SPDX: license tags (mostly by guesswork)
[exim.git] / src / src / globals.c
1 /*************************************************
2 *     Exim - an Internet mail transport agent    *
3 *************************************************/
4
5 /* Copyright (c) The Exim Maintainers 2020 - 2022 */
6 /* Copyright (c) University of Cambridge 1995 - 2018 */
7 /* See the file NOTICE for conditions of use and distribution. */
8 /* SPDX-License-Identifier: GPL-2.0-only */
9
10 /* All the global variables are defined together in this one module, so
11 that they are easy to find. */
12
13 #include "exim.h"
14
15
16 /* Generic options for auths, all of which live inside auth_instance
17 data blocks and hence have the opt_public flag set. */
18
19 optionlist optionlist_auths[] = {
20   { "client_condition", opt_stringptr | opt_public,
21                  OPT_OFF(auth_instance, client_condition) },
22   { "client_set_id", opt_stringptr | opt_public,
23                  OPT_OFF(auth_instance, set_client_id) },
24   { "driver",        opt_stringptr | opt_public,
25                  OPT_OFF(auth_instance, driver_name) },
26   { "public_name",   opt_stringptr | opt_public,
27                  OPT_OFF(auth_instance, public_name) },
28   { "server_advertise_condition", opt_stringptr | opt_public,
29                  OPT_OFF(auth_instance, advertise_condition)},
30   { "server_condition", opt_stringptr | opt_public,
31                  OPT_OFF(auth_instance, server_condition) },
32   { "server_debug_print", opt_stringptr | opt_public,
33                  OPT_OFF(auth_instance, server_debug_string) },
34   { "server_mail_auth_condition", opt_stringptr | opt_public,
35                  OPT_OFF(auth_instance, mail_auth_condition) },
36   { "server_set_id", opt_stringptr | opt_public,
37                  OPT_OFF(auth_instance, set_id) }
38 };
39
40 int     optionlist_auths_size = nelem(optionlist_auths);
41
42 /* An empty host aliases list. */
43
44 uschar *no_aliases             = NULL;
45
46
47 /* For comments on these variables, see globals.h. I'm too idle to
48 duplicate them here... */
49
50 #ifdef EXIM_PERL
51 uschar *opt_perl_startup       = NULL;
52 BOOL    opt_perl_at_start      = FALSE;
53 BOOL    opt_perl_started       = FALSE;
54 BOOL    opt_perl_taintmode     = FALSE;
55 #endif
56
57 #ifdef EXPAND_DLFUNC
58 tree_node *dlobj_anchor        = NULL;
59 #endif
60
61 #ifdef LOOKUP_IBASE
62 uschar *ibase_servers          = NULL;
63 #endif
64
65 #ifdef LOOKUP_LDAP
66 uschar *eldap_ca_cert_dir      = NULL;
67 uschar *eldap_ca_cert_file     = NULL;
68 uschar *eldap_cert_file        = NULL;
69 uschar *eldap_cert_key         = NULL;
70 uschar *eldap_cipher_suite     = NULL;
71 uschar *eldap_default_servers  = NULL;
72 uschar *eldap_require_cert     = NULL;
73 int     eldap_version          = -1;
74 BOOL    eldap_start_tls        = FALSE;
75 #endif
76
77 #ifdef LOOKUP_MYSQL
78 uschar *mysql_servers          = NULL;
79 #endif
80
81 #ifdef LOOKUP_ORACLE
82 uschar *oracle_servers         = NULL;
83 #endif
84
85 #ifdef LOOKUP_PGSQL
86 uschar *pgsql_servers          = NULL;
87 #endif
88
89 #ifdef LOOKUP_REDIS
90 uschar *redis_servers          = NULL;
91 #endif
92
93 #ifdef LOOKUP_SQLITE
94 uschar *sqlite_dbfile          = NULL;
95 int     sqlite_lock_timeout    = 5;
96 #endif
97
98 #ifdef SUPPORT_MOVE_FROZEN_MESSAGES
99 BOOL    move_frozen_messages   = FALSE;
100 #endif
101
102 /* These variables are outside the #ifdef because it keeps the code less
103 cluttered in several places (e.g. during logging) if we can always refer to
104 them. Also, the tls_ variables are now always visible.  Note that these are
105 only used for smtp connections, not for service-daemon access. */
106
107 tls_support tls_in = {
108  .active =              {.sock = -1}
109  /* all other elements zero */
110 };
111 tls_support tls_out = {
112  .active =              {.sock = -1},
113  /* all other elements zero */
114 };
115
116 uschar *dsn_envid              = NULL;
117 int     dsn_ret                = 0;
118 const pcre2_code  *regex_DSN         = NULL;
119 uschar *dsn_advertise_hosts    = NULL;
120
121 #ifndef DISABLE_TLS
122 BOOL    gnutls_compat_mode     = FALSE;
123 BOOL    gnutls_allow_auto_pkcs11 = FALSE;
124 uschar *hosts_require_alpn     = NULL;
125 uschar *openssl_options        = NULL;
126 const pcre2_code *regex_STARTTLS     = NULL;
127 uschar *tls_advertise_hosts    = US"*";
128 uschar *tls_alpn               = US"smtp:esmtp";
129 uschar *tls_certificate        = NULL;
130 uschar *tls_crl                = NULL;
131 /* This default matches NSS DH_MAX_P_BITS value at current time (2012), because
132 that's the interop problem which has been observed: GnuTLS suggesting a higher
133 bit-count as "NORMAL" (2432) and Thunderbird dropping connection. */
134 int     tls_dh_max_bits        = 2236;
135 uschar *tls_dhparam            = NULL;
136 uschar *tls_eccurve            = US"auto";
137 # ifndef DISABLE_OCSP
138 uschar *tls_ocsp_file          = NULL;
139 # endif
140 uschar *tls_privatekey         = NULL;
141 BOOL    tls_remember_esmtp     = FALSE;
142 uschar *tls_require_ciphers    = NULL;
143 # ifndef DISABLE_TLS_RESUME
144 uschar *tls_resumption_hosts   = NULL;
145 # endif
146 uschar *tls_try_verify_hosts   = NULL;
147 uschar *tls_verify_certificates= US"system";
148 uschar *tls_verify_hosts       = NULL;
149 int     tls_watch_fd           = -1;
150 time_t  tls_watch_trigger_time = (time_t)0;
151 #else   /*DISABLE_TLS*/
152 uschar *tls_advertise_hosts    = NULL;
153 #endif
154
155 #ifndef DISABLE_PRDR
156 /* Per Recipient Data Response variables */
157 BOOL    prdr_enable            = FALSE;
158 BOOL    prdr_requested         = FALSE;
159 const pcre2_code *regex_PRDR         = NULL;
160 #endif
161
162 #ifdef SUPPORT_I18N
163 const pcre2_code *regex_UTF8         = NULL;
164 #endif
165
166 /* Input-reading functions for messages, so we can use special ones for
167 incoming TCP/IP. The defaults use stdin. We never need these for any
168 stand-alone tests. */
169
170 #if !defined(STAND_ALONE) && !defined(MACRO_PREDEF)
171 int     (*lwr_receive_getc)(unsigned)   = stdin_getc;
172 uschar * (*lwr_receive_getbuf)(unsigned *) = NULL;
173 int     (*lwr_receive_ungetc)(int)      = stdin_ungetc;
174 BOOL    (*lwr_receive_hasc)(void)       = stdin_hasc;
175
176 int     (*receive_getc)(unsigned)       = stdin_getc;
177 uschar * (*receive_getbuf)(unsigned *)  = NULL;
178 void    (*receive_get_cache)(unsigned)  = NULL;
179 BOOL    (*receive_hasc)(void)           = stdin_hasc;
180 int     (*receive_ungetc)(int)          = stdin_ungetc;
181 int     (*receive_feof)(void)           = stdin_feof;
182 int     (*receive_ferror)(void)         = stdin_ferror;
183 #endif
184
185
186 /* List of per-address expansion variables for clearing and saving/restoring
187 when verifying one address while routing/verifying another. We have to have
188 the size explicit, because it is referenced from more than one module. */
189
190 const uschar **address_expansions[ADDRESS_EXPANSIONS_COUNT] = {
191   CUSS &deliver_address_data,
192   CUSS &deliver_domain,
193   CUSS &deliver_domain_data,
194   CUSS &deliver_domain_orig,
195   CUSS &deliver_domain_parent,
196   CUSS &deliver_localpart,
197   CUSS &deliver_localpart_data,
198   CUSS &deliver_localpart_orig,
199   CUSS &deliver_localpart_parent,
200   CUSS &deliver_localpart_prefix,
201   CUSS &deliver_localpart_suffix,
202   CUSS (uschar **)(&deliver_recipients),
203   CUSS &deliver_host,
204   CUSS &deliver_home,
205   CUSS &address_file,
206   CUSS &address_pipe,
207   CUSS &self_hostname,
208   NULL };
209
210 int address_expansions_count = sizeof(address_expansions)/sizeof(uschar **);
211
212 /******************************************************************************/
213 /* General global variables.  Boolean flags are done as a group
214 so that only one bit each is needed, packed, for all those we never
215 need to take a pointer - and only a char for the rest.
216 This means a struct, unfortunately since it clutters the sourcecode. */
217
218 struct global_flags f =
219 {
220         .acl_temp_details       = FALSE,
221         .active_local_from_check = FALSE,
222         .active_local_sender_retain = FALSE,
223         .address_test_mode      = FALSE,
224         .admin_user             = FALSE,
225         .allow_auth_unadvertised= FALSE,
226         .allow_unqualified_recipient = TRUE,    /* For local messages */
227         .allow_unqualified_sender = TRUE,       /* Reset for SMTP */
228         .authentication_local   = FALSE,
229
230         .background_daemon      = TRUE,
231         .bdat_readers_wanted    = FALSE,
232
233         .chunking_offered       = FALSE,
234         .config_changed         = FALSE,
235         .continue_more          = FALSE,
236
237         .daemon_listen          = FALSE,
238         .daemon_scion           = FALSE,
239         .debug_daemon           = FALSE,
240         .deliver_firsttime      = FALSE,
241         .deliver_force          = FALSE,
242         .deliver_freeze         = FALSE,
243         .deliver_force_thaw     = FALSE,
244         .deliver_manual_thaw    = FALSE,
245         .deliver_selectstring_regex = FALSE,
246         .deliver_selectstring_sender_regex = FALSE,
247         .disable_callout_flush  = FALSE,
248         .disable_delay_flush    = FALSE,
249         .disable_logging        = FALSE,
250 #ifndef DISABLE_DKIM
251         .dkim_disable_verify      = FALSE,
252         .dkim_init_done           = FALSE,
253 #endif
254 #ifdef SUPPORT_DMARC
255         .dmarc_has_been_checked  = FALSE,
256         .dmarc_disable_verify    = FALSE,
257         .dmarc_enable_forensic   = FALSE,
258 #endif
259         .dont_deliver           = FALSE,
260         .dot_ends               = TRUE,
261
262         .enable_dollar_recipients = FALSE,
263         .expand_string_forcedfail = FALSE,
264
265         .filter_running         = FALSE,
266
267         .header_rewritten       = FALSE,
268         .helo_verified          = FALSE,
269         .helo_verify_failed     = FALSE,
270         .host_checking_callout  = FALSE,
271         .host_find_failed_syntax= FALSE,
272
273         .inetd_wait_mode        = FALSE,
274         .is_inetd               = FALSE,
275
276         .local_error_message    = FALSE,
277         .log_testing_mode       = FALSE,
278
279 #ifdef WITH_CONTENT_SCAN
280         .no_mbox_unspool        = FALSE,
281 #endif
282         .no_multiline_responses = FALSE,
283
284         .parse_allow_group      = FALSE,
285         .parse_found_group      = FALSE,
286         .pipelining_enable      = TRUE,
287 #if defined(SUPPORT_PROXY) || defined(SUPPORT_SOCKS)
288         .proxy_session_failed   = FALSE,
289 #endif
290
291         .queue_2stage           = FALSE,
292         .queue_only_policy      = FALSE,
293         .queue_run_first_delivery = FALSE,
294         .queue_run_force        = FALSE,
295         .queue_run_local        = FALSE,
296         .queue_running          = FALSE,
297         .queue_smtp             = FALSE,
298
299         .really_exim            = TRUE,
300         .receive_call_bombout   = FALSE,
301         .recipients_discarded   = FALSE,
302         .running_in_test_harness = FALSE,
303
304         .search_find_defer      = FALSE,
305         .sender_address_forced  = FALSE,
306         .sender_host_notsocket  = FALSE,
307         .sender_host_unknown    = FALSE,
308         .sender_local           = FALSE,
309         .sender_name_forced     = FALSE,
310         .sender_set_untrusted   = FALSE,
311         .smtp_authenticated     = FALSE,
312 #ifndef DISABLE_PIPE_CONNECT
313         .smtp_in_early_pipe_advertised = FALSE,
314         .smtp_in_early_pipe_no_auth = FALSE,
315         .smtp_in_early_pipe_used = FALSE,
316 #endif
317         .smtp_in_pipelining_advertised = FALSE,
318         .smtp_in_pipelining_used = FALSE,
319         .smtp_in_quit           = FALSE,
320         .spool_file_wireformat  = FALSE,
321         .submission_mode        = FALSE,
322         .suppress_local_fixups  = FALSE,
323         .suppress_local_fixups_default = FALSE,
324         .synchronous_delivery   = FALSE,
325         .system_filtering       = FALSE,
326
327         .taint_check_slow       = FALSE,
328         .testsuite_delays       = TRUE,
329         .tcp_fastopen_ok        = FALSE,
330         .tcp_in_fastopen        = FALSE,
331         .tcp_in_fastopen_data   = FALSE,
332         .tcp_in_fastopen_logged = FALSE,
333         .tcp_out_fastopen_logged= FALSE,
334         .timestamps_utc         = FALSE,
335         .transport_filter_timed_out = FALSE,
336         .trusted_caller         = FALSE,
337         .trusted_config         = TRUE,
338 };
339
340 /******************************************************************************/
341 /* These are the flags which are either variables or mainsection options,
342 so an address is needed for access, or are exported to local_scan. */
343
344 BOOL    accept_8bitmime        = TRUE; /* deliberately not RFC compliant */
345 BOOL    allow_domain_literals  = FALSE;
346 BOOL    allow_mx_to_ip         = FALSE;
347 BOOL    allow_utf8_domains     = FALSE;
348 BOOL    authentication_failed  = FALSE;
349
350 BOOL    bounce_return_body     = TRUE;
351 BOOL    bounce_return_message  = TRUE;
352 BOOL    check_rfc2047_length   = TRUE;
353 BOOL    commandline_checks_require_admin = FALSE;
354
355 #ifdef EXPERIMENTAL_DCC
356 BOOL    dcc_direct_add_header  = FALSE;
357 #endif
358 BOOL    debug_store            = FALSE;
359 BOOL    delivery_date_remove   = TRUE;
360 BOOL    deliver_drop_privilege = FALSE;
361 #ifdef ENABLE_DISABLE_FSYNC
362 BOOL    disable_fsync          = FALSE;
363 #endif
364 BOOL    disable_ipv6           = FALSE;
365 BOOL    dns_csa_use_reverse    = TRUE;
366 BOOL    drop_cr                = FALSE;         /* No longer used */
367
368 BOOL    envelope_to_remove     = TRUE;
369 BOOL    exim_gid_set           = TRUE;          /* This gid is always set */
370 BOOL    exim_uid_set           = TRUE;          /* This uid is always set */
371 BOOL    extract_addresses_remove_arguments = TRUE;
372
373 BOOL    host_checking          = FALSE;
374 BOOL    host_lookup_deferred   = FALSE;
375 BOOL    host_lookup_failed     = FALSE;
376 BOOL    ignore_fromline_local  = FALSE;
377
378 BOOL    local_from_check       = TRUE;
379 BOOL    local_sender_retain    = FALSE;
380 BOOL    log_timezone           = FALSE;
381 BOOL    message_body_newlines  = FALSE;
382 BOOL    message_logs           = TRUE;
383 #ifdef SUPPORT_I18N
384 BOOL    message_smtputf8       = FALSE;
385 #endif
386 BOOL    mua_wrapper            = FALSE;
387
388 BOOL    preserve_message_logs  = FALSE;
389 BOOL    print_topbitchars      = FALSE;
390 BOOL    prod_requires_admin    = TRUE;
391 #if defined(SUPPORT_PROXY) || defined(SUPPORT_SOCKS)
392 BOOL    proxy_session          = FALSE;
393 #endif
394
395 #ifndef DISABLE_QUEUE_RAMP
396 BOOL    queue_fast_ramp         = TRUE;
397 #endif
398 BOOL    queue_list_requires_admin = TRUE;
399 BOOL    queue_only             = FALSE;
400 BOOL    queue_only_load_latch  = TRUE;
401 BOOL    queue_only_override    = TRUE;
402 BOOL    queue_run_in_order     = FALSE;
403 BOOL    recipients_max_reject  = FALSE;
404 BOOL    return_path_remove     = TRUE;
405
406 BOOL    smtp_batched_input     = FALSE;
407 BOOL    sender_helo_dnssec     = FALSE;
408 BOOL    sender_host_dnssec     = FALSE;
409 BOOL    smtp_accept_keepalive  = TRUE;
410 BOOL    smtp_check_spool_space = TRUE;
411 BOOL    smtp_enforce_sync      = TRUE;
412 BOOL    smtp_etrn_serialize    = TRUE;
413 BOOL    smtp_input             = FALSE;
414 BOOL    smtp_return_error_details = FALSE;
415 #ifdef SUPPORT_SPF
416 BOOL    spf_result_guessed     = FALSE;
417 #endif
418 BOOL    split_spool_directory  = FALSE;
419 BOOL    spool_wireformat       = FALSE;
420 BOOL    strict_acl_vars        = FALSE;
421 BOOL    strip_excess_angle_brackets = FALSE;
422 BOOL    strip_trailing_dot     = FALSE;
423 BOOL    syslog_duplication     = TRUE;
424 BOOL    syslog_pid             = TRUE;
425 BOOL    syslog_timestamp       = TRUE;
426 BOOL    system_filter_gid_set  = FALSE;
427 BOOL    system_filter_uid_set  = FALSE;
428
429 BOOL    tcp_nodelay            = TRUE;
430 BOOL    write_rejectlog        = TRUE;
431
432 /******************************************************************************/
433
434 header_line *acl_added_headers = NULL;
435 tree_node *acl_anchor          = NULL;
436 uschar *acl_arg[9]             = {NULL, NULL, NULL, NULL, NULL,
437                                   NULL, NULL, NULL, NULL};
438 int     acl_narg               = 0;
439
440 int     acl_level              = 0;
441
442 uschar *acl_not_smtp           = NULL;
443 #ifdef WITH_CONTENT_SCAN
444 uschar *acl_not_smtp_mime      = NULL;
445 #endif
446 uschar *acl_not_smtp_start     = NULL;
447 uschar *acl_removed_headers    = NULL;
448 uschar *acl_smtp_auth          = NULL;
449 uschar *acl_smtp_connect       = NULL;
450 uschar *acl_smtp_data          = NULL;
451 #ifndef DISABLE_PRDR
452 uschar *acl_smtp_data_prdr     = US"accept";
453 #endif
454 #ifndef DISABLE_DKIM
455 uschar *acl_smtp_dkim          = NULL;
456 #endif
457 uschar *acl_smtp_etrn          = NULL;
458 uschar *acl_smtp_expn          = NULL;
459 uschar *acl_smtp_helo          = NULL;
460 uschar *acl_smtp_mail          = NULL;
461 uschar *acl_smtp_mailauth      = NULL;
462 #ifdef WITH_CONTENT_SCAN
463 uschar *acl_smtp_mime          = NULL;
464 #endif
465 uschar *acl_smtp_notquit       = NULL;
466 uschar *acl_smtp_predata       = NULL;
467 uschar *acl_smtp_quit          = NULL;
468 uschar *acl_smtp_rcpt          = NULL;
469 uschar *acl_smtp_starttls      = NULL;
470 uschar *acl_smtp_vrfy          = NULL;
471
472 tree_node *acl_var_c           = NULL;
473 tree_node *acl_var_m           = NULL;
474 uschar *acl_verify_message     = NULL;
475 string_item *acl_warn_logged   = NULL;
476
477 /* Names of SMTP places for use in ACL error messages, and corresponding SMTP
478 error codes - keep in step with definitions of ACL_WHERE_xxxx in macros.h. */
479
480 uschar *acl_wherenames[]       = { US"RCPT",
481                                    US"MAIL",
482                                    US"PREDATA",
483                                    US"MIME",
484                                    US"DKIM",
485                                    US"DATA",
486 #ifndef DISABLE_PRDR
487                                    US"PRDR",
488 #endif
489                                    US"non-SMTP",
490                                    US"AUTH",
491                                    US"connection",
492                                    US"ETRN",
493                                    US"EXPN",
494                                    US"EHLO or HELO",
495                                    US"MAILAUTH",
496                                    US"non-SMTP-start",
497                                    US"NOTQUIT",
498                                    US"QUIT",
499                                    US"STARTTLS",
500                                    US"VRFY",
501                                    US"delivery",
502                                    US"unknown"
503                                  };
504
505 uschar *acl_wherecodes[]       = { US"550",     /* RCPT */
506                                    US"550",     /* MAIL */
507                                    US"550",     /* PREDATA */
508                                    US"550",     /* MIME */
509                                    US"550",     /* DKIM */
510                                    US"550",     /* DATA */
511 #ifndef DISABLE_PRDR
512                                    US"550",    /* RCPT PRDR */
513 #endif
514                                    US"0",       /* not SMTP; not relevant */
515                                    US"503",     /* AUTH */
516                                    US"550",     /* connect */
517                                    US"458",     /* ETRN */
518                                    US"550",     /* EXPN */
519                                    US"550",     /* HELO/EHLO */
520                                    US"0",       /* MAILAUTH; not relevant */
521                                    US"0",       /* not SMTP; not relevant */
522                                    US"0",       /* NOTQUIT; not relevant */
523                                    US"0",       /* QUIT; not relevant */
524                                    US"550",     /* STARTTLS */
525                                    US"252",     /* VRFY */
526                                    US"0",       /* delivery; not relevant */
527                                    US"0"        /* unknown; not relevant */
528                                  };
529
530 uschar *add_environment        = NULL;
531 address_item  *addr_duplicate  = NULL;
532
533 address_item address_defaults = {
534   .next =               NULL,
535   .parent =             NULL,
536   .first =              NULL,
537   .dupof =              NULL,
538   .start_router =       NULL,
539   .router =             NULL,
540   .transport =          NULL,
541   .host_list =          NULL,
542   .host_used =          NULL,
543   .fallback_hosts =     NULL,
544   .reply =              NULL,
545   .retries =            NULL,
546   .address =            NULL,
547   .unique =             NULL,
548   .cc_local_part =      NULL,
549   .lc_local_part =      NULL,
550   .local_part =         NULL,
551   .prefix =             NULL,
552   .prefix_v =           NULL,
553   .suffix =             NULL,
554   .suffix_v =           NULL,
555   .domain =             NULL,
556   .address_retry_key =  NULL,
557   .domain_retry_key =   NULL,
558   .current_dir =        NULL,
559   .home_dir =           NULL,
560   .message =            NULL,
561   .user_message =       NULL,
562   .onetime_parent =     NULL,
563   .pipe_expandn =       NULL,
564   .return_filename =    NULL,
565   .self_hostname =      NULL,
566   .shadow_message =     NULL,
567 #ifndef DISABLE_TLS
568   .cipher =             NULL,
569   .ourcert =            NULL,
570   .peercert =           NULL,
571   .peerdn =             NULL,
572   .ocsp =               OCSP_NOT_REQ,
573 #endif
574 #ifdef EXPERIMENTAL_DSN_INFO
575   .smtp_greeting =      NULL,
576   .helo_response =      NULL,
577 #endif
578   .authenticator =      NULL,
579   .auth_id =            NULL,
580   .auth_sndr =          NULL,
581   .dsn_orcpt =          NULL,
582   .dsn_flags =          0,
583   .dsn_aware =          0,
584   .uid =                (uid_t)(-1),
585   .gid =                (gid_t)(-1),
586   .flags =              { 0 },
587   .domain_cache =       { 0 },                /* domain_cache - any larger array should be zeroed */
588   .localpart_cache =    { 0 },                /* localpart_cache - ditto */
589   .mode =               -1,
590   .more_errno =         0,
591   .delivery_time =      {.tv_sec = 0, .tv_usec = 0},
592   .basic_errno =        ERRNO_UNKNOWNERROR,
593   .child_count =        0,
594   .return_file =        -1,
595   .special_action =     SPECIAL_NONE,
596   .transport_return =   DEFER,
597   .prop = {                                     /* fields that are propagated to children */
598     .address_data =     NULL,
599     .domain_data =      NULL,
600     .localpart_data =   NULL,
601     .errors_address =   NULL,
602     .extra_headers =    NULL,
603     .remove_headers =   NULL,
604     .variables =        NULL,
605     .ignore_error =     FALSE,
606 #ifdef SUPPORT_I18N
607     .utf8_msg =         FALSE,
608     .utf8_downcvt =     FALSE,
609     .utf8_downcvt_maybe = FALSE
610 #endif
611   }
612 };
613
614 uschar *address_file           = NULL;
615 uschar *address_pipe           = NULL;
616 tree_node *addresslist_anchor  = NULL;
617 int     addresslist_count      = 0;
618 gid_t  *admin_groups           = NULL;
619
620 #ifdef EXPERIMENTAL_ARC
621 struct arc_set *arc_received    = NULL;
622 int     arc_received_instance   = 0;
623 int     arc_oldest_pass         = 0;
624 const uschar *arc_state         = NULL;
625 const uschar *arc_state_reason  = NULL;
626 #endif
627
628 uschar *authenticated_fail_id  = NULL;
629 uschar *authenticated_id       = NULL;
630 uschar *authenticated_sender   = NULL;
631 auth_instance  *auths          = NULL;
632 uschar *auth_advertise_hosts   = US"*";
633 auth_instance auth_defaults    = {
634     .next =             NULL,
635     .name =             NULL,
636     .info =             NULL,
637     .options_block =    NULL,
638     .driver_name =      NULL,
639     .advertise_condition = NULL,
640     .client_condition = NULL,
641     .public_name =      NULL,
642     .set_id =           NULL,
643     .set_client_id =    NULL,
644     .mail_auth_condition = NULL,
645     .server_debug_string = NULL,
646     .server_condition = NULL,
647     .client =           FALSE,
648     .server =           FALSE,
649     .advertised =       FALSE
650 };
651
652 uschar *auth_defer_msg         = US"reason not recorded";
653 uschar *auth_defer_user_msg    = US"";
654 const uschar *auth_vars[AUTH_VARS];
655 uschar *authenticator_name     = NULL;
656 int     auto_thaw              = 0;
657 #ifdef WITH_CONTENT_SCAN
658 int     av_failed              = FALSE; /* boolean but accessed as vtype_int*/
659 uschar *av_scanner             = US"sophie:/var/run/sophie";  /* AV scanner */
660 #endif
661
662 #if BASE_62 == 62
663 uschar *base62_chars=
664     US"0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz";
665 #else
666 uschar *base62_chars= US"0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ";
667 #endif
668
669 uschar *bi_command             = NULL;
670 uschar *big_buffer             = NULL;
671 int     big_buffer_size        = BIG_BUFFER_SIZE;
672 #ifdef EXPERIMENTAL_BRIGHTMAIL
673 uschar *bmi_alt_location       = NULL;
674 uschar *bmi_base64_tracker_verdict = NULL;
675 uschar *bmi_base64_verdict     = NULL;
676 uschar *bmi_config_file        = US"/opt/brightmail/etc/brightmail.cfg";
677 int     bmi_deliver            = 1;
678 int     bmi_run                = 0;
679 uschar *bmi_verdicts           = NULL;
680 #endif
681 int     bsmtp_transaction_linecount = 0;
682 int     body_8bitmime          = 0;
683 int     body_linecount         = 0;
684 int     body_zerocount         = 0;
685 uschar *bounce_message_file    = NULL;
686 uschar *bounce_message_text    = NULL;
687 uschar *bounce_recipient       = NULL;
688 int     bounce_return_linesize_limit = 998;
689 int     bounce_return_size_limit = 100*1024;
690 uschar *bounce_sender_authentication = NULL;
691
692 uschar *callout_address        = NULL;
693 int     callout_cache_domain_positive_expire = 7*24*60*60;
694 int     callout_cache_domain_negative_expire = 3*60*60;
695 int     callout_cache_positive_expire = 24*60*60;
696 int     callout_cache_negative_expire = 2*60*60;
697 uschar *callout_random_local_part = US"$primary_hostname-$tod_epoch-testing";
698 uschar *check_dns_names_pattern= US"(?i)^(?>(?(1)\\.|())[^\\W](?>[a-z0-9/_-]*[^\\W])?)+(\\.?)$";
699 int     check_log_inodes       = 100;
700 int_eximarith_t check_log_space = 10*1024;      /* 10K Kbyte == 10MB */
701 int     check_spool_inodes     = 100;
702 int_eximarith_t check_spool_space = 10*1024;    /* 10K Kbyte == 10MB */
703
704 uschar *chunking_advertise_hosts = US"*";
705 unsigned chunking_datasize     = 0;
706 unsigned chunking_data_left    = 0;
707 chunking_state_t chunking_state= CHUNKING_NOT_OFFERED;
708 const pcre2_code *regex_CHUNKING     = NULL;
709
710 #ifdef EXPERIMENTAL_ESMTP_LIMITS
711 const pcre2_code *regex_LIMITS        = NULL;
712 #endif
713
714 uschar *client_authenticator   = NULL;
715 uschar *client_authenticated_id = NULL;
716 uschar *client_authenticated_sender = NULL;
717 #ifndef DISABLE_CLIENT_CMD_LOG
718 gstring *client_cmd_log        = NULL;
719 #endif
720 int     clmacro_count          = 0;
721 uschar *clmacros[MAX_CLMACROS];
722 FILE   *config_file            = NULL;
723 const uschar *config_filename  = NULL;
724 int     config_lineno          = 0;
725 #ifdef CONFIGURE_GROUP
726 gid_t   config_gid             = CONFIGURE_GROUP;
727 #else
728 gid_t   config_gid             = 0;
729 #endif
730 uschar *config_main_filelist   = US CONFIGURE_FILE
731                          "\0<-----------Space to patch configure_filename->";
732 uschar *config_main_filename   = NULL;
733 uschar *config_main_directory  = NULL;
734
735 #ifdef CONFIGURE_OWNER
736 uid_t   config_uid             = CONFIGURE_OWNER;
737 #else
738 uid_t   config_uid             = 0;
739 #endif
740
741 int     connection_max_messages= -1;
742 uschar *continue_proxy_cipher  = NULL;
743 BOOL    continue_proxy_dane    = FALSE;
744 uschar *continue_proxy_sni     = NULL;
745 uschar *continue_hostname      = NULL;
746 uschar *continue_host_address  = NULL;
747 int     continue_sequence      = 1;
748 uschar *continue_transport     = NULL;
749 #ifdef EXPERIMENTAL_ESMTP_LIMITS
750 unsigned continue_limit_mail   = 0;
751 unsigned continue_limit_rcpt   = 0;
752 unsigned continue_limit_rcptdom= 0;
753 #endif
754
755 uschar *csa_status             = NULL;
756 cut_t   cutthrough = {
757   .callout_hold_only =  FALSE,                          /* verify-only: normal delivery */
758   .delivery =           FALSE,                          /* when to attempt */
759   .defer_pass =         FALSE,                          /* on defer: spool locally */
760   .is_tls =             FALSE,                          /* not a TLS conn yet */
761   .cctx =               {.sock = -1},                   /* open connection */
762   .nrcpt =              0,                              /* number of addresses */
763 };
764
765 int     daemon_notifier_fd     = -1;
766 uschar *daemon_smtp_port       = US"smtp";
767 int     daemon_startup_retries = 9;
768 int     daemon_startup_sleep   = 30;
769
770 #ifdef EXPERIMENTAL_DCC
771 uschar *dcc_header             = NULL;
772 uschar *dcc_result             = NULL;
773 uschar *dccifd_address         = US"/usr/local/dcc/var/dccifd";
774 uschar *dccifd_options         = US"header";
775 #endif
776
777 int     debug_fd               = -1;
778 FILE   *debug_file             = NULL;
779 int     debug_notall[]         = {
780   Di_memory,
781   Di_noutf8,
782   -1
783 };
784 bit_table debug_options[]      = { /* must be in alphabetical order and use
785                                  only the enum values from macro.h */
786   BIT_TABLE(D, acl),
787   BIT_TABLE(D, all),
788   BIT_TABLE(D, auth),
789   BIT_TABLE(D, deliver),
790   BIT_TABLE(D, dns),
791   BIT_TABLE(D, dnsbl),
792   BIT_TABLE(D, exec),
793   BIT_TABLE(D, expand),
794   BIT_TABLE(D, filter),
795   BIT_TABLE(D, hints_lookup),
796   BIT_TABLE(D, host_lookup),
797   BIT_TABLE(D, ident),
798   BIT_TABLE(D, interface),
799   BIT_TABLE(D, lists),
800   BIT_TABLE(D, load),
801   BIT_TABLE(D, local_scan),
802   BIT_TABLE(D, lookup),
803   BIT_TABLE(D, memory),
804   BIT_TABLE(D, noutf8),
805   BIT_TABLE(D, pid),
806   BIT_TABLE(D, process_info),
807   BIT_TABLE(D, queue_run),
808   BIT_TABLE(D, receive),
809   BIT_TABLE(D, resolver),
810   BIT_TABLE(D, retry),
811   BIT_TABLE(D, rewrite),
812   BIT_TABLE(D, route),
813   BIT_TABLE(D, timestamp),
814   BIT_TABLE(D, tls),
815   BIT_TABLE(D, transport),
816   BIT_TABLE(D, uid),
817   BIT_TABLE(D, verify),
818 };
819 int      debug_options_count    = nelem(debug_options);
820 uschar   debuglog_name[LOG_NAME_SIZE] = {0};
821 unsigned debug_pretrigger_bsize = 0;
822 uschar * debug_pretrigger_buf   = NULL;
823 unsigned int debug_selector     = 0;
824
825 int     delay_warning[DELAY_WARNING_SIZE] = { DELAY_WARNING_SIZE, 1, 24*60*60 };
826 uschar *delay_warning_condition=
827   US"${if or {"
828             "{ !eq{$h_list-id:$h_list-post:$h_list-subscribe:}{} }"
829             "{ match{$h_precedence:}{(?i)bulk|list|junk} }"
830             "{ match{$h_auto-submitted:}{(?i)auto-generated|auto-replied} }"
831             "} {no}{yes}}";
832 uschar *deliver_address_data   = NULL;
833 int     deliver_datafile       = -1;
834 const uschar *deliver_domain   = NULL;
835 uschar *deliver_domain_data    = NULL;
836 const uschar *deliver_domain_orig = NULL;
837 const uschar *deliver_domain_parent = NULL;
838 time_t  deliver_frozen_at      = 0;
839 uschar *deliver_home           = NULL;
840 const uschar *deliver_host     = NULL;
841 const uschar *deliver_host_address = NULL;
842 int     deliver_host_port      = 0;
843 uschar *deliver_in_buffer      = NULL;
844 ino_t   deliver_inode          = 0;
845 uschar *deliver_localpart      = NULL;
846 uschar *deliver_localpart_data = NULL;
847 uschar *deliver_localpart_orig = NULL;
848 uschar *deliver_localpart_parent = NULL;
849 uschar *deliver_localpart_prefix = NULL;
850 uschar *deliver_localpart_prefix_v = NULL;
851 uschar *deliver_localpart_suffix = NULL;
852 uschar *deliver_localpart_suffix_v = NULL;
853 uschar *deliver_out_buffer     = NULL;
854 int     deliver_queue_load_max = -1;
855 address_item  *deliver_recipients = NULL;
856 uschar *deliver_selectstring   = NULL;
857 uschar *deliver_selectstring_sender = NULL;
858
859 #ifndef DISABLE_DKIM
860 unsigned dkim_collect_input      = 0;
861 uschar *dkim_cur_signer          = NULL;
862 int     dkim_key_length          = 0;
863 void   *dkim_signatures          = NULL;
864 uschar *dkim_signers             = NULL;
865 uschar *dkim_signing_domain      = NULL;
866 uschar *dkim_signing_selector    = NULL;
867 uschar *dkim_verify_hashes       = US"sha256:sha512";
868 uschar *dkim_verify_keytypes     = US"ed25519:rsa";
869 uschar *dkim_verify_min_keysizes = US"rsa=1024 ed25519=250";
870 BOOL    dkim_verify_minimal      = FALSE;
871 uschar *dkim_verify_overall      = NULL;
872 uschar *dkim_verify_signers      = US"$dkim_signers";
873 uschar *dkim_verify_status       = NULL;
874 uschar *dkim_verify_reason       = NULL;
875 #endif
876 #ifdef SUPPORT_DMARC
877 uschar *dmarc_domain_policy     = NULL;
878 uschar *dmarc_forensic_sender   = NULL;
879 uschar *dmarc_history_file      = NULL;
880 uschar *dmarc_status            = NULL;
881 uschar *dmarc_status_text       = NULL;
882 uschar *dmarc_tld_file          = NULL;
883 uschar *dmarc_used_domain       = NULL;
884 #endif
885
886 uschar *dns_again_means_nonexist = NULL;
887 int     dns_csa_search_limit   = 5;
888 int     dns_cname_loops        = 1;
889 #ifdef SUPPORT_DANE
890 int     dns_dane_ok            = -1;
891 #endif
892 uschar *dns_ipv4_lookup        = NULL;
893 int     dns_retrans            = 0;
894 int     dns_retry              = 0;
895 int     dns_dnssec_ok          = -1; /* <0 = not coerced */
896 uschar *dns_trust_aa           = NULL;
897 int     dns_use_edns0          = -1; /* <0 = not coerced */
898 uschar *dnslist_domain         = NULL;
899 uschar *dnslist_matched        = NULL;
900 uschar *dnslist_text           = NULL;
901 uschar *dnslist_value          = NULL;
902 tree_node *domainlist_anchor   = NULL;
903 int     domainlist_count       = 0;
904 const uschar *driver_srcfile   = NULL;
905 int     driver_srcline         = 0;
906 uschar *dsn_from               = US DEFAULT_DSN_FROM;
907 unsigned int dtrigger_selector = 0;
908
909 int     errno_quota            = ERRNO_QUOTA;
910 uschar *errors_copy            = NULL;
911 int     error_handling         = ERRORS_SENDER;
912 uschar *errors_reply_to        = NULL;
913 int     errors_sender_rc       = EXIT_FAILURE;
914 #ifndef DISABLE_EVENT
915 uschar *event_action             = NULL;        /* expansion for delivery events */
916 uschar *event_data               = NULL;        /* auxiliary data variable for event */
917 int     event_defer_errno        = 0;
918 const uschar *event_name         = NULL;        /* event name variable */
919 #endif
920
921
922 gid_t   exim_gid               = EXIM_GID;
923 uschar *exim_path              = US BIN_DIRECTORY "/exim"
924                         "\0<---------------Space to patch exim_path->";
925 uid_t   exim_uid               = EXIM_UID;
926 int     expand_level           = 0;             /* Nesting depth, indent for debug */
927 int     expand_forbid          = 0;
928 int     expand_nlength[EXPAND_MAXN+1];
929 int     expand_nmax            = -1;
930 const uschar *expand_nstring[EXPAND_MAXN+1];
931 uschar *expand_string_message;
932 uschar *extra_local_interfaces = NULL;
933
934 int     fake_response          = OK;
935 uschar *fake_response_text     = US"Your message has been rejected but is "
936                                    "being kept for evaluation.\nIf it was a "
937                                    "legitimate message, it may still be "
938                                    "delivered to the target recipient(s).";
939 int     filter_n[FILTER_VARIABLE_COUNT];
940 int     filter_sn[FILTER_VARIABLE_COUNT];
941 int     filter_test            = FTEST_NONE;
942 uschar *filter_test_sfile      = NULL;
943 uschar *filter_test_ufile      = NULL;
944 uschar *filter_thisaddress     = NULL;
945 int     finduser_retries       = 0;
946 uid_t   fixed_never_users[]    = { FIXED_NEVER_USERS };
947 uschar *freeze_tell            = NULL;
948 uschar *freeze_tell_config     = NULL;
949 uschar *fudged_queue_times     = US"";
950
951 uschar *gecos_name             = NULL;
952 uschar *gecos_pattern          = NULL;
953 rewrite_rule  *global_rewrite_rules = NULL;
954
955 volatile sig_atomic_t had_command_timeout = 0;
956 volatile sig_atomic_t had_command_sigterm = 0;
957 volatile sig_atomic_t had_data_timeout    = 0;
958 volatile sig_atomic_t had_data_sigint     = 0;
959 const uschar *headers_charset  = US HEADERS_CHARSET;
960 int     header_insert_maxlen   = 64 * 1024;
961 header_line  *header_last      = NULL;
962 header_line  *header_list      = NULL;
963 int     header_maxsize         = HEADER_MAXSIZE;
964 int     header_line_maxsize    = 0;
965
966 header_name header_names[] = {
967   /* name               len     allow_resent    htype */
968   { US"bcc",            3,      TRUE,           htype_bcc },
969   { US"cc",             2,      TRUE,           htype_cc },
970   { US"date",           4,      TRUE,           htype_date },
971   { US"delivery-date", 13,      FALSE,          htype_delivery_date },
972   { US"envelope-to",   11,      FALSE,          htype_envelope_to },
973   { US"from",           4,      TRUE,           htype_from },
974   { US"message-id",    10,      TRUE,           htype_id },
975   { US"received",       8,      FALSE,          htype_received },
976   { US"reply-to",       8,      FALSE,          htype_reply_to },
977   { US"return-path",   11,      FALSE,          htype_return_path },
978   { US"sender",         6,      TRUE,           htype_sender },
979   { US"subject",        7,      FALSE,          htype_subject },
980   { US"to",             2,      TRUE,           htype_to }
981 };
982
983 int header_names_size          = nelem(header_names);
984
985 uschar *helo_accept_junk_hosts = NULL;
986 uschar *helo_allow_chars       = US"";
987 uschar *helo_lookup_domains    = US"@ : @[]";
988 uschar *helo_try_verify_hosts  = NULL;
989 uschar *helo_verify_hosts      = NULL;
990 const uschar *hex_digits       = CUS"0123456789abcdef";
991 uschar *hold_domains           = NULL;
992 uschar *host_data              = NULL;
993 uschar *host_lookup            = NULL;
994 uschar *host_lookup_order      = US"bydns:byaddr";
995 uschar *host_lookup_msg        = US"";
996 int     host_number            = 0;
997 uschar *host_number_string     = NULL;
998 uschar *host_reject_connection = NULL;
999 tree_node *hostlist_anchor     = NULL;
1000 int     hostlist_count         = 0;
1001 uschar *hosts_treat_as_local   = NULL;
1002 uschar *hosts_require_helo     = US"*";
1003 uschar *hosts_connection_nolog = NULL;
1004
1005 int     ignore_bounce_errors_after = 10*7*24*60*60;  /* 10 weeks */
1006 uschar *ignore_fromline_hosts  = NULL;
1007 int     inetd_wait_timeout     = -1;
1008 uschar *initial_cwd            = NULL;
1009 uschar *interface_address      = NULL;
1010 int     interface_port         = -1;
1011 uschar *iterate_item           = NULL;
1012
1013 int     journal_fd             = -1;
1014
1015 uschar *keep_environment       = NULL;
1016
1017 int     keep_malformed         = 4*24*60*60;    /* 4 days */
1018
1019 uschar *eldap_dn               = NULL;
1020 const uschar *letter_digit_hyphen_dot =
1021     US"abcdefghijklmnopqrstuvwxyz"
1022       ".-0123456789"
1023       "ABCDEFGHIJKLMNOPQRSTUVWXYZ";
1024 #ifdef EXPERIMENTAL_ESMTP_LIMITS
1025 uschar *limits_advertise_hosts = US"*";
1026 #endif
1027 int     load_average           = -2;
1028 uschar *local_from_prefix      = NULL;
1029 uschar *local_from_suffix      = NULL;
1030
1031 #if HAVE_IPV6
1032 uschar *local_interfaces       = US"<; ::0 ; 0.0.0.0";
1033 #else
1034 uschar *local_interfaces       = US"0.0.0.0";
1035 #endif
1036
1037 #ifdef HAVE_LOCAL_SCAN
1038 uschar *local_scan_data        = NULL;
1039 int     local_scan_timeout     = 5*60;
1040 #endif
1041 gid_t   local_user_gid         = (gid_t)(-1);
1042 uid_t   local_user_uid         = (uid_t)(-1);
1043
1044 tree_node *localpartlist_anchor= NULL;
1045 int     localpartlist_count    = 0;
1046 uschar *log_buffer             = NULL;
1047
1048 int     log_default[]          = { /* for initializing log_selector */
1049   Li_acl_warn_skipped,
1050   Li_connection_reject,
1051   Li_delay_delivery,
1052   Li_dkim,
1053   Li_dnslist_defer,
1054   Li_etrn,
1055   Li_host_lookup_failed,
1056   Li_lost_incoming_connection,
1057   Li_outgoing_interface, /* see d_log_interface in deliver.c */
1058   Li_msg_id,
1059   Li_queue_run,
1060   Li_queue_time_exclusive,
1061   Li_rejected_header,
1062   Li_retry_defer,
1063   Li_sender_verify_fail,
1064   Li_size_reject,
1065   Li_skip_delivery,
1066   Li_smtp_confirmation,
1067   Li_tls_certificate_verified,
1068   Li_tls_cipher,
1069   -1
1070 };
1071
1072 uschar *log_file_path          = US LOG_FILE_PATH
1073                            "\0<--------------Space to patch log_file_path->";
1074
1075 int     log_notall[]           = {
1076   -1
1077 };
1078 bit_table log_options[]        = { /* must be in alphabetical order,
1079                                 with definitions from enum logbit. */
1080   BIT_TABLE(L, 8bitmime),
1081   BIT_TABLE(L, acl_warn_skipped),
1082   BIT_TABLE(L, address_rewrite),
1083   BIT_TABLE(L, all),
1084   BIT_TABLE(L, all_parents),
1085   BIT_TABLE(L, arguments),
1086   BIT_TABLE(L, connection_reject),
1087   BIT_TABLE(L, delay_delivery),
1088   BIT_TABLE(L, deliver_time),
1089   BIT_TABLE(L, delivery_size),
1090 #ifndef DISABLE_DKIM
1091   BIT_TABLE(L, dkim),
1092   BIT_TABLE(L, dkim_verbose),
1093 #endif
1094   BIT_TABLE(L, dnslist_defer),
1095   BIT_TABLE(L, dnssec),
1096   BIT_TABLE(L, etrn),
1097   BIT_TABLE(L, host_lookup_failed),
1098   BIT_TABLE(L, ident_timeout),
1099   BIT_TABLE(L, incoming_interface),
1100   BIT_TABLE(L, incoming_port),
1101   BIT_TABLE(L, lost_incoming_connection),
1102   BIT_TABLE(L, millisec),
1103   BIT_TABLE(L, msg_id),
1104   BIT_TABLE(L, msg_id_created),
1105   BIT_TABLE(L, outgoing_interface),
1106   BIT_TABLE(L, outgoing_port),
1107   BIT_TABLE(L, pid),
1108   BIT_TABLE(L, pipelining),
1109   BIT_TABLE(L, protocol_detail),
1110 #if defined(SUPPORT_PROXY) || defined(SUPPORT_SOCKS)
1111   BIT_TABLE(L, proxy),
1112 #endif
1113   BIT_TABLE(L, queue_run),
1114   BIT_TABLE(L, queue_time),
1115   BIT_TABLE(L, queue_time_exclusive),
1116   BIT_TABLE(L, queue_time_overall),
1117   BIT_TABLE(L, receive_time),
1118   BIT_TABLE(L, received_recipients),
1119   BIT_TABLE(L, received_sender),
1120   BIT_TABLE(L, rejected_header),
1121   { US"rejected_headers", Li_rejected_header },
1122   BIT_TABLE(L, retry_defer),
1123   BIT_TABLE(L, return_path_on_delivery),
1124   BIT_TABLE(L, sender_on_delivery),
1125   BIT_TABLE(L, sender_verify_fail),
1126   BIT_TABLE(L, size_reject),
1127   BIT_TABLE(L, skip_delivery),
1128   BIT_TABLE(L, smtp_confirmation),
1129   BIT_TABLE(L, smtp_connection),
1130   BIT_TABLE(L, smtp_incomplete_transaction),
1131   BIT_TABLE(L, smtp_mailauth),
1132   BIT_TABLE(L, smtp_no_mail),
1133   BIT_TABLE(L, smtp_protocol_error),
1134   BIT_TABLE(L, smtp_syntax_error),
1135   BIT_TABLE(L, subject),
1136   BIT_TABLE(L, tls_certificate_verified),
1137   BIT_TABLE(L, tls_cipher),
1138   BIT_TABLE(L, tls_peerdn),
1139   BIT_TABLE(L, tls_resumption),
1140   BIT_TABLE(L, tls_sni),
1141   BIT_TABLE(L, unknown_in_list),
1142 };
1143 int     log_options_count      = nelem(log_options);
1144
1145 int     log_reject_target      = 0;
1146 unsigned int log_selector[log_selector_size]; /* initialized in main() */
1147 uschar *log_selector_string    = NULL;
1148 FILE   *log_stderr             = NULL;
1149 uschar *login_sender_address   = NULL;
1150 uschar *lookup_dnssec_authenticated = NULL;
1151 int     lookup_open_max        = 25;
1152 uschar *lookup_value           = NULL;
1153
1154 macro_item *macros_user        = NULL;
1155 uschar *mailstore_basename     = NULL;
1156 #ifdef WITH_CONTENT_SCAN
1157 uschar *malware_name           = NULL;  /* Virus Name */
1158 #endif
1159 int     max_received_linelength= 0;
1160 int     max_username_length    = 0;
1161 int     message_age            = 0;
1162 uschar *message_body           = NULL;
1163 uschar *message_body_end       = NULL;
1164 int     message_body_size      = 0;
1165 int     message_body_visible   = 500;
1166 int     message_ended          = END_NOTSTARTED;
1167 uschar *message_headers        = NULL;
1168 uschar *message_id;
1169 uschar *message_id_domain      = NULL;
1170 uschar *message_id_text        = NULL;
1171 uschar  message_id_option[MESSAGE_ID_LENGTH + 3];
1172 uschar *message_id_external;
1173 int     message_linecount      = 0;
1174 int     message_size           = 0;
1175 uschar *message_size_limit     = US"50M";
1176 #ifdef SUPPORT_I18N
1177 int     message_utf8_downconvert = 0;   /* -1 ifneeded; 0 never; 1 always */
1178 #endif
1179 uschar  message_subdir[2]      = { 0, 0 };
1180 uschar *message_reference      = NULL;
1181
1182 /* MIME ACL expandables */
1183 #ifdef WITH_CONTENT_SCAN
1184 int     mime_anomaly_level     = 0;
1185 const uschar *mime_anomaly_text      = NULL;
1186 uschar *mime_boundary          = NULL;
1187 uschar *mime_charset           = NULL;
1188 uschar *mime_content_description = NULL;
1189 uschar *mime_content_disposition = NULL;
1190 uschar *mime_content_id        = NULL;
1191 unsigned int mime_content_size = 0;
1192 uschar *mime_content_transfer_encoding = NULL;
1193 uschar *mime_content_type      = NULL;
1194 uschar *mime_decoded_filename  = NULL;
1195 uschar *mime_filename          = NULL;
1196 int     mime_is_multipart      = 0;
1197 int     mime_is_coverletter    = 0;
1198 int     mime_is_rfc822         = 0;
1199 int     mime_part_count        = -1;
1200 #endif
1201
1202 uid_t  *never_users            = NULL;
1203 uschar *notifier_socket        = US"$spool_directory/" NOTIFIER_SOCKET_NAME ;
1204
1205 const int on                   = 1;     /* for setsockopt */
1206 const int off                  = 0;
1207
1208 uid_t   original_euid;
1209 gid_t   originator_gid;
1210 uschar *originator_login       = NULL;
1211 uschar *originator_name        = NULL;
1212 uid_t   originator_uid;
1213 uschar *override_local_interfaces = NULL;
1214 uschar *override_pid_file_path = NULL;
1215
1216 BOOL    panic_coredump         = FALSE;
1217 pcre2_general_context * pcre_gen_ctx = NULL;
1218 pcre2_compile_context * pcre_gen_cmp_ctx = NULL;
1219 pcre2_match_context * pcre_gen_mtc_ctx = NULL;
1220 pcre2_general_context * pcre_mlc_ctx = NULL;
1221 pcre2_compile_context * pcre_mlc_cmp_ctx = NULL;
1222
1223 uschar *percent_hack_domains   = NULL;
1224 uschar *pid_file_path          = US PID_FILE_PATH
1225                            "\0<--------------Space to patch pid_file_path->";
1226 #ifndef DISABLE_PIPE_CONNECT
1227 uschar *pipe_connect_advertise_hosts = US"*";
1228 #endif
1229 uschar *pipelining_advertise_hosts = US"*";
1230 uschar *primary_hostname       = NULL;
1231 uschar *process_info;
1232 int     process_info_len       = 0;
1233 uschar *process_log_path       = NULL;
1234 const uschar *process_purpose  = US"fresh-exec";
1235
1236 #if defined(SUPPORT_PROXY) || defined(SUPPORT_SOCKS)
1237 uschar *hosts_proxy            = NULL;
1238 uschar *proxy_external_address = NULL;
1239 int     proxy_external_port    = 0;
1240 uschar *proxy_local_address    = NULL;
1241 int     proxy_local_port       = 0;
1242 int     proxy_protocol_timeout = 3;
1243 #endif
1244
1245 uschar *prvscheck_address      = NULL;
1246 uschar *prvscheck_keynum       = NULL;
1247 uschar *prvscheck_result       = NULL;
1248
1249
1250 const uschar *qualify_domain_recipient = NULL;
1251 uschar *qualify_domain_sender  = NULL;
1252 uschar *queue_domains          = NULL;
1253 int     queue_interval         = -1;
1254 uschar *queue_name             = US"";
1255 uschar *queue_name_dest        = NULL;
1256 uschar *queue_only_file        = NULL;
1257 int     queue_only_load        = -1;
1258 uschar *queue_run_max          = US"5";
1259 pid_t   queue_run_pid          = (pid_t)0;
1260 int     queue_run_pipe         = -1;
1261 unsigned queue_size            = 0;
1262 time_t  queue_size_next        = 0;
1263 uschar *queue_smtp_domains     = NULL;
1264
1265 uint32_t random_seed           = 0;
1266 tree_node *ratelimiters_cmd    = NULL;
1267 tree_node *ratelimiters_conn   = NULL;
1268 tree_node *ratelimiters_mail   = NULL;
1269 uschar *raw_active_hostname    = NULL;
1270 uschar *raw_sender             = NULL;
1271 uschar **raw_recipients        = NULL;
1272 int     raw_recipients_count   = 0;
1273
1274 int     rcpt_count             = 0;
1275 int     rcpt_fail_count        = 0;
1276 int     rcpt_defer_count       = 0;
1277 gid_t   real_gid;
1278 uid_t   real_uid;
1279 int     receive_linecount      = 0;
1280 int     receive_messagecount   = 0;
1281 int     receive_timeout        = 0;
1282 int     received_count         = 0;
1283 uschar *received_for           = NULL;
1284
1285 /*  This is the default text for Received headers generated by Exim. The
1286 date  will be automatically added on the end. */
1287
1288 uschar *received_header_text   = US
1289      "Received: "
1290      "${if def:sender_rcvhost {from $sender_rcvhost\n\t}"
1291        "{${if def:sender_ident {from ${quote_local_part:$sender_ident} }}"
1292          "${if def:sender_helo_name {(helo=$sender_helo_name)\n\t}}}}"
1293      "by $primary_hostname "
1294      "${if def:received_protocol {with $received_protocol }}"
1295 #ifndef DISABLE_TLS
1296      "${if def:tls_in_ver        { ($tls_in_ver)}}"
1297      "${if def:tls_in_cipher_std { tls $tls_in_cipher_std\n\t}}"
1298 #endif
1299      "(Exim $version_number)\n\t"
1300      "${if def:sender_address {(envelope-from <$sender_address>)\n\t}}"
1301      "id $message_exim_id"
1302      "${if def:received_for {\n\tfor $received_for}}"
1303      "\0<---------------Space to patch received_header_text->";
1304
1305 int     received_headers_max   = 30;
1306 uschar *received_protocol      = NULL;
1307 struct timeval received_time   = { 0, 0 };
1308 struct timeval received_time_complete = { 0, 0 };
1309 uschar *recipient_data         = NULL;
1310 uschar *recipient_unqualified_hosts = NULL;
1311 uschar *recipient_verify_failure = NULL;
1312 int     recipients_count       = 0;
1313 recipient_item  *recipients_list = NULL;
1314 int     recipients_list_max    = 0;
1315 int     recipients_max         = 50000;
1316 const pcre2_code *regex_AUTH         = NULL;
1317 const pcre2_code *regex_check_dns_names = NULL;
1318 const pcre2_code *regex_From         = NULL;
1319 const pcre2_code *regex_IGNOREQUOTA  = NULL;
1320 const pcre2_code *regex_PIPELINING   = NULL;
1321 const pcre2_code *regex_SIZE         = NULL;
1322 #ifndef DISABLE_PIPE_CONNECT
1323 const pcre2_code *regex_EARLY_PIPE   = NULL;
1324 #endif
1325 int    regex_cachesize               = 0;
1326 const pcre2_code *regex_ismsgid      = NULL;
1327 const pcre2_code *regex_smtp_code    = NULL;
1328 const uschar *regex_vars[REGEX_VARS] = { 0 };;
1329 #ifdef WHITELIST_D_MACROS
1330 const pcre2_code *regex_whitelisted_macro = NULL;
1331 #endif
1332 #ifdef WITH_CONTENT_SCAN
1333 uschar *regex_match_string     = NULL;
1334 #endif
1335 int     remote_delivery_count  = 0;
1336 int     remote_max_parallel    = 4;
1337 uschar *remote_sort_domains    = NULL;
1338 int     retry_data_expire      = 7*24*60*60;
1339 int     retry_interval_max     = 24*60*60;
1340 int     retry_maximum_timeout  = 0;        /* set from retry config */
1341 retry_config  *retries         = NULL;
1342 uschar *return_path            = NULL;
1343 int     rewrite_existflags     = 0;
1344 uschar *rfc1413_hosts          = US"@[]";
1345 int     rfc1413_query_timeout  = 0;
1346 uid_t   root_gid               = ROOT_GID;
1347 uid_t   root_uid               = ROOT_UID;
1348
1349 router_instance  *routers  = NULL;
1350 router_instance  router_defaults = {
1351     .next =                     NULL,
1352     .name =                     NULL,
1353     .info =                     NULL,
1354     .options_block =            NULL,
1355     .driver_name =              NULL,
1356
1357     .address_data =             NULL,
1358 #ifdef EXPERIMENTAL_BRIGHTMAIL
1359     .bmi_rule =                 NULL,
1360 #endif
1361     .cannot_route_message =     NULL,
1362     .condition =                NULL,
1363     .current_directory =        NULL,
1364     .debug_string =             NULL,
1365     .domains =                  NULL,
1366     .errors_to =                NULL,
1367     .expand_gid =               NULL,
1368     .expand_uid =               NULL,
1369     .expand_more =              NULL,
1370     .expand_unseen =            NULL,
1371     .extra_headers =            NULL,
1372     .fallback_hosts =           NULL,
1373     .home_directory =           NULL,
1374     .ignore_target_hosts =      NULL,
1375     .local_parts =              NULL,
1376     .pass_router_name =         NULL,
1377     .prefix =                   NULL,
1378     .redirect_router_name =     NULL,
1379     .remove_headers =           NULL,
1380     .require_files =            NULL,
1381     .router_home_directory =    NULL,
1382     .self =                     US"freeze",
1383     .senders =                  NULL,
1384     .suffix =                   NULL,
1385     .translate_ip_address =     NULL,
1386     .transport_name =           NULL,
1387
1388     .address_test =             TRUE,
1389 #ifdef EXPERIMENTAL_BRIGHTMAIL
1390     .bmi_deliver_alternate =    FALSE,
1391     .bmi_deliver_default =      FALSE,
1392     .bmi_dont_deliver =         FALSE,
1393 #endif
1394     .expn =                     TRUE,
1395     .caseful_local_part =       FALSE,
1396     .check_local_user =         FALSE,
1397     .disable_logging =          FALSE,
1398     .fail_verify_recipient =    FALSE,
1399     .fail_verify_sender =       FALSE,
1400     .gid_set =                  FALSE,
1401     .initgroups =               FALSE,
1402     .log_as_local =             TRUE_UNSET,
1403     .more =                     TRUE,
1404     .pass_on_timeout =          FALSE,
1405     .prefix_optional =          FALSE,
1406     .repeat_use =               TRUE,
1407     .retry_use_local_part =     TRUE_UNSET,
1408     .same_domain_copy_routing = FALSE,
1409     .self_rewrite =             FALSE,
1410     .set =                      NULL,
1411     .suffix_optional =          FALSE,
1412     .verify_only =              FALSE,
1413     .verify_recipient =         TRUE,
1414     .verify_sender =            TRUE,
1415     .uid_set =                  FALSE,
1416     .unseen =                   FALSE,
1417     .dsn_lasthop =              FALSE,
1418
1419     .self_code =                self_freeze,
1420     .uid =                      (uid_t)(-1),
1421     .gid =                      (gid_t)(-1),
1422
1423     .fallback_hostlist =        NULL,
1424     .transport =                NULL,
1425     .pass_router =              NULL,
1426     .redirect_router =          NULL,
1427
1428     .dnssec =                   { .request= US"*", .require=NULL },
1429 };
1430
1431 uschar *router_name            = NULL;
1432 tree_node *router_var          = NULL;
1433
1434 ip_address_item *running_interfaces = NULL;
1435
1436 /* This is a weird one. The following string gets patched in the binary by the
1437 script that sets up a copy of Exim for running in the test harness. It seems
1438 that compilers are now clever, and share constant strings if they can.
1439 Elsewhere in Exim the string "<" is used. The compiler optimization seems to
1440 make use of the end of this string in order to save space. So the patching then
1441 wrecks this. We defeat this optimization by adding some additional characters
1442 onto the end of the string. */
1443
1444 uschar *running_status         = US">>>running<<<" "\0EXTRA";
1445
1446 int     runrc                  = 0;
1447
1448 uschar *search_error_message   = NULL;
1449 uschar *self_hostname          = NULL;
1450 uschar *sender_address         = NULL;
1451 unsigned int sender_address_cache[(MAX_NAMED_LIST * 2)/32];
1452 uschar *sender_address_data    = NULL;
1453 uschar *sender_address_unrewritten = NULL;
1454 uschar *sender_data            = NULL;
1455 unsigned int sender_domain_cache[(MAX_NAMED_LIST * 2)/32];
1456 uschar *sender_fullhost        = NULL;
1457 uschar *sender_helo_name       = NULL;
1458 uschar **sender_host_aliases   = &no_aliases;
1459 uschar *sender_host_address    = NULL;
1460 uschar *sender_host_authenticated = NULL;
1461 uschar *sender_host_auth_pubname  = NULL;
1462 unsigned int sender_host_cache[(MAX_NAMED_LIST * 2)/32];
1463 uschar *sender_host_name       = NULL;
1464 int     sender_host_port       = 0;
1465 uschar *sender_ident           = NULL;
1466 uschar *sender_rate            = NULL;
1467 uschar *sender_rate_limit      = NULL;
1468 uschar *sender_rate_period     = NULL;
1469 uschar *sender_rcvhost         = NULL;
1470 uschar *sender_unqualified_hosts = NULL;
1471 uschar *sender_verify_failure = NULL;
1472 address_item *sender_verified_list  = NULL;
1473 address_item *sender_verified_failed = NULL;
1474 int     sender_verified_rc     = -1;
1475 uschar *sending_ip_address     = NULL;
1476 int     sending_port           = -1;
1477 SIGNAL_BOOL sigalrm_seen       = FALSE;
1478 const uschar *sigalarm_setter  = NULL;
1479 uschar **sighup_argv           = NULL;
1480 int     slow_lookup_log        = 0;     /* millisecs, zero disables */
1481 int     smtp_accept_count      = 0;
1482 int     smtp_accept_max        = 20;
1483 int     smtp_accept_max_nonmail= 10;
1484 uschar *smtp_accept_max_nonmail_hosts = US"*";
1485 uschar *smtp_accept_max_per_connection = US"1000";
1486 uschar *smtp_accept_max_per_host = NULL;
1487 int     smtp_accept_queue      = 0;
1488 int     smtp_accept_queue_per_connection = 10;
1489 int     smtp_accept_reserve    = 0;
1490 uschar *smtp_active_hostname   = NULL;
1491 int     smtp_backlog_monitor   = 0;
1492 uschar *smtp_banner            = US"$smtp_active_hostname ESMTP "
1493                              "Exim $version_number $tod_full"
1494                              "\0<---------------Space to patch smtp_banner->";
1495 int     smtp_ch_index          = 0;
1496 uschar *smtp_cmd_argument      = NULL;
1497 uschar *smtp_cmd_buffer        = NULL;
1498 struct timeval smtp_connection_start  = {0,0};
1499 uschar  smtp_connection_had[SMTP_HBUFF_SIZE];
1500 int     smtp_connect_backlog   = 20;
1501 double  smtp_delay_mail        = 0.0;
1502 double  smtp_delay_rcpt        = 0.0;
1503 FILE   *smtp_in                = NULL;
1504 int     smtp_listen_backlog    = 0;
1505 int     smtp_load_reserve      = -1;
1506 int     smtp_mailcmd_count     = 0;
1507 int     smtp_mailcmd_max       = -1;
1508 FILE   *smtp_out               = NULL;
1509 uschar *smtp_etrn_command      = NULL;
1510 int     smtp_max_synprot_errors= 3;
1511 int     smtp_max_unknown_commands = 3;
1512 uschar *smtp_notquit_reason    = NULL;
1513 unsigned smtp_peer_options     = 0;
1514 unsigned smtp_peer_options_wrap= 0;
1515 uschar *smtp_ratelimit_hosts   = NULL;
1516 uschar *smtp_ratelimit_mail    = NULL;
1517 uschar *smtp_ratelimit_rcpt    = NULL;
1518 uschar *smtp_read_error        = US"";
1519 int     smtp_receive_timeout   = 5*60;
1520 uschar *smtp_receive_timeout_s = NULL;
1521 uschar *smtp_reserve_hosts     = NULL;
1522 int     smtp_rlm_base          = 0;
1523 double  smtp_rlm_factor        = 0.0;
1524 int     smtp_rlm_limit         = 0;
1525 int     smtp_rlm_threshold     = INT_MAX;
1526 int     smtp_rlr_base          = 0;
1527 double  smtp_rlr_factor        = 0.0;
1528 int     smtp_rlr_limit         = 0;
1529 int     smtp_rlr_threshold     = INT_MAX;
1530 #ifdef SUPPORT_I18N
1531 uschar *smtputf8_advertise_hosts = US"*";       /* overridden under test-harness */
1532 #endif
1533
1534 #ifdef WITH_CONTENT_SCAN
1535 uschar *spamd_address          = US"127.0.0.1 783";
1536 uschar *spam_bar               = NULL;
1537 uschar *spam_report            = NULL;
1538 uschar *spam_action            = NULL;
1539 uschar *spam_score             = NULL;
1540 uschar *spam_score_int         = NULL;
1541 #endif
1542 #ifdef SUPPORT_SPF
1543 uschar *spf_guess              = US"v=spf1 a/24 mx/24 ptr ?all";
1544 uschar *spf_header_comment     = NULL;
1545 uschar *spf_received           = NULL;
1546 uschar *spf_result             = NULL;
1547 uschar *spf_smtp_comment       = NULL;
1548 uschar *spf_smtp_comment_template
1549                     /* Used to be: "Please%_see%_http://www.open-spf.org/Why?id=%{S}&ip=%{C}&receiver=%{R}" */
1550                                = US"Please%_see%_http://www.open-spf.org/Why";
1551
1552 #endif
1553
1554 FILE   *spool_data_file        = NULL;
1555 uschar *spool_directory        = US SPOOL_DIRECTORY
1556                            "\0<--------------Space to patch spool_directory->";
1557 #ifdef SUPPORT_SRS
1558 uschar *srs_recipient          = NULL;
1559 #endif
1560 int     string_datestamp_offset= -1;
1561 int     string_datestamp_length= 0;
1562 int     string_datestamp_type  = -1;
1563 const uschar *submission_domain = NULL;
1564 const uschar *submission_name  = NULL;
1565 int     syslog_facility        = LOG_MAIL;
1566 uschar *syslog_processname     = US"exim";
1567 uschar *system_filter          = NULL;
1568
1569 uschar *system_filter_directory_transport = NULL;
1570 uschar *system_filter_file_transport = NULL;
1571 uschar *system_filter_pipe_transport = NULL;
1572 uschar *system_filter_reply_transport = NULL;
1573
1574 gid_t   system_filter_gid      = 0;
1575 uid_t   system_filter_uid      = (uid_t)-1;
1576
1577 blob    tcp_fastopen_nodata    = { .data = NULL, .len = 0 };
1578 tfo_state_t tcp_out_fastopen   = TFO_NOT_USED;
1579 #ifdef USE_TCP_WRAPPERS
1580 uschar *tcp_wrappers_daemon_name = US TCP_WRAPPERS_DAEMON_NAME;
1581 #endif
1582 int     test_harness_load_avg  = 0;
1583 int     thismessage_size_limit = 0;
1584 int     timeout_frozen_after   = 0;
1585 #ifdef MEASURE_TIMING
1586 struct timeval timestamp_startup;
1587 #endif
1588
1589 transport_instance  *transports = NULL;
1590
1591 transport_instance  transport_defaults = {
1592     /* All non-mentioned elements zero/NULL/FALSE */
1593     .batch_max =                1,
1594     .multi_domain =             TRUE,
1595     .max_addresses =            100,
1596     .connection_max_messages =  500,
1597     .uid =                      (uid_t)(-1),
1598     .gid =                      (gid_t)(-1),
1599     .filter_timeout =           300,
1600     .retry_use_local_part =     TRUE_UNSET,     /* retry_use_local_part: BOOL, but set neither
1601                                                  1 nor 0 so can detect unset */
1602 };
1603
1604 int     transport_count;
1605 uschar *transport_name          = NULL;
1606 int     transport_newlines;
1607 const uschar **transport_filter_argv  = NULL;
1608 int     transport_filter_timeout;
1609 int     transport_write_timeout= 0;
1610
1611 tree_node  *tree_dns_fails     = NULL;
1612 tree_node  *tree_duplicates    = NULL;
1613 tree_node  *tree_nonrecipients = NULL;
1614 tree_node  *tree_unusable      = NULL;
1615
1616 gid_t  *trusted_groups         = NULL;
1617 uid_t  *trusted_users          = NULL;
1618 uschar *timezone_string        = US TIMEZONE_DEFAULT;
1619
1620 uschar *unknown_login          = NULL;
1621 uschar *unknown_username       = NULL;
1622 uschar *untrusted_set_sender   = NULL;
1623
1624 /*  A regex for matching a "From_" line in an incoming message, in the form
1625
1626     From ph10 Fri Jan  5 12:35 GMT 1996
1627
1628 which  the "mail" commands send to the MTA (undocumented, of course), or in
1629 the  form
1630
1631     From ph10 Fri, 7 Jan 97 14:00:00 GMT
1632
1633 which  is apparently used by some UUCPs, despite it not being in RFC 976.
1634 Because  of variations in time formats, just match up to the minutes. That
1635 should  be sufficient. Examples have been seen of time fields like 12:1:03,
1636 so  just require one digit for hours and minutes. The weekday is also absent
1637 in  some forms. */
1638
1639 uschar *uucp_from_pattern      = US
1640    "^From\\s+(\\S+)\\s+(?:[a-zA-Z]{3},?\\s+)?"    /* Common start */
1641    "(?:"                                          /* Non-extracting bracket */
1642    "[a-zA-Z]{3}\\s+\\d?\\d|"                      /* First form */
1643    "\\d?\\d\\s+[a-zA-Z]{3}\\s+\\d\\d(?:\\d\\d)?"  /* Second form */
1644    ")"                                            /* End alternation */
1645    "\\s+\\d\\d?:\\d\\d?";                         /* Start of time */
1646
1647 uschar *uucp_from_sender       = US"$1";
1648
1649 uschar *verify_mode            = NULL;
1650 uschar *version_copyright      =
1651  US"Copyright (c) University of Cambridge, 1995 - 2018\n"
1652    "(c) The Exim Maintainers and contributors in ACKNOWLEDGMENTS file, 2007 - 2022";
1653 uschar *version_date           = US"?";
1654 uschar *version_cnumber        = US"????";
1655 uschar *version_string         = US"?";
1656
1657 uschar *warn_message_file      = NULL;
1658 int     warning_count          = 0;
1659 uschar *warnmsg_delay          = NULL;
1660 uschar *warnmsg_recipients     = NULL;
1661
1662
1663 /*  End of globals.c */