Source-Changes-HG archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
[src/trunk]: src/gnu/dist/postfix postfix 20010228-pl04
details: https://anonhg.NetBSD.org/src/rev/d635645d758f
branches: trunk
changeset: 513710:d635645d758f
user: itojun <itojun%NetBSD.org@localhost>
date: Thu Aug 09 07:59:02 2001 +0000
description:
postfix 20010228-pl04
diffstat:
gnu/dist/postfix/HISTORY | 33 +++
gnu/dist/postfix/MYSQL_README | 5 +-
gnu/dist/postfix/conf/sample-ldap.cf | 14 +
gnu/dist/postfix/html/faq.html | 2 +-
gnu/dist/postfix/src/global/mail_version.h | 2 +-
gnu/dist/postfix/src/smtpd/Makefile.in | 9 +-
gnu/dist/postfix/src/smtpd/smtpd_acl.in | 107 ++++++++++
gnu/dist/postfix/src/smtpd/smtpd_acl.ref | 164 +++++++++++++++
gnu/dist/postfix/src/smtpd/smtpd_check_access | 21 ++
gnu/dist/postfix/src/util/ctable.c | 273 ++++++++++++++++++++++++++
gnu/dist/postfix/src/util/ctable.h | 39 +++
gnu/dist/postfix/src/util/ctable.in | 39 +++
gnu/dist/postfix/src/util/ctable.ref | 99 +++++++++
gnu/dist/postfix/src/util/dict_ldap.c | 77 +++++-
gnu/dist/postfix/src/util/dict_pcre.c | 1 +
gnu/dist/postfix/src/util/dict_regexp.c | 2 +
gnu/dist/postfix/src/util/inet_addr_list.in | 9 +
gnu/dist/postfix/src/util/inet_addr_list.ref | 15 +
gnu/dist/postfix/src/util/ring.h | 11 +
19 files changed, 902 insertions(+), 20 deletions(-)
diffs (truncated from 1164 to 300 lines):
diff -r bd5eff2d2823 -r d635645d758f gnu/dist/postfix/HISTORY
--- a/gnu/dist/postfix/HISTORY Thu Aug 09 01:32:46 2001 +0000
+++ b/gnu/dist/postfix/HISTORY Thu Aug 09 07:59:02 2001 +0000
@@ -5063,3 +5063,36 @@
sending QUIT after process idle timeout while the LMTP
server had disconnected. Files: smtp/smtp_proto.c,
lmtp/lmtp_proto.c.
+
+20010727
+
+ Bugfix: updated LDAP client module from LaMont Jones, HP.
+ This also introduces new LDAP query filter patterns: %u
+ (address localpart) and %d (domain part). Files:
+ conf/sample-ldap.cf, util/dict_ldap.c.
+
+20010729
+
+ Bugfix: recursive smtpd_whatever_restrictions clobbered
+ intermediate results when switching between sender and
+ recipient address restrictions. Problem found by Victor
+ Duchovni, morganstanley.com. In order to fix, introduced
+ address resolver result caching, which should also help to
+ speed up sender/recipient address restriction processing.
+
+ Bugfix: the not yet announced DUNNO access table lookup
+ result did not prevent lookups with substrings of the same
+ lookup key. Found by Victor Duchovni, morganstanley.com.
+
+20010730
+
+ Robustness: trim trailing whitespace from regexp and pcre
+ right-hand sides, for consistency with DB/DBM tables.
+ Files: util/dict_pcre.c, util/dict_regexp.c.
+
+20010731
+
+ Robustness: eliminate duplicate IP addresses after expansion
+ of hostnames in $inet_interfaces, so that Postfix does not
+ suddenly refuse to start up after someone changes the DNS.
+ Files: util/inet_addr_list.c global/own_inet_addr.c.
diff -r bd5eff2d2823 -r d635645d758f gnu/dist/postfix/MYSQL_README
--- a/gnu/dist/postfix/MYSQL_README Thu Aug 09 01:32:46 2001 +0000
+++ b/gnu/dist/postfix/MYSQL_README Thu Aug 09 07:59:02 2001 +0000
@@ -12,9 +12,10 @@
make -f Makefile.init makefiles \
'CCARGS=-DHAS_MYSQL -I/usr/local/mysql/include' \
- 'AUXLIBS=-L/usr/local/mysql/lib -lmysqlclient -lm'
+ 'AUXLIBS=-L/usr/local/mysql/lib -lmysqlclient -lz -lm'
-then, just run 'make'.
+then, just run 'make'. This requires libz, the compression library.
+Older mysql implementations build without libz.
Postfix installations which may benefit from using mysql map types
include sites that have a need for instantaneous updates of
diff -r bd5eff2d2823 -r d635645d758f gnu/dist/postfix/conf/sample-ldap.cf
--- a/gnu/dist/postfix/conf/sample-ldap.cf Thu Aug 09 01:32:46 2001 +0000
+++ b/gnu/dist/postfix/conf/sample-ldap.cf Thu Aug 09 07:59:02 2001 +0000
@@ -23,6 +23,13 @@
#ldap_server_port = 389
# The ldap_query_filter parameter specifies the filter used for queries.
+# The replacement for "%s" is the address input into the map; e.g.
+# for alias maps, the "user" part (the RFC 2822 local-part) of
+# "user%domain.com@localhost" for To: addresses destined for local delivery
+# (those matching $mydestination or a virtual domain), and all of
+# "user%domain.com@localhost" (the RFC 2822 addr-spec) for other addresses.
+# "%u" provides just the user portion of the input, and "%d" provides
+# just the hostname.
#
#ldap_query_filter = (mailacceptinggeneralid=%s)
@@ -31,6 +38,13 @@
#
#ldap_result_attribute = maildrop
+# The ldap_special_result_attribute lists the attribute(s) of an
+# entry which contain links, either ldap url's or distinguished names.
+# The entries referenced by these links are (recursively) treated as if
+# they were contained in the referencing entity.
+#
+# ldap_special_result_attribute =
+
# The ldap_scope parameter specifies the LDAP search scope: sub, base, or one.
#
#ldap_scope = sub
diff -r bd5eff2d2823 -r d635645d758f gnu/dist/postfix/html/faq.html
--- a/gnu/dist/postfix/html/faq.html Thu Aug 09 01:32:46 2001 +0000
+++ b/gnu/dist/postfix/html/faq.html Thu Aug 09 07:59:02 2001 +0000
@@ -1027,7 +1027,7 @@
<hr>
-<a name="nosuid"><h1>sendmail has set-uid root file permissions, or is run from a
+<a name="nosuid"><h3>sendmail has set-uid root file permissions, or is run from a
set-uid root process</h3></a>
Traditionally, the UNIX <b>sendmail</b> command is installed with
diff -r bd5eff2d2823 -r d635645d758f gnu/dist/postfix/src/global/mail_version.h
--- a/gnu/dist/postfix/src/global/mail_version.h Thu Aug 09 01:32:46 2001 +0000
+++ b/gnu/dist/postfix/src/global/mail_version.h Thu Aug 09 07:59:02 2001 +0000
@@ -15,7 +15,7 @@
* Version of this program.
*/
#define VAR_MAIL_VERSION "mail_version"
-#define DEF_MAIL_VERSION "Postfix-20010228-pl03"
+#define DEF_MAIL_VERSION "Postfix-20010228-pl04"
extern char *var_mail_version;
/* LICENSE
diff -r bd5eff2d2823 -r d635645d758f gnu/dist/postfix/src/smtpd/Makefile.in
--- a/gnu/dist/postfix/src/smtpd/Makefile.in Thu Aug 09 01:32:46 2001 +0000
+++ b/gnu/dist/postfix/src/smtpd/Makefile.in Thu Aug 09 07:59:02 2001 +0000
@@ -67,7 +67,7 @@
done) | grep -v '[.][o][:][ ][/]' >$$$$ && mv $$$$ Makefile.in
@$(EXPORT) make -f Makefile.in Makefile 1>&2
-tests: smtpd_check_test smtpd_check_test2 smtpd_token_test
+tests: smtpd_check_test smtpd_check_test2 smtpd_acl_test smtpd_token_test
smtpd_check_test: smtpd_check smtpd_check.in smtpd_check.ref
../postmap/postmap smtpd_check_access
@@ -81,6 +81,12 @@
diff smtpd_check.ref2 smtpd_check.tmp
rm -f smtpd_check.tmp smtpd_check_access.*
+smtpd_acl_test: smtpd_check smtpd_acl.in smtpd_acl.ref
+ ../postmap/postmap smtpd_check_access
+ ./smtpd_check <smtpd_acl.in >smtpd_check.tmp 2>&1
+ diff smtpd_acl.ref smtpd_check.tmp
+ rm -f smtpd_check.tmp smtpd_check_access.*
+
smtpd_token_test: smtpd_token smtpd_token.in smtpd_token.ref
./smtpd_token <smtpd_token.in >smtpd_token.tmp 2>&1
diff smtpd_token.ref smtpd_token.tmp
@@ -164,6 +170,7 @@
smtpd_check.o: ../../include/dict.h
smtpd_check.o: ../../include/vstream.h
smtpd_check.o: ../../include/htable.h
+smtpd_check.o: ../../include/ctable.h
smtpd_check.o: ../../include/dns.h
smtpd_check.o: ../../include/namadr_list.h
smtpd_check.o: ../../include/domain_list.h
diff -r bd5eff2d2823 -r d635645d758f gnu/dist/postfix/src/smtpd/smtpd_acl.in
--- /dev/null Thu Jan 01 00:00:00 1970 +0000
+++ b/gnu/dist/postfix/src/smtpd/smtpd_acl.in Thu Aug 09 07:59:02 2001 +0000
@@ -0,0 +1,107 @@
+#
+# Initialize
+#
+smtpd_delay_reject 0
+mynetworks 127.0.0.0/8,168.100.189.0/28
+relay_domains porcupine.org
+#
+# Test check_domain_access()
+#
+helo_restrictions hash:./smtpd_check_access
+# Expect: REJECT
+helo foo.dunno.com
+# Expect: OK
+helo bar.dunno.com
+# Expect: OK
+helo foo.duuno.com
+#
+# Test check_namadr_access(), domain part
+#
+client_restrictions hash:./smtpd_check_access
+# Expect: REJECT
+client foo.dunno.com 131.155.210.17
+# Expect: OK
+client bar.dunno.com 131.155.210.17
+# Expect: OK
+client bar.dunno.com 131.155.210.19
+#
+# Test check_namadr_access(), address part
+#
+# Expect: OK
+client bar.duno.com 131.155.210.17
+# Expect: REJECT
+client bar.duno.com 131.155.210.19
+# Expect: REJECT
+client bar.duno.com 44.33.22.11
+# Expect: OK
+client bar.duno.com 44.33.22.55
+# Expect: REJECT
+client bar.duno.com 44.33.44.33
+#
+# Test check_mail_access()
+#
+sender_restrictions hash:./smtpd_check_access
+# Expect: REJECT
+mail reject@dunno.domain
+# Expect: OK
+mail ok@dunno.domain
+# Expect: OK
+mail anyone@dunno.domain
+# Expect: OK
+mail bad-sender@dunno.domain
+#
+# Again, with a domain that rejects by default
+#
+# Expect: REJECT
+mail reject@reject.domain
+# Expect: OK
+mail ok@reject.domain
+# Expect: REJECT
+mail anyone@reject.domain
+# Expect: REJECT
+mail good-sender@reject.domain
+#
+# Again, with a domain that accepts by default
+#
+# Expect: REJECT
+mail reject@ok.domain
+# Expect: OK
+mail ok@ok.domain
+# Expect: OK
+mail anyone@ok.domain
+# Expect: OK
+mail bad-sender@ok.domain
+#
+# Test check_mail_access()
+#
+recipient_restrictions hash:./smtpd_check_access
+# Expect: REJECT
+rcpt reject@dunno.domain
+# Expect: OK
+rcpt ok@dunno.domain
+# Expect: OK
+rcpt anyone@dunno.domain
+# Expect: OK
+rcpt bad-sender@dunno.domain
+#
+# Again, with a domain that rejects by default
+#
+# Expect: REJECT
+rcpt reject@reject.domain
+# Expect: OK
+rcpt ok@reject.domain
+# Expect: REJECT
+rcpt anyone@reject.domain
+# Expect: REJECT
+rcpt good-sender@reject.domain
+#
+# Again, with a domain that accepts by default
+#
+# Expect: REJECT
+rcpt reject@ok.domain
+# Expect: OK
+rcpt ok@ok.domain
+# Expect: OK
+rcpt anyone@ok.domain
+# Expect: OK
+rcpt bad-sender@ok.domain
diff -r bd5eff2d2823 -r d635645d758f gnu/dist/postfix/src/smtpd/smtpd_acl.ref
--- /dev/null Thu Jan 01 00:00:00 1970 +0000
+++ b/gnu/dist/postfix/src/smtpd/smtpd_acl.ref Thu Aug 09 07:59:02 2001 +0000
@@ -0,0 +1,164 @@
+>>> #
+>>> # Initialize
+>>> #
+>>> smtpd_delay_reject 0
+OK
+>>> mynetworks 127.0.0.0/8,168.100.189.0/28
+OK
+>>> relay_domains porcupine.org
+OK
+>>> #
+>>> # Test check_domain_access()
+>>> #
+>>> helo_restrictions hash:./smtpd_check_access
+OK
+>>> # Expect: REJECT
+>>> helo foo.dunno.com
+./smtpd_check: reject: HELO from localhost[127.0.0.1]: 554 <foo.dunno.com>: Helo command rejected: Access denied
+554 <foo.dunno.com>: Helo command rejected: Access denied
+>>> # Expect: OK
+>>> helo bar.dunno.com
+OK
+>>> # Expect: OK
+>>> helo foo.duuno.com
+OK
+>>> #
+>>> # Test check_namadr_access(), domain part
+>>> #
+>>> client_restrictions hash:./smtpd_check_access
+OK
+>>> # Expect: REJECT
+>>> client foo.dunno.com 131.155.210.17
+./smtpd_check: reject: CONNECT from foo.dunno.com[131.155.210.17]: 554 <foo.dunno.com[131.155.210.17]>: Client host rejected: Access denied
+554 <foo.dunno.com[131.155.210.17]>: Client host rejected: Access denied
+>>> # Expect: OK
+>>> client bar.dunno.com 131.155.210.17
+OK
+>>> # Expect: OK
+>>> client bar.dunno.com 131.155.210.19
+OK
+>>> #
+>>> # Test check_namadr_access(), address part
Home |
Main Index |
Thread Index |
Old Index