Fix CVE-2016-1531
[exim.git] / src / src / globals.c
1 /*************************************************
2 *     Exim - an Internet mail transport agent    *
3 *************************************************/
4
5 /* Copyright (c) University of Cambridge 1995 - 2014 */
6 /* See the file NOTICE for conditions of use and distribution. */
7
8 /* All the global variables are defined together in this one module, so
9 that they are easy to find. */
10
11 #include "exim.h"
12
13
14 /* Generic options for auths, all of which live inside auth_instance
15 data blocks and hence have the opt_public flag set. */
16
17 optionlist optionlist_auths[] = {
18   { "client_condition", opt_stringptr | opt_public,
19                  (void *)(offsetof(auth_instance, client_condition)) },
20   { "client_set_id", opt_stringptr | opt_public,
21                  (void *)(offsetof(auth_instance, set_client_id)) },
22   { "driver",        opt_stringptr | opt_public,
23                  (void *)(offsetof(auth_instance, driver_name)) },
24   { "public_name",   opt_stringptr | opt_public,
25                  (void *)(offsetof(auth_instance, public_name)) },
26   { "server_advertise_condition", opt_stringptr | opt_public,
27                  (void *)(offsetof(auth_instance, advertise_condition))},
28   { "server_condition", opt_stringptr | opt_public,
29                  (void *)(offsetof(auth_instance, server_condition)) },
30   { "server_debug_print", opt_stringptr | opt_public,
31                  (void *)(offsetof(auth_instance, server_debug_string)) },
32   { "server_mail_auth_condition", opt_stringptr | opt_public,
33                  (void *)(offsetof(auth_instance, mail_auth_condition)) },
34   { "server_set_id", opt_stringptr | opt_public,
35                  (void *)(offsetof(auth_instance, set_id)) }
36 };
37
38 int     optionlist_auths_size = sizeof(optionlist_auths)/sizeof(optionlist);
39
40 /* An empty host aliases list. */
41
42 uschar *no_aliases             = NULL;
43
44
45 /* For comments on these variables, see globals.h. I'm too idle to
46 duplicate them here... */
47
48 #ifdef EXIM_PERL
49 uschar *opt_perl_startup       = NULL;
50 BOOL    opt_perl_at_start      = FALSE;
51 BOOL    opt_perl_started       = FALSE;
52 #endif
53
54 #ifdef EXPAND_DLFUNC
55 tree_node *dlobj_anchor        = NULL;
56 #endif
57
58 #ifdef LOOKUP_IBASE
59 uschar *ibase_servers          = NULL;
60 #endif
61
62 #ifdef LOOKUP_LDAP
63 uschar *eldap_ca_cert_dir      = NULL;
64 uschar *eldap_ca_cert_file     = NULL;
65 uschar *eldap_cert_file        = NULL;
66 uschar *eldap_cert_key         = NULL;
67 uschar *eldap_cipher_suite     = NULL;
68 uschar *eldap_default_servers  = NULL;
69 uschar *eldap_require_cert     = NULL;
70 int     eldap_version          = -1;
71 BOOL    eldap_start_tls        = FALSE;
72 #endif
73
74 #ifdef LOOKUP_MYSQL
75 uschar *mysql_servers          = NULL;
76 #endif
77
78 #ifdef LOOKUP_ORACLE
79 uschar *oracle_servers         = NULL;
80 #endif
81
82 #ifdef LOOKUP_PGSQL
83 uschar *pgsql_servers          = NULL;
84 #endif
85
86 #ifdef EXPERIMENTAL_REDIS
87 uschar *redis_servers          = NULL;
88 #endif
89
90 #ifdef LOOKUP_SQLITE
91 int     sqlite_lock_timeout    = 5;
92 #endif
93
94 #ifdef SUPPORT_MOVE_FROZEN_MESSAGES
95 BOOL    move_frozen_messages   = FALSE;
96 #endif
97
98 /* These variables are outside the #ifdef because it keeps the code less
99 cluttered in several places (e.g. during logging) if we can always refer to
100 them. Also, the tls_ variables are now always visible. */
101
102 tls_support tls_in = {
103  -1,   /* tls_active */
104  0,    /* tls_bits */
105  FALSE,/* tls_certificate_verified */
106  NULL, /* tls_cipher */
107  FALSE,/* tls_on_connect */
108  NULL, /* tls_on_connect_ports */
109  NULL, /* tls_ourcert */
110  NULL, /* tls_peercert */
111  NULL, /* tls_peerdn */
112  NULL, /* tls_sni */
113  0     /* tls_ocsp */
114 };
115 tls_support tls_out = {
116  -1,   /* tls_active */
117  0,    /* tls_bits */
118  FALSE,/* tls_certificate_verified */
119  NULL, /* tls_cipher */
120  FALSE,/* tls_on_connect */
121  NULL, /* tls_on_connect_ports */
122  NULL, /* tls_ourcert */
123  NULL, /* tls_peercert */
124  NULL, /* tls_peerdn */
125  NULL, /* tls_sni */
126  0     /* tls_ocsp */
127 };
128
129 #ifdef EXPERIMENTAL_DSN
130 uschar *dsn_envid              = NULL;
131 int     dsn_ret                = 0;
132 const pcre  *regex_DSN         = NULL;
133 BOOL    smtp_use_dsn           = FALSE;
134 uschar *dsn_advertise_hosts    = NULL;
135 #endif
136
137 #ifdef SUPPORT_TLS
138 BOOL    gnutls_compat_mode     = FALSE;
139 BOOL    gnutls_allow_auto_pkcs11 = FALSE;
140 uschar *gnutls_require_mac     = NULL;
141 uschar *gnutls_require_kx      = NULL;
142 uschar *gnutls_require_proto   = NULL;
143 uschar *openssl_options        = NULL;
144 const pcre *regex_STARTTLS     = NULL;
145 uschar *tls_advertise_hosts    = NULL;    /* This is deliberate */
146 uschar *tls_certificate        = NULL;
147 uschar *tls_crl                = NULL;
148 /* This default matches NSS DH_MAX_P_BITS value at current time (2012), because
149 that's the interop problem which has been observed: GnuTLS suggesting a higher
150 bit-count as "NORMAL" (2432) and Thunderbird dropping connection. */
151 int     tls_dh_max_bits        = 2236;
152 uschar *tls_dhparam            = NULL;
153 #ifndef DISABLE_OCSP
154 uschar *tls_ocsp_file          = NULL;
155 #endif
156 BOOL    tls_offered            = FALSE;
157 uschar *tls_privatekey         = NULL;
158 BOOL    tls_remember_esmtp     = FALSE;
159 uschar *tls_require_ciphers    = NULL;
160 uschar *tls_try_verify_hosts   = NULL;
161 uschar *tls_verify_certificates= NULL;
162 uschar *tls_verify_hosts       = NULL;
163 #endif
164
165 #ifndef DISABLE_PRDR
166 /* Per Recipient Data Response variables */
167 BOOL    prdr_enable            = FALSE;
168 BOOL    prdr_requested         = FALSE;
169 const pcre *regex_PRDR         = NULL;
170 #endif
171
172 /* Input-reading functions for messages, so we can use special ones for
173 incoming TCP/IP. The defaults use stdin. We never need these for any
174 stand-alone tests. */
175
176 #ifndef STAND_ALONE
177 int (*receive_getc)(void)      = stdin_getc;
178 int (*receive_ungetc)(int)     = stdin_ungetc;
179 int (*receive_feof)(void)      = stdin_feof;
180 int (*receive_ferror)(void)    = stdin_ferror;
181 BOOL (*receive_smtp_buffered)(void) = NULL;   /* Only used for SMTP */
182 #endif
183
184
185 /* List of per-address expansion variables for clearing and saving/restoring
186 when verifying one address while routing/verifying another. We have to have
187 the size explicit, because it is referenced from more than one module. */
188
189 uschar **address_expansions[ADDRESS_EXPANSIONS_COUNT] = {
190   &deliver_address_data,
191   &deliver_domain,
192   &deliver_domain_data,
193   &deliver_domain_orig,
194   &deliver_domain_parent,
195   &deliver_localpart,
196   &deliver_localpart_data,
197   &deliver_localpart_orig,
198   &deliver_localpart_parent,
199   &deliver_localpart_prefix,
200   &deliver_localpart_suffix,
201   (uschar **)(&deliver_recipients),
202   &deliver_host,
203   &deliver_home,
204   &address_file,
205   &address_pipe,
206   &self_hostname,
207   NULL };
208
209 int address_expansions_count = sizeof(address_expansions)/sizeof(uschar **);
210
211 /* General global variables */
212
213 header_line *acl_added_headers = NULL;
214 tree_node *acl_anchor          = NULL;
215 uschar *acl_arg[9]             = {NULL, NULL, NULL, NULL, NULL,
216                                   NULL, NULL, NULL, NULL};
217 int     acl_narg               = 0;
218
219 uschar *acl_not_smtp           = NULL;
220 #ifdef WITH_CONTENT_SCAN
221 uschar *acl_not_smtp_mime      = NULL;
222 #endif
223 uschar *acl_not_smtp_start     = NULL;
224 uschar *acl_removed_headers    = NULL;
225 uschar *acl_smtp_auth          = NULL;
226 uschar *acl_smtp_connect       = NULL;
227 uschar *acl_smtp_data          = NULL;
228 #ifndef DISABLE_PRDR
229 uschar *acl_smtp_data_prdr     = NULL;
230 #endif
231 #ifndef DISABLE_DKIM
232 uschar *acl_smtp_dkim          = NULL;
233 #endif
234 uschar *acl_smtp_etrn          = NULL;
235 uschar *acl_smtp_expn          = NULL;
236 uschar *acl_smtp_helo          = NULL;
237 uschar *acl_smtp_mail          = NULL;
238 uschar *acl_smtp_mailauth      = NULL;
239 #ifdef WITH_CONTENT_SCAN
240 uschar *acl_smtp_mime          = NULL;
241 #endif
242 uschar *acl_smtp_notquit       = NULL;
243 uschar *acl_smtp_predata       = NULL;
244 uschar *acl_smtp_quit          = NULL;
245 uschar *acl_smtp_rcpt          = NULL;
246 uschar *acl_smtp_starttls      = NULL;
247 uschar *acl_smtp_vrfy          = NULL;
248
249 BOOL    acl_temp_details       = FALSE;
250 tree_node *acl_var_c           = NULL;
251 tree_node *acl_var_m           = NULL;
252 uschar *acl_verify_message     = NULL;
253 string_item *acl_warn_logged   = NULL;
254
255 /* Names of SMTP places for use in ACL error messages, and corresponding SMTP
256 error codes - keep in step with definitions of ACL_WHERE_xxxx in macros.h. */
257
258 uschar *acl_wherenames[]       = { US"RCPT",
259                                    US"MAIL",
260                                    US"PREDATA",
261                                    US"MIME",
262                                    US"DKIM",
263                                    US"DATA",
264 #ifndef DISABLE_PRDR
265                                    US"PRDR",
266 #endif
267                                    US"non-SMTP",
268                                    US"AUTH",
269                                    US"connection",
270                                    US"ETRN",
271                                    US"EXPN",
272                                    US"EHLO or HELO",
273                                    US"MAILAUTH",
274                                    US"non-SMTP-start",
275                                    US"NOTQUIT",
276                                    US"QUIT",
277                                    US"STARTTLS",
278                                    US"VRFY",
279                                    US"delivery",
280                                    US"unknown"
281                                  };
282
283 uschar *acl_wherecodes[]       = { US"550",     /* RCPT */
284                                    US"550",     /* MAIL */
285                                    US"550",     /* PREDATA */
286                                    US"550",     /* MIME */
287                                    US"550",     /* DKIM */
288                                    US"550",     /* DATA */
289 #ifndef DISABLE_PRDR
290                                    US"550",    /* RCPT PRDR */
291 #endif
292                                    US"0",       /* not SMTP; not relevant */
293                                    US"503",     /* AUTH */
294                                    US"550",     /* connect */
295                                    US"458",     /* ETRN */
296                                    US"550",     /* EXPN */
297                                    US"550",     /* HELO/EHLO */
298                                    US"0",       /* MAILAUTH; not relevant */
299                                    US"0",       /* not SMTP; not relevant */
300                                    US"0",       /* NOTQUIT; not relevant */
301                                    US"0",       /* QUIT; not relevant */
302                                    US"550",     /* STARTTLS */
303                                    US"252",     /* VRFY */
304                                    US"0",       /* delivery; not relevant */
305                                    US"0"        /* unknown; not relevant */
306                                  };
307
308 BOOL    active_local_from_check = FALSE;
309 BOOL    active_local_sender_retain = FALSE;
310 int     body_8bitmime = 0;
311 BOOL    accept_8bitmime        = TRUE; /* deliberately not RFC compliant */
312 uschar *add_environment        = NULL;
313 address_item  *addr_duplicate  = NULL;
314
315 address_item address_defaults = {
316   NULL,                 /* next */
317   NULL,                 /* parent */
318   NULL,                 /* first */
319   NULL,                 /* dupof */
320   NULL,                 /* start_router */
321   NULL,                 /* router */
322   NULL,                 /* transport */
323   NULL,                 /* host_list */
324   NULL,                 /* host_used */
325   NULL,                 /* fallback_hosts */
326   NULL,                 /* reply */
327   NULL,                 /* retries */
328   NULL,                 /* address */
329   NULL,                 /* unique */
330   NULL,                 /* cc_local_part */
331   NULL,                 /* lc_local_part */
332   NULL,                 /* local_part */
333   NULL,                 /* prefix */
334   NULL,                 /* suffix */
335   NULL,                 /* domain */
336   NULL,                 /* address_retry_key */
337   NULL,                 /* domain_retry_key */
338   NULL,                 /* current_dir */
339   NULL,                 /* home_dir */
340   NULL,                 /* message */
341   NULL,                 /* user_message */
342   NULL,                 /* onetime_parent */
343   NULL,                 /* pipe_expandn */
344   NULL,                 /* return_filename */
345   NULL,                 /* self_hostname */
346   NULL,                 /* shadow_message */
347   #ifdef SUPPORT_TLS
348   NULL,                 /* cipher */
349   NULL,                 /* ourcert */
350   NULL,                 /* peercert */
351   NULL,                 /* peerdn */
352   OCSP_NOT_REQ,         /* ocsp */
353   #endif
354   NULL,                 /* authenticator */
355   NULL,                 /* auth_id */
356   NULL,                 /* auth_sndr */
357   #ifdef EXPERIMENTAL_DSN
358   NULL,                 /* dsn_orcpt */
359   0,                    /* dsn_flags */
360   0,                    /* dsn_aware */
361   #endif
362   (uid_t)(-1),          /* uid */
363   (gid_t)(-1),          /* gid */
364   0,                    /* flags */
365   { 0 },                /* domain_cache - any larger array should be zeroed */
366   { 0 },                /* localpart_cache - ditto */
367   -1,                   /* mode */
368   0,                    /* more_errno */
369   ERRNO_UNKNOWNERROR,   /* basic_errno */
370   0,                    /* child_count */
371   -1,                   /* return_file */
372   SPECIAL_NONE,         /* special_action */
373   DEFER,                /* transport_return */
374   {                     /* fields that are propagated to children */
375     NULL,               /* address_data */
376     NULL,               /* domain_data */
377     NULL,               /* localpart_data */
378     NULL,               /* errors_address */
379     NULL,               /* extra_headers */
380     NULL,               /* remove_headers */
381 #ifdef EXPERIMENTAL_SRS
382     NULL,               /* srs_sender */
383 #endif
384   }
385 };
386
387 uschar *address_file           = NULL;
388 uschar *address_pipe           = NULL;
389 BOOL    address_test_mode      = FALSE;
390 tree_node *addresslist_anchor  = NULL;
391 int     addresslist_count      = 0;
392 gid_t  *admin_groups           = NULL;
393 BOOL    admin_user             = FALSE;
394 BOOL    allow_auth_unadvertised= FALSE;
395 BOOL    allow_domain_literals  = FALSE;
396 BOOL    allow_mx_to_ip         = FALSE;
397 BOOL    allow_unqualified_recipient = TRUE;    /* For local messages */
398 BOOL    allow_unqualified_sender = TRUE;       /* Reset for SMTP */
399 BOOL    allow_utf8_domains     = FALSE;
400 uschar *authenticated_fail_id  = NULL;
401 uschar *authenticated_id       = NULL;
402 uschar *authenticated_sender   = NULL;
403 BOOL    authentication_failed  = FALSE;
404 auth_instance  *auths          = NULL;
405 uschar *auth_advertise_hosts   = US"*";
406 auth_instance auth_defaults    = {
407     NULL,                      /* chain pointer */
408     NULL,                      /* name */
409     NULL,                      /* info */
410     NULL,                      /* private options block pointer */
411     NULL,                      /* driver_name */
412     NULL,                      /* advertise_condition */
413     NULL,                      /* client_condition */
414     NULL,                      /* public_name */
415     NULL,                      /* set_id */
416     NULL,                      /* set_client_id */
417     NULL,                      /* server_mail_auth_condition */
418     NULL,                      /* server_debug_string */
419     NULL,                      /* server_condition */
420     FALSE,                     /* client */
421     FALSE,                     /* server */
422     FALSE                      /* advertised */
423 };
424
425 uschar *auth_defer_msg         = US"reason not recorded";
426 uschar *auth_defer_user_msg    = US"";
427 uschar *auth_vars[AUTH_VARS];
428 int     auto_thaw              = 0;
429 #ifdef WITH_CONTENT_SCAN
430 BOOL    av_failed              = FALSE;
431 uschar *av_scanner             = US"sophie:/var/run/sophie";  /* AV scanner */
432 #endif
433
434 BOOL    background_daemon      = TRUE;
435
436 #if BASE_62 == 62
437 uschar *base62_chars=
438     US"0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz";
439 #else
440 uschar *base62_chars= US"0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ";
441 #endif
442
443 uschar *bi_command             = NULL;
444 uschar *big_buffer             = NULL;
445 int     big_buffer_size        = BIG_BUFFER_SIZE;
446 #ifdef EXPERIMENTAL_BRIGHTMAIL
447 uschar *bmi_alt_location       = NULL;
448 uschar *bmi_base64_tracker_verdict = NULL;
449 uschar *bmi_base64_verdict     = NULL;
450 uschar *bmi_config_file        = US"/opt/brightmail/etc/brightmail.cfg";
451 int     bmi_deliver            = 1;
452 int     bmi_run                = 0;
453 uschar *bmi_verdicts           = NULL;
454 #endif
455 int     body_linecount         = 0;
456 int     body_zerocount         = 0;
457 uschar *bounce_message_file    = NULL;
458 uschar *bounce_message_text    = NULL;
459 uschar *bounce_recipient       = NULL;
460 BOOL    bounce_return_body     = TRUE;
461 BOOL    bounce_return_message  = TRUE;
462 int     bounce_return_size_limit = 100*1024;
463 uschar *bounce_sender_authentication = NULL;
464 int     bsmtp_transaction_linecount = 0;
465
466 int     callout_cache_domain_positive_expire = 7*24*60*60;
467 int     callout_cache_domain_negative_expire = 3*60*60;
468 int     callout_cache_positive_expire = 24*60*60;
469 int     callout_cache_negative_expire = 2*60*60;
470 uschar *callout_random_local_part = US"$primary_hostname-$tod_epoch-testing";
471 uschar *check_dns_names_pattern= US"(?i)^(?>(?(1)\\.|())[^\\W](?>[a-z0-9/_-]*[^\\W])?)+(\\.?)$";
472 int     check_log_inodes       = 0;
473 int     check_log_space        = 0;
474 BOOL    check_rfc2047_length   = TRUE;
475 int     check_spool_inodes     = 0;
476 int     check_spool_space      = 0;
477 uschar  *client_authenticator  = NULL;
478 uschar  *client_authenticated_id = NULL;
479 uschar  *client_authenticated_sender = NULL;
480 int     clmacro_count          = 0;
481 uschar *clmacros[MAX_CLMACROS];
482 BOOL    config_changed         = FALSE;
483 FILE   *config_file            = NULL;
484 uschar *config_filename        = NULL;
485 int     config_lineno          = 0;
486 #ifdef CONFIGURE_GROUP
487 gid_t   config_gid             = CONFIGURE_GROUP;
488 #endif
489 uschar *config_main_filelist   = US CONFIGURE_FILE
490                          "\0<-----------Space to patch configure_filename->";
491 uschar *config_main_filename   = NULL;
492
493 #ifdef CONFIGURE_OWNER
494 uid_t   config_uid             = CONFIGURE_OWNER;
495 #endif
496
497 int     connection_max_messages= -1;
498 uschar *continue_hostname      = NULL;
499 uschar *continue_host_address  = NULL;
500 BOOL    continue_more          = FALSE;
501 int     continue_sequence      = 1;
502 uschar *continue_transport     = NULL;
503
504 uschar *csa_status             = NULL;
505 BOOL    cutthrough_delivery    = FALSE;
506 int     cutthrough_fd          = -1;
507
508 BOOL    daemon_listen          = FALSE;
509 uschar *daemon_smtp_port       = US"smtp";
510 int     daemon_startup_retries = 9;
511 int     daemon_startup_sleep   = 30;
512
513 #ifdef EXPERIMENTAL_DCC
514 BOOL    dcc_direct_add_header  = FALSE;
515 uschar *dcc_header             = NULL;
516 uschar *dcc_result             = NULL;
517 uschar *dccifd_address         = US"/usr/local/dcc/var/dccifd";
518 uschar *dccifd_options         = US"header";
519 #endif
520
521 BOOL    debug_daemon           = FALSE;
522 int     debug_fd               = -1;
523 FILE   *debug_file             = NULL;
524 bit_table debug_options[]      = {
525   { US"acl",            D_acl },
526   { US"all",            D_all },
527   { US"auth",           D_auth },
528   { US"deliver",        D_deliver },
529   { US"dns",            D_dns },
530   { US"dnsbl",          D_dnsbl },
531   { US"exec",           D_exec },
532   { US"expand",         D_expand },
533   { US"filter",         D_filter },
534   { US"hints_lookup",   D_hints_lookup },
535   { US"host_lookup",    D_host_lookup },
536   { US"ident",          D_ident },
537   { US"interface",      D_interface },
538   { US"lists",          D_lists },
539   { US"load",           D_load },
540   { US"local_scan",     D_local_scan },
541   { US"lookup",         D_lookup },
542   { US"memory",         D_memory },
543   { US"pid",            D_pid },
544   { US"process_info",   D_process_info },
545   { US"queue_run",      D_queue_run },
546   { US"receive",        D_receive },
547   { US"resolver",       D_resolver },
548   { US"retry",          D_retry },
549   { US"rewrite",        D_rewrite },
550   { US"route",          D_route },
551   { US"timestamp",      D_timestamp },
552   { US"tls",            D_tls },
553   { US"transport",      D_transport },
554   { US"uid",            D_uid },
555   { US"verify",         D_verify }
556 };
557 int     debug_options_count    = sizeof(debug_options)/sizeof(bit_table);
558 unsigned int debug_selector    = 0;
559 int     delay_warning[DELAY_WARNING_SIZE] = { DELAY_WARNING_SIZE, 1, 24*60*60 };
560 uschar *delay_warning_condition=
561   US"${if or {"
562             "{ !eq{$h_list-id:$h_list-post:$h_list-subscribe:}{} }"
563             "{ match{$h_precedence:}{(?i)bulk|list|junk} }"
564             "{ match{$h_auto-submitted:}{(?i)auto-generated|auto-replied} }"
565             "} {no}{yes}}";
566 BOOL    delivery_date_remove   = TRUE;
567 uschar *deliver_address_data   = NULL;
568 int     deliver_datafile       = -1;
569 uschar *deliver_domain         = NULL;
570 uschar *deliver_domain_data    = NULL;
571 uschar *deliver_domain_orig    = NULL;
572 uschar *deliver_domain_parent  = NULL;
573 BOOL    deliver_drop_privilege = FALSE;
574 BOOL    deliver_firsttime      = FALSE;
575 BOOL    deliver_force          = FALSE;
576 BOOL    deliver_freeze         = FALSE;
577 time_t  deliver_frozen_at      = 0;
578 uschar *deliver_home           = NULL;
579 uschar *deliver_host           = NULL;
580 uschar *deliver_host_address   = NULL;
581 uschar *deliver_in_buffer      = NULL;
582 ino_t   deliver_inode          = 0;
583 uschar *deliver_localpart      = NULL;
584 uschar *deliver_localpart_data = NULL;
585 uschar *deliver_localpart_orig = NULL;
586 uschar *deliver_localpart_parent = NULL;
587 uschar *deliver_localpart_prefix = NULL;
588 uschar *deliver_localpart_suffix = NULL;
589 BOOL    deliver_force_thaw     = FALSE;
590 BOOL    deliver_manual_thaw    = FALSE;
591 uschar *deliver_out_buffer     = NULL;
592 int     deliver_queue_load_max = -1;
593 address_item  *deliver_recipients = NULL;
594 uschar *deliver_selectstring   = NULL;
595 BOOL    deliver_selectstring_regex = FALSE;
596 uschar *deliver_selectstring_sender = NULL;
597 BOOL    deliver_selectstring_sender_regex = FALSE;
598 #ifdef WITH_OLD_DEMIME
599 int     demime_errorlevel      = 0;
600 int     demime_ok              = 0;
601 uschar *demime_reason          = NULL;
602 #endif
603 BOOL    disable_callout_flush  = FALSE;
604 BOOL    disable_delay_flush    = FALSE;
605 #ifdef ENABLE_DISABLE_FSYNC
606 BOOL    disable_fsync          = FALSE;
607 #endif
608 BOOL    disable_ipv6           = FALSE;
609 BOOL    disable_logging        = FALSE;
610
611 #ifndef DISABLE_DKIM
612 uschar *dkim_cur_signer          = NULL;
613 uschar *dkim_signers             = NULL;
614 uschar *dkim_signing_domain      = NULL;
615 uschar *dkim_signing_selector    = NULL;
616 uschar *dkim_verify_signers      = US"$dkim_signers";
617 BOOL    dkim_collect_input       = FALSE;
618 BOOL    dkim_disable_verify      = FALSE;
619 #endif
620 #ifdef EXPERIMENTAL_DMARC
621 BOOL    dmarc_has_been_checked  = FALSE;
622 uschar *dmarc_ar_header         = NULL;
623 uschar *dmarc_domain_policy     = NULL;
624 uschar *dmarc_forensic_sender   = NULL;
625 uschar *dmarc_history_file      = NULL;
626 uschar *dmarc_status            = NULL;
627 uschar *dmarc_status_text       = NULL;
628 uschar *dmarc_tld_file          = NULL;
629 uschar *dmarc_used_domain       = NULL;
630 BOOL    dmarc_disable_verify    = FALSE;
631 BOOL    dmarc_enable_forensic   = FALSE;
632 #endif
633
634 uschar *dns_again_means_nonexist = NULL;
635 int     dns_csa_search_limit   = 5;
636 BOOL    dns_csa_use_reverse    = TRUE;
637 uschar *dns_ipv4_lookup        = NULL;
638 int     dns_retrans            = 0;
639 int     dns_retry              = 0;
640 int     dns_dnssec_ok          = -1; /* <0 = not coerced */
641 int     dns_use_edns0          = -1; /* <0 = not coerced */
642 uschar *dnslist_domain         = NULL;
643 uschar *dnslist_matched        = NULL;
644 uschar *dnslist_text           = NULL;
645 uschar *dnslist_value          = NULL;
646 tree_node *domainlist_anchor   = NULL;
647 int     domainlist_count       = 0;
648 BOOL    dont_deliver           = FALSE;
649 BOOL    dot_ends               = TRUE;
650 BOOL    drop_cr                = FALSE;         /* No longer used */
651 uschar *dsn_from               = US DEFAULT_DSN_FROM;
652
653 BOOL    enable_dollar_recipients = FALSE;
654 BOOL    envelope_to_remove     = TRUE;
655 int     errno_quota            = ERRNO_QUOTA;
656 uschar *errors_copy            = NULL;
657 int     error_handling         = ERRORS_SENDER;
658 uschar *errors_reply_to        = NULL;
659 int     errors_sender_rc       = EXIT_FAILURE;
660
661 gid_t   exim_gid               = EXIM_GID;
662 BOOL    exim_gid_set           = TRUE;          /* This gid is always set */
663 uschar *exim_path              = US BIN_DIRECTORY "/exim"
664                         "\0<---------------Space to patch exim_path->";
665 uid_t   exim_uid               = EXIM_UID;
666 BOOL    exim_uid_set           = TRUE;          /* This uid is always set */
667 int     expand_forbid          = 0;
668 int     expand_nlength[EXPAND_MAXN+1];
669 int     expand_nmax            = -1;
670 uschar *expand_nstring[EXPAND_MAXN+1];
671 BOOL    expand_string_forcedfail = FALSE;
672 uschar *expand_string_message;
673 BOOL    extract_addresses_remove_arguments = TRUE;
674 uschar *extra_local_interfaces = NULL;
675
676 int     fake_response          = OK;
677 uschar *fake_response_text     = US"Your message has been rejected but is "
678                                    "being kept for evaluation.\nIf it was a "
679                                    "legitimate message, it may still be "
680                                    "delivered to the target recipient(s).";
681 int     filter_n[FILTER_VARIABLE_COUNT];
682 BOOL    filter_running         = FALSE;
683 int     filter_sn[FILTER_VARIABLE_COUNT];
684 int     filter_test            = FTEST_NONE;
685 uschar *filter_test_sfile      = NULL;
686 uschar *filter_test_ufile      = NULL;
687 uschar *filter_thisaddress     = NULL;
688 int     finduser_retries       = 0;
689 #ifdef WITH_OLD_DEMIME
690 uschar *found_extension        = NULL;
691 #endif
692 uid_t   fixed_never_users[]    = { FIXED_NEVER_USERS };
693 uschar *freeze_tell            = NULL;
694 uschar *freeze_tell_config     = NULL;
695 uschar *fudged_queue_times     = US"";
696
697 uschar *gecos_name             = NULL;
698 uschar *gecos_pattern          = NULL;
699 rewrite_rule  *global_rewrite_rules = NULL;
700
701 uschar *headers_charset        = US HEADERS_CHARSET;
702 int     header_insert_maxlen   = 64 * 1024;
703 header_line  *header_last      = NULL;
704 header_line  *header_list      = NULL;
705 int     header_maxsize         = HEADER_MAXSIZE;
706 int     header_line_maxsize    = 0;
707
708 header_name header_names[] = {
709   { US"bcc",            3, TRUE,  htype_bcc },
710   { US"cc",             2, TRUE,  htype_cc },
711   { US"date",           4, TRUE,  htype_date },
712   { US"delivery-date", 13, FALSE, htype_delivery_date },
713   { US"envelope-to",   11, FALSE, htype_envelope_to },
714   { US"from",           4, TRUE,  htype_from },
715   { US"message-id",    10, TRUE,  htype_id },
716   { US"received",       8, FALSE, htype_received },
717   { US"reply-to",       8, FALSE, htype_reply_to },
718   { US"return-path",   11, FALSE, htype_return_path },
719   { US"sender",         6, TRUE,  htype_sender },
720   { US"subject",        7, FALSE, htype_subject },
721   { US"to",             2, TRUE,  htype_to }
722 };
723
724 int header_names_size          = sizeof(header_names)/sizeof(header_name);
725
726 BOOL    header_rewritten       = FALSE;
727 uschar *helo_accept_junk_hosts = NULL;
728 uschar *helo_allow_chars       = US"";
729 uschar *helo_lookup_domains    = US"@ : @[]";
730 uschar *helo_try_verify_hosts  = NULL;
731 BOOL    helo_verified          = FALSE;
732 BOOL    helo_verify_failed     = FALSE;
733 uschar *helo_verify_hosts      = NULL;
734 const uschar *hex_digits       = CUS"0123456789abcdef";
735 uschar *hold_domains           = NULL;
736 BOOL    host_checking          = FALSE;
737 BOOL    host_checking_callout  = FALSE;
738 uschar *host_data              = NULL;
739 BOOL    host_find_failed_syntax= FALSE;
740 uschar *host_lookup            = NULL;
741 BOOL    host_lookup_deferred   = FALSE;
742 BOOL    host_lookup_failed     = FALSE;
743 uschar *host_lookup_order      = US"bydns:byaddr";
744 uschar *host_lookup_msg        = US"";
745 int     host_number            = 0;
746 uschar *host_number_string     = NULL;
747 uschar *host_reject_connection = NULL;
748 tree_node *hostlist_anchor     = NULL;
749 int     hostlist_count         = 0;
750 uschar *hosts_treat_as_local   = NULL;
751 uschar *hosts_connection_nolog = NULL;
752
753 int     ignore_bounce_errors_after = 10*7*24*60*60;  /* 10 weeks */
754 BOOL    ignore_fromline_local  = FALSE;
755 uschar *ignore_fromline_hosts  = NULL;
756 BOOL    inetd_wait_mode        = FALSE;
757 int     inetd_wait_timeout     = -1;
758 uschar *interface_address      = NULL;
759 int     interface_port         = -1;
760 BOOL    is_inetd               = FALSE;
761 uschar *iterate_item           = NULL;
762
763 int     journal_fd             = -1;
764
765 uschar *keep_environment       = NULL;
766
767 int     keep_malformed         = 4*24*60*60;    /* 4 days */
768
769 uschar *eldap_dn               = NULL;
770 int     load_average           = -2;
771 BOOL    local_error_message    = FALSE;
772 BOOL    local_from_check       = TRUE;
773 uschar *local_from_prefix      = NULL;
774 uschar *local_from_suffix      = NULL;
775
776 #if HAVE_IPV6
777 uschar *local_interfaces       = US"<; ::0 ; 0.0.0.0";
778 #else
779 uschar *local_interfaces       = US"0.0.0.0";
780 #endif
781
782 uschar *local_scan_data        = NULL;
783 int     local_scan_timeout     = 5*60;
784 BOOL    local_sender_retain    = FALSE;
785 gid_t   local_user_gid         = (gid_t)(-1);
786 uid_t   local_user_uid         = (uid_t)(-1);
787
788 tree_node *localpartlist_anchor= NULL;
789 int     localpartlist_count    = 0;
790 uschar *log_buffer             = NULL;
791 unsigned int log_extra_selector = LX_default;
792 uschar *log_file_path          = US LOG_FILE_PATH
793                            "\0<--------------Space to patch log_file_path->";
794
795 /* Those log options with L_xxx identifiers have values less than 0x800000 and
796 are the ones that get put into log_write_selector. They can be used in calls to
797 log_write() to test for the bit. The options with LX_xxx identifiers have
798 values greater than 0x80000000 and are put into log_extra_selector (without the
799 top bit). They are never used in calls to log_write(), but are tested
800 independently. This separation became necessary when the number of log
801 selectors was getting close to filling a 32-bit word. */
802
803 /* Note that this list must be in alphabetical order. */
804
805 bit_table log_options[]        = {
806   { US"8bitmime",                     LX_8bitmime },
807   { US"acl_warn_skipped",             LX_acl_warn_skipped },
808   { US"address_rewrite",              L_address_rewrite },
809   { US"all",                          L_all },
810   { US"all_parents",                  L_all_parents },
811   { US"arguments",                    LX_arguments },
812   { US"connection_reject",            L_connection_reject },
813   { US"delay_delivery",               L_delay_delivery },
814   { US"deliver_time",                 LX_deliver_time },
815   { US"delivery_size",                LX_delivery_size },
816   { US"dnslist_defer",                L_dnslist_defer },
817   { US"etrn",                         L_etrn },
818   { US"host_lookup_failed",           L_host_lookup_failed },
819   { US"ident_timeout",                LX_ident_timeout },
820   { US"incoming_interface",           LX_incoming_interface },
821   { US"incoming_port",                LX_incoming_port },
822   { US"lost_incoming_connection",     L_lost_incoming_connection },
823   { US"outgoing_port",                LX_outgoing_port },
824   { US"pid",                          LX_pid },
825 #ifdef EXPERIMENTAL_PROXY
826   { US"proxy",                        LX_proxy },
827 #endif
828   { US"queue_run",                    L_queue_run },
829   { US"queue_time",                   LX_queue_time },
830   { US"queue_time_overall",           LX_queue_time_overall },
831   { US"received_recipients",          LX_received_recipients },
832   { US"received_sender",              LX_received_sender },
833   { US"rejected_header",              LX_rejected_header },
834   { US"rejected_headers",             LX_rejected_header },
835   { US"retry_defer",                  L_retry_defer },
836   { US"return_path_on_delivery",      LX_return_path_on_delivery },
837   { US"sender_on_delivery",           LX_sender_on_delivery },
838   { US"sender_verify_fail",           LX_sender_verify_fail },
839   { US"size_reject",                  L_size_reject },
840   { US"skip_delivery",                L_skip_delivery },
841   { US"smtp_confirmation",            LX_smtp_confirmation },
842   { US"smtp_connection",              L_smtp_connection },
843   { US"smtp_incomplete_transaction",  L_smtp_incomplete_transaction },
844   { US"smtp_mailauth",                LX_smtp_mailauth },
845   { US"smtp_no_mail",                 LX_smtp_no_mail },
846   { US"smtp_protocol_error",          L_smtp_protocol_error },
847   { US"smtp_syntax_error",            L_smtp_syntax_error },
848   { US"subject",                      LX_subject },
849   { US"tls_certificate_verified",     LX_tls_certificate_verified },
850   { US"tls_cipher",                   LX_tls_cipher },
851   { US"tls_peerdn",                   LX_tls_peerdn },
852   { US"tls_sni",                      LX_tls_sni },
853   { US"unknown_in_list",              LX_unknown_in_list }
854 };
855
856 int     log_options_count      = sizeof(log_options)/sizeof(bit_table);
857 int     log_reject_target      = 0;
858 uschar *log_selector_string    = NULL;
859 FILE   *log_stderr             = NULL;
860 BOOL    log_testing_mode       = FALSE;
861 BOOL    log_timezone           = FALSE;
862 unsigned int log_write_selector= L_default;
863 uschar *login_sender_address   = NULL;
864 uschar *lookup_dnssec_authenticated = NULL;
865 int     lookup_open_max        = 25;
866 uschar *lookup_value           = NULL;
867
868 macro_item  *macros            = NULL;
869 uschar *mailstore_basename     = NULL;
870 #ifdef WITH_CONTENT_SCAN
871 uschar *malware_name           = NULL;  /* Virus Name */
872 #endif
873 int     max_received_linelength= 0;
874 int     max_username_length    = 0;
875 int     message_age            = 0;
876 uschar *message_body           = NULL;
877 uschar *message_body_end       = NULL;
878 BOOL    message_body_newlines  = FALSE;
879 int     message_body_size      = 0;
880 int     message_body_visible   = 500;
881 int     message_ended          = END_NOTSTARTED;
882 uschar *message_headers        = NULL;
883 uschar *message_id;
884 uschar *message_id_domain      = NULL;
885 uschar *message_id_text        = NULL;
886 struct timeval message_id_tv   = { 0, 0 };
887 uschar  message_id_option[MESSAGE_ID_LENGTH + 3];
888 uschar *message_id_external;
889 int     message_linecount      = 0;
890 BOOL    message_logs           = TRUE;
891 int     message_size           = 0;
892 uschar *message_size_limit     = US"50M";
893 uschar  message_subdir[2]      = { 0, 0 };
894 uschar *message_reference      = NULL;
895
896 /* MIME ACL expandables */
897 #ifdef WITH_CONTENT_SCAN
898 int     mime_anomaly_level     = 0;
899 const uschar *mime_anomaly_text      = NULL;
900 uschar *mime_boundary          = NULL;
901 uschar *mime_charset           = NULL;
902 uschar *mime_content_description = NULL;
903 uschar *mime_content_disposition = NULL;
904 uschar *mime_content_id        = NULL;
905 unsigned int mime_content_size = 0;
906 uschar *mime_content_transfer_encoding = NULL;
907 uschar *mime_content_type      = NULL;
908 uschar *mime_decoded_filename  = NULL;
909 uschar *mime_filename          = NULL;
910 int     mime_is_multipart      = 0;
911 int     mime_is_coverletter    = 0;
912 int     mime_is_rfc822         = 0;
913 int     mime_part_count        = -1;
914 #endif
915
916 BOOL    mua_wrapper            = FALSE;
917
918 uid_t  *never_users            = NULL;
919 #ifdef WITH_CONTENT_SCAN
920 BOOL    no_mbox_unspool        = FALSE;
921 #endif
922 BOOL    no_multiline_responses = FALSE;
923
924 uid_t   original_euid;
925 gid_t   originator_gid;
926 uschar *originator_login       = NULL;
927 uschar *originator_name        = NULL;
928 uid_t   originator_uid;
929 uschar *override_local_interfaces = NULL;
930 uschar *override_pid_file_path = NULL;
931
932 BOOL    parse_allow_group      = FALSE;
933 BOOL    parse_found_group      = FALSE;
934 uschar *percent_hack_domains   = NULL;
935 uschar *pid_file_path          = US PID_FILE_PATH
936                            "\0<--------------Space to patch pid_file_path->";
937 BOOL    pipelining_enable      = TRUE;
938 uschar *pipelining_advertise_hosts = US"*";
939 BOOL    preserve_message_logs  = FALSE;
940 uschar *primary_hostname       = NULL;
941 BOOL    print_topbitchars      = FALSE;
942 uschar  process_info[PROCESS_INFO_SIZE];
943 int     process_info_len       = 0;
944 uschar *process_log_path       = NULL;
945 BOOL    prod_requires_admin    = TRUE;
946
947 #ifdef EXPERIMENTAL_PROXY
948 uschar *proxy_host_address     = US"";
949 int     proxy_host_port        = 0;
950 uschar *proxy_required_hosts   = US"";
951 BOOL    proxy_session          = FALSE;
952 BOOL    proxy_session_failed   = FALSE;
953 uschar *proxy_target_address   = US"";
954 int     proxy_target_port      = 0;
955 #endif
956
957 uschar *prvscheck_address      = NULL;
958 uschar *prvscheck_keynum       = NULL;
959 uschar *prvscheck_result       = NULL;
960
961
962 uschar *qualify_domain_recipient = NULL;
963 uschar *qualify_domain_sender  = NULL;
964 BOOL    queue_2stage           = FALSE;
965 uschar *queue_domains          = NULL;
966 int     queue_interval         = -1;
967 BOOL    queue_list_requires_admin = TRUE;
968 BOOL    queue_only             = FALSE;
969 uschar *queue_only_file        = NULL;
970 int     queue_only_load        = -1;
971 BOOL    queue_only_load_latch  = TRUE;
972 BOOL    queue_only_override    = TRUE;
973 BOOL    queue_only_policy      = FALSE;
974 BOOL    queue_run_first_delivery = FALSE;
975 BOOL    queue_run_force        = FALSE;
976 BOOL    queue_run_in_order     = FALSE;
977 BOOL    queue_run_local        = FALSE;
978 int     queue_run_max          = 5;
979 pid_t   queue_run_pid          = (pid_t)0;
980 int     queue_run_pipe         = -1;
981 BOOL    queue_running          = FALSE;
982 BOOL    queue_smtp             = FALSE;
983 uschar *queue_smtp_domains     = NULL;
984
985 unsigned int random_seed       = 0;
986 tree_node *ratelimiters_cmd    = NULL;
987 tree_node *ratelimiters_conn   = NULL;
988 tree_node *ratelimiters_mail   = NULL;
989 uschar *raw_active_hostname    = NULL;
990 uschar *raw_sender             = NULL;
991 uschar **raw_recipients        = NULL;
992 int     raw_recipients_count   = 0;
993
994 int     rcpt_count             = 0;
995 int     rcpt_fail_count        = 0;
996 int     rcpt_defer_count       = 0;
997 gid_t   real_gid;
998 uid_t   real_uid;
999 BOOL    really_exim            = TRUE;
1000 BOOL    receive_call_bombout   = FALSE;
1001 int     receive_linecount      = 0;
1002 int     receive_messagecount   = 0;
1003 int     receive_timeout        = 0;
1004 int     received_count         = 0;
1005 uschar *received_for           = NULL;
1006
1007 /*  This is the default text for Received headers generated by Exim. The
1008 date  will be automatically added on the end. */
1009
1010 uschar *received_header_text   = US
1011      "Received: "
1012      "${if def:sender_rcvhost {from $sender_rcvhost\n\t}"
1013      "{${if def:sender_ident {from ${quote_local_part:$sender_ident} }}"
1014      "${if def:sender_helo_name {(helo=$sender_helo_name)\n\t}}}}"
1015      "by $primary_hostname "
1016      "${if def:received_protocol {with $received_protocol}} "
1017      #ifdef SUPPORT_TLS
1018      "${if def:tls_cipher {($tls_cipher)\n\t}}"
1019      #endif
1020      "(Exim $version_number)\n\t"
1021      "${if def:sender_address {(envelope-from <$sender_address>)\n\t}}"
1022      "id $message_exim_id"
1023      "${if def:received_for {\n\tfor $received_for}}"
1024      "\0<---------------Space to patch received_header_text->";
1025
1026 int     received_headers_max   = 30;
1027 uschar *received_protocol      = NULL;
1028 int     received_time          = 0;
1029 uschar *recipient_data         = NULL;
1030 uschar *recipient_unqualified_hosts = NULL;
1031 uschar *recipient_verify_failure = NULL;
1032 int     recipients_count       = 0;
1033 BOOL    recipients_discarded   = FALSE;
1034 recipient_item  *recipients_list = NULL;
1035 int     recipients_list_max    = 0;
1036 int     recipients_max         = 0;
1037 BOOL    recipients_max_reject  = FALSE;
1038 const pcre *regex_AUTH         = NULL;
1039 const pcre *regex_check_dns_names = NULL;
1040 const pcre *regex_From         = NULL;
1041 const pcre *regex_IGNOREQUOTA  = NULL;
1042 const pcre *regex_PIPELINING   = NULL;
1043 const pcre *regex_SIZE         = NULL;
1044 const pcre *regex_smtp_code    = NULL;
1045 const pcre *regex_ismsgid      = NULL;
1046 #ifdef WHITELIST_D_MACROS
1047 const pcre *regex_whitelisted_macro = NULL;
1048 #endif
1049 #ifdef WITH_CONTENT_SCAN
1050 uschar *regex_match_string     = NULL;
1051 #endif
1052 int     remote_delivery_count  = 0;
1053 int     remote_max_parallel    = 2;
1054 uschar *remote_sort_domains    = NULL;
1055 int     retry_data_expire      = 7*24*60*60;
1056 int     retry_interval_max     = 24*60*60;
1057 int     retry_maximum_timeout  = 0;        /* set from retry config */
1058 retry_config  *retries         = NULL;
1059 uschar *return_path            = NULL;
1060 BOOL    return_path_remove     = TRUE;
1061 int     rewrite_existflags     = 0;
1062 uschar *rfc1413_hosts          = US"*";
1063 int     rfc1413_query_timeout  = 5;
1064 /* BOOL    rfc821_domains         = FALSE;  <<< on the way out */
1065 uid_t   root_gid               = ROOT_GID;
1066 uid_t   root_uid               = ROOT_UID;
1067
1068 router_instance  *routers  = NULL;
1069 router_instance  router_defaults = {
1070     NULL,                      /* chain pointer */
1071     NULL,                      /* name */
1072     NULL,                      /* info */
1073     NULL,                      /* private options block pointer */
1074     NULL,                      /* driver name */
1075
1076     NULL,                      /* address_data */
1077 #ifdef EXPERIMENTAL_BRIGHTMAIL
1078     NULL,                      /* bmi_rule */
1079 #endif
1080     NULL,                      /* cannot_route_message */
1081     NULL,                      /* condition */
1082     NULL,                      /* current_directory */
1083     NULL,                      /* debug_string */
1084     NULL,                      /* domains */
1085     NULL,                      /* errors_to */
1086     NULL,                      /* expand_gid */
1087     NULL,                      /* expand_uid */
1088     NULL,                      /* expand_more */
1089     NULL,                      /* expand_unseen */
1090     NULL,                      /* extra_headers */
1091     NULL,                      /* fallback_hosts */
1092     NULL,                      /* home_directory */
1093     NULL,                      /* ignore_target_hosts */
1094     NULL,                      /* local_parts */
1095     NULL,                      /* pass_router_name */
1096     NULL,                      /* prefix */
1097     NULL,                      /* redirect_router_name */
1098     NULL,                      /* remove_headers */
1099     NULL,                      /* require_files */
1100     NULL,                      /* router_home_directory */
1101     US"freeze",                /* self */
1102     NULL,                      /* senders */
1103     NULL,                      /* suffix */
1104     NULL,                      /* translate_ip_address */
1105     NULL,                      /* transport_name */
1106
1107     TRUE,                      /* address_test */
1108 #ifdef EXPERIMENTAL_BRIGHTMAIL
1109     FALSE,                     /* bmi_deliver_alternate */
1110     FALSE,                     /* bmi_deliver_default */
1111     FALSE,                     /* bmi_dont_deliver */
1112 #endif
1113     TRUE,                      /* expn */
1114     FALSE,                     /* caseful_local_part */
1115     FALSE,                     /* check_local_user */
1116     FALSE,                     /* disable_logging */
1117     FALSE,                     /* fail_verify_recipient */
1118     FALSE,                     /* fail_verify_sender */
1119     FALSE,                     /* gid_set */
1120     FALSE,                     /* initgroups */
1121     TRUE_UNSET,                /* log_as_local */
1122     TRUE,                      /* more */
1123     FALSE,                     /* pass_on_timeout */
1124     FALSE,                     /* prefix_optional */
1125     TRUE,                      /* repeat_use */
1126     TRUE_UNSET,                /* retry_use_local_part - fudge "unset" */
1127     FALSE,                     /* same_domain_copy_routing */
1128     FALSE,                     /* self_rewrite */
1129     FALSE,                     /* suffix_optional */
1130     FALSE,                     /* verify_only */
1131     TRUE,                      /* verify_recipient */
1132     TRUE,                      /* verify_sender */
1133     FALSE,                     /* uid_set */
1134     FALSE,                     /* unseen */
1135 #ifdef EXPERIMENTAL_DSN
1136     FALSE,                     /* dsn_lasthop */
1137 #endif
1138
1139     self_freeze,               /* self_code */
1140     (uid_t)(-1),               /* uid */
1141     (gid_t)(-1),               /* gid */
1142
1143     NULL,                      /* fallback_hostlist */
1144     NULL,                      /* transport instance */
1145     NULL,                      /* pass_router */
1146     NULL                       /* redirect_router */
1147 };
1148
1149 uschar *router_name            = NULL;
1150
1151 ip_address_item *running_interfaces = NULL;
1152 BOOL    running_in_test_harness = FALSE;
1153
1154 /* This is a weird one. The following string gets patched in the binary by the
1155 script that sets up a copy of Exim for running in the test harness. It seems
1156 that compilers are now clever, and share constant strings if they can.
1157 Elsewhere in Exim the string "<" is used. The compiler optimization seems to
1158 make use of the end of this string in order to save space. So the patching then
1159 wrecks this. We defeat this optimization by adding some additional characters
1160 onto the end of the string. */
1161
1162 uschar *running_status         = US">>>running<<<" "\0EXTRA";
1163
1164 int     runrc                  = 0;
1165
1166 uschar *search_error_message   = NULL;
1167 BOOL    search_find_defer      = FALSE;
1168 uschar *self_hostname          = NULL;
1169 uschar *sender_address         = NULL;
1170 unsigned int sender_address_cache[(MAX_NAMED_LIST * 2)/32];
1171 uschar *sender_address_data    = NULL;
1172 BOOL    sender_address_forced  = FALSE;
1173 uschar *sender_address_unrewritten = NULL;
1174 uschar *sender_data            = NULL;
1175 unsigned int sender_domain_cache[(MAX_NAMED_LIST * 2)/32];
1176 uschar *sender_fullhost        = NULL;
1177 uschar *sender_helo_name       = NULL;
1178 uschar **sender_host_aliases   = &no_aliases;
1179 uschar *sender_host_address    = NULL;
1180 uschar *sender_host_authenticated = NULL;
1181 unsigned int sender_host_cache[(MAX_NAMED_LIST * 2)/32];
1182 BOOL    sender_host_dnssec     = FALSE;
1183 uschar *sender_host_name       = NULL;
1184 int     sender_host_port       = 0;
1185 BOOL    sender_host_notsocket  = FALSE;
1186 BOOL    sender_host_unknown    = FALSE;
1187 uschar *sender_ident           = NULL;
1188 BOOL    sender_local           = FALSE;
1189 BOOL    sender_name_forced     = FALSE;
1190 uschar *sender_rate            = NULL;
1191 uschar *sender_rate_limit      = NULL;
1192 uschar *sender_rate_period     = NULL;
1193 uschar *sender_rcvhost         = NULL;
1194 BOOL    sender_set_untrusted   = FALSE;
1195 uschar *sender_unqualified_hosts = NULL;
1196 uschar *sender_verify_failure = NULL;
1197 address_item *sender_verified_list  = NULL;
1198 address_item *sender_verified_failed = NULL;
1199 int     sender_verified_rc     = -1;
1200 BOOL    sender_verified_responded = FALSE;
1201 uschar *sending_ip_address     = NULL;
1202 int     sending_port           = -1;
1203 SIGNAL_BOOL sigalrm_seen       = FALSE;
1204 uschar **sighup_argv           = NULL;
1205 int     smtp_accept_count      = 0;
1206 BOOL    smtp_accept_keepalive  = TRUE;
1207 int     smtp_accept_max        = 20;
1208 int     smtp_accept_max_nonmail= 10;
1209 uschar *smtp_accept_max_nonmail_hosts = US"*";
1210 int     smtp_accept_max_per_connection = 1000;
1211 uschar *smtp_accept_max_per_host = NULL;
1212 int     smtp_accept_queue      = 0;
1213 int     smtp_accept_queue_per_connection = 10;
1214 int     smtp_accept_reserve    = 0;
1215 uschar *smtp_active_hostname   = NULL;
1216 BOOL    smtp_authenticated     = FALSE;
1217 uschar *smtp_banner            = US"$smtp_active_hostname ESMTP "
1218                              "Exim $version_number $tod_full"
1219                              "\0<---------------Space to patch smtp_banner->";
1220 BOOL    smtp_batched_input     = FALSE;
1221 BOOL    smtp_check_spool_space = TRUE;
1222 int     smtp_ch_index          = 0;
1223 uschar *smtp_cmd_argument      = NULL;
1224 uschar *smtp_cmd_buffer        = NULL;
1225 time_t  smtp_connection_start  = 0;
1226 uschar  smtp_connection_had[SMTP_HBUFF_SIZE];
1227 int     smtp_connect_backlog   = 20;
1228 double  smtp_delay_mail        = 0.0;
1229 double  smtp_delay_rcpt        = 0.0;
1230 BOOL    smtp_enforce_sync      = TRUE;
1231 FILE   *smtp_in                = NULL;
1232 BOOL    smtp_input             = FALSE;
1233 int     smtp_load_reserve      = -1;
1234 int     smtp_mailcmd_count     = 0;
1235 FILE   *smtp_out               = NULL;
1236 uschar *smtp_etrn_command      = NULL;
1237 BOOL    smtp_etrn_serialize    = TRUE;
1238 int     smtp_max_synprot_errors= 3;
1239 int     smtp_max_unknown_commands = 3;
1240 uschar *smtp_notquit_reason    = NULL;
1241 uschar *smtp_ratelimit_hosts   = NULL;
1242 uschar *smtp_ratelimit_mail    = NULL;
1243 uschar *smtp_ratelimit_rcpt    = NULL;
1244 uschar *smtp_read_error        = US"";
1245 int     smtp_receive_timeout   = 5*60;
1246 uschar *smtp_reserve_hosts     = NULL;
1247 BOOL    smtp_return_error_details = FALSE;
1248 int     smtp_rlm_base          = 0;
1249 double  smtp_rlm_factor        = 0.0;
1250 int     smtp_rlm_limit         = 0;
1251 int     smtp_rlm_threshold     = INT_MAX;
1252 int     smtp_rlr_base          = 0;
1253 double  smtp_rlr_factor        = 0.0;
1254 int     smtp_rlr_limit         = 0;
1255 int     smtp_rlr_threshold     = INT_MAX;
1256 BOOL    smtp_use_pipelining    = FALSE;
1257 BOOL    smtp_use_size          = FALSE;
1258
1259 #ifdef WITH_CONTENT_SCAN
1260 uschar *spamd_address          = US"127.0.0.1 783";
1261 uschar *spam_bar               = NULL;
1262 uschar *spam_report            = NULL;
1263 uschar *spam_score             = NULL;
1264 uschar *spam_score_int         = NULL;
1265 #endif
1266 #ifdef EXPERIMENTAL_SPF
1267 uschar *spf_guess              = US"v=spf1 a/24 mx/24 ptr ?all";
1268 uschar *spf_header_comment     = NULL;
1269 uschar *spf_received           = NULL;
1270 uschar *spf_result             = NULL;
1271 uschar *spf_smtp_comment       = NULL;
1272 #endif
1273
1274 BOOL    split_spool_directory  = FALSE;
1275 uschar *spool_directory        = US SPOOL_DIRECTORY
1276                            "\0<--------------Space to patch spool_directory->";
1277 #ifdef EXPERIMENTAL_SRS
1278 uschar *srs_config             = NULL;
1279 uschar *srs_db_address         = NULL;
1280 uschar *srs_db_key             = NULL;
1281 int     srs_hashlength         = 6;
1282 int     srs_hashmin            = -1;
1283 int     srs_maxage             = 31;
1284 uschar *srs_orig_recipient     = NULL;
1285 uschar *srs_orig_sender        = NULL;
1286 uschar *srs_recipient          = NULL;
1287 uschar *srs_secrets            = NULL;
1288 uschar *srs_status             = NULL;
1289 BOOL    srs_usehash            = TRUE;
1290 BOOL    srs_usetimestamp       = TRUE;
1291 #endif
1292 BOOL    strict_acl_vars        = FALSE;
1293 int     string_datestamp_offset= -1;
1294 int     string_datestamp_length= 0;
1295 int     string_datestamp_type  = -1;
1296 BOOL    strip_excess_angle_brackets = FALSE;
1297 BOOL    strip_trailing_dot     = FALSE;
1298 uschar *submission_domain      = NULL;
1299 BOOL    submission_mode        = FALSE;
1300 uschar *submission_name        = NULL;
1301 BOOL    suppress_local_fixups  = FALSE;
1302 BOOL    suppress_local_fixups_default = FALSE;
1303 BOOL    synchronous_delivery   = FALSE;
1304 BOOL    syslog_duplication     = TRUE;
1305 int     syslog_facility        = LOG_MAIL;
1306 uschar *syslog_processname     = US"exim";
1307 BOOL    syslog_timestamp       = TRUE;
1308 uschar *system_filter          = NULL;
1309
1310 uschar *system_filter_directory_transport = NULL;
1311 uschar *system_filter_file_transport = NULL;
1312 uschar *system_filter_pipe_transport = NULL;
1313 uschar *system_filter_reply_transport = NULL;
1314
1315 gid_t   system_filter_gid      = 0;
1316 BOOL    system_filter_gid_set  = FALSE;
1317 uid_t   system_filter_uid      = (uid_t)-1;
1318 BOOL    system_filter_uid_set  = FALSE;
1319 BOOL    system_filtering       = FALSE;
1320
1321 BOOL    tcp_nodelay            = TRUE;
1322 #ifdef USE_TCP_WRAPPERS
1323 uschar *tcp_wrappers_daemon_name = US TCP_WRAPPERS_DAEMON_NAME;
1324 #endif
1325 int     test_harness_load_avg  = 0;
1326 int     thismessage_size_limit = 0;
1327 int     timeout_frozen_after   = 0;
1328 BOOL    timestamps_utc         = FALSE;
1329
1330 #ifdef EXPERIMENTAL_TPDA
1331 int     tpda_defer_errno        = 0;
1332 uschar *tpda_defer_errstr       = NULL;
1333 uschar *tpda_delivery_ip        = NULL;
1334 int     tpda_delivery_port      = 0;
1335 uschar *tpda_delivery_fqdn      = NULL;
1336 uschar *tpda_delivery_local_part= NULL;
1337 uschar *tpda_delivery_domain    = NULL;
1338 uschar *tpda_delivery_confirmation = NULL;
1339 #endif
1340
1341 transport_instance  *transports = NULL;
1342
1343 transport_instance  transport_defaults = {
1344     NULL,                     /* chain pointer */
1345     NULL,                     /* name */
1346     NULL,                     /* info */
1347     NULL,                     /* private options block pointer */
1348     NULL,                     /* driver name */
1349     NULL,                     /* setup entry point */
1350     1,                        /* batch_max */
1351     NULL,                     /* batch_id */
1352     NULL,                     /* home_dir */
1353     NULL,                     /* current_dir */
1354     TRUE,                     /* multi-domain */
1355     FALSE,                    /* overrides_hosts */
1356     100,                      /* max_addresses */
1357     500,                      /* connection_max_messages */
1358     FALSE,                    /* deliver_as_creator */
1359     FALSE,                    /* disable_logging */
1360     FALSE,                    /* initgroups */
1361     FALSE,                    /* uid_set */
1362     FALSE,                    /* gid_set */
1363     (uid_t)(-1),              /* uid */
1364     (gid_t)(-1),              /* gid */
1365     NULL,                     /* expand_uid */
1366     NULL,                     /* expand_gid */
1367     NULL,                     /* warn_message */
1368     NULL,                     /* shadow */
1369     NULL,                     /* shadow_condition */
1370     NULL,                     /* filter_command */
1371     NULL,                     /* add_headers */
1372     NULL,                     /* remove_headers */
1373     NULL,                     /* return_path */
1374     NULL,                     /* debug_string */
1375     NULL,                     /* message_size_limit */
1376     NULL,                     /* headers_rewrite */
1377     NULL,                     /* rewrite_rules */
1378     0,                        /* rewrite_existflags */
1379     300,                      /* filter_timeout */
1380     FALSE,                    /* body_only */
1381     FALSE,                    /* delivery_date_add */
1382     FALSE,                    /* envelope_to_add */
1383     FALSE,                    /* headers_only */
1384     FALSE,                    /* rcpt_include_affixes */
1385     FALSE,                    /* return_path_add */
1386     FALSE,                    /* return_output */
1387     FALSE,                    /* return_fail_output */
1388     FALSE,                    /* log_output */
1389     FALSE,                    /* log_fail_output */
1390     FALSE,                    /* log_defer_output */
1391     TRUE_UNSET                /* retry_use_local_part: BOOL, but set neither
1392                                  1 nor 0 so can detect unset */
1393 #ifdef EXPERIMENTAL_TPDA
1394    ,NULL                      /* tpda_delivery_action */
1395 #endif
1396 };
1397
1398 int     transport_count;
1399 uschar *transport_name          = NULL;
1400 int     transport_newlines;
1401 uschar **transport_filter_argv  = NULL;
1402 int     transport_filter_timeout;
1403 BOOL    transport_filter_timed_out = FALSE;
1404 int     transport_write_timeout= 0;
1405
1406 tree_node  *tree_dns_fails     = NULL;
1407 tree_node  *tree_duplicates    = NULL;
1408 tree_node  *tree_nonrecipients = NULL;
1409 tree_node  *tree_unusable      = NULL;
1410
1411 BOOL    trusted_caller         = FALSE;
1412 BOOL    trusted_config         = TRUE;
1413 gid_t  *trusted_groups         = NULL;
1414 uid_t  *trusted_users          = NULL;
1415 uschar *timezone_string        = US TIMEZONE_DEFAULT;
1416
1417 uschar *unknown_login          = NULL;
1418 uschar *unknown_username       = NULL;
1419 uschar *untrusted_set_sender   = NULL;
1420
1421 /*  A regex for matching a "From_" line in an incoming message, in the form
1422
1423     From ph10 Fri Jan  5 12:35 GMT 1996
1424
1425 which  the "mail" commands send to the MTA (undocumented, of course), or in
1426 the  form
1427
1428     From ph10 Fri, 7 Jan 97 14:00:00 GMT
1429
1430 which  is apparently used by some UUCPs, despite it not being in RFC 976.
1431 Because  of variations in time formats, just match up to the minutes. That
1432 should  be sufficient. Examples have been seen of time fields like 12:1:03,
1433 so  just require one digit for hours and minutes. The weekday is also absent
1434 in  some forms. */
1435
1436 uschar *uucp_from_pattern      = US
1437    "^From\\s+(\\S+)\\s+(?:[a-zA-Z]{3},?\\s+)?"    /* Common start */
1438    "(?:"                                          /* Non-extracting bracket */
1439    "[a-zA-Z]{3}\\s+\\d?\\d|"                      /* First form */
1440    "\\d?\\d\\s+[a-zA-Z]{3}\\s+\\d\\d(?:\\d\\d)?"  /* Second form */
1441    ")"                                            /* End alternation */
1442    "\\s+\\d\\d?:\\d\\d?";                         /* Start of time */
1443
1444 uschar *uucp_from_sender       = US"$1";
1445
1446 uschar *warn_message_file      = NULL;
1447 uschar *warnmsg_delay          = NULL;
1448 uschar *warnmsg_recipients     = NULL;
1449 BOOL    write_rejectlog        = TRUE;
1450
1451 uschar *version_copyright      =
1452  US"Copyright (c) University of Cambridge, 1995 - 2014\n"
1453    "(c) The Exim Maintainers and contributors in ACKNOWLEDGMENTS file, 2007 - 2014";
1454 uschar *version_date           = US"?";
1455 uschar *version_cnumber        = US"????";
1456 uschar *version_string         = US"?";
1457
1458 int     warning_count          = 0;
1459
1460 /*  End of globals.c */