1 /*************************************************
2 * Exim - an Internet mail transport agent *
3 *************************************************/
5 /* Copyright (c) University of Cambridge 1995 - 2009 */
6 /* See the file NOTICE for conditions of use and distribution. */
8 /* Functions for sending messages to sender or to mailmaster. */
15 /*************************************************
16 * Write From: line for DSN *
17 *************************************************/
19 /* This function is called to write the From: line in automatically generated
20 messages - bounces, warnings, etc. It expands a configuration item in order to
21 get the text. If the expansion fails, a panic is logged and the default value
22 for the option is used.
24 Argument: the FILE to write to
29 moan_write_from(FILE *f)
31 uschar *s = expand_string(dsn_from);
34 log_write(0, LOG_MAIN|LOG_PANIC,
35 "Failed to expand dsn_from (using default): %s", expand_string_message);
36 s = expand_string(US DEFAULT_DSN_FROM);
38 fprintf(f, "From: %s\n", s);
43 /*************************************************
44 * Send error message *
45 *************************************************/
47 /* This function sends an error message by opening a pipe to a new process
48 running Exim, and writing a message to it using the "-t" option. This is not
49 used for delivery failures, which have their own code for handing failed
53 recipient addressee for the message
54 ident identifies the type of error
55 eblock chain of error_blocks containing data about the error
56 headers the message's headers
57 message_file FILE containing the body of the message
58 firstline contains first line of file, if it was read to check for
59 "From ", but it turned out not to be
61 Returns: TRUE if message successfully sent
65 moan_send_message(uschar *recipient, int ident, error_block *eblock,
66 header_line *headers, FILE *message_file, uschar *firstline)
72 int size_limit = bounce_return_size_limit;
74 int pid = child_open_exim(&fd);
76 /* Creation of child failed */
80 DEBUG(D_any) debug_printf("Failed to create child to send message: %s\n",
84 else DEBUG(D_any) debug_printf("Child process %d for sending message\n", pid);
86 /* Creation of child succeeded */
89 if (errors_reply_to != NULL) fprintf(f, "Reply-To: %s\n", errors_reply_to);
90 fprintf(f, "Auto-Submitted: auto-replied\n");
92 fprintf(f, "To: %s\n", recipient);
96 case ERRMESS_BADARGADDRESS:
98 "Subject: Mail failure - malformed recipient address\n\n");
100 "A message that you sent contained a recipient address that was incorrectly\n"
102 fprintf(f, " %s %s\n", eblock->text1, eblock->text2);
103 count = Ustrlen(eblock->text1);
104 if (count > 0 && eblock->text1[count-1] == '.')
106 "\nRecipient addresses must not end with a '.' character.\n");
108 "\nThe message has not been delivered to any recipients.\n");
111 case ERRMESS_BADNOADDRESS:
112 case ERRMESS_BADADDRESS:
114 "Subject: Mail failure - malformed recipient address\n\n");
116 "A message that you sent contained one or more recipient addresses that were\n"
117 "incorrectly constructed:\n\n");
119 while (eblock != NULL)
121 fprintf(f, " %s: %s\n", eblock->text1, eblock->text2);
123 eblock = eblock->next;
126 fprintf(f, (count == 1)? "\nThis address has been ignored. " :
127 "\nThese addresses have been ignored. ");
129 fprintf(f, (ident == ERRMESS_BADADDRESS)?
130 "The other addresses in the message were\n"
131 "syntactically valid and have been passed on for an attempt at delivery.\n" :
133 "There were no other addresses in your\n"
134 "message, and so no attempt at delivery was possible.\n");
137 case ERRMESS_IGADDRESS:
138 fprintf(f, "Subject: Mail failure - no recipient addresses\n\n");
140 "A message that you sent using the -t command line option contained no\n"
141 "addresses that were not also on the command line, and were therefore\n"
142 "suppressed. This left no recipient addresses, and so no delivery could\n"
146 case ERRMESS_NOADDRESS:
147 fprintf(f, "Subject: Mail failure - no recipient addresses\n\n");
149 "A message that you sent contained no recipient addresses, and therefore no\n"
150 "delivery could be attempted.\n");
154 fprintf(f, "Subject: Mail failure - system failure\n\n");
156 "A system failure was encountered while processing a message that you sent,\n"
157 "so it has not been possible to deliver it. The error was:\n\n%s\n",
161 case ERRMESS_VLONGHEADER:
162 fprintf(f, "Subject: Mail failure - overlong header section\n\n");
164 "A message that you sent contained a header section that was excessively\n"
165 "long and could not be handled by the mail transmission software. The\n"
166 "message has not been delivered to any recipients.\n");
169 case ERRMESS_VLONGHDRLINE:
170 fprintf(f, "Subject: Mail failure - overlong header line\n\n");
172 "A message that you sent contained a header line that was excessively\n"
173 "long and could not be handled by the mail transmission software. The\n"
174 "message has not been delivered to any recipients.\n");
178 fprintf(f, "Subject: Mail failure - message too big\n\n");
180 "A message that you sent was longer than the maximum size allowed on this\n"
181 "system. It was not delivered to any recipients.\n");
184 case ERRMESS_TOOMANYRECIP:
185 fprintf(f, "Subject: Mail failure - too many recipients\n\n");
187 "A message that you sent contained more recipients than allowed on this\n"
188 "system. It was not delivered to any recipients.\n");
191 case ERRMESS_LOCAL_SCAN:
192 case ERRMESS_LOCAL_ACL:
193 fprintf(f, "Subject: Mail failure - rejected by local scanning code\n\n");
195 "A message that you sent was rejected by the local scanning code that\n"
196 "checks incoming messages on this system.");
197 if (eblock->text1 != NULL)
200 " The following error was given:\n\n %s", eblock->text1);
206 fprintf(f, "Subject: Mail failure\n\n");
208 "A message that you sent has caused the error routine to be entered with\n"
209 "an unknown error number (%d).\n", ident);
213 /* Now, if configured, copy the message; first the headers and then the rest of
214 the input if available, up to the configured limit, if the option for including
215 message bodies in bounces is set. */
217 if (bounce_return_message)
219 if (bounce_return_body)
222 "------ This is a copy of your message, including all the headers.");
223 if (size_limit == 0 || size_limit > thismessage_size_limit)
224 size_limit = thismessage_size_limit;
225 if (size_limit > 0 && size_limit < message_size)
235 "------ No more than %d%s characters of the body are included.\n\n",
238 else fprintf(f, " ------\n\n");
243 "------ This is a copy of the headers that were received before the "
244 "error\n was detected.\n\n");
247 /* If the error occurred before the Received: header was created, its text
248 field will still be NULL; just omit such a header line. */
250 while (headers != NULL)
252 if (headers->text != NULL) fprintf(f, "%s", CS headers->text);
253 headers = headers->next;
256 if (ident != ERRMESS_VLONGHEADER && ident != ERRMESS_VLONGHDRLINE)
259 /* After early detection of an error, the message file may be STDIN,
260 in which case we might have to terminate on a line containing just "."
261 as well as on EOF. We may already have the first line in memory. */
263 if (bounce_return_body && message_file != NULL)
267 BOOL enddot = dot_ends && message_file == stdin;
268 if (firstline != NULL) fprintf(f, "%s", CS firstline);
269 while ((ch = fgetc(message_file)) != EOF)
272 if (size_limit > 0 && ++written > size_limit) break;
275 if (state == 0) { if (ch == '\n') state = 1; }
277 { if (ch == '.') state = 2; else if (ch != '\n') state = 0; }
279 { if (ch == '\n') break; else state = 0; }
285 /* Close the file, which should send an EOF to the child process
286 that is receiving the message. Wait for it to finish, without a timeout. */
289 status = child_close(pid, 0); /* Waits for child to close */
292 uschar *msg = US"Child mail process returned status";
294 log_write(0, LOG_MAIN, "%s %d: errno=%d: %s", msg, status, errno,
297 log_write(0, LOG_MAIN, "%s %d", msg, status);
306 /*************************************************
307 * Send message to sender *
308 *************************************************/
310 /* This function is called when errors are detected during the receipt of a
311 message. Delivery failures are handled separately in deliver.c.
313 If there is a valid sender_address, and the failing message is not a local
314 error message, then this function calls moan_send_message to send a message to
315 that person. If the sender's address is null, then an error has occurred with a
316 message that was generated by a mailer daemon. All we can do is to write
317 information to log files. The same action is taken if local_error_message is
318 set - this can happen for non null-senders in certain configurations where exim
319 doesn't run setuid root.
322 ident identifies the particular error
323 eblock chain of error_blocks containing data about the error
324 headers message's headers (chain)
325 message_file a FILE where the body of the message can be read
326 check_sender if TRUE, read the first line of the file for a possible
327 "From " sender (if a trusted caller)
329 Returns: FALSE if there is no sender_address to send to;
330 else the return from moan_send_message()
334 moan_to_sender(int ident, error_block *eblock, header_line *headers,
335 FILE *message_file, BOOL check_sender)
337 uschar *firstline = NULL;
338 uschar *msg = US"Error while reading message with no usable sender address";
340 if (message_reference != NULL)
341 msg = string_sprintf("%s (R=%s)", msg, message_reference);
343 /* Find the sender from a From line if permitted and possible */
345 if (check_sender && message_file != NULL && trusted_caller &&
346 Ufgets(big_buffer, BIG_BUFFER_SIZE, message_file) != NULL)
348 uschar *new_sender = NULL;
349 if (regex_match_and_setup(regex_From, big_buffer, 0, -1))
350 new_sender = expand_string(uucp_from_sender);
351 if (new_sender != NULL) sender_address = new_sender;
352 else firstline = big_buffer;
355 /* If viable sender address, send a message */
357 if (sender_address != NULL && sender_address[0] != 0 && !local_error_message)
358 return moan_send_message(sender_address, ident, eblock, headers,
359 message_file, firstline);
361 /* Otherwise, we can only log */
365 case ERRMESS_BADARGADDRESS:
366 case ERRMESS_BADNOADDRESS:
367 case ERRMESS_BADADDRESS:
368 log_write(0, LOG_MAIN, "%s: at least one malformed recipient address: "
369 "%s - %s", msg, eblock->text1, eblock->text2);
372 case ERRMESS_IGADDRESS:
373 case ERRMESS_NOADDRESS:
374 log_write(0, LOG_MAIN, "%s: no recipient addresses", msg);
377 /* This error has already been logged. */
381 case ERRMESS_VLONGHEADER:
382 log_write(0, LOG_MAIN, "%s: excessively long message header section read "
383 "(more than %d characters)", msg, header_maxsize);
386 case ERRMESS_VLONGHDRLINE:
387 log_write(0, LOG_MAIN, "%s: excessively long message header line read "
388 "(more than %d characters)", msg, header_line_maxsize);
392 log_write(0, LOG_MAIN, "%s: message too big (limit set to %d)", msg,
393 thismessage_size_limit);
396 case ERRMESS_TOOMANYRECIP:
397 log_write(0, LOG_MAIN, "%s: too many recipients (max set to %d)", msg,
401 case ERRMESS_LOCAL_SCAN:
402 log_write(0, LOG_MAIN, "%s: rejected by local_scan: %s", msg, eblock->text1);
405 case ERRMESS_LOCAL_ACL:
406 log_write(0, LOG_MAIN, "%s: rejected by non-SMTP ACL: %s", msg, eblock->text1);
410 log_write(0, LOG_MAIN|LOG_PANIC, "%s: unknown error number %d", msg,
420 /*************************************************
421 * Send message to someone *
422 *************************************************/
424 /* This is called when exim is configured to tell someone (often the
425 mailmaster) about some incident.
428 who address to send mail to
429 addr chain of deferred addresses whose details are to be included
430 subject subject text for the message
431 format a printf() format for the body of the message
432 ... arguments for the format
438 moan_tell_someone(uschar *who, address_item *addr,
439 const uschar *subject, const char *format, ...)
444 int pid = child_open_exim(&fd);
448 DEBUG(D_any) debug_printf("Failed to create child to send message: %s\n",
453 f = fdopen(fd, "wb");
454 fprintf(f, "Auto-Submitted: auto-replied\n");
456 fprintf(f, "To: %s\n", who);
457 fprintf(f, "Subject: %s\n\n", subject);
458 va_start(ap, format);
459 vfprintf(f, format, ap);
464 fprintf(f, "\nThe following address(es) have yet to be delivered:\n");
465 for (; addr != NULL; addr = addr->next)
467 uschar *parent = (addr->parent == NULL)? NULL : addr->parent->address;
468 fprintf(f, " %s", addr->address);
469 if (parent != NULL) fprintf(f, " <%s>", parent);
470 if (addr->basic_errno > 0) fprintf(f, ": %s", strerror(addr->basic_errno));
471 if (addr->message != NULL) fprintf(f, ": %s", addr->message);
477 child_close(pid, 0); /* Waits for child to close; no timeout */
482 /*************************************************
483 * Handle SMTP batch error *
484 *************************************************/
486 /* This is called when something goes wrong in batched (-bS) SMTP input.
487 Information is written to stdout and/or stderr, and Exim exits with a non-zero
488 completion code. BSMTP is almost always called by some other program, so it is
489 up to that program to interpret the return code and do something with the error
490 information, and also to preserve the batch input file for human analysis.
492 Formerly, Exim used to attempt to continue after some errors, but this strategy
493 has been abandoned as it can lead to loss of messages.
496 cmd_buffer the command causing the error, or NULL
497 format a printf() format
498 ... arguments for the format
500 Returns: does not return; exits from the program
501 exit code = 1 if some messages were accepted
502 exit code = 2 if no messages were accepted
506 moan_smtp_batch(uschar *cmd_buffer, const char *format, ...)
509 int yield = (receive_messagecount > 0)? 1 : 2;
511 DEBUG(D_any) debug_printf("Handling error in batched SMTP input\n");
513 /* On stdout, write stuff that a program could parse fairly easily. */
515 va_start(ap, format);
516 vfprintf(stdout, format, ap);
519 fprintf(stdout, "\nTransaction started in line %d\n",
520 bsmtp_transaction_linecount);
521 fprintf(stdout, "Error detected in line %d\n", receive_linecount);
522 if (cmd_buffer != NULL) fprintf(stdout, "%s\n", cmd_buffer);
524 /* On stderr, write stuff for human consumption */
527 "An error was detected while processing a file of BSMTP input.\n"
528 "The error message was:\n\n ");
530 va_start(ap, format);
531 vfprintf(stderr, format, ap);
535 "\n\nThe SMTP transaction started in line %d.\n"
536 "The error was detected in line %d.\n",
537 bsmtp_transaction_linecount, receive_linecount);
539 if (cmd_buffer != NULL)
541 fprintf(stderr, "The SMTP command at fault was:\n\n %s\n\n",
545 fprintf(stderr, "%d previous message%s successfully processed.\n",
546 receive_messagecount, (receive_messagecount == 1)? " was" : "s were");
548 fprintf(stderr, "The rest of the batch was abandoned.\n");
556 /*************************************************
557 * Check for error copies *
558 *************************************************/
560 /* This function is passed the recipient of an error message, and must check
561 the error_copies string to see whether there is an additional recipient list to
562 which errors for this recipient must be bcc'd. The incoming recipient is always
565 Argument: recipient address
566 Returns: additional recipient list or NULL
570 moan_check_errorcopy(uschar *recipient)
572 uschar *item, *localpart, *domain;
573 uschar *listptr = errors_copy;
574 uschar *yield = NULL;
579 if (errors_copy == NULL) return NULL;
581 /* Set up pointer to the local part and domain, and compute the
582 length of the local part. */
584 localpart = recipient;
585 domain = Ustrrchr(recipient, '@');
586 if (domain == NULL) return NULL; /* should not occur, but avoid crash */
587 llen = domain++ - recipient;
589 /* Scan through the configured items */
591 while ((item = string_nextinlist(&listptr, &sep, buffer, sizeof(buffer)))
594 uschar *newaddress = item;
595 uschar *pattern = string_dequote(&newaddress);
597 /* If no new address found, just skip this item. */
599 while (isspace(*newaddress)) newaddress++;
600 if (*newaddress == 0) continue;
602 /* We now have an item to match as an address in item, and the additional
603 address in newaddress. If the pattern matches, expand the new address string
604 and return it. During expansion, make local part and domain available for
605 insertion. This requires a copy to be made; we can't just temporarily
606 terminate it, as the whole address is required for $0. */
608 if (match_address_list(recipient, TRUE, TRUE, &pattern, NULL, 0, UCHAR_MAX+1,
611 deliver_localpart = string_copyn(localpart, llen);
612 deliver_domain = domain;
613 yield = expand_string_copy(newaddress);
614 deliver_domain = deliver_localpart = NULL;
616 log_write(0, LOG_MAIN|LOG_PANIC, "Failed to expand %s when processing "
617 "errors_copy: %s", newaddress, expand_string_message);
622 DEBUG(D_any) debug_printf("errors_copy check returned %s\n",
623 (yield == NULL)? US"NULL" : yield);
631 /************************************************
632 * Handle skipped syntax errors *
633 ************************************************/
635 /* This function is called by the redirect router when it has skipped over one
636 or more syntax errors in the list of addresses. If there is an address to mail
637 to, send a message, and always write the information to the log. In the case of
638 a filter file, a "syntax error" might actually be something else, such as the
639 inability to open a log file. Thus, the wording of the error message is
643 rname the router name
644 eblock chain of error blocks
645 syntax_errors_to address to send mail to, or NULL
646 some TRUE if some addresses were generated; FALSE if none were
647 custom custom message text
649 Returns: FALSE if string expansion failed; TRUE otherwise
653 moan_skipped_syntax_errors(uschar *rname, error_block *eblock,
654 uschar *syntax_errors_to, BOOL some, uschar *custom)
661 for (e = eblock; e != NULL; e = e->next)
663 if (e->text2 != NULL)
664 log_write(0, LOG_MAIN, "%s router: skipped error: %s in \"%s\"",
665 rname, e->text1, e->text2);
667 log_write(0, LOG_MAIN, "%s router: skipped error: %s", rname,
671 if (syntax_errors_to == NULL) return TRUE;
673 s = expand_string(syntax_errors_to);
676 log_write(0, LOG_MAIN, "%s router failed to expand %s: %s", rname,
677 syntax_errors_to, expand_string_message);
681 /* If we can't create a process to send the message, just forget about
684 pid = child_open_exim(&fd);
688 DEBUG(D_any) debug_printf("Failed to create child to send message: %s\n",
693 f = fdopen(fd, "wb");
694 fprintf(f, "Auto-Submitted: auto-replied\n");
696 fprintf(f, "To: %s\n", s);
697 fprintf(f, "Subject: error(s) in forwarding or filtering\n\n");
701 t = expand_string(custom);
704 log_write(0, LOG_MAIN, "%s router failed to expand %s: %s", rname,
705 custom, expand_string_message);
708 fprintf(f, "%s\n\n", t);
711 fprintf(f, "The %s router encountered the following error(s):\n\n",
714 for (e = eblock; e != NULL; e = e->next)
716 fprintf(f, " %s", e->text1);
717 if (e->text2 != NULL)
718 fprintf(f, " in the address\n \"%s\"", e->text2);
723 fprintf(f, "Other addresses were processed normally.\n");
725 fprintf(f, "No valid addresses were generated.\n");
728 child_close(pid, 0); /* Waits for child to close; no timeout */