTBODY -- put the body of a message. 2041 ** 2042 ** Parameters: 2043 ** mci -- the connection information. 2044 ** e -- the envelope to put out. 2045 ** separator -- if non-NULL, a message separator that must 2046 ** not be permitted in the resulting message. 2047 ** 2048 ** Returns: 2049 ** none. 2050 ** 2051 ** Side Effects: 2052 ** The message is written onto fp. 2053 */ 2054 2055 /* values for output state variable */ 2056 #define OS_HEAD 0 /* at beginning of line */ 2057 #define OS_CR 1 /* read a carriage return */ 2058 #define OS_INLINE 2 /* putting rest of line */ 2059 2060 putbody(mci, e, separator) 2061 register MCI *mci; 2062 register ENVELOPE *e; 2063 char *separator; 2064 { 2065 char buf[MAXLINE]; 2066 2067 /* 2068 ** Output the body of the message 2069 */ 2070 2071 if (e->e_dfp == NULL) 2072 { 2073 if (e->e_df != NULL) 2074 { 2075 e->e_dfp = fopen(e->e_df, "r"); 2076 if (e->e_dfp == NULL) 2077 syserr("putbody: Cannot open %s for %s from %s", 2078 e->e_df, e->e_to, e->e_from.q_paddr); 2079 } 2080 else 2081 { 2082 if (bitset(MCIF_INHEADER, mci->mci_flags)) 2083 { 2084 putline("", mci); 2085 mci->mci_flags &= ~MCIF_INHEADER; 2086 } 2087 putline("<<< No Message Collected >>>", mci); 2088 goto endofmessage; 2089 } 2090 } 2091 rewind(e->e_dfp); 2092 2093 if (bitset(MCIF_CVT8TO7, mci->mci_flags)) 2094 { 2095 /* do 8 to 7 bit MIME conversion */ 2096 if (hvalue("MIME-Version", e->e_header) == NULL) 2097 putline("MIME-Version: 1.0", mci); 2098 mime8to7(mci, e->e_header, e, NULL); 2099 } 2100 else 2101 { 2102 int ostate; 2103 register char *bp; 2104 register char *pbp; 2105 register int c; 2106 int padc; 2107 char *buflim; 2108 int pos; 2109 char peekbuf[10]; 2110 2111 /* we can pass it through unmodified */ 2112 if (bitset(MCIF_INHEADER, mci->mci_flags)) 2113 { 2114 putline("", mci); 2115 mci->mci_flags &= ~MCIF_INHEADER; 2116 } 2117 2118 /* determine end of buffer; allow for short mailer lines */ 2119 buflim = &buf[sizeof buf - 1]; 2120 if (mci->mci_mailer->m_linelimit < sizeof buf - 1) 2121 buflim = &buf[mci->mci_mailer->m_linelimit - 1]; 2122 2123 /* copy temp file to output with mapping */ 2124 ostate = OS_HEAD; 2125 bp = buf; 2126 pbp = peekbuf; 2127 while (!ferror(mci->mci_out)) 2128 { 2129 register char *xp; 2130 2131 if (pbp > peekbuf) 2132 c = *--pbp; 2133 else if ((c = fgetc(e->e_dfp)) == EOF) 2134 break; 2135 if (bitset(MCIF_7BIT, mci->mci_flags)) 2136 c &= 0x7f; 2137 switch (ostate) 2138 { 2139 case OS_HEAD: 2140 if (c != '\r' && c != '\n' && bp < buflim) 2141 { 2142 *bp++ = c; 2143 break; 2144 } 2145 2146 /* check beginning of line for special cases */ 2147 *bp = '\0'; 2148 pos = 0; 2149 padc = EOF; 2150 if (buf[0] == 'F' && 2151 bitnset(M_ESCFROM, mci->mci_mailer->m_flags) && 2152 strncmp(buf, "From ", 5) == 0) 2153 { 2154 padc = '>'; 2155 } 2156 if (buf[0] == '-' && buf[1] == '-' && 2157 separator != NULL) 2158 { 2159 /* possible separator */ 2160 int sl = strlen(separator); 2161 2162 if (strncmp(&buf[2], separator, sl) == 0) 2163 padc = ' '; 2164 } 2165 if (buf[0] == '.' && 2166 bitnset(M_XDOT, mci->mci_mailer->m_flags)) 2167 { 2168 padc = '.'; 2169 } 2170 2171 /* now copy out saved line */ 2172 if (TrafficLogFile != NULL) 2173 { 2174 fprintf(TrafficLogFile, "%05d >>> ", getpid()); 2175 if (padc != EOF) 2176 fputc(padc, TrafficLogFile); 2177 for (xp = buf; xp < bp; xp++) 2178 fputc(*xp, TrafficLogFile); 2179 if (c == '\n') 2180 fputs(mci->mci_mailer->m_eol, 2181 TrafficLogFile); 2182 } 2183 if (padc != EOF) 2184 { 2185 fputc(padc, mci->mci_out); 2186 pos++; 2187 } 2188 for (xp = buf; xp < bp; xp++) 2189 fputc(*xp, mci->mci_out); 2190 if (c == '\n') 2191 { 2192 fputs(mci->mci_mailer->m_eol, 2193 mci->mci_out); 2194 pos = 0; 2195 } 2196 else 2197 { 2198 pos += bp - buf; 2199 *pbp++ = c; 2200 } 2201 bp = buf; 2202 2203 /* determine next state */ 2204 if (c == '\n') 2205 ostate = OS_HEAD; 2206 else if (c == '\r') 2207 ostate = OS_CR; 2208 else 2209 ostate = OS_INLINE; 2210 continue; 2211 2212 case OS_CR: 2213 if (c == '\n') 2214 { 2215 /* got CRLF */ 2216 fputs(mci->mci_mailer->m_eol, mci->mci_out); 2217 if (TrafficLogFile != NULL) 2218 { 2219 fputs(mci->mci_mailer->m_eol, 2220 TrafficLogFile); 2221 } 2222 ostate = OS_HEAD; 2223 continue; 2224 } 2225 2226 /* had a naked carriage return */ 2227 *pbp++ = c; 2228 c = '\r'; 2229 goto putchar; 2230 2231 case OS_INLINE: 2232 if (c == '\r') 2233 { 2234 ostate = OS_CR; 2235 continue; 2236 } 2237 putchar: 2238 if (pos > mci->mci_mailer->m_linelimit && 2239 c != '\n') 2240 { 2241 putc('!', mci->mci_out); 2242 fputs(mci->mci_mailer->m_eol, mci->mci_out); 2243 if (TrafficLogFile != NULL) 2244 { 2245 fprintf(TrafficLogFile, "!%s", 2246 mci->mci_mailer->m_eol); 2247 } 2248 ostate = OS_HEAD; 2249 *pbp++ = c; 2250 continue; 2251 } 2252 if (TrafficLogFile != NULL) 2253 fputc(c, TrafficLogFile); 2254 putc(c, mci->mci_out); 2255 pos++; 2256 if (c == '\n') 2257 ostate = OS_HEAD; 2258 break; 2259 } 2260 } 2261 } 2262 2263 if (ferror(e->e_dfp)) 2264 { 2265 syserr("putbody: %s: read error", e->e_df); 2266 ExitStat = EX_IOERR; 2267 } 2268 2269 endofmessage: 2270 /* some mailers want extra blank line at end of message */ 2271 if (bitnset(M_BLANKEND, mci->mci_mailer->m_flags) && 2272 buf[0] != '\0' && buf[0] != '\n') 2273 putline("", mci); 2274 2275 (void) fflush(mci->mci_out); 2276 if (ferror(mci->mci_out) && errno != EPIPE) 2277 { 2278 syserr("putbody: write error"); 2279 ExitStat = EX_IOERR; 2280 } 2281 errno = 0; 2282 } 2283 /* 2284 ** MAILFILE -- Send a message to a file. 2285 ** 2286 ** If the file has the setuid/setgid bits set, but NO execute 2287 ** bits, sendmail will try to become the owner of that file 2288 ** rather than the real user. Obviously, this only works if 2289 ** sendmail runs as root. 2290 ** 2291 ** This could be done as a subordinate mailer, except that it 2292 ** is used implicitly to save messages in ~/dead.letter. We 2293 ** view this as being sufficiently important as to include it 2294 ** here. For example, if the system is dying, we shouldn't have 2295 ** to create another process plus some pipes to save the message. 2296 ** 2297 ** Parameters: 2298 ** filename -- the name of the file to send to. 2299 ** ctladdr -- the controlling address header -- includes 2300 ** the userid/groupid to be when sending. 2301 ** 2302 ** Returns: 2303 ** The exit code associated with the operation. 2304 ** 2305 ** Side Effects: 2306 ** none. 2307 */ 2308 2309 mailfile(filename, ctladdr, e) 2310 char *filename; 2311 ADDRESS *ctladdr; 2312 register ENVELOPE *e; 2313 { 2314 register FILE *f; 2315 register int pid; 2316 int mode; 2317 2318 if (tTd(11, 1)) 2319 { 2320 printf("mailfile %s\n ctladdr=", filename); 2321 printaddr(ctladdr, FALSE); 2322 } 2323 2324 if (e->e_xfp != NULL) 2325 fflush(e->e_xfp); 2326 2327 /* 2328 ** Fork so we can change permissions here. 2329 ** Note that we MUST use fork, not vfork, because of 2330 ** the complications of calling subroutines, etc. 2331 */ 2332 2333 DOFORK(fork); 2334 2335 if (pid < 0) 2336 return (EX_OSERR); 2337 else if (pid == 0) 2338 { 2339 /* child -- actually write to file */ 2340 struct stat stb; 2341 MCI mcibuf; 2342 2343 (void) setsignal(SIGINT, SIG_DFL); 2344 (void) setsignal(SIGHUP, SIG_DFL); 2345 (void) setsignal(SIGTERM, SIG_DFL); 2346 (void) umask(OldUmask); 2347 2348 if (stat(filename, &stb) < 0) 2349 stb.st_mode = FileMode; 2350 mode = stb.st_mode; 2351 2352 /* limit the errors to those actually caused in the child */ 2353 errno = 0; 2354 ExitStat = EX_OK; 2355 2356 if (bitset(0111, stb.st_mode)) 2357 exit(EX_CANTCREAT); 2358 if (ctladdr != NULL) 2359 { 2360 /* ignore setuid and setgid bits */ 2361 mode &= ~(S_ISGID|S_ISUID); 2362 } 2363 2364 /* we have to open the dfile BEFORE setuid */ 2365 if (e->e_dfp == NULL && e->e_df != NULL) 2366 { 2367 e->e_dfp = fopen(e->e_df, "r"); 2368 if (e->e_dfp == NULL) 2369 { 2370 syserr("mailfile: Cannot open %s for %s from %s", 2371 e->e_df, e->e_to, e->e_from.q_paddr); 2372 } 2373 } 2374 2375 if (!bitset(S_ISGID, mode) || setgid(stb.st_gid) < 0) 2376 { 2377 if (ctladdr == NULL || ctladdr->q_uid == 0) 2378 { 2379 (void) initgroups(DefUser, DefGid); 2380 } 2381 else 2382 { 2383 (void) initgroups(ctladdr->q_ruser ? 2384 ctladdr->q_ruser : ctladdr->q_user, 2385 ctladdr->q_gid); 2386 } 2387 } 2388 if (!bitset(S_ISUID, mode) || setuid(stb.st_uid) < 0) 2389 { 2390 if (ctladdr == NULL || ctladdr->q_uid == 0) 2391 (void) setuid(DefUid); 2392 else 2393 (void) setuid(ctladdr->q_uid); 2394 } 2395 FileName = filename; 2396 LineNumber = 0; 2397 f = dfopen(filename, O_WRONLY|O_CREAT|O_APPEND, FileMode); 2398 if (f == NULL) 2399 { 2400 message("554 cannot open: %s", errstring(errno)); 2401 exit(EX_CANTCREAT); 2402 } 2403 2404 bzero(&mcibuf, sizeof mcibuf); 2405 mcibuf.mci_mailer = FileMailer; 2406 mcibuf.mci_out = f; 2407 if (bitnset(M_7BITS, FileMailer->m_flags)) 2408 mcibuf.mci_flags |= MCIF_7BIT; 2409 2410 putfromline(&mcibuf, e); 2411 (*e->e_puthdr)(&mcibuf, e->e_header, e); 2412 (*e->e_putbody)(&mcibuf, e, NULL); 2413 putline("\n", &mcibuf); 2414 if (ferror(f)) 2415 { 2416 message("451 I/O error: %s", errstring(errno)); 2417 setstat(EX_IOERR); 2418 } 2419 (void) xfclose(f, "mailfile", filename); 2420 (void) fflush(stdout); 2421 2422 /* reset ISUID & ISGID bits for paranoid systems */ 2423 (void) chmod(filename, (int) stb.st_mode); 2424 exit(ExitStat); 2425 /*NOTREACHED*/ 2426 } 2427 else 2428 { 2429 /* parent -- wait for exit status */ 2430 int st; 2431 2432 st = waitfor(pid); 2433 if (WIFEXITED(st)) 2434 return (WEXITSTATUS(st)); 2435 else 2436 { 2437 syserr("child died on signal %d", st); 2438 return (EX_UNAVAILABLE); 2439 } 2440 /*NOTREACHED*/ 2441 } 2442 } 2443 /* 2444 ** HOSTSIGNATURE -- return the "signature" for a host. 2445 ** 2446 ** The signature describes how we are going to send this -- it 2447 ** can be just the hostname (for non-Internet hosts) or can be 2448 ** an ordered list of MX hosts. 2449 ** 2450 ** Parameters: 2451 ** m -- the mailer describing this host. 2452 ** host -- the host name. 2453 ** e -- the current envelope. 2454 ** 2455 ** Returns: 2456 ** The signature for this host. 2457 ** 2458 ** Side Effects: 2459 ** Can tweak the symbol table. 2460 */ 2461 2462 char * 2463 hostsignature(m, host, e) 2464 register MAILER *m; 2465 char *host; 2466 ENVELOPE *e; 2467 { 2468 register char *p; 2469 register STAB *s; 2470 int i; 2471 int len; 2472 #if NAMED_BIND 2473 int nmx; 2474 auto int rcode; 2475 char *hp; 2476 char *endp; 2477 int oldoptions; 2478 char *mxhosts[MAXMXHOSTS + 1]; 2479 #endif 2480 2481 /* 2482 ** Check to see if this uses IPC -- if not, it can't have MX records. 2483 */ 2484 2485 p = m->m_mailer; 2486 if (strcmp(p, "[IPC]") != 0 && strcmp(p, "[TCP]") != 0) 2487 { 2488 /* just an ordinary mailer */ 2489 return host; 2490 } 2491 2492 /* 2493 ** Look it up in the symbol table. 2494 */ 2495 2496 s = stab(host, ST_HOSTSIG, ST_ENTER); 2497 if (s->s_hostsig != NULL) 2498 return s->s_hostsig; 2499 2500 /* 2501 ** Not already there -- create a signature. 2502 */ 2503 2504 #if NAMED_BIND 2505 if (ConfigLevel < 2) 2506 { 2507 oldoptions = _res.options; 2508 _res.options &= ~(RES_DEFNAMES | RES_DNSRCH); /* XXX */ 2509 } 2510 2511 for (hp = host; hp != NULL; hp = endp) 2512 { 2513 endp = strchr(hp, ':'); 2514 if (endp != NULL) 2515 *endp = '\0'; 2516 2517 nmx = getmxrr(hp, mxhosts, TRUE, &rcode); 2518 2519 if (nmx <= 0) 2520 { 2521 register MCI *mci; 2522 2523 /* update the connection info for this host */ 2524 mci = mci_get(hp, m); 2525 mci->mci_exitstat = rcode; 2526 mci->mci_errno = errno; 2527 #if NAMED_BIND 2528 mci->mci_herrno = h_errno; 2529 #endif 2530 2531 /* and return the original host name as the signature */ 2532 nmx = 1; 2533 mxhosts[0] = hp; 2534 } 2535 2536 len = 0; 2537 for (i = 0; i < nmx; i++) 2538 { 2539 len += strlen(mxhosts[i]) + 1; 2540 } 2541 if (s->s_hostsig != NULL) 2542 len += strlen(s->s_hostsig) + 1; 2543 p = xalloc(len); 2544 if (s->s_hostsig != NULL) 2545 { 2546 (void) strcpy(p, s->s_hostsig); 2547 free(s->s_hostsig); 2548 s->s_hostsig = p; 2549 p += strlen(p); 2550 *p++ = ':'; 2551 } 2552 else 2553 s->s_hostsig = p; 2554 for (i = 0; i < nmx; i++) 2555 { 2556 if (i != 0) 2557 *p++ = ':'; 2558 strcpy(p, mxhosts[i]); 2559 p += strlen(p); 2560 } 2561 if (endp != NULL) 2562 *endp++ = ':'; 2563 } 2564 makelower(s->s_hostsig); 2565 if (ConfigLevel < 2) 2566 _res.options = oldoptions; 2567 #else 2568 /* not using BIND -- the signature is just the host name */ 2569 s->s_hostsig = host; 2570 #endif 2571 if (tTd(17, 1)) 2572 printf("hostsignature(%s) = %s\n", host, s->s_hostsig); 2573 return s->s_hostsig; 2574 } 2575