[people/ms/dma.git] / net.c

/*
 * Copyright (c) 2008 The DragonFly Project.  All rights reserved.
 *
 * This code is derived from software contributed to The DragonFly Project
 * by Matthias Schmidt <matthias@dragonflybsd.org>, University of Marburg,
 * Germany.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 *
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in
 *    the documentation and/or other materials provided with the
 *    distribution.
 * 3. Neither the name of The DragonFly Project nor the names of its
 *    contributors may be used to endorse or promote products derived
 *    from this software without specific, prior written permission.
 *
 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
 * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
 * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
 * FOR A PARTICULAR PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE
 * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
 * INCIDENTAL, SPECIAL, EXEMPLARY OR CONSEQUENTIAL DAMAGES (INCLUDING,
 * BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED
 * AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
 * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT
 * OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 * SUCH DAMAGE.
 *
 * $DragonFly: src/libexec/dma/net.c,v 1.9 2008/09/30 17:47:21 swildner Exp $
 */

#include <sys/param.h>
#include <sys/queue.h>
#include <sys/stat.h>
#include <sys/types.h>
#include <sys/socket.h>
#include <netinet/in.h>
#include <arpa/inet.h>

#ifdef HAVE_CRYPTO
#include <openssl/ssl.h>
#endif /* HAVE_CRYPTO */

#include <err.h>
#include <netdb.h>
#include <setjmp.h>
#include <signal.h>
#include <syslog.h>
#include <unistd.h>

#include "dma.h"

extern struct config *config;
extern struct authusers authusers;
static jmp_buf timeout_alarm;

static void
sig_alarm(int signo __unused)
{
	longjmp(timeout_alarm, 1);
}

ssize_t
send_remote_command(int fd, const char* fmt, ...)
{
	va_list va;
	char cmd[4096];
	ssize_t len = 0;

	va_start(va, fmt);
	vsprintf(cmd, fmt, va);

	if (((config->features & SECURETRANS) != 0) &&
	    ((config->features & NOSSL) == 0)) {
		len = SSL_write(config->ssl, (const char*)cmd, strlen(cmd));
		SSL_write(config->ssl, "\r\n", 2);
	}
	else {
		len = write(fd, cmd, strlen(cmd));
		write(fd, "\r\n", 2);
	}
	va_end(va);

	return (len+2);
}

int
read_remote(int fd, int extbufsize, char *extbuf)
{
	ssize_t rlen = 0;
	size_t pos, len;
	char buff[BUF_SIZE];
	int done = 0, status = 0, extbufpos = 0;

	if (signal(SIGALRM, sig_alarm) == SIG_ERR) {
		syslog(LOG_ERR, "SIGALRM error: %m");
	}
	if (setjmp(timeout_alarm) != 0) {
		syslog(LOG_ERR, "Timeout reached");
		return (1);
	}
	alarm(CON_TIMEOUT);

	/*
	 * Remote reading code from femail.c written by Henning Brauer of
	 * OpenBSD and released under a BSD style license.
	 */
	for (len = pos = 0; !done; ) {
		rlen = 0;
		if (pos == 0 ||
		    (pos > 0 && memchr(buff + pos, '\n', len - pos) == NULL)) {
			memmove(buff, buff + pos, len - pos);
			len -= pos;
			pos = 0;
			if (((config->features & SECURETRANS) != 0) &&
			    (config->features & NOSSL) == 0) {
				if ((rlen = SSL_read(config->ssl, buff + len,
				    sizeof(buff) - len)) == -1)
					err(1, "read");
			} else {
				if ((rlen = read(fd, buff + len,
				    sizeof(buff) - len)) == -1)
					err(1, "read");
			}
			len += rlen;
		}
		/*
		 * If there is an external buffer with a size bigger than zero
		 * and as long as there is space in the external buffer and
		 * there are new characters read from the mailserver
		 * copy them to the external buffer
		 */
		if (extbufpos <= (extbufsize - 1) && rlen && extbufsize > 0 
		    && extbuf != NULL) {
			/* do not write over the bounds of the buffer */
			if(extbufpos + rlen > (extbufsize - 1)) {
				rlen = extbufsize - extbufpos;
			}
			memcpy(extbuf + extbufpos, buff + len - rlen, rlen);
			extbufpos += rlen;
		}
		for (; pos < len && buff[pos] >= '0' && buff[pos] <= '9'; pos++)
			; /* Do nothing */

		if (pos == len)
			return (0);

		if (buff[pos] == ' ')
			done = 1;
		else if (buff[pos] != '-')
			syslog(LOG_ERR, "invalid syntax in reply from server");

		/* skip up to \n */
		for (; pos < len && buff[pos - 1] != '\n'; pos++)
			; /* Do nothing */

	}
	alarm(0);

	status = atoi(buff);
	return (status/100);
}

/*
 * Handle SMTP authentication
 */
static int
smtp_login(struct qitem *it, int fd, char *login, char* password)
{
	char *temp;
	int len, res = 0;

#ifdef HAVE_CRYPTO
	res = smtp_auth_md5(it, fd, login, password);
	if (res == 0) {
		return (0);
	} else if (res == -2) {
	/*
	 * If the return code is -2, then then the login attempt failed, 
	 * do not try other login mechanisms
	 */
		return (-1);
	}
#endif /* HAVE_CRYPTO */

	if ((config->features & INSECURE) != 0) {
		/* Send AUTH command according to RFC 2554 */
		send_remote_command(fd, "AUTH LOGIN");
		if (read_remote(fd, 0, NULL) != 3) {
			syslog(LOG_ERR, "%s: remote delivery deferred:"
					" AUTH login not available: %m", it->queueid);
			return (1);
		}

		len = base64_encode(login, strlen(login), &temp);
		if (len <= 0)
			return (-1);

		send_remote_command(fd, "%s", temp);
		if (read_remote(fd, 0, NULL) != 3) {
			syslog(LOG_ERR, "%s: remote delivery deferred:"
					" AUTH login failed: %m", it->queueid);
			return (-1);
		}

		len = base64_encode(password, strlen(password), &temp);
		if (len <= 0)
			return (-1);

		send_remote_command(fd, "%s", temp);
		res = read_remote(fd, 0, NULL);
		if (res == 5) {
			syslog(LOG_ERR, "%s: remote delivery failed:"
					" Authentication failed: %m", it->queueid);
			return (-1);
		} else if (res != 2) {
			syslog(LOG_ERR, "%s: remote delivery failed:"
					" AUTH password failed: %m", it->queueid);
			return (-1);
		}
	} else {
		syslog(LOG_ERR, "%s: non-encrypted SMTP login is disabled in config, so skipping it. ",
				it->queueid);
		return (1);
	}

	return (0);
}

static int
open_connection(struct qitem *it, const char *host)
{
	struct addrinfo hints, *res, *res0;
	char servname[128];
	const char *errmsg = NULL;
	int fd, error = 0, port;

	if (config->port != 0)
		port = config->port;
	else
		port = SMTP_PORT;

	/* FIXME get MX record of host */
	/* Shamelessly taken from getaddrinfo(3) */
	memset(&hints, 0, sizeof(hints));
	hints.ai_family = PF_UNSPEC;
	hints.ai_socktype = SOCK_STREAM;
	hints.ai_protocol = IPPROTO_TCP;

	snprintf(servname, sizeof(servname), "%d", port);
	error = getaddrinfo(host, servname, &hints, &res0);
	if (error) {
		syslog(LOG_ERR, "%s: remote delivery deferred: "
		       "%s: %m", it->queueid, gai_strerror(error));
		return (-1);
	}
	fd = -1;
	for (res = res0; res; res = res->ai_next) {
		fd=socket(res->ai_family, res->ai_socktype, res->ai_protocol);
		if (fd < 0) {
			errmsg = "socket failed";
			continue;
		}
		if (connect(fd, res->ai_addr, res->ai_addrlen) < 0) {
			errmsg = "connect failed";
			close(fd);
			fd = -1;
			continue;
		}
		break;
	}
	if (fd < 0) {
		syslog(LOG_ERR, "%s: remote delivery deferred: %s (%s:%s)",
			it->queueid, errmsg, host, servname);
		freeaddrinfo(res0);
		return (-1);
	}
	freeaddrinfo(res0);
	return (fd);
}

static void
copy_qitem(struct qitem *target, struct qitem *it) {
	target->sender = it->sender;
	target->addr = it->addr;
	target->pipeuser = it->pipeuser;
	target->queuefn = it->queuefn;
	target->queueid = it->queueid;
	target->queuef = it->queuef;
	target->hdrlen = it->hdrlen;
	target->local = 0;
}

int
deliver_remote(struct qitem *it, const char **errmsg, struct queue **queue)
{
	struct authuser *a;
	char *host, line[1000];
	int fd, error = 0, do_auth = 0, res = 0;
	size_t linelen;

	host = strrchr(it->addr, '@');
	/* Should not happen */
	if (host == NULL)
		return(-1);
	else
		/* Step over the @ */
		host++;

	/* Smarthost support? */
	if (config->smarthost != NULL && strlen(config->smarthost) > 0) {
		syslog(LOG_INFO, "%s: using smarthost (%s)",
		       it->queueid, config->smarthost);
		host = config->smarthost;
	}

	fd = open_connection(it, host);
	if (fd < 0)
		return(1);

	/* Check first reply from remote host */
	config->features |= NOSSL;
	res = read_remote(fd, 0, NULL);
	if (res != 2) {
		syslog(LOG_INFO, "%s: Invalid initial response: %i",
			it->queueid, res);
		return(1);
	}
	config->features &= ~NOSSL;

#ifdef HAVE_CRYPTO
	if ((config->features & SECURETRANS) != 0) {
		error = smtp_init_crypto(it, fd, config->features);
		if (error >= 0)
			syslog(LOG_INFO, "%s: SSL initialization successful",
				it->queueid);
		else
			goto out;
	}

	/*
	 * If the user doesn't want STARTTLS, but SSL encryption, we
	 * have to enable SSL first, then send EHLO
	 */
	if (((config->features & STARTTLS) == 0) &&
	    ((config->features & SECURETRANS) != 0)) {
		send_remote_command(fd, "EHLO %s", hostname());
		if (read_remote(fd, 0, NULL) != 2) {
			syslog(LOG_ERR, "%s: remote delivery deferred: "
			       " EHLO failed: %m", it->queueid);
			return (-1);
		}
	}
#endif /* HAVE_CRYPTO */
	if (((config->features & SECURETRANS) == 0)) {
		send_remote_command(fd, "EHLO %s", hostname());
		if (read_remote(fd, 0, NULL) != 2) {
			syslog(LOG_ERR, "%s: remote delivery deferred: "
			       " EHLO failed: %m", it->queueid);
			return (-1);
		}
	}

	/*
	 * Use SMTP authentication if the user defined an entry for the remote
	 * or smarthost
	 */
	SLIST_FOREACH(a, &authusers, next) {
		if (strcmp(a->host, host) == 0) {
			do_auth = 1;
			break;
		}
	}

	if (do_auth == 1) {
		/*
		 * Check if the user wants plain text login without using
		 * encryption.
		 */
		syslog(LOG_INFO, "%s: Use SMTP authentication",
				it->queueid);
		error = smtp_login(it, fd, a->login, a->password);
		if (error < 0) {
			syslog(LOG_ERR, "%s: remote delivery failed:"
					" SMTP login failed: %m", it->queueid);
			return(-1);
		}
		/* SMTP login is not available, so try without */
		else if (error > 0)
			syslog(LOG_ERR, "%s: SMTP login not available."
					" Try without", it->queueid);
	}

	send_remote_command(fd, "MAIL FROM:<%s>", it->sender);
	if (read_remote(fd, 0, NULL) != 2) {
		syslog(LOG_ERR, "%s: remote delivery deferred:"
		       " MAIL FROM failed: %m", it->queueid);
		return(1);
	}

	if (queue == NULL) {
	/* without given queue send only to one receipient */
		send_remote_command(fd, "RCPT TO:<%s>", it->addr);
		if (read_remote(fd, 0, NULL) != 2) {
			syslog(LOG_ERR, "%s: remote delivery deferred:"
					" RCPT TO failed: %m", it->queueid);
			return(1);
		}
	} else {
	/* Iterate over all recepients and open only one connection */
/*
 * we need 3 queues:
 * 	-delivered addresses
 *	-temporary errors
 *	-permanent errors
 * these 3 queues are given in **queues (+the first queue with all the qitems to send)
 *
 */

		struct qitem *tit;
		int rcpt_success = 0;
		struct stat st;
		LIST_FOREACH(tit, &queue[0]->queue, next) {
			struct qitem *qit;
			qit = calloc(1, sizeof(struct qitem));
			copy_qitem(qit, tit);

			if (stat(tit->queuefn, &st) != 0) {
				syslog(LOG_ERR, "%s: lost queue file `%s'",
						tit->queueid, tit->queuefn);
				/* drop qitem and mark it as successfully sent */
				LIST_INSERT_HEAD(&queue[1]->queue, qit, next);
				continue;
			}

			send_remote_command(fd, "RCPT TO:<%s>", tit->addr);
			switch (read_remote(fd, 0, NULL)) {
			case 2: /* everythings fine, receipient accepted */
				/* add item to temporary queue, these items will be deleted in deliver_smarthost */
				rcpt_success = 1;
				LIST_INSERT_HEAD(&queue[1]->queue, qit, next);
				syslog(LOG_INFO, "%s: mail from=<%s> to=<%s>",
						tit->queueid, tit->sender, tit->addr);
				break;
			case 4: /* temporary error, try again later */
				/* add item to a temporary queue, these items will be tried again */
				LIST_INSERT_HEAD(&queue[2]->queue, qit, next);
				syslog(LOG_INFO, "%s: mail from=<%s> to=<%s>",
						tit->queueid, tit->sender, tit->addr);
				syslog(LOG_ERR, "%s: remote delivery deferred:"
						" RCPT TO failed: %m", tit->queueid);
				break;
			case 5: /* permanent error, bounce */
				/* add item to a queue, which will be returned to deliver_smarthost */
				LIST_INSERT_HEAD(&queue[3]->queue, qit, next);
				syslog(LOG_INFO, "%s: mail from=<%s> to=<%s>",
						tit->queueid, tit->sender, tit->addr);
				syslog(LOG_ERR, "%s: remote delivery failed:"
						" RCPT TO failed: %m", tit->queueid);
				break;
			}
		}
		/* if there was no successful RCPT TO, return _WITHOUT_ error */
		if (!rcpt_success)
			goto out;
	} 

	send_remote_command(fd, "DATA");
	if (read_remote(fd, 0, NULL) != 3) {
		syslog(LOG_ERR, "%s: remote delivery deferred:"
		       " DATA failed: %m", it->queueid);
		return (1);
	}

	if (fseek(it->queuef, it->hdrlen, SEEK_SET) != 0) {
		syslog(LOG_ERR, "%s: remote delivery deferred: cannot seek: %m",
		       it->queueid);
		return (1);
	}

	while (!feof(it->queuef)) {
		if (fgets(line, sizeof(line), it->queuef) == NULL)
			break;
		linelen = strlen(line);
		if (linelen == 0 || line[linelen - 1] != '\n') {
			syslog(LOG_CRIT, "%s: remote delivery failed:"
				"corrupted queue file", it->queueid);
			*errmsg = "corrupted queue file";
			error = -1;
			goto out;
		}

		/* Remove trailing \n's and escape leading dots */
		trim_line(line);

		/*
		 * If the first character is a dot, we escape it so the line
		 * length increases
		*/
		if (line[0] == '.')
			linelen++;

		if (send_remote_command(fd, "%s", line) != (ssize_t)linelen+1) {
			syslog(LOG_ERR, "%s: remote delivery deferred: "
				"write error", it->queueid);
			error = 1;
			goto out;
		}
	}

	send_remote_command(fd, ".");
	if (read_remote(fd, 0, NULL) != 2) {
		syslog(LOG_ERR, "%s: remote delivery deferred: %m",
		       it->queueid);
		return (1);
	}

	send_remote_command(fd, "QUIT");
	if (read_remote(fd, 0, NULL) != 2) {
		syslog(LOG_ERR, "%s: remote delivery deferred: "
		       "QUIT failed: %m", it->queueid);
		return (1);
	}
out:

	close(fd);
	return (error);
}
Commit	Line	Data
86e4d161 MS	1	/*
	2	* Copyright (c) 2008 The DragonFly Project. All rights reserved.
	3	*
	4	* This code is derived from software contributed to The DragonFly Project
	5	* by Matthias Schmidt <matthias@dragonflybsd.org>, University of Marburg,
	6	* Germany.
	7	*
	8	* Redistribution and use in source and binary forms, with or without
	9	* modification, are permitted provided that the following conditions
	10	* are met:
	11	*
	12	* 1. Redistributions of source code must retain the above copyright
	13	* notice, this list of conditions and the following disclaimer.
	14	* 2. Redistributions in binary form must reproduce the above copyright
	15	* notice, this list of conditions and the following disclaimer in
	16	* the documentation and/or other materials provided with the
	17	* distribution.
	18	* 3. Neither the name of The DragonFly Project nor the names of its
	19	* contributors may be used to endorse or promote products derived
	20	* from this software without specific, prior written permission.
	21	*
	22	* THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
	23	* ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
	24	* LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
	25	* FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
	26	* COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
	27	* INCIDENTAL, SPECIAL, EXEMPLARY OR CONSEQUENTIAL DAMAGES (INCLUDING,
	28	* BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
	29	* LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED
	30	* AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
	31	* OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT
	32	* OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
	33	* SUCH DAMAGE.
	34	*
c507d897	35	* $DragonFly: src/libexec/dma/net.c,v 1.9 2008/09/30 17:47:21 swildner Exp $
86e4d161 MS	36	*/
	37
	38	#include <sys/param.h>
	39	#include <sys/queue.h>
	40	#include <sys/stat.h>
	41	#include <sys/types.h>
	42	#include <sys/socket.h>
	43	#include <netinet/in.h>
	44	#include <arpa/inet.h>
	45
	46	#ifdef HAVE_CRYPTO
	47	#include <openssl/ssl.h>
	48	#endif /* HAVE_CRYPTO */
	49
c507d897	50	#include <err.h>
86e4d161 MS	51	#include <netdb.h>
	52	#include <setjmp.h>
	53	#include <signal.h>
	54	#include <syslog.h>
	55	#include <unistd.h>
	56
	57	#include "dma.h"
	58
	59	extern struct config *config;
	60	extern struct authusers authusers;
	61	static jmp_buf timeout_alarm;
	62
	63	static void
65bec70e	64	sig_alarm(int signo __unused)
86e4d161 MS	65	{
	66	longjmp(timeout_alarm, 1);
	67	}
	68
	69	ssize_t
	70	send_remote_command(int fd, const char* fmt, ...)
	71	{
	72	va_list va;
	73	char cmd[4096];
	74	ssize_t len = 0;
	75
	76	va_start(va, fmt);
	77	vsprintf(cmd, fmt, va);
	78
	79	if (((config->features & SECURETRANS) != 0) &&
50c8e68a	80	((config->features & NOSSL) == 0)) {
86e4d161 MS	81	len = SSL_write(config->ssl, (const char*)cmd, strlen(cmd));
	82	SSL_write(config->ssl, "\r\n", 2);
	83	}
	84	else {
	85	len = write(fd, cmd, strlen(cmd));
	86	write(fd, "\r\n", 2);
	87	}
	88	va_end(va);
	89
	90	return (len+2);
	91	}
	92
50c8e68a	93	int
bf28fcc6	94	read_remote(int fd, int extbufsize, char *extbuf)
86e4d161	95	{
50c8e68a MS	96	ssize_t rlen = 0;
	97	size_t pos, len;
	98	char buff[BUF_SIZE];
bf28fcc6	99	int done = 0, status = 0, extbufpos = 0;
86e4d161 MS	100
	101	if (signal(SIGALRM, sig_alarm) == SIG_ERR) {
	102	syslog(LOG_ERR, "SIGALRM error: %m");
	103	}
	104	if (setjmp(timeout_alarm) != 0) {
	105	syslog(LOG_ERR, "Timeout reached");
	106	return (1);
	107	}
	108	alarm(CON_TIMEOUT);
	109
	110	/*
50c8e68a MS	111	* Remote reading code from femail.c written by Henning Brauer of
50c8e68a MS	112	* OpenBSD and released under a BSD style license.
86e4d161	113	*/
50c8e68a	114	for (len = pos = 0; !done; ) {
bf28fcc6	115	rlen = 0;
50c8e68a MS	116	if (pos == 0 \|\|
	117	(pos > 0 && memchr(buff + pos, '\n', len - pos) == NULL)) {
	118	memmove(buff, buff + pos, len - pos);
	119	len -= pos;
	120	pos = 0;
	121	if (((config->features & SECURETRANS) != 0) &&
	122	(config->features & NOSSL) == 0) {
	123	if ((rlen = SSL_read(config->ssl, buff + len,
	124	sizeof(buff) - len)) == -1)
	125	err(1, "read");
	126	} else {
	127	if ((rlen = read(fd, buff + len,
	128	sizeof(buff) - len)) == -1)
	129	err(1, "read");
	130	}
	131	len += rlen;
	132	}
bf28fcc6 MS	133	/*
	134	* If there is an external buffer with a size bigger than zero
	135	* and as long as there is space in the external buffer and
	136	* there are new characters read from the mailserver
	137	* copy them to the external buffer
	138	*/
	139	if (extbufpos <= (extbufsize - 1) && rlen && extbufsize > 0
	140	&& extbuf != NULL) {
	141	/* do not write over the bounds of the buffer */
	142	if(extbufpos + rlen > (extbufsize - 1)) {
	143	rlen = extbufsize - extbufpos;
	144	}
	145	memcpy(extbuf + extbufpos, buff + len - rlen, rlen);
	146	extbufpos += rlen;
	147	}
50c8e68a MS	148	for (; pos < len && buff[pos] >= '0' && buff[pos] <= '9'; pos++)
50c8e68a MS	149	; /* Do nothing */
86e4d161	150
50c8e68a MS	151	if (pos == len)
50c8e68a MS	152	return (0);
86e4d161	153
50c8e68a MS	154	if (buff[pos] == ' ')
	155	done = 1;
	156	else if (buff[pos] != '-')
	157	syslog(LOG_ERR, "invalid syntax in reply from server");
86e4d161	158
50c8e68a MS	159	/* skip up to \n */
	160	for (; pos < len && buff[pos - 1] != '\n'; pos++)
	161	; /* Do nothing */
86e4d161	162
86e4d161	163	}
50c8e68a MS	164	alarm(0);
	165
	166	status = atoi(buff);
	167	return (status/100);
86e4d161 MS	168	}
	169
	170	/*
	171	* Handle SMTP authentication
86e4d161 MS	172	*/
	173	static int
	174	smtp_login(struct qitem it, int fd, char login, char* password)
	175	{
86e4d161	176	char *temp;
50c8e68a	177	int len, res = 0;
86e4d161	178
bf28fcc6 MS	179	#ifdef HAVE_CRYPTO
	180	res = smtp_auth_md5(it, fd, login, password);
	181	if (res == 0) {
	182	return (0);
	183	} else if (res == -2) {
	184	/*
	185	* If the return code is -2, then then the login attempt failed,
	186	* do not try other login mechanisms
	187	*/
	188	return (-1);
86e4d161	189	}
bf28fcc6	190	#endif /* HAVE_CRYPTO */
86e4d161	191
bf28fcc6 MS	192	if ((config->features & INSECURE) != 0) {
	193	/* Send AUTH command according to RFC 2554 */
	194	send_remote_command(fd, "AUTH LOGIN");
	195	if (read_remote(fd, 0, NULL) != 3) {
	196	syslog(LOG_ERR, "%s: remote delivery deferred:"
	197	" AUTH login not available: %m", it->queueid);
	198	return (1);
	199	}
86e4d161	200
bf28fcc6 MS	201	len = base64_encode(login, strlen(login), &temp);
	202	if (len <= 0)
	203	return (-1);
86e4d161	204
bf28fcc6 MS	205	send_remote_command(fd, "%s", temp);
	206	if (read_remote(fd, 0, NULL) != 3) {
	207	syslog(LOG_ERR, "%s: remote delivery deferred:"
	208	" AUTH login failed: %m", it->queueid);
	209	return (-1);
	210	}
86e4d161	211
bf28fcc6 MS	212	len = base64_encode(password, strlen(password), &temp);
	213	if (len <= 0)
	214	return (-1);
	215
	216	send_remote_command(fd, "%s", temp);
	217	res = read_remote(fd, 0, NULL);
	218	if (res == 5) {
	219	syslog(LOG_ERR, "%s: remote delivery failed:"
	220	" Authentication failed: %m", it->queueid);
	221	return (-1);
	222	} else if (res != 2) {
	223	syslog(LOG_ERR, "%s: remote delivery failed:"
	224	" AUTH password failed: %m", it->queueid);
	225	return (-1);
	226	}
	227	} else {
	228	syslog(LOG_ERR, "%s: non-encrypted SMTP login is disabled in config, so skipping it. ",
	229	it->queueid);
	230	return (1);
86e4d161 MS	231	}
	232
	233	return (0);
	234	}
	235
	236	static int
	237	open_connection(struct qitem it, const char host)
	238	{
86e4d161 MS	239	struct addrinfo hints, res, res0;
	240	char servname[128];
	241	const char *errmsg = NULL;
86e4d161 MS	242	int fd, error = 0, port;
86e4d161 MS	243
65bec70e	244	if (config->port != 0)
86e4d161 MS	245	port = config->port;
	246	else
	247	port = SMTP_PORT;
	248
bf28fcc6	249	/* FIXME get MX record of host */
86e4d161 MS	250	/* Shamelessly taken from getaddrinfo(3) */
	251	memset(&hints, 0, sizeof(hints));
	252	hints.ai_family = PF_UNSPEC;
	253	hints.ai_socktype = SOCK_STREAM;
	254	hints.ai_protocol = IPPROTO_TCP;
	255
	256	snprintf(servname, sizeof(servname), "%d", port);
	257	error = getaddrinfo(host, servname, &hints, &res0);
	258	if (error) {
	259	syslog(LOG_ERR, "%s: remote delivery deferred: "
	260	"%s: %m", it->queueid, gai_strerror(error));
	261	return (-1);
	262	}
	263	fd = -1;
	264	for (res = res0; res; res = res->ai_next) {
	265	fd=socket(res->ai_family, res->ai_socktype, res->ai_protocol);
	266	if (fd < 0) {
	267	errmsg = "socket failed";
	268	continue;
	269	}
	270	if (connect(fd, res->ai_addr, res->ai_addrlen) < 0) {
	271	errmsg = "connect failed";
	272	close(fd);
	273	fd = -1;
	274	continue;
	275	}
	276	break;
	277	}
	278	if (fd < 0) {
	279	syslog(LOG_ERR, "%s: remote delivery deferred: %s (%s:%s)",
	280	it->queueid, errmsg, host, servname);
	281	freeaddrinfo(res0);
	282	return (-1);
	283	}
	284	freeaddrinfo(res0);
86e4d161 MS	285	return (fd);
	286	}
	287
94389971 MS	288	static void
	289	copy_qitem(struct qitem target, struct qitem it) {
	290	target->sender = it->sender;
	291	target->addr = it->addr;
	292	target->pipeuser = it->pipeuser;
	293	target->queuefn = it->queuefn;
	294	target->queueid = it->queueid;
	295	target->queuef = it->queuef;
	296	target->hdrlen = it->hdrlen;
	297	target->local = 0;
	298	}
	299
86e4d161	300	int
94389971	301	deliver_remote(struct qitem it, const char errmsg, struct queue *queue)
86e4d161 MS	302	{
86e4d161 MS	303	struct authuser *a;
50c8e68a MS	304	char *host, line[1000];
50c8e68a MS	305	int fd, error = 0, do_auth = 0, res = 0;
86e4d161 MS	306	size_t linelen;
	307
	308	host = strrchr(it->addr, '@');
	309	/* Should not happen */
	310	if (host == NULL)
	311	return(-1);
	312	else
	313	/* Step over the @ */
	314	host++;
	315
	316	/* Smarthost support? */
	317	if (config->smarthost != NULL && strlen(config->smarthost) > 0) {
	318	syslog(LOG_INFO, "%s: using smarthost (%s)",
	319	it->queueid, config->smarthost);
	320	host = config->smarthost;
	321	}
	322
	323	fd = open_connection(it, host);
	324	if (fd < 0)
94389971	325	return(1);
86e4d161	326
50c8e68a MS	327	/* Check first reply from remote host */
50c8e68a MS	328	config->features \|= NOSSL;
bf28fcc6	329	res = read_remote(fd, 0, NULL);
50c8e68a MS	330	if (res != 2) {
	331	syslog(LOG_INFO, "%s: Invalid initial response: %i",
	332	it->queueid, res);
	333	return(1);
	334	}
	335	config->features &= ~NOSSL;
	336
86e4d161 MS	337	#ifdef HAVE_CRYPTO
	338	if ((config->features & SECURETRANS) != 0) {
	339	error = smtp_init_crypto(it, fd, config->features);
	340	if (error >= 0)
40234162	341	syslog(LOG_INFO, "%s: SSL initialization successful",
86e4d161 MS	342	it->queueid);
	343	else
	344	goto out;
	345	}
	346
	347	/*
	348	* If the user doesn't want STARTTLS, but SSL encryption, we
	349	* have to enable SSL first, then send EHLO
	350	*/
	351	if (((config->features & STARTTLS) == 0) &&
	352	((config->features & SECURETRANS) != 0)) {
	353	send_remote_command(fd, "EHLO %s", hostname());
bf28fcc6	354	if (read_remote(fd, 0, NULL) != 2) {
86e4d161 MS	355	syslog(LOG_ERR, "%s: remote delivery deferred: "
	356	" EHLO failed: %m", it->queueid);
	357	return (-1);
	358	}
	359	}
	360	#endif /* HAVE_CRYPTO */
	361	if (((config->features & SECURETRANS) == 0)) {
	362	send_remote_command(fd, "EHLO %s", hostname());
bf28fcc6	363	if (read_remote(fd, 0, NULL) != 2) {
86e4d161 MS	364	syslog(LOG_ERR, "%s: remote delivery deferred: "
	365	" EHLO failed: %m", it->queueid);
	366	return (-1);
	367	}
	368	}
	369
	370	/*
	371	* Use SMTP authentication if the user defined an entry for the remote
	372	* or smarthost
	373	*/
	374	SLIST_FOREACH(a, &authusers, next) {
	375	if (strcmp(a->host, host) == 0) {
	376	do_auth = 1;
	377	break;
	378	}
	379	}
	380
	381	if (do_auth == 1) {
dfce7456 MS	382	/*
	383	* Check if the user wants plain text login without using
	384	* encryption.
	385	*/
bf28fcc6	386	syslog(LOG_INFO, "%s: Use SMTP authentication",
86e4d161	387	it->queueid);
bf28fcc6 MS	388	error = smtp_login(it, fd, a->login, a->password);
	389	if (error < 0) {
	390	syslog(LOG_ERR, "%s: remote delivery failed:"
dfce7456	391	" SMTP login failed: %m", it->queueid);
94389971	392	return(-1);
dfce7456	393	}
bf28fcc6 MS	394	/* SMTP login is not available, so try without */
	395	else if (error > 0)
	396	syslog(LOG_ERR, "%s: SMTP login not available."
	397	" Try without", it->queueid);
86e4d161 MS	398	}
	399
	400	send_remote_command(fd, "MAIL FROM:<%s>", it->sender);
bf28fcc6	401	if (read_remote(fd, 0, NULL) != 2) {
86e4d161 MS	402	syslog(LOG_ERR, "%s: remote delivery deferred:"
86e4d161 MS	403	" MAIL FROM failed: %m", it->queueid);
94389971	404	return(1);
86e4d161 MS	405	}
86e4d161 MS	406
94389971 MS	407	if (queue == NULL) {
	408	/* without given queue send only to one receipient */
	409	send_remote_command(fd, "RCPT TO:<%s>", it->addr);
	410	if (read_remote(fd, 0, NULL) != 2) {
	411	syslog(LOG_ERR, "%s: remote delivery deferred:"
	412	" RCPT TO failed: %m", it->queueid);
	413	return(1);
	414	}
	415	} else {
	416	/* Iterate over all recepients and open only one connection */
	417	/*
	418	* we need 3 queues:
	419	* -delivered addresses
	420	* -temporary errors
	421	* -permanent errors
	422	* these 3 queues are given in **queues (+the first queue with all the qitems to send)
	423	*
	424	*/
	425
	426	struct qitem *tit;
	427	int rcpt_success = 0;
	428	struct stat st;
	429	LIST_FOREACH(tit, &queue[0]->queue, next) {
	430	struct qitem *qit;
	431	qit = calloc(1, sizeof(struct qitem));
	432	copy_qitem(qit, tit);
	433
	434	if (stat(tit->queuefn, &st) != 0) {
	435	syslog(LOG_ERR, "%s: lost queue file `%s'",
	436	tit->queueid, tit->queuefn);
	437	/* drop qitem and mark it as successfully sent */
	438	LIST_INSERT_HEAD(&queue[1]->queue, qit, next);
	439	continue;
	440	}
	441
	442	send_remote_command(fd, "RCPT TO:<%s>", tit->addr);
	443	switch (read_remote(fd, 0, NULL)) {
	444	case 2: /* everythings fine, receipient accepted */
	445	/* add item to temporary queue, these items will be deleted in deliver_smarthost */
	446	rcpt_success = 1;
	447	LIST_INSERT_HEAD(&queue[1]->queue, qit, next);
	448	syslog(LOG_INFO, "%s: mail from=<%s> to=<%s>",
	449	tit->queueid, tit->sender, tit->addr);
	450	break;
	451	case 4: /* temporary error, try again later */
	452	/* add item to a temporary queue, these items will be tried again */
	453	LIST_INSERT_HEAD(&queue[2]->queue, qit, next);
	454	syslog(LOG_INFO, "%s: mail from=<%s> to=<%s>",
	455	tit->queueid, tit->sender, tit->addr);
	456	syslog(LOG_ERR, "%s: remote delivery deferred:"
	457	" RCPT TO failed: %m", tit->queueid);
	458	break;
	459	case 5: /* permanent error, bounce */
	460	/* add item to a queue, which will be returned to deliver_smarthost */
	461	LIST_INSERT_HEAD(&queue[3]->queue, qit, next);
	462	syslog(LOG_INFO, "%s: mail from=<%s> to=<%s>",
	463	tit->queueid, tit->sender, tit->addr);
	464	syslog(LOG_ERR, "%s: remote delivery failed:"
	465	" RCPT TO failed: %m", tit->queueid);
	466	break;
	467	}
	468	}
	469	/* if there was no successful RCPT TO, return _WITHOUT_ error */
	470	if (!rcpt_success)
471	goto out;
472	}
86e4d161 MS	473
86e4d161 MS	474	send_remote_command(fd, "DATA");
bf28fcc6	475	if (read_remote(fd, 0, NULL) != 3) {
86e4d161 MS	476	syslog(LOG_ERR, "%s: remote delivery deferred:"
	477	" DATA failed: %m", it->queueid);
	478	return (1);
	479	}
	480
	481	if (fseek(it->queuef, it->hdrlen, SEEK_SET) != 0) {
	482	syslog(LOG_ERR, "%s: remote delivery deferred: cannot seek: %m",
	483	it->queueid);
	484	return (1);
	485	}
	486
	487	while (!feof(it->queuef)) {
	488	if (fgets(line, sizeof(line), it->queuef) == NULL)
	489	break;
	490	linelen = strlen(line);
	491	if (linelen == 0 \|\| line[linelen - 1] != '\n') {
	492	syslog(LOG_CRIT, "%s: remote delivery failed:"
	493	"corrupted queue file", it->queueid);
	494	*errmsg = "corrupted queue file";
	495	error = -1;
	496	goto out;
	497	}
	498
	499	/* Remove trailing \n's and escape leading dots */
	500	trim_line(line);
	501
	502	/*
	503	* If the first character is a dot, we escape it so the line
	504	* length increases
	505	*/
	506	if (line[0] == '.')
	507	linelen++;
	508
	509	if (send_remote_command(fd, "%s", line) != (ssize_t)linelen+1) {
	510	syslog(LOG_ERR, "%s: remote delivery deferred: "
	511	"write error", it->queueid);
	512	error = 1;
	513	goto out;
	514	}
	515	}
	516
	517	send_remote_command(fd, ".");
bf28fcc6	518	if (read_remote(fd, 0, NULL) != 2) {
86e4d161 MS	519	syslog(LOG_ERR, "%s: remote delivery deferred: %m",
	520	it->queueid);
	521	return (1);
	522	}
	523
	524	send_remote_command(fd, "QUIT");
bf28fcc6	525	if (read_remote(fd, 0, NULL) != 2) {
86e4d161 MS	526	syslog(LOG_ERR, "%s: remote delivery deferred: "
	527	"QUIT failed: %m", it->queueid);
	528	return (1);
	529	}
	530	out:
	531
	532	close(fd);
	533	return (error);
	534	}
	535