/*
* Copyright © 2006-2007 Pierre Habouzit
+ * Copyright © 2008 Florent Bruneau
*/
#include <getopt.h>
#include "buffer.h"
#include "common.h"
-#include "threads.h"
+#include "epoll.h"
#include "tokens.h"
+#include "server.h"
#define DAEMON_NAME "postlicyd"
+#define DEFAULT_PORT 10000
+#define RUNAS_USER "nobody"
+#define RUNAS_GROUP "nogroup"
+
+DECLARE_MAIN
enum smtp_state {
SMTP_UNKNOWN,
const char *recipient_count;
const char *client_address;
const char *client_name;
- const char *rclient_name;
+ const char *reverse_client_name;
const char *instance;
/* postfix 2.2+ */
const char *size;
const char *ccert_subject;
const char *ccert_issuer;
- const char *ccsert_fingerprint;
+ const char *ccert_fingerprint;
/* postfix 2.3+ */
const char *encryption_protocol;
const char *encryption_cipher;
const char *encryption_keysize;
const char *etrn_domain;
+
+ /* postfix 2.5+ */
+ const char *stress;
+
+ const char *eoq;
} query_t;
+static query_t *query_new(void)
+{
+ return p_new(query_t, 1);
+}
+
+static void query_delete(query_t **query)
+{
+ if (*query) {
+ p_delete(query);
+ }
+}
+
+static void *query_starter(server_t* server)
+{
+ return query_new();
+}
+
static int postfix_parsejob(query_t *query, char *p)
{
#define PARSE_CHECK(expr, error, ...) \
} \
} while (0)
- p_clear(&query, 1);
- while (p[0] != '\r' || p[1] != '\n') {
+ p_clear(query, 1);
+ while (*p != '\n') {
char *k, *v;
int klen, vlen, vtk;
while (isblank(*p))
p++;
- p = strstr(v = p, "\r\n");
- PARSE_CHECK(p, "could not find final \\r\\n in line");
+ p = strchr(v = p, '\n');
+ PARSE_CHECK(p, "could not find final \\n in line");
for (vlen = p - v; vlen && isblank(v[vlen]); vlen--);
- p += 2; /* skip \r\n */
+ p += 1; /* skip \n */
vtk = tokenize(v, vlen);
switch (tokenize(k, klen)) {
CASE(RECIPIENT_COUNT, recipient_count);
CASE(CLIENT_ADDRESS, client_address);
CASE(CLIENT_NAME, client_name);
- CASE(RCLIENT_NAME, rclient_name);
+ CASE(REVERSE_CLIENT_NAME, reverse_client_name);
CASE(INSTANCE, instance);
CASE(SASL_METHOD, sasl_method);
CASE(SASL_USERNAME, sasl_username);
CASE(SIZE, size);
CASE(CCERT_SUBJECT, ccert_subject);
CASE(CCERT_ISSUER, ccert_issuer);
- CASE(CCSERT_FINGERPRINT, ccsert_fingerprint);
+ CASE(CCERT_FINGERPRINT, ccert_fingerprint);
CASE(ENCRYPTION_PROTOCOL, encryption_protocol);
CASE(ENCRYPTION_CIPHER, encryption_cipher);
CASE(ENCRYPTION_KEYSIZE, encryption_keysize);
CASE(ETRN_DOMAIN, etrn_domain);
+ CASE(STRESS, stress);
#undef CASE
case PTK_REQUEST:
default:
syslog(LOG_WARNING, "unexpected key, skipped: %.*s", klen, k);
- break;
+ continue;
}
}
#undef PARSE_CHECK
}
-static void *policy_run(int fd, void *data)
+__attribute__((format(printf,2,0)))
+static void policy_answer(server_t *pcy, const char *fmt, ...)
{
- buffer_t buf;
-
- buffer_init(&buf);
- for (;;) {
- int nb = buffer_read(&buf, fd, -1);
- const char *eoq;
- query_t q;
-
- if (nb < 0) {
- if (errno == EAGAIN || errno == EINTR)
- continue;
- UNIXERR("read");
- break;
- }
- if (nb == 0) {
- if (buf.len)
- syslog(LOG_ERR, "unexpected end of data");
- break;
- }
-
- eoq = strstr(buf.data + MAX(0, buf.len - 3), "\r\n\r\n");
- if (!eoq)
- continue;
+ va_list args;
+ const query_t* query = pcy->data;
+
+ buffer_addstr(&pcy->obuf, "action=");
+ va_start(args, fmt);
+ buffer_addvf(&pcy->obuf, fmt, args);
+ va_end(args);
+ buffer_addstr(&pcy->obuf, "\n\n");
+ buffer_consume(&pcy->ibuf, query->eoq - pcy->ibuf.data);
+ epoll_modify(pcy->fd, EPOLLIN | EPOLLOUT, pcy);
+}
- if (postfix_parsejob(&q, buf.data) < 0)
- break;
+static bool policy_run_filter(const query_t* query, void* filter, void* conf)
+{
+ return false;
+}
- buffer_consume(&buf, eoq + strlen("\r\n\r\n") - buf.data);
- if (xwrite(fd, "DUNNO\r\n", strlen("DUNNO\r\n"))) {
- UNIXERR("write");
- break;
- }
+static void policy_process(server_t *pcy)
+{
+ const query_t* query = pcy->data;
+ if (!policy_run_filter(query, NULL, NULL)) {
+ policy_answer(pcy, "DUNNO");
}
- buffer_wipe(&buf);
-
- close(fd);
- return NULL;
}
-/* administrivia {{{ */
-
-static int main_initialize(void)
+static int policy_run(server_t *pcy, void* config)
{
- openlog("postlicyd", LOG_PID, LOG_MAIL);
- signal(SIGPIPE, SIG_IGN);
- signal(SIGINT, &common_sighandler);
- signal(SIGTERM, &common_sighandler);
- signal(SIGSEGV, &common_sighandler);
- syslog(LOG_INFO, "Starting...");
+ ssize_t search_offs = MAX(0, pcy->ibuf.len - 1);
+ int nb = buffer_read(&pcy->ibuf, pcy->fd, -1);
+ const char *eoq;
+ query_t* query = pcy->data;
+
+ if (nb < 0) {
+ if (errno == EAGAIN || errno == EINTR)
+ return 0;
+ UNIXERR("read");
+ return -1;
+ }
+ if (nb == 0) {
+ if (pcy->ibuf.len)
+ syslog(LOG_ERR, "unexpected end of data");
+ return -1;
+ }
+
+ if (!(eoq = strstr(pcy->ibuf.data + search_offs, "\n\n")))
+ return 0;
+
+ if (postfix_parsejob(pcy->data, pcy->ibuf.data) < 0)
+ return -1;
+ query->eoq = eoq + strlen("\n\n");
+ epoll_modify(pcy->fd, 0, pcy);
+ policy_process(pcy);
return 0;
}
-static void main_shutdown(void)
+int start_listener(int port)
{
- closelog();
+ return start_server(port, NULL, NULL);
}
-module_init(main_initialize);
-module_exit(main_shutdown);
+/* administrivia {{{ */
void usage(void)
{
fputs("usage: "DAEMON_NAME" [options] config\n"
"\n"
"Options:\n"
+ " -l <port> port to listen to\n"
" -p <pidfile> file to write our pid to\n"
+ " -f stay in foreground\n"
, stderr);
}
int main(int argc, char *argv[])
{
+ bool unsafe = false;
const char *pidfile = NULL;
- int sock = -1;
+ bool daemonize = true;
+ int port = DEFAULT_PORT;
- for (int c = 0; (c = getopt(argc, argv, "h" "p:")) >= 0; ) {
+ for (int c = 0; (c = getopt(argc, argv, "hf" "l:p:")) >= 0; ) {
switch (c) {
case 'p':
pidfile = optarg;
break;
+ case 'u':
+ unsafe = true;
+ break;
+ case 'l':
+ port = atoi(optarg);
+ break;
+ case 'f':
+ daemonize = false;
+ break;
default:
usage();
return EXIT_FAILURE;
return EXIT_FAILURE;
}
- if (pidfile_open(pidfile) < 0) {
- syslog(LOG_CRIT, "unable to write pidfile %s", pidfile);
- return EXIT_FAILURE;
- }
-
- if (daemon_detach() < 0) {
- syslog(LOG_CRIT, "unable to fork");
+ if (common_setup(pidfile, false, RUNAS_USER, RUNAS_GROUP,
+ daemonize) != EXIT_SUCCESS
+ || start_listener(port) < 0) {
return EXIT_FAILURE;
}
-
- pidfile_refresh();
-
- while (!sigint) {
- int fd = accept(sock, NULL, 0);
- if (fd < 0) {
- if (errno != EINTR && errno != EAGAIN)
- UNIXERR("accept");
- continue;
- }
- thread_launch(policy_run, fd, NULL);
- threads_join();
- }
-
- close(sock);
- syslog(LOG_INFO, "Stopping...");
- return EXIT_SUCCESS;
+ return server_loop(query_starter, (delete_client_t)query_delete,
+ policy_run, NULL);
}