2 * driver.c -- generic driver for mail fetch method protocols
4 * Copyright 1996 by Eric S. Raymond
6 * For license terms, see the file COPYING in this directory.
15 #if defined(STDC_HEADERS)
18 #if defined(HAVE_UNISTD_H)
21 #if defined(HAVE_STDARG_H)
26 #if defined(HAVE_ALLOCA_H)
29 #if defined(HAVE_SYS_ITIMER_H)
30 #include <sys/itimer.h>
35 #ifdef HAVE_GETHOSTBYNAME
38 #endif /* HAVE_GETHOSTBYNAME */
47 #include <netinet/in.h>
49 #endif /* KERBEROS_V4 */
51 #include "fetchmail.h"
55 /* BSD portability hack...I know, this is an ugly place to put it */
56 #if !defined(SIGCHLD) && defined(SIGCLD)
57 #define SIGCHLD SIGCLD
60 #define SMTP_PORT 25 /* standard SMTP service port */
62 extern char *strstr(); /* needed on sysV68 R3V7.1. */
64 int fetchlimit; /* how often to tear down the server connection */
65 int batchcount; /* count of messages sent in current batch */
66 int peek_capable; /* can we peek for better error recovery? */
68 static const struct method *protocol;
69 static jmp_buf restart;
73 #define GENSYM (sprintf(tag, "a%04d", ++tagnum), tag)
75 static char *shroud; /* string to shroud in debug output, if non-NULL */
76 static int mytimeout; /* value of nonreponse timeout */
78 static void set_timeout(int timeleft)
79 /* reset the nonresponse-timeout */
81 struct itimerval ntimeout;
83 ntimeout.it_interval.tv_sec = ntimeout.it_interval.tv_usec = 0;
84 ntimeout.it_value.tv_sec = timeleft;
85 ntimeout.it_value.tv_usec = 0;
86 setitimer(ITIMER_REAL, &ntimeout, (struct itimerval *)NULL);
89 static void timeout_handler (int signal)
90 /* handle server-timeout SIGALRM signal */
97 #define XMIT_ANTISPAM 3
98 static int accept_count, reject_count;
100 #ifdef HAVE_RES_SEARCH
103 static int is_host_alias(const char *name, struct query *ctl)
104 /* determine whether name is a DNS alias of the hostname */
107 struct mxentry *mxp, *mxrecords;
110 * The first two checks are optimizations that will catch a good
111 * many cases. (1) check against the hostname the user
112 * specified. Odds are good this will either be the mailserver's
113 * FQDN or a suffix of it with the mailserver's domain's default
114 * host name omitted. Then check the rest of the `also known as'
115 * cache accumulated by previous DNS checks. This cache is primed
116 * by the aka list option.
118 * (2) check against the mailserver's FQDN, in case
119 * it's not the same as the declared hostname.
121 * Either of these on a mail address is definitive. Only if the
122 * name doesn't match either is it time to call the bind library.
123 * If this happens odds are good we're looking at an MX name.
125 if (str_in_list(&ctl->server.lead_server->names, name))
127 else if (strcmp(name, ctl->server.canonical_name) == 0)
129 else if (!ctl->server.dns)
133 * We know DNS service was up at the beginning of this poll cycle.
134 * If it's down, our nameserver has crashed. We don't want to try
135 * delivering the current message or anything else from this
136 * mailbox until it's back up.
138 else if ((he = gethostbyname(name)) != (struct hostent *)NULL)
140 if (strcmp(ctl->server.canonical_name, he->h_name) == 0)
148 case HOST_NOT_FOUND: /* specified host is unknown */
149 case NO_ADDRESS: /* valid, but does not have an IP address */
152 case NO_RECOVERY: /* non-recoverable name server error */
153 case TRY_AGAIN: /* temporary error on authoritative server */
155 if (outlevel != O_SILENT)
156 putchar('\n'); /* terminate the progress message */
158 "nameserver failure while looking for `%s' during poll of %s.",
159 name, ctl->server.names->id);
165 * We're only here if DNS was OK but the gethostbyname() failed
166 * with a HOST_NOT_FOUND or NO_ADDRESS error.
167 * Search for a name match on MX records pointing to the server.
170 if ((mxrecords = getmxrecords(name)) == (struct mxentry *)NULL)
174 case HOST_NOT_FOUND: /* specified host is unknown */
175 case NO_ADDRESS: /* valid, but does not have an IP address */
179 case NO_RECOVERY: /* non-recoverable name server error */
180 case TRY_AGAIN: /* temporary error on authoritative server */
183 "nameserver failure while looking for `%s' during poll of %s.",
184 name, ctl->server.names->id);
191 for (mxp = mxrecords; mxp->name; mxp++)
192 if (strcmp(ctl->server.canonical_name, mxp->name) == 0)
198 /* add this name to relevant server's `also known as' list */
199 save_str(&ctl->server.lead_server->names, -1, name);
203 static void map_name(name, ctl, xmit_names)
204 /* add given name to xmit_names if it matches declared localnames */
205 const char *name; /* name to map */
206 struct query *ctl; /* list of permissible aliases */
207 struct idlist **xmit_names; /* list of recipient names parsed out */
211 lname = idpair_find(&ctl->localnames, name);
212 if (!lname && ctl->wildcard)
215 if (lname != (char *)NULL)
217 if (outlevel == O_VERBOSE)
218 error(0, 0, "mapped %s to local %s", name, lname);
219 save_str(xmit_names, XMIT_ACCEPT, lname);
224 void find_server_names(hdr, ctl, xmit_names)
225 /* parse names out of a RFC822 header into an ID list */
226 const char *hdr; /* RFC822 header in question */
227 struct query *ctl; /* list of permissible aliases */
228 struct idlist **xmit_names; /* list of recipient names parsed out */
230 if (hdr == (char *)NULL)
236 if ((cp = nxtaddr(hdr)) != (char *)NULL)
240 if ((atsign = strchr(cp, '@')))
245 * Does a trailing segment of the hostname match something
246 * on the localdomains list? If so, save the whole name
249 for (idp = ctl->server.localdomains; idp; idp = idp->next)
253 rhs = atsign + (strlen(atsign) - strlen(idp->id));
254 if ((rhs[-1] == '.' || rhs[-1] == '@')
255 && strcasecmp(rhs, idp->id) == 0)
257 if (outlevel == O_VERBOSE)
258 error(0, 0, "passed through %s matching %s",
260 save_str(xmit_names, XMIT_ACCEPT, cp);
267 * Check to see if the right-hand part is an alias
268 * or MX equivalent of the mailserver. If it's
269 * not, skip this name. If it is, we'll keep
270 * going and try to find a mapping to a client name.
272 if (!is_host_alias(atsign+1, ctl))
274 save_str(xmit_names, XMIT_REJECT, cp);
281 map_name(cp, ctl, xmit_names);
283 ((cp = nxtaddr((char *)NULL)) != (char *)NULL);
287 char *parse_received(struct query *ctl, char *bufp)
288 /* try to extract real addressee from the Received line */
291 static char rbuf[HOSTLEN + USERNAMELEN + 4];
294 * Try to extract the real envelope addressee. We look here
295 * specifically for the mailserver's Received line.
296 * Note: this will only work for sendmail, or an MTA that
297 * shares sendmail's convention for embedding the envelope
298 * address in the Received line. Sendmail itself only
299 * does this when the mail has a single recipient.
301 if ((ok = strstr(bufp, "by ")) == (char *)NULL)
307 /* extract space-delimited token after "by " */
308 for (sp = ok + 3; isspace(*sp); sp++)
311 for (; !isspace(*sp); sp++)
316 * If it's a DNS name of the mail server, look for the
317 * recipient name after a following "for". Otherwise
320 if (is_host_alias(rbuf, ctl))
321 ok = strstr(sp, "for ");
334 while (*sp && *sp != '>' && *sp != '@' && *sp != ';')
339 /* uh oh -- whitespace here can't be right! */
350 if (outlevel == O_VERBOSE)
351 error(0, 0, "found Received address `%s'", rbuf);
355 #endif /* HAVE_RES_SEARCH */
357 int smtp_open(struct query *ctl)
358 /* try to open a socket to the appropriate SMTP server for this query */
362 /* maybe it's time to close the socket in order to force delivery */
363 if (ctl->batchlimit && (ctl->smtp_socket != -1) && batchcount++ == ctl->batchlimit)
365 close(ctl->smtp_socket);
366 ctl->smtp_socket = -1;
370 /* run down the SMTP hunt list looking for a server that's up */
371 for (idp = ctl->smtphunt; idp; idp = idp->next)
374 * RFC 1123 requires that the domain name in HELO address is a
375 * "valid principal domain name" for the client host. We
376 * violate this with malice aforethought in order to make the
377 * Received headers and logging look right.
379 * In fact this code relies on the RFC1123 requirement that the
380 * SMTP listener must accept messages even if verification of the
381 * HELO name fails (RFC1123 section 5.2.5, paragraph 2).
384 /* if no socket to this host is already set up, try to open ESMTP */
385 if (ctl->smtp_socket == -1)
387 if ((ctl->smtp_socket = SockOpen(idp->id,SMTP_PORT)) == -1)
389 else if (SMTP_ok(ctl->smtp_socket) != SM_OK
390 || SMTP_ehlo(ctl->smtp_socket,
391 ctl->server.names->id,
392 &ctl->server.esmtp_options) != SM_OK)
395 * RFC 1869 warns that some listeners hang up on a failed EHLO,
396 * so it's safest not to assume the socket will still be good.
398 close(ctl->smtp_socket);
399 ctl->smtp_socket = -1;
403 ctl->smtphost = idp->id;
408 /* if opening for ESMTP failed, try SMTP */
409 if (ctl->smtp_socket == -1)
411 if ((ctl->smtp_socket = SockOpen(idp->id,SMTP_PORT)) == -1)
413 else if (SMTP_ok(ctl->smtp_socket) != SM_OK
414 || SMTP_helo(ctl->smtp_socket, ctl->server.names->id) != SM_OK)
416 close(ctl->smtp_socket);
417 ctl->smtp_socket = -1;
421 ctl->smtphost = idp->id;
427 return(ctl->smtp_socket);
430 /* these are shared by readheaders and readbody */
432 static RETSIGTYPE (*sigchld)();
433 static int sizeticker;
435 static int readheaders(sock, len, ctl, realname)
436 /* read message headers and ship to SMTP or MDA */
437 int sock; /* to which the server is connected */
438 long len; /* length of message */
439 struct query *ctl; /* query control record */
440 char *realname; /* real name of host */
442 char buf[MSGBUFSIZE+1], return_path[MSGBUFSIZE+1];
443 int from_offs, to_offs, cc_offs, bcc_offs, ctt_offs, env_offs;
444 char *headers, *received_for;
445 int n, linelen, oldlen, ch, remaining;
447 struct idlist *idp, *xmit_names;
448 int good_addresses, bad_addresses, has_nuls;
449 #ifdef HAVE_RES_SEARCH
450 int no_local_matches = FALSE;
451 #endif /* HAVE_RES_SEARCH */
456 return_path[0] = '\0';
458 olderrs = ctl->errcount;
460 /* read message headers */
461 headers = received_for = NULL;
462 from_offs = to_offs = cc_offs = bcc_offs = ctt_offs = env_offs = -1;
468 line = xmalloc(sizeof(buf));
472 if ((n = SockRead(sock, buf, sizeof(buf)-1)) == -1)
476 /* lines may not be properly CRLF terminated; fix this for qmail */
479 cp = buf + strlen(buf) - 1;
480 if (*cp == '\n' && (cp == buf || cp[-1] != '\r'))
488 set_timeout(ctl->server.timeout);
489 /* leave extra room for reply_hack to play with */
490 line = (char *) realloc(line, strlen(line) + strlen(buf) + HOSTLEN + 1);
492 if (line[0] == '\r' && line[1] == '\n')
495 /* we may need to grab RFC822 continuations */
496 ((ch = SockPeek(sock)) == ' ' || ch == '\t');
498 /* write the message size dots */
499 if ((outlevel > O_SILENT && outlevel < O_VERBOSE) && linelen > 0)
501 sizeticker += linelen;
502 while (sizeticker >= SIZETICKER)
505 sizeticker -= SIZETICKER;
509 if (linelen != strlen(line))
512 remaining -= linelen;
514 /* check for end of headers; don't save terminating line */
515 if (line[0] == '\r' && line[1] == '\n')
522 * This code prevents fetchmail from becoming an accessory after
523 * the fact to upstream sendmails with the `E' option on. This
524 * can result in an escaped Unix From_ line at the beginning of
525 * the headers. If fetchmail just passes it through, the client
526 * listener may think the message has *no* headers (since the first)
527 * line it sees doesn't look RFC822-conformant) and fake up a set.
529 * What the user would see in this case is bogus (synthesized)
530 * headers, followed by a blank line, followed by the >From,
531 * followed by the real headers, followed by a blank line,
534 * We forestall this lossage by tossing anything that looks
535 * like an escaped From_ line in headers. These aren't RFC822
536 * so our conscience is clear...
538 if (!strncasecmp(line, ">From ", 6))
545 * OK, this is messy. If we're forwarding by SMTP, it's the
546 * SMTP-receiver's job (according to RFC821, page 22, section
547 * 4.1.1) to generate a Return-Path line on final delivery.
548 * The trouble is, we've already got one because the
549 * mailserver's SMTP thought *it* was responsible for final
552 * Stash away the contents of Return-Path for use in generating
553 * MAIL FROM later on, then prevent the header from being saved
554 * with the others. In effect, we strip it off here.
556 * If the SMTP server conforms to the standards, and fetchmail gets the
557 * envelope sender from the Return-Path, the new Return-Path should be
558 * exactly the same as the original one.
560 if (!ctl->mda && !strncasecmp("Return-Path:", line, 12))
562 strcpy(return_path, nxtaddr(line));
568 reply_hack(line, realname);
572 oldlen = strlen(line);
573 headers = xmalloc(oldlen + 1);
574 (void) strcpy(headers, line);
582 newlen = oldlen + strlen(line);
583 headers = (char *) realloc(headers, newlen + 1);
586 strcpy(headers + oldlen, line);
588 line = headers + oldlen;
592 if (from_offs == -1 && !strncasecmp("From:", line, 5))
593 from_offs = (line - headers);
594 else if (from_offs == -1 && !strncasecmp("Resent-From:", line, 12))
595 from_offs = (line - headers);
596 else if (from_offs == -1 && !strncasecmp("Apparently-From:", line, 16))
597 from_offs = (line - headers);
599 else if (!strncasecmp("To:", line, 3))
600 to_offs = (line - headers);
602 else if (ctl->server.envelope != STRING_DISABLED && env_offs == -1
603 && !strncasecmp(ctl->server.envelope,
605 strlen(ctl->server.envelope)))
606 env_offs = (line - headers);
608 else if (!strncasecmp("Cc:", line, 3))
609 cc_offs = (line - headers);
611 else if (!strncasecmp("Bcc:", line, 4))
612 bcc_offs = (line - headers);
614 else if (!strncasecmp("Content-Transfer-Encoding:", line, 26))
615 ctt_offs = (line - headers);
617 #ifdef HAVE_RES_SEARCH
618 else if (ctl->server.envelope != STRING_DISABLED && MULTIDROP(ctl) && !received_for && !strncasecmp("Received:", line, 9))
619 received_for = parse_received(ctl, line);
620 #endif /* HAVE_RES_SEARCH */
624 * Hack time. If the first line of the message was blank, with no headers
625 * (this happens occasionally due to bad gatewaying software) cons up
626 * a set of fake headers.
628 * If you modify the fake header template below, be sure you don't
629 * make either From or To address @-less, otherwise the reply_hack
630 * logic will do bad things.
632 if (headers == (char *)NULL)
635 "From: <FETCHMAIL-DAEMON@%s>\r\nTo: %s@localhost\r\nSubject: Headerless mail from %s's mailbox on %s\r\n",
636 fetchmailhost, user, ctl->remotename, realname);
637 headers = xstrdup(buf);
641 * We can now process message headers before reading the text.
642 * In fact we have to, as this will tell us where to forward to.
645 /* cons up a list of local recipients */
646 xmit_names = (struct idlist *)NULL;
647 bad_addresses = good_addresses = accept_count = reject_count = 0;
648 #ifdef HAVE_RES_SEARCH
649 /* is this a multidrop box? */
652 if (env_offs > -1) /* We have the actual envelope addressee */
653 find_server_names(headers + env_offs, ctl, &xmit_names);
654 else if (received_for)
656 * We have the Received for addressee.
657 * It has to be a mailserver address, or we
658 * wouldn't have got here.
660 map_name(received_for, ctl, &xmit_names);
664 * We haven't extracted the envelope address.
665 * So check all the header addresses.
668 find_server_names(headers + to_offs, ctl, &xmit_names);
670 find_server_names(headers + cc_offs, ctl, &xmit_names);
672 find_server_names(headers + bcc_offs, ctl, &xmit_names);
676 no_local_matches = TRUE;
677 save_str(&xmit_names, XMIT_ACCEPT, user);
678 if (outlevel == O_VERBOSE)
680 "no local matches, forwarding to %s",
684 else /* it's a single-drop box, use first localname */
685 #endif /* HAVE_RES_SEARCH */
686 save_str(&xmit_names, XMIT_ACCEPT, ctl->localnames->id);
690 * Time to either address the message or decide we can't deliver it yet.
692 if (ctl->errcount > olderrs) /* there were DNS errors above */
694 if (outlevel == O_VERBOSE)
695 error(0,0, "forwarding and deletion suppressed due to DNS errors");
697 return(PS_TRANSIENT);
699 else if (ctl->mda) /* we have a declared MDA */
705 * We go through this in order to be able to handle very
706 * long lists of users and (re)implement %s.
708 for (idp = xmit_names; idp; idp = idp->next)
709 if (idp->val.num == XMIT_ACCEPT)
710 length += (strlen(idp->id) + 1);
711 names = (char *)alloca(length);
713 for (idp = xmit_names; idp; idp = idp->next)
714 if (idp->val.num == XMIT_ACCEPT)
716 strcat(names, idp->id);
719 cmd = (char *)alloca(strlen(ctl->mda) + length);
720 sprintf(cmd, ctl->mda, names);
721 if (outlevel == O_VERBOSE)
722 error(0, 0, "about to deliver with: %s", cmd);
726 * Arrange to run with user's permissions if we're root.
727 * This will initialize the ownership of any files the
728 * MDA creates properly. (The seteuid call is available
729 * under all BSDs and Linux)
732 #endif /* HAVE_SETEUID */
734 sinkfp = popen(cmd, "w");
737 /* this will fail quietly if we didn't start as root */
739 #endif /* HAVE_SETEUID */
743 error(0, -1, "MDA open failed");
747 sigchld = signal(SIGCHLD, SIG_DFL);
751 char *ap, *ctt, options[MSGBUFSIZE];
753 /* build a connection to the SMTP listener */
754 if ((smtp_open(ctl) == -1))
756 free_str_list(&xmit_names);
757 error(0, -1, "SMTP connect to %s failed",
758 ctl->smtphost ? ctl->smtphost : "localhost");
763 * Compute ESMTP options. It's a kluge to use nxtaddr()
764 * here because the contents of the Content-Transfer-Encoding
765 * headers isn't semantically an address. But it has the
766 * desired tokenizing effect.
769 if ((ctl->server.esmtp_options & ESMTP_8BITMIME)
771 && (ctt = nxtaddr(headers + ctt_offs)))
772 if (!strcasecmp(ctt,"7BIT"))
773 sprintf(options, " BODY=7BIT");
774 else if (!strcasecmp(ctt,"8BIT"))
775 sprintf(options, " BODY=8BITMIME");
776 if ((ctl->server.esmtp_options & ESMTP_SIZE))
777 sprintf(options + strlen(options), " SIZE=%ld", len);
780 * If there is a Return-Path address on the message, this was
781 * almost certainly the MAIL FROM address given the originating
782 * sendmail. This is the best thing to use for logging the
783 * message origin (it sets up the right behavior for bounces and
784 * mailing lists). Otherwise, take the From address.
786 * Try to get the SMTP listener to take the Return-Path or
787 * From address as MAIL FROM . If it won't, fall back on the
788 * calling-user ID. This won't affect replies, which use the
789 * header From address anyway.
791 * RFC 1123 requires that the domain name part of the
792 * MAIL FROM address be "canonicalized", that is a
793 * FQDN or MX but not a CNAME. We'll assume the From
794 * header is already in this form here (it certainly
795 * is if rewrite is on). RFC 1123 is silent on whether
796 * a nonexistent hostname part is considered canonical.
798 * This is a potential problem if the MTAs further upstream
799 * didn't pass canonicalized From/Return-Path lines, *and* the
800 * local SMTP listener insists on them.
805 else if (from_offs == -1 || !(ap = nxtaddr(headers + from_offs)))
807 if (SMTP_from(ctl->smtp_socket, ap, options) != SM_OK)
809 int smtperr = atoi(smtp_response);
811 if (smtperr >= 400 && smtperr != 571)
812 error(0, -1, "SMTP error: %s", smtp_response);
815 * There's one problem with this flow of control;
816 * there's no way to avoid reading the whole message
817 * off the server, even if the MAIL FROM response
818 * tells us that it's just to be discarded. We could
819 * fix this under IMAP by reading headers first, then
820 * trying to issue the MAIL FROM, and *then* reading
821 * the body...but POP3 can't do this.
826 case 571: /* unsolicited email refused */
828 * SMTP listener explicitly refuses to deliver
829 * mail coming from this address, probably due
830 * to an anti-spam domain exclusion. Respect
831 * this. Don't try to ship the message, and
832 * don't prevent it from being deleted.
837 case 452: /* insufficient system storage */
839 * Temporary out-of-queue-space condition on the
840 * ESMTP server. Don't try to ship the message,
841 * and suppress deletion so it can be retried on
842 * a future retrieval cycle.
844 SMTP_rset(ctl->smtp_socket); /* required by RFC1870 */
846 return(PS_TRANSIENT);
848 case 552: /* message exceeds fixed maximum message size */
850 * Permanent no-go condition on the
851 * ESMTP server. Don't try to ship the message,
852 * and allow it to be deleted.
854 SMTP_rset(ctl->smtp_socket); /* required by RFC1870 */
858 default: /* retry with invoking user's address */
859 if (SMTP_from(ctl->smtp_socket, user, options) != SM_OK)
861 error(0, -1, "SMTP error: %s", smtp_response);
863 return(PS_SMTP); /* should never happen */
869 * Now list the recipient addressees
871 * RFC 1123 requires that the domain name part of the
872 * RCPT TO address be "canonicalized", that is a FQDN
873 * or MX but not a CNAME. RFC1123 doesn't say whether
874 * the FQDN part can be null (as it frequently will be
875 * here), but it's hard to see how this could cause a
878 for (idp = xmit_names; idp; idp = idp->next)
879 if (idp->val.num == XMIT_ACCEPT)
880 if (SMTP_rcpt(ctl->smtp_socket, idp->id) == SM_OK)
885 idp->val.num = XMIT_ANTISPAM;
887 "SMTP listener doesn't like recipient address `%s'", idp->id);
889 if (!good_addresses && SMTP_rcpt(ctl->smtp_socket, user) != SM_OK)
892 "can't even send to calling user!");
897 /* tell it we're ready to send data */
898 SMTP_data(ctl->smtp_socket);
901 /* we may need to strip carriage returns */
906 for (sp = tp = headers; *sp; sp++)
913 /* write all the headers */
915 if (ctl->mda && sinkfp)
916 n = fwrite(headers, 1, strlen(headers), sinkfp);
917 else if (ctl->smtp_socket != -1)
918 n = SockWrite(ctl->smtp_socket, headers, strlen(headers));
923 error(0, errno, "writing RFC822 headers");
927 signal(SIGCHLD, sigchld);
931 else if (outlevel == O_VERBOSE)
934 /* write error notifications */
935 #ifdef HAVE_RES_SEARCH
936 if (no_local_matches || has_nuls || bad_addresses)
938 if (has_nuls || bad_addresses)
939 #endif /* HAVE_RES_SEARCH */
942 char errhd[USERNAMELEN + POPBUFSIZE], *errmsg;
945 (void) strcpy(errhd, "X-Fetchmail-Warning: ");
946 #ifdef HAVE_RES_SEARCH
947 if (no_local_matches)
949 if (reject_count != 1)
950 strcat(errhd, "no recipient addresses matched declared local names");
953 for (idp = xmit_names; idp; idp = idp->next)
954 if (idp->val.num == XMIT_REJECT)
956 sprintf(errhd+strlen(errhd), "recipient address %s didn't match any local name", idp->id);
959 #endif /* HAVE_RES_SEARCH */
963 if (errhd[sizeof("X-Fetchmail-Warning: ")])
965 strcat(errhd, "message has embedded NULs");
970 if (errhd[sizeof("X-Fetchmail-Warning: ")])
972 strcat(errhd, "SMTP listener rejected local recipient addresses: ");
973 errlen = strlen(errhd);
974 for (idp = xmit_names; idp; idp = idp->next)
975 if (idp->val.num == XMIT_ANTISPAM)
976 errlen += strlen(idp->id) + 2;
978 errmsg = alloca(errlen+3);
979 (void) strcpy(errmsg, errhd);
980 for (idp = xmit_names; idp; idp = idp->next)
981 if (idp->val.num == XMIT_ANTISPAM)
983 strcat(errmsg, idp->id);
985 strcat(errmsg, ", ");
990 if (ctl->mda && !ctl->forcecr)
991 strcat(errmsg, "\n");
993 strcat(errmsg, "\r\n");
995 /* we may need to strip carriage returns */
1000 for (sp = tp = errmsg; *sp; sp++)
1006 /* ship out the error line */
1010 fwrite(errmsg, sizeof(char), strlen(errmsg), sinkfp);
1012 SockWrite(ctl->smtp_socket, errmsg, strlen(errmsg));
1016 free_str_list(&xmit_names);
1018 /* issue the delimiter line */
1019 if (sinkfp && ctl->mda)
1020 fputc('\n', sinkfp);
1021 else if (ctl->smtp_socket != -1)
1024 SockWrite(ctl->smtp_socket, "\n", 1);
1026 SockWrite(ctl->smtp_socket, "\r\n", 2);
1032 static int readbody(sock, ctl, forward, len, delimited)
1033 /* read and dispose of a message body presented on sock */
1034 struct query *ctl; /* query control record */
1035 int sock; /* to which the server is connected */
1036 int len; /* length of message */
1037 int forward; /* TRUE to forward */
1038 int delimited; /* does the protocol use a message delimiter? */
1041 char buf[MSGBUFSIZE+1], *cp;
1043 /* pass through the text lines */
1044 while (delimited || len > 0)
1046 if ((linelen = SockRead(sock, buf, sizeof(buf)-1)) == -1)
1048 set_timeout(ctl->server.timeout);
1050 /* write the message size dots */
1053 sizeticker += linelen;
1054 while (sizeticker >= SIZETICKER)
1056 if (outlevel > O_SILENT)
1058 sizeticker -= SIZETICKER;
1063 /* fix messages that have only \n line-termination (for qmail) */
1066 cp = buf + strlen(buf) - 1;
1067 if (*cp == '\n' && (cp == buf || cp[-1] != '\r'))
1075 /* check for end of message */
1076 if (delimited && *buf == '.')
1077 if (buf[1] == '\r' && buf[2] == '\n')
1080 /* ship out the text line */
1085 /* SMTP byte-stuffing */
1087 if (sinkfp && ctl->mda)
1089 else if (ctl->smtp_socket != -1)
1090 SockWrite(ctl->smtp_socket, buf, 1);
1092 /* we may need to strip carriage returns */
1097 for (sp = tp = buf; *sp; sp++)
1105 n = fwrite(buf, 1, strlen(buf), sinkfp);
1106 else if (ctl->smtp_socket != -1)
1107 n = SockWrite(ctl->smtp_socket, buf, strlen(buf));
1111 error(0, errno, "writing message text");
1115 signal(SIGCHLD, sigchld);
1119 else if (outlevel == O_VERBOSE)
1125 * End-of-message processing starts here
1128 if (outlevel == O_VERBOSE)
1129 fputc('\n', stderr);
1135 /* close the delivery pipe, we'll reopen before next message */
1136 rc = pclose(sinkfp);
1137 signal(SIGCHLD, sigchld);
1140 error(0, -1, "MDA exited abnormally or returned nonzero status");
1146 /* write message terminator */
1147 if (SMTP_eom(ctl->smtp_socket) != SM_OK)
1149 error(0, -1, "SMTP listener refused delivery");
1151 return(PS_TRANSIENT);
1160 kerberos_auth (socket, canonical)
1161 /* authenticate to the server host using Kerberos V4 */
1162 int socket; /* socket to server host */
1163 const char *canonical; /* server name */
1165 char * host_primary;
1169 Key_schedule schedule;
1172 ticket = ((KTEXT) (malloc (sizeof (KTEXT_ST))));
1173 rem = (krb_sendauth (0L, socket, ticket, "pop",
1175 ((char *) (krb_realmofhost (canonical))),
1176 ((unsigned long) 0),
1180 ((struct sockaddr_in *) 0),
1181 ((struct sockaddr_in *) 0),
1184 if (rem != KSUCCESS)
1186 error(0, -1, "kerberos error %s", (krb_get_err_text (rem)));
1191 #endif /* KERBEROS_V4 */
1193 int do_protocol(ctl, proto)
1194 /* retrieve messages from server using given protocol method table */
1195 struct query *ctl; /* parsed options with merged-in defaults */
1196 const struct method *proto; /* protocol method table */
1199 char *msg, *sp, *cp, realname[HOSTLEN];
1203 if (ctl->server.authenticate == A_KERBEROS_V4)
1205 error(0, -1, "Kerberos V4 support not linked.");
1208 #endif /* KERBEROS_V4 */
1210 /* lacking methods, there are some options that may fail */
1213 /* check for unsupported options */
1216 "Option --flush is not supported with %s",
1220 else if (ctl->fetchall) {
1222 "Option --all is not supported with %s",
1227 if (!proto->getsizes && ctl->limit)
1230 "Option --limit is not supported with %s",
1237 tag[0] = '\0'; /* nuke any tag hanging out from previous query */
1239 error_init(poll_interval == 0 && !logfile);
1241 /* set up the server-nonresponse timeout */
1242 sigsave = signal(SIGALRM, timeout_handler);
1243 set_timeout(mytimeout = ctl->server.timeout);
1245 if ((js = setjmp(restart)) == 1)
1248 "timeout after %d seconds waiting for %s.",
1249 ctl->server.timeout, ctl->server.names->id);
1254 char buf [POPBUFSIZE+1];
1255 int *msgsizes, len, num, count, new, deletions = 0;
1256 int sock, port, fetches;
1259 /* execute pre-initialization command, if any */
1260 if (ctl->preconnect && (ok = system(ctl->preconnect)))
1262 sprintf(buf, "pre-connection command failed with status %d", ok);
1268 /* open a socket to the mail server */
1269 port = ctl->server.port ? ctl->server.port : protocol->port;
1270 if ((sock = SockOpen(ctl->server.names->id, port)) == -1)
1272 #ifndef EHOSTUNREACH
1273 #define EHOSTUNREACH (-1)
1275 if (outlevel == O_VERBOSE || errno != EHOSTUNREACH)
1276 error(0, errno, "connecting to host");
1282 if (ctl->server.authenticate == A_KERBEROS_V4)
1284 ok = kerberos_auth(sock, ctl->server.canonical_name);
1287 set_timeout(ctl->server.timeout);
1289 #endif /* KERBEROS_V4 */
1291 /* accept greeting message from mail server */
1292 ok = (protocol->parse_response)(sock, buf);
1295 set_timeout(ctl->server.timeout);
1298 * Try to parse the host's actual name out of the greeting
1299 * message. We do this so that the progress messages will
1300 * make sense even if the connection is indirected through
1301 * ssh. *Do* use this for hacking reply headers, but *don't*
1302 * use it for error logging, as the names in the log should
1303 * correlate directly back to rc file entries.
1305 * This assumes that the first space-delimited token found
1306 * that contains at least two dots (with the characters on
1307 * each side of the dot alphanumeric to exclude version
1308 * numbers) is the hostname. The hostname candidate may not
1309 * contain @ -- if it does it's probably a mailserver
1310 * maintainer's name. If no such token is found, fall back on
1311 * the .fetchmailrc id.
1314 for (cp = buf; *cp; cp++)
1318 case 0: /* skip to end of current token */
1323 case 1: /* look for blank-delimited token */
1331 case 2: /* look for first dot */
1334 else if (*cp == ' ')
1336 else if (*cp == '.' && isalpha(cp[1]) && isalpha(cp[-1]))
1340 case 3: /* look for second dot */
1343 else if (*cp == ' ')
1345 else if (*cp == '.' && isalpha(cp[1]) && isalpha(cp[-1]))
1349 case 4: /* look for trailing space */
1352 else if (*cp == ' ')
1363 char *tp = realname;
1370 strcpy(realname, ctl->server.names->id);
1372 /* try to get authorized to fetch mail */
1373 if (protocol->getauth)
1375 shroud = ctl->password;
1376 ok = (protocol->getauth)(sock, ctl, buf);
1377 shroud = (char *)NULL;
1382 error(0, -1, "Authorization failure on %s@%s",
1387 set_timeout(ctl->server.timeout);
1390 ctl->errcount = fetches = 0;
1392 /* now iterate over each folder selected */
1393 for (idp = ctl->mailboxes; idp; idp = idp->next)
1395 if (outlevel >= O_VERBOSE)
1397 error(0, 0, "selecting folder %s");
1399 error(0, 0, "selecting default folder");
1401 /* compute number of messages and number of new messages waiting */
1402 ok = (protocol->getrange)(sock, ctl, idp->id, &count, &new);
1405 set_timeout(ctl->server.timeout);
1407 /* show user how many messages we downloaded */
1409 (void) sprintf(buf, "%s@%s:%s",
1410 ctl->remotename, realname, idp->id);
1412 (void) sprintf(buf, "%s@%s", ctl->remotename, realname);
1413 if (outlevel > O_SILENT)
1414 if (count == -1) /* only used for ETRN */
1415 error(0, 0, "Polling %s", buf);
1416 else if (count == 0)
1417 error(0, 0, "No mail at %s", buf);
1420 if (new != -1 && (count - new) > 0)
1421 error(0, 0, "%d message%s (%d seen) at %s.",
1422 count, count > 1 ? "s" : "", count-new, buf);
1424 error(0, 0, "%d message%s at %s.",
1425 count, count > 1 ? "s" : "", buf);
1428 /* we may need to get sizes in order to check message limits */
1429 msgsizes = (int *)NULL;
1430 if (!ctl->fetchall && proto->getsizes && ctl->limit)
1432 msgsizes = (int *)alloca(sizeof(int) * count);
1434 ok = (proto->getsizes)(sock, count, msgsizes);
1437 set_timeout(ctl->server.timeout);
1442 if (new == -1 || ctl->fetchall)
1444 ok = ((new > 0) ? PS_SUCCESS : PS_NOMAIL);
1449 int force_retrieval;
1452 * What forces this code is that in POP3 and IMAP2BIS you can't
1453 * fetch a message without having it marked `seen'. In IMAP4,
1454 * on the other hand, you can (peek_capable is set to convey
1457 * The result of being unable to peek is that if there's
1458 * any kind of transient error (DNS lookup failure, or
1459 * sendmail refusing delivery due to process-table limits)
1460 * the message will be marked "seen" on the server without
1461 * having been delivered. This is not a big problem if
1462 * fetchmail is running in foreground, because the user
1463 * will see a "skipped" message when it next runs and get
1466 * But in daemon mode this leads to the message being silently
1467 * ignored forever. This is not acceptable.
1469 * We compensate for this by checking the error count from the
1470 * previous pass and forcing all messages to be considered new
1473 force_retrieval = !peek_capable && (ctl->errcount > 0);
1475 /* read, forward, and delete messages */
1476 for (num = 1; num <= count; num++)
1478 int toolarge = msgsizes && (msgsizes[num-1] > ctl->limit);
1479 int fetch_it = ctl->fetchall ||
1480 (!toolarge && (force_retrieval || !(protocol->is_old && (protocol->is_old)(sock,ctl,num))));
1481 int suppress_delete = FALSE;
1482 int suppress_forward = FALSE;
1484 /* we may want to reject this message if it's old */
1487 if (outlevel > O_SILENT)
1489 error_build("skipping message %d", num);
1491 error_build(" (oversized, %d bytes)", msgsizes[num-1]);
1496 /* request a message */
1497 ok = (protocol->fetch_headers)(sock, ctl, num, &len);
1500 set_timeout(ctl->server.timeout);
1502 if (outlevel > O_SILENT)
1504 error_build("reading message %d", num);
1506 error_build(" (%d bytes)", len);
1507 if (outlevel == O_VERBOSE)
1508 error_complete(0, 0, "");
1514 * Read the message headers and ship them to the
1517 ok = readheaders(sock, len, ctl, realname);
1518 if (ok == PS_TRANSIENT)
1519 suppress_delete = TRUE;
1520 else if (ok == PS_REFUSED)
1521 suppress_forward = TRUE;
1524 set_timeout(ctl->server.timeout);
1527 * If we're using IMAP4 or something else that
1528 * can fetch headers separately from bodies,
1529 * it's time to request the body now. This
1530 * fetch may be skipped if we got an anti-spam
1531 * or other PS_REFUSED error response during
1534 if (protocol->fetch_body && !suppress_forward)
1536 if ((ok = (protocol->trail)(sock, ctl, num)))
1538 set_timeout(ctl->server.timeout);
1539 if ((ok = (protocol->fetch_body)(sock, ctl, num, &len)))
1541 set_timeout(ctl->server.timeout);
1544 /* process the body now */
1549 protocol->delimited);
1550 if (ok == PS_TRANSIENT)
1551 suppress_delete = TRUE;
1554 set_timeout(ctl->server.timeout);
1556 /* tell the server we got it OK and resynchronize */
1557 if (protocol->trail)
1559 ok = (protocol->trail)(sock, ctl, num);
1562 set_timeout(ctl->server.timeout);
1569 * At this point in flow of control, either we've bombed
1570 * on a protocol error or had delivery refused by the SMTP
1571 * server (unlikely -- I've never seen it) or we've seen
1572 * `accepted for delivery' and the message is shipped.
1573 * It's safe to mark the message seen and delete it on the
1577 /* maybe we delete this message now? */
1578 if (protocol->delete
1580 && (fetch_it ? !ctl->keep : ctl->flush))
1583 if (outlevel > O_SILENT)
1584 error_complete(0, 0, " flushed");
1585 ok = (protocol->delete)(sock, ctl, num);
1588 set_timeout(ctl->server.timeout);
1589 delete_str(&ctl->newsaved, num);
1591 else if (outlevel > O_SILENT)
1592 error_complete(0, 0, " not flushed");
1594 /* perhaps this as many as we're ready to handle */
1595 if (ctl->fetchlimit && ctl->fetchlimit <= fetches)
1602 set_timeout(ctl->server.timeout);
1603 ok = gen_transact(sock, protocol->exit_cmd);
1605 ok = (fetches > 0) ? PS_SUCCESS : PS_NOMAIL;
1611 set_timeout(ctl->server.timeout);
1612 if (ok != 0 && ok != PS_SOCKET)
1613 gen_transact(sock, protocol->exit_cmd);
1624 msg = "authorization";
1627 msg = "missing or bad RFC822 header";
1633 msg = "client/server synchronization";
1636 msg = "client/server protocol";
1639 msg = "SMTP transaction";
1642 error(0, 0, "undefined");
1645 if (ok==PS_SOCKET || ok==PS_AUTHFAIL || ok==PS_SYNTAX || ok==PS_IOERR
1646 || ok==PS_ERROR || ok==PS_PROTOCOL || ok==PS_SMTP)
1647 error(0, -1, "%s error while fetching from %s", msg, ctl->server.names->id);
1650 signal(SIGALRM, sigsave);
1654 #if defined(HAVE_STDARG_H)
1655 void gen_send(int sock, char *fmt, ... )
1656 /* assemble command in printf(3) style and send to the server */
1658 void gen_send(sock, fmt, va_alist)
1659 /* assemble command in printf(3) style and send to the server */
1660 int sock; /* socket to which server is connected */
1661 const char *fmt; /* printf-style format */
1665 char buf [POPBUFSIZE+1];
1668 if (protocol->tagged)
1669 (void) sprintf(buf, "%s ", GENSYM);
1673 #if defined(HAVE_STDARG_H)
1678 vsprintf(buf + strlen(buf), fmt, ap);
1681 strcat(buf, "\r\n");
1682 SockWrite(sock, buf, strlen(buf));
1684 if (outlevel == O_VERBOSE)
1688 if (shroud && shroud[0] && (cp = strstr(buf, shroud)))
1692 sp = cp + strlen(shroud);
1698 buf[strlen(buf)-2] = '\0';
1699 error(0, 0, "%s> %s", protocol->name, buf);
1703 int gen_recv(sock, buf, size)
1704 /* get one line of input from the server */
1705 int sock; /* socket to which server is connected */
1706 char *buf; /* buffer to receive input */
1707 int size; /* length of buffer */
1709 if (SockRead(sock, buf, size) == -1)
1713 if (buf[strlen(buf)-1] == '\n')
1714 buf[strlen(buf)-1] = '\0';
1715 if (buf[strlen(buf)-1] == '\r')
1716 buf[strlen(buf)-1] = '\r';
1717 if (outlevel == O_VERBOSE)
1718 error(0, 0, "%s< %s", protocol->name, buf);
1723 #if defined(HAVE_STDARG_H)
1724 int gen_transact(int sock, char *fmt, ... )
1725 /* assemble command in printf(3) style, send to server, accept a response */
1727 int gen_transact(int sock, fmt, va_alist)
1728 /* assemble command in printf(3) style, send to server, accept a response */
1729 int sock; /* socket to which server is connected */
1730 const char *fmt; /* printf-style format */
1735 char buf [POPBUFSIZE+1];
1738 if (protocol->tagged)
1739 (void) sprintf(buf, "%s ", GENSYM);
1743 #if defined(HAVE_STDARG_H)
1748 vsprintf(buf + strlen(buf), fmt, ap);
1751 strcat(buf, "\r\n");
1752 SockWrite(sock, buf, strlen(buf));
1754 if (outlevel == O_VERBOSE)
1758 if (shroud && shroud[0] && (cp = strstr(buf, shroud)))
1762 sp = cp + strlen(shroud);
1768 buf[strlen(buf)-1] = '\0';
1769 error(0, 0, "%s> %s", protocol->name, buf);
1772 /* we presume this does its own response echoing */
1773 ok = (protocol->parse_response)(sock, buf);
1774 set_timeout(mytimeout);
1779 /* driver.c ends here */