allow smtpd to fork processes at startup and maintain a socketpair with
them.

ok jung@, eric@

- odd condition/test in PF lexer
(and other lexers too)

This commit rectifies earlier change:

in the lex... even inside quotes, a \ followed by space or tab should
expand to space or tab,

- odd condition/test in PF lexer
(and other lexers too)

This commit rectifies earlier change:

in the lex... even inside quotes, a \ followed by space or tab should
expand to space or tab, and a \ followed by newline should be ignored
(as a line continuation). compatible with the needs of hoststated
(which has the most strict quoted string requirements), and ifstated
(where one commonly does line continuations in strings).

OK deraadt@, OK millert@

show more ...

Allow to use the "tls" keyword on any relay action to force TLS, with
strict certificate validation. The "no-verify" becomes optional.

ok gilles@ millert@ semarie@

replace malloc()+strlcpy() with strndup() in cmdline_symset().

"looks good" gilles@ halex@

rename token to match naming convention

ok eric@

properly deal with MAILER-DAEMON sender in LMTP

reported and fix tested by Mark Kane

remove unused header

from Freddy Dissaux

remove unused variable

Do for most running out of memory err() what was done for most running
out of memory log_warn(). i.e. ("%s", __func__) instead of manual
function names and redundant verbiage about which wrapper dete

Do for most running out of memory err() what was done for most running
out of memory log_warn(). i.e. ("%s", __func__) instead of manual
function names and redundant verbiage about which wrapper detected the
out of memory condition.

ok henning@

show more ...

No need to mention which memory allocation entry point failed (malloc,
calloc or strdup), we just need to log that we ran out of memory in a
particular function.

Recommended by florian@ and deraadt@

No need to mention which memory allocation entry point failed (malloc,
calloc or strdup), we just need to log that we ran out of memory in a
particular function.

Recommended by florian@ and deraadt@

ok benno@ henning@ tb@

show more ...

simplify parse_config() further so it no longer has any side effect outside
of parse.y, there's still work to be done but it's now able to run twice if
we want (we don't) without failing due to some

simplify parse_config() further so it no longer has any side effect outside
of parse.y, there's still work to be done but it's now able to run twice if
we want (we don't) without failing due to some global side-effect.

ok millert@

show more ...

rework the table API so that it takes a struct smtpd * context in parameter
of functions creating, looking up or destroying tables.

this is a first step in cleaning up parse.y so it doesn't have sid

rework the table API so that it takes a struct smtpd * context in parameter
of functions creating, looking up or destroying tables.

this is a first step in cleaning up parse.y so it doesn't have side effects
outside of parse_config(), bringing nothing but making code cleaner.

ok millert@

show more ...

the %{sender} variable should expand to the MAIL FROM address, so in the
case of a mailer daemon, this is an empty string, not '@'

introduce %{mbox.from} which is the From separator line representat

the %{sender} variable should expand to the MAIL FROM address, so in the
case of a mailer daemon, this is an empty string, not '@'

introduce %{mbox.from} which is the From separator line representation
of a sender, usually an email address or MAILER-DAEMON if sender is empty

ok eric@

show more ...

add support for mda wrappers allowing postmaster to define command wrappers
that will be executed (with recipient privileges) before calling the users'
mail delivery agent

ok eric@

reorder pki grammar, no functional change

instead of using 'set queue XXX' 'set mta XXX' 'set mda XXX' to set option
XXX on the relevant component, just drop the keyword 'set', it does not do
anything useful and makes config directives longe

instead of using 'set queue XXX' 'set mta XXX' 'set mda XXX' to set option
XXX on the relevant component, just drop the keyword 'set', it does not do
anything useful and makes config directives longer.

while at it, instead of having 'limit' as a main keyword, make it an option
on components.

and also while at it, do cleanup parse.y a bit

ok millert@

show more ...

Require a valid certificate by default when relaying through a smarthost.
Add "tls no-verify" relay option to disable it.

suggested and initial diff by semarie@.

ok gilles@

remove 'where' parameter from all x*() functions in utils.c, it doesn't
really help us with anything, propagate the change in codebase

ok millert@

cosmethic change, shuffle smtpd specific grammar bits _after_ the ones that
make sense to others

teach mail.maildir how to junk mails if -j option is set and X-Spam is
positive, this can be enabled with the 'junk' option in maildir action

ok eric@

it turns out we can provide syntaxic sugar for an LMTP action in smtpd.conf
which should please our users ;-)

while at it get rid of unix:/inet: prefixes in LMTP destinations, we either
use an absol

it turns out we can provide syntaxic sugar for an LMTP action in smtpd.conf
which should please our users ;-)

while at it get rid of unix:/inet: prefixes in LMTP destinations, we either
use an absolute path for a UNIX socket or it's necessarily a network socket
so '/' as the first char of the destination makes the prefixes irrelevant.

show more ...

simplify mail.maildir as well as the parse.y glue

ok eric@

default to from local and for local as we used to

spotted by millert@, ok eric@

switch smtpd to new grammar

ok eric@

Plug leak in error case of the common 'varset' implementations.

ok benno@