masqmail

annotate src/masqmail.c @ 257:8cca5305e4f0

find changesets by author, revision, files, or words in the commit message
fixed -oi to really be the same as -i
author markus schnalke <meillo@marmaro.de>
date Wed, 01 Dec 2010 17:29:52 -0300
parents 82d168dd52fd
children 05fa719b7002
rev   line source
meillo@0 1 /* MasqMail
meillo@0 2 Copyright (C) 1999-2001 Oliver Kurth
meillo@76 3 Copyright (C) 2010 markus schnalke <meillo@marmaro.de>
meillo@0 4
meillo@0 5 This program is free software; you can redistribute it and/or modify
meillo@0 6 it under the terms of the GNU General Public License as published by
meillo@0 7 the Free Software Foundation; either version 2 of the License, or
meillo@0 8 (at your option) any later version.
meillo@0 9
meillo@0 10 This program is distributed in the hope that it will be useful,
meillo@0 11 but WITHOUT ANY WARRANTY; without even the implied warranty of
meillo@0 12 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
meillo@0 13 GNU General Public License for more details.
meillo@0 14
meillo@0 15 You should have received a copy of the GNU General Public License
meillo@0 16 along with this program; if not, write to the Free Software
meillo@0 17 Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
meillo@0 18 */
meillo@0 19
meillo@0 20 #include <stdio.h>
meillo@0 21 #include <errno.h>
meillo@0 22 #include <stdlib.h>
meillo@0 23 #include <string.h>
meillo@0 24 #include <unistd.h>
meillo@0 25 #include <sys/types.h>
meillo@0 26 #include <sys/socket.h>
meillo@0 27 #include <sys/time.h>
meillo@0 28 #include <netinet/in.h>
meillo@0 29 #include <netdb.h>
meillo@0 30 #include <syslog.h>
meillo@0 31 #include <signal.h>
meillo@0 32
meillo@0 33 #include <glib.h>
meillo@0 34
meillo@0 35 #include "masqmail.h"
meillo@0 36
meillo@192 37 /* mutually exclusive modes. Note that there is no 'queue daemon' mode.
meillo@192 38 It, as well as the distinction beween the two (non exclusive) daemon
meillo@192 39 (queue and listen) modes, is handled by flags.*/
meillo@10 40 typedef enum _mta_mode {
meillo@10 41 MODE_ACCEPT = 0, /* accept message on stdin */
meillo@10 42 MODE_DAEMON, /* run as daemon */
meillo@10 43 MODE_RUNQUEUE, /* single queue run, online or offline */
meillo@10 44 MODE_SMTP, /* accept SMTP on stdin */
meillo@10 45 MODE_LIST, /* list queue */
meillo@10 46 MODE_MCMD, /* do queue manipulation */
meillo@10 47 MODE_VERSION, /* show version */
meillo@10 48 MODE_BI, /* fake ;-) */
meillo@10 49 MODE_NONE /* to prevent default MODE_ACCEPT */
meillo@10 50 } mta_mode;
meillo@0 51
meillo@0 52 char *pidfile = NULL;
meillo@0 53 volatile int sigterm_in_progress = 0;
meillo@0 54
meillo@10 55 static void
meillo@10 56 sigterm_handler(int sig)
meillo@0 57 {
meillo@10 58 if (sigterm_in_progress)
meillo@10 59 raise(sig);
meillo@10 60 sigterm_in_progress = 1;
meillo@0 61
meillo@10 62 if (pidfile) {
meillo@10 63 uid_t uid;
meillo@10 64 uid = seteuid(0);
meillo@10 65 if (unlink(pidfile) != 0)
meillo@10 66 logwrite(LOG_WARNING, "could not delete pid file %s: %s\n", pidfile, strerror(errno));
meillo@10 67 seteuid(uid); /* we exit anyway after this, just to be sure */
meillo@10 68 }
meillo@0 69
meillo@10 70 signal(sig, SIG_DFL);
meillo@10 71 raise(sig);
meillo@0 72 }
meillo@0 73
meillo@10 74 #ifdef ENABLE_IDENT /* so far used for that only */
meillo@10 75 static gboolean
meillo@10 76 is_in_netlist(gchar * host, GList * netlist)
meillo@0 77 {
meillo@10 78 guint hostip = inet_addr(host);
meillo@10 79 struct in_addr addr;
meillo@0 80
meillo@10 81 addr.s_addr = hostip;
meillo@10 82 if (addr.s_addr != INADDR_NONE) {
meillo@10 83 GList *node;
meillo@10 84 foreach(netlist, node) {
meillo@10 85 struct in_addr *net = (struct in_addr *) (node->data);
meillo@10 86 if ((addr.s_addr & net->s_addr) == net->s_addr)
meillo@10 87 return TRUE;
meillo@10 88 }
meillo@10 89 }
meillo@10 90 return FALSE;
meillo@0 91 }
meillo@0 92 #endif
meillo@0 93
meillo@249 94 /*
meillo@249 95 argv: the original argv
meillo@249 96 argp: number of arg (may get modified!)
meillo@249 97 cp: pointing to the char after the option
meillo@249 98 e.g. `-d 6' `-d6'
meillo@249 99 ^ ^
meillo@249 100 */
meillo@10 101 gchar*
meillo@249 102 get_optarg(char* argv[], gint* argp, char* cp)
meillo@0 103 {
meillo@249 104 if (*cp) {
meillo@249 105 /* this kind: -xval */
meillo@249 106 return cp;
meillo@249 107 }
meillo@249 108 cp = argv[*argp+1];
meillo@249 109 if (cp && (*cp != '-')) {
meillo@249 110 /* this kind: -x val */
meillo@249 111 (*argp)++;
meillo@249 112 return cp;
meillo@10 113 }
meillo@10 114 return NULL;
meillo@0 115 }
meillo@0 116
meillo@10 117 gchar*
meillo@10 118 get_progname(gchar * arg0)
meillo@0 119 {
meillo@10 120 gchar *p = arg0 + strlen(arg0) - 1;
meillo@10 121 while (p > arg0) {
meillo@10 122 if (*p == '/')
meillo@10 123 return p + 1;
meillo@10 124 p--;
meillo@10 125 }
meillo@10 126 return p;
meillo@0 127 }
meillo@0 128
meillo@10 129 gboolean
meillo@10 130 write_pidfile(gchar * name)
meillo@0 131 {
meillo@10 132 FILE *fptr;
meillo@0 133
meillo@10 134 if ((fptr = fopen(name, "wt"))) {
meillo@10 135 fprintf(fptr, "%d\n", getpid());
meillo@10 136 fclose(fptr);
meillo@10 137 pidfile = strdup(name);
meillo@10 138 return TRUE;
meillo@10 139 }
meillo@10 140 logwrite(LOG_WARNING, "could not write pid file: %s\n", strerror(errno));
meillo@10 141 return FALSE;
meillo@10 142 }
meillo@0 143
meillo@10 144 static void
meillo@10 145 mode_daemon(gboolean do_listen, gint queue_interval, char *argv[])
meillo@10 146 {
meillo@10 147 guint pid;
meillo@0 148
meillo@10 149 /* daemon */
meillo@10 150 if (!conf.run_as_user) {
meillo@10 151 if ((conf.orig_uid != 0) && (conf.orig_uid != conf.mail_uid)) {
meillo@10 152 fprintf(stderr, "must be root or %s for daemon.\n", DEF_MAIL_USER);
meillo@10 153 exit(EXIT_FAILURE);
meillo@10 154 }
meillo@10 155 }
meillo@0 156
meillo@74 157 /* reparent to init only if init is not already the parent */
meillo@74 158 if (getppid() != 1) {
meillo@74 159 if ((pid = fork()) > 0) {
meillo@74 160 exit(EXIT_SUCCESS);
meillo@74 161 } else if (pid < 0) {
meillo@208 162 logwrite(LOG_ALERT, "could not fork!\n");
meillo@74 163 exit(EXIT_FAILURE);
meillo@74 164 }
meillo@10 165 }
meillo@0 166
meillo@10 167 signal(SIGTERM, sigterm_handler);
meillo@10 168 write_pidfile(PIDFILEDIR "/masqmail.pid");
meillo@0 169
meillo@10 170 conf.do_verbose = FALSE;
meillo@10 171
meillo@72 172 /* closing and reopening the log ensures that it is open afterwards
meillo@72 173 because it is possible that the log is assigned to fd 1 and gets
meillo@72 174 thus closes by fclose(stdout). Similar for the debugfile.
meillo@72 175 */
meillo@72 176 logclose();
meillo@10 177 fclose(stdin);
meillo@10 178 fclose(stdout);
meillo@10 179 fclose(stderr);
meillo@72 180 logopen();
meillo@10 181
meillo@208 182 logwrite(LOG_NOTICE, "%s %s daemon starting\n", PACKAGE, VERSION);
meillo@10 183 listen_port(do_listen ? conf.listen_addresses : NULL, queue_interval, argv);
meillo@0 184 }
meillo@0 185
meillo@10 186 static void
meillo@10 187 mode_smtp()
meillo@0 188 {
meillo@10 189 /* accept smtp message on stdin */
meillo@10 190 /* write responses to stderr. */
meillo@0 191
meillo@10 192 struct sockaddr_in saddr;
meillo@10 193 gchar *peername = NULL;
meillo@10 194 int dummy = sizeof(saddr);
meillo@0 195
meillo@10 196 conf.do_verbose = FALSE;
meillo@0 197
meillo@10 198 if (!conf.run_as_user) {
meillo@10 199 seteuid(conf.orig_uid);
meillo@10 200 setegid(conf.orig_gid);
meillo@10 201 }
meillo@0 202
meillo@10 203 DEBUG(5) debugf("accepting smtp message on stdin\n");
meillo@0 204
meillo@10 205 if (getpeername(0, (struct sockaddr *) (&saddr), &dummy) == 0) {
meillo@10 206 peername = g_strdup(inet_ntoa(saddr.sin_addr));
meillo@10 207 } else if (errno != ENOTSOCK)
meillo@10 208 exit(EXIT_FAILURE);
meillo@0 209
meillo@10 210 smtp_in(stdin, stderr, peername, NULL);
meillo@0 211 }
meillo@0 212
meillo@10 213 static void
meillo@10 214 mode_accept(address * return_path, gchar * full_sender_name, guint accept_flags, char **addresses, int addr_cnt)
meillo@0 215 {
meillo@10 216 /* accept message on stdin */
meillo@10 217 accept_error err;
meillo@10 218 message *msg = create_message();
meillo@10 219 gint i;
meillo@0 220
meillo@83 221 if (return_path && !is_privileged_user(conf.orig_uid)) {
meillo@96 222 fprintf(stderr, "must be root, %s or in group %s for setting return path.\n", DEF_MAIL_USER, DEF_MAIL_GROUP);
meillo@83 223 exit(EXIT_FAILURE);
meillo@10 224 }
meillo@0 225
meillo@10 226 if (!conf.run_as_user) {
meillo@10 227 seteuid(conf.orig_uid);
meillo@10 228 setegid(conf.orig_gid);
meillo@10 229 }
meillo@0 230
meillo@10 231 DEBUG(5) debugf("accepting message on stdin\n");
meillo@0 232
meillo@10 233 msg->received_prot = PROT_LOCAL;
meillo@10 234 for (i = 0; i < addr_cnt; i++) {
meillo@10 235 if (addresses[i][0] != '|')
meillo@10 236 msg->rcpt_list = g_list_append(msg->rcpt_list, create_address_qualified(addresses[i], TRUE, conf.host_name));
meillo@10 237 else {
meillo@10 238 logwrite(LOG_ALERT, "no pipe allowed as recipient address: %s\n", addresses[i]);
meillo@10 239 exit(EXIT_FAILURE);
meillo@10 240 }
meillo@10 241 }
meillo@0 242
meillo@10 243 /* -f option */
meillo@10 244 msg->return_path = return_path;
meillo@0 245
meillo@10 246 /* -F option */
meillo@10 247 msg->full_sender_name = full_sender_name;
meillo@0 248
meillo@10 249 if ((err = accept_message(stdin, msg, accept_flags)) == AERR_OK) {
meillo@10 250 if (spool_write(msg, TRUE)) {
meillo@10 251 pid_t pid;
meillo@10 252 logwrite(LOG_NOTICE, "%s <= %s with %s\n", msg->uid, addr_string(msg->return_path), prot_names[PROT_LOCAL]);
meillo@0 253
meillo@10 254 if (!conf.do_queue) {
meillo@10 255 if ((pid = fork()) == 0) {
meillo@10 256 conf.do_verbose = FALSE;
meillo@10 257 fclose(stdin);
meillo@10 258 fclose(stdout);
meillo@10 259 fclose(stderr);
meillo@10 260 if (deliver(msg)) {
meillo@10 261 exit(EXIT_SUCCESS);
meillo@10 262 } else
meillo@10 263 exit(EXIT_FAILURE);
meillo@10 264 } else if (pid < 0) {
meillo@208 265 logwrite(LOG_ALERT, "could not fork for delivery, id = %s\n", msg->uid);
meillo@10 266 }
meillo@10 267 }
meillo@10 268 } else {
meillo@10 269 fprintf(stderr, "Could not write spool file\n");
meillo@10 270 exit(EXIT_FAILURE);
meillo@10 271 }
meillo@10 272 } else {
meillo@10 273 switch (err) {
meillo@10 274 case AERR_EOF:
meillo@10 275 fprintf(stderr, "unexpected EOF.\n");
meillo@10 276 exit(EXIT_FAILURE);
meillo@10 277 case AERR_NORCPT:
meillo@10 278 fprintf(stderr, "no recipients.\n");
meillo@10 279 exit(EXIT_FAILURE);
meillo@117 280 case AERR_SIZE:
meillo@117 281 fprintf(stderr, "max message size exceeded.\n");
meillo@117 282 exit(EXIT_FAILURE);
meillo@10 283 default:
meillo@10 284 /* should never happen: */
meillo@10 285 fprintf(stderr, "Unknown error (%d)\r\n", err);
meillo@10 286 exit(EXIT_FAILURE);
meillo@10 287 }
meillo@10 288 exit(EXIT_FAILURE);
meillo@0 289 }
meillo@0 290 }
meillo@0 291
meillo@250 292 /*
meillo@250 293 currently only the `rm' command is supported
meillo@250 294 until this changes, we don't need any facility for further commands
meillo@250 295 return success if at least one message had been deleted
meillo@250 296 */
meillo@250 297 static int
meillo@250 298 manipulate_queue(char* cmd, char* id[])
meillo@250 299 {
meillo@250 300 gboolean ok = FALSE;
meillo@250 301
meillo@250 302 if (strcmp(cmd, "rm") != 0) {
meillo@250 303 fprintf(stderr, "unknown command %s\n", cmd);
meillo@250 304 return FALSE;
meillo@250 305 }
meillo@250 306
meillo@250 307 set_euidgid(conf.mail_uid, conf.mail_gid, NULL, NULL);
meillo@250 308
meillo@250 309 /* privileged users may delete any mail */
meillo@250 310 if (is_privileged_user(conf.orig_uid)) {
meillo@250 311 for (; *id; id++) {
meillo@250 312 fprintf(stderr, "id: %s\n", *id);
meillo@250 313 if (queue_delete(*id)) {
meillo@250 314 ok = TRUE;
meillo@250 315 }
meillo@250 316 }
meillo@250 317 return ok;
meillo@250 318 }
meillo@250 319
meillo@250 320 struct passwd *pw = getpwuid(conf.orig_uid);
meillo@250 321 if (!pw) {
meillo@250 322 fprintf(stderr, "could not find a passwd entry for uid %d: %s\n",
meillo@250 323 conf.orig_uid, strerror(errno));
meillo@250 324 return FALSE;
meillo@250 325 }
meillo@250 326
meillo@250 327 /* non-privileged users may only delete their own messages */
meillo@250 328 for (; *id; id++) {
meillo@250 329 message *msg = msg_spool_read(*id, FALSE);
meillo@250 330
meillo@250 331 fprintf(stderr, "id: %s\n", *id);
meillo@250 332
meillo@250 333 if (!msg->ident) {
meillo@250 334 fprintf(stderr, "message %s does not have an ident\n", *id);
meillo@250 335 continue;
meillo@250 336 }
meillo@250 337 if (strcmp(pw->pw_name, msg->ident) != 0) {
meillo@250 338 fprintf(stderr, "you do not own message id %s\n", *id);
meillo@250 339 continue;
meillo@250 340 }
meillo@250 341
meillo@250 342 if ( (msg->received_host || (msg->received_prot != PROT_LOCAL))
meillo@250 343 #ifdef ENABLE_IDENT
meillo@250 344 && !is_in_netlist(msg->received_host, conf.ident_trusted_nets)
meillo@250 345 #endif
meillo@250 346 ) {
meillo@250 347 fprintf(stderr, "message %s was not received locally or from a trusted network\n", *id);
meillo@250 348 continue;
meillo@250 349 }
meillo@250 350
meillo@250 351 ok = queue_delete(*id);
meillo@250 352 }
meillo@250 353 return ok;
meillo@250 354 }
meillo@250 355
meillo@251 356 static int
meillo@251 357 run_queue(gboolean do_runq, gboolean do_runq_online, char* route_name)
meillo@251 358 {
meillo@251 359 int ret;
meillo@251 360
meillo@251 361 /* queue runs */
meillo@251 362 set_identity(conf.orig_uid, "queue run");
meillo@251 363
meillo@251 364 if (do_runq) {
meillo@251 365 ret = queue_run();
meillo@251 366 }
meillo@251 367
meillo@251 368 if (do_runq_online) {
meillo@251 369 if (route_name) {
meillo@251 370 conf.online_detect = g_strdup("argument");
meillo@251 371 set_online_name(route_name);
meillo@251 372 }
meillo@251 373 ret = queue_run_online();
meillo@251 374 }
meillo@251 375 return ret;
meillo@251 376 }
meillo@251 377
meillo@0 378 int
meillo@0 379 main(int argc, char *argv[])
meillo@0 380 {
meillo@251 381 gchar *progname;
meillo@249 382 char* opt;
meillo@249 383 gint arg;
meillo@0 384
meillo@251 385 mta_mode mta_mode = MODE_ACCEPT;
meillo@10 386 gboolean do_listen = FALSE;
meillo@10 387 gboolean do_runq = FALSE;
meillo@10 388 gboolean do_runq_online = FALSE;
meillo@10 389 gboolean do_queue = FALSE;
meillo@10 390 gint queue_interval = 0;
meillo@251 391 gchar *M_cmd = NULL;
meillo@10 392 gboolean opt_t = FALSE;
meillo@10 393 gboolean opt_i = FALSE;
meillo@10 394 gboolean exit_failure = FALSE;
meillo@10 395 gint exit_code = EXIT_SUCCESS;
meillo@251 396 gchar *conf_file = CONF_FILE;
meillo@10 397 gchar *route_name = NULL;
meillo@10 398 gchar *f_address = NULL;
meillo@251 399 address *return_path = NULL; /* may be changed by -f option */
meillo@10 400 gchar *full_sender_name = NULL;
meillo@251 401 gboolean do_verbose = FALSE;
meillo@251 402 gint debug_level = -1;
meillo@0 403
meillo@10 404 progname = get_progname(argv[0]);
meillo@0 405
meillo@10 406 if (strcmp(progname, "mailq") == 0) {
meillo@10 407 mta_mode = MODE_LIST;
meillo@10 408 } else if (strcmp(progname, "mailrm") == 0) {
meillo@10 409 mta_mode = MODE_MCMD;
meillo@10 410 M_cmd = "rm";
meillo@10 411 } else if (strcmp(progname, "runq") == 0) {
meillo@10 412 mta_mode = MODE_RUNQUEUE;
meillo@10 413 do_runq = TRUE;
meillo@10 414 } else if (strcmp(progname, "rmail") == 0) {
meillo@89 415 /* the `rmail' alias should probably be removed now
meillo@89 416 that we have the rmail script. But let's keep it
meillo@89 417 for some while for compatibility. 2010-06-19 */
meillo@10 418 mta_mode = MODE_ACCEPT;
meillo@10 419 opt_i = TRUE;
meillo@10 420 } else if (strcmp(progname, "smtpd") == 0 || strcmp(progname, "in.smtpd") == 0) {
meillo@10 421 mta_mode = MODE_SMTP;
meillo@10 422 }
meillo@0 423
meillo@10 424 /* parse cmd line */
meillo@249 425 for (arg=1; arg<argc && argv[arg][0]=='-'; arg++) {
meillo@251 426 opt = argv[arg] + 1; /* points to the char after the dash */
meillo@10 427
meillo@249 428 if (strcmp(opt, "-") == 0) {
meillo@249 429 /* everything after `--' are address arguments */
meillo@249 430 arg++;
meillo@249 431 break;
meillo@10 432
meillo@249 433 } else if (strcmp(opt, "bd") == 0) {
meillo@249 434 do_listen = TRUE;
meillo@249 435 mta_mode = MODE_DAEMON;
meillo@249 436
meillo@249 437 } else if (strcmp(opt, "bi") == 0) {
meillo@249 438 /* ignored */
meillo@249 439 mta_mode = MODE_BI;
meillo@249 440
meillo@249 441 } else if (strcmp(opt, "bs") == 0) {
meillo@249 442 mta_mode = MODE_SMTP;
meillo@249 443
meillo@249 444 } else if (strcmp(opt, "bp") == 0) {
meillo@249 445 mta_mode = MODE_LIST;
meillo@249 446
meillo@249 447 } else if (strcmp(opt, "bV") == 0) {
meillo@249 448 mta_mode = MODE_VERSION;
meillo@249 449
meillo@249 450 } else if (strncmp(opt, "B", 1) == 0) {
meillo@249 451 /* we ignore this and throw the argument away */
meillo@249 452 get_optarg(argv, &arg, opt+1);
meillo@249 453
meillo@249 454 } else if (strncmp(opt, "C", 1) == 0) {
meillo@251 455 conf_file = get_optarg(argv, &arg, opt+1);
meillo@251 456 if (!conf_file) {
meillo@249 457 fprintf(stderr, "-C requires a filename as argument.\n");
meillo@10 458 exit(EXIT_FAILURE);
meillo@10 459 }
meillo@249 460
meillo@249 461 } else if (strncmp(opt, "d", 1) == 0) {
meillo@249 462 if (getuid() != 0) {
meillo@249 463 fprintf(stderr, "only root may set the debug level.\n");
meillo@249 464 exit(EXIT_FAILURE);
meillo@249 465 }
meillo@249 466 char *lvl = get_optarg(argv, &arg, opt+1);
meillo@249 467 if (!lvl) {
meillo@249 468 fprintf(stderr, "-d requires a number argument.\n");
meillo@249 469 exit(EXIT_FAILURE);
meillo@249 470 }
meillo@249 471 debug_level = atoi(lvl);
meillo@249 472
meillo@249 473 } else if (strncmp(opt, "f", 1) == 0) {
meillo@249 474 /* set return path */
meillo@249 475 gchar *address = get_optarg(argv, &arg, opt+1);
meillo@249 476 if (!address) {
meillo@249 477 fprintf(stderr, "-f requires an address argument\n");
meillo@249 478 exit(EXIT_FAILURE);
meillo@249 479 }
meillo@249 480 f_address = g_strdup(address);
meillo@249 481
meillo@249 482 } else if (strncmp(opt, "F", 1) == 0) {
meillo@249 483 full_sender_name = get_optarg(argv, &arg, opt+1);
meillo@249 484 if (!full_sender_name) {
meillo@249 485 fprintf(stderr, "-F requires a name argument\n");
meillo@249 486 exit(EXIT_FAILURE);
meillo@249 487 }
meillo@249 488
meillo@249 489 } else if (strcmp(opt, "i") == 0) {
meillo@249 490 opt_i = TRUE;
meillo@249 491 exit_failure = FALSE; /* may override -oem */
meillo@249 492
meillo@249 493 } else if (strcmp(opt, "m") == 0) {
meillo@249 494 /* ignore -m (me too) switch (see man page) */
meillo@249 495
meillo@249 496 } else if (strcmp(opt, "Mrm") == 0) {
meillo@249 497 mta_mode = MODE_MCMD;
meillo@249 498 M_cmd = "rm";
meillo@249 499
meillo@249 500 } else if (strcmp(opt, "odq") == 0) {
meillo@249 501 do_queue = TRUE;
meillo@249 502
meillo@249 503 } else if (strcmp(opt, "oem") == 0) {
meillo@249 504 if (!opt_i) {
meillo@249 505 /* TODO: Why is this related to -i in any way? */
meillo@249 506 exit_failure = TRUE;
meillo@249 507 }
meillo@249 508
meillo@249 509 } else if (strcmp(opt, "oi") == 0) {
meillo@257 510 opt_i = TRUE;
meillo@249 511 exit_failure = FALSE; /* may override -oem */
meillo@249 512
meillo@249 513 } else if (strncmp(opt, "o", 1) == 0) {
meillo@249 514 /* ignore all other -oXXX options */
meillo@249 515
meillo@249 516 } else if (strncmp(opt, "qo", 2) == 0) {
meillo@249 517 mta_mode = MODE_RUNQUEUE;
meillo@249 518 do_runq = FALSE;
meillo@249 519 do_runq_online = TRUE;
meillo@249 520 /* can be NULL, then we use online detection method */
meillo@249 521 route_name = get_optarg(argv, &arg, opt+2);
meillo@249 522
meillo@249 523 } else if (strncmp(opt, "q", 1) == 0) {
meillo@249 524 /* must be after the `qo' check */
meillo@249 525 gchar *optarg;
meillo@249 526
meillo@249 527 do_runq = TRUE;
meillo@249 528 mta_mode = MODE_RUNQUEUE;
meillo@251 529 optarg = get_optarg(argv, &arg, opt+1);
meillo@251 530 if (optarg) {
meillo@251 531 /* not just one single queue run but regular runs */
meillo@249 532 mta_mode = MODE_DAEMON;
meillo@254 533 queue_interval = time_interval(optarg);
meillo@249 534 }
meillo@249 535
meillo@249 536 } else if (strcmp(opt, "t") == 0) {
meillo@249 537 opt_t = TRUE;
meillo@249 538
meillo@249 539 } else if (strcmp(opt, "v") == 0) {
meillo@249 540 do_verbose = TRUE;
meillo@249 541
meillo@10 542 } else {
meillo@249 543 fprintf(stderr, "unrecognized option `-%s'\n", opt);
meillo@249 544 exit(EXIT_FAILURE);
meillo@10 545 }
meillo@0 546 }
meillo@0 547
meillo@10 548 if (mta_mode == MODE_VERSION) {
meillo@12 549 gchar *with_resolver = "";
meillo@12 550 gchar *with_auth = "";
meillo@12 551 gchar *with_ident = "";
meillo@0 552
meillo@0 553 #ifdef ENABLE_RESOLVER
meillo@10 554 with_resolver = " +resolver";
meillo@0 555 #endif
meillo@0 556 #ifdef ENABLE_AUTH
meillo@10 557 with_auth = " +auth";
meillo@0 558 #endif
meillo@0 559 #ifdef ENABLE_IDENT
meillo@10 560 with_ident = " +ident";
meillo@0 561 #endif
meillo@0 562
meillo@205 563 printf("%s %s%s%s%s\n", PACKAGE, VERSION, with_resolver, with_auth, with_ident);
meillo@0 564
meillo@10 565 exit(EXIT_SUCCESS);
meillo@10 566 }
meillo@0 567
meillo@10 568 /* initialize random generator */
meillo@10 569 srand(time(NULL));
meillo@10 570 /* ignore SIGPIPE signal */
meillo@10 571 signal(SIGPIPE, SIG_IGN);
meillo@0 572
meillo@73 573 /* close all possibly open file descriptors, except std{in,out,err} */
meillo@10 574 {
meillo@10 575 int i, max_fd = sysconf(_SC_OPEN_MAX);
meillo@0 576
meillo@251 577 if (max_fd <= 0) {
meillo@10 578 max_fd = 64;
meillo@251 579 }
meillo@251 580 for (i=3; i<max_fd; i++) {
meillo@10 581 close(i);
meillo@251 582 }
meillo@10 583 }
meillo@0 584
meillo@10 585 init_conf();
meillo@0 586
meillo@10 587 /* if we are not privileged, and the config file was changed we
meillo@10 588 implicetely set the the run_as_user flag and give up all
meillo@10 589 privileges.
meillo@0 590
meillo@10 591 So it is possible for a user to run his own daemon without
meillo@10 592 breaking security.
meillo@10 593 */
meillo@251 594 if ((strcmp(conf_file, CONF_FILE) != 0) && (conf.orig_uid != 0)) {
meillo@251 595 conf.run_as_user = TRUE;
meillo@251 596 seteuid(conf.orig_uid);
meillo@251 597 setegid(conf.orig_gid);
meillo@251 598 setuid(conf.orig_uid);
meillo@251 599 setgid(conf.orig_gid);
meillo@10 600 }
meillo@0 601
meillo@155 602 conf.log_dir = LOG_DIR;
meillo@155 603 logopen();
meillo@155 604 if (!read_conf(conf_file)) {
meillo@155 605 logwrite(LOG_ALERT, "SHUTTING DOWN due to problems reading config\n");
meillo@155 606 exit(5);
meillo@155 607 }
meillo@155 608 logclose();
meillo@0 609
meillo@251 610 if (do_queue) {
meillo@10 611 conf.do_queue = TRUE;
meillo@251 612 }
meillo@251 613 if (do_verbose) {
meillo@10 614 conf.do_verbose = TRUE;
meillo@251 615 }
meillo@251 616 if (debug_level >= 0) { /* if >= 0, it was given by argument */
meillo@10 617 conf.debug_level = debug_level;
meillo@251 618 }
meillo@0 619
meillo@46 620 /* It appears that changing to / ensures that we are never in
meillo@46 621 a directory which we cannot access. This situation could be
meillo@46 622 possible after changing identity.
meillo@46 623 Maybe we should only change to / if we not run as user, to
meillo@46 624 allow relative paths for log files in test setups for
meillo@46 625 instance.
meillo@46 626 */
meillo@10 627 chdir("/");
meillo@0 628
meillo@10 629 if (!conf.run_as_user) {
meillo@10 630 if (setgid(0) != 0) {
meillo@10 631 fprintf(stderr, "could not set gid to 0. Is the setuid bit set? : %s\n", strerror(errno));
meillo@10 632 exit(EXIT_FAILURE);
meillo@10 633 }
meillo@10 634 if (setuid(0) != 0) {
meillo@10 635 fprintf(stderr, "could not gain root privileges. Is the setuid bit set? : %s\n", strerror(errno));
meillo@10 636 exit(EXIT_FAILURE);
meillo@10 637 }
meillo@10 638 }
meillo@0 639
meillo@10 640 if (!logopen()) {
meillo@10 641 fprintf(stderr, "could not open log file\n");
meillo@10 642 exit(EXIT_FAILURE);
meillo@10 643 }
meillo@0 644
meillo@10 645 DEBUG(1) debugf("masqmail %s starting\n", VERSION);
meillo@0 646
meillo@10 647 DEBUG(5) {
meillo@10 648 gchar **str = argv;
meillo@10 649 debugf("args: \n");
meillo@10 650 while (*str) {
meillo@10 651 debugf("%s \n", *str);
meillo@10 652 str++;
meillo@10 653 }
meillo@10 654 }
meillo@10 655 DEBUG(5) debugf("queue_interval = %d\n", queue_interval);
meillo@0 656
meillo@10 657 if (f_address) {
meillo@10 658 return_path = create_address_qualified(f_address, TRUE, conf.host_name);
meillo@10 659 g_free(f_address);
meillo@10 660 if (!return_path) {
meillo@10 661 fprintf(stderr, "invalid RFC821 address: %s\n", f_address);
meillo@10 662 exit(EXIT_FAILURE);
meillo@10 663 }
meillo@10 664 }
meillo@10 665
meillo@10 666 switch (mta_mode) {
meillo@10 667 case MODE_DAEMON:
meillo@10 668 mode_daemon(do_listen, queue_interval, argv);
meillo@10 669 break;
meillo@251 670
meillo@10 671 case MODE_RUNQUEUE:
meillo@251 672 exit(run_queue(do_runq, do_runq_online, route_name) ? 0 : 1);
meillo@10 673 break;
meillo@10 674
meillo@10 675 case MODE_SMTP:
meillo@10 676 mode_smtp();
meillo@10 677 break;
meillo@10 678
meillo@10 679 case MODE_LIST:
meillo@10 680 queue_list();
meillo@10 681 break;
meillo@10 682
meillo@10 683 case MODE_BI:
meillo@10 684 exit(EXIT_SUCCESS);
meillo@10 685 break; /* well... */
meillo@10 686
meillo@10 687 case MODE_MCMD:
meillo@250 688 exit(manipulate_queue(M_cmd, &argv[arg]) ? 0 : 1);
meillo@10 689 break;
meillo@10 690
meillo@10 691 case MODE_ACCEPT:
meillo@10 692 {
meillo@107 693 guint accept_flags = (opt_t ? ACC_DEL_RCPTS | ACC_RCPT_FROM_HEAD : 0)
meillo@110 694 | (opt_i ? ACC_DOT_IGNORE : ACC_NODOT_RELAX);
meillo@10 695 mode_accept(return_path, full_sender_name, accept_flags, &(argv[arg]), argc - arg);
meillo@10 696 exit(exit_failure ? EXIT_FAILURE : EXIT_SUCCESS);
meillo@10 697 }
meillo@10 698 break;
meillo@10 699 case MODE_NONE:
meillo@10 700 break;
meillo@251 701
meillo@10 702 default:
meillo@10 703 fprintf(stderr, "unknown mode: %d\n", mta_mode);
meillo@10 704 break;
meillo@0 705 }
meillo@0 706
meillo@10 707 logclose();
meillo@0 708
meillo@10 709 exit(exit_code);
meillo@0 710 }