masqmail

annotate src/masqmail.c @ 433:81c438e1891b

find changesets by author, revision, files, or words in the commit message
Marks version number as development.
author markus schnalke <meillo@marmaro.de>
date Sat, 07 Feb 2015 11:40:21 +0100
parents f37384470855
children
rev   line source
meillo@367 1 /*
meillo@367 2 ** MasqMail
meillo@367 3 ** Copyright (C) 1999-2001 Oliver Kurth
meillo@367 4 ** Copyright (C) 2010 markus schnalke <meillo@marmaro.de>
meillo@367 5 **
meillo@367 6 ** This program is free software; you can redistribute it and/or modify
meillo@367 7 ** it under the terms of the GNU General Public License as published by
meillo@367 8 ** the Free Software Foundation; either version 2 of the License, or
meillo@367 9 ** (at your option) any later version.
meillo@367 10 **
meillo@367 11 ** This program is distributed in the hope that it will be useful,
meillo@367 12 ** but WITHOUT ANY WARRANTY; without even the implied warranty of
meillo@367 13 ** MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
meillo@367 14 ** GNU General Public License for more details.
meillo@367 15 **
meillo@367 16 ** You should have received a copy of the GNU General Public License
meillo@367 17 ** along with this program; if not, write to the Free Software
meillo@367 18 ** Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
meillo@0 19 */
meillo@0 20
meillo@0 21 #include <stdio.h>
meillo@0 22 #include <errno.h>
meillo@0 23 #include <stdlib.h>
meillo@0 24 #include <string.h>
meillo@0 25 #include <unistd.h>
meillo@0 26 #include <sys/types.h>
meillo@0 27 #include <sys/socket.h>
meillo@0 28 #include <sys/time.h>
meillo@0 29 #include <netinet/in.h>
meillo@0 30 #include <netdb.h>
meillo@0 31 #include <syslog.h>
meillo@0 32 #include <signal.h>
meillo@0 33
meillo@0 34 #include <glib.h>
meillo@0 35
meillo@0 36 #include "masqmail.h"
meillo@0 37
meillo@367 38 /*
meillo@367 39 ** mutually exclusive modes. Note that there is no 'queue daemon' mode.
meillo@367 40 ** It, as well as the distinction beween the two (non exclusive) daemon
meillo@367 41 ** (queue and listen) modes, is handled by flags.
meillo@367 42 */
meillo@281 43 enum mta_mode {
meillo@281 44 MODE_NONE = 0, /* to check if a mode was set */
meillo@281 45 MODE_ACCEPT, /* accept message on stdin (fallback mode) */
meillo@10 46 MODE_DAEMON, /* run as daemon */
meillo@10 47 MODE_RUNQUEUE, /* single queue run, online or offline */
meillo@10 48 MODE_SMTP, /* accept SMTP on stdin */
meillo@10 49 MODE_LIST, /* list queue */
meillo@10 50 MODE_MCMD, /* do queue manipulation */
meillo@10 51 MODE_VERSION, /* show version */
meillo@10 52 MODE_BI, /* fake ;-) */
meillo@281 53 };
meillo@281 54 enum mta_mode mta_mode = MODE_NONE;
meillo@0 55
meillo@0 56 char *pidfile = NULL;
meillo@0 57 volatile int sigterm_in_progress = 0;
meillo@0 58
meillo@10 59 static void
meillo@10 60 sigterm_handler(int sig)
meillo@0 61 {
meillo@10 62 if (sigterm_in_progress)
meillo@10 63 raise(sig);
meillo@10 64 sigterm_in_progress = 1;
meillo@0 65
meillo@10 66 if (pidfile) {
meillo@331 67 uid_t uid = geteuid();
meillo@331 68 if (seteuid(0) != 0) {
meillo@409 69 logwrite(LOG_ALERT, "sigterm_handler: could not set "
meillo@409 70 "euid to %d: %s\n",
meillo@409 71 0, strerror(errno));
meillo@331 72 }
meillo@10 73 if (unlink(pidfile) != 0)
meillo@409 74 logwrite(LOG_WARNING,
meillo@409 75 "could not delete pid file %s: %s\n",
meillo@409 76 pidfile, strerror(errno));
meillo@10 77 seteuid(uid); /* we exit anyway after this, just to be sure */
meillo@10 78 }
meillo@0 79
meillo@10 80 signal(sig, SIG_DFL);
meillo@10 81 raise(sig);
meillo@0 82 }
meillo@0 83
meillo@249 84 /*
meillo@367 85 ** argv: the original argv
meillo@367 86 ** argp: number of arg (may get modified!)
meillo@367 87 ** cp: pointing to the char after the option
meillo@367 88 ** e.g. `-d 6' `-d6'
meillo@367 89 ** ^ ^
meillo@249 90 */
meillo@10 91 gchar*
meillo@366 92 get_optarg(char *argv[], gint *argp, char *cp)
meillo@0 93 {
meillo@249 94 if (*cp) {
meillo@249 95 /* this kind: -xval */
meillo@249 96 return cp;
meillo@249 97 }
meillo@249 98 cp = argv[*argp+1];
meillo@249 99 if (cp && (*cp != '-')) {
meillo@249 100 /* this kind: -x val */
meillo@249 101 (*argp)++;
meillo@249 102 return cp;
meillo@10 103 }
meillo@10 104 return NULL;
meillo@0 105 }
meillo@0 106
meillo@421 107 /*
meillo@421 108 ** Create any missing directory in pathname `dir'. (Like `mkdir -p'.)
meillo@421 109 ** The code is taken from nmh.
meillo@421 110 */
meillo@421 111 gboolean
meillo@421 112 makedir_rec(char *dir, int perms)
meillo@421 113 {
meillo@421 114 char path[PATH_MAX];
meillo@421 115 char *cp, *c;
meillo@421 116 int had_an_error = 0;
meillo@425 117 mode_t savedmask;
meillo@421 118
meillo@421 119 c = strncpy(path, dir, sizeof(path));
meillo@421 120
meillo@425 121 savedmask = umask(0);
meillo@425 122
meillo@421 123 while (!had_an_error && (c = strchr(c+1, '/'))) {
meillo@421 124 *c = '\0';
meillo@421 125 /* Create an outer directory. */
meillo@421 126 if (mkdir(path, perms) == -1 && errno != EEXIST) {
meillo@421 127 fprintf(stderr, "unable to create `%s': %s\n",
meillo@421 128 path, strerror(errno));
meillo@421 129 had_an_error = 1;
meillo@421 130 }
meillo@421 131 *c = '/';
meillo@425 132 }
meillo@421 133
meillo@421 134 /*
meillo@421 135 ** Create the innermost nested subdirectory of the
meillo@421 136 ** path we're being asked to create.
meillo@421 137 */
meillo@421 138 if (!had_an_error && mkdir(dir, perms)==-1 && errno != EEXIST) {
meillo@421 139 fprintf(stderr, "unable to create `%s': %s\n",
meillo@421 140 dir, strerror(errno));
meillo@421 141 had_an_error = 1;
meillo@425 142 }
meillo@425 143 umask(savedmask);
meillo@421 144
meillo@421 145 return (had_an_error) ? 0 : 1;
meillo@421 146 }
meillo@421 147
meillo@10 148 gboolean
meillo@366 149 write_pidfile(gchar *name)
meillo@0 150 {
meillo@10 151 FILE *fptr;
meillo@0 152
meillo@10 153 if ((fptr = fopen(name, "wt"))) {
meillo@10 154 fprintf(fptr, "%d\n", getpid());
meillo@10 155 fclose(fptr);
meillo@10 156 pidfile = strdup(name);
meillo@10 157 return TRUE;
meillo@10 158 }
meillo@409 159 logwrite(LOG_WARNING, "could not write pid file: %s\n",
meillo@409 160 strerror(errno));
meillo@10 161 return FALSE;
meillo@10 162 }
meillo@0 163
meillo@264 164 /* on -bd or if -q has an argument */
meillo@10 165 static void
meillo@10 166 mode_daemon(gboolean do_listen, gint queue_interval, char *argv[])
meillo@10 167 {
meillo@10 168 guint pid;
meillo@0 169
meillo@10 170 /* daemon */
meillo@10 171 if (!conf.run_as_user) {
meillo@10 172 if ((conf.orig_uid != 0) && (conf.orig_uid != conf.mail_uid)) {
meillo@409 173 fprintf(stderr, "must be root or %s for daemon.\n",
meillo@409 174 DEF_MAIL_USER);
meillo@262 175 exit(1);
meillo@10 176 }
meillo@10 177 }
meillo@0 178
meillo@74 179 /* reparent to init only if init is not already the parent */
meillo@74 180 if (getppid() != 1) {
meillo@74 181 if ((pid = fork()) > 0) {
meillo@262 182 exit(0);
meillo@74 183 } else if (pid < 0) {
meillo@208 184 logwrite(LOG_ALERT, "could not fork!\n");
meillo@262 185 exit(1);
meillo@74 186 }
meillo@10 187 }
meillo@0 188
meillo@10 189 signal(SIGTERM, sigterm_handler);
meillo@421 190 makedir_rec(PID_DIR, 0755);
meillo@419 191 write_pidfile(PID_DIR "/masqmail.pid");
meillo@0 192
meillo@10 193 conf.do_verbose = FALSE;
meillo@10 194
meillo@367 195 /*
meillo@367 196 ** closing and reopening the log ensures that it is open afterwards
meillo@367 197 ** because it is possible that the log is assigned to fd 1 and gets
meillo@367 198 ** thus closes by fclose(stdout). Similar for the debugfile.
meillo@72 199 */
meillo@72 200 logclose();
meillo@10 201 fclose(stdin);
meillo@10 202 fclose(stdout);
meillo@10 203 fclose(stderr);
meillo@72 204 logopen();
meillo@10 205
meillo@208 206 logwrite(LOG_NOTICE, "%s %s daemon starting\n", PACKAGE, VERSION);
meillo@409 207 listen_port(do_listen ? conf.listen_addresses : NULL,
meillo@409 208 queue_interval, argv);
meillo@0 209 }
meillo@0 210
meillo@264 211 /* -bs or called as smtpd or in.smtpd */
meillo@10 212 static void
meillo@10 213 mode_smtp()
meillo@0 214 {
meillo@10 215 /* accept smtp message on stdin */
meillo@10 216 /* write responses to stderr. */
meillo@0 217
meillo@10 218 struct sockaddr_in saddr;
meillo@10 219 gchar *peername = NULL;
meillo@10 220 int dummy = sizeof(saddr);
meillo@0 221
meillo@10 222 conf.do_verbose = FALSE;
meillo@0 223
meillo@10 224 if (!conf.run_as_user) {
meillo@331 225 set_euidgid(conf.orig_uid, conf.orig_gid, NULL, NULL);
meillo@10 226 }
meillo@0 227
meillo@10 228 DEBUG(5) debugf("accepting smtp message on stdin\n");
meillo@0 229
meillo@10 230 if (getpeername(0, (struct sockaddr *) (&saddr), &dummy) == 0) {
meillo@10 231 peername = g_strdup(inet_ntoa(saddr.sin_addr));
meillo@10 232 } else if (errno != ENOTSOCK)
meillo@262 233 exit(1);
meillo@0 234
meillo@10 235 smtp_in(stdin, stderr, peername, NULL);
meillo@0 236 }
meillo@0 237
meillo@264 238 /* default mode if address args or -t is specified, or called as rmail */
meillo@10 239 static void
meillo@367 240 mode_accept(address *return_path, gchar *full_sender_name, guint accept_flags,
meillo@367 241 char **addresses, int addr_cnt)
meillo@0 242 {
meillo@10 243 /* accept message on stdin */
meillo@10 244 accept_error err;
meillo@10 245 message *msg = create_message();
meillo@10 246 gint i;
meillo@266 247 pid_t pid;
meillo@0 248
meillo@83 249 if (return_path && !is_privileged_user(conf.orig_uid)) {
meillo@409 250 fprintf(stderr, "must be root, %s or in group %s for "
meillo@409 251 "setting return path.\n",
meillo@409 252 DEF_MAIL_USER, DEF_MAIL_GROUP);
meillo@262 253 exit(1);
meillo@10 254 }
meillo@0 255
meillo@10 256 if (!conf.run_as_user) {
meillo@331 257 set_euidgid(conf.orig_uid, conf.orig_gid, NULL, NULL);
meillo@10 258 }
meillo@0 259
meillo@10 260 DEBUG(5) debugf("accepting message on stdin\n");
meillo@0 261
meillo@10 262 msg->received_prot = PROT_LOCAL;
meillo@276 263
meillo@276 264 /* warn if -t option and cmdline addr args */
meillo@276 265 if (addr_cnt && (accept_flags & ACC_RCPT_FROM_HEAD)) {
meillo@409 266 logwrite(LOG_ALERT, "command line address arguments are "
meillo@409 267 "now *added* to the mail header\\\n");
meillo@409 268 logwrite(LOG_ALERT, " recipient addresses (instead of "
meillo@409 269 "substracted) when -t is given.\\\n");
meillo@276 270 logwrite(LOG_ALERT, " this changed with version 0.3.1\n");
meillo@276 271 }
meillo@276 272
meillo@10 273 for (i = 0; i < addr_cnt; i++) {
meillo@266 274 if (addresses[i][0] == '|') {
meillo@409 275 logwrite(LOG_ALERT, "no pipe allowed as recipient "
meillo@409 276 "address: %s\n", addresses[i]);
meillo@276 277 /* should we better ignore this one addr? */
meillo@262 278 exit(1);
meillo@10 279 }
meillo@409 280 msg->rcpt_list = g_list_append(msg->rcpt_list,
meillo@409 281 create_address_qualified(addresses[i],
meillo@409 282 TRUE, conf.host_name));
meillo@10 283 }
meillo@0 284
meillo@10 285 /* -f option */
meillo@10 286 msg->return_path = return_path;
meillo@0 287
meillo@10 288 /* -F option */
meillo@10 289 msg->full_sender_name = full_sender_name;
meillo@0 290
meillo@266 291 err = accept_message(stdin, msg, accept_flags);
meillo@0 292
meillo@266 293 switch (err) {
meillo@266 294 case AERR_OK:
meillo@266 295 /* to continue; all other cases exit */
meillo@266 296 break;
meillo@266 297 case AERR_EOF:
meillo@266 298 fprintf(stderr, "unexpected EOF.\n");
meillo@266 299 exit(1);
meillo@266 300 case AERR_NORCPT:
meillo@266 301 fprintf(stderr, "no recipients.\n");
meillo@266 302 exit(1);
meillo@266 303 case AERR_SIZE:
meillo@266 304 fprintf(stderr, "max message size exceeded.\n");
meillo@266 305 exit(1);
meillo@266 306 default:
meillo@266 307 /* should never happen: */
meillo@266 308 fprintf(stderr, "Unknown error (%d)\r\n", err);
meillo@266 309 exit(1);
meillo@266 310 }
meillo@266 311
meillo@266 312 if (!spool_write(msg, TRUE)) {
meillo@266 313 fprintf(stderr, "Could not write spool file\n");
meillo@266 314 exit(1);
meillo@266 315 }
meillo@266 316
meillo@267 317 /* here the mail is queued and thus in our responsibility */
meillo@409 318 logwrite(LOG_NOTICE, "%s <= %s with %s\n", msg->uid,
meillo@409 319 addr_string(msg->return_path), prot_names[PROT_LOCAL]);
meillo@266 320
meillo@266 321 if (conf.do_queue) {
meillo@266 322 /* we're finished as we only need to queue it */
meillo@266 323 return;
meillo@266 324 }
meillo@266 325
meillo@266 326 /* deliver at once */
meillo@266 327 if ((pid = fork()) < 0) {
meillo@409 328 logwrite(LOG_ALERT, "could not fork for delivery, id = %s\n",
meillo@409 329 msg->uid);
meillo@266 330 } else if (pid == 0) {
meillo@266 331 conf.do_verbose = FALSE;
meillo@266 332 fclose(stdin);
meillo@266 333 fclose(stdout);
meillo@266 334 fclose(stderr);
meillo@266 335 if (deliver(msg)) {
meillo@266 336 exit(0);
meillo@10 337 } else {
meillo@267 338 /*
meillo@367 339 ** TODO: Should we really fail here? Because the
meillo@367 340 ** mail is queued already. If we fail the client
meillo@367 341 ** might submit it again. If at-once-delivery
meillo@367 342 ** is seen as an additional best-effort service,
meillo@367 343 ** then we should still exit successful here.
meillo@267 344 */
meillo@262 345 exit(1);
meillo@10 346 }
meillo@0 347 }
meillo@0 348 }
meillo@0 349
meillo@250 350 /*
meillo@367 351 ** if -Mrm is given
meillo@367 352 **
meillo@367 353 ** currently only the `rm' command is supported
meillo@367 354 ** until this changes, we don't need any facility for further commands
meillo@367 355 ** return success if at least one message had been deleted
meillo@250 356 */
meillo@250 357 static int
meillo@366 358 manipulate_queue(char *cmd, char *id[])
meillo@250 359 {
meillo@250 360 gboolean ok = FALSE;
meillo@250 361
meillo@250 362 if (strcmp(cmd, "rm") != 0) {
meillo@250 363 fprintf(stderr, "unknown command %s\n", cmd);
meillo@250 364 return FALSE;
meillo@250 365 }
meillo@250 366
meillo@250 367 set_euidgid(conf.mail_uid, conf.mail_gid, NULL, NULL);
meillo@250 368
meillo@250 369 /* privileged users may delete any mail */
meillo@250 370 if (is_privileged_user(conf.orig_uid)) {
meillo@250 371 for (; *id; id++) {
meillo@250 372 fprintf(stderr, "id: %s\n", *id);
meillo@250 373 if (queue_delete(*id)) {
meillo@250 374 ok = TRUE;
meillo@250 375 }
meillo@250 376 }
meillo@250 377 return ok;
meillo@250 378 }
meillo@250 379
meillo@250 380 struct passwd *pw = getpwuid(conf.orig_uid);
meillo@250 381 if (!pw) {
meillo@409 382 fprintf(stderr, "could not find a passwd entry for "
meillo@409 383 "uid %d: %s\n",
meillo@409 384 conf.orig_uid, strerror(errno));
meillo@250 385 return FALSE;
meillo@250 386 }
meillo@250 387
meillo@250 388 /* non-privileged users may only delete their own messages */
meillo@250 389 for (; *id; id++) {
meillo@349 390 message *msg = msg_spool_read(*id);
meillo@250 391
meillo@250 392 fprintf(stderr, "id: %s\n", *id);
meillo@250 393
meillo@250 394 if (!msg->ident) {
meillo@409 395 fprintf(stderr, "message %s does not have an ident\n",
meillo@409 396 *id);
meillo@250 397 continue;
meillo@250 398 }
meillo@250 399 if (strcmp(pw->pw_name, msg->ident) != 0) {
meillo@250 400 fprintf(stderr, "you do not own message id %s\n", *id);
meillo@250 401 continue;
meillo@250 402 }
meillo@250 403
meillo@378 404 if (msg->received_host || (msg->received_prot != PROT_LOCAL)) {
meillo@409 405 fprintf(stderr, "message %s was not received "
meillo@409 406 "locally\n", *id);
meillo@250 407 continue;
meillo@250 408 }
meillo@250 409
meillo@250 410 ok = queue_delete(*id);
meillo@250 411 }
meillo@250 412 return ok;
meillo@250 413 }
meillo@250 414
meillo@264 415 /* -qo, -q (without argument), or called as runq */
meillo@251 416 static int
meillo@366 417 run_queue(gboolean do_runq, gboolean do_runq_online, char *route_name)
meillo@251 418 {
meillo@251 419 int ret;
meillo@251 420
meillo@251 421 /* queue runs */
meillo@251 422 set_identity(conf.orig_uid, "queue run");
meillo@251 423
meillo@251 424 if (do_runq) {
meillo@251 425 ret = queue_run();
meillo@251 426 }
meillo@251 427
meillo@251 428 if (do_runq_online) {
meillo@251 429 if (route_name) {
meillo@409 430 conf.online_query = g_strdup_printf("/bin/echo %s",
meillo@409 431 route_name);
meillo@251 432 }
meillo@367 433 /*
meillo@367 434 ** TODO: change behavior of `-qo without argument'?
meillo@367 435 ** Because that behavior is included in -q.
meillo@367 436 */
meillo@251 437 ret = queue_run_online();
meillo@251 438 }
meillo@251 439 return ret;
meillo@251 440 }
meillo@251 441
meillo@264 442 /* -bV or default mode if neither addr arg nor -t */
meillo@261 443 static void
meillo@261 444 mode_version(void)
meillo@261 445 {
meillo@261 446 gchar *with_resolver = "";
meillo@261 447 gchar *with_auth = "";
meillo@261 448
meillo@261 449 #ifdef ENABLE_RESOLVER
meillo@261 450 with_resolver = " +resolver";
meillo@261 451 #endif
meillo@261 452 #ifdef ENABLE_AUTH
meillo@261 453 with_auth = " +auth";
meillo@261 454 #endif
meillo@261 455
meillo@378 456 printf("%s %s%s%s\n", PACKAGE, VERSION, with_resolver, with_auth);
meillo@261 457 }
meillo@261 458
meillo@281 459 void
meillo@281 460 set_mode(enum mta_mode mode)
meillo@281 461 {
meillo@281 462 if (mta_mode && mta_mode!=mode) {
meillo@409 463 fprintf(stderr, "operation mode was already specified "
meillo@409 464 "(%d vs. %d)\n", mta_mode, mode);
meillo@281 465 exit(1);
meillo@281 466 }
meillo@281 467
meillo@281 468 mta_mode = mode;
meillo@281 469 return;
meillo@281 470 }
meillo@281 471
meillo@0 472 int
meillo@0 473 main(int argc, char *argv[])
meillo@0 474 {
meillo@251 475 gchar *progname;
meillo@366 476 char *opt;
meillo@249 477 gint arg;
meillo@0 478
meillo@10 479 gboolean do_listen = FALSE;
meillo@10 480 gboolean do_runq = FALSE;
meillo@10 481 gboolean do_runq_online = FALSE;
meillo@10 482 gboolean do_queue = FALSE;
meillo@10 483 gint queue_interval = 0;
meillo@251 484 gchar *M_cmd = NULL;
meillo@10 485 gboolean opt_t = FALSE;
meillo@10 486 gboolean opt_i = FALSE;
meillo@251 487 gchar *conf_file = CONF_FILE;
meillo@10 488 gchar *route_name = NULL;
meillo@10 489 gchar *f_address = NULL;
meillo@251 490 address *return_path = NULL; /* may be changed by -f option */
meillo@10 491 gchar *full_sender_name = NULL;
meillo@251 492 gboolean do_verbose = FALSE;
meillo@251 493 gint debug_level = -1;
meillo@0 494
meillo@260 495 /* strip the path part */
meillo@261 496 progname = strrchr(argv[0], '/');
meillo@261 497 progname = (progname) ? progname+1 : argv[0];
meillo@0 498
meillo@10 499 if (strcmp(progname, "mailq") == 0) {
meillo@10 500 mta_mode = MODE_LIST;
meillo@10 501 } else if (strcmp(progname, "mailrm") == 0) {
meillo@10 502 mta_mode = MODE_MCMD;
meillo@10 503 M_cmd = "rm";
meillo@284 504 } else if (strcmp(progname, "newaliases") == 0) {
meillo@284 505 mta_mode = MODE_BI;
meillo@10 506 } else if (strcmp(progname, "rmail") == 0) {
meillo@367 507 /*
meillo@367 508 ** the `rmail' alias should probably be removed now
meillo@367 509 ** that we have the rmail script. But let's keep it
meillo@367 510 ** for some while for compatibility. 2010-06-19
meillo@367 511 */
meillo@10 512 mta_mode = MODE_ACCEPT;
meillo@10 513 opt_i = TRUE;
meillo@284 514 } else if (strcmp(progname, "runq") == 0) {
meillo@284 515 mta_mode = MODE_RUNQUEUE;
meillo@284 516 do_runq = TRUE;
meillo@284 517 } else if (strcmp(progname, "smtpd") == 0
meillo@284 518 || strcmp(progname, "in.smtpd") == 0) {
meillo@10 519 mta_mode = MODE_SMTP;
meillo@10 520 }
meillo@0 521
meillo@10 522 /* parse cmd line */
meillo@249 523 for (arg=1; arg<argc && argv[arg][0]=='-'; arg++) {
meillo@251 524 opt = argv[arg] + 1; /* points to the char after the dash */
meillo@10 525
meillo@249 526 if (strcmp(opt, "-") == 0) {
meillo@249 527 /* everything after `--' are address arguments */
meillo@249 528 arg++;
meillo@249 529 break;
meillo@10 530
meillo@278 531 } else if (strcmp(opt, "bm") == 0) {
meillo@281 532 set_mode(MODE_ACCEPT);
meillo@278 533
meillo@249 534 } else if (strcmp(opt, "bd") == 0) {
meillo@281 535 set_mode(MODE_DAEMON);
meillo@249 536 do_listen = TRUE;
meillo@249 537
meillo@249 538 } else if (strcmp(opt, "bi") == 0) {
meillo@281 539 set_mode(MODE_BI);
meillo@249 540
meillo@249 541 } else if (strcmp(opt, "bs") == 0) {
meillo@281 542 set_mode(MODE_SMTP);
meillo@249 543
meillo@249 544 } else if (strcmp(opt, "bp") == 0) {
meillo@281 545 set_mode(MODE_LIST);
meillo@249 546
meillo@249 547 } else if (strcmp(opt, "bV") == 0) {
meillo@281 548 set_mode(MODE_VERSION);
meillo@249 549
meillo@249 550 } else if (strncmp(opt, "B", 1) == 0) {
meillo@249 551 /* we ignore this and throw the argument away */
meillo@249 552 get_optarg(argv, &arg, opt+1);
meillo@249 553
meillo@249 554 } else if (strncmp(opt, "C", 1) == 0) {
meillo@251 555 conf_file = get_optarg(argv, &arg, opt+1);
meillo@251 556 if (!conf_file) {
meillo@409 557 fprintf(stderr, "-C requires filename arg.\n");
meillo@262 558 exit(1);
meillo@10 559 }
meillo@249 560
meillo@249 561 } else if (strncmp(opt, "d", 1) == 0) {
meillo@249 562 if (getuid() != 0) {
meillo@409 563 fprintf(stderr, "only root may set the "
meillo@409 564 "debug level.\n");
meillo@262 565 exit(1);
meillo@249 566 }
meillo@249 567 char *lvl = get_optarg(argv, &arg, opt+1);
meillo@249 568 if (!lvl) {
meillo@409 569 fprintf(stderr, "-d requires number arg.\n");
meillo@262 570 exit(1);
meillo@249 571 }
meillo@249 572 debug_level = atoi(lvl);
meillo@249 573
meillo@249 574 } else if (strncmp(opt, "f", 1) == 0) {
meillo@249 575 /* set return path */
meillo@249 576 gchar *address = get_optarg(argv, &arg, opt+1);
meillo@249 577 if (!address) {
meillo@409 578 fprintf(stderr, "-f requires address arg.\n");
meillo@262 579 exit(1);
meillo@249 580 }
meillo@249 581 f_address = g_strdup(address);
meillo@249 582
meillo@249 583 } else if (strncmp(opt, "F", 1) == 0) {
meillo@249 584 full_sender_name = get_optarg(argv, &arg, opt+1);
meillo@249 585 if (!full_sender_name) {
meillo@409 586 fprintf(stderr, "-F requires name arg.\n");
meillo@262 587 exit(1);
meillo@249 588 }
meillo@249 589
meillo@249 590 } else if (strcmp(opt, "i") == 0) {
meillo@249 591 opt_i = TRUE;
meillo@249 592
meillo@249 593 } else if (strcmp(opt, "m") == 0) {
meillo@249 594 /* ignore -m (me too) switch (see man page) */
meillo@249 595
meillo@249 596 } else if (strcmp(opt, "Mrm") == 0) {
meillo@281 597 set_mode(MODE_MCMD);
meillo@249 598 M_cmd = "rm";
meillo@249 599
meillo@249 600 } else if (strcmp(opt, "odq") == 0) {
meillo@249 601 do_queue = TRUE;
meillo@249 602
meillo@249 603 } else if (strcmp(opt, "oi") == 0) {
meillo@257 604 opt_i = TRUE;
meillo@249 605
meillo@249 606 } else if (strncmp(opt, "o", 1) == 0) {
meillo@249 607 /* ignore all other -oXXX options */
meillo@249 608
meillo@249 609 } else if (strncmp(opt, "qo", 2) == 0) {
meillo@278 610 /* must be before the `q' check */
meillo@281 611 set_mode(MODE_RUNQUEUE);
meillo@249 612 do_runq_online = TRUE;
meillo@249 613 /* can be NULL, then we use online detection method */
meillo@290 614 /* TODO: behavior might change if it is NULL */
meillo@249 615 route_name = get_optarg(argv, &arg, opt+2);
meillo@290 616 if (!route_name) {
meillo@409 617 fprintf(stderr, "Please do not use -qo "
meillo@409 618 "without argument anymore; "
meillo@409 619 "use -q instead.\n");
meillo@409 620 fprintf(stderr, "The behavior for -qo without "
meillo@409 621 "argument is likely to "
meillo@409 622 "change.\n");
meillo@290 623 }
meillo@249 624
meillo@249 625 } else if (strncmp(opt, "q", 1) == 0) {
meillo@249 626 /* must be after the `qo' check */
meillo@249 627 gchar *optarg;
meillo@249 628
meillo@251 629 optarg = get_optarg(argv, &arg, opt+1);
meillo@251 630 if (optarg) {
meillo@409 631 /* do regular queue runs */
meillo@281 632 set_mode(MODE_DAEMON);
meillo@254 633 queue_interval = time_interval(optarg);
meillo@281 634 } else {
meillo@409 635 /* do a single queue run */
meillo@281 636 set_mode(MODE_RUNQUEUE);
meillo@281 637 do_runq = TRUE;
meillo@249 638 }
meillo@249 639
meillo@249 640 } else if (strcmp(opt, "t") == 0) {
meillo@249 641 opt_t = TRUE;
meillo@249 642
meillo@249 643 } else if (strcmp(opt, "v") == 0) {
meillo@249 644 do_verbose = TRUE;
meillo@249 645
meillo@10 646 } else {
meillo@249 647 fprintf(stderr, "unrecognized option `-%s'\n", opt);
meillo@262 648 exit(1);
meillo@10 649 }
meillo@0 650 }
meillo@0 651
meillo@281 652 if (!mta_mode && arg==argc && !opt_t) {
meillo@278 653 /*
meillo@367 654 ** In this case no rcpts can be found, thus no mail
meillo@367 655 ** can be sent, thus masqmail will always fail. We
meillo@367 656 ** rather do something better instead. This covers
meillo@367 657 ** also the case of calling masqmail without args.
meillo@278 658 */
meillo@281 659 mode_version();
meillo@281 660 exit(0);
meillo@259 661 }
meillo@259 662
meillo@10 663 if (mta_mode == MODE_VERSION) {
meillo@261 664 mode_version();
meillo@262 665 exit(0);
meillo@10 666 }
meillo@0 667
meillo@281 668 if (!mta_mode) {
meillo@281 669 mta_mode = MODE_ACCEPT;
meillo@281 670 }
meillo@281 671
meillo@10 672 /* initialize random generator */
meillo@10 673 srand(time(NULL));
meillo@10 674 /* ignore SIGPIPE signal */
meillo@10 675 signal(SIGPIPE, SIG_IGN);
meillo@0 676
meillo@73 677 /* close all possibly open file descriptors, except std{in,out,err} */
meillo@10 678 {
meillo@10 679 int i, max_fd = sysconf(_SC_OPEN_MAX);
meillo@0 680
meillo@251 681 if (max_fd <= 0) {
meillo@10 682 max_fd = 64;
meillo@251 683 }
meillo@251 684 for (i=3; i<max_fd; i++) {
meillo@10 685 close(i);
meillo@251 686 }
meillo@10 687 }
meillo@0 688
meillo@10 689 init_conf();
meillo@0 690
meillo@367 691 /*
meillo@367 692 ** if we are not privileged, and the config file was changed we
meillo@367 693 ** implicetely set the the run_as_user flag and give up all
meillo@367 694 ** privileges.
meillo@367 695 **
meillo@367 696 ** So it is possible for a user to run his own daemon without
meillo@367 697 ** breaking security.
meillo@367 698 */
meillo@251 699 if ((strcmp(conf_file, CONF_FILE) != 0) && (conf.orig_uid != 0)) {
meillo@421 700 logwrite(LOG_NOTICE, "Changing to run_as_user.\n");
meillo@251 701 conf.run_as_user = TRUE;
meillo@331 702 set_euidgid(conf.orig_uid, conf.orig_gid, NULL, NULL);
meillo@331 703 if (setgid(conf.orig_gid)) {
meillo@409 704 logwrite(LOG_ALERT, "could not set gid to %d: %s\n",
meillo@409 705 conf.orig_gid, strerror(errno));
meillo@331 706 exit(1);
meillo@331 707 }
meillo@331 708 if (setuid(conf.orig_uid)) {
meillo@409 709 logwrite(LOG_ALERT, "could not set uid to %d: %s\n",
meillo@409 710 conf.orig_uid, strerror(errno));
meillo@331 711 exit(1);
meillo@331 712 }
meillo@10 713 }
meillo@0 714
meillo@155 715 conf.log_dir = LOG_DIR;
meillo@397 716 conf.debug_level = debug_level; /* for debuggin during read_conf() */
meillo@288 717 /* FIXME: fails if we run as user */
meillo@155 718 logopen();
meillo@155 719 if (!read_conf(conf_file)) {
meillo@409 720 logwrite(LOG_ALERT, "SHUTTING DOWN due to problems reading "
meillo@409 721 "config\n");
meillo@155 722 exit(5);
meillo@155 723 }
meillo@155 724 logclose();
meillo@0 725
meillo@251 726 if (do_queue) {
meillo@10 727 conf.do_queue = TRUE;
meillo@251 728 }
meillo@251 729 if (do_verbose) {
meillo@10 730 conf.do_verbose = TRUE;
meillo@251 731 }
meillo@251 732 if (debug_level >= 0) { /* if >= 0, it was given by argument */
meillo@10 733 conf.debug_level = debug_level;
meillo@251 734 }
meillo@0 735
meillo@367 736 /*
meillo@367 737 ** It appears that changing to / ensures that we are never in
meillo@367 738 ** a directory which we cannot access. This situation could be
meillo@367 739 ** possible after changing identity.
meillo@367 740 ** Maybe we should only change to / if we not run as user, to
meillo@367 741 ** allow relative paths for log files in test setups for
meillo@367 742 ** instance.
meillo@46 743 */
meillo@10 744 chdir("/");
meillo@0 745
meillo@10 746 if (!conf.run_as_user) {
meillo@10 747 if (setgid(0) != 0) {
meillo@409 748 fprintf(stderr, "could not set gid to 0. "
meillo@409 749 "Is the setuid bit set? : %s\n",
meillo@409 750 strerror(errno));
meillo@262 751 exit(1);
meillo@10 752 }
meillo@10 753 if (setuid(0) != 0) {
meillo@409 754 fprintf(stderr, "could not gain root privileges. "
meillo@409 755 "Is the setuid bit set? : %s\n",
meillo@409 756 strerror(errno));
meillo@262 757 exit(1);
meillo@10 758 }
meillo@10 759 }
meillo@0 760
meillo@421 761 if (conf.run_as_user) {
meillo@421 762 logwrite(LOG_NOTICE, "Using spool directory `%s' for "
meillo@421 763 "lock files.\n", conf.spool_dir);
meillo@421 764 conf.lock_dir = conf.spool_dir;
meillo@425 765 makedir_rec(conf.spool_dir, 0755);
meillo@425 766 makedir_rec(conf.log_dir, 0755);
meillo@421 767 } else {
meillo@421 768 makedir_rec(conf.lock_dir, 0775);
meillo@425 769 chown(conf.lock_dir, conf.mail_uid, conf.mail_gid);
meillo@425 770 makedir_rec(conf.spool_dir, 0755);
meillo@425 771 chown(conf.spool_dir, conf.mail_uid, conf.mail_gid);
meillo@425 772 makedir_rec(conf.log_dir, 0755);
meillo@425 773 chown(conf.log_dir, conf.mail_uid, conf.mail_gid);
meillo@421 774 }
meillo@421 775
meillo@10 776 if (!logopen()) {
meillo@10 777 fprintf(stderr, "could not open log file\n");
meillo@262 778 exit(1);
meillo@10 779 }
meillo@0 780
meillo@415 781 DEBUG(1) debugf("----STARTING---- masqmail %s\n", VERSION);
meillo@0 782
meillo@10 783 DEBUG(5) {
meillo@10 784 gchar **str = argv;
meillo@10 785 debugf("args: \n");
meillo@10 786 while (*str) {
meillo@10 787 debugf("%s \n", *str);
meillo@10 788 str++;
meillo@10 789 }
meillo@10 790 }
meillo@10 791 DEBUG(5) debugf("queue_interval = %d\n", queue_interval);
meillo@0 792
meillo@10 793 if (f_address) {
meillo@409 794 return_path = create_address_qualified(f_address, TRUE,
meillo@409 795 conf.host_name);
meillo@10 796 g_free(f_address);
meillo@10 797 if (!return_path) {
meillo@409 798 fprintf(stderr, "invalid RFC821 address: %s\n",
meillo@409 799 f_address);
meillo@262 800 exit(1);
meillo@10 801 }
meillo@10 802 }
meillo@10 803
meillo@10 804 switch (mta_mode) {
meillo@10 805 case MODE_DAEMON:
meillo@10 806 mode_daemon(do_listen, queue_interval, argv);
meillo@10 807 break;
meillo@251 808
meillo@10 809 case MODE_RUNQUEUE:
meillo@251 810 exit(run_queue(do_runq, do_runq_online, route_name) ? 0 : 1);
meillo@10 811 break;
meillo@10 812
meillo@10 813 case MODE_SMTP:
meillo@10 814 mode_smtp();
meillo@10 815 break;
meillo@10 816
meillo@10 817 case MODE_LIST:
meillo@10 818 queue_list();
meillo@10 819 break;
meillo@10 820
meillo@10 821 case MODE_BI:
meillo@262 822 exit(0);
meillo@10 823 break; /* well... */
meillo@10 824
meillo@10 825 case MODE_MCMD:
meillo@250 826 exit(manipulate_queue(M_cmd, &argv[arg]) ? 0 : 1);
meillo@10 827 break;
meillo@10 828
meillo@10 829 case MODE_ACCEPT:
meillo@10 830 {
meillo@409 831 guint accept_flags = 0;
meillo@409 832 accept_flags |= (opt_t ? ACC_RCPT_FROM_HEAD : 0);
meillo@409 833 accept_flags |= (opt_i ?
meillo@409 834 ACC_DOT_IGNORE : ACC_NODOT_RELAX);
meillo@409 835 mode_accept(return_path, full_sender_name,
meillo@409 836 accept_flags, argv + arg, argc - arg);
meillo@258 837 exit(0);
meillo@10 838 }
meillo@10 839 break;
meillo@251 840
meillo@10 841 default:
meillo@10 842 fprintf(stderr, "unknown mode: %d\n", mta_mode);
meillo@10 843 break;
meillo@0 844 }
meillo@0 845
meillo@10 846 logclose();
meillo@0 847
meillo@263 848 exit(0);
meillo@0 849 }