summaryrefslogtreecommitdiff
path: root/sqmail-4.3.07/src/qmail-remote.c
diff options
context:
space:
mode:
Diffstat (limited to 'sqmail-4.3.07/src/qmail-remote.c')
-rw-r--r--sqmail-4.3.07/src/qmail-remote.c1476
1 files changed, 0 insertions, 1476 deletions
diff --git a/sqmail-4.3.07/src/qmail-remote.c b/sqmail-4.3.07/src/qmail-remote.c
deleted file mode 100644
index d2f08dd..0000000
--- a/sqmail-4.3.07/src/qmail-remote.c
+++ /dev/null
@@ -1,1476 +0,0 @@
-#ifdef IDN2
-#include <idn2.h>
-#endif
-#include <sys/types.h>
-#include <sys/stat.h>
-#include <sys/socket.h>
-#include <netinet/in.h>
-#include <arpa/inet.h>
-#include <unistd.h>
-#include "sig.h"
-#include "stralloc.h"
-#include "buffer.h"
-#include "scan.h"
-#include "case.h"
-#include "byte.h"
-#include "logmsg.h"
-#include "qmail.h"
-#include "auto_qmail.h"
-#include "control.h"
-#include "dns.h"
-#include "alloc.h"
-#include "genalloc.h"
-#include "quote.h"
-#include "fmt.h"
-#include "ip.h"
-#include "ipalloc.h"
-#include "ipme.h"
-#include "str.h"
-#include "now.h"
-#include "exit.h"
-#include "constmap.h"
-#include "tcpto.h"
-#include "timeout.h"
-#include "timeoutconn.h"
-#include "base64.h"
-#include "socket_if.h"
-#include "ucspissl.h"
-#include "hmac_md5.h"
-#include "tls_remote.h"
-#include "tls_errors.h"
-#include "tls_timeoutio.h"
-#include "uint_t.h"
-
-#define WHO "qmail-remote"
-
-#define QMTP_MAX 200000000 /* 190 MB for QMTP */
-#define HUGESMTPTEXT 1000 /* RFC 5322; was 5000 chars/line */
-#define PORT_SMTP 25 /* silly rabbit, /etc/services is for users */
-#define PORT_QMTP 209
-#define PORT_SMTPS 465
-#define PORT_SUBMISSION 587
-#define PORT_QMTPS 6209
-#define VERIFYDEPTH 1
-#define TCP_TIMEOUT 60
-#define SMTP_TIMEOUT 1200
-
-unsigned long port = PORT_SMTP;
-
-/** @file qmail-remote.c -- versatile SMTP(S)/QMTP(S) client */
-
-int flagauth = 0; /* 1 = login; 2 = plain; 3 = crammd5 */
-int flagsmtps = 0; /* RFC 8314 - 'implicit TLS' */
-int flagtlsdomain = 0; /* 0 = no; 1 = yes; 2 = cert */
-int flagtls = 0; /* flagtls: XYZ
- (mode) Z: -2 = rejected; -1 = not; 0 = no, default; Z > 0 see tls_remote.c
- (prot) Y: 0 = StartTLS; 1 = SMTPS; 2 = QMTPS
- (active) X: 1 = running TLS connection (after DNS lookup)
- (done) Z: 1: CA chain; 2: Cert wildname; 3: Cert exactname;
- 4: Cert fingerprint; 5: TLSA record */
-int flagverify = 0; /* 1 = verify Cert against CA; 2 = verify against Dir; 3 = triggerd by TLSA;
- -2 = Cert pinning; -1 = no TLSA validation */
-int flagutf8 = 0;
-
-GEN_ALLOC_typedef(saa,stralloc,sa,len,a)
-GEN_ALLOC_readyplus(saa,stralloc,sa,len,a,i,n,x,10,saa_readyplus)
-static stralloc sauninit = {0};
-
-stralloc helohost = {0};
-stralloc eaihost = {0};
-stralloc host = {0};
-stralloc idnhost = {0};
-stralloc sender = {0};
-stralloc canonhost = {0};
-stralloc remotehost = {0};
-stralloc canonbox = {0};
-stralloc senddomain = {0};
-stralloc sendip = {0};
-
-stralloc domainips = {0};
-struct constmap mapdomainips;
-char ip4[4];
-char ip6[16];
-uint32 ifidx = 0;
-char *authsender = 0;
-
-stralloc smtproutes = {0};
-struct constmap mapsmtproutes;
-stralloc qmtproutes = {0};
-struct constmap mapqmtproutes;
-
-saa reciplist = {0};
-stralloc recip = {0};
-
-char msgsize[FMT_ULONG];
-unsigned long msize = 0;
-struct ip_mx partner;
-
-SSL *ssl;
-SSL_CTX *ctx;
-
-char bufsmall[BUFFER_SMALL];
-buffer bs = BUFFER_INIT(write,1,bufsmall,sizeof(bufsmall));
-
-void out(char *s)
-{
- if (buffer_puts(&bs,s) == -1)
- _exit(0);
- }
-void zero()
-{
- if (buffer_put(&bs,"\0",1) == -1)
- _exit(0);
-}
-void zerodie()
-{
- zero();
- buffer_flush(&bs);
- if (ssl) tls_exit(ssl);
- _exit(0);
-}
-
-void outsafe(stralloc *sa)
-{
- int i;
- char ch;
- for (i = 0; i < sa->len; ++i) {
- ch = sa->s[i];
- if (ch == 0) continue;
- if (ch < 33) ch = '?';
- if (ch > 126) ch = '?';
- if (buffer_put(&bs,&ch,1) == -1) _exit(0);
- }
-}
-
-void temp_noip()
-{
- out("ZInvalid ipaddr in control/domainips (#4.3.0)\n");
- zerodie();
-}
-void temp_nomem()
-{
- out("ZOut of memory. (#4.3.0)\n");
- zerodie();
-}
-void temp_oserr()
-{
- out("ZSystem resources temporarily unavailable. (#4.3.0)\n");
- zerodie();
-}
-void temp_osip()
-{
- out("ZCan't bind to local ip address: ");
- outsafe(&sendip);
- out(". (#4.3.0)\n");
- zerodie();
-}
-void temp_noconn()
-{
- out("ZSorry, I wasn't able to establish an SMTP connection: ");
- outsafe(&canonhost);
- out(". (#4.3.0)\n");
- zerodie();
-}
-void temp_qmtpnoc()
-{
- out("ZSorry, I wasn't able to establish an QMTP connection: ");
- outsafe(&canonhost);
- out(". (#4.3.1)\n");
- zerodie();
-}
-void temp_read()
-{
- out("ZUnable to read message. (#4.3.0)\n");
- zerodie();
-}
-void temp_dnscanon()
-{
- out("ZCNAME lookup failed temporarily for: ");
- outsafe(&canonhost);
- out(". (#4.4.3)\n");
- zerodie();
-}
-void temp_dns()
-{
- out("ZSorry, I couldn't find any host named: ");
- outsafe(&host);
- out(". (#4.1.2)\n");
- zerodie();
-}
-void temp_nomx()
-{
- out("ZSorry, I couldn't find a mail exchanger or IP address for: ");
- outsafe(&host);
- out(". Will try again. (#4.1.2)\n");
- zerodie();
-}
-void temp_chdir()
-{
- out("ZUnable to switch to home directory. (#4.3.0)\n");
- zerodie();
-}
-void temp_control()
-{
- out("ZUnable to read control files. (#4.3.0)\n");
- zerodie();
-}
-void perm_partialline()
-{
- out("DSMTP cannot transfer messages with partial final line. (#5.6.2)\n");
- zerodie();
-}
-void temp_proto()
-{
- out("ZRecipient did not talk proper QMTP. (#4.3.0)\n");
- zerodie();
-}
-void perm_usage()
-{
- out("Dqmail-remote was invoked improperly. (#5.3.5)\n");
- zerodie();
-}
-void perm_dns()
-{
- out("DSorry, I couldn't find any host named: ");
- outsafe(&host);
- out(". (#5.1.2)\n");
- zerodie();
-}
-void perm_nomx()
-{
- out("DSorry, I couldn't find a mail exchanger or IP address for: ");
- outsafe(&host);
- out(". (#5.4.4)\n");
- zerodie();
-}
-void perm_ambigmx()
-{
- out("DSorry. Although I'm listed as a best-preference MX or A for that host,\n\
-it isn't in my control/locals file, so I don't treat it as local. (#5.4.6)\n");
- zerodie();
-}
-void err_authprot()
-{
- out("ZSorry, no supported AUTH method found, trying later again. (#4.7.1)\n");
- zerodie();
-}
-
-void outhost()
-{
- char ipaddr[IPFMT];
- int len;
-
- switch (partner.af) {
- case AF_INET:
- len = ip4_fmt(ipaddr,(char *)&partner.addr.ip4.d); break;
- case AF_INET6:
- len = ip6_fmt(ipaddr,(char *)&partner.addr.ip6.d); break;
- }
- if (buffer_put(&bs,ipaddr,len) == -1) _exit(0);
-}
-
-int flagcritical = 0;
-
-void dropped()
-{
- out("ZConnected to ");
- outhost();
- out(" but connection died. ");
- if (flagcritical) out("Possible duplicate! ");
- out("(#4.4.2)\n");
- zerodie();
-}
-
-int timeoutconnect = TCP_TIMEOUT;
-int smtpfd;
-int timeout = SMTP_TIMEOUT;
-
-ssize_t saferead(int fd,char *buf,int len)
-{
- int r;
- if (ssl) {
- r = tls_timeoutread(timeout,smtpfd,smtpfd,ssl,buf,len);
- if (r < 0) temp_tlserr();
- } else {
- r = timeoutread(timeout,smtpfd,buf,len);
- }
- if (r <= 0) dropped();
- return r;
-}
-
-ssize_t safewrite(int fd,char *buf,int len)
-{
- int r;
- if (ssl) {
- r = tls_timeoutwrite(timeout,smtpfd,smtpfd,ssl,buf,len);
- if (r < 0) temp_tlserr();
- } else {
- r = timeoutwrite(timeout,smtpfd,buf,len);
- }
- if (r <= 0) dropped();
- return r;
-}
-
-char inbuf[BUFSIZE_LINE];
-buffer bi = BUFFER_INIT(read,0,inbuf,sizeof(inbuf));
-char outbuf[BUFSIZE_MESS];
-buffer bo = BUFFER_INIT(safewrite,-1,outbuf,sizeof(outbuf));
-char frombuf[BUFFER_SMALL];
-buffer bf = BUFFER_INIT(saferead,-1,frombuf,sizeof(frombuf));
-
-static stralloc smtptext = {0};
-static stralloc header = {0};
-
-void get(char *ch)
-{
- buffer_get(&bf,ch,1);
- if (*ch != '\r')
- if (smtptext.len < HUGESMTPTEXT)
- if (!stralloc_append(&smtptext,ch)) temp_nomem();
-}
-
-unsigned long smtpcode()
-{
- unsigned char ch;
- unsigned long code;
-
- if (!stralloc_copys(&smtptext,"")) temp_nomem();
-
- get(&ch); code = ch - '0';
- get(&ch); code = code * 10 + (ch - '0');
- get(&ch); code = code * 10 + (ch - '0');
- for (;;) {
- get(&ch);
- if (ch != '-') break;
- while (ch != '\n') get(&ch);
- get(&ch);
- get(&ch);
- get(&ch);
- }
- while (ch != '\n') get(&ch);
-
- return code;
-}
-
-void outsmtptext()
-{
- int i;
- if (smtptext.s) if (smtptext.len) {
- out("Remote host said: ");
- for (i = 0; i < smtptext.len; ++i)
- if (!smtptext.s[i]) smtptext.s[i] = '?';
- if (buffer_put(&bs,smtptext.s,smtptext.len) == -1) _exit(0);
- smtptext.len = 0;
- }
-}
-
-void quit(char *prepend,char *append)
-{
- buffer_putsflush(&bo,"QUIT\r\n");
- /* waiting for remote side is just too ridiculous */
- out(prepend);
- outhost();
- out(append);
- out(".\n");
- outsmtptext();
- zerodie();
-}
-
-void blast()
-{
- int r;
- int in;
- int out;
- int eom = 1; // end-of-message <CRLF>.<CRLF>
- char tmpbuf[BUFSIZE_MESS + 2]; // intermediate write buffer
-
-// New blast code; inspired by Bruce Guenter's 'fastremote patch' (2005)
-
- while ((r = buffer_get(&bi,inbuf,sizeof(inbuf)))) { // read into buffer
- if (r == -1) temp_read();
-
- for (in = out = 0; in < r;) {
- if (eom && inbuf[in] == '.') {
- tmpbuf[out++] = '.';
- tmpbuf[out++] = inbuf[in++];
- }
- eom = 0;
- while (in < r) {
- if (inbuf[in] == '\r') { in++; continue; } // CR is DKIM input
- if (inbuf[in] == '\n') {
- eom = 1;
- in++;
- tmpbuf[out++] = '\r';
- tmpbuf[out++] = '\n';
- break;
- }
- tmpbuf[out++] = inbuf[in++];
- }
- }
- if (out) buffer_put(&bo,tmpbuf,out);
- }
-
- if (!eom) perm_partialline();
- flagcritical = 1;
- buffer_put(&bo,".\r\n",3); // LF seen; finish with .<CRLF>
- buffer_flush(&bo);
-}
-
-/* this file is too long -------------------------------------- client TLS */
-
-stralloc cafile = {0};
-stralloc cadir = {0};
-stralloc certfile = {0};
-stralloc keyfile = {0};
-stralloc keypwd = {0};
-stralloc ciphers = {0};
-
-char *tlsdestinfo = 0;
-char *tlsdomaininfo = 0;
-
-stralloc domaincerts = {0};
-struct constmap mapdomaincerts;
-stralloc tlsdestinations = {0};
-struct constmap maptlsdestinations;
-unsigned long verifydepth = VERIFYDEPTH;
-
-void tls_init()
-{
- ctx = ssl_client();
- ssl_errstr();
- if (!ctx) temp_tlsctx();
-
-/* Fetch CA infos for dest */
-
- if (flagverify > 0)
- if (cafile.len || cadir.len)
- if (!ssl_ca(ctx,cafile.s,cadir.s,(int) verifydepth)) temp_tlsca();
-
- if (ciphers.len)
- if (!ssl_ciphers(ctx,ciphers.s)) temp_tlscipher();
-
-/* Prepare for Certificate Request */
-
- if (flagtlsdomain == 2)
- switch (tls_certkey(ctx,certfile.s,keyfile.s,keypwd.s)) {
- case 0: break;
- case -1: temp_tlscert();
- case -2: temp_tlskey();
- case -3: temp_tlschk();
- }
-
-/* Set SSL Context */
-
- ssl = ssl_new(ctx,smtpfd);
- if (!ssl) temp_tlsctx();
-
-/* Setup SSL FDs */
-
- if (!tls_conn(ssl,smtpfd)) temp_tlscon();
-
-/* Go on in none-blocking mode */
-
- if (tls_timeoutconn(timeout,smtpfd,smtpfd,ssl) <= 0)
- temp_tlserr();
-}
-
-int starttls_peer()
-{
- int i = 0;
-
- if (smtptext.len > 16)
- for (i = 0; i < smtptext.len - 8; ++i)
- if (case_starts(smtptext.s + i,"STARTTLS")) return 1;
-
- return 0;
-}
-
-void tls_peercheck()
-{
- X509 *cert;
- STACK_OF(X509) *certs;
-
- cert = SSL_get_peer_certificate(ssl);
- if (!cert) { flagtls = 100; return; }
-
- if ((certs = SSL_get_peer_cert_chain(ssl)) == NULL) {
- certs = sk_X509_new_null();
- sk_X509_push(certs, cert);
- }
-
- if (flagverify == -2) { // fingerprinting is silent
- if (cafile.len) case_lowerb(cafile.s,cafile.len);
- switch (tls_fingerprint(cert,cafile.s + 1,cafile.len - 2)) {
- case -1: temp_tlspeercert();
- case -2: temp_tlsdigest();
- case -3: temp_invaliddigest();
- case 0: temp_tlscertfp();
- case 1: flagtls = 104; break;
- }
- }
-
- if (flagverify >= 0) { // TLSA is default
- switch (tlsa_check(certs,remotehost,port)) {
- case -4: temp_tlsamissing(); break; /* FIXME */
- case -3: temp_tlsainvalid(); break;
- case -2: break; // unsupported type; may happen
- case -1: break; // weird TLSA record
- case 0: break; // no TLSA record given
- case 1: case 2: flagtls = 107; flagverify = 3; break; // full certchain available (-PKIX)
- case 3: flagtls = 106; flagverify = 0; break; // TA-CA; verify wont work
- case 4: flagtls = 105; flagverify = 0; break; // Endpoint only
- }
- }
-
- if (flagverify > 0) {
- switch (tls_checkpeer(ssl,cert,remotehost,flagtls,flagverify)) {
- case -1: temp_tlspeercert();
- case -2: temp_tlspeerverify();
- case -3: temp_tlspeervalid();
- case 1: flagtls = 101; break;
- case 2: flagtls = 102; break;
- case 3: flagtls = 103; break;
- }
- }
-
- if (flagtls < 100) flagtls = 100;
-
- X509_free(cert);
- X509_free(certs);
-
- return;
-}
-
-/* this file is too long --------------------------------------- smtp UTF8 */
-
-int utf8string(unsigned char *ch,int len)
-{
- int i = 0;
- while (i < len)
- if (ch[i++] > 127) return 1;
- return 0;
-}
-
-int utf8received()
-{
- int r;
- int i;
- int received = 0;
- char ch;
- stralloc receivedline = {0};
-
-/* we consider only our own last written header */
-
- for (;;) {
- r = buffer_get(&bi,&ch,1);
- if (r == 0) break;
- if (r == -1) temp_read();
- if (ch == '\r') continue; // DKIM
-
- if (ch == '\n') {
- if (!stralloc_append(&header,"\r")) temp_nomem(); /* received.c does not add '\r' */
- if (!stralloc_append(&header,"\n")) temp_nomem();
- if (case_starts(receivedline.s,"Date:")) return 0; /* header to quit asap */
- if (case_starts(receivedline.s,"Received: from")) received++; /* found Received header */
- if (received) {
- if (case_starts(receivedline.s," by ")) {
- for (i = 6; i < receivedline.len - 6; ++i)
- if (*(receivedline.s + i) == ' ')
- if (case_starts(receivedline.s + i + 1,"with UTF8")) return 1;
- return 0;
- }
- }
- if (!stralloc_copys(&receivedline,"")) temp_nomem();
- } else {
- if (!stralloc_append(&header,&ch)) temp_nomem();
- if (!stralloc_catb(&receivedline,&ch,1)) temp_nomem();
- }
- }
- return 0;
-}
-
-/* this file is too long -------------------------------------- smtp client */
-
-unsigned long code;
-int flagsize = 0;
-
-int smtp_size()
-{
- int i;
- if (smtptext.len > 10)
- for (i = 0; i < smtptext.len; ++i) {
- if (case_starts(smtptext.s + i,"SIZE ")) return 1;
- }
- return 0;;
-}
-
-void smtp_greeting()
-{
- buffer_puts(&bo,"EHLO ");
- buffer_put(&bo,helohost.s,helohost.len);
- buffer_puts(&bo,"\r\n");
- buffer_flush(&bo);
-
- if (smtpcode() != 250) {
- buffer_puts(&bo,"HELO ");
- buffer_put(&bo,helohost.s,helohost.len);
- buffer_puts(&bo,"\r\n");
- buffer_flush(&bo);
-
- code = smtpcode();
- authsender = 0;
- if (code >= 500) quit("DConnected to "," but my name was rejected");
- if (code != 250) quit("ZConnected to "," but my name was rejected");
- }
- flagsize = smtp_size();
-}
-
-void smtp_starttls()
-{
- buffer_puts(&bo,"STARTTLS\r\n");
- buffer_flush(&bo);
-
- if (smtpcode() == 220) {
- tls_init();
- tls_peercheck();
- smtp_greeting();
- }
- else {
- flagtls = -2;
- quit("ZConnected to "," but STARTTLS was rejected");
- }
-}
-
-void mailfrom()
-{
- buffer_puts(&bo,"MAIL FROM:<");
- buffer_put(&bo,sender.s,sender.len);
- buffer_puts(&bo,">");
- if (flagutf8 || utf8received())
- buffer_puts(&bo," SMTPUTF8");
- if (flagsize && msize) {
- buffer_puts(&bo," SIZE=");
- buffer_puts(&bo,msgsize);
- }
- buffer_puts(&bo,"\r\n");
- buffer_flush(&bo);
-}
-
-/* this file is too long -------------------------------------- client auth */
-
-stralloc authsenders = {0};
-struct constmap mapauthsenders;
-
-stralloc user = {0};
-stralloc pass = {0};
-stralloc auth = {0};
-stralloc chal = {0};
-stralloc slop = {0};
-stralloc plain = {0};
-stralloc xuser = {0};
-
-static const char hextab[] = "0123456789abcdef";
-
-int xtext(stralloc *sa,char *s,int len)
-{
- int i;
- unsigned char c;
- char xch[2];
-
- if (!stralloc_copys(sa,"")) temp_nomem();
-
- for (i = 0; i < len; i++) {
- c = s[i];
- if (c < 33 || c > 126 || c == '=' || c == '+') {
- xch[0] = hextab[(c >> 4) & 0x0f];
- xch[1] = hextab[c & 0x0f];
- if (!stralloc_catb(sa,xch,2)) temp_nomem();
- } else
- if (!stralloc_catb(sa,s + i,1)) temp_nomem();
- }
-
- return sa->len;
-}
-
-void mailfrom_xtext()
-{
- if (!xtext(&xuser,user.s,user.len)) temp_nomem();
- buffer_puts(&bo,"MAIL FROM:<");
- buffer_put(&bo,sender.s,sender.len);
- buffer_puts(&bo,"> AUTH=");
- buffer_put(&bo,xuser.s,xuser.len);
- if (flagutf8 || utf8received())
- buffer_puts(&bo," SMTPUTF8");
- if (flagsize && msize) {
- buffer_puts(&bo," SIZE=");
- buffer_puts(&bo,msgsize);
- }
- buffer_puts(&bo,"\r\n");
- buffer_flush(&bo);
-}
-
-int mailfrom_plain()
-{
- buffer_puts(&bo,"AUTH PLAIN\r\n");
- buffer_flush(&bo);
-
- if (smtpcode() != 334) quit("ZConnected to "," but authentication was rejected (AUTH PLAIN)");
-
- if (!stralloc_cats(&plain,"")) temp_nomem(); /* RFC 4616 section 2 */
- if (!stralloc_0(&plain)) temp_nomem();
- if (!stralloc_cat(&plain,&user)) temp_nomem(); /* user-id */
- if (!stralloc_0(&plain)) temp_nomem();
- if (!stralloc_cat(&plain,&pass)) temp_nomem(); /* password */
- if (b64encode(&plain,&auth)) quit("ZConnected to "," but unable to base64encode (plain)");
- buffer_put(&bo,auth.s,auth.len);
- buffer_puts(&bo,"\r\n");
- buffer_flush(&bo);
-
- switch (smtpcode()) {
- case 235: mailfrom_xtext(); break;
- case 432: quit("DConnected to "," but password expired");
- case 534: quit("ZConnected to "," but authentication mechamism too weak (plain)");
- default: quit("ZConnected to "," but authentication was rejected (plain)");
- }
- return 0;
-}
-
-int mailfrom_login()
-{
- buffer_puts(&bo,"AUTH LOGIN\r\n");
- buffer_flush(&bo);
-
- if (smtpcode() != 334) quit("ZConnected to "," but authentication was rejected (AUTH LOGIN)");
- if (!stralloc_copys(&auth,"")) temp_nomem();
- if (b64encode(&user,&auth)) quit("ZConnected to "," but unable to base64encode user");
-
- buffer_put(&bo,auth.s,auth.len);
- buffer_puts(&bo,"\r\n");
- buffer_flush(&bo);
-
- if (smtpcode() != 334) quit("ZConnected to "," but authentication was rejected (username)");
-
- if (!stralloc_copys(&auth,"")) temp_nomem();
- if (b64encode(&pass,&auth)) quit("ZConnected to "," but unable to base64encode pass");
- buffer_put(&bo,auth.s,auth.len);
- buffer_puts(&bo,"\r\n");
- buffer_flush(&bo);
-
- switch (smtpcode()) {
- case 235: mailfrom_xtext(); break;
- case 432: quit("DConnected to "," but password expired");
- case 534: quit("ZConnected to "," but authentication mechanism is too weak (login)");
- default: quit("ZConnected to "," but authentication was rejected (login)");
- }
- return 0;
-}
-
-int mailfrom_cram()
-{
- int j;
- unsigned char digest[16];
- unsigned char digascii[33];
-
- buffer_puts(&bo,"AUTH CRAM-MD5\r\n");
- buffer_flush(&bo);
-
- if (smtpcode() != 334) quit("ZConnected to "," but authentication was rejected (AUTH CRAM-MD5)");
- if (str_chr(smtptext.s + 4,' ')) { /* Challenge */
- if (!stralloc_copys(&slop,"")) temp_nomem();
- if (!stralloc_copyb(&slop,smtptext.s + 4,smtptext.len - 5)) temp_nomem();
- if (b64decode(slop.s,slop.len,&chal)) quit("ZConnected to "," but unable to base64decode challenge");
- }
-
- hmac_md5((unsigned char *)chal.s,chal.len,pass.s,pass.len,digest);
-
- for (j = 0; j < 16; j++) { /* HEX => ASCII */
- digascii[2 * j] = hextab[digest[j] >> 4];
- digascii[2 * j + 1] = hextab[digest[j] & 0x0f];
- }
- digascii[32]=0;
-
- if (!stralloc_copys(&slop,"")) temp_nomem();
- if (!stralloc_cat(&slop,&user)) temp_nomem(); /* user-id */
- if (!stralloc_cats(&slop," ")) temp_nomem();
- if (!stralloc_catb(&slop,digascii,32)) temp_nomem(); /* digest */
-
- if (!stralloc_copys(&auth,"")) temp_nomem();
- if (b64encode(&slop,&auth)) quit("ZConnected to "," but unable to base64encode username+digest");
-
- buffer_put(&bo,auth.s,auth.len);
- buffer_puts(&bo,"\r\n");
- buffer_flush(&bo);
-
- switch (smtpcode()) {
- case 235: mailfrom_xtext(); break;
- case 432: quit("DConnected to "," but password expired");
- case 534: quit("ZConnected to "," but authentication mechamism too weak (cram)");
- default: quit("ZConnected to "," but authentication was rejected (cram)");
- }
- return 0;
-}
-
-void smtp_auth()
-{
- int i;
-
- if (smtptext.len > 8)
- for (i = 4; i < smtptext.len - 5; ++i) {
- if (case_starts(smtptext.s + i,"CRAM"))
- if (mailfrom_cram() >= 0) return;
- if (case_starts(smtptext.s + i,"LOGIN"))
- if (mailfrom_login() >= 0) return;
- if (case_starts(smtptext.s + i,"PLAIN"))
- if (mailfrom_plain() >= 0) return;
- }
- err_authprot();
- mailfrom();
-}
-
-/* this file is too long ------------------------------------------- GO ON */
-
-void smtp()
-{
- int flagbother;
- int i;
-
- if (flagtls > 10 && flagtls < 20) { /* SMTPS */
- tls_init();
- tls_peercheck();
- }
-
- code = smtpcode();
- if (code >= 500) quit("DConnected to "," but sender was rejected");
- if (code == 421 || code == 450) quit("ZConnected to "," but probably greylisted"); /* RFC 6647 */
- if (code >= 400) quit("ZConnected to "," but sender was rejected");
- if (code != 220) quit("ZConnected to "," but greeting failed");
-
- smtp_greeting();
-
- if (flagtls > 0 && flagtls < 10) { /* STARTTLS */
- if (starttls_peer())
- smtp_starttls();
- else if (flagtls > 3 && flagtls != 9) {
- if (!stralloc_0(&host)) temp_nomem();
- temp_tlshost();
- }
- }
- if (user.len && pass.len) /* AUTH */
- smtp_auth();
- else
- mailfrom(); /* Mail From */
-
- code = smtpcode();
- if (code >= 500) quit("DConnected to "," but sender was rejected");
- if (code >= 400) quit("ZConnected to "," but sender was probably greylisted");
-
- flagbother = 0; /* Rcpt To */
- for (i = 0; i < reciplist.len; ++i) {
- buffer_puts(&bo,"RCPT TO:<");
- buffer_put(&bo,reciplist.sa[i].s,reciplist.sa[i].len);
- buffer_puts(&bo,">\r\n");
- buffer_flush(&bo);
-
- code = smtpcode(); /* Data */
- if (flagsize) {
- if (code == 552) quit("DConnected to "," but message size is too large");
- if (code == 452) quit("ZConnected to "," however insufficient storage space available");
- }
- if (code == 421 || code == 450) { // Postfix merde ;-)
- out("s"); outhost(); out(" sender is greylisting.\n");
- outsmtptext(); zero();
- } else if (code >= 500) {
- out("h"); outhost(); out(" does not like recipient.\n");
- outsmtptext(); zero();
- } else if (code >= 400) {
- out("s"); outhost(); out(" does not like recipient.\n");
- outsmtptext(); zero();
- } else {
- out("r"); zero();
- flagbother = 1;
- }
- }
- if (!flagbother) quit("DGiving up on ","");
-
- buffer_putsflush(&bo,"DATA\r\n");
-
- code = smtpcode();
- if (code >= 500) quit("D"," failed on DATA command");
- if (code >= 400) quit("Z"," failed on DATA command");
-
- buffer_putflush(&bo,header.s,header.len);
-
- blast();
- code = smtpcode();
- flagcritical = 0;
- if (code >= 500) quit("D"," failed after I sent the message");
- if (code >= 400) quit("Z"," failed after I sent the message");
- switch (flagtls) { // StartTLS + SMTPS
- case 100: case 110: quit("K"," TLS transmitted message accepted"); break;
- case 101: case 111: quit("K"," TLS (verified CA) transmitted message accepted"); break;
- case 102: case 112: quit("K"," TLS (validated CA+DN*) transmitted message accepted"); break;
- case 103: case 113: quit("K"," TLS (validated CA+DN) transmitted message accepted"); break;
- case 104: case 114: quit("K"," TLS (CERT pinning) transmitted message accepted"); break;
- case 105: case 115: quit("K"," TLS (TLSA EE validated) transmitted message accepted"); break;
- case 106: case 116: quit("K"," TLS (TLSA TA validated) transmitted message accepted"); break;
- case 107: case 117: quit("K"," TLS (TLSA PKIX verified) transmitted message accepted"); break;
- default: quit("K"," accepted message"); break;
- }
-}
-
-/* this file is too long -------------------------------------- qmtp client */
-
-int qmtpsend = 0;
-
-void qmtp()
-{
- unsigned long len;
- char *x;
- int i;
- int n;
- unsigned char ch;
- char num[FMT_ULONG];
- int flagallok;
-
- if (qmtpsend == 2) { /* QMTPS */
- tls_init();
- tls_peercheck();
- }
-
-/* the following code was substantially taken from serialmail's serialqmtp.c */
-
- scan_ulong(msgsize,&len);
- buffer_put(&bo,num,fmt_ulong(num,len + 1));
- buffer_put(&bo,":\n",2);
- while (len > 0) {
- n = buffer_feed(&bi);
- if (n <= 0) _exit(1); /* wise guy again */
- x = buffer_PEEK(&bi);
- buffer_put(&bo,x,n);
- buffer_SEEK(&bi,n);
- len -= n;
- }
- buffer_put(&bo,",",1);
-
- len = sender.len;
- buffer_put(&bo,num,fmt_ulong(num,len));
- buffer_put(&bo,":",1);
- buffer_put(&bo,sender.s,sender.len);
- buffer_put(&bo,",",1);
-
- len = 0;
- for (i = 0; i < reciplist.len; ++i)
- len += fmt_ulong(num,reciplist.sa[i].len) + 1 + reciplist.sa[i].len + 1;
- buffer_put(&bo,num,fmt_ulong(num,len));
- buffer_put(&bo,":",1);
- for (i = 0; i < reciplist.len; ++i) {
- buffer_put(&bo,num,fmt_ulong(num,reciplist.sa[i].len));
- buffer_put(&bo,":",1);
- buffer_put(&bo,reciplist.sa[i].s,reciplist.sa[i].len);
- buffer_put(&bo,",",1);
- }
- buffer_put(&bo,",",1);
- buffer_flush(&bo);
-
- flagallok = 1;
-
- for (i = 0; i < reciplist.len; ++i) {
- len = 0;
- for (;;) {
- get(&ch);
- if (ch == ':') break;
- if (len > QMTP_MAX) temp_proto();
- if (ch - '0' > 9) temp_proto();
- len = 10 * len + (ch - '0');
- }
- if (!len) temp_proto();
- get(&ch); --len;
- if ((ch != 'Z') && (ch != 'D') && (ch != 'K')) temp_proto();
-
- if (!stralloc_copyb(&smtptext,&ch,1)) temp_proto();
- if (flagtls == 100) {
- if (!stralloc_cats(&smtptext,"qmtps:")) temp_nomem();
- } else {
- if (!stralloc_cats(&smtptext,"qmtp:")) temp_nomem();
- }
-
- while (len > 0) {
- get(&ch);
- --len;
- }
-
- for (len = 0; len < smtptext.len; ++len) {
- ch = smtptext.s[len];
- if ((ch < 32) || (ch > 126)) smtptext.s[len] = '?';
- }
- get(&ch);
- if (ch != ',') temp_proto();
- smtptext.s[smtptext.len - 1] = '\n';
-
- if (smtptext.s[0] == 'K') out("r");
- else if (smtptext.s[0] == 'D') {
- out("h");
- flagallok = 0;
- }
- else { /* if (smtptext.s[0] == 'Z') */
- out("s");
- flagallok = 0;
- }
- if (buffer_put(&bs,smtptext.s + 1,smtptext.len - 1) == -1) temp_qmtpnoc();
- zero();
- }
- if (!flagallok) {
- out("DGiving up on "); outhost(); out("\n");
- } else {
- out("KAll received okay by "); outhost(); out("\n");
- }
- zerodie();
-}
-
-/* this file is too long -------------------------------------- common */
-
-/* host has to be canonical [A/AAAA record], box has to be quoted */
-
-void addrmangle(stralloc *saout,char *address,int *flagalias,int flagcname)
-{
- int at;
- int r = 0;
- stralloc cn = {0};
-
- *flagalias = flagcname; /* saout + flagalias are output */
- if (!flagutf8)
- flagutf8 = utf8string(address,str_len(address));
-
- at = str_rchr(address,'@');
- if (!address[at]) {
- if (!stralloc_copys(saout,address)) temp_nomem();
- return;
- }
-
- if (!stralloc_copys(&canonbox,address)) temp_nomem();
- canonbox.len = at;
- if (!quote(saout,&canonbox)) temp_nomem(); /* saout = 'inbox' name without quotes ;-) */
- if (!stralloc_cats(saout,"@")) temp_nomem();
-
- if (!stralloc_copys(&canonhost,address + at + 1)) temp_nomem();
- if (flagcname) { /* no relayhost */
- DNS_INIT
- switch ((r = dns_cname(&cn,&canonhost))) {
- case DNS_MEM: temp_nomem();
- case DNS_SOFT: temp_dnscanon();
- case DNS_HARD: ; /* alias loop, not our problem */
- default: if (r > 0) *flagalias = 0;
- }
- }
- if (!stralloc_cat(saout,&canonhost)) temp_nomem();
-}
-
-void getcontrols()
-{
- if (control_init() == -1) temp_control();
- if (control_readint(&timeout,"control/timeoutremote") == -1) temp_control();
- if (control_readint(&timeoutconnect,"control/timeoutconnect") == -1)
- temp_control();
- if (control_rldef(&helohost,"control/helohost",1,(char *) 0) != 1)
- temp_control();
- switch (control_readfile(&smtproutes,"control/smtproutes",0)) {
- case -1: temp_control();
- case 0: if (!constmap_init(&mapsmtproutes,"",0,1)) temp_nomem(); break;
- case 1: if (!constmap_init(&mapsmtproutes,smtproutes.s,smtproutes.len,1)) temp_nomem(); break;
- }
- switch (control_readfile(&domainips,"control/domainips",0)) {
- case -1: temp_control();
- case 0: if (!constmap_init(&mapdomainips,"",0,1)) temp_nomem(); break;
- case 1: if (!constmap_init(&mapdomainips,domainips.s,domainips.len,1)) temp_nomem(); break;
- }
- switch (control_readfile(&authsenders,"control/authsenders",0)) {
- case -1: temp_control();
- case 0: if (!constmap_init(&mapauthsenders,"",0,1)) temp_nomem(); break;
- case 1: if (!constmap_init(&mapauthsenders,authsenders.s,authsenders.len,1)) temp_nomem(); break;
- }
- switch (control_readfile(&qmtproutes,"control/qmtproutes",0)) {
- case -1: temp_control();
- case 0: if (!constmap_init(&mapqmtproutes,"",0,1)) temp_nomem(); break;
- case 1: if (!constmap_init(&mapqmtproutes,qmtproutes.s,qmtproutes.len,1)) temp_nomem(); break;
- }
- switch (control_readfile(&domaincerts,"control/domaincerts",0)) {
- case -1: temp_control();
- case 0: if (!constmap_init(&mapdomaincerts,"",0,1)) temp_nomem(); break;
- case 1: if (!constmap_init(&mapdomaincerts,domaincerts.s,domaincerts.len,1)) temp_nomem(); break;
- }
- switch (control_readfile(&tlsdestinations,"control/tlsdestinations",0)) {
- case -1: temp_control();
- case 0: if (!constmap_init(&maptlsdestinations,"",0,1)) temp_nomem(); break;
- case 1: if (!constmap_init(&maptlsdestinations,tlsdestinations.s,tlsdestinations.len,1)) temp_nomem(); break;
- }
-}
-
-int main(int argc,char **argv)
-{
- static ipalloc ip = {0};
- stralloc netif = {0};
- struct stat st;
- int i, j, k;
- int p; /* reserved for port */
- int r; /* reserved for return code */
- unsigned long random;
- char **recips;
- unsigned long prefme;
- int flagallaliases;
- int flagalias;
- char *relayhost;
- char *localip;
- int ip6flag = 0;
-
- sig_pipeignore();
- if (argc < 4) perm_usage();
- if (chdir(auto_qmail) == -1) temp_chdir();
-
- getcontrols();
- if (!stralloc_copys(&host,argv[1])) temp_nomem();
-
- authsender = 0;
- relayhost = 0;
-
- addrmangle(&sender,argv[2],&flagalias,0);
-
- if (sender.len > 1) {
- i = str_chr(sender.s,'@');
- if (sender.s[i] == '@')
- if (!stralloc_copyb(&senddomain,sender.s + i + 1,sender.len - i - 1)) temp_nomem(); // un-terminated
- }
-
-/* this file is too long -------------------------------------- set domain ip + helohost */
-
- localip = 0;
-
- for (i = 0; i <= senddomain.len; ++i)
- if ((i == 0) || (senddomain.s[i] == '.'))
- if ((localip = constmap(&mapdomainips,senddomain.s + i,senddomain.len - i)))
- break;
-
- if (!localip)
- localip = constmap(&mapdomainips,"*",1); /* one for all */
-
- if (localip) {
- j = str_chr(localip,'%');
- if (localip[j] != '%') j = 0;
- k = str_chr(localip,'|');
- if (localip[k] != '|') k = 0;
- if (k) { /* helohost */
- if (!stralloc_copys(&helohost,localip + k + 1)) temp_nomem();
- if (!stralloc_0(&helohost)) temp_nomem();
- localip[k] = 0;
- }
- if (j) { /* IF index */
- localip[j] = 0;
- if (!stralloc_copys(&netif,localip + j + 1)) temp_nomem();
- if (!stralloc_0(&netif)) temp_nomem();
- }
- }
-
-/* this file is too long -------------------------------------- authsender routes */
-
- for (i = 0; i <= sender.len; ++i)
- if ((i == 0) || (i == sender.len) || (sender.s[i] == '.') || (sender.s[i] == '@'))
- if ((authsender = constmap(&mapauthsenders,sender.s + i,sender.len - i)))
- break;
-
- if (authsender && !*authsender) authsender = 0;
-
- if (authsender) {
- i = str_chr(authsender,'|');
- if (authsender[i] == '|') {
- j = str_chr(authsender + i + 1,'|');
- if (authsender[i + j + 1] == '|') {
- authsender[i] = 0;
- authsender[i + j + 1] = 0;
- if (!stralloc_copys(&user,"")) temp_nomem();
- if (!stralloc_copys(&user,authsender + i + 1)) temp_nomem();
- if (!stralloc_copys(&pass,"")) temp_nomem();
- if (!stralloc_copys(&pass,authsender + i + j + 2)) temp_nomem();
- }
- }
- p = str_chr(authsender,';');
- if (authsender[p] == ';') {
- if (authsender[p + 1] == 's') { flagsmtps = 1, p++; }
- scan_ulong(authsender + p + 1,&port);
- authsender[p] = 0;
- }
- relayhost = authsender;
- if (!stralloc_copys(&host,authsender)) temp_nomem();
- }
-
-/* this file is too long -------------------------------------- standard routes */
-
- if (!authsender) {
- if (sender.len == 0) { /* bounce routes */
- if ((relayhost = constmap(&mapqmtproutes,"!@",2))) {
- qmtpsend = 1; port = PORT_QMTP;
- } else
- relayhost = constmap(&mapsmtproutes,"!@",2);
- }
-
- if (relayhost && !*relayhost) relayhost = 0;
-
- if (!relayhost) {
- for (i = 0; i <= host.len; ++i) { /* qmtproutes */
- if ((i == 0) || (i == host.len) || (host.s[i] == '.'))
- if ((relayhost = constmap(&mapqmtproutes,host.s + i,host.len - i))) {
- qmtpsend = 1; port = PORT_QMTP;
- break;
- } /* default smtproutes */
- if ((relayhost = constmap(&mapsmtproutes,host.s + i,host.len - i)))
- break;
- }
- }
- if (relayhost && !*relayhost) relayhost = 0;
-
- if (relayhost) { /* default smtproutes -- authenticated */
- i = str_chr(relayhost,'|');
- if (relayhost[i] == '|') {
- j = str_chr(relayhost + i + 1,'|'); // authenticate
- if (relayhost[i + j + 1] == '|') {
- relayhost[i] = 0;
- relayhost[i + j + 1] = 0;
- if (!stralloc_copys(&user,"")) temp_nomem();
- if (!stralloc_copys(&user,relayhost + i + 1)) temp_nomem();
- if (!stralloc_copys(&pass,"")) temp_nomem();
- k = str_chr(relayhost + i + j + 2,'|'); // local ip
- if (relayhost[i + j + k + 2] == '|') {
- relayhost[i + j + k + 2] = 0;
- localip = relayhost + i + j + k + 3;
- }
- if (!stralloc_copys(&pass,relayhost + i + j + 2)) temp_nomem();
- }
- }
- p = str_chr(relayhost,';');
- if (relayhost[p] == ';') {
- if (relayhost[p + 1] == 's') { flagsmtps = 1; p++; } // RFC 8314
- scan_ulong(relayhost + p + 1,&port);
- if (qmtpsend && port == PORT_QMTPS) qmtpsend = 2;
- relayhost[p] = 0;
- }
- if (!stralloc_copys(&host,relayhost)) temp_nomem();
-#ifdef IDN2
- } else {
- char *asciihost = 0;
- if (!stralloc_0(&host)) temp_nomem();
- switch (idn2_lookup_u8(host.s,(uint8_t**)&asciihost,IDN2_NFC_INPUT)) {
- case IDN2_OK: break;
- case IDN2_MALLOC: temp_nomem();
- default: perm_dns();
- }
- if (!stralloc_copys(&idnhost,asciihost)) temp_nomem();
-#endif
- }
- }
-
-/* this file is too long -------------------------------------- TLS destinations */
-
-
- flagtls = tls_destination((const stralloc) host); // host may not be 0-terminated
-
- if (flagtls > 0) {
- if (tlsdestinfo) {
- i = str_chr(tlsdestinfo,'|'); /* ca file/dir or cert fingerprint */
- if (tlsdestinfo[i] == '|') {
- tlsdestinfo[i] = 0;
- j = str_chr(tlsdestinfo + i + 1,'|'); /* cipher */
- if (tlsdestinfo[i + j + 1] == '|') {
- tlsdestinfo[i + j + 1] = 0;
- k = str_chr(tlsdestinfo + i + j + 2,'|'); /* cone domain */
- if (tlsdestinfo[i + j + k + 2] == '|') {
- tlsdestinfo[i + j + k + 2] = 0;
- if (str_diffn(tlsdestinfo + j + k + 3,canonhost.s,canonhost.len)) flagtls = 0;
- }
- p = str_chr(tlsdestinfo + i + j + 2,';'); /* verifydepth;port */
- if (tlsdestinfo[i + j + p + 2] == ';') {
- tlsdestinfo[i + j + p + 2] = 0;
- if (p > 0) scan_ulong(tlsdestinfo + i + j + 2,&verifydepth);
- if (tlsdestinfo[i + j + p + 3] == 's') { flagsmtps = 1; p++; } /* RFC 8314 */
- scan_ulong(tlsdestinfo + i + j + p + 3,&port);
- }
- }
- if (j)
- if (!stralloc_copys(&ciphers,tlsdestinfo + i + 1)) temp_nomem();
- }
-
- /* either ':[=]cafile/cadir' -or- ':;port' */
-
- if (tlsdestinfo[0] == ';')
- scan_ulong(tlsdestinfo + 1,&port);
- else
- if (!stralloc_copys(&cafile,tlsdestinfo)) temp_nomem();
- }
-
-/* cafile starts with '=' => it is a fingerprint
- cafile ends with '/' => consider it as cadir
- cafile and cadir are now 0-terminated
- ciphers are alway 0-terminated if given */
-
- if (cafile.len > 2) {
- flagverify = 1;
- if (cafile.s[cafile.len] == '/') {
- cafile.len = 0;
- flagverify = 2;
- if (!stralloc_copys(&cadir,tlsdestinfo)) temp_nomem();
- if (!stralloc_0(&cadir)) temp_nomem();
- } else {
- if (cafile.s[0] == '=') flagverify = -2;
- if (!stralloc_0(&cafile)) temp_nomem();
- }
- } else
- cafile.len = cadir.len = 0;
-
- if (ciphers.len > 4) /* otherwise garbage */
- if (!stralloc_0(&ciphers)) temp_nomem();
- else
- ciphers.len = 0;
-
- if (port == PORT_SMTPS || flagsmtps) flagtls += 10;
- if (port == PORT_QMTPS) flagtls += 20;
- }
-
- if (flagtls == 8) flagverify = -1;
- if (!flagtls && qmtpsend == 2) flagtls = 20; /* QMTPS */
-
-
-/* this file is too long -------------------------------------- Our Certs - per senddomain */
-
- if (flagtls > 0) {
- flagtlsdomain = tls_domaincerts((const stralloc) senddomain); // senddomain un-terminated
-
- if (flagtlsdomain && tlsdomaininfo) {
- i = str_chr(tlsdomaininfo,'|');
- if (tlsdomaininfo[i] == '|') {
- tlsdomaininfo[i] = 0;
- j = str_chr(tlsdomaininfo + i + 1,'|');
- if (tlsdomaininfo[i + j + 1] == '|') {
- tlsdomaininfo[i + j + 1] = 0;
- if (!stralloc_copys(&keypwd,"")) temp_nomem();
- if (!stralloc_copys(&keypwd,tlsdomaininfo + i + j + 2)) temp_nomem();
- if (!stralloc_0(&keypwd)) temp_nomem();
- }
- if (!stralloc_copys(&keyfile,tlsdomaininfo + i + 1)) temp_nomem();
- if (!stralloc_0(&keyfile)) temp_nomem();
- }
- if (!stralloc_copys(&certfile,tlsdomaininfo)) temp_nomem();
- if (!stralloc_0(&certfile)) temp_nomem();
- flagtlsdomain = 2;
- }
- }
-
-/* this file is too long -------------------------------------- work thru reciplist */
-
- if (!saa_readyplus(&reciplist,0)) temp_nomem();
- if (ipme_init() != 1) temp_oserr();
-
- flagallaliases = 1;
- recips = argv + 3;
-
- if (fstat(0,&st) == -1) quit("Z", " unable to fstat stdin");
- msize = st.st_size;
- fmt_ulong(msgsize,msize);
-
- while (*recips) {
- if (!saa_readyplus(&reciplist,1)) temp_nomem();
- reciplist.sa[reciplist.len] = sauninit;
- addrmangle(reciplist.sa + reciplist.len,*recips,&flagalias,!relayhost);
- if (!flagalias) flagallaliases = 0;
- ++reciplist.len;
- ++recips;
- }
-
- random = now() + (getpid() << 16);
-#ifdef IDN2
- switch (relayhost ? dns_ip(&ip,&host) : dns_mxip(&ip,&idnhost,random)) {
-#else
- switch (relayhost ? dns_ip(&ip,&host) : dns_mxip(&ip,&host,random)) {
-#endif
- case DNS_MEM: temp_nomem();
- case DNS_ERR: temp_dns();
- case DNS_COM: temp_dns();
- case DNS_SOFT: temp_dns();
-#ifdef DEFERREDBOUNCES
- default: if (!ip.len) temp_nomx();
-#else
- default: if (!ip.len) perm_nomx();
-#endif
- }
-
- prefme = 100000;
- for (i = 0; i < ip.len; ++i)
- if (ipme_is(&ip.ix[i]))
- if (ip.ix[i].pref < prefme)
- prefme = ip.ix[i].pref;
-
- if (relayhost) prefme = 300000;
- if (flagallaliases) prefme = 500000;
-
- if (localip) {
- i = str_chr(localip,':');
- if (localip[i] == ':') ip6flag = 1;
- else ip6flag = -1;
- }
-
- for (i = 0; i < ip.len; ++i) { /* MX with smallest distance */
- if (ip6flag == -1 && ip.ix[i].af == AF_INET6) continue;
- if (ip6flag == 1 && ip.ix[i].af == AF_INET) continue;
- if (ip.ix[i].pref < prefme) break;
- }
-
- if (i >= ip.len)
- perm_ambigmx();
-
- if (!stralloc_copys(&remotehost,ip.ix[i].mxh)) temp_nomem(); /* take MX hostname for TLSA */
- if (!stralloc_0(&remotehost)) temp_nomem();
-
- for (i = 0; i < ip.len; ++i) {
- if (ip.ix[i].pref < prefme) {
- if (ip6flag == -1 && ip.ix[i].af == AF_INET6) continue; /* explicit binding */
- if (ip6flag == 1 && ip.ix[i].af == AF_INET) continue;
- if (tcpto(&ip.ix[i])) continue;
-
- smtpfd = socket(ip.ix[i].af,SOCK_STREAM,0);
- if (smtpfd == -1) continue;
-
- if (localip) { /* set domain ip */
- if (!stralloc_copyb(&sendip,localip,str_len(localip))) temp_nomem();
- j = str_chr(localip,':');
- if (localip[j] == ':') {
- if (!ip6_scan(localip,ip6)) temp_noip(); /* IPv6 */
- if (byte_equal(ip.ix[i].addr.ip6.d,16,ip6)) continue;
- ifidx = socket_getifidx(netif.s);
- if (socket_bind6(smtpfd,ip6,0,ifidx) < 0) temp_osip();
- } else {
- if (!ip4_scan(localip,ip4)) temp_noip(); /* IPv4 */
- if (byte_equal(ip.ix[i].addr.ip4.d,4,ip4)) continue;
- if (socket_bind4(smtpfd,ip4,0) < 0) temp_osip();
- }
- }
-
-
- AGAIN:
- if (ip.ix[i].af == AF_INET6)
- r = timeoutconn6(smtpfd,(char *)&ip.ix[i].addr.ip6.d,(unsigned int) port,timeoutconnect,ifidx);
- else
- r = timeoutconn4(smtpfd,(char *)&ip.ix[i].addr.ip4.d,(unsigned int) port,timeoutconnect);
- if (r == 0) {
- tcpto_err(&ip.ix[i],0);
- partner = ip.ix[i];
- if (qmtpsend)
- qmtp();
- else
- smtp(); /* read qmail/THOUGHTS; section 6 */
- }
- if (flagtls == 9 && errno == EPROTO) {
- flagtls = 0; goto AGAIN;
- }
- if (errno == ETIMEDOUT || errno == ECONNREFUSED || errno == EPROTO)
- tcpto_err(&ip.ix[i],1);
- close(smtpfd);
- }
- }
- temp_noconn();
-}
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-23 07:58:02 +0000