1 /*++
2 /* NAME
3 /* mail_params 3
4 /* SUMMARY
5 /* global mail configuration parameters
6 /* SYNOPSIS
7 /* #include <mail_params.h>
8 /*
9 /* char *var_myhostname;
10 /* char *var_mydomain;
11 /* char *var_myorigin;
12 /* char *var_mydest;
13 /* char *var_relayhost;
14 /* char *var_transit_origin;
15 /* char *var_transit_dest;
16 /* char *var_mail_name;
17 /* int var_helpful_warnings;
18 /* char *var_syslog_name;
19 /* char *var_mail_owner;
20 /* uid_t var_owner_uid;
21 /* gid_t var_owner_gid;
22 /* char *var_sgid_group;
23 /* gid_t var_sgid_gid;
24 /* char *var_default_privs;
25 /* uid_t var_default_uid;
26 /* gid_t var_default_gid;
27 /* char *var_config_dir;
28 /* char *var_daemon_dir;
29 /* char *var_data_dir;
30 /* char *var_command_dir;
31 /* char *var_meta_dir;
32 /* char *var_queue_dir;
33 /* char *var_shlib_dir;
34 /* int var_use_limit;
35 /* int var_idle_limit;
36 /* int var_event_drain;
37 /* int var_bundle_rcpt;
38 /* char *var_procname;
39 /* char *var_servname;
40 /* int var_pid;
41 /* int var_ipc_timeout;
42 /* char *var_pid_dir;
43 /* int var_dont_remove;
44 /* char *var_inet_interfaces;
45 /* char *var_proxy_interfaces;
46 /* char *var_inet_protocols;
47 /* char *var_mynetworks;
48 /* char *var_double_bounce_sender;
49 /* int var_line_limit;
50 /* char *var_alias_db_map;
51 /* long var_message_limit;
52 /* char *var_mail_release;
53 /* char *var_mail_version;
54 /* int var_ipc_idle_limit;
55 /* int var_ipc_ttl_limit;
56 /* char *var_db_type;
57 /* char *var_hash_queue_names;
58 /* int var_hash_queue_depth;
59 /* int var_trigger_timeout;
60 /* char *var_rcpt_delim;
61 /* int var_fork_tries;
62 /* int var_fork_delay;
63 /* int var_flock_tries;
64 /* int var_flock_delay;
65 /* int var_flock_stale;
66 /* int var_disable_dns;
67 /* int var_soft_bounce;
68 /* time_t var_starttime;
69 /* int var_ownreq_special;
70 /* int var_daemon_timeout;
71 /* char *var_syslog_facility;
72 /* char *var_relay_domains;
73 /* char *var_fflush_domains;
74 /* char *var_mynetworks_style;
75 /* char *var_verp_delims;
76 /* char *var_verp_filter;
77 /* char *var_par_dom_match;
78 /* char *var_config_dirs;
79 /*
80 /* int var_inet_windowsize;
81 /* char *var_import_environ;
82 /* char *var_export_environ;
83 /* char *var_debug_peer_list;
84 /* int var_debug_peer_level;
85 /* int var_in_flow_delay;
86 /* int var_fault_inj_code;
87 /* char *var_bounce_service;
88 /* char *var_cleanup_service;
89 /* char *var_defer_service;
90 /* char *var_pickup_service;
91 /* char *var_queue_service;
92 /* char *var_rewrite_service;
93 /* char *var_showq_service;
94 /* char *var_error_service;
95 /* char *var_flush_service;
96 /* char *var_verify_service;
97 /* char *var_trace_service;
98 /* char *var_proxymap_service;
99 /* char *var_proxywrite_service;
100 /* int var_db_create_buf;
101 /* int var_db_read_buf;
102 /* long var_lmdb_map_size;
103 /* int var_proc_limit;
104 /* int var_mime_maxdepth;
105 /* int var_mime_bound_len;
106 /* int var_header_limit;
107 /* int var_token_limit;
108 /* int var_disable_mime_input;
109 /* int var_disable_mime_oconv;
110 /* int var_strict_8bitmime;
111 /* int var_strict_7bit_hdrs;
112 /* int var_strict_8bit_body;
113 /* int var_strict_encoding;
114 /* int var_verify_neg_cache;
115 /* int var_oldlog_compat;
116 /* int var_delay_max_res;
117 /* char *var_int_filt_classes;
118 /* int var_cyrus_sasl_authzid;
119 /*
120 /* char *var_multi_conf_dirs;
121 /* char *var_multi_wrapper;
122 /* char *var_multi_group;
123 /* char *var_multi_name;
124 /* bool var_multi_enable;
125 /* bool var_long_queue_ids;
126 /* bool var_daemon_open_fatal;
127 /* char *var_dsn_filter;
128 /* int var_smtputf8_enable
129 /* int var_strict_smtputf8;
130 /* char *var_smtputf8_autoclass;
131 /* int var_idna2003_compat;
132 /* char *var_compatibility_level;
133 /* char *var_drop_hdrs;
134 /* char *var_info_log_addr_form;
135 /* bool var_enable_orcpt;
136 /*
137 /* void mail_params_init()
138 /*
139 /* const char null_format_string[1];
140 /*
141 /* long compatibility_level;
142 /*
143 /* int warn_compat_break_app_dot_mydomain;
144 /* int warn_compat_break_smtputf8_enable;
145 /* int warn_compat_break_chroot;
146 /* int warn_compat_break_relay_restrictions;
147 /*
148 /* int warn_compat_break_relay_domains;
149 /* int warn_compat_break_flush_domains;
150 /* int warn_compat_break_mynetworks_style;
151 /*
152 /* int warn_compat_break_smtpd_tls_fpt_dgst;
153 /* int warn_compat_break_smtp_tls_fpt_dgst;
154 /* int warn_compat_break_lmtp_tls_fpt_dgst;
155 /* int warn_compat_relay_before_rcpt_checks;
156 /* int warn_compat_respectful_logging;
157 /*
158 /* char *var_maillog_file;
159 /* char *var_maillog_file_pfxs;
160 /* char *var_maillog_file_comp;
161 /* char *var_maillog_file_stamp;
162 /* char *var_postlog_service;
163 /*
164 /* char *var_dnssec_probe;
165 /* bool var_relay_before_rcpt_checks;
166 /* bool var_respectful_logging;
167 /* char *var_known_tcp_ports;
168 /* DESCRIPTION
169 /* This module (actually the associated include file) defines
170 /* the names and defaults of all mail configuration parameters.
171 /*
172 /* mail_params_init() initializes the built-in parameters listed above.
173 /* These parameters are relied upon by library routines, so they are
174 /* initialized globally so as to avoid hard-to-find errors due to
175 /* missing initialization. This routine must be called early, at
176 /* least before entering a chroot jail.
177 /*
178 /* null_format_string is a workaround for gcc compilers that complain
179 /* about empty or null format strings.
180 /*
181 /* The warn_compat_XXX variables enable warnings for the use
182 /* of legacy default settings after an incompatible change.
183 /* DIAGNOSTICS
184 /* Fatal errors: out of memory; null system or domain name.
185 /* LICENSE
186 /* .ad
187 /* .fi
188 /* The Secure Mailer license must be distributed with this software.
189 /* AUTHOR(S)
190 /* Wietse Venema
191 /* IBM T.J. Watson Research
192 /* P.O. Box 704
193 /* Yorktown Heights, NY 10598, USA
194 /*
195 /* Wietse Venema
196 /* Google, Inc.
197 /* 111 8th Avenue
198 /* New York, NY 10011, USA
199 /*--*/
200
201 /* System library. */
202
203 #include <sys_defs.h>
204 #include <unistd.h>
205 #include <stdlib.h>
206 #include <string.h>
207 #include <pwd.h>
208 #include <grp.h>
209 #include <time.h>
210 #include <ctype.h>
211
212 /* Utility library. */
213
214 #include <msg.h>
215 #include <msg_syslog.h>
216 #include <get_hostname.h>
217 #include <valid_hostname.h>
218 #include <stringops.h>
219 #include <safe.h>
220 #include <safe_open.h>
221 #include <mymalloc.h>
222 #include <dict.h>
223 #include <dict_db.h>
224 #include <dict_lmdb.h>
225 #include <inet_proto.h>
226 #include <vstring_vstream.h>
227 #include <iostuff.h>
228 #include <midna_domain.h>
229
230 /* Global library. */
231
232 #include <mynetworks.h>
233 #include <mail_conf.h>
234 #include <mail_version.h>
235 #include <mail_proto.h>
236 #include <verp_sender.h>
237 #include <own_inet_addr.h>
238 #include <mail_params.h>
239 #include <compat_level.h>
240 #include <config_known_tcp_ports.h>
241
242 /*
243 * Special configuration variables.
244 */
245 char *var_myhostname;
246 char *var_mydomain;
247 char *var_myorigin;
248 char *var_mydest;
249 char *var_relayhost;
250 char *var_transit_origin;
251 char *var_transit_dest;
252 char *var_mail_name;
253 int var_helpful_warnings;
254 char *var_syslog_name;
255 char *var_mail_owner;
256 uid_t var_owner_uid;
257 gid_t var_owner_gid;
258 char *var_sgid_group;
259 gid_t var_sgid_gid;
260 char *var_default_privs;
261 uid_t var_default_uid;
262 gid_t var_default_gid;
263 char *var_config_dir;
264 char *var_daemon_dir;
265 char *var_data_dir;
266 char *var_command_dir;
267 char *var_meta_dir;
268 char *var_queue_dir;
269 char *var_shlib_dir;
270 int var_use_limit;
271 int var_event_drain;
272 int var_idle_limit;
273 int var_bundle_rcpt;
274 char *var_procname;
275 char *var_servname;
276 int var_pid;
277 int var_ipc_timeout;
278 char *var_pid_dir;
279 int var_dont_remove;
280 char *var_inet_interfaces;
281 char *var_proxy_interfaces;
282 char *var_inet_protocols;
283 char *var_mynetworks;
284 char *var_double_bounce_sender;
285 int var_line_limit;
286 char *var_alias_db_map;
287 long var_message_limit;
288 char *var_mail_release;
289 char *var_mail_version;
290 int var_ipc_idle_limit;
291 int var_ipc_ttl_limit;
292 char *var_db_type;
293 char *var_hash_queue_names;
294 int var_hash_queue_depth;
295 int var_trigger_timeout;
296 char *var_rcpt_delim;
297 int var_fork_tries;
298 int var_fork_delay;
299 int var_flock_tries;
300 int var_flock_delay;
301 int var_flock_stale;
302 int var_disable_dns;
303 int var_soft_bounce;
304 time_t var_starttime;
305 int var_ownreq_special;
306 int var_daemon_timeout;
307 char *var_syslog_facility;
308 char *var_relay_domains;
309 char *var_fflush_domains;
310 char *var_mynetworks_style;
311 char *var_verp_delims;
312 char *var_verp_filter;
313 int var_in_flow_delay;
314 char *var_par_dom_match;
315 char *var_config_dirs;
316
317 int var_inet_windowsize;
318 char *var_import_environ;
319 char *var_export_environ;
320 char *var_debug_peer_list;
321 int var_debug_peer_level;
322 int var_fault_inj_code;
323 char *var_bounce_service;
324 char *var_cleanup_service;
325 char *var_defer_service;
326 char *var_pickup_service;
327 char *var_queue_service;
328 char *var_rewrite_service;
329 char *var_showq_service;
330 char *var_error_service;
331 char *var_flush_service;
332 char *var_verify_service;
333 char *var_trace_service;
334 char *var_proxymap_service;
335 char *var_proxywrite_service;
336 int var_db_create_buf;
337 int var_db_read_buf;
338 long var_lmdb_map_size;
339 int var_proc_limit;
340 int var_mime_maxdepth;
341 int var_mime_bound_len;
342 int var_header_limit;
343 int var_token_limit;
344 int var_disable_mime_input;
345 int var_disable_mime_oconv;
346 int var_strict_8bitmime;
347 int var_strict_7bit_hdrs;
348 int var_strict_8bit_body;
349 int var_strict_encoding;
350 int var_verify_neg_cache;
351 int var_oldlog_compat;
352 int var_delay_max_res;
353 char *var_int_filt_classes;
354 int var_cyrus_sasl_authzid;
355
356 char *var_multi_conf_dirs;
357 char *var_multi_wrapper;
358 char *var_multi_group;
359 char *var_multi_name;
360 bool var_multi_enable;
361 bool var_long_queue_ids;
362 bool var_daemon_open_fatal;
363 bool var_dns_ncache_ttl_fix;
364 char *var_dsn_filter;
365 int var_smtputf8_enable;
366 int var_strict_smtputf8;
367 char *var_smtputf8_autoclass;
368 int var_idna2003_compat;
369 char *var_compatibility_level;
370 char *var_drop_hdrs;
371 char *var_info_log_addr_form;
372 bool var_enable_orcpt;
373
374 char *var_maillog_file;
375 char *var_maillog_file_pfxs;
376 char *var_maillog_file_comp;
377 char *var_maillog_file_stamp;
378 char *var_postlog_service;
379
380 char *var_dnssec_probe;
381 bool var_respectful_logging;
382 char *var_known_tcp_ports;
383
384 const char null_format_string[1] = "";
385
386 /*
387 * Compatibility level 3.6.
388 */
389 int warn_compat_break_smtpd_tls_fpt_dgst;
390 int warn_compat_break_smtp_tls_fpt_dgst;
391 int warn_compat_break_lmtp_tls_fpt_dgst;
392 int warn_compat_relay_before_rcpt_checks;
393 int warn_compat_respectful_logging;
394
395 /*
396 * Compatibility level 2.
397 */
398 int warn_compat_break_relay_domains;
399 int warn_compat_break_flush_domains;
400 int warn_compat_break_mynetworks_style;
401
402 /*
403 * Compatibility level 1.
404 */
405 int warn_compat_break_app_dot_mydomain;
406 int warn_compat_break_smtputf8_enable;
407 int warn_compat_break_chroot;
408 int warn_compat_break_relay_restrictions;
409
410 /*
411 * Parsed from var_compatibility_level;
412 */
413 long compat_level;
414
415 /* check_myhostname - lookup hostname and validate */
416
check_myhostname(void)417 static const char *check_myhostname(void)
418 {
419 static const char *name;
420 const char *dot;
421 const char *domain;
422
423 /*
424 * Use cached result.
425 */
426 if (name)
427 return (name);
428
429 /*
430 * If the local machine name is not in FQDN form, try to append the
431 * contents of $mydomain. Use a default domain as a final workaround.
432 *
433 * DO NOT CALL GETHOSTBYNAME OR GETNAMEINFO HERE - IT MAKES EVERY POSTFIX
434 * PROGRAM HANG WHEN DNS SERVICE IS UNAVAILABLE. IF YOU DON'T LIKE THE
435 * DEFAULT, THEN EDIT MAIN.CF.
436 */
437 name = get_hostname();
438 /* DO NOT CALL GETHOSTBYNAME OR GETNAMEINFO HERE - EDIT MAIN.CF */
439 if ((dot = strchr(name, '.')) == 0) {
440 /* DO NOT CALL GETHOSTBYNAME OR GETNAMEINFO HERE - EDIT MAIN.CF */
441 if ((domain = mail_conf_lookup_eval(VAR_MYDOMAIN)) == 0)
442 domain = DEF_MYDOMAIN;
443 /* DO NOT CALL GETHOSTBYNAME OR GETNAMEINFO HERE - EDIT MAIN.CF */
444 name = concatenate(name, ".", domain, (char *) 0);
445 }
446 /* DO NOT CALL GETHOSTBYNAME OR GETNAMEINFO HERE - EDIT MAIN.CF */
447 return (name);
448 }
449
450 /* check_mydomainname - lookup domain name and validate */
451
check_mydomainname(void)452 static const char *check_mydomainname(void)
453 {
454 char *dot;
455
456 /*
457 * Use a default domain when the hostname is not a FQDN ("foo").
458 *
459 * DO NOT CALL GETHOSTBYNAME OR GETNAMEINFO HERE - IT MAKES EVERY POSTFIX
460 * PROGRAM HANG WHEN DNS SERVICE IS UNAVAILABLE. IF YOU DON'T LIKE THE
461 * DEFAULT, THEN EDIT MAIN.CF.
462 */
463 /* DO NOT CALL GETHOSTBYNAME OR GETNAMEINFO HERE - EDIT MAIN.CF */
464 if ((dot = strchr(var_myhostname, '.')) == 0)
465 /* DO NOT CALL GETHOSTBYNAME OR GETNAMEINFO HERE - EDIT MAIN.CF */
466 return (DEF_MYDOMAIN);
467 /* DO NOT CALL GETHOSTBYNAME OR GETNAMEINFO HERE - EDIT MAIN.CF */
468 return (dot + 1);
469 }
470
471 /* check_default_privs - lookup default user attributes and validate */
472
check_default_privs(void)473 static void check_default_privs(void)
474 {
475 struct passwd *pwd;
476
477 if ((pwd = getpwnam(var_default_privs)) == 0)
478 msg_fatal("file %s/%s: parameter %s: unknown user name value: %s",
479 var_config_dir, MAIN_CONF_FILE,
480 VAR_DEFAULT_PRIVS, var_default_privs);
481 if ((var_default_uid = pwd->pw_uid) == 0)
482 msg_fatal("file %s/%s: parameter %s: user %s has privileged user ID",
483 var_config_dir, MAIN_CONF_FILE,
484 VAR_DEFAULT_PRIVS, var_default_privs);
485 if ((var_default_gid = pwd->pw_gid) == 0)
486 msg_fatal("file %s/%s: parameter %s: user %s has privileged group ID",
487 var_config_dir, MAIN_CONF_FILE,
488 VAR_DEFAULT_PRIVS, var_default_privs);
489 }
490
491 /* check_mail_owner - lookup owner user attributes and validate */
492
check_mail_owner(void)493 static void check_mail_owner(void)
494 {
495 struct passwd *pwd;
496
497 if ((pwd = getpwnam(var_mail_owner)) == 0)
498 msg_fatal("file %s/%s: parameter %s: unknown user name value: %s",
499 var_config_dir, MAIN_CONF_FILE,
500 VAR_MAIL_OWNER, var_mail_owner);
501 if ((var_owner_uid = pwd->pw_uid) == 0)
502 msg_fatal("file %s/%s: parameter %s: user %s has privileged user ID",
503 var_config_dir, MAIN_CONF_FILE,
504 VAR_MAIL_OWNER, var_mail_owner);
505 if ((var_owner_gid = pwd->pw_gid) == 0)
506 msg_fatal("file %s/%s: parameter %s: user %s has privileged group ID",
507 var_config_dir, MAIN_CONF_FILE,
508 VAR_MAIL_OWNER, var_mail_owner);
509
510 /*
511 * This detects only some forms of sharing. Enumerating the entire
512 * password file name space could be expensive. The purpose of this code
513 * is to discourage user ID sharing by developers and package
514 * maintainers.
515 */
516 if ((pwd = getpwuid(var_owner_uid)) != 0
517 && strcmp(pwd->pw_name, var_mail_owner) != 0)
518 msg_fatal("file %s/%s: parameter %s: user %s has same user ID as %s",
519 var_config_dir, MAIN_CONF_FILE,
520 VAR_MAIL_OWNER, var_mail_owner, pwd->pw_name);
521 }
522
523 /* check_sgid_group - lookup setgid group attributes and validate */
524
check_sgid_group(void)525 static void check_sgid_group(void)
526 {
527 struct group *grp;
528
529 if ((grp = getgrnam(var_sgid_group)) == 0)
530 msg_fatal("file %s/%s: parameter %s: unknown group name: %s",
531 var_config_dir, MAIN_CONF_FILE,
532 VAR_SGID_GROUP, var_sgid_group);
533 if ((var_sgid_gid = grp->gr_gid) == 0)
534 msg_fatal("file %s/%s: parameter %s: group %s has privileged group ID",
535 var_config_dir, MAIN_CONF_FILE,
536 VAR_SGID_GROUP, var_sgid_group);
537
538 /*
539 * This detects only some forms of sharing. Enumerating the entire group
540 * file name space could be expensive. The purpose of this code is to
541 * discourage group ID sharing by developers and package maintainers.
542 */
543 if ((grp = getgrgid(var_sgid_gid)) != 0
544 && strcmp(grp->gr_name, var_sgid_group) != 0)
545 msg_fatal("file %s/%s: parameter %s: group %s has same group ID as %s",
546 var_config_dir, MAIN_CONF_FILE,
547 VAR_SGID_GROUP, var_sgid_group, grp->gr_name);
548 }
549
550 /* check_overlap - disallow UID or GID sharing */
551
check_overlap(void)552 static void check_overlap(void)
553 {
554 if (strcmp(var_default_privs, var_mail_owner) == 0)
555 msg_fatal("file %s/%s: parameters %s and %s specify the same user %s",
556 var_config_dir, MAIN_CONF_FILE,
557 VAR_DEFAULT_PRIVS, VAR_MAIL_OWNER,
558 var_default_privs);
559 if (var_default_uid == var_owner_uid)
560 msg_fatal("file %s/%s: parameters %s and %s: users %s and %s have the same user ID: %ld",
561 var_config_dir, MAIN_CONF_FILE,
562 VAR_DEFAULT_PRIVS, VAR_MAIL_OWNER,
563 var_default_privs, var_mail_owner,
564 (long) var_owner_uid);
565 if (var_default_gid == var_owner_gid)
566 msg_fatal("file %s/%s: parameters %s and %s: users %s and %s have the same group ID: %ld",
567 var_config_dir, MAIN_CONF_FILE,
568 VAR_DEFAULT_PRIVS, VAR_MAIL_OWNER,
569 var_default_privs, var_mail_owner,
570 (long) var_owner_gid);
571 if (var_default_gid == var_sgid_gid)
572 msg_fatal("file %s/%s: parameters %s and %s: user %s and group %s have the same group ID: %ld",
573 var_config_dir, MAIN_CONF_FILE,
574 VAR_DEFAULT_PRIVS, VAR_SGID_GROUP,
575 var_default_privs, var_sgid_group,
576 (long) var_sgid_gid);
577 if (var_owner_gid == var_sgid_gid)
578 msg_fatal("file %s/%s: parameters %s and %s: user %s and group %s have the same group ID: %ld",
579 var_config_dir, MAIN_CONF_FILE,
580 VAR_MAIL_OWNER, VAR_SGID_GROUP,
581 var_mail_owner, var_sgid_group,
582 (long) var_sgid_gid);
583 }
584
585 #ifdef MYORIGIN_FROM_FILE
586
587 /* read_param_from_file - read parameter value from file */
588
read_param_from_file(const char * path)589 static char *read_param_from_file(const char *path)
590 {
591 VSTRING *why = vstring_alloc(100);
592 VSTRING *buf = vstring_alloc(100);
593 VSTREAM *fp;
594 char *bp;
595 char *result;
596
597 /*
598 * Ugly macros to make complex expressions less unreadable.
599 */
600 #define SKIP(start, var, cond) do { \
601 for (var = start; *var && (cond); var++) \
602 /* void */; \
603 } while (0)
604
605 #define TRIM(s) do { \
606 char *p; \
607 for (p = (s) + strlen(s); p > (s) && ISSPACE(p[-1]); p--) \
608 /* void */; \
609 *p = 0; \
610 } while (0)
611
612 fp = safe_open(path, O_RDONLY, 0, (struct stat *) 0, -1, -1, why);
613 if (fp == 0)
614 msg_fatal("%s: %s", path, vstring_str(why));
615 vstring_get_nonl(buf, fp);
616 if (vstream_ferror(fp)) /* FIX 20070501 */
617 msg_fatal("%s: read error: %m", path);
618 vstream_fclose(fp);
619 SKIP(vstring_str(buf), bp, ISSPACE(*bp));
620 TRIM(bp);
621 result = mystrdup(bp);
622
623 vstring_free(why);
624 vstring_free(buf);
625 return (result);
626 }
627
628 #endif
629
630 /* check_legacy_defaults - flag parameters that require safety-net logging */
631
check_legacy_defaults(void)632 static void check_legacy_defaults(void)
633 {
634
635 /*
636 * Basic idea: when an existing parameter default is changed, or a new
637 * parameter is introduced with incompatible default behavior, force
638 * Postfix to run with backwards-compatible default settings and log a
639 * warning when the backwards-compatible behavior is used.
640 *
641 * Based on a review of Postfix logging the system administrator can decide
642 * whether or not to make backwards-compatible default settings permanent
643 * in main.cf or master.cf.
644 *
645 * To turn off further warnings and deploy the new default settings, the
646 * system administrator should update the compatibility_level setting as
647 * recommended in the RELEASE_NOTES file.
648 *
649 * Each incompatible change has its own flag variable, instead of bit in a
650 * shared variable. We don't want to rip up code when we need more flag
651 * bits.
652 */
653
654 /*
655 * Look for specific parameters whose default changed when the
656 * compatibility level changed to 3.6.
657 */
658 if (compat_level < compat_level_from_string(COMPAT_LEVEL_3_6, msg_panic)) {
659 if (mail_conf_lookup(VAR_SMTPD_TLS_FPT_DGST) == 0)
660 warn_compat_break_smtpd_tls_fpt_dgst = 1;
661 if (mail_conf_lookup(VAR_SMTP_TLS_FPT_DGST) == 0)
662 warn_compat_break_smtp_tls_fpt_dgst = 1;
663 if (mail_conf_lookup(VAR_LMTP_TLS_FPT_DGST) == 0)
664 warn_compat_break_lmtp_tls_fpt_dgst = 1;
665 if (mail_conf_lookup(VAR_RELAY_BEFORE_RCPT_CHECKS) == 0)
666 warn_compat_relay_before_rcpt_checks = 1;
667 if (mail_conf_lookup(VAR_RESPECTFUL_LOGGING) == 0)
668 warn_compat_respectful_logging = 1;
669 }
670
671 /*
672 * Look for specific parameters whose default changed when the
673 * compatibility level changed to 2.
674 */
675 if (compat_level < compat_level_from_string(COMPAT_LEVEL_2, msg_panic)) {
676 if (mail_conf_lookup(VAR_RELAY_DOMAINS) == 0) {
677 warn_compat_break_relay_domains = 1;
678 if (mail_conf_lookup(VAR_FFLUSH_DOMAINS) == 0)
679 warn_compat_break_flush_domains = 1;
680 }
681 if (mail_conf_lookup(VAR_MYNETWORKS) == 0
682 && mail_conf_lookup(VAR_MYNETWORKS_STYLE) == 0)
683 warn_compat_break_mynetworks_style = 1;
684 }
685
686 /*
687 * Look for specific parameters whose default changed when the
688 * compatibility level changed from 0 to 1.
689 */
690 if (compat_level < compat_level_from_string(COMPAT_LEVEL_1, msg_panic)) {
691 if (mail_conf_lookup(VAR_APP_DOT_MYDOMAIN) == 0)
692 warn_compat_break_app_dot_mydomain = 1;
693
694 /*
695 * Not: #ifndef NO_EAI. They must configure SMTPUTF8_ENABLE=no if a
696 * warning message is logged, so that they don't suddenly start to
697 * lose mail after Postfix is built with EAI support.
698 */
699 if (mail_conf_lookup(VAR_SMTPUTF8_ENABLE) == 0)
700 warn_compat_break_smtputf8_enable = 1;
701 warn_compat_break_chroot = 1;
702
703 /*
704 * Grandfathered in to help sites migrating from Postfix <2.10.
705 */
706 if (mail_conf_lookup(VAR_RELAY_CHECKS) == 0)
707 warn_compat_break_relay_restrictions = 1;
708 }
709 }
710
711 /* mail_params_init - configure built-in parameters */
712
mail_params_init()713 void mail_params_init()
714 {
715 static const CONFIG_STR_TABLE compat_level_defaults[] = {
716 VAR_COMPAT_LEVEL, DEF_COMPAT_LEVEL, &var_compatibility_level, 0, 0,
717 0,
718 };
719 static const CONFIG_STR_TABLE first_str_defaults[] = {
720 /* $mail_version may appear in other parameters. */
721 VAR_MAIL_VERSION, DEF_MAIL_VERSION, &var_mail_version, 1, 0,
722 VAR_SYSLOG_FACILITY, DEF_SYSLOG_FACILITY, &var_syslog_facility, 1, 0,
723 VAR_INET_PROTOCOLS, DEF_INET_PROTOCOLS, &var_inet_protocols, 0, 0,
724 VAR_MULTI_CONF_DIRS, DEF_MULTI_CONF_DIRS, &var_multi_conf_dirs, 0, 0,
725 /* multi_instance_wrapper may have dependencies but not dependents. */
726 VAR_MULTI_GROUP, DEF_MULTI_GROUP, &var_multi_group, 0, 0,
727 VAR_MULTI_NAME, DEF_MULTI_NAME, &var_multi_name, 0, 0,
728 VAR_MAILLOG_FILE, DEF_MAILLOG_FILE, &var_maillog_file, 0, 0,
729 VAR_MAILLOG_FILE_PFXS, DEF_MAILLOG_FILE_PFXS, &var_maillog_file_pfxs, 1, 0,
730 VAR_MAILLOG_FILE_COMP, DEF_MAILLOG_FILE_COMP, &var_maillog_file_comp, 1, 0,
731 VAR_MAILLOG_FILE_STAMP, DEF_MAILLOG_FILE_STAMP, &var_maillog_file_stamp, 1, 0,
732 VAR_POSTLOG_SERVICE, DEF_POSTLOG_SERVICE, &var_postlog_service, 1, 0,
733 VAR_DNSSEC_PROBE, DEF_DNSSEC_PROBE, &var_dnssec_probe, 0, 0,
734 VAR_KNOWN_TCP_PORTS, DEF_KNOWN_TCP_PORTS, &var_known_tcp_ports, 0, 0,
735 0,
736 };
737 static const CONFIG_BOOL_TABLE first_bool_defaults[] = {
738 /* read and process the following before opening tables. */
739 VAR_DAEMON_OPEN_FATAL, DEF_DAEMON_OPEN_FATAL, &var_daemon_open_fatal,
740 VAR_DNS_NCACHE_TTL_FIX, DEF_DNS_NCACHE_TTL_FIX, &var_dns_ncache_ttl_fix,
741 0,
742 };
743 static const CONFIG_NBOOL_TABLE first_nbool_defaults[] = {
744 /* read and process the following before opening tables. */
745 VAR_SMTPUTF8_ENABLE, DEF_SMTPUTF8_ENABLE, &var_smtputf8_enable,
746 VAR_IDNA2003_COMPAT, DEF_IDNA2003_COMPAT, &var_idna2003_compat,
747 VAR_RESPECTFUL_LOGGING, DEF_RESPECTFUL_LOGGING, &var_respectful_logging,
748 0,
749 };
750 static const CONFIG_STR_FN_TABLE function_str_defaults[] = {
751 VAR_MYHOSTNAME, check_myhostname, &var_myhostname, 1, 0,
752 VAR_MYDOMAIN, check_mydomainname, &var_mydomain, 1, 0,
753 0,
754 };
755 static const CONFIG_STR_TABLE other_str_defaults[] = {
756 VAR_MAIL_NAME, DEF_MAIL_NAME, &var_mail_name, 1, 0,
757 VAR_SYSLOG_NAME, DEF_SYSLOG_NAME, &var_syslog_name, 1, 0,
758 VAR_MAIL_OWNER, DEF_MAIL_OWNER, &var_mail_owner, 1, 0,
759 VAR_SGID_GROUP, DEF_SGID_GROUP, &var_sgid_group, 1, 0,
760 VAR_MYDEST, DEF_MYDEST, &var_mydest, 0, 0,
761 VAR_MYORIGIN, DEF_MYORIGIN, &var_myorigin, 1, 0,
762 VAR_RELAYHOST, DEF_RELAYHOST, &var_relayhost, 0, 0,
763 VAR_DAEMON_DIR, DEF_DAEMON_DIR, &var_daemon_dir, 1, 0,
764 VAR_DATA_DIR, DEF_DATA_DIR, &var_data_dir, 1, 0,
765 VAR_COMMAND_DIR, DEF_COMMAND_DIR, &var_command_dir, 1, 0,
766 VAR_META_DIR, DEF_META_DIR, &var_meta_dir, 1, 0,
767 VAR_QUEUE_DIR, DEF_QUEUE_DIR, &var_queue_dir, 1, 0,
768 VAR_SHLIB_DIR, DEF_SHLIB_DIR, &var_shlib_dir, 1, 0,
769 VAR_PID_DIR, DEF_PID_DIR, &var_pid_dir, 1, 0,
770 VAR_INET_INTERFACES, DEF_INET_INTERFACES, &var_inet_interfaces, 0, 0,
771 VAR_PROXY_INTERFACES, DEF_PROXY_INTERFACES, &var_proxy_interfaces, 0, 0,
772 VAR_DOUBLE_BOUNCE, DEF_DOUBLE_BOUNCE, &var_double_bounce_sender, 1, 0,
773 VAR_DEFAULT_PRIVS, DEF_DEFAULT_PRIVS, &var_default_privs, 1, 0,
774 VAR_ALIAS_DB_MAP, DEF_ALIAS_DB_MAP, &var_alias_db_map, 0, 0,
775 VAR_MAIL_RELEASE, DEF_MAIL_RELEASE, &var_mail_release, 1, 0,
776 VAR_DB_TYPE, DEF_DB_TYPE, &var_db_type, 1, 0,
777 VAR_HASH_QUEUE_NAMES, DEF_HASH_QUEUE_NAMES, &var_hash_queue_names, 1, 0,
778 VAR_RCPT_DELIM, DEF_RCPT_DELIM, &var_rcpt_delim, 0, 0,
779 VAR_RELAY_DOMAINS, DEF_RELAY_DOMAINS, &var_relay_domains, 0, 0,
780 VAR_FFLUSH_DOMAINS, DEF_FFLUSH_DOMAINS, &var_fflush_domains, 0, 0,
781 VAR_EXPORT_ENVIRON, DEF_EXPORT_ENVIRON, &var_export_environ, 0, 0,
782 VAR_IMPORT_ENVIRON, DEF_IMPORT_ENVIRON, &var_import_environ, 0, 0,
783 VAR_MYNETWORKS_STYLE, DEF_MYNETWORKS_STYLE, &var_mynetworks_style, 1, 0,
784 VAR_DEBUG_PEER_LIST, DEF_DEBUG_PEER_LIST, &var_debug_peer_list, 0, 0,
785 VAR_VERP_DELIMS, DEF_VERP_DELIMS, &var_verp_delims, 2, 2,
786 VAR_VERP_FILTER, DEF_VERP_FILTER, &var_verp_filter, 1, 0,
787 VAR_PAR_DOM_MATCH, DEF_PAR_DOM_MATCH, &var_par_dom_match, 0, 0,
788 VAR_CONFIG_DIRS, DEF_CONFIG_DIRS, &var_config_dirs, 0, 0,
789 VAR_BOUNCE_SERVICE, DEF_BOUNCE_SERVICE, &var_bounce_service, 1, 0,
790 VAR_CLEANUP_SERVICE, DEF_CLEANUP_SERVICE, &var_cleanup_service, 1, 0,
791 VAR_DEFER_SERVICE, DEF_DEFER_SERVICE, &var_defer_service, 1, 0,
792 VAR_PICKUP_SERVICE, DEF_PICKUP_SERVICE, &var_pickup_service, 1, 0,
793 VAR_QUEUE_SERVICE, DEF_QUEUE_SERVICE, &var_queue_service, 1, 0,
794 VAR_REWRITE_SERVICE, DEF_REWRITE_SERVICE, &var_rewrite_service, 1, 0,
795 VAR_SHOWQ_SERVICE, DEF_SHOWQ_SERVICE, &var_showq_service, 1, 0,
796 VAR_ERROR_SERVICE, DEF_ERROR_SERVICE, &var_error_service, 1, 0,
797 VAR_FLUSH_SERVICE, DEF_FLUSH_SERVICE, &var_flush_service, 1, 0,
798 VAR_VERIFY_SERVICE, DEF_VERIFY_SERVICE, &var_verify_service, 1, 0,
799 VAR_TRACE_SERVICE, DEF_TRACE_SERVICE, &var_trace_service, 1, 0,
800 VAR_PROXYMAP_SERVICE, DEF_PROXYMAP_SERVICE, &var_proxymap_service, 1, 0,
801 VAR_PROXYWRITE_SERVICE, DEF_PROXYWRITE_SERVICE, &var_proxywrite_service, 1, 0,
802 VAR_INT_FILT_CLASSES, DEF_INT_FILT_CLASSES, &var_int_filt_classes, 0, 0,
803 /* multi_instance_wrapper may have dependencies but not dependents. */
804 VAR_MULTI_WRAPPER, DEF_MULTI_WRAPPER, &var_multi_wrapper, 0, 0,
805 VAR_DSN_FILTER, DEF_DSN_FILTER, &var_dsn_filter, 0, 0,
806 VAR_SMTPUTF8_AUTOCLASS, DEF_SMTPUTF8_AUTOCLASS, &var_smtputf8_autoclass, 1, 0,
807 VAR_DROP_HDRS, DEF_DROP_HDRS, &var_drop_hdrs, 0, 0,
808 VAR_INFO_LOG_ADDR_FORM, DEF_INFO_LOG_ADDR_FORM, &var_info_log_addr_form, 1, 0,
809 0,
810 };
811 static const CONFIG_STR_FN_TABLE function_str_defaults_2[] = {
812 VAR_MYNETWORKS, mynetworks, &var_mynetworks, 0, 0,
813 0,
814 };
815 static const CONFIG_INT_TABLE other_int_defaults[] = {
816 VAR_PROC_LIMIT, DEF_PROC_LIMIT, &var_proc_limit, 1, 0,
817 VAR_MAX_USE, DEF_MAX_USE, &var_use_limit, 1, 0,
818 VAR_DONT_REMOVE, DEF_DONT_REMOVE, &var_dont_remove, 0, 0,
819 VAR_LINE_LIMIT, DEF_LINE_LIMIT, &var_line_limit, 512, 0,
820 VAR_HASH_QUEUE_DEPTH, DEF_HASH_QUEUE_DEPTH, &var_hash_queue_depth, 1, 0,
821 VAR_FORK_TRIES, DEF_FORK_TRIES, &var_fork_tries, 1, 0,
822 VAR_FLOCK_TRIES, DEF_FLOCK_TRIES, &var_flock_tries, 1, 0,
823 VAR_DEBUG_PEER_LEVEL, DEF_DEBUG_PEER_LEVEL, &var_debug_peer_level, 1, 0,
824 VAR_FAULT_INJ_CODE, DEF_FAULT_INJ_CODE, &var_fault_inj_code, 0, 0,
825 VAR_DB_CREATE_BUF, DEF_DB_CREATE_BUF, &var_db_create_buf, 1, 0,
826 VAR_DB_READ_BUF, DEF_DB_READ_BUF, &var_db_read_buf, 1, 0,
827 VAR_HEADER_LIMIT, DEF_HEADER_LIMIT, &var_header_limit, 1, 0,
828 VAR_TOKEN_LIMIT, DEF_TOKEN_LIMIT, &var_token_limit, 1, 0,
829 VAR_MIME_MAXDEPTH, DEF_MIME_MAXDEPTH, &var_mime_maxdepth, 1, 0,
830 VAR_MIME_BOUND_LEN, DEF_MIME_BOUND_LEN, &var_mime_bound_len, 1, 0,
831 VAR_DELAY_MAX_RES, DEF_DELAY_MAX_RES, &var_delay_max_res, MIN_DELAY_MAX_RES, MAX_DELAY_MAX_RES,
832 VAR_INET_WINDOW, DEF_INET_WINDOW, &var_inet_windowsize, 0, 0,
833 0,
834 };
835 static const CONFIG_LONG_TABLE long_defaults[] = {
836 VAR_MESSAGE_LIMIT, DEF_MESSAGE_LIMIT, &var_message_limit, 0, 0,
837 VAR_LMDB_MAP_SIZE, DEF_LMDB_MAP_SIZE, &var_lmdb_map_size, 1, 0,
838 0,
839 };
840 static const CONFIG_TIME_TABLE time_defaults[] = {
841 VAR_EVENT_DRAIN, DEF_EVENT_DRAIN, &var_event_drain, 1, 0,
842 VAR_MAX_IDLE, DEF_MAX_IDLE, &var_idle_limit, 1, 0,
843 VAR_IPC_TIMEOUT, DEF_IPC_TIMEOUT, &var_ipc_timeout, 1, 0,
844 VAR_IPC_IDLE, DEF_IPC_IDLE, &var_ipc_idle_limit, 1, 0,
845 VAR_IPC_TTL, DEF_IPC_TTL, &var_ipc_ttl_limit, 1, 0,
846 VAR_TRIGGER_TIMEOUT, DEF_TRIGGER_TIMEOUT, &var_trigger_timeout, 1, 0,
847 VAR_FORK_DELAY, DEF_FORK_DELAY, &var_fork_delay, 1, 0,
848 VAR_FLOCK_DELAY, DEF_FLOCK_DELAY, &var_flock_delay, 1, 0,
849 VAR_FLOCK_STALE, DEF_FLOCK_STALE, &var_flock_stale, 1, 0,
850 VAR_DAEMON_TIMEOUT, DEF_DAEMON_TIMEOUT, &var_daemon_timeout, 1, 0,
851 VAR_IN_FLOW_DELAY, DEF_IN_FLOW_DELAY, &var_in_flow_delay, 0, 10,
852 0,
853 };
854 static const CONFIG_BOOL_TABLE bool_defaults[] = {
855 VAR_DISABLE_DNS, DEF_DISABLE_DNS, &var_disable_dns,
856 VAR_SOFT_BOUNCE, DEF_SOFT_BOUNCE, &var_soft_bounce,
857 VAR_OWNREQ_SPECIAL, DEF_OWNREQ_SPECIAL, &var_ownreq_special,
858 VAR_STRICT_8BITMIME, DEF_STRICT_8BITMIME, &var_strict_8bitmime,
859 VAR_STRICT_7BIT_HDRS, DEF_STRICT_7BIT_HDRS, &var_strict_7bit_hdrs,
860 VAR_STRICT_8BIT_BODY, DEF_STRICT_8BIT_BODY, &var_strict_8bit_body,
861 VAR_STRICT_ENCODING, DEF_STRICT_ENCODING, &var_strict_encoding,
862 VAR_DISABLE_MIME_INPUT, DEF_DISABLE_MIME_INPUT, &var_disable_mime_input,
863 VAR_DISABLE_MIME_OCONV, DEF_DISABLE_MIME_OCONV, &var_disable_mime_oconv,
864 VAR_VERIFY_NEG_CACHE, DEF_VERIFY_NEG_CACHE, &var_verify_neg_cache,
865 VAR_OLDLOG_COMPAT, DEF_OLDLOG_COMPAT, &var_oldlog_compat,
866 VAR_HELPFUL_WARNINGS, DEF_HELPFUL_WARNINGS, &var_helpful_warnings,
867 VAR_CYRUS_SASL_AUTHZID, DEF_CYRUS_SASL_AUTHZID, &var_cyrus_sasl_authzid,
868 VAR_MULTI_ENABLE, DEF_MULTI_ENABLE, &var_multi_enable,
869 VAR_LONG_QUEUE_IDS, DEF_LONG_QUEUE_IDS, &var_long_queue_ids,
870 VAR_STRICT_SMTPUTF8, DEF_STRICT_SMTPUTF8, &var_strict_smtputf8,
871 VAR_ENABLE_ORCPT, DEF_ENABLE_ORCPT, &var_enable_orcpt,
872 0,
873 };
874 const char *cp;
875
876 /*
877 * Extract compatibility level first, so that we can determine what
878 * parameters of interest are left at their legacy defaults.
879 */
880 if (var_compatibility_level == 0)
881 compat_level_relop_register();
882 get_mail_conf_str_table(compat_level_defaults);
883 compat_level = compat_level_from_string(var_compatibility_level, msg_fatal);
884 check_legacy_defaults();
885
886 /*
887 * Extract syslog_facility early, so that from here on all errors are
888 * logged with the proper facility.
889 */
890 get_mail_conf_str_table(first_str_defaults);
891
892 if (!msg_syslog_set_facility(var_syslog_facility))
893 msg_fatal("file %s/%s: parameter %s: unrecognized value: %s",
894 var_config_dir, MAIN_CONF_FILE,
895 VAR_SYSLOG_FACILITY, var_syslog_facility);
896
897 /*
898 * Should daemons terminate after table open error, or should they
899 * continue execution with reduced functionality?
900 */
901 get_mail_conf_bool_table(first_bool_defaults);
902 if (var_daemon_open_fatal)
903 dict_allow_surrogate = 0;
904
905 /*
906 * Should we open tables with UTF8 support, or in the legacy 8-bit clean
907 * mode with ASCII-only casefolding?
908 */
909 get_mail_conf_nbool_table(first_nbool_defaults);
910
911 /*
912 * Report run-time versus compile-time discrepancies.
913 */
914 #ifdef NO_EAI
915 if (var_smtputf8_enable)
916 msg_warn("%s is true, but EAI support is not compiled in",
917 VAR_SMTPUTF8_ENABLE);
918 var_smtputf8_enable = 0;
919 #else
920 midna_domain_transitional = var_idna2003_compat;
921 if (var_smtputf8_enable)
922 midna_domain_pre_chroot();
923 #endif
924 util_utf8_enable = var_smtputf8_enable;
925
926 /*
927 * Configure the known TCP port mappings.
928 */
929 config_known_tcp_ports(VAR_KNOWN_TCP_PORTS, var_known_tcp_ports);
930
931 /*
932 * What protocols should we attempt to support? The result is stored in
933 * the global inet_proto_table variable.
934 */
935 (void) inet_proto_init(VAR_INET_PROTOCOLS, var_inet_protocols);
936
937 /*
938 * Variables whose defaults are determined at runtime. Some sites use
939 * short hostnames in the host table; some sites name their system after
940 * the domain.
941 */
942 get_mail_conf_str_fn_table(function_str_defaults);
943 if (!valid_hostname(var_myhostname, DO_GRIPE))
944 msg_fatal("file %s/%s: parameter %s: bad parameter value: %s",
945 var_config_dir, MAIN_CONF_FILE,
946 VAR_MYHOSTNAME, var_myhostname);
947 if (!valid_hostname(var_mydomain, DO_GRIPE))
948 msg_fatal("file %s/%s: parameter %s: bad parameter value: %s",
949 var_config_dir, MAIN_CONF_FILE,
950 VAR_MYDOMAIN, var_mydomain);
951
952 /*
953 * Variables that are needed by almost every program.
954 *
955 * XXX Reading the myorigin value from file is originally a Debian Linux
956 * feature. This code is not enabled by default because of problems: 1)
957 * it re-implements its own parameter syntax checks, and 2) it does not
958 * implement $name expansions.
959 */
960 get_mail_conf_str_table(other_str_defaults);
961 #ifdef MYORIGIN_FROM_FILE
962 if (*var_myorigin == '/') {
963 char *origin = read_param_from_file(var_myorigin);
964
965 if (*origin == 0)
966 msg_fatal("%s file %s is empty", VAR_MYORIGIN, var_myorigin);
967 myfree(var_myorigin); /* FIX 20070501 */
968 var_myorigin = origin;
969 }
970 #endif
971 get_mail_conf_int_table(other_int_defaults);
972 get_mail_conf_long_table(long_defaults);
973 get_mail_conf_bool_table(bool_defaults);
974 get_mail_conf_time_table(time_defaults);
975 check_default_privs();
976 check_mail_owner();
977 check_sgid_group();
978 check_overlap();
979 dict_db_cache_size = var_db_read_buf;
980 dict_lmdb_map_size = var_lmdb_map_size;
981 inet_windowsize = var_inet_windowsize;
982
983 /*
984 * Variables whose defaults are determined at runtime, after other
985 * variables have been set. This dependency is admittedly a bit tricky.
986 * XXX Perhaps we should just register variables, and let the evaluator
987 * figure out in what order to evaluate things.
988 */
989 get_mail_conf_str_fn_table(function_str_defaults_2);
990
991 /*
992 * FIX 200412 The IPv6 patch did not call own_inet_addr_list() before
993 * entering the chroot jail on Linux IPv6 systems. Linux has the IPv6
994 * interface list in /proc, which is not available after chrooting.
995 */
996 (void) own_inet_addr_list();
997
998 /*
999 * The PID variable cannot be set from the configuration file!!
1000 */
1001 set_mail_conf_int(VAR_PID, var_pid = getpid());
1002
1003 /*
1004 * Neither can the start time variable. It isn't even visible.
1005 */
1006 time(&var_starttime);
1007
1008 /*
1009 * Export the syslog name so children can inherit and use it before they
1010 * have initialized.
1011 */
1012 if ((cp = safe_getenv(CONF_ENV_LOGTAG)) == 0
1013 || strcmp(cp, var_syslog_name) != 0)
1014 if (setenv(CONF_ENV_LOGTAG, var_syslog_name, 1) < 0)
1015 msg_fatal("setenv %s %s: %m", CONF_ENV_LOGTAG, var_syslog_name);
1016
1017 /*
1018 * I have seen this happen just too often.
1019 */
1020 if (strcasecmp_utf8(var_myhostname, var_relayhost) == 0)
1021 msg_fatal("%s and %s parameter settings must not be identical: %s",
1022 VAR_MYHOSTNAME, VAR_RELAYHOST, var_myhostname);
1023
1024 /*
1025 * XXX These should be caught by a proper parameter parsing algorithm.
1026 */
1027 if (var_myorigin[strcspn(var_myorigin, CHARS_COMMA_SP)])
1028 msg_fatal("%s parameter setting must not contain multiple values: %s",
1029 VAR_MYORIGIN, var_myorigin);
1030
1031 /*
1032 * One more sanity check.
1033 */
1034 if ((cp = verp_delims_verify(var_verp_delims)) != 0)
1035 msg_fatal("file %s/%s: parameters %s and %s: %s",
1036 var_config_dir, MAIN_CONF_FILE,
1037 VAR_VERP_DELIMS, VAR_VERP_FILTER, cp);
1038 }
1039