masqmail: ad034b57f3b2 src/masqmail.c

masqmail

view src/masqmail.c @ 72:ad034b57f3b2

fixed Debian bug 536060 (log files are closed after SIGHUP receival) Explanation: When run in daemon mode, first the log files are opened. They get assigned to the file descriptors 3 and 4 usually. Then std{in,out,err} are closed. When SIGHUP comes in, all open files are closes and masqmail reexecutes itself. The new masqmail instance opens the log files at fd 0 and 1 now, but std{in,out,err} are closed afterwards, thus the log files are closed. The fix is to close the log files before std{in,out,err} are closed, in case the log files have higher fds. After std{in,out,err} were closed, the log files get opened again, now. See also: http://bugs.debian.org/536060

author	meillo@marmaro.de
date	Wed, 16 Jun 2010 10:32:20 +0200
parents	3cb6f383f07e
children	9db75b801dc4

line source

1 /* MasqMail

2 Copyright (C) 1999-2001 Oliver Kurth

4 This program is free software; you can redistribute it and/or modify

5 it under the terms of the GNU General Public License as published by

6 the Free Software Foundation; either version 2 of the License, or

7 (at your option) any later version.

9 This program is distributed in the hope that it will be useful,

10 but WITHOUT ANY WARRANTY; without even the implied warranty of

11 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the

12 GNU General Public License for more details.

14 You should have received a copy of the GNU General Public License

15 along with this program; if not, write to the Free Software

16 Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.

19 #include <stdio.h>

20 #include <errno.h>

21 #include <stdlib.h>

22 #include <string.h>

23 #include <unistd.h>

24 #include <sys/types.h>

25 #include <sys/socket.h>

26 #include <sys/time.h>

27 #include <netinet/in.h>

28 #include <netdb.h>

29 #include <syslog.h>

30 #include <signal.h>

32 #include <glib.h>

34 #include "masqmail.h"

36 /* mutually exclusive modes. Note that there is neither a 'get' mode

37 nor a 'queue daemon' mode. These, as well as the distinction beween

38 the two (non exclusive) daemon (queue and listen) modes are handled

39 by flags.*/

40 typedef enum _mta_mode {

41 MODE_ACCEPT = 0, /* accept message on stdin */

42 MODE_DAEMON, /* run as daemon */

43 MODE_RUNQUEUE, /* single queue run, online or offline */

44 MODE_GET_DAEMON, /* run as get (retrieve) daemon */

45 MODE_SMTP, /* accept SMTP on stdin */

46 MODE_LIST, /* list queue */

47 MODE_MCMD, /* do queue manipulation */

48 MODE_VERSION, /* show version */

49 MODE_BI, /* fake ;-) */

50 MODE_NONE /* to prevent default MODE_ACCEPT */

51 } mta_mode;

53 char *pidfile = NULL;

54 volatile int sigterm_in_progress = 0;

56 static void

57 sigterm_handler(int sig)

59 if (sigterm_in_progress)

60 raise(sig);

61 sigterm_in_progress = 1;

63 if (pidfile) {

64 uid_t uid;

65 uid = seteuid(0);

66 if (unlink(pidfile) != 0)

67 logwrite(LOG_WARNING, "could not delete pid file %s: %s\n", pidfile, strerror(errno));

68 seteuid(uid); /* we exit anyway after this, just to be sure */

71 signal(sig, SIG_DFL);

72 raise(sig);

75 #ifdef ENABLE_IDENT /* so far used for that only */

76 static gboolean

77 is_in_netlist(gchar * host, GList * netlist)

79 guint hostip = inet_addr(host);

80 struct in_addr addr;

82 addr.s_addr = hostip;

83 if (addr.s_addr != INADDR_NONE) {

84 GList *node;

85 foreach(netlist, node) {

86 struct in_addr *net = (struct in_addr *) (node->data);

87 if ((addr.s_addr & net->s_addr) == net->s_addr)

88 return TRUE;

91 return FALSE;

93 #endif

95 gchar*

96 get_optarg(char *argv[], gint argc, gint * argp, gint * pos)

98 if (argv[*argp][*pos])

99 return &(argv[*argp][*pos]);

100 else {

101 if (*argp + 1 < argc) {

102 if (argv[(*argp) + 1][0] != '-') {

103 (*argp)++;

104 *pos = 0;

105 return &(argv[*argp][*pos]);

106 }

109 return NULL;

112 gchar*

113 get_progname(gchar * arg0)

115 gchar *p = arg0 + strlen(arg0) - 1;

116 while (p > arg0) {

117 if (*p == '/')

118 return p + 1;

119 p--;

121 return p;

124 gboolean

125 write_pidfile(gchar * name)

127 FILE *fptr;

129 if ((fptr = fopen(name, "wt"))) {

130 fprintf(fptr, "%d\n", getpid());

131 fclose(fptr);

132 pidfile = strdup(name);

133 return TRUE;

135 logwrite(LOG_WARNING, "could not write pid file: %s\n", strerror(errno));

136 return FALSE;

139 static void

140 mode_daemon(gboolean do_listen, gint queue_interval, char *argv[])

142 guint pid;

144 /* daemon */

145 if (!conf.run_as_user) {

146 if ((conf.orig_uid != 0) && (conf.orig_uid != conf.mail_uid)) {

147 fprintf(stderr, "must be root or %s for daemon.\n", DEF_MAIL_USER);

148 exit(EXIT_FAILURE);

152 if ((pid = fork()) > 0) {

153 exit(EXIT_SUCCESS);

154 } else if (pid < 0) {

155 logwrite(LOG_ALERT, "could not fork!");

156 exit(EXIT_FAILURE);

159 signal(SIGTERM, sigterm_handler);

160 write_pidfile(PIDFILEDIR "/masqmail.pid");

162 conf.do_verbose = FALSE;

164 /* closing and reopening the log ensures that it is open afterwards

165 because it is possible that the log is assigned to fd 1 and gets

166 thus closes by fclose(stdout). Similar for the debugfile.

168 logclose();

169 fclose(stdin);

170 fclose(stdout);

171 fclose(stderr);

172 logopen();

174 listen_port(do_listen ? conf.listen_addresses : NULL, queue_interval, argv);

177 #ifdef ENABLE_POP3

178 static void

179 mode_get_daemon(gint get_interval, char *argv[])

181 guint pid;

183 /* daemon */

184 if (!conf.run_as_user) {

185 if ((conf.orig_uid != 0) && (conf.orig_uid != conf.mail_uid)) {

186 fprintf(stderr, "must be root or %s for daemon.\n", DEF_MAIL_USER);

187 exit(EXIT_FAILURE);

191 if ((pid = fork()) > 0) {

192 exit(EXIT_SUCCESS);

193 } else if (pid < 0) {

194 logwrite(LOG_ALERT, "could not fork!");

195 exit(EXIT_FAILURE);

198 signal(SIGTERM, sigterm_handler);

199 write_pidfile(PIDFILEDIR "/masqmail-get.pid");

201 conf.do_verbose = FALSE;

203 /* closing and reopening the log ensures that it is open afterwards

204 because it is possible that the log is assigned to fd 1 and gets

205 thus closes by fclose(stdout). Similar for the debugfile.

207 logclose();

208 fclose(stdin);

209 fclose(stdout);

210 fclose(stderr);

211 logopen();

213 get_daemon(get_interval, argv);

215 #endif

217 #ifdef ENABLE_SMTP_SERVER

218 static void

219 mode_smtp()

221 /* accept smtp message on stdin */

222 /* write responses to stderr. */

224 struct sockaddr_in saddr;

225 gchar *peername = NULL;

226 int dummy = sizeof(saddr);

228 conf.do_verbose = FALSE;

230 if (!conf.run_as_user) {

231 seteuid(conf.orig_uid);

232 setegid(conf.orig_gid);

235 DEBUG(5) debugf("accepting smtp message on stdin\n");

237 if (getpeername(0, (struct sockaddr *) (&saddr), &dummy) == 0) {

238 peername = g_strdup(inet_ntoa(saddr.sin_addr));

239 } else if (errno != ENOTSOCK)

240 exit(EXIT_FAILURE);

242 smtp_in(stdin, stderr, peername, NULL);

244 #endif

246 static void

247 mode_accept(address * return_path, gchar * full_sender_name, guint accept_flags, char **addresses, int addr_cnt)

249 /* accept message on stdin */

250 accept_error err;

251 message *msg = create_message();

252 gint i;

254 if (return_path != NULL) {

255 if ((conf.orig_uid != 0)

256 && (conf.orig_uid != conf.mail_uid)

257 && (!is_ingroup(conf.orig_uid, conf.mail_gid))) {

258 fprintf(stderr, "must be in root, %s or in group %s for setting return path.\n", DEF_MAIL_USER, DEF_MAIL_GROUP);

259 exit(EXIT_FAILURE);

263 if (!conf.run_as_user) {

264 seteuid(conf.orig_uid);

265 setegid(conf.orig_gid);

268 DEBUG(5) debugf("accepting message on stdin\n");

270 msg->received_prot = PROT_LOCAL;

271 for (i = 0; i < addr_cnt; i++) {

272 if (addresses[i][0] != '|')

273 msg->rcpt_list = g_list_append(msg->rcpt_list, create_address_qualified(addresses[i], TRUE, conf.host_name));

274 else {

275 logwrite(LOG_ALERT, "no pipe allowed as recipient address: %s\n", addresses[i]);

276 exit(EXIT_FAILURE);

280 /* -f option */

281 msg->return_path = return_path;

283 /* -F option */

284 msg->full_sender_name = full_sender_name;

286 if ((err = accept_message(stdin, msg, accept_flags)) == AERR_OK) {

287 if (spool_write(msg, TRUE)) {

288 pid_t pid;

289 logwrite(LOG_NOTICE, "%s <= %s with %s\n", msg->uid, addr_string(msg->return_path), prot_names[PROT_LOCAL]);

291 if (!conf.do_queue) {

292 if ((pid = fork()) == 0) {

293 conf.do_verbose = FALSE;

294 fclose(stdin);

295 fclose(stdout);

296 fclose(stderr);

297 if (deliver(msg)) {

298 exit(EXIT_SUCCESS);

299 } else

300 exit(EXIT_FAILURE);

301 } else if (pid < 0) {

302 logwrite(LOG_ALERT, "could not fork for delivery, id = %s", msg->uid);

303 }

304 }

305 } else {

306 fprintf(stderr, "Could not write spool file\n");

307 exit(EXIT_FAILURE);

309 } else {

310 switch (err) {

311 case AERR_EOF:

312 fprintf(stderr, "unexpected EOF.\n");

313 exit(EXIT_FAILURE);

314 case AERR_NORCPT:

315 fprintf(stderr, "no recipients.\n");

316 exit(EXIT_FAILURE);

317 default:

318 /* should never happen: */

319 fprintf(stderr, "Unknown error (%d)\r\n", err);

320 exit(EXIT_FAILURE);

322 exit(EXIT_FAILURE);

327 main(int argc, char *argv[])

329 /* cmd line flags */

330 gchar *conf_file = CONF_FILE;

331 gint arg = 1;

332 gboolean do_get = FALSE;

333 gboolean do_get_online = FALSE;

335 gboolean do_listen = FALSE;

336 gboolean do_runq = FALSE;

337 gboolean do_runq_online = FALSE;

339 gboolean do_queue = FALSE;

341 gboolean do_verbose = FALSE;

342 gint debug_level = -1;

344 mta_mode mta_mode = MODE_ACCEPT;

346 gint queue_interval = 0;

347 gint get_interval = 0;

348 gboolean opt_t = FALSE;

349 gboolean opt_i = FALSE;

350 gboolean opt_odb = FALSE;

351 gboolean opt_oem = FALSE;

352 gboolean exit_failure = FALSE;

354 gchar *M_cmd = NULL;

356 gint exit_code = EXIT_SUCCESS;

357 gchar *route_name = NULL;

358 gchar *get_name = NULL;

359 gchar *progname;

360 gchar *f_address = NULL;

361 gchar *full_sender_name = NULL;

362 address *return_path = NULL; /* may be changed by -f option */

364 progname = get_progname(argv[0]);

366 if (strcmp(progname, "mailq") == 0) {

367 mta_mode = MODE_LIST;

368 } else if (strcmp(progname, "mailrm") == 0) {

369 mta_mode = MODE_MCMD;

370 M_cmd = "rm";

371 } else if (strcmp(progname, "runq") == 0) {

372 mta_mode = MODE_RUNQUEUE;

373 do_runq = TRUE;

374 } else if (strcmp(progname, "rmail") == 0) {

375 mta_mode = MODE_ACCEPT;

376 opt_i = TRUE;

377 } else if (strcmp(progname, "smtpd") == 0 || strcmp(progname, "in.smtpd") == 0) {

378 mta_mode = MODE_SMTP;

381 /* parse cmd line */

382 while (arg < argc) {

383 gint pos = 0;

384 if ((argv[arg][pos] == '-') && (argv[arg][pos + 1] != '-')) {

385 pos++;

386 switch (argv[arg][pos++]) {

387 case 'b':

388 switch (argv[arg][pos++]) {

389 case 'd':

390 do_listen = TRUE;

391 mta_mode = MODE_DAEMON;

392 break;

393 case 'i':

394 /* ignored */

395 mta_mode = MODE_BI;

396 break;

397 case 's':

398 mta_mode = MODE_SMTP;

399 break;

400 case 'p':

401 mta_mode = MODE_LIST;

402 break;

403 case 'V':

404 mta_mode = MODE_VERSION;

405 break;

406 default:

407 fprintf(stderr, "unrecognized option '%s'\n", argv[arg]);

408 exit(EXIT_FAILURE);

409 }

410 break;

411 case 'B':

412 /* we ignore this and throw the argument away */

413 get_optarg(argv, argc, &arg, &pos);

414 break;

415 case 'C':

416 if (!(conf_file = get_optarg(argv, argc, &arg, &pos))) {

417 fprintf(stderr, "-C requires a filename as argument.\n");

418 exit(EXIT_FAILURE);

419 }

420 break;

421 case 'F':

422 {

423 full_sender_name = get_optarg(argv, argc, &arg, &pos);

424 if (!full_sender_name) {

425 fprintf(stderr, "-F requires a name as an argument\n");

426 exit(EXIT_FAILURE);

427 }

428 }

429 break;

430 case 'd':

431 if (getuid() == 0) {

432 char *lvl = get_optarg(argv, argc, &arg, &pos);

433 if (lvl)

434 debug_level = atoi(lvl);

435 else {

436 fprintf(stderr, "-d requires a number as an argument.\n");

437 exit(EXIT_FAILURE);

438 }

439 } else {

440 fprintf(stderr, "only root may set the debug level.\n");

441 exit(EXIT_FAILURE);

442 }

443 break;

444 case 'f':

445 /* set return path */

446 {

447 gchar *address;

448 address = get_optarg(argv, argc, &arg, &pos);

449 if (address) {

450 f_address = g_strdup(address);

451 } else {

452 fprintf(stderr, "-f requires an address as an argument\n");

453 exit(EXIT_FAILURE);

454 }

455 }

456 break;

457 case 'g':

458 do_get = TRUE;

459 if (!mta_mode)

460 mta_mode = MODE_NONE; /* to prevent default MODE_ACCEPT */

461 if (argv[arg][pos] == 'o') {

462 pos++;

463 do_get_online = TRUE;

464 /* can be NULL, then we use online detection method */

465 route_name = get_optarg(argv, argc, &arg, &pos);

467 if (route_name != NULL) {

468 if (isdigit(route_name[0])) {

469 get_interval = time_interval(route_name, &pos);

470 route_name = get_optarg(argv, argc, &arg, &pos);

471 mta_mode = MODE_GET_DAEMON;

472 do_get = FALSE;

473 }

474 }

475 } else {

476 if ((optarg = get_optarg(argv, argc, &arg, &pos))) {

477 get_name = get_optarg(argv, argc, &arg, &pos);

478 }

479 }

480 break;

481 case 'i':

482 if (argv[arg][pos] == 0) {

483 opt_i = TRUE;

484 exit_failure = FALSE; /* may override -oem */

485 } else {

486 fprintf(stderr, "unrecognized option '%s'\n", argv[arg]);

487 exit(EXIT_FAILURE);

488 }

489 break;

490 case 'M':

491 {

492 mta_mode = MODE_MCMD;

493 M_cmd = g_strdup(&(argv[arg][pos]));

494 }

495 break;

496 case 'o':

497 switch (argv[arg][pos++]) {

498 case 'e':

499 if (argv[arg][pos++] == 'm') /* -oem */

500 if (!opt_i)

501 exit_failure = TRUE;

502 opt_oem = TRUE;

503 break;

504 case 'd':

505 if (argv[arg][pos] == 'b') /* -odb */

506 opt_odb = TRUE;

507 else if (argv[arg][pos] == 'q') /* -odq */

508 do_queue = TRUE;

509 break;

510 case 'i':

511 opt_i = TRUE;

512 exit_failure = FALSE; /* may override -oem */

513 break;

514 }

515 break;

517 case 'q':

518 {

519 gchar *optarg;

521 do_runq = TRUE;

522 mta_mode = MODE_RUNQUEUE;

523 if (argv[arg][pos] == 'o') {

524 pos++;

525 do_runq = FALSE;

526 do_runq_online = TRUE;

527 /* can be NULL, then we use online detection method */

528 route_name = get_optarg(argv, argc, &arg, &pos);

529 } else

530 if ((optarg = get_optarg(argv, argc, &arg, &pos))) {

531 mta_mode = MODE_DAEMON;

532 queue_interval = time_interval(optarg, &pos);

533 }

534 }

535 break;

536 case 't':

537 if (argv[arg][pos] == 0) {

538 opt_t = TRUE;

539 } else {

540 fprintf(stderr, "unrecognized option '%s'\n", argv[arg]);

541 exit(EXIT_FAILURE);

542 }

543 break;

544 case 'v':

545 do_verbose = TRUE;

546 break;

547 default:

548 fprintf(stderr, "unrecognized option '%s'\n", argv[arg]);

549 exit(EXIT_FAILURE);

550 }

551 } else {

552 if (argv[arg][pos + 1] == '-') {

553 if (argv[arg][pos + 2] != '\0') {

554 fprintf(stderr, "unrecognized option '%s'\n", argv[arg]);

555 exit(EXIT_FAILURE);

556 }

557 arg++;

558 }

559 break;

561 arg++;

564 if (mta_mode == MODE_VERSION) {

565 gchar *with_resolver = "";

566 gchar *with_smtp_server = "";

567 gchar *with_pop3 = "";

568 gchar *with_auth = "";

569 gchar *with_maildir = "";

570 gchar *with_ident = "";

571 gchar *with_mserver = "";

573 #ifdef ENABLE_RESOLVER

574 with_resolver = " +resolver";

575 #endif

576 #ifdef ENABLE_SMTP_SERVER

577 with_smtp_server = " +smtp-server";

578 #endif

579 #ifdef ENABLE_POP3

580 with_pop3 = " +pop3";

581 #endif

582 #ifdef ENABLE_AUTH

583 with_auth = " +auth";

584 #endif

585 #ifdef ENABLE_MAILDIR

586 with_maildir = " +maildir";

587 #endif

588 #ifdef ENABLE_IDENT

589 with_ident = " +ident";

590 #endif

591 #ifdef ENABLE_MSERVER

592 with_mserver = " +mserver";

593 #endif

595 printf("%s %s%s%s%s%s%s%s%s\n", PACKAGE, VERSION, with_resolver, with_smtp_server,

596 with_pop3, with_auth, with_maildir, with_ident, with_mserver);

598 exit(EXIT_SUCCESS);

601 /* initialize random generator */

602 srand(time(NULL));

603 /* ignore SIGPIPE signal */

604 signal(SIGPIPE, SIG_IGN);

606 /* close all possibly open file descriptors */

608 int i, max_fd = sysconf(_SC_OPEN_MAX);

610 if (max_fd <= 0)

611 max_fd = 64;

612 for (i = 3; i < max_fd; i++)

613 close(i);

616 init_conf();

618 /* if we are not privileged, and the config file was changed we

619 implicetely set the the run_as_user flag and give up all

620 privileges.

622 So it is possible for a user to run his own daemon without

623 breaking security.

624 */

625 if (strcmp(conf_file, CONF_FILE) != 0) {

626 if (conf.orig_uid != 0) {

627 conf.run_as_user = TRUE;

628 seteuid(conf.orig_uid);

629 setegid(conf.orig_gid);

630 setuid(conf.orig_uid);

631 setgid(conf.orig_gid);

635 read_conf(conf_file);

637 if (do_queue)

638 conf.do_queue = TRUE;

639 if (do_verbose)

640 conf.do_verbose = TRUE;

641 if (debug_level >= 0) /* if >= 0, it was given by argument */

642 conf.debug_level = debug_level;

644 /* It appears that changing to / ensures that we are never in

645 a directory which we cannot access. This situation could be

646 possible after changing identity.

647 Maybe we should only change to / if we not run as user, to

648 allow relative paths for log files in test setups for

649 instance.

651 chdir("/");

653 if (!conf.run_as_user) {

654 if (setgid(0) != 0) {

655 fprintf(stderr, "could not set gid to 0. Is the setuid bit set? : %s\n", strerror(errno));

656 exit(EXIT_FAILURE);

658 if (setuid(0) != 0) {

659 fprintf(stderr, "could not gain root privileges. Is the setuid bit set? : %s\n", strerror(errno));

660 exit(EXIT_FAILURE);

664 if (!logopen()) {

665 fprintf(stderr, "could not open log file\n");

666 exit(EXIT_FAILURE);

669 DEBUG(1) debugf("masqmail %s starting\n", VERSION);

671 DEBUG(5) {

672 gchar **str = argv;

673 debugf("args: \n");

674 while (*str) {

675 debugf("%s \n", *str);

676 str++;

679 DEBUG(5) debugf("queue_interval = %d\n", queue_interval);

681 if (f_address) {

682 return_path = create_address_qualified(f_address, TRUE, conf.host_name);

683 g_free(f_address);

684 if (!return_path) {

685 fprintf(stderr, "invalid RFC821 address: %s\n", f_address);

686 exit(EXIT_FAILURE);

690 if (do_get) {

691 #ifdef ENABLE_POP3

692 if ((mta_mode == MODE_NONE) || (mta_mode == MODE_RUNQUEUE)) {

693 set_identity(conf.orig_uid, "getting mail");

694 if (do_get_online) {

695 if (route_name != NULL) {

696 conf.online_detect = g_strdup("argument");

697 set_online_name(route_name);

698 }

699 get_online();

700 } else {

701 if (get_name)

702 get_from_name(get_name);

703 else

704 get_all();

705 }

706 } else {

707 logwrite(LOG_ALERT, "get (-g) only allowed alone or together with queue run (-q)\n");

709 #else

710 fprintf(stderr, "get (pop) support not compiled in\n");

711 #endif

714 switch (mta_mode) {

715 case MODE_DAEMON:

716 mode_daemon(do_listen, queue_interval, argv);

717 break;

718 case MODE_RUNQUEUE:

720 /* queue runs */

721 set_identity(conf.orig_uid, "queue run");

723 if (do_runq)

724 exit_code = queue_run() ? EXIT_SUCCESS : EXIT_FAILURE;

726 if (do_runq_online) {

727 if (route_name != NULL) {

728 conf.online_detect = g_strdup("argument");

729 set_online_name(route_name);

730 }

731 exit_code =

732 queue_run_online() ? EXIT_SUCCESS : EXIT_FAILURE;

733 }

735 break;

736 case MODE_GET_DAEMON:

737 #ifdef ENABLE_POP3

738 if (route_name != NULL) {

739 conf.online_detect = g_strdup("argument");

740 set_online_name(route_name);

742 mode_get_daemon(get_interval, argv);

743 #endif

744 break;

746 case MODE_SMTP:

747 #ifdef ENABLE_SMTP_SERVER

748 mode_smtp();

749 #else

750 fprintf(stderr, "smtp server support not compiled in\n");

751 #endif

752 break;

754 case MODE_LIST:

755 queue_list();

756 break;

758 case MODE_BI:

759 exit(EXIT_SUCCESS);

760 break; /* well... */

762 case MODE_MCMD:

763 if (strcmp(M_cmd, "rm") == 0) {

764 gboolean ok = FALSE;

766 set_euidgid(conf.mail_uid, conf.mail_gid, NULL, NULL);

768 if (is_privileged_user(conf.orig_uid)) {

769 for (; arg < argc; arg++) {

770 if (queue_delete(argv[arg]))

771 ok = TRUE;

772 }

773 } else {

774 struct passwd *pw = getpwuid(conf.orig_uid);

775 if (pw) {

776 for (; arg < argc; arg++) {

777 message *msg = msg_spool_read(argv[arg], FALSE);

778 #ifdef ENABLE_IDENT

779 if (((msg->received_host == NULL) && (msg->received_prot == PROT_LOCAL))

780 || is_in_netlist(msg->received_host, conf.ident_trusted_nets)) {

781 #else

782 if ((msg->received_host == NULL) && (msg->received_prot == PROT_LOCAL)) {

783 #endif

784 if (msg->ident) {

785 if (strcmp(pw->pw_name, msg->ident) == 0) {

786 if (queue_delete(argv[arg]))

787 ok = TRUE;

788 } else {

789 fprintf(stderr, "you do not own message id %s\n", argv[arg]);

790 }

791 } else

792 fprintf(stderr, "message %s does not have an ident.\n", argv[arg]);

793 } else {

794 fprintf(stderr, "message %s was not received locally or from a trusted network.\n", argv[arg]);

795 }

796 }

797 } else {

798 fprintf(stderr, "could not find a passwd entry for uid %d: %s\n", conf.orig_uid, strerror(errno));

799 }

800 }

801 exit(ok ? EXIT_SUCCESS : EXIT_FAILURE);

802 } else {

803 fprintf(stderr, "unknown command %s\n", M_cmd);

804 exit(EXIT_FAILURE);

806 break;

808 case MODE_ACCEPT:

810 guint accept_flags = (opt_t ? ACC_DEL_RCPTS | ACC_DEL_BCC | ACC_RCPT_FROM_HEAD : ACC_HEAD_FROM_RCPT)

811 | (opt_i ? ACC_NODOT_TERM : ACC_NODOT_RELAX);

812 mode_accept(return_path, full_sender_name, accept_flags, &(argv[arg]), argc - arg);

813 exit(exit_failure ? EXIT_FAILURE : EXIT_SUCCESS);

815 break;

816 case MODE_NONE:

817 break;

818 default:

819 fprintf(stderr, "unknown mode: %d\n", mta_mode);

820 break;

823 logclose();

825 exit(exit_code);