Enforce TLS under DANE when host has TLSA records

[users/jgh/exim.git] / src / src / transports / lmtp.c

diff --git a/src/src/transports/lmtp.c b/src/src/transports/lmtp.c
index b27714e23edd15730d6aedcdf2b2b4c193ba88d5..84bbeb939144ce5a9b27a96a63b5c7e8853678c1 100644 (file)
--- a/src/src/transports/lmtp.c
+++ b/src/src/transports/lmtp.c
@@ -1,10 +1,8 @@
-/* $Cambridge: exim/src/src/transports/lmtp.c,v 1.3 2005/01/04 10:00:45 ph10 Exp $ */
-

 /*************************************************
 *     Exim - an Internet mail transport agent    *
 *************************************************/
 
 /*************************************************
 *     Exim - an Internet mail transport agent    *
 *************************************************/
 

-/* Copyright (c) University of Cambridge 1995 - 2005 */
+/* Copyright (c) University of Cambridge 1995 - 2014 */

 /* See the file NOTICE for conditions of use and distribution. */
 
 
 /* See the file NOTICE for conditions of use and distribution. */
 
 


@@ -28,6 +26,8 @@ optionlist lmtp_transport_options[] = {
       (void *)offsetof(transport_instance, batch_max) },
   { "command",           opt_stringptr,
       (void *)offsetof(lmtp_transport_options_block, cmd) },
       (void *)offsetof(transport_instance, batch_max) },
   { "command",           opt_stringptr,
       (void *)offsetof(lmtp_transport_options_block, cmd) },

+  { "ignore_quota",      opt_bool,
+      (void *)offsetof(lmtp_transport_options_block, ignore_quota) },

   { "socket",            opt_stringptr,
       (void *)offsetof(lmtp_transport_options_block, skt) },
   { "timeout",           opt_time,
   { "socket",            opt_stringptr,
       (void *)offsetof(lmtp_transport_options_block, skt) },
   { "timeout",           opt_time,


@@ -46,7 +46,8 @@ lmtp_transport_options_block lmtp_transport_option_defaults = {
   NULL,           /* cmd */
   NULL,           /* skt */
   5*60,           /* timeout */
   NULL,           /* cmd */
   NULL,           /* skt */
   5*60,           /* timeout */

-  0               /* options */
+  0,              /* options */
+  FALSE           /* ignore_quota */

 };
 
 
 };
 
 


@@ -141,8 +142,8 @@ end the DATA. */
 
 if (*errno_value == ERRNO_FILTER_FAIL)
   {
 
 if (*errno_value == ERRNO_FILTER_FAIL)
   {

-  *message = string_sprintf("transport filter process failed (%d)%s", 
-    more_errno, 
+  *message = string_sprintf("transport filter process failed (%d)%s",
+    more_errno,

     (more_errno == EX_EXECFAILED)? ": unable to execute command" : "");
   return FALSE;
   }
     (more_errno == EX_EXECFAILED)? ": unable to execute command" : "");
   return FALSE;
   }


@@ -209,7 +210,7 @@ Returns:     TRUE if successful, FALSE if not, with errno set
 */
 
 static BOOL
 */
 
 static BOOL

-lmtp_write_command(int fd, char *format, ...)
+lmtp_write_command(int fd, const char *format, ...)

 {
 int count, rc;
 va_list ap;
 {
 int count, rc;
 va_list ap;


@@ -457,6 +458,7 @@ int code, save_errno;
 BOOL send_data;
 BOOL yield = FALSE;
 address_item *addr;
 BOOL send_data;
 BOOL yield = FALSE;
 address_item *addr;

+uschar *igquotstr = US"";

 uschar *sockname = NULL;
 uschar **argv;
 uschar buffer[256];
 uschar *sockname = NULL;
 uschar **argv;
 uschar buffer[256];


@@ -561,13 +563,27 @@ if (!lmtp_write_command(fd_in, "%s %s\r\n", "LHLO",
 if (!lmtp_read_response(out, buffer, sizeof(buffer), '2',
      timeout)) goto RESPONSE_FAILED;
 
 if (!lmtp_read_response(out, buffer, sizeof(buffer), '2',
      timeout)) goto RESPONSE_FAILED;
 

+/* If the ignore_quota option is set, note whether the server supports the
+IGNOREQUOTA option, and if so, set an appropriate addition for RCPT. */
+
+if (ob->ignore_quota)
+  igquotstr = (pcre_exec(regex_IGNOREQUOTA, NULL, CS buffer,
+    Ustrlen(CS buffer), 0, PCRE_EOPT, NULL, 0) >= 0)? US" IGNOREQUOTA" : US"";
+

 /* Now the envelope sender */
 
 if (!lmtp_write_command(fd_in, "MAIL FROM:<%s>\r\n", return_path))
   goto WRITE_FAILED;
 
 if (!lmtp_read_response(out, buffer, sizeof(buffer), '2', timeout))
 /* Now the envelope sender */
 
 if (!lmtp_write_command(fd_in, "MAIL FROM:<%s>\r\n", return_path))
   goto WRITE_FAILED;
 
 if (!lmtp_read_response(out, buffer, sizeof(buffer), '2', timeout))

+  {
+  if (errno == 0 && buffer[0] == '4')
+    {
+    errno = ERRNO_MAIL4XX;
+    addrlist->more_errno |= ((buffer[1] - '0')*10 + buffer[2] - '0') << 8;
+    }

   goto RESPONSE_FAILED;
   goto RESPONSE_FAILED;

+  }

 
 /* Next, we hand over all the recipients. Some may be permanently or
 temporarily rejected; others may be accepted, for now. */
 
 /* Next, we hand over all the recipients. Some may be permanently or
 temporarily rejected; others may be accepted, for now. */


@@ -575,8 +591,8 @@ temporarily rejected; others may be accepted, for now. */
 send_data = FALSE;
 for (addr = addrlist; addr != NULL; addr = addr->next)
   {
 send_data = FALSE;
 for (addr = addrlist; addr != NULL; addr = addr->next)
   {

-  if (!lmtp_write_command(fd_in, "RCPT TO:<%s>\r\n",
-       transport_rcpt_address(addr, tblock->rcpt_include_affixes)))
+  if (!lmtp_write_command(fd_in, "RCPT TO:<%s>%s\r\n",
+       transport_rcpt_address(addr, tblock->rcpt_include_affixes), igquotstr))

     goto WRITE_FAILED;
   if (lmtp_read_response(out, buffer, sizeof(buffer), '2', timeout))
     {
     goto WRITE_FAILED;
   if (lmtp_read_response(out, buffer, sizeof(buffer), '2', timeout))
     {


@@ -588,11 +604,11 @@ for (addr = addrlist; addr != NULL; addr = addr->next)
     if (errno != 0 || buffer[0] == 0) goto RESPONSE_FAILED;
     addr->message = string_sprintf("LMTP error after %s: %s", big_buffer,
       string_printing(buffer));
     if (errno != 0 || buffer[0] == 0) goto RESPONSE_FAILED;
     addr->message = string_sprintf("LMTP error after %s: %s", big_buffer,
       string_printing(buffer));

+    setflag(addr, af_pass_message);   /* Allow message to go to user */

     if (buffer[0] == '5') addr->transport_return = FAIL; else
       {
     if (buffer[0] == '5') addr->transport_return = FAIL; else
       {

-      int bincode = (buffer[1] - '0')*10 + buffer[2] - '0';

       addr->basic_errno = ERRNO_RCPT4XX;
       addr->basic_errno = ERRNO_RCPT4XX;

-      addr->more_errno |= bincode << 8;
+      addr->more_errno |= ((buffer[1] - '0')*10 + buffer[2] - '0') << 8;

       }
     }
   }
       }
     }
   }


@@ -605,7 +621,14 @@ if (send_data)
 
   if (!lmtp_write_command(fd_in, "DATA\r\n")) goto WRITE_FAILED;
   if (!lmtp_read_response(out, buffer, sizeof(buffer), '3', timeout))
 
   if (!lmtp_write_command(fd_in, "DATA\r\n")) goto WRITE_FAILED;
   if (!lmtp_read_response(out, buffer, sizeof(buffer), '3', timeout))

+    {
+    if (errno == 0 && buffer[0] == '4')
+      {
+      errno = ERRNO_DATA4XX;
+      addrlist->more_errno |= ((buffer[1] - '0')*10 + buffer[2] - '0') << 8;
+      }

     goto RESPONSE_FAILED;
     goto RESPONSE_FAILED;

+    }

 
   sigalrm_seen = FALSE;
   transport_write_timeout = timeout;
 
   sigalrm_seen = FALSE;
   transport_write_timeout = timeout;


@@ -639,8 +662,14 @@ if (send_data)
     if (addr->transport_return != PENDING_OK) continue;
 
     if (lmtp_read_response(out, buffer, sizeof(buffer), '2', timeout))
     if (addr->transport_return != PENDING_OK) continue;
 
     if (lmtp_read_response(out, buffer, sizeof(buffer), '2', timeout))

+      {

       addr->transport_return = OK;
       addr->transport_return = OK;

-
+      if ((log_extra_selector & LX_smtp_confirmation) != 0)
+        {
+        uschar *s = string_printing(buffer);
+        addr->message = (s == buffer)? (uschar *)string_copy(s) : s;
+        }
+      }

     /* If the response has failed badly, use it for all the remaining pending
     addresses and give up. */
 
     /* If the response has failed badly, use it for all the remaining pending
     addresses and give up. */
 


@@ -665,9 +694,15 @@ if (send_data)
 
     else
       {
 
     else
       {

+      if (buffer[0] == '4')
+        {
+        addr->basic_errno = ERRNO_DATA4XX;
+        addr->more_errno |= ((buffer[1] - '0')*10 + buffer[2] - '0') << 8;
+        }

       addr->message = string_sprintf("LMTP error after %s: %s", big_buffer,
         string_printing(buffer));
       addr->transport_return = (buffer[0] == '5')? FAIL : DEFER;
       addr->message = string_sprintf("LMTP error after %s: %s", big_buffer,
         string_printing(buffer));
       addr->transport_return = (buffer[0] == '5')? FAIL : DEFER;

+      setflag(addr, af_pass_message);   /* Allow message to go to user */

       }
     }
   }
       }
     }
   }


@@ -685,13 +720,15 @@ goto RETURN;
 
 /* Come here if any call to read_response, other than a response after the data
 phase, failed. Put the error in the top address - this will be replicated
 
 /* Come here if any call to read_response, other than a response after the data
 phase, failed. Put the error in the top address - this will be replicated

-because the yield is still FALSE. Analyse the error, and if if isn't too bad,
-send a QUIT command. Wait for the response with a short timeout, so we don't
-wind up this process before the far end has had time to read the QUIT. */
+because the yield is still FALSE. (But omit ETIMEDOUT, as there will already be
+a suitable message.) Analyse the error, and if if isn't too bad, send a QUIT
+command. Wait for the response with a short timeout, so we don't wind up this
+process before the far end has had time to read the QUIT. */

 
 RESPONSE_FAILED:
 
 save_errno = errno;
 
 RESPONSE_FAILED:
 
 save_errno = errno;

+if (errno != ETIMEDOUT && errno != 0) addrlist->basic_errno = errno;

 addrlist->message = NULL;
 
 if (check_response(&save_errno, addrlist->more_errno,
 addrlist->message = NULL;
 
 if (check_response(&save_errno, addrlist->more_errno,


@@ -740,8 +777,8 @@ RETURN:
 
 (void)child_close(pid, timeout);
 
 
 (void)child_close(pid, timeout);
 

-if (fd_in >= 0) (void) close(fd_in);
-if (fd_out >= 0) (void) fclose(out);
+if (fd_in >= 0) (void)close(fd_in);
+if (fd_out >= 0) (void)fclose(out);

 
 DEBUG(D_transport)
   debug_printf("%s transport yields %d\n", tblock->name, yield);
 
 DEBUG(D_transport)
   debug_printf("%s transport yields %d\n", tblock->name, yield);