meillo@0: /*  MasqMail
meillo@0:     Copyright (C) 1999-2001 Oliver Kurth
meillo@76:     Copyright (C) 2010 markus schnalke <meillo@marmaro.de>
meillo@0: 
meillo@0:     This program is free software; you can redistribute it and/or modify
meillo@0:     it under the terms of the GNU General Public License as published by
meillo@0:     the Free Software Foundation; either version 2 of the License, or
meillo@0:     (at your option) any later version.
meillo@0: 
meillo@0:     This program is distributed in the hope that it will be useful,
meillo@0:     but WITHOUT ANY WARRANTY; without even the implied warranty of
meillo@0:     MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
meillo@0:     GNU General Public License for more details.
meillo@0: 
meillo@0:     You should have received a copy of the GNU General Public License
meillo@0:     along with this program; if not, write to the Free Software
meillo@0:     Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
meillo@0: */
meillo@0: 
meillo@0: #include <stdio.h>
meillo@0: #include <errno.h>
meillo@0: #include <stdlib.h>
meillo@0: #include <string.h>
meillo@0: #include <unistd.h>
meillo@0: #include <sys/types.h>
meillo@0: #include <sys/socket.h>
meillo@0: #include <sys/time.h>
meillo@0: #include <netinet/in.h>
meillo@0: #include <netdb.h>
meillo@0: #include <syslog.h>
meillo@0: #include <signal.h>
meillo@0: 
meillo@0: #include <glib.h>
meillo@0: 
meillo@0: #include "masqmail.h"
meillo@0: 
meillo@192: /* mutually exclusive modes. Note that there is no 'queue daemon' mode.
meillo@192:    It, as well as the distinction beween the two (non exclusive) daemon
meillo@192:    (queue and listen) modes, is handled by flags.*/
meillo@10: typedef enum _mta_mode {
meillo@10: 	MODE_ACCEPT = 0,  /* accept message on stdin */
meillo@10: 	MODE_DAEMON,  /* run as daemon */
meillo@10: 	MODE_RUNQUEUE,  /* single queue run, online or offline */
meillo@10: 	MODE_SMTP,  /* accept SMTP on stdin */
meillo@10: 	MODE_LIST,  /* list queue */
meillo@10: 	MODE_MCMD,  /* do queue manipulation */
meillo@10: 	MODE_VERSION,  /* show version */
meillo@10: 	MODE_BI,  /* fake ;-) */
meillo@10: 	MODE_NONE  /* to prevent default MODE_ACCEPT */
meillo@10: } mta_mode;
meillo@0: 
meillo@0: char *pidfile = NULL;
meillo@0: volatile int sigterm_in_progress = 0;
meillo@0: 
meillo@10: static void
meillo@10: sigterm_handler(int sig)
meillo@0: {
meillo@10: 	if (sigterm_in_progress)
meillo@10: 		raise(sig);
meillo@10: 	sigterm_in_progress = 1;
meillo@0: 
meillo@10: 	if (pidfile) {
meillo@10: 		uid_t uid;
meillo@10: 		uid = seteuid(0);
meillo@10: 		if (unlink(pidfile) != 0)
meillo@10: 			logwrite(LOG_WARNING, "could not delete pid file %s: %s\n", pidfile, strerror(errno));
meillo@10: 		seteuid(uid);  /* we exit anyway after this, just to be sure */
meillo@10: 	}
meillo@0: 
meillo@10: 	signal(sig, SIG_DFL);
meillo@10: 	raise(sig);
meillo@0: }
meillo@0: 
meillo@10: #ifdef ENABLE_IDENT  /* so far used for that only */
meillo@10: static gboolean
meillo@10: is_in_netlist(gchar * host, GList * netlist)
meillo@0: {
meillo@10: 	guint hostip = inet_addr(host);
meillo@10: 	struct in_addr addr;
meillo@0: 
meillo@10: 	addr.s_addr = hostip;
meillo@10: 	if (addr.s_addr != INADDR_NONE) {
meillo@10: 		GList *node;
meillo@10: 		foreach(netlist, node) {
meillo@10: 			struct in_addr *net = (struct in_addr *) (node->data);
meillo@10: 			if ((addr.s_addr & net->s_addr) == net->s_addr)
meillo@10: 				return TRUE;
meillo@10: 		}
meillo@10: 	}
meillo@10: 	return FALSE;
meillo@0: }
meillo@0: #endif
meillo@0: 
meillo@249: /*
meillo@249: argv: the original argv
meillo@249: argp: number of arg (may get modified!)
meillo@249: cp: pointing to the char after the option
meillo@249:     e.g.  `-d 6'     `-d6'
meillo@249:              ^          ^
meillo@249: */
meillo@10: gchar*
meillo@249: get_optarg(char* argv[], gint* argp, char* cp)
meillo@0: {
meillo@249: 	if (*cp) {
meillo@249: 		/* this kind: -xval */
meillo@249: 		return cp;
meillo@249: 	}
meillo@249: 	cp = argv[*argp+1];
meillo@249: 	if (cp && (*cp != '-')) {
meillo@249: 		/* this kind: -x val */
meillo@249: 		(*argp)++;
meillo@249: 		return cp;
meillo@10: 	}
meillo@10: 	return NULL;
meillo@0: }
meillo@0: 
meillo@10: gchar*
meillo@10: get_progname(gchar * arg0)
meillo@0: {
meillo@10: 	gchar *p = arg0 + strlen(arg0) - 1;
meillo@10: 	while (p > arg0) {
meillo@10: 		if (*p == '/')
meillo@10: 			return p + 1;
meillo@10: 		p--;
meillo@10: 	}
meillo@10: 	return p;
meillo@0: }
meillo@0: 
meillo@10: gboolean
meillo@10: write_pidfile(gchar * name)
meillo@0: {
meillo@10: 	FILE *fptr;
meillo@0: 
meillo@10: 	if ((fptr = fopen(name, "wt"))) {
meillo@10: 		fprintf(fptr, "%d\n", getpid());
meillo@10: 		fclose(fptr);
meillo@10: 		pidfile = strdup(name);
meillo@10: 		return TRUE;
meillo@10: 	}
meillo@10: 	logwrite(LOG_WARNING, "could not write pid file: %s\n", strerror(errno));
meillo@10: 	return FALSE;
meillo@10: }
meillo@0: 
meillo@10: static void
meillo@10: mode_daemon(gboolean do_listen, gint queue_interval, char *argv[])
meillo@10: {
meillo@10: 	guint pid;
meillo@0: 
meillo@10: 	/* daemon */
meillo@10: 	if (!conf.run_as_user) {
meillo@10: 		if ((conf.orig_uid != 0) && (conf.orig_uid != conf.mail_uid)) {
meillo@10: 			fprintf(stderr, "must be root or %s for daemon.\n", DEF_MAIL_USER);
meillo@10: 			exit(EXIT_FAILURE);
meillo@10: 		}
meillo@10: 	}
meillo@0: 
meillo@74: 	/* reparent to init only if init is not already the parent */
meillo@74: 	if (getppid() != 1) {
meillo@74: 		if ((pid = fork()) > 0) {
meillo@74: 			exit(EXIT_SUCCESS);
meillo@74: 		} else if (pid < 0) {
meillo@208: 			logwrite(LOG_ALERT, "could not fork!\n");
meillo@74: 			exit(EXIT_FAILURE);
meillo@74: 		}
meillo@10: 	}
meillo@0: 
meillo@10: 	signal(SIGTERM, sigterm_handler);
meillo@10: 	write_pidfile(PIDFILEDIR "/masqmail.pid");
meillo@0: 
meillo@10: 	conf.do_verbose = FALSE;
meillo@10: 
meillo@72: 	/* closing and reopening the log ensures that it is open afterwards
meillo@72: 	   because it is possible that the log is assigned to fd 1 and gets
meillo@72: 	   thus closes by fclose(stdout). Similar for the debugfile.
meillo@72: 	*/
meillo@72: 	logclose();
meillo@10: 	fclose(stdin);
meillo@10: 	fclose(stdout);
meillo@10: 	fclose(stderr);
meillo@72: 	logopen();
meillo@10: 
meillo@208: 	logwrite(LOG_NOTICE, "%s %s daemon starting\n", PACKAGE, VERSION);
meillo@10: 	listen_port(do_listen ? conf.listen_addresses : NULL, queue_interval, argv);
meillo@0: }
meillo@0: 
meillo@10: static void
meillo@10: mode_smtp()
meillo@0: {
meillo@10: 	/* accept smtp message on stdin */
meillo@10: 	/* write responses to stderr. */
meillo@0: 
meillo@10: 	struct sockaddr_in saddr;
meillo@10: 	gchar *peername = NULL;
meillo@10: 	int dummy = sizeof(saddr);
meillo@0: 
meillo@10: 	conf.do_verbose = FALSE;
meillo@0: 
meillo@10: 	if (!conf.run_as_user) {
meillo@10: 		seteuid(conf.orig_uid);
meillo@10: 		setegid(conf.orig_gid);
meillo@10: 	}
meillo@0: 
meillo@10: 	DEBUG(5) debugf("accepting smtp message on stdin\n");
meillo@0: 
meillo@10: 	if (getpeername(0, (struct sockaddr *) (&saddr), &dummy) == 0) {
meillo@10: 		peername = g_strdup(inet_ntoa(saddr.sin_addr));
meillo@10: 	} else if (errno != ENOTSOCK)
meillo@10: 		exit(EXIT_FAILURE);
meillo@0: 
meillo@10: 	smtp_in(stdin, stderr, peername, NULL);
meillo@0: }
meillo@0: 
meillo@10: static void
meillo@10: mode_accept(address * return_path, gchar * full_sender_name, guint accept_flags, char **addresses, int addr_cnt)
meillo@0: {
meillo@10: 	/* accept message on stdin */
meillo@10: 	accept_error err;
meillo@10: 	message *msg = create_message();
meillo@10: 	gint i;
meillo@0: 
meillo@83: 	if (return_path && !is_privileged_user(conf.orig_uid)) {
meillo@96: 		fprintf(stderr, "must be root, %s or in group %s for setting return path.\n", DEF_MAIL_USER, DEF_MAIL_GROUP);
meillo@83: 		exit(EXIT_FAILURE);
meillo@10: 	}
meillo@0: 
meillo@10: 	if (!conf.run_as_user) {
meillo@10: 		seteuid(conf.orig_uid);
meillo@10: 		setegid(conf.orig_gid);
meillo@10: 	}
meillo@0: 
meillo@10: 	DEBUG(5) debugf("accepting message on stdin\n");
meillo@0: 
meillo@10: 	msg->received_prot = PROT_LOCAL;
meillo@10: 	for (i = 0; i < addr_cnt; i++) {
meillo@10: 		if (addresses[i][0] != '|')
meillo@10: 			msg->rcpt_list = g_list_append(msg->rcpt_list, create_address_qualified(addresses[i], TRUE, conf.host_name));
meillo@10: 		else {
meillo@10: 			logwrite(LOG_ALERT, "no pipe allowed as recipient address: %s\n", addresses[i]);
meillo@10: 			exit(EXIT_FAILURE);
meillo@10: 		}
meillo@10: 	}
meillo@0: 
meillo@10: 	/* -f option */
meillo@10: 	msg->return_path = return_path;
meillo@0: 
meillo@10: 	/* -F option */
meillo@10: 	msg->full_sender_name = full_sender_name;
meillo@0: 
meillo@10: 	if ((err = accept_message(stdin, msg, accept_flags)) == AERR_OK) {
meillo@10: 		if (spool_write(msg, TRUE)) {
meillo@10: 			pid_t pid;
meillo@10: 			logwrite(LOG_NOTICE, "%s <= %s with %s\n", msg->uid, addr_string(msg->return_path), prot_names[PROT_LOCAL]);
meillo@0: 
meillo@10: 			if (!conf.do_queue) {
meillo@10: 				if ((pid = fork()) == 0) {
meillo@10: 					conf.do_verbose = FALSE;
meillo@10: 					fclose(stdin);
meillo@10: 					fclose(stdout);
meillo@10: 					fclose(stderr);
meillo@10: 					if (deliver(msg)) {
meillo@10: 						exit(EXIT_SUCCESS);
meillo@10: 					} else
meillo@10: 						exit(EXIT_FAILURE);
meillo@10: 				} else if (pid < 0) {
meillo@208: 					logwrite(LOG_ALERT, "could not fork for delivery, id = %s\n", msg->uid);
meillo@10: 				}
meillo@10: 			}
meillo@10: 		} else {
meillo@10: 			fprintf(stderr, "Could not write spool file\n");
meillo@10: 			exit(EXIT_FAILURE);
meillo@10: 		}
meillo@10: 	} else {
meillo@10: 		switch (err) {
meillo@10: 		case AERR_EOF:
meillo@10: 			fprintf(stderr, "unexpected EOF.\n");
meillo@10: 			exit(EXIT_FAILURE);
meillo@10: 		case AERR_NORCPT:
meillo@10: 			fprintf(stderr, "no recipients.\n");
meillo@10: 			exit(EXIT_FAILURE);
meillo@117: 		case AERR_SIZE:
meillo@117: 			fprintf(stderr, "max message size exceeded.\n");
meillo@117: 			exit(EXIT_FAILURE);
meillo@10: 		default:
meillo@10: 			/* should never happen: */
meillo@10: 			fprintf(stderr, "Unknown error (%d)\r\n", err);
meillo@10: 			exit(EXIT_FAILURE);
meillo@10: 		}
meillo@10: 		exit(EXIT_FAILURE);
meillo@0: 	}
meillo@0: }
meillo@0: 
meillo@0: int
meillo@0: main(int argc, char *argv[])
meillo@0: {
meillo@10: 	/* cmd line flags */
meillo@10: 	gchar *conf_file = CONF_FILE;
meillo@249: 	char* opt;
meillo@249: 	gint arg;
meillo@0: 
meillo@10: 	gboolean do_listen = FALSE;
meillo@10: 	gboolean do_runq = FALSE;
meillo@10: 	gboolean do_runq_online = FALSE;
meillo@0: 
meillo@10: 	gboolean do_queue = FALSE;
meillo@0: 
meillo@10: 	gboolean do_verbose = FALSE;
meillo@10: 	gint debug_level = -1;
meillo@0: 
meillo@10: 	mta_mode mta_mode = MODE_ACCEPT;
meillo@0: 
meillo@10: 	gint queue_interval = 0;
meillo@10: 	gboolean opt_t = FALSE;
meillo@10: 	gboolean opt_i = FALSE;
meillo@10: 	gboolean exit_failure = FALSE;
meillo@0: 
meillo@10: 	gchar *M_cmd = NULL;
meillo@0: 
meillo@10: 	gint exit_code = EXIT_SUCCESS;
meillo@10: 	gchar *route_name = NULL;
meillo@10: 	gchar *progname;
meillo@10: 	gchar *f_address = NULL;
meillo@10: 	gchar *full_sender_name = NULL;
meillo@10: 	address *return_path = NULL;  /* may be changed by -f option */
meillo@0: 
meillo@10: 	progname = get_progname(argv[0]);
meillo@0: 
meillo@10: 	if (strcmp(progname, "mailq") == 0) {
meillo@10: 		mta_mode = MODE_LIST;
meillo@10: 	} else if (strcmp(progname, "mailrm") == 0) {
meillo@10: 		mta_mode = MODE_MCMD;
meillo@10: 		M_cmd = "rm";
meillo@10: 	} else if (strcmp(progname, "runq") == 0) {
meillo@10: 		mta_mode = MODE_RUNQUEUE;
meillo@10: 		do_runq = TRUE;
meillo@10: 	} else if (strcmp(progname, "rmail") == 0) {
meillo@89: 		/* the `rmail' alias should probably be removed now
meillo@89: 		   that we have the rmail script. But let's keep it
meillo@89: 		   for some while for compatibility. 2010-06-19 */
meillo@10: 		mta_mode = MODE_ACCEPT;
meillo@10: 		opt_i = TRUE;
meillo@10: 	} else if (strcmp(progname, "smtpd") == 0 || strcmp(progname, "in.smtpd") == 0) {
meillo@10: 		mta_mode = MODE_SMTP;
meillo@10: 	}
meillo@0: 
meillo@10: 	/* parse cmd line */
meillo@249: 	for (arg=1; arg<argc && argv[arg][0]=='-'; arg++) {
meillo@249: 		opt = argv[arg] + 1;
meillo@10: 
meillo@249: 		if (strcmp(opt, "-") == 0) {
meillo@249: 			/* everything after `--' are address arguments */
meillo@249: 			arg++;
meillo@249: 			break;
meillo@10: 
meillo@249: 		} else if (strcmp(opt, "bd") == 0) {
meillo@249: 			do_listen = TRUE;
meillo@249: 			mta_mode = MODE_DAEMON;
meillo@249: 
meillo@249: 		} else if (strcmp(opt, "bi") == 0) {
meillo@249: 			/* ignored */
meillo@249: 			mta_mode = MODE_BI;
meillo@249: 
meillo@249: 		} else if (strcmp(opt, "bs") == 0) {
meillo@249: 			mta_mode = MODE_SMTP;
meillo@249: 
meillo@249: 		} else if (strcmp(opt, "bp") == 0) {
meillo@249: 			mta_mode = MODE_LIST;
meillo@249: 
meillo@249: 		} else if (strcmp(opt, "bV") == 0) {
meillo@249: 			mta_mode = MODE_VERSION;
meillo@249: 
meillo@249: 		} else if (strncmp(opt, "B", 1) == 0) {
meillo@249: 			/* we ignore this and throw the argument away */
meillo@249: 			get_optarg(argv, &arg, opt+1);
meillo@249: 
meillo@249: 		} else if (strncmp(opt, "C", 1) == 0) {
meillo@249: 			if (!(conf_file = get_optarg(argv, &arg, opt+1))) {
meillo@249: 				fprintf(stderr, "-C requires a filename as argument.\n");
meillo@10: 				exit(EXIT_FAILURE);
meillo@10: 			}
meillo@249: 
meillo@249: 		} else if (strncmp(opt, "d", 1) == 0) {
meillo@249: 			if (getuid() != 0) {
meillo@249: 				fprintf(stderr, "only root may set the debug level.\n");
meillo@249: 				exit(EXIT_FAILURE);
meillo@249: 			}
meillo@249: 			char *lvl = get_optarg(argv, &arg, opt+1);
meillo@249: 			if (!lvl) {
meillo@249: 				fprintf(stderr, "-d requires a number argument.\n");
meillo@249: 				exit(EXIT_FAILURE);
meillo@249: 			}
meillo@249: 			debug_level = atoi(lvl);
meillo@249: 
meillo@249: 		} else if (strncmp(opt, "f", 1) == 0) {
meillo@249: 			/* set return path */
meillo@249: 			gchar *address = get_optarg(argv, &arg, opt+1);
meillo@249: 			if (!address) {
meillo@249: 				fprintf(stderr, "-f requires an address argument\n");
meillo@249: 				exit(EXIT_FAILURE);
meillo@249: 			}
meillo@249: 			f_address = g_strdup(address);
meillo@249: 
meillo@249: 		} else if (strncmp(opt, "F", 1) == 0) {
meillo@249: 			full_sender_name = get_optarg(argv, &arg, opt+1);
meillo@249: 			if (!full_sender_name) {
meillo@249: 				fprintf(stderr, "-F requires a name argument\n");
meillo@249: 				exit(EXIT_FAILURE);
meillo@249: 			}
meillo@249: 
meillo@249: 		} else if (strcmp(opt, "i") == 0) {
meillo@249: 			opt_i = TRUE;
meillo@249: 			exit_failure = FALSE;  /* may override -oem */
meillo@249: 
meillo@249: 		} else if (strcmp(opt, "m") == 0) {
meillo@249: 			/* ignore -m (me too) switch (see man page) */
meillo@249: 
meillo@249: 		} else if (strcmp(opt, "Mrm") == 0) {
meillo@249: 			mta_mode = MODE_MCMD;
meillo@249: 			M_cmd = "rm";
meillo@249: 
meillo@249: 		} else if (strcmp(opt, "odq") == 0) {
meillo@249: 			do_queue = TRUE;
meillo@249: 
meillo@249: 		} else if (strcmp(opt, "oem") == 0) {
meillo@249: 			if (!opt_i) {
meillo@249: 				/* TODO: Why is this related to -i in any way? */
meillo@249: 				exit_failure = TRUE;
meillo@249: 			}
meillo@249: 
meillo@249: 		} else if (strcmp(opt, "oi") == 0) {
meillo@249: 			exit_failure = FALSE;  /* may override -oem */
meillo@249: 
meillo@249: 		} else if (strncmp(opt, "o", 1) == 0) {
meillo@249: 			/* ignore all other -oXXX options */
meillo@249: 
meillo@249: 		} else if (strncmp(opt, "qo", 2) == 0) {
meillo@249: 			mta_mode = MODE_RUNQUEUE;
meillo@249: 			do_runq = FALSE;
meillo@249: 			do_runq_online = TRUE;
meillo@249: 			/* can be NULL, then we use online detection method */
meillo@249: 			route_name = get_optarg(argv, &arg, opt+2);
meillo@249: 
meillo@249: 		} else if (strncmp(opt, "q", 1) == 0) {
meillo@249: 			/* must be after the `qo' check */
meillo@249: 			gchar *optarg;
meillo@249: 			int dummy;
meillo@249: 
meillo@249: 			do_runq = TRUE;
meillo@249: 			mta_mode = MODE_RUNQUEUE;
meillo@249: 			if ((optarg = get_optarg(argv, &arg, opt+1))) {
meillo@249: 				mta_mode = MODE_DAEMON;
meillo@249: 				queue_interval = time_interval(optarg, &dummy);
meillo@249: 			}
meillo@249: 
meillo@249: 		} else if (strcmp(opt, "t") == 0) {
meillo@249: 			opt_t = TRUE;
meillo@249: 
meillo@249: 		} else if (strcmp(opt, "v") == 0) {
meillo@249: 			do_verbose = TRUE;
meillo@249: 
meillo@10: 		} else {
meillo@249: 			fprintf(stderr, "unrecognized option `-%s'\n", opt);
meillo@249: 			exit(EXIT_FAILURE);
meillo@10: 		}
meillo@0: 	}
meillo@0: 
meillo@10: 	if (mta_mode == MODE_VERSION) {
meillo@12: 		gchar *with_resolver = "";
meillo@12: 		gchar *with_auth = "";
meillo@12: 		gchar *with_ident = "";
meillo@0: 
meillo@0: #ifdef ENABLE_RESOLVER
meillo@10: 		with_resolver = " +resolver";
meillo@0: #endif
meillo@0: #ifdef ENABLE_AUTH
meillo@10: 		with_auth = " +auth";
meillo@0: #endif
meillo@0: #ifdef ENABLE_IDENT
meillo@10: 		with_ident = " +ident";
meillo@0: #endif
meillo@0: 
meillo@205: 		printf("%s %s%s%s%s\n", PACKAGE, VERSION, with_resolver, with_auth, with_ident);
meillo@0: 
meillo@10: 		exit(EXIT_SUCCESS);
meillo@10: 	}
meillo@0: 
meillo@10: 	/* initialize random generator */
meillo@10: 	srand(time(NULL));
meillo@10: 	/* ignore SIGPIPE signal */
meillo@10: 	signal(SIGPIPE, SIG_IGN);
meillo@0: 
meillo@73: 	/* close all possibly open file descriptors, except std{in,out,err} */
meillo@10: 	{
meillo@10: 		int i, max_fd = sysconf(_SC_OPEN_MAX);
meillo@0: 
meillo@10: 		if (max_fd <= 0)
meillo@10: 			max_fd = 64;
meillo@10: 		for (i = 3; i < max_fd; i++)
meillo@10: 			close(i);
meillo@10: 	}
meillo@0: 
meillo@10: 	init_conf();
meillo@0: 
meillo@10: 	/* if we are not privileged, and the config file was changed we
meillo@10: 	   implicetely set the the run_as_user flag and give up all
meillo@10: 	   privileges.
meillo@0: 
meillo@10: 	   So it is possible for a user to run his own daemon without
meillo@10: 	   breaking security.
meillo@10: 	 */
meillo@10: 	if (strcmp(conf_file, CONF_FILE) != 0) {
meillo@10: 		if (conf.orig_uid != 0) {
meillo@10: 			conf.run_as_user = TRUE;
meillo@10: 			seteuid(conf.orig_uid);
meillo@10: 			setegid(conf.orig_gid);
meillo@10: 			setuid(conf.orig_uid);
meillo@10: 			setgid(conf.orig_gid);
meillo@10: 		}
meillo@10: 	}
meillo@0: 
meillo@155: 	conf.log_dir = LOG_DIR;
meillo@155: 	logopen();
meillo@155: 	if (!read_conf(conf_file)) {
meillo@155: 		logwrite(LOG_ALERT, "SHUTTING DOWN due to problems reading config\n");
meillo@155: 		exit(5);
meillo@155: 	}
meillo@155: 	logclose();
meillo@0: 
meillo@10: 	if (do_queue)
meillo@10: 		conf.do_queue = TRUE;
meillo@10: 	if (do_verbose)
meillo@10: 		conf.do_verbose = TRUE;
meillo@10: 	if (debug_level >= 0)  /* if >= 0, it was given by argument */
meillo@10: 		conf.debug_level = debug_level;
meillo@0: 
meillo@46: 	/* It appears that changing to / ensures that we are never in
meillo@46: 	   a directory which we cannot access. This situation could be
meillo@46: 	   possible after changing identity.
meillo@46: 	   Maybe we should only change to / if we not run as user, to
meillo@46: 	   allow relative paths for log files in test setups for
meillo@46: 	   instance.
meillo@46: 	*/
meillo@10: 	chdir("/");
meillo@0: 
meillo@10: 	if (!conf.run_as_user) {
meillo@10: 		if (setgid(0) != 0) {
meillo@10: 			fprintf(stderr, "could not set gid to 0. Is the setuid bit set? : %s\n", strerror(errno));
meillo@10: 			exit(EXIT_FAILURE);
meillo@10: 		}
meillo@10: 		if (setuid(0) != 0) {
meillo@10: 			fprintf(stderr, "could not gain root privileges. Is the setuid bit set? : %s\n", strerror(errno));
meillo@10: 			exit(EXIT_FAILURE);
meillo@10: 		}
meillo@10: 	}
meillo@0: 
meillo@10: 	if (!logopen()) {
meillo@10: 		fprintf(stderr, "could not open log file\n");
meillo@10: 		exit(EXIT_FAILURE);
meillo@10: 	}
meillo@0: 
meillo@10: 	DEBUG(1) debugf("masqmail %s starting\n", VERSION);
meillo@0: 
meillo@10: 	DEBUG(5) {
meillo@10: 		gchar **str = argv;
meillo@10: 		debugf("args: \n");
meillo@10: 		while (*str) {
meillo@10: 			debugf("%s \n", *str);
meillo@10: 			str++;
meillo@10: 		}
meillo@10: 	}
meillo@10: 	DEBUG(5) debugf("queue_interval = %d\n", queue_interval);
meillo@0: 
meillo@10: 	if (f_address) {
meillo@10: 		return_path = create_address_qualified(f_address, TRUE, conf.host_name);
meillo@10: 		g_free(f_address);
meillo@10: 		if (!return_path) {
meillo@10: 			fprintf(stderr, "invalid RFC821 address: %s\n", f_address);
meillo@10: 			exit(EXIT_FAILURE);
meillo@10: 		}
meillo@10: 	}
meillo@10: 
meillo@10: 	switch (mta_mode) {
meillo@10: 	case MODE_DAEMON:
meillo@10: 		mode_daemon(do_listen, queue_interval, argv);
meillo@10: 		break;
meillo@10: 	case MODE_RUNQUEUE:
meillo@10: 		{
meillo@10: 			/* queue runs */
meillo@10: 			set_identity(conf.orig_uid, "queue run");
meillo@0: 
meillo@10: 			if (do_runq)
meillo@10: 				exit_code = queue_run() ? EXIT_SUCCESS : EXIT_FAILURE;
meillo@10: 
meillo@10: 			if (do_runq_online) {
meillo@10: 				if (route_name != NULL) {
meillo@10: 					conf.online_detect = g_strdup("argument");
meillo@10: 					set_online_name(route_name);
meillo@10: 				}
meillo@10: 				exit_code =
meillo@10: 					queue_run_online() ? EXIT_SUCCESS : EXIT_FAILURE;
meillo@10: 			}
meillo@10: 		}
meillo@10: 		break;
meillo@10: 
meillo@10: 	case MODE_SMTP:
meillo@10: 		mode_smtp();
meillo@10: 		break;
meillo@10: 
meillo@10: 	case MODE_LIST:
meillo@10: 		queue_list();
meillo@10: 		break;
meillo@10: 
meillo@10: 	case MODE_BI:
meillo@10: 		exit(EXIT_SUCCESS);
meillo@10: 		break;  /* well... */
meillo@10: 
meillo@10: 	case MODE_MCMD:
meillo@10: 		if (strcmp(M_cmd, "rm") == 0) {
meillo@10: 			gboolean ok = FALSE;
meillo@10: 
meillo@10: 			set_euidgid(conf.mail_uid, conf.mail_gid, NULL, NULL);
meillo@10: 
meillo@10: 			if (is_privileged_user(conf.orig_uid)) {
meillo@10: 				for (; arg < argc; arg++) {
meillo@10: 					if (queue_delete(argv[arg]))
meillo@10: 						ok = TRUE;
meillo@10: 				}
meillo@10: 			} else {
meillo@10: 				struct passwd *pw = getpwuid(conf.orig_uid);
meillo@10: 				if (pw) {
meillo@10: 					for (; arg < argc; arg++) {
meillo@10: 						message *msg = msg_spool_read(argv[arg], FALSE);
meillo@10: #ifdef ENABLE_IDENT
meillo@10: 						if (((msg->received_host == NULL) && (msg->received_prot == PROT_LOCAL))
meillo@248: 						    || is_in_netlist(msg->received_host, conf.ident_trusted_nets))
meillo@10: #else
meillo@248: 						if ((msg->received_host == NULL) && (msg->received_prot == PROT_LOCAL))
meillo@10: #endif
meillo@248: 						{
meillo@10: 							if (msg->ident) {
meillo@10: 								if (strcmp(pw->pw_name, msg->ident) == 0) {
meillo@10: 									if (queue_delete(argv[arg]))
meillo@10: 										ok = TRUE;
meillo@10: 								} else {
meillo@10: 									fprintf(stderr, "you do not own message id %s\n", argv[arg]);
meillo@10: 								}
meillo@10: 							} else
meillo@10: 								fprintf(stderr, "message %s does not have an ident.\n", argv[arg]);
meillo@10: 						} else {
meillo@10: 							fprintf(stderr, "message %s was not received locally or from a trusted network.\n", argv[arg]);
meillo@10: 						}
meillo@10: 					}
meillo@10: 				} else {
meillo@10: 					fprintf(stderr, "could not find a passwd entry for uid %d: %s\n", conf.orig_uid, strerror(errno));
meillo@10: 				}
meillo@10: 			}
meillo@10: 			exit(ok ? EXIT_SUCCESS : EXIT_FAILURE);
meillo@10: 		} else {
meillo@10: 			fprintf(stderr, "unknown command %s\n", M_cmd);
meillo@10: 			exit(EXIT_FAILURE);
meillo@10: 		}
meillo@10: 		break;
meillo@10: 
meillo@10: 	case MODE_ACCEPT:
meillo@10: 		{
meillo@107: 			guint accept_flags = (opt_t ? ACC_DEL_RCPTS | ACC_RCPT_FROM_HEAD : 0)
meillo@110: 			                     | (opt_i ? ACC_DOT_IGNORE : ACC_NODOT_RELAX);
meillo@10: 			mode_accept(return_path, full_sender_name, accept_flags, &(argv[arg]), argc - arg);
meillo@10: 			exit(exit_failure ? EXIT_FAILURE : EXIT_SUCCESS);
meillo@10: 		}
meillo@10: 		break;
meillo@10: 	case MODE_NONE:
meillo@10: 		break;
meillo@10: 	default:
meillo@10: 		fprintf(stderr, "unknown mode: %d\n", mta_mode);
meillo@10: 		break;
meillo@0: 	}
meillo@0: 
meillo@10: 	logclose();
meillo@0: 
meillo@10: 	exit(exit_code);
meillo@0: }