summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2012-11-22Fix 64b build.Jeremy Harris
2012-11-19Dovecot: robustness; better msg on missing mech.Phil Pennock
If the dovecot protocol response doesn't include the MECH message for the SMTP AUTH protocol the client has requested, that's not a protocol failure, don't log it as such. Instead, explicitly log that it didn't advertise the mechanism we're looking for. This lets administrators fix either their Exim or their Dovecot configurations. Also: make the Dovecot handling more resistant to bad data from the auth server; handle too many fields with debug-log message to explain what's going on, permit lines of 8192 length per spec and detect if the line is too long, so that we can fail auth instead of becoming unsynchronised. Stop using the CUID from the server as the AUTH id counter. They're different, by my reading of the spec. TESTED: works against Dovecot 2.1.10. Thanks to Brady Catherman for reporting the problem with diagnosis.
2012-11-18More compiler quietening.Jeremy Harris
2012-11-18More compiler quietening.Jeremy Harris
2012-11-18More compiler quitening.Jeremy Harris
2012-11-17Fix initializer for struct tls_support, per edc33b5f1aca and 817d9f576cd.Jeremy Harris
2012-11-16Configure should stop on error.Phil Pennock
Set the POSIX -e option on the #! line invoking /bin/sh. If any of the sub-commands fail, the Configure as a whole should fail.
2012-11-09Auth info from transports must be tracked per-address.Jeremy Harris
2012-11-08Ensure that recipient is well-defined for expansion-called acl at RCPT-time.Jeremy Harris
2012-11-07Fix server_set_id for SPA/NTLM auth.Phil Pennock
Broken in 4.80 release, commit 08488c86. We need to leave $auth1 available after the authenticator returns, so that server_set_id can be evaluated by the caller. We need to do this whether we succeed or fail, because server_set_id only makes it into $authenticated_id if we return OK, but is logged regardless. Updated test config to set server_set_id; updated logs.
2012-11-06Add optional authenticated_sender info to A= elements of log lines; bug 1314.Jeremy Harris
New log_selector, smtp_mailauth, to enable.
2012-11-04Add A= to delivery log lines, and a client_set_id option to authenticators.Jeremy Harris
2012-10-29Track ACL context through ${acl expansions. Bug 1305.Jeremy Harris
Rather than pass "where" around all the string-expansion calls I've used a global; and unpleasant mismatch with the existing "where" tracking done for nested ACL calls.
2012-10-28Quieten complaining compilers.Jeremy Harris
2012-10-264.81 to 4.82Phil Pennock
Avoiding confusion of 4.80.1 vs 4.81, we went with skipping to 4.82 instead.
2012-10-26Merge 4.80.1 security fix in.Phil Pennock
Merge commit '4263f395efd136dece52d765dfcff3c96f17506e' Amendment to ChangeLog to handle changes.
2012-10-25Merge branch 'master' of git://git.exim.org/eximJeremy Harris
2012-10-25Save/restore $acl_arg1 ... across acl calls, making them local variables.Jeremy Harris
2012-10-24SECURITY: DKIM DNS buffer overflow protectionPhil Pennock
CVE-2012-5671 malloc/heap overflow, with a 60kB window of overwrite. Requires DNS under control of person sending email, leaves plenty of evidence, but is very likely exploitable on OSes that have not been well hardened.
2012-10-15Merge branch 'master' of ssh://git.exim.org/home/git/eximTodd Lyons
2012-10-15Adjust debug output to indicate a test, not resultTodd Lyons
2012-10-14Avoid reset of store pool in expand when a ${acl is used; it may have ↵Jeremy Harris
side-effects that must be persistent.
2012-10-06Move Wolfgang's ack to current sectionPhil Pennock
2012-10-06Logging-only patch for 8BITMIME; bug 817.Jeremy Harris
2012-10-05Add smarthost Router to default config, commented-out.Phil Pennock
This is a very common requirement for the portion of the user-base who need the most assistance.
2012-10-04Add expansion variable $headers_added returning newline-sep list of headersJeremy Harris
added in ACLs. Bug 199.
2012-10-04Strip leading/trailing newlines on list of headers for addition; bug 884.Jeremy Harris
NB: this means a bare "X-ACL-Warn:" header is harder to add.
2012-09-27Unbreak non-ipv6 build.Jeremy Harris
My commit 3a7963704c519 broke compilation without HAVE_IPv6. Rework.
2012-09-17Typo in debug output.Todd Lyons
2012-09-11Minor doc nits re bug 1262.Phil Pennock
Update src comment to be clearer about why it's safe for "state of this transport" to affect other deliveries. Mention change in externally observable state in README.UPDATING. Reference bugzilla entry in ChangeLog. Update Paul's credit in ACKNOWLEDGMENTS.
2012-09-11Avoid using a waiting db for single-message-only transports. PerformanceJeremy Harris
bug 1262 and patch from Paul Fisher. Testcase 0288 exercises.
2012-09-05Add dnsdb lookup pseudo-type "a+". Addresses bug 1269.Jeremy Harris
2012-07-27Bug #198: Add remove_header ACL modifier.Todd Lyons
Used patch from Magnus Holmgren dated 2007-02-20. Added documentation. Added tests to detect proper operation.
2012-07-16Doc fixes from Regid Ichira & Andreas MetzlerPhil Pennock
2012-07-12Doc note re 9999 days & 32bit time (SSL certs)Phil Pennock
Thanks to Jay Rouman for highlighting that there can be rollover. I have chosen *not* to reduce the duration, but to leave it and instead provoke thought on the part of those deploying systems, if this bites them.
2012-07-08Merge branch 'master' of git://git.exim.org/eximJeremy Harris
2012-07-08Multiple headers_add/remove options per router/transport - fixes bug 337Jeremy Harris
2012-07-06Make +smtp_confirmation be a default logging option.Todd Lyons
2012-07-05Fix bug 1267 - inlist/i were ignoring negation.Jeremy Harris
Fix the acl condition also; and make editor brace-matching a little better.
2012-07-05Delay expansion of smtp transport option "authenticated_sender"Jeremy Harris
after connection startup, to match documentation - bug 1144.
2012-07-01Merge branch 'acl'Jeremy Harris
2012-06-27git/ACKNOWLEDGMENTS: coerce charset of git toolsPhil Pennock
github seems to assume content is 8bit.
2012-06-27Acl expansions: tests and documentationJeremy Harris
2012-06-25Let Linux makefile inherit CFLAGS/CFLAGS_DYNAMIC.Phil Pennock
Pulled from Debian 30_dontoverridecflags.dpatch by Andreas Metzler. We just add CFLAGS_DYNAMIC too and some comments. Non-POSIX syntax, but fairly portable; GNU make gained it in 1998, we believe even very old systems should handle it fine.
2012-06-24Change acl expansion-condition syntax to "acl {{name} {arg1}{arg2}...}"Jeremy Harris
to match saslauthd condition.
2012-06-24Merge branch 'acl-args' into aclJeremy Harris
2012-06-24Add gnutls_enable_pkcs11 option.Phil Pennock
GnuTLS 2.12.0 adds PKCS11 support using p11-kit and by default will autoload modules, which interoperates badly with GNOME keyring integration, configured via paths in environment variables, and Exim invoked by the user (eg, mailq) will then try to load the modules, fail and spew warnings from the module for a library loaded by a library. http://www.gnu.org/software/gnutls/manual/gnutls.html#Smart-cards-and-HSMs documents that to prevent this, explicitly init PKCS11 before calling gnutls_global_init(). So we do so, unless the admin sets the new option. Reported by Andreas Metzler, who confirmed that the added calls fixed the problem for him.
2012-06-14Add acl call as an expansion conditionJeremy Harris
2012-06-14Add args to trad. modifier acl call methodJeremy Harris
2012-06-12Use custom variables for ACL args, up to nine. Add an arg-count variable.Jeremy Harris
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-27 09:53:27 +0000