| blob | 0d8ed8663c097d4f0ba2c0c818b10069c0a95604 |
1 SENDMAIL RELEASE NOTES
2 $Id: RELEASE_NOTES,v 8.1926 2008/05/03 03:34:26 ca Exp $
5 This listing shows the version of the sendmail binary, the version
6 of the sendmail configuration files, the date of release, and a
7 summary of the changes in that release.
9 8.14.3/8.14.3 2008/05/03
10 During ruleset processing the generation of a key for a map
11 lookup and the parsing of the default value was broken
12 for some macros, e.g., $|, which caused the BlankSub
13 character to be inserted into the workspace and thus
14 failures, e.g., rules that should have matched did not.
15 8.14.2 caused a regression: it accessed (macro) storage which was
16 freed before. First instance of the problem reported by
17 Matthew Dillon of DragonFlyBSD; variations of the same
18 bug reported by Todd C. Miller of OpenBSD, Moritz
19 Jodeit, and Dave Hayes.
20 Improve pathname length checks for persistent host status. Patch
21 from Joerg Sonnenberger of DragonFlyBSD.
22 Reword misleading SMTP reply text for FEATURE(`badmx'). Problem
23 noted by Beth Halsema.
24 The read timeout was fixed to be Timeout.datablock if STARTTLS
25 was activated. This may cause problems if that value
26 is lowered from its default. Problem noted by Jens Elkner.
27 CONFIG: Using LOCAL_TLS_CLIENT caused the tls_client ruleset
28 to operate incorrectly. Problem found by Werner Wiethege.
29 LIBMILTER: Omitting some protocol steps via the xxfi_negotiate()
30 callback did not work properly. The patchlevel of
31 libmilter has been set to 1 so a milter can determine
32 whether libmilter contains this fix.
33 MAKEMAP: If a delimiter is specified (-t) use that also when
34 dumping a map. Patch from Todd C. Miller of OpenBSD.
35 Portability:
36 Add support for Darwin 9.x (Mac OS X 10.5).
37 Support shared libraries in Darwin 8 and 9. Patch from
38 Chris Behrens of Concentric.
39 Add support for SCO OpenServer 6, patch from Boyd Gerber.
40 DEVTOOLS: Clarify that confSHAREDLIBDIR requires a trailing path.
41 Added Files:
42 devtools/OS/Darwin.9.x
43 devtools/OS/OSR.i386
45 8.14.2/8.14.2 2007/11/01
46 If a message was queued and it contained 8 bit characters in
47 a From: or To: header, then those characters could be
48 "mistaken" for internal control characters during a queue
49 run and trigger various consistency checks. Problem
50 noted by Neil Rickert of Northern Illinois University.
51 If MaxMimeHeaderLength is set to a value greater than 0 (which
52 it is by default) then even if the Linelimit parameter
53 is 0, sendmail corrupted in the non-transfer-encoding
54 case every MAXLINE-1 characters. Patch from John Gardiner
55 Myers of Proofpoint.
56 Setting the suboption DeliveryMode for DaemonPortOptions did not
57 work in earlier 8.14 versions.
58 Note: DeliveryMode=interactive is silently converted to
59 background if a milter can reject or delete a recipient.
60 Prior to 8.14 this happened only if milter could delete
61 recipients.
62 ClientRate should trigger when the limit was exceeded (as
63 documented), not when it was reached. Patch from
64 John Beck of Sun Microsystems.
65 Force a queue run for -qGqueuegroup even if no runners are
66 specified (R=0) and forking (F=f) is requested.
67 When multiple results are requested for a DNS map lookup
68 (-z and -Z), return only those that are relevant for
69 the query (not also those in the "additional section".)
70 If the message transfer time to sendmail (when acting as server)
71 exceeds Timeout.queuewarn or Timeout.queuereturn and
72 the message is refused (by a milter), sendmail previously
73 created a delivery status notification (DSN). Patch
74 from Doug Heath of The Hertz Corporation.
75 A code change in Cyrus-SASL 2.1.22 for sasl_decode64() requires
76 the MTA to deal with some input (i.e., "=") itself.
77 Problem noted by Eliot Lear.
78 sendmail counted a delivery as successful if PIPELINING is
79 compiled in but not offered by the server and the
80 delivery failed temporarily. Patch from Werner Wiethege.
81 If getting the result of an LDAP query times out then close the
82 map so it will be reopened on the next lookup. This
83 should help "failover" configurations that specify more
84 than one LDAP server.
85 If check_compat returns $#discard then a "savemail panic" could
86 be triggered under some circumstances (e.g., requiring
87 a system which does not have the compile time flag
88 HASFLOCK set). Based on patch by Motonori Nakamura
89 of National Institute of Informatics, Japan.
90 If a milter rejected a recipient, the count for nrcpts= in the
91 logfile entry might have been wrong. Problem found by
92 Petra Humann of TU Dresden.
93 If a milter invoked smfi_chgfrom() where ESMTP arguments are not
94 NULL, the message body was lost. Patch from Motonori
95 Nakamura of National Institute of Informatics, Japan.
96 sendmail(8) had a bogus space in -qGname. Patch from Peng Haitao.
97 CONTRIB: buildvirtuser: Preserve ownership and permissions when
98 replacing files.
99 CONTRIB: buildvirtuser: Skip dot-files (e.g., .cvsignore) when
100 reading the /etc/mail/virtusers/ directory.
101 CONTRIB: buildvirtuser: Emit warnings instead of exiting where
102 appropriate.
103 LIBMILTER: Fix ABI backwards compatibility so milters compiled
104 against an older libmilter.so shared library can use an
105 8.14 libmilter.so shared library.
106 LIBMILTER: smfi_version() did not properly extract the patchlevel
107 from the version number, however, the returned value was
108 correct for the current libmilter version.
110 8.14.1/8.14.1 2007/04/03
111 Even though a milter rejects a recipient the MTA will still keep
112 it in its list of recipients and deliver to it if the
113 transaction is accepted. This is a regression introduced
114 in 8.14.0 due to the change for SMFIP_RCPT_REJ. Bug
115 found by Andy Fiddaman.
116 The new DaemonPortOptions which begin with a lower case character
117 could not be set in 8.14.0.
118 If a server shut down the connection in response to a STARTTLS
119 command, sendmail would log a misleading error message
120 due to an internal inconsistency. Problem found by
121 Werner Wiethege.
122 Document how some sendmail.cf options change the behavior of mailq.
123 Noted by Paul Menchini of the North Carolina School of
124 Science and Mathematics.
125 CONFIG: Add confSOFT_BOUNCE m4 option for setting SoftBounce.
126 CONFIG: 8.14.0's RELEASE_NOTES failed to mention the addition
127 of the confMAX_NOOP_COMMANDS and confSHARED_MEMORY_KEY_FILE
128 m4 options for setting MaxNOOPCommands and
129 SharedMemoryKeyFile.
130 CONFIG: Add confMILTER_MACROS_EOH and confMILTER_MACROS_DATA m4
131 options for setting Milter.macros.eoh and Milter.macros.data.
132 CONTRIB: Use flock() and fcntl() in qtool.pl if necessary.
133 Patch from Daniel Carroll of Mesa State College.
134 LIBMILTER: Make sure an unknown command does not affect the
135 currently available macros. Problem found by Andy Fiddaman.
136 LIBMILTER: The MTA did not offer SMFIF_SETSYMLIST during option
137 negotiation. Problem reported by Bryan Costales.
138 LIBMILTER: Fix several minor errors in the documentation.
139 Patches from Bryan Costales.
140 PORTABILITY FIXES:
141 AIX 5.{1,2}: libsm/util.c failed to compile due to
142 redefinition of several macros, e.g., SIG_ERR.
143 Patch from Jim Pirzyk with assistance by Bob
144 Booth, University of Illinois at Urbana-Champaign.
145 Add support for QNX.6. Patch from Sean Boudreau of QNX
146 Software Systems.
147 New Files:
148 devtools/M4/depend/QNX6.m4
149 devtools/OS/QNX.6.x
150 include/sm/os/sm_os_qnx.h
152 New Files added in 8.14.0, but not shown in the release notes entry:
153 libmilter/docs/smfi_chgfrom.html
154 libmilter/docs/smfi_version.html
156 8.14.0/8.14.0 2007/01/31
157 Header field values are now 8 bit clean. Notes:
158 - header field names are still restricted to 7 bit.
159 - RFC 2822 allows only 7 bit (US-ASCII) characters in
160 headers.
161 Preserve spaces after the colon in a header. Previously, any
162 number of spaces after the colon would be changed to
163 exactly one space.
164 In some cases of deeply nested aliases/forwarding, mail can
165 be silently lost. Moreover, the MaxAliasRecursion
166 limit may be reached too early, e.g., the counter
167 may be off by a factor of 4 in case of a sequence of
168 .forward files that refer to others. Patch from
169 Motonori Nakamura of Kyoto University.
170 Fix a regression in 8.13.8: if InputMailFilters is set then
171 "sendmail -bs" can trigger an assertion because the
172 hostname of the client is undefined. It is now set
173 to "localhost" for the xxfi_connect() callback.
174 Avoid referencing a freed variable during cleanup when terminating.
175 Problem reported and diagnosed by Joe Maimon.
176 New option HeloName to set the name for the HELO/EHLO command.
177 Patch from Nik Clayton.
178 New option SoftBounce to issue temporary errors (4xy) instead of
179 permanent errors (5xy). This can be useful for testing.
180 New suboptions for DaemonPortOptions to set them individually
181 per daemon socket:
182 DeliveryMode DeliveryMode
183 refuseLA RefuseLA
184 delayLA DelayLA
185 queueLA QueueLA
186 children MaxDaemonChildren
187 New option -K for LDAP maps to replace %1 through %9 in the
188 lookup key with the LDAP escaped contents of the
189 arguments specified in the map lookup. Loosely based
190 on patch from Wolfgang Hottgenroth.
191 Log the time after which a greet_pause delay triggered. Patch
192 from Nik Clayton.
193 If a client is rejected via TCP wrapper or some other check
194 performed by validate_connection() (in conf.c) then do
195 not also invoke greet_pause. Problem noted by Jim Pirzyk
196 of the University of Illinois at Urbana-Champaign.
197 If a client terminates the SMTP connection during a pause
198 introduced by greet_pause, then a misleading message
199 was logged previously. Problem noted by Vernon Schryver
200 et.al., patch from Matej Vela.
201 New command "mstat" for control socket to provide "machine
202 readable" status.
203 New named config file rule check_eom which is called at the end
204 of a message, its parameter is the size of the message.
205 If the macro {addr_type} indicates that the current address
206 is a header address it also distinguishes between
207 recipient and sender addresses (as it is done for
208 envelope addresses).
209 When a macro is set in check_relay, then its value is accessible
210 by all transactions in the same SMTP session.
211 Increase size of key for ldap lookups to 1024 (MAXKEY).
212 New option MaxNOOPCommands to override default of 20 for the
213 number of "useless" commands before the SMTP server will
214 slow down responding.
215 New option SharedMemoryKeyFile: if shared memory support is
216 enabled, the MTA can be asked to select a shared memory
217 key itself by setting SharedMemoryKey to -1 and specifying
218 a file where to store the selected key.
219 Try to deal with open HTTP proxies that are used to send spam
220 by recognizing some commands from them. If the first command
221 from the client is GET, POST, CONNECT, or USER, then the
222 connection is terminated immediately.
223 New PrivacyOptions noactualrecipient to avoid putting
224 X-Actual-Recipient lines in DSNs revealing the actual
225 account that addresses map to. Patch from Dan Harkless.
226 New options B, z, and Z for DNS maps:
227 -B: specify a domain that is always appended to queries.
228 -z: specify the delimiter at which to cut off the result of
229 a query if it is too long.
230 -Z: specify the maximum number of entries to be concatenated
231 to form the result of a lookup.
232 New target "check" in the Makefile of libsm: instead of running tests
233 implicitly while building libsm, they must be explicitly
234 started by using "make check".
235 Fixed some inconsistent checks for NULL pointers that have been
236 reported by the SATURN tool which has been developed by
237 Isil Dillig and Thomas Dillig of Stanford University.
238 Fix a potential race condition caused by a signal handler for
239 terminated child processes. Problem noted by David F. Skoll.
240 When a milter deleted a recipient, that recipient could cause a
241 queue group selection. This has been disabled as it was not
242 intended.
243 New operator 'r' for the arith map to return a random number.
244 Patch from Motonori Nakamura of Kyoto University.
245 New compile time option MILTER_NO_NAGLE to turn off the Nagle
246 algorithm for communication with libmilter ("cork" on Linux),
247 which may improve the communication performance on some
248 operating systems. Patch from John Gardiner Myers of
249 Proofpoint.
250 If sendmail received input that contained a CR without subsequent LF
251 (thus violating RFC 2821 (2.3.7)), it could previously
252 generate an additional blank line in the output as the last
253 line.
254 Restarting persistent queue runners by sending a HUP signal to
255 the "queue control process" (QCP) works now.
256 Increase the length of an input line to 12288 to deal with
257 really long lines during SMTP AUTH negotiations.
258 Problem noted by Werner Wiethege.
259 If ARPANET mode (-ba) was selected STARTTLS would fail (due to
260 a missing initialization call for that case). Problem
261 noted by Neil Rickert of Northern Illinois University.
262 If sendmail is linked against a library that initializes Cyrus-SASL
263 before sendmail did it (such as libnss-ldap), then SMTP AUTH
264 could fail for the sendmail client. A patch by Moritz Both
265 works around the API design flaw of Cyrus-SASLv2.
266 CONFIG: Make it possible to unset the StatusFile option by
267 undefining STATUS_FILE. By not setting StatusFile,
268 the MTA will not attempt to open a statistics file on
269 each delivery.
270 CONFIG: New FEATURE(`require_rdns') to reject messages from SMTP
271 clients whose IP address does not have proper reverse DNS.
272 Contributed by Neil Rickert of Northern Illinois University
273 and John Beck of Sun Microsystems.
274 CONFIG: New FEATURE(`block_bad_helo') to reject messages from SMTP
275 clients which provide a HELO/EHLO argument which is either
276 unqualified, or is one of our own names (i.e., the server
277 name instead of the client name). Contributed by Neil
278 Rickert of Northern Illinois University and John Beck of
279 Sun Microsystems.
280 CONFIG: New FEATURE(`badmx') to reject envelope sender addresses
281 (MAIL) whose domain part resolves to a "bad" MX record.
282 Based on contribution from William Dell Wisner.
283 CONFIG: New macros SMTP_MAILER_LL and RELAY_MAILER_LL to override
284 the maximum line length of the smtp mailers.
285 CONFIG: New option `relaytofulladdress' for FEATURE(`access_db')
286 to allow entries in the access map to be of the form
287 To:user@example.com RELAY
288 CONFIG: New subsuboptions eoh and data to specify the list of
289 macros a milter should receive at those stages in the
290 SMTP dialogue.
291 CONFIG: New option confHELO_NAME for HeloName to set the name
292 for the HELO/EHLO command.
293 CONFIG: dnsbl and enhdnsbl can now also discard or quarantine
294 messages by using those values as second argument.
295 Patches from Nelson Fung.
296 CONTRIB: cidrexpand uses a hash symbol as comment character and
297 ignores everything after it unless it is in quotes or
298 preceeded by a backslash.
299 DEVTOOLS: New macro confMKDIR: if set to a program that creates
300 directories, then it used for "make install" to create
301 the required installation directories.
302 DEVTOOLS: New macro confCCLINK to specify the linker to use for
303 executables (defaults to confCC).
304 LIBMILTER: A new version of the milter API has been created that
305 has several changes which are listed below and documented
306 in the webpages reachable via libmilter/docs/index.html.
307 LIBMILTER: The meaning of the version macro SMFI_VERSION has been
308 changed. It now refers only to the version of libmilter,
309 not to the protocol version (which is used only internally,
310 it is not user/milter-programmer visible). Additionally,
311 a version function smfi_version() has been introduced such
312 that a milter program can check the libmilter version also
313 at runtime which is useful if a shared library is used.
314 LIBMILTER: A new callback xxfi_negotiate() can be used to
315 dynamically (i.e., at runtime) determine the available
316 protocol actions and features of the MTA and also to
317 specify which of these a milter wants to use. This allows
318 for more flexibility than hardcoding these flags in the
319 xxfi_flags field of the smfiDesc structure.
320 LIBMILTER: A new callback xxfi_data() is available so milters
321 can act on the DATA command.
322 LIBMILTER: A new callback xxfi_unknown() is available so milters
323 can receive also unknown SMTP commands.
324 LIBMILTER: A new return code SMFIS_NOREPLY has been added which
325 can be used by the xxfi_header() callback provided the
326 milter requested the SMFIP_NOHREPL protocol action.
327 LIBMILTER: The new return code SMFIS_SKIP can be used in the
328 xxfi_body() callback to skip over further body chunks
329 and directly advance to the xxfi_eom() callback. This
330 is useful if a milter can make a decision based on the
331 body chunks it already received without reading the entire
332 rest of the body and the milter wants to invoke functions
333 that are only available from the xxfi_eom() callback.
334 LIBMILTER: A new function smfi_addrcpt_par() can be used to add
335 new recipients including ESMTP parameters.
336 LIBMILTER: A new function smfi_chgfrom() can be used to change the
337 envelope sender including ESMTP parameters.
338 LIBMILTER: A milter can now request to be informed about rejected
339 recipients (RCPT) too. This requires to set the protocol
340 flag SMFIP_RCPT_REJ during option negotiation. Whether
341 a RCPT has been rejected can be checked by comparing the
342 value of the macro {rcpt_mailer} with "error".
343 LIBMILTER: A milter can now override the list of macros that it
344 wants to receive from the MTA for each protocol step
345 by invoking the function smfi_setsymlist() during option
346 negotiation.
347 LIBMILTER: A milter can receive header field values with all
348 leading spaces by requesting the SMFIP_HDR_LEADSPC
349 protocol action. Also, if the flag is set then the MTA
350 does not add a leading space to headers that are added,
351 inserted, or replaced.
352 LIBMILTER: If a milter sets the reply code to "421" for the HELO
353 callback, the SMTP server will terminate the SMTP session
354 with that error to match the behavior of all other callbacks.
355 New Files:
356 cf/feature/badmx.m4
357 cf/feature/block_bad_helo.m4
358 cf/feature/require_rdns.m4
359 devtools/M4/UNIX/check.m4
360 include/sm/misc.h
361 include/sm/sendmail.h
362 include/sm/tailq.h
363 libmilter/docs/smfi_addrcpt_par.html
364 libmilter/docs/smfi_setsymlist.html
365 libmilter/docs/xxfi_data.html
366 libmilter/docs/xxfi_negotiate.html
367 libmilter/docs/xxfi_unknown.html
368 libmilter/example.c
369 libmilter/monitor.c
370 libmilter/worker.c
371 libsm/memstat.c
372 libsm/t-memstat.c
373 libsm/t-qic.c
374 libsm/util.c
375 sendmail/daemon.h
376 sendmail/map.h
378 8.13.8/8.13.8 2006/08/09
379 Fix a regression in 8.13.7: if shared memory is activated, then
380 the server can erroneously report that there is
381 insufficient disk space. Additionally make sure that
382 an internal variable is set properly to avoid those
383 misleading errors. Based on patch from Steve Hubert
384 of University of Washington.
385 Fix a regression in 8.13.7: the PidFile could be removed after
386 the process that forks the daemon exited, i.e., if
387 sendmail -bd is invoked. Problem reported by Kan Sasaki
388 of Fusion Communications Corp. and Werner Wiethege.
389 Avoid opening qf files if QueueSortOrder is "none". Patch from
390 David F. Skoll.
391 Avoid a crash when finishing due to referencing a freed variable.
392 Problem reported and diagnosed by Moritz Jodeit.
393 CONTRIB: cidrexpand now deals with /0 by issuing the entire IPv4
394 range (0..255).
395 LIBMILTER: The "hostname" argument of the xxfi_connect() callback
396 previously was the equivalent of {client_ptr}. However,
397 this did not match the documentation of the function, hence
398 it has been changed to {client_name}. See doc/op/op.*
399 about these macros.
401 8.13.7/8.13.7 2006/06/14
402 A malformed MIME structure with many parts can cause sendmail to
403 crash while trying to send a mail due to a stack overflow,
404 e.g., if the stack size is limited (ulimit -s). This
405 happens because the recursion of the function mime8to7()
406 was not restricted. The function is called for MIME 8 to
407 7 bit conversion and also to enforce MaxMimeHeaderLength.
408 To work around this problem, recursive calls are limited to
409 a depth of MAXMIMENESTING (20); message content after this
410 limit is treated as opaque and is not checked further.
411 Problem noted by Frank Sheiness.
412 The changes to the I/O layer in 8.13.6 caused a regression for
413 SASL mechanisms that use the security layer, e.g.,
414 DIGEST-MD5. Problem noted by Robert Stampfli.
415 If a timeout occurs while reading a message (during the DATA phase)
416 a df file might have been left behind in the queue.
417 This was another side effect of the changes to the I/O
418 layer made in 8.13.6.
419 Several minor problems have been fixed that were found by a
420 Coverity scan of sendmail 8 as part of the NetBSD
421 distribution. See http://scan.coverity.com/
422 Note: the scan generated also a lot of "false positives",
423 e.g., "error" reports about situations that cannot happen.
424 Most of those code places are marked with lint(1) comments
425 like NOTREACHED, but Coverity does not understand those.
426 Hence an explicit assertion has been added in some cases
427 to avoid those false positives.
428 If the start of the sendmail daemon fails due to a configuration
429 error then in some cases shared memory segments or pid
430 files were not removed.
431 If DSN support is disabled via access_db, then related ESMTP
432 parameters for MAIL and RCPT should be rejected. Problem
433 reported by Akihiro Sagawa.
434 Enabling zlib compression in OpenSSL 0.9.8[ab] breaks the padding
435 bug work-around. Hence if sendmail is linked against
436 either of these versions and compression is available,
437 the padding bug work-around is turned off. Based on
438 patch from Victor Duchovni of Morgan Stanley.
439 CONFIG: FEATURE(`dnsbl') and FEATURE(`enhdnsbl') used
440 blackholes.mail-abuse.org as default domain for lookups,
441 however, that list is no longer available. To avoid
442 further problems, no default value is available anymore,
443 but an argument must be specified.
444 Portability:
445 Fix compilation on OSF/1 for sfsasl.c. Patch from
446 Pieter Bowman of the University of Utah.
448 8.13.6/8.13.6 2006/03/22
449 SECURITY: Replace unsafe use of setjmp(3)/longjmp(3) in the server
450 and client side of sendmail with timeouts in the libsm I/O
451 layer and fix problems in that code. Also fix handling of
452 a buffer in sm_syslog() which could have been used as an
453 attack vector to exploit the unsafe handling of
454 setjmp(3)/longjmp(3) in combination with signals.
455 Problem detected by Mark Dowd of ISS X-Force.
456 Handle theoretical integer overflows that could triggered if
457 the server accepted headers larger than the maximum
458 (signed) integer value. This is prevented in the default
459 configuration by restricting the size of a header, and on
460 most machines memory allocations would fail before reaching
461 those values. Problems found by Phil Brass of ISS.
462 If a server returns 421 for an RSET command when trying to start
463 another transaction in a session while sending mail, do
464 not trigger an internal consistency check. Problem found
465 by Allan E Johannesen of Worcester Polytechnic Institute.
466 If a server returns a 5xy error code (other than 501) in response
467 to a STARTTLS command despite the fact that it advertised
468 STARTTLS and that the code is not valid according to RFC
469 2487 treat it nevertheless as a permanent failure instead
470 of a protocol error (which has been changed to a
471 temporary error in 8.13.5). Problem reported by Jeff
472 A. Earickson of Colby College.
473 Clear SMTP state after a HELO/EHLO command. Patch from John
474 Myers of Proofpoint.
475 Observe MinQueueAge option when gathering entries from the queue
476 for sorting etc instead of waiting until the entries are
477 processed. Patch from Brian Fundakowski Feldman.
478 Set up TLS session cache to properly handle clients that try to
479 resume a stored TLS session.
480 Properly count the number of (direct) child processes such that
481 a configured value (MaxDaemonChildren) is not exceeded.
482 Based on patch from Attila Bruncsak.
483 LIBMILTER: Remove superfluous backslash in macro definition
484 (libmilter.h). Based on patch from Mike Kupfer of
485 Sun Microsystems.
486 LIBMILTER: Don't try to set SO_REUSEADDR on UNIX domain sockets.
487 This generates an error message from libmilter on
488 Solaris, though other systems appear to just discard the
489 request silently.
490 LIBMILTER: Deal with sigwait(2) implementations that return
491 -1 and set errno instead of returning an error code
492 directly. Patch from Chris Adams of HiWAAY Informations
493 Services.
494 Portability:
495 Fix compilation checks for closefrom(3) and statvfs(2)
496 in NetBSD. Problem noted by S. Moonesamy, patch from
497 Andrew Brown.
499 8.13.5/8.13.5 2005/09/16
500 Store the filesystem identifier of the df/ subdirectory (if it
501 exists) in an internal structure instead of the base
502 directory. This structure is used decide whether there
503 is enough free disk space when selecting a queue, hence
504 without this change queue selection could fail if a df/
505 subdirectory exists and is on a different filesystem
506 than the base directory.
507 Use the queue index of the df file (instead of the qf file) for
508 checking whether a link(2) operation can be used to split
509 an envelope across queue groups. Problem found by
510 Werner Wiethege.
511 If the list of items in the queue is larger than the maximum
512 number of items to process, sort the queue first and
513 then cut the list off instead of the other way around.
514 Patch from Matej Vela of Rudjer Boskovic Institute.
515 Fix helpfile to show full entry for ETRN. Problem noted by
516 Penelope Fudd, patch from Neil Rickert of Northern Illinois
517 University.
518 FallbackSmartHost should also be tried on temporary errors.
519 From John Beck of Sun Microsystems.
520 When a server responds with 421 to the STARTTLS command then treat
521 it as a temporary error, not as protocol error. Problem
522 noted by Andrey J. Melnikoff.
523 Properly define two functions in libsm as static because their
524 prototype used static too. Patch from Peter Klein.
525 Fix syntax errors in helpfile for MAIL and RCPT commands.
526 LIBMILTER: When smfi_replacebody() is called with bodylen equals
527 zero then do not silently ignore that call. Patch from
528 Gurusamy Sarathy of Active State.
529 LIBMILTER: Recognize "421" also in a multi-line reply to terminate
530 the SMTP session with that error. Fix from Brian Kantor.
531 Portability: New option HASSNPRINTF which can be set if the OS
532 has a properly working snprintf(3) to get rid
533 of the last two (safe) sprintf(3) calls in the
534 source code.
535 Add support for AIX 5.3.
536 Add support for SunOS 5.11 (aka Solaris 11).
537 Add support for Darwin 8.x. Patch from Lyndon Nerenberg.
538 OpenBSD 3.7 has removed support for NETISO.
539 CONFIG: Add OSTYPE(freebsd6) for FreeBSD 6.X.
540 Set DontBlameSendmail to AssumeSafeChown and
541 GroupWritableDirPathSafe for OSTYPE(darwin).
542 Patch from Lyndon Nerenberg.
543 Some features still used 4.7.1 as enhanced status code which
544 was supposed to be eliminated in 8.13.0 because some
545 broken systems misinterpret it as a permanent error.
546 Patch from Matej Vela of Rudjer Boskovic Institute.
547 Some default values in a generated cf file did not match
548 the defaults in the sendmail binary. Problem noted
549 by Mike Pechkin.
550 New Files:
551 cf/ostype/freebsd6.m4
552 devtools/OS/AIX.5.3
553 devtools/OS/Darwin.8.x
554 devtools/OS/SunOS.5.11
555 include/sm/time.h
557 8.13.4/8.13.4 2005/03/27
558 The bug fixes in 8.13.3 for connection handling uncovered a
559 different error which could result in connections that
560 stay in CLOSE_WAIT state due to a variable that was not
561 properly initialized. Problem noted by Michael Sims.
562 Deal with empty hostnames in hostsignature(). This bug could lead
563 to an endless loop when doing LMTP deliveries to another
564 host. Problem first reported by Martin Lathoud and
565 tracked down by Gael Roualland.
566 Make sure return parameters are initialized in getmxrr(). Problem
567 found by Gael Roualland using valgrind.
568 If shared memory is used and the RunAsUser option is set, then the
569 owner and group of the shared memory segment is set to
570 the ids specified RunAsUser and the access mode is set
571 to 0660 to allow for updates by sendmail processes.
572 The number of queue entries that is (optionally) kept in shared
573 memory was wrong in some cases, e.g., envelope splitting
574 and bounce generation.
575 Undo a change made in 8.13.0 to silently truncate long strings
576 in address rewriting because the message can be triggered
577 for header checks where long strings are legitimate.
578 Problem reported by Mary Verge DeSisto, and tracked
579 down with the help of John Beck of Sun Microsystems.
580 The internal stab map did not obey the -m flag. Patch from
581 Rob McMahon of Warwick University, England.
582 The socket map did not obey the -f flag. Problem noted by
583 Dan Ringdahl, forwarded by Andrzej Filip.
584 The addition of LDAP recursion in 8.13.0 broke enforcement of
585 the LDAP map -1 argument which tells the MTA to only
586 return success if and only if a single LDAP match is found.
587 Add additional error checks in the MTA for milter communication
588 to avoid a possible segmentation fault. Based on patch
589 by Joe Maimon.
590 Do not trigger an assertion if X509_digest() returns success but
591 does not assign a value to its output parameter. Based
592 on patch by Brian Kantor.
593 Add more checks when resetting internal AUTH data (applies only
594 to Cyrus SASL version 2). Otherwise an SMTP session might
595 be dropped after an AUTH failure.
596 Portability:
597 Add LA_LONGLONG as valid LA_TYPE type for systems that use
598 "long long" to read load average data, e.g.,
599 AIX 5.1 in 32 bit mode. Note: this has to be set
600 "by hand", it is not (yet) automatically detected.
601 Problem noted by Burak Bilen.
602 Use socklen_t for accept(), etc. on AIX 5.x. This should
603 fix problems when compiling in 64 bit mode.
604 Problem first reported by Harry Meiert of
605 University of Bremen.
606 New Files:
607 include/sm/sem.h
608 libsm/sem.c
609 libsm/t-sem.c
611 8.13.3/8.13.3 2005/01/11
612 Enhance handling of I/O errors, especially EOF, when STARTTLS
613 is active.
614 Make sure a connection is not reused after it has been closed
615 due to a 421 error. Problem found by Allan E Johannesen
616 of Worcester Polytechnic Institute.
617 Avoid triggering an assertion when sendmail is interrupted while
618 closing a connection. Problem found by Allan E Johannesen
619 of Worcester Polytechnic Institute.
620 Regression: a change in 8.13.2 caused sendmail not to try the
621 next MX host (or FallbackMXhost if configured) when, at
622 connection open, the current server returns a 4xy or 5xy
623 SMTP reply code. Problem noted by Mark Tranchant.
625 8.13.2/8.13.2 2004/12/15
626 Do not split the first header even if it exceeds the internal
627 buffer size. Previously a part of such a header would
628 end up in the body of the message. Problem noted by
629 Simple Nomad of BindView.
630 Do not complain about "cataddr: string too long" when checking
631 headers that do not contain RFC 2822 addresses.
632 Problem noted by Rich Graves of Brandeis University.
633 If a server returns a 421 reply to the RSET command between
634 message deliveries, do not attempt to deliver any more
635 messages on that connection. This prevents bogus "Bad
636 file number" recipient status. Problem noted by
637 Allan E Johannesen of Worcester Polytechnic Institute.
638 Allow trailing white space in EHLO command as recommended by RFC
639 2821. Problem noted by Ralph Santagato of SBC Services.
640 Deal with clients which use AUTH but negotiate a smaller buffer size
641 for data exchanges than the value used by sendmail, e.g.,
642 Cyrus IMAP lmtp server. Based on patch by Jamie Clark.
643 When passing ESMTP arguments for RCPT to a milter, do not cut
644 them off at a comma. Problem noted by Krzysztof Oledzki.
645 Add more logging to milter change header functions to
646 complement existing logging. Based on patch from
647 Gurusamy Sarathy of Active State.
648 Include <lber.h> in include/sm/config.h when LDAPMAP is defined.
649 Patch from Edgar Hoch of the University of Stuttgart.
650 Fix DNS lookup if IPv6 is enabled when converting an IP address
651 to a hostname for use with SASL. Problem noted by Ken Jones;
652 patch from Hajimu UMEMOTO.
653 CONFIG: For consistency enable MODIFY_MAILER_FLAGS for the prog
654 mailer. Patch from John Beck of Sun Microsystems.
655 LIBMILTER: It was possible that xxfi_abort() was called after
656 xxfi_eom() for a message if some timeouts were triggered.
657 Patch from Alexey Kravchuk.
658 LIBMILTER: Slightly rearrange mutex use in listener.c to allow
659 different threads to call smfi_opensocket() and smfi_main().
660 Patch from Jordan Ritter of Cloudmark.
661 MAIL.LOCAL: Properly terminate MBDB before exiting. Problem
662 noted by Nelson Fung.
663 MAIL.LOCAL: make strip-mail.local used a wrong path to access
664 mail.local. Problem noted by William Park.
665 VACATION: Properly terminate MBDB before exiting. Problem noted
666 by Nelson Fung.
667 Portability:
668 Add support for DragonFly BSD.
669 New Files:
670 cf/ostype/dragonfly.m4
671 devtools/OS/DragonFly
672 include/sm/os/sm_os_dragonfly.h
673 Deleted Files:
674 libsm/vsscanf.c
676 8.13.1/8.13.1 2004/07/30
677 Using the default AliasFile ldap: specification would cause the
678 objectClasses of the LDAP response to be included in the
679 alias expansion. Problem noted by Brenden Conte of
680 Rensselaer Polytechnic Institute.
681 Fix support for a fallback smart host for system where DNS is
682 (partially) available. From John Beck of Sun Microsystems.
683 Fix SuperSafe=PostMilter behavior when a milter replaces a body
684 but the data file is not yet stored on disk because it is
685 smaller than the size of the memory buffer. Problem noted
686 by David Russell.
687 Fix certificate revocation list support; if a CRL was specified
688 but the other side presented a cert that was signed by
689 a different (trusted) CA than the one which issued the CRL,
690 verification would always fail. Problem noted by Al Smith.
691 Run mailer programs as the RunAsUser when RunAsUser is set and
692 the F=S mailer flag is set without a U= mailer equate.
693 Problem noted by John Gardiner Myers of Proofpoint.
694 ${nbadrcpts} was off by one if BadRcptThrottle is zero.
695 Patch from Sung-hoon Choi of DreamWiz Inc.
696 CONFIG: Emit a warning if FEATURE(`access_db') is used after
697 FEATURE(`greet_pause') because then the latter will not
698 use the access map. Note: if no default value is given
699 for FEATURE(`greet_pause') then it issues an error if
700 FEATURE(`access_db') is not specified before it.
701 Problem noted by Alexander Dalloz of University of
702 Bielefeld.
703 CONFIG: Invoke ruleset Local_greet_pause if FEATURE(`greet_pause')
704 is used to give more flexibility for local changes.
705 Portability:
706 Fix a 64 bit problem in the socket map code. Problem
707 noted by Geoff Adams.
708 NetBSD 2.0F has closefrom(3). Patch from Andrew Brown.
709 NetBSD can use sysctl(3) to get the number of CPUs in
710 a system. Patch from Andrew Brown.
711 Add a README file in doc/op/ to explain potential
712 incompatibilities with various *roff related
713 tools. Problem tracked down by Per Hedeland.
714 New Files:
715 doc/op/README
717 8.13.0/8.13.0 2004/06/20
718 Do not include AUTH data in a bounce to avoid leaking confidential
719 information. See also cf/README about MSP and the section
720 "Providing SMTP AUTH Data when sendmail acts as Client".
721 Problem noted by Neil Rickert of Northern Illinois
722 University.
723 Fix compilation error in libsm/clock.c for -D_FFR_SLEEP_USE_SELECT=n
724 and -DSM_CONF_SETITIMER=0. Problem noted by Juergen Georgi
725 of RUS University of Stuttgart.
726 Fix bug in conversion from 8bit to quoted-printable. Problem found
727 by Christof Haerens, patch from Per Hedeland.
728 Add support for LDAP recursion based on types given to attribute
729 specifications in an LDAP map definition. This allows
730 LDAP queries to return a new query, a DN, or an LDAP
731 URL which will in turn be queried. See the ``LDAP
732 Recursion'' section of doc/op/op.me for more information.
733 Based on patch from Andrew Baucom.
734 Extend the default LDAP specifications for AliasFile
735 (O AliasFile=ldap:) and file classes (F{X}@LDAP) to
736 include support for LDAP recursion via new attributes.
737 See ``USING LDAP FOR ALIASES, MAPS, and CLASSES'' section
738 of cf/README for more information.
739 New option for LDAP maps: the -w option allows you to specify the
740 LDAP API/protocol version to use. The default depends on
741 the LDAP library.
742 New option for LDAP maps: the -H option allows you to specify an
743 LDAP URI instead of specifying the LDAP server via -h host
744 and -p port. This also allows for the use of LDAP over
745 SSL and connections via named sockets if your LDAP
746 library supports it.
747 New compile time flag SM_CONF_LDAP_INITIALIZE: set this if
748 ldap_initialize(3) is available (and LDAPMAP is set).
749 If MaxDaemonChildren is set and a command is repeated too often
750 during a SMTP session then terminate it just like it is
751 done for too many bad SMTP commands.
752 Basic connection rate control support has been added: the daemon
753 maintains the number of incoming connections per client
754 IP address and total in the macros {client_rate} and
755 {total_rate}, respectively. These macros can be used
756 in the cf file to impose connection rate limits.
757 A new option ConnectionRateWindowSize (default: 60s)
758 determines the length of the interval for which the
759 number of connections is stored. Based on patch from
760 Jose Marcio Martins da Cruz, Ecole des Mines de Paris.
761 Add optional protection from open proxies and SMTP slammers which
762 send SMTP traffic without waiting for the SMTP greeting.
763 If enabled by the new ruleset greet_pause (see
764 FEATURE(`greet_pause')), sendmail will wait the specified
765 amount of time before sending the initial 220 SMTP
766 greeting. If any traffic is received before then, a 554
767 SMTP response is sent and all SMTP commands are rejected
768 during that connection.
769 If 32 NOOP (or unknown/bad) commands are issued by a client the SMTP
770 server could sleep for a very long time. Fix based on
771 patch from Tadashi Kobayashi of IIJ.
772 Fix a potential memory leak in persistent queue runners if the
773 number of entries in the queue exceeds the limit of jobs.
774 Problem noted by Steve Hubert of University of Washington.
775 Do not use 4.7.1 as enhanced status code because some broken systems
776 misinterpret it as a permanent error.
777 New value for SuperSafe: PostMilter which will delay fsync() until
778 all milters accepted the mail. This can increase
779 performance if many mails are rejected by milters due to
780 body scans. Based on patch from David F. Skoll.
781 New macro {msg_id} which contains the value of the Message-Id:
782 header, whether provided by the client or generated by
783 sendmail.
784 New macro {client_connections} which contains the number of open
785 connections in the SMTP server for the client IP address.
786 Based on patch from Jose Marcio Martins da Cruz, Ecole des
787 Mines de Paris.
788 sendmail will now remove its pidfile when it exits. This was done
789 to prevent confusion caused by running sendmail stop
790 scripts two or more times, where the second and subsequent
791 runs would report misleading error messages about sendmail's
792 pid no longer existing. See section 1.3.15 of doc/op/op.me
793 for a discussion of the implications of this, including
794 how to correct broken scripts which may have depended on
795 the old behavior. From John Beck of Sun Microsystems.
796 Support per-daemon input filter lists which override the default
797 filter list specified in InputMailFilters. The filters
798 can be listed in the I= equate of DaemonPortOptions.
799 Do not add all domain prefixes of the hostname to class 'w'. If
800 your configuration relies on this behavior, you have to
801 add those names to class 'w' yourself. Problem noted
802 by Sander Eerkes.
803 Support message quarantining in the mail queue. Quarantined
804 messages are not run on normal queue displays or runs
805 unless specifically requested with -qQ. Quarantined queue
806 files are named with an hf prefix instead of a qf prefix.
807 The -q command line option now can specify which queue to display
808 or run. -qQ operates on quarantined queue items. -qL
809 operates on lost queue items.
810 Restricted mail queue runs and displays can be done based on the
811 quarantined reason using -qQtext to run or display
812 quarantined items if the quarantine reason contains the
813 given text. Similarly, -q!Qtext will run or display
814 quarantined items which do not have the given text in the
815 quarantine reason.
816 Items in the queue can be quarantined or unquarantined using the
817 new -Q option. See doc/op/op.me for more information.
818 When displaying the quarantine mailq with 'mailq -qQ', the
819 quarantine reason is shown in a new line prefixed by
820 "QUARANTINE:".
821 A new error code for the $#error mailer, $@ quarantine, can be used
822 to quarantine messages in check_* (except check_compat) and
823 header check rulesets. The $: of the mailer triplet will
824 be used for the quarantine reason.
825 Add a new quarantine count to the mailstats collected.
826 Add a new macro ${quarantine} which is the quarantine reason for a
827 message if it is quarantined.
828 New map type "socket" for a trivial query protocol over UNIX domain
829 or TCP sockets (requires compile time option SOCKETMAP).
830 See sendmail/README and doc/op/op.me for details as well as
831 socketmapServer.pl and socketmapClient.pl in contrib.
832 Code donated by Bastiaan Bakker of LifeLine Networks.
833 Define new macro ${client_ptr} which holds the result of the PTR
834 lookup for the client IP address. Note: this is the same
835 as ${client_name} if and only if ${client_resolve} is OK.
836 Add a new macro ${nbadrcpts} which contains the number of bad
837 recipients received so far in a transaction.
838 Call check_relay with the value of ${client_name} to deal with bogus
839 DNS entries. See also FEATURE(`use_client_ptr'). Problem
840 noted by Kai Schlichting.
841 Treat Delivery-Receipt-To: headers the same as Return-Receipt-To:
842 headers (turn them into DSNs). Delivery-Receipt-To: is
843 apparently used by SIMS (Sun Internet Mail System).
844 Enable connection caching for LPC mailers. Patch from Christophe
845 Wolfhugel of France Telecom Oleane.
846 Do not silently truncate long strings in address rewriting.
847 Add support for Cyrus SASL version 2. From Kenneth Murchison of
848 Oceana Matrix Ltd.
849 Add a new AuthOption=m flag to require the use of mechanisms which
850 support mutual authentication. From Kenneth Murchison of
851 Oceana Matrix Ltd.
852 Fix logging of TLS related problems (introduced in 8.12.11).
853 The macros {auth_author} and {auth_authen} are stored in xtext
854 format just like the STARTTLS related macros to avoid
855 problems with parsing them. Problem noted by Pierangelo
856 Masarati of SysNet s.n.c.
857 New option AuthRealm to set the authentication realm that is
858 passed to the Cyrus SASL library. Patch from Gary Mills
859 of the University of Manitoba.
860 Enable AUTH mechanism EXTERNAL if STARTTLS verification was
861 successful, otherwise relaying would be allowed if
862 EXTERNAL is listed in TRUST_AUTH_MECH() and STARTTLS
863 is active.
864 Add basic support for certificate revocation lists. Note: if a
865 CRLFile is specified but the file is unusable, STARTTLS
866 is disabled. Based on patch by Ralf Hornik.
867 Enable workaround for inconsistent Cyrus SASLv1 API for mechanisms
868 DIGEST-MD5 and LOGIN.
869 Write pid to file also if sendmail only acts as persistent queue
870 runner. Proposed by Gary Mills of the University of Manitoba.
871 Keep daemon pid file(s) locked so other daemons don't try to
872 overwrite each other's pid files.
873 Increase maximum length of logfile fields for {cert_subject} and
874 {cert_issuer} from 128 to 256. Requested by Christophe
875 Wolfhugel of France Telecom.
876 Log the TLS verification message on the STARTTLS= log line at
877 LogLevel 12 or higher.
878 If the MSP is invoked with the verbose option (-v) then it will
879 try to use the SMTP command VERB to propagate this option
880 to the MTA which in turn will show the delivery just like
881 it was done before the default 8.12 separation of MSP and
882 MTA. Based on patch by Per Hedeland.
883 If a daemon is refusing connections for longer than the time specified
884 by the new option RejectLogInterval (default: 3 hours) due
885 to high load, log this information. Patch from John Beck
886 of Sun Microsystems.
887 Remove the ability for non-trusted users to raise the value of
888 CheckpointInterval on the command line.
889 New mailer flag 'B' to strip leading backslashes, which is a
890 subset of the functionality of the 's' flag.
891 New mailer flag 'W' to ignore long term host status information.
892 Patch from Juergen Georgi of RUS University of Stuttgart.
893 Enable generic mail filter API (milter) by default. To turn
894 it off, add -DMILTER=0 to the compile time options.
895 An internal SMTP session discard flag was lost after an RSET/HELO/EHLO
896 causing subsequent messages to be sent instead of being
897 discarded. This also caused milter callbacks to be called
898 out of order after the SMTP session was reset.
899 New option RequiresDirfsync to turn off the compile time flag
900 REQUIRES_DIR_FSYNC at runtime. See sendmail/README for
901 further information.
902 New command line option -D logfile to send debug output to
903 the indicated log file instead of stdout.
904 Add Timeout.queuereturn.dsn and Timeout.queuewarn.dsn to control
905 queue return and warning times for delivery status
906 notifications.
907 New queue sort order option: 'n'one for not sorting the queue entries
908 at all.
909 Several more return values for ruleset srv_features have been added
910 to enable/disable certain features in the server per
911 connection. See doc/op/op.me for details.
912 Support for SMTP over SSL (smtps), activated by Modifier=s
913 for DaemonPortOptions.
914 Continue with DNS lookups on ECONNREFUSED and TRY_AGAIN when
915 trying to canonify hostnames. Suggested by Neil Rickert
916 of Northern Illinois University.
917 Add support for a fallback smart host (option FallbackSmartHost) to
918 be tried as a last resort after all other fallbacks. This
919 is designed for sites with partial DNS (e.g., an accurate
920 view of inside the company, but an incomplete view of
921 outside). From John Beck of Sun Microsystems.
922 Enable timeout for STARTTLS even if client does not start the TLS
923 handshake. Based on patch by Andrey J. Melnikoff.
924 Remove deprecated -v option for PH map, use -k instead. Patch from
925 Mark Roth of the University of Illinois at Urbana-Champaign.
926 libphclient is version 1.2.x by default, if version 1.1.x is required
927 then compile with -DNPH_VERSION=10100. Patch from Mark Roth
928 of the University of Illinois at Urbana-Champaign.
929 Add Milter.macros.eom, allowing macros to be sent to milter
930 applications for use in the xxfi_eom() callback.
931 New macro {time} which contains the output of the time(3) function,
932 i.e., the number of seconds since 0 hours, 0 minutes,
933 0 seconds, January 1, 1970, Coordinated Universal Time (UTC).
934 If check_relay sets the reply code to "421" the SMTP server will
935 terminate the SMTP session with a 421 error message.
936 Get rid of dead code that tried to access the environment variable
937 HOSTALIASES.
938 Deprecate the use of ErrorMode=write. To enable this in 8.13
939 compile with -DUSE_TTYPATH=1.
940 Header check rulesets using $>+ (do not strip comments) will get
941 the header value passed in without balancing quotes,
942 parentheses, and angle brackets. Based on patch from
943 Oleg Bulyzhin.
944 Do not complain and fix up unbalanced quotes, parentheses, and
945 angle brackets when reading in rulesets. This allows
946 rules to be written for header checks to catch strings
947 that contain quotes, parentheses, and/or angle brackets.
948 Based on patch from Oleg Bulyzhin.
949 Do not close socket when accept(2) in the daemon encounters
950 some temporary errors like ECONNABORTED.
951 Added list of CA certificates that are used by members of the
952 sendmail consortium, see CACerts.
953 Portability:
954 Two new compile options have been added:
955 HASCLOSEFROM System has closefrom(3).
956 HASFDWALK System has fdwalk(3).
957 Based on patch from John Beck of Sun Microsystems.
958 The Linux kernel version 2.4 series has a broken flock() so
959 change to using fcntl() locking until they can fix
960 it. Be sure to update other sendmail related
961 programs to match locking techniques.
962 New compile time option NEEDINTERRNO which should be set
963 if <errno.h> does not declare errno itself.
964 Support for UNICOS/mk and UNICOS/mp added, some changes for
965 UNICOS. Patches contributed by Aaron Davis and
966 Brian Ginsbach, Cray Inc., and Manu Mahonen of
967 Center for Scientific Computing.
968 Add support for Darwin 7.0/Mac OS X 10.3 (a.k.a. Panther).
969 Extend support to Darwin 7.x/Mac OS X 10.3 (a.k.a. Panther).
970 Remove path from compiler definition for Interix because
971 Interix 3.0 and 3.5 put gcc in different locations.
972 Also use <sys/mkdev.h> to get the correct
973 major()/minor() definitions. Based on feedback
974 from Mark Funkenhauser.
975 CONFIG: Add support for LDAP recursion to the default LDAP searches
976 for maps via new attributes. See the ``USING LDAP FOR
977 ALIASES, MAPS, and CLASSES'' section of cf/README and
978 cf/sendmail.schema for more information.
979 CONFIG: Make sure confTRUSTED_USER is valid even if confRUN_AS_USER
980 is of the form "user:group" when used for submit.mc.
981 Problem noted by Carsten P. Gehrke, patch from Neil Rickert
982 of Northern Illinois University.
983 CONFIG: Add a new access DB value of QUARANTINE:reason which
984 instructs the check_* (except check_compat) to quarantine
985 the message using the given reason.
986 CONFIG: Use "dns -R A" as map type for dnsbl (just as for enhdnsbl)
987 instead of "host" to avoid problem with looking up other
988 DNS records than just A.
989 CONFIG: New option confCONNECTION_RATE_WINDOW_SIZE to define the
990 length of the interval for which the number of incoming
991 connections is maintained.
992 CONFIG: New FEATURE(`ratecontrol') to set the limits for connection
993 rate control for individual hosts or nets.
994 CONFIG: New FEATURE(`conncontrol') to set the limits for the
995 number of open SMTP connections for individual hosts or nets.
996 CONFIG: New FEATURE(`greet_pause') enables open proxy and SMTP
997 slamming protection described above. The feature can
998 take an argument specifying the milliseconds to wait and/or
999 use the access database to look the pause time based on
1000 client hostname, domain, IP address, or subnet.
1001 CONFIG: New FEATURE(`use_client_ptr') to have check_relay use
1002 $&{client_ptr} as its first argument. This is useful for
1003 rejections based on the unverified hostname of client,
1004 which turns on the same behavior as in earlier sendmail
1005 versions when delay_checks was not in use. See also entry
1006 above about check_relay being invoked with ${client_name}.
1007 CONFIG: New option confREJECT_LOG_INTERVAL to specify the log
1008 interval when refusing connections for this long.
1009 CONFIG: Remove quotes around usage of confREJECT_MSG; in some cases
1010 this requires a change in a mc file. Requested by
1011 Ted Roberts of Electronic Data Systems.
1012 CONFIG: New option confAUTH_REALM to set the authentication realm
1013 that is passed to the Cyrus SASL library. Patch from
1014 Gary Mills of the University of Manitoba.
1015 CONFIG: Rename the (internal) classes {tls}/{src} to {Tls}/{Src}
1016 to follow the naming conventions.
1017 CONFIG: Add a third optional argument to local_lmtp to specify
1018 the A= argument.
1019 CONFIG: Remove the f flag from the default mailer flags of
1020 local_lmtp.
1021 CONFIG: New option confREQUIRES_DIR_FSYNC to turn off the compile
1022 time flag REQUIRES_DIR_FSYNC at runtime.
1023 CONFIG: New LOCAL_UUCP macro to insert rules into the generated
1024 cf file at the same place where MAILER(`uucp') inserts
1025 its rules.
1026 CONFIG: New options confTO_QUEUERETURN_DSN and confTO_QUEUEWARN_DSN
1027 to control queue return and warning times for delivery
1028 status notifications.
1029 CONFIG: New option confFALLBACK_SMARTHOST to define FallbackSmartHost.
1030 CONFIG: Add the mc file which has been used to create the cf
1031 file to the end of the cf file when using make in cf/cf/.
1032 Patch from Richard Rognlie.
1033 CONFIG: FEATURE(nodns) has been removed, it was a no-op since 8.9.
1034 Use ServiceSwitchFile to turn off DNS lookups, see
1035 doc/op/op.me.
1036 CONFIG: New option confMILTER_MACROS_EOM (sendmail Milter.macros.eom
1037 option) defines macros to be sent to milter applications for
1038 use in the xxfi_eom() callback.
1039 CONFIG: New option confCRL to specify file which contains
1040 certificate revocations lists.
1041 CONFIG: Add a new value (sendertoo) for the third argument to
1042 FEATURE(`ldap_routing') which will reject the SMTP
1043 MAIL From: command if the sender address doesn't exist
1044 in LDAP. See cf/README for more information.
1045 CONFIG: Add a fifth argument to FEATURE(`ldap_routing') which
1046 instructs the rulesets on whether or not to do a domain
1047 lookup if a full address lookup doesn't match. See cf/README
1048 for more information.
1049 CONFIG: Add a sixth argument to FEATURE(`ldap_routing') which
1050 instructs the rulesets on whether or not to queue the mail
1051 or give an SMTP temporary error if the LDAP server can't be
1052 reached. See cf/README for more information. Based on
1053 patch from Billy Ray Miller of Caterpillar.
1054 CONFIG: Experimental support for MTAMark, see cf/README for details.
1055 CONFIG: New option confMESSAGEID_HEADER to define a different
1056 Message-Id: header format. Patch from Bastiaan Bakker
1057 of LifeLine Networks.
1058 CONTRIB: New version of cidrexpand which uses Net::CIDR. From
1059 Derek J. Balling.
1060 CONTRIB: oldbind.compat.c has been removed due to security problems.
1061 Found by code inspection done by Reasoning, Inc.
1062 DEVTOOLS: Add an example file for devtools/Site/, contributed
1063 by Neil Rickert of Northern Illinois University.
1064 LIBMILTER: Add new function smfi_quarantine() which allows the
1065 filter's EOM routine to quarantine the current message.
1066 Filters which use this function must include the
1067 SMFIF_QUARANTINE flag in the registered smfiDesc structure.
1068 LIBMILTER: If a milter sets the reply code to "421", the SMTP server
1069 will terminate the SMTP session with that error.
1070 LIBMILTER: Upon filter shutdown, libmilter will not remove a
1071 named socket in the file system if it is running as root.
1072 LIBMILTER: Add new function smfi_progress() which allows the filter
1073 to notify the MTA that an EOM operation is still in progress,
1074 resetting the timeout.
1075 LIBMILTER: Add new function smfi_opensocket() which allows the filter
1076 to attempt to establish the interface socket, and detect
1077 failure to do so before calling smfi_main().
1078 LIBMILTER: Add new function smfi_setmlreply() which allows the
1079 filter to return a multi-line SMTP reply.
1080 LIBMILTER: Deal with more temporary errors in accept() by ignoring
1081 them instead of stopping after too many occurred.
1082 Suggested by James Carlson of Sun Microsystems.
1083 LIBMILTER: Fix a descriptor leak in the sample program found in
1084 docs/sample.html. Reported by Dmitry Adamushko.
1085 LIBMILTER: The sample program also needs to use SMFIF_ADDRCPT.
1086 Reported by Carl Byington of 510 Software Group.
1087 LIBMILTER: Document smfi_stop() and smfi_setdbg(). Patches
1088 from Bryan Costales.
1089 LIBMILTER: New compile time option SM_CONF_POLL; define this if
1090 poll(2) should be used instead of select(2).
1091 LIBMILTER: New function smfi_insheader() and related protocol
1092 amendments to support header insertion operations.
1093 MAIL.LOCAL: Add support for hashed mail directories, see
1094 mail.local/README. Contributed by Chris Adams of HiWAAY
1095 Informations Services.
1096 MAILSTATS: Display quarantine message counts.
1097 MAKEMAP: Add new flag -D to specify the comment character to use
1098 instead of '#'.
1099 VACATION: Add new flag -j to auto-respond to messages regardless of
1100 whether or not the recipient is listed in the To: or Cc:
1101 headers.
1102 VACATION: Add new flag -R to specify the envelope sender address
1103 for the auto-response message.
1104 New Files:
1105 CACerts
1106 cf/feature/conncontrol.m4
1107 cf/feature/greet_pause.m4
1108 cf/feature/mtamark.m4
1109 cf/feature/ratecontrol.m4
1110 cf/feature/use_client_ptr.m4
1111 cf/ostype/unicos.m4
1112 cf/ostype/unicosmk.m4
1113 cf/ostype/unicosmp.m4
1114 contrib/socketmapClient.pl
1115 contrib/socketmapServer.pl
1116 devtools/OS/Darwin.7.0
1117 devtools/OS/UNICOS-mk
1118 devtools/OS/UNICOS-mp
1119 devtools/Site/site.config.m4.sample
1120 include/sm/os/sm_os_unicos.h
1121 include/sm/os/sm_os_unicosmk.h
1122 include/sm/os/sm_os_unicosmp.h
1123 libmilter/docs/smfi_insheader.html
1124 libmilter/docs/smfi_progress.html
1125 libmilter/docs/smfi_quarantine.html
1126 libmilter/docs/smfi_setdbg.html
1127 libmilter/docs/smfi_setmlreply.html
1128 libmilter/docs/smfi_stop.html
1129 sendmail/ratectrl.c
1130 Deleted Files:
1131 cf/feature/nodns.m4
1132 contrib/oldbind.compat.c
1133 devtools/OS/CRAYT3E.2.0.x
1134 devtools/OS/CRAYTS.10.0.x
1135 libsm/vsprintf.c
1136 Renamed Files:
1137 devtools/OS/Darwin.7.0 => devtools/OS/Darwin.7.x
1139 8.12.11/8.12.11 2004/01/18
1140 Use QueueFileMode when opening qf files. This error was a
1141 regression in 8.12.10. Problem detected and diagnosed
1142 Lech Szychowski of the Polish Power Grid Company.
1143 Properly count the number of queue runners in a work group and
1144 make sure the total limit of MaxQueueChildren is not
1145 exceeded. Based on patch from Takayuki Yoshizawa of
1146 Techfirm, Inc.
1147 Take care of systems that can generate time values where the
1148 seconds can exceed the usual range of 0 to 59.
1149 Problem noted by Randy Diffenderfer of EDS.
1150 Avoid regeneration of identical queue identifiers by processes
1151 whose process id is the same as that of the initial
1152 sendmail process that was used to start the daemon.
1153 Problem noted by Randy Diffenderfer of EDS.
1154 When a milter invokes smfi_delrcpt() compare the supplied
1155 recipient address also against the printable addresses
1156 of the current list to deal with rewritten addresses.
1157 Based on patch from Sean Hanson of The Asylum.
1158 BadRcptThrottle now also works for addresses which return the
1159 error mailer, e.g., virtusertable entries with the
1160 right hand side error:. Patch from Per Hedeland.
1161 Fix printing of 8 bit characters as octals in log messages.
1162 Based on patch by Andrey J. Melnikoff.
1163 Undo change of algorithm for MIME 7-bit base64 encoding to 8-bit
1164 text that has been introduced in 8.12.3. There are some
1165 examples where the new code fails, but the old code works.
1166 To get the 8.12.3-8.12.10 version, compile sendmail with
1167 -DMIME7TO8_OLD=0. If you have an example of improper
1168 7 to 8 bit conversion please send it to us.
1169 Return normal error code for unknown SMTP commands instead of
1170 the one specified by check_relay or a milter for a
1171 connection. Problem noted by Andrzej Filip.
1172 Some ident responses contain data after the terminating CRLF which
1173 causes sendmail to log "POSSIBLE ATTACK...newline in string".
1174 To avoid this everything after LF is ignored.
1175 If the operating system supports O_EXLOCK and HASFLOCK is set
1176 then a possible race condition for creating qf files
1177 can be avoided. Note: the race condition does not
1178 exist within sendmail, but between sendmail and an
1179 external application that accesses qf files.
1180 Log the proper options name for TLS related mising files for
1181 the CACertPath, CACertFile, and DHParameters options.
1182 Do not split an envelope if it will be discarded, otherwise df
1183 files could be left behind. Problem found by Wolfgang
1184 Breyha.
1185 The use of the environment variables HOME and HOSTALIASES has been
1186 deprecated and will be removed in version 8.13. This only
1187 effects configuration which preserve those variable via the
1188 'E' command in the cf file as sendmail clears out its entire
1189 environment.
1190 Portability:
1191 Add support for Darwin 7.0/Mac OS X 10.3 (a.k.a. Panther).
1192 Solaris 10 has unsetenv(), patch from Craig Mohrman of
1193 Sun Microsystems.
1194 LIBMILTER: Add extra checks in case a broken MTA sends bogus data
1195 to libmilter. Based on code review by Rob Grzywinski.
1196 SMRSH: Properly assemble commands that contain '&&' or '||'.
1197 Problem noted by Eric Lee of Talking Heads.
1198 New Files:
1199 devtools/OS/Darwin.7.0
1201 8.12.10/8.12.10 2003/09/24 (Released: 2003/09/17)
1202 SECURITY: Fix a buffer overflow in address parsing. Problem
1203 detected by Michal Zalewski, patch from Todd C. Miller
1204 of Courtesan Consulting.
1205 Fix a potential buffer overflow in ruleset parsing. This problem
1206 is not exploitable in the default sendmail configuration;
1207 only if non-standard rulesets recipient (2), final (4), or
1208 mailer-specific envelope recipients rulesets are used then
1209 a problem may occur. Problem noted by Timo Sirainen.
1210 Accept 0 (and 0/0) as valid input for set MaxMimeHeaderLength.
1211 Problem noted by Thomas Schulz.
1212 Add several checks to avoid (theoretical) buffer over/underflows.
1213 Properly count message size when performing 7->8 or 8->7 bit MIME
1214 conversions. Problem noted by Werner Wiethege.
1215 Properly compute message priority based on size of entire message,
1216 not just header. Problem noted by Axel Holscher.
1217 Reset SevenBitInput to its configured value between SMTP
1218 transactions for broken clients which do not properly
1219 announce 8 bit data. Problem noted by Stefan Roehrich.
1220 Set {addr_type} during queue runs when processing recipients.
1221 Based on patch from Arne Jansen.
1222 Better error handling in case of (very unlikely) queue-id conflicts.
1223 Perform better error recovery for address parsing, e.g., when
1224 encountering a comment that is too long. Problem noted by
1225 Tanel Kokk, Union Bank of Estonia.
1226 Add ':' to the allowed character list for bogus HELO/EHLO
1227 checking. It is used for IPv6 domain literals. Patch from
1228 Iwaizako Takahiro of FreeBit Co., Ltd.
1229 Reset SASL connection context after a failed authentication attempt.
1230 Based on patch from Rob Siemborski of CMU.
1231 Check Berkeley DB compile time version against run time version
1232 to make sure they match.
1233 Do not attempt AAAA (IPv6) DNS lookups if IPv6 is not enabled
1234 in the kernel.
1235 When a milter adds recipients and one of them causes an error,
1236 do not ignore the other recipients. Problem noted by
1237 Bart Duchesne.
1238 CONFIG: Use specified SMTP error code in mailertable entries which
1239 lack a DSN, i.e., "error:### Text". Problem noted by
1240 Craig Hunt.
1241 CONFIG: Call Local_trust_auth with the correct argument. Patch
1242 from Jerome Borsboom.
1243 CONTRIB: Better handling of temporary filenames for doublebounce.pl
1244 and expn.pl to avoid file overwrites, etc. Patches from
1245 Richard A. Nelson of Debian and Paul Szabo.
1246 MAIL.LOCAL: Fix obscure race condition that could lead to an
1247 improper mailbox truncation if close() fails after the
1248 mailbox is fsync()'ed and a new message is delivered
1249 after the close() and before the truncate().
1250 MAIL.LOCAL: If mail delivery fails, do not leave behind a
1251 stale lockfile (which is ignored after the lock timeout).
1252 Patch from Oleg Bulyzhin of Cronyx Plus LLC.
1253 Portability:
1254 Port for AIX 5.2. Thanks to Steve Hubert of University
1255 of Washington for providing access to a computer
1256 with AIX 5.2.
1257 setreuid(2) works on OpenBSD 3.3. Patch from
1258 Todd C. Miller of Courtesan Consulting.
1259 Allow for custom definition of SMRSH_CMDDIR and SMRSH_PATH
1260 on all operating systems. Patch from Robert Harker
1261 of Harker Systems.
1262 Use strerror(3) on Linux. If this causes a problem on
1263 your Linux distribution, compile with
1264 -DHASSTRERROR=0 and tell sendmail.org about it.
1265 Added Files:
1266 devtools/OS/AIX.5.2
1268 8.12.9/8.12.9 2003/03/29
1269 SECURITY: Fix a buffer overflow in address parsing due to
1270 a char to int conversion problem which is potentially
1271 remotely exploitable. Problem found by Michal Zalewski.
1272 Note: an MTA that is not patched might be vulnerable to
1273 data that it receives from untrusted sources, which
1274 includes DNS.
1275 To provide partial protection to internal, unpatched sendmail MTAs,
1276 8.12.9 changes by default (char)0xff to (char)0x7f in
1277 headers etc. To turn off this conversion compile with
1278 -DALLOW_255 or use the command line option -d82.101.
1279 To provide partial protection for internal, unpatched MTAs that may be
1280 performing 7->8 or 8->7 bit MIME conversions, the default
1281 for MaxMimeHeaderLength has been changed to 2048/1024.
1282 Note: this does have a performance impact, and it only
1283 protects against frontal attacks from the outside.
1284 To disable the checks and return to pre-8.12.9 defaults,
1285 set MaxMimeHeaderLength to 0/0.
1286 Do not complain about -ba when submitting mail. Problem noted
1287 by Derek Wueppelmann.
1288 Fix compilation with Berkeley DB 1.85 on systems that do not
1289 have flock(2). Problem noted by Andy Harper of Kings
1290 College London.
1291 Properly initialize data structure for dns maps to avoid various
1292 errors, e.g., looping processes. Problem noted by
1293 Maurice Makaay of InterNLnet B.V.
1294 CONFIG: Prevent multiple application of rule to add smart host.
1295 Patch from Andrzej Filip.
1296 CONFIG: Fix queue group declaration in MAILER(`usenet').
1297 CONTRIB: buildvirtuser: New option -t builds the virtusertable
1298 text file instead of the database map.
1299 Portability:
1300 Revert wrong change made in 8.12.7 and actually use the
1301 builtin getopt() version in sendmail on Linux.
1302 This can be overridden by using -DSM_CONF_GETOPT=0
1303 in which case the OS supplied version will be used.
1305 8.12.8/8.12.8 2003/02/11
1306 SECURITY: Fix a remote buffer overflow in header parsing by
1307 dropping sender and recipient header comments if the
1308 comments are too long. Problem noted by Mark Dowd
1309 of ISS X-Force.
1310 Fix a potential non-exploitable buffer overflow in parsing the
1311 .cf queue settings and potential buffer underflow in
1312 parsing ident responses. Problem noted by Yichen Xie of
1313 Stanford University Compilation Group.
1314 Fix ETRN #queuegroup command: actually start a queue run for
1315 the selected queue group. Problem noted by Jos Vos.
1316 If MaxMimeHeaderLength is set and a malformed MIME header is fixed,
1317 log the fixup as "Fixed MIME header" instead of "Truncated
1318 MIME header". Problem noted by Ian J Hart.
1319 CONFIG: Fix regression bug in proto.m4 that caused a bogus
1320 error message: "FEATURE() should be before MAILER()".
1321 MAIL.LOCAL: Be more explicit in some error cases, i.e., whether
1322 a mailbox has more than one link or whether it is not
1323 a regular file. Patch from John Beck of Sun Microsystems.
1325 8.12.7/8.12.7 2002/12/29
1326 Properly clean up macros to avoid persistence of session data
1327 across various connections. This could cause session
1328 oriented restrictions, e.g., STARTTLS requirements,
1329 to erroneously allow a connection. Problem noted
1330 by Tim Maletic of Priority Health.
1331 Do not lookup MX records when sorting the MSP queue. The MSP
1332 only needs to relay all mail to the MTA. Problem found
1333 by Gary Mills of the University of Manitoba.
1334 Do not restrict the length of connection information to 100
1335 characters in some logging statements. Problem noted by
1336 Erik Parker.
1337 When converting an enhanced status code to an exit status, use
1338 EX_CONFIG if the first digit is not 2, 4, or 5 or if *.1.5
1339 is used.
1340 Reset macro $x when receiving another MAIL command. Problem
1341 noted by Vlado Potisk of Wigro s.r.o.
1342 Don't bother setting the permissions on the build area statistics
1343 file, the proper permissions will be put on the file at
1344 install time. This fixes installation over NFS for some
1345 users. Problem noted by Martin J. Dellwo of 3-Dimensional
1346 Pharmaceuticals, Inc.
1347 Fix problem of decoding SASLv2 encrypted data. Problem noted by
1348 Alex Deiter of Mobile TeleSystems, Komi Republic.
1349 Log milter socket open errors at MilterLogLevel 1 or higher instead
1350 of 11 or higher.
1351 Print early system errors to the console instead of silently
1352 exiting. Problem noted by James Jong of IBM.
1353 Do not process a queue group if Runners is set to 0, regardless
1354 of whether F=f or sendmail is run in verbose mode (-v).
1355 The use of -qGname will still force queue group "name"
1356 to be run even if Runners=0.
1357 Change the level for logging the fact that a daemon is refusing
1358 connections due to high load from LOG_INFO to LOG_NOTICE.
1359 Patch from John Beck of Sun Microsystems.
1360 Use location information for submit.cf from NetInfo
1361 (/locations/sendmail/submit.cf) if available.
1362 Re-enable ForkEachJob which was lost in 8.12.0. Problem noted by
1363 Neil Rickert of Northern Illinois University.
1364 Make behavior of /canon in debug mode consistent with usage in
1365 rulesets. Patch from Shigeno Kazutaka of IIJ.
1366 Fix a potential memory leak in envelope splitting. Problem noted
1367 by John Majikes of IBM.
1368 Do not try to share an mailbox database LDAP connection across
1369 different processes. Problem noted by Randy Kunkee.
1370 Fix logging for undelivered recipients when the SMTP connection
1371 times out during message collection. Problem noted by Neil
1372 Rickert of Northern Illinois University.
1373 Avoid problems with QueueSortOrder=random due to problems with
1374 qsort() on Solaris (and maybe some other operating systems).
1375 Problem noted by Stephan Schulz of Gruner+Jahr..
1376 If -f "" is specified, set the sender address to "<>". Problem
1377 noted by Matthias Andree.
1378 Fix formatting problem of footnotes for plain text output on some
1379 versions of tmac. Patch from Per Hedeland.
1380 Portability:
1381 Berkeley DB 4.1 support (requires at least 4.1.25).
1382 Some getopt(3) implementations in GNU/Linux are broken
1383 and pass a NULL pointer to an option which requires
1384 an argument, hence the builtin version of
1385 sendmail is used instead. This can be overridden
1386 by using -DSM_CONF_GETOPT=0. Problem noted by
1387 Vlado Potisk of Wigro s.r.o.
1388 Support for nph-1.2.0 from Mark D. Roth of the University
1389 of Illinois at Urbana-Champaign.
1390 Support for FreeBSD 5.0's MAC labeling from Robert Watson
1391 of the TrustedBSD Project.
1392 Support for reading the number of processors on an IRIX
1393 system from Michel Bourget of SGI.
1394 Support for UnixWare 7.1 based on input from Larry Rosenman.
1395 Interix support from Nedelcho Stanev of Atlantic Sky
1396 Corporation.
1397 Update Mac OS X/Darwin portability from Wilfredo Sanchez.
1398 CONFIG: Enforce tls_client restrictions even if delay_checks
1399 is used. Problem noted by Malte Starostik.
1400 CONFIG: Deal with an empty hostname created via bogus
1401 DNS entries to get around access restrictions.
1402 Problem noted by Kai Schlichting.
1403 CONFIG: Use FEATURE(`msp', `[127.0.0.1]') in submit.mc by default
1404 to avoid problems with hostname resolution for localhost
1405 which on many systems does not resolve to 127.0.0.1 (or
1406 ::1 for IPv6). If you do not use IPv4 but only IPv6 then
1407 you need to change submit.mc accordingly, see the comment
1408 in the file itself.
1409 CONFIG: Set confDONT_INIT_GROUPS to True in submit.mc to avoid
1410 error messages from initgroups(3) on AIX 4.3 when sending
1411 mail to non-existing users. Problem noted by Mark Roth of
1412 the University of Illinois at Urbana-Champaign.
1413 CONFIG: Allow local_procmail to override local_lmtp settings.
1414 CONFIG: Always allow connections from 127.0.0.1 or IPv6:::1 to
1415 relay.
1416 CONTRIB: cidrexpand: Deal with the prefix tags that may be included
1417 in access_db.
1418 CONTRIB: New version of doublebounce.pl contributed by Leo Bicknell.
1419 LIBMILTER: On Solaris libmilter may get into an endless loop if
1420 an error in the communication from/to the MTA occurs.
1421 Patch from Gurusamy Sarathy of Active State.
1422 LIBMILTER: Ignore EINTR from sigwait(3) which may happen on Tru64.
1423 Patch from from Jose Marcio Martins da Cruz of Ecole
1424 Nationale Superieure des Mines de Paris.
1425 MAIL.LOCAL: Fix a truncation race condition if the close() on
1426 the mailbox fails. Problem noted by Tomoko Fukuzawa of
1427 Sun Microsystems.
1428 MAIL.LOCAL: Fix a potential file descriptor leak if mkstemp(3)
1429 fails. Patch from John Beck of Sun Microsystems.
1430 SMRSH: SECURITY: Only allow regular files or symbolic links to be
1431 used for a command. Problem noted by David Endler of
1432 iDEFENSE, Inc.
1433 New Files:
1434 devtools/OS/Interix
1435 include/sm/bdb.h
1437 8.12.6/8.12.6 2002/08/26
1438 Do not add the FallbackMXhost (or its MX records) to the list
1439 returned by the bestmx map when -z is used as option.
1440 Otherwise sendmail may act as an open relay if FallbackMXhost
1441 and FEATURE(`relay_based_on_MX') are used together.
1442 Problem noted by Alexander Ignatyev.
1443 Properly split owner- mailing list messages when SuperSafe is set
1444 to interactive. Problem noted by Todd C. Miller of
1445 Courtesan Consulting.
1446 Make sure that an envelope is queued in the selected queue group
1447 even if some recipients are deleted or invalid. Problem
1448 found by Chris Adams of HiWAAY Informations Services.
1449 Do not send a bounce message if a message is completely collected
1450 from the SMTP client. Problem noted by Kari Hurtta of the
1451 Finnish Meteorological Institute.
1452 Provide an 'install-submit-st' target for sendmail/Makefile to
1453 install the MSP statistics file using the file named in the
1454 confMSP_STFILE devtools variable. Requested by Jeff
1455 Earickson of Colby College.
1456 Queue up mail with a temporary error if setusercontext() fails
1457 during a delivery attempt. Patch from Todd C. Miller of
1458 Courtesan Consulting.
1459 Fix handling of base64 encoded client authentication data for
1460 SMTP AUTH. Patch from Elena Slobodnik of life medien GmbH.
1461 Set the OpenLDAP option LDAP_OPT_RESTART so the client libraries
1462 restart interrupted system calls. Problem noted by Luiz
1463 Henrique Duma of BSIOne.
1464 Prevent a segmentation fault if a program passed a NULL envp using
1465 execve().
1466 Document a problem with the counting of queue runners that may
1467 cause delays if MaxQueueChildren is set too low. Problem
1468 noted by Ian Duplisse of Cable Television Laboratories, Inc.
1469 If discarding a message based on a recipient, don't try to look up
1470 the recipient in the mailbox database if F=w is set. This
1471 allows users to discard bogus recipients when dealing with
1472 spammers without tipping them off. Problem noted by Neil
1473 Rickert of Northern Illinois University.
1474 If applying a header check to a header with unstructured data,
1475 e.g., Subject:, then do not run syntax checks that are
1476 supposed for addresses on the header content.
1477 Count messages rejected/discarded via the check_data ruleset.
1478 Portability:
1479 Fix compilation on systems which do not allow simple
1480 copying of the variable argument va_list. Based on
1481 fix from Scott Walters.
1482 Fix NSD map open bug. From Michel Bourget of SGI.
1483 Add some additional IRIX shells to the default shell
1484 list. From Michel Bourget of SGI.
1485 Fix compilation issues on Mac OS X 10.2 (Darwin 6.0).
1486 NETISO support has been dropped.
1487 CONFIG: There was a seemingly minor change in 8.12.4 with respect
1488 to handling entries of IP nets/addresses with RHS REJECT.
1489 These would be rejected in check_rcpt instead of only
1490 being activated in check_relay. This change has been made to
1491 avoid potential bogus temporary rejection of relay attempts
1492 "450 4.7.1 Relaying temporarily denied. Cannot resolve PTR
1493 record for ..." if delay_checks is enabled. However, this
1494 modification causes a change of behavior if an IP net/address
1495 is listed in the access map with REJECT and a host/domain
1496 name is listed with OK or RELAY, hence it has been reversed
1497 such that the behavior of 8.12.3 is restored. The original
1498 change was made on request of Neil Rickert of Northern
1499 Illinois University, the side effect has been found by
1500 Stefaan Van Hoornick.
1501 CONFIG: Make sure delay_checks works even for sender addresses
1502 using the local hostname ($j) or domains in class {P}.
1503 Based on patch from Neil Rickert of Northern Illinois
1504 University.
1505 CONFIG: Fix temporary error handling for LDAP Routing lookups.
1506 Fix from Andrzej Filip.
1507 CONTRIB: New version of etrn.pl script and external man page
1508 (etrn.0) from John Beck of Sun Microsystems.
1509 LIBMILTER: Protect a free(3) operation from being called with a
1510 NULL pointer. Problem noted by Andrey J. Melnikoff.
1511 LIBMILTER: Protect against more interrupted select() calls. Based
1512 on patch from Jose Marcio Martins da Cruz of Ecole Nationale
1513 Superieure des Mines de Paris.
1514 New Files:
1515 contrib/etrn.0
1517 8.12.5/8.12.5 2002/06/25
1518 SECURITY: The DNS map can cause a buffer overflow if the user
1519 specifies a dns map using TXT records in the configuration
1520 file and a rogue DNS server is queried. None of the
1521 sendmail supplied configuration files use this option hence
1522 they are not vulnerable. Problem noted independently by
1523 Joost Pol of PINE Internet and Anton Rang of Sun Microsystems.
1524 Unprintable characters in responses from DNS servers for the DNS
1525 map type are changed to 'X' to avoid potential problems
1526 with rogue DNS servers.
1527 Require a suboption when setting the Milter option. Problem noted
1528 by Bryan Costales.
1529 Do not silently overwrite command line settings for
1530 DirectSubmissionModifiers. Problem noted by Bryan
1531 Costales.
1532 Prevent a segmentation fault when clearing the event list by
1533 turning off alarms before checking if event list is
1534 empty. Problem noted by Allan E Johannesen of Worcester
1535 Polytechnic Institute.
1536 Close a potential race condition in transitioning a memory buffered
1537 file onto disk. From Janani Devarajan of Sun Microsystems.
1538 Portability:
1539 Include paths.h on Linux systems running glibc 2.0 or later
1540 to get the definition for _PATH_SENDMAIL, used by
1541 rmail and vacation. Problem noted by Kevin
1542 A. McGrail of Peregrine Hardware.
1543 NOTE: Linux appears to have broken flock() again. Unless
1544 the bug is fixed before sendmail 8.13 is shipped,
1545 8.13 will change the default locking method to
1546 fcntl() for Linux kernel 2.4 and later. You may
1547 want to do this in 8.12 by compiling with
1548 -DHASFLOCK=0. Be sure to update other sendmail
1549 related programs to match locking techniques.
1551 8.12.4/8.12.4 2002/06/03
1552 SECURITY: Inherent limitations in the UNIX file locking model
1553 can leave systems open to a local denial of service
1554 attack. Be sure to read the "FILE AND MAP PERMISSIONS"
1555 section of the top level README for more information.
1556 Problem noted by lumpy.
1557 Use TempFileMode (defaults to 0600) for the permissions of PidFile
1558 instead of 0644.
1559 Change the default file permissions for new alias database files
1560 from 0644 to 0640. This can be overridden at compile time
1561 by setting the DBMMODE macro.
1562 Fix a potential core dump problem if the environment variable
1563 NAME is set. Problem noted by Beth A. Chaney of
1564 Purdue University.
1565 Expand macros before passing them to libmilter. Problem noted
1566 by Jose Marcio Martins da Cruz of Ecole Nationale
1567 Superieure des Mines de Paris.
1568 Rewind the df (message body) before truncating it when libmilter
1569 replaces the body of a message. Problem noted by Gisle Aas
1570 of Active State.
1571 Change SMTP reply code for AUTH failure from 500 to 535 and the
1572 initial zero-length response to "=" per RFC 2554. Patches
1573 from Kenneth Murchison of Oceana Matrix Ltd.
1574 Do not try to fix broken message/rfc822 MIME attachments by
1575 inserting a MIME-Version: header when MaxMimeHeaderLength
1576 is set and no 8 to 7 bit conversion is needed. Based on
1577 patch from Rehor Petr of ICZ (Czech Republic).
1578 Do not log "did not issue MAIL/EXPN/VRFY/ETRN" if the connection
1579 is rejected anyway. Noted by Chris Loelke.
1580 Mention the submission mail queue in the mailq man page. Requested
1581 by Bill Fenner of AT&T.
1582 Set ${msg_size} macro when reading a message from the command line
1583 or the queue.
1584 Detach from shared memory before dropping privileges back to
1585 user who started sendmail.
1586 If AllowBogusHELO is set to false (default) then also complain if
1587 the argument to HELO/EHLO contains white space. Suggested
1588 by Seva Gluschenko of Cronyx Plus.
1589 Allow symbolicly linked forward files in writable directory paths
1590 if both ForwardFileInUnsafeDirPath and
1591 LinkedForwardFileInWritableDir DontBlameSendmail options
1592 are set. Problem noted by Werner Spirk of
1593 Leibniz-Rechenzentrum Munich.
1594 Portability:
1595 Operating systems that lack the ftruncate() call will not
1596 be able to use Milter's body replacement feature.
1597 This only affects Altos, Maxion, and MPE/iX.
1598 Digital UNIX 5.0 has changed flock() semantics to be
1599 non-compliant. Problem noted by Martin Mokrejs of
1600 Charles University in Prague.
1601 The sparc64 port of FreeBSD 5.0 now supports shared
1602 memory.
1603 CONFIG: FEATURE(`preserve_luser_host') needs the macro map.
1604 Problem noted by Andrzej Filip.
1605 CONFIG: Using 'local:' as a mailertable value with
1606 FEATURE(`preserve_luser_host') and LUSER_RELAY caused mail
1607 to be misaddressed. Problem noted by Andrzej Filip.
1608 CONFIG: Provide a workaround for DNS based rejection lists that
1609 fail for AAAA queries. Problem noted by Chris Boyd.
1610 CONFIG: Accept the machine's hostname as resolvable when checking
1611 the sender address. This allows locally submitted mail to
1612 be accepted if the machine isn't connected to a nameserver
1613 and doesn't have an /etc/hosts entry for itself. Problem
1614 noted by Robert Watson of the TrustedBSD Project.
1615 CONFIG: Use deferred expansion for checking the ${deliveryMode}
1616 macro in case the SMTP VERB command is used. Problem
1617 noted by Bryan Costales.
1618 CONFIG: Avoid a duplicate '@domain' virtusertable lookup if no
1619 matches are found. Fix from Andrzej Filip.
1620 CONFIG: Fix wording in default dnsbl rejection message. Suggested
1621 by Lou Katz of Metron Computerware, Ltd.
1622 CONFIG: Add mailer cyrusv2 for Cyrus V2. Contributed by
1623 Kenneth Murchison of Oceana Matrix Ltd.
1624 CONTRIB: Fix wording in default dnsblaccess rejection message to
1625 match dnsbl change.
1626 DEVTOOLS: Add new option for access mode of statistics file,
1627 confSTMODE, which specifies the permissions when initially
1628 installing the sendmail statistics file.
1629 LIBMILTER: Mark the listening socket as close-on-exec in case
1630 a user's filter starts other applications.
1631 LIBSM: Allow the MBDB initialize, lookup, and/or terminate
1632 functions in SmMbdbTypes to be set to NULL.
1633 MAKEMAP: Change the default file permissions for new databases from
1634 0644 to 0640. This can be overridden at compile time
1635 by setting the DBMMODE macro.
1636 SMRSH: Fix man page bug: replace SMRSH_CMDBIN with SMRSH_CMDDIR.
1637 Problem noted by Dave Alden of Ohio State University.
1638 VACATION: When listing the vacation database (-l), don't show
1639 bogus timestamps for excluded (-x) addresses. Problem
1640 noted by Bryan Costales.
1641 New Files:
1642 cf/mailer/cyrusv2.m4
1644 8.12.3/8.12.3 2002/04/05
1645 NOTICE: In general queue files should not be moved if queue groups
1646 are used. In previous versions this could cause mail
1647 not to be delivered if a queue file is repeatedly moved
1648 by an external process whenever sendmail moved it back
1649 into the right place. Some precautions have been taken
1650 to avoid moving queue files if not really necessary.
1651 sendmail may use links to refer to queue files and it
1652 may store the path of data files in queue files. Hence
1653 queue files should not be moved unless those internals
1654 are understood and the integrity of the files is not
1655 compromised. Problem noted by Anne Bennett of Concordia
1656 University.
1657 If an error mail is created, and the mail is split across different
1658 queue directories, and SuperSafe is off, then write the mail
1659 to disk before splitting it, otherwise an assertion is
1660 triggered. Problem tracked down by Henning Schmiedehausen
1661 of INTERMETA.
1662 Fix possible race condition that could cause sendmail to forget
1663 running queues. Problem noted by Jeff Wasilko of smoe.org.
1664 Handle bogus qf files better without triggering assertions.
1665 Problem noted by Guy Feltin.
1666 Protect against interrupted select() call when enforcing Milter
1667 read and write timeouts. Patch from Gurusamy Sarathy of
1668 ActiveState.
1669 Matching queue IDs with -qI should be case sensitive. Problem
1670 noted by Anne Bennett of Concordia University.
1671 If privileges have been dropped, don't try to change group ID to
1672 the RunAsUser group. Problem noted by Neil Rickert of
1673 Northern Illinois University.
1674 Fix SafeFileEnvironment path munging when the specified path
1675 contains a trailing slash. Based on patch from Dirk Meyer
1676 of Dinoex.
1677 Do not limit sendmail command line length to SM_ARG_MAX (usually
1678 4096). Problem noted by Allan E Johannesen of Worcester
1679 Polytechnic Institute.
1680 Clear full name of sender for each new envelope to avoid bogus data
1681 if several mails are sent in one session and some of them
1682 do not have a From: header. Problem noted by Bas Haakman.
1683 Change timeout check such that cached information about a connection
1684 will be immediately invalid if ConnectionCacheTimeout is zero.
1685 Based on patch from David Burns of Portland State University.
1686 Properly count message size for mailstats during mail collection.
1687 Problem noted by Werner Wiethege.
1688 Log complete response from LMTP delivery agent on failure. Based on
1689 patch from Motonori Nakamura of Kyoto University.
1690 Provide workaround for getopt() implementations that do not catch
1691 missing arguments.
1692 Fix the message size calculation if the message body is replaced by
1693 a milter filter and buffered file I/O is being used.
1694 Problem noted by Sergey Akhapkin of Dr.Web.
1695 Do not honor SIGUSR1 requests if running with extra privileges.
1696 Problem noted by Werner Wiethege.
1697 Prevent a file descriptor leak on mail delivery if the initial
1698 connect fails and DialDelay is set. Patch from Servaas
1699 Vandenberghe of Katholieke Universiteit Leuven.
1700 Properly deal with a case where sendmail is called by root running
1701 a set-user-ID (non-root) program. Problem noted by Jon
1702 Lusky of ISS Atlanta.
1703 Avoid leaving behind stray transcript (xf) files if multiple queue
1704 directories are used and mail is sent to a mailing list
1705 which has an owner- alias. Problem noted by Anne Bennett
1706 of Concordia University.
1707 Fix class map parsing code if optional key is specified. Problem
1708 found by Mario Nigrovic.
1709 The SMTP daemon no longer tries to fix up improperly dot-stuffed
1710 incoming messages. A leading dot is always stripped by the
1711 SMTP receiver regardless of whether or not it is followed by
1712 another dot. Problem noted by Jordan Ritter of darkridge.com.
1713 Fix corruption when doing automatic MIME 7-bit quoted-printable or
1714 base64 encoding to 8-bit text. Problem noted by Mark
1715 Elvers.
1716 Correct the statistics gathered for total number of connections.
1717 Instead of being the exact same number as the total number
1718 of messages (T line in mailstats) it now represents the
1719 total number of TCP connections.
1720 Be more explicit about syntax errors in addresses, especially
1721 non-ASCII characters, and properly create DSNs if necessary.
1722 Problem noted by Leena Heino of the University of Tampere.
1723 Prevent small timeouts from being lost on slow machines if itimers
1724 are used. Problem noted by Suresh Ramasubramanian.
1725 Prevent a race condition on child cleanup for delivery to files.
1726 Problem noted by Fletcher Mattox of the University of
1727 Texas.
1728 Change the SMTP error code for temporary map failures from 421
1729 to 451.
1730 Do not assume that realloc(NULL, size) works on all OS (this was
1731 only done in one place: queue group creation). Based on
1732 patch by Bryan Costales.
1733 Initialize Timeout.iconnect in the code to prevent randomly short
1734 timeouts. Problem noted by Bradley Watts of AT&T Canada.
1735 Do not try to send a second SMTP QUIT command if the remote
1736 responds to a MAIL command with a 421 reply or on I/O
1737 errors. By doing so, the host was marked as having a
1738 temporary problem and other mail destined for that host was
1739 queued for the next queue run. Problem noted by Fletcher
1740 Mattox of the University of Texas, Allan E Johannesen of
1741 Worcester Polytechnic Institute, Larry Greenfield of CMU,
1742 and Neil Rickert of Northern Illinois University.
1743 Ignore error replies from the SMTP QUIT command (including servers
1744 which drop the connection instead of responding to the
1745 command).
1746 Portability:
1747 Check LDAP_API_VERSION to determine if ldap_memfree() is
1748 available.
1749 Define HPUX10 when building on HP-UX 10.X. That platform
1750 now gets the proper _PATH_SENDMAIL and SMRSH_CMDDIR
1751 settings. Patch from Elias Halldor Agustsson of
1752 Skyrr.
1753 Fix dependency building on Mac OS X and Darwin. Problem
1754 noted by John Beck.
1755 Preliminary support for the sparc64 port of FreeBSD 5.0.
1756 Add /sbin/sh as an acceptable user shell on HP-UX. From
1757 Rajesh Somasund of Hewlett-Packard.
1758 CONFIG: Add FEATURE(`authinfo') to allow a separate database for
1759 SMTP AUTH information. This feature was actually added in
1760 8.12.0 but a release note was not included.
1761 CONFIG: Do not bounce mail if FEATURE(`ldap_routing')'s bounce
1762 parameter is set and the LDAP lookup returns a temporary
1763 error.
1764 CONFIG: Honor FEATURE(`relay_hosts_only') when using
1765 FEATURE(`relay_mail_from', `domain'). Problem noted by
1766 Krzysztof Oledzki.
1767 CONFIG: FEATURE(`msp') now disables any type of alias
1768 initialization as aliases are not needed for the MSP.
1769 CONFIG: Allow users to override RELAY_MAILER_ARGS when FEATURE(`msp')
1770 is in use. Patch from Andrzej Filip.
1771 CONFIG: FEATURE(`msp') uses `[localhost]' as default instead of
1772 `localhost' and turns on MX lookups for the SMTP mailers.
1773 This will only have an effect if a parameter is specified,
1774 i.e., an MX lookup will be performed on the hostname unless
1775 it is embedded in square brackets. Problem noted by
1776 Theo Van Dinter of Collective Technologies.
1777 CONFIG: Set confTIME_ZONE to USE_TZ in submit.mc (TimeZoneSpec= in
1778 submit.cf) to use $TZ for time stamps. This is a compromise
1779 to allow for the proper time zone on systems where the
1780 default results in misleading time stamps. That is, syslog
1781 time stamps and Date headers on submitted mail will use the
1782 user's $TZ setting. Problem noted by Mark Roth of the
1783 University of Illinois at Urbana-Champaign, solution proposed
1784 by Neil Rickert of Northern Illinois University.
1785 CONFIG: Mac OS X (Darwin) ships with mail.local as non-set-user-ID
1786 binary. Adjust local mailer flags accordingly. Problem
1787 noted by John Beck.
1788 CONTRIB: Add a warning to qtool.pl to not move queue files around
1789 if queue groups are used.
1790 CONTRIB: buildvirtuser: Add -f option to force rebuild.
1791 CONTRIB: smcontrol.pl: Add -f option to specify control socket.
1792 CONTRIB: smcontrol.pl: Add support for 'memdump' command.
1793 Suggested by Bryan Costales.
1794 DEVTOOLS: Add dependency generation for test programs.
1795 LIBMILTER: Remove conversion of port number for the socket
1796 structure that is passed to xxfi_connect(). Notice:
1797 this fix requires that sendmail and libmilter both have
1798 this change; mixing versions may lead to wrong port
1799 values depending on the endianness of the involved systems.
1800 Problem noted by Gisle Aas of ActiveState.
1801 LIBMILTER: If smfi_setreply() sets a custom reply code of '4XX' but
1802 SMFI_REJECT is returned, ignore the custom reply. Do the
1803 same if '5XX' is used and SMFI_TEMPFAIL is returned.
1804 LIBMILTER: Install include files in ${INCLUDEDIR}/libmilter/ as
1805 required by mfapi.h. Problem noted by Jose Marcio Martins
1806 da Cruz of Ecole Nationale Superieure des Mines de Paris.
1807 LIBSM: Add SM_CONF_LDAP_MEMFREE as a configuration define. Set
1808 this to 1 if your LDAP client libraries include
1809 ldap_memfree().
1810 LIBSMDB: Avoid a file creation race condition for Berkeley DB 1.X
1811 and NDBM on systems with the O_EXLOCK open(2) flag.
1812 SMRSH: Fix compilation problem on some operating systems. Problem
1813 noted by Christian Krackowizer of schuler technodat GmbH.
1814 VACATION: Allow root to operate on user vacation databases. Based
1815 on patch from Greg Couch of the University of California,
1816 San Francisco.
1817 VACATION: Don't ignore -C option. Based on patch by Bryan Costales.
1818 VACATION: Clarify option usage in the man page. Problem noted by
1819 Joe Barbish.
1820 New Files:
1821 libmilter/docs/smfi_setbacklog.html
1823 8.12.2/8.12.2 2002/01/13
1824 Don't complain too much if stdin, stdout, or stderr are missing
1825 at startup, only log an error message.
1826 Fix potential problem if an unknown operation mode (character
1827 following -b) has been specified.
1828 Prevent purgestat from looping even if someone changes the
1829 permissions or owner of hoststatus files. Problem noted
1830 by Kari Hurtta of the Finnish Meteorological Institute.
1831 Properly record dropped connections in persistent host status.
1832 Problem noted by Ulrich Windl of the Universitat
1833 Regensburg.
1834 Remove newlines from recipients read via sendmail -t to prevent
1835 SMTP protocol errors when sending the RCPT command.
1836 Problem noted by William D. Colburn of the New Mexico
1837 Institute of Mining and Technology.
1838 Only log milter body replacements once instead of for each body
1839 chunk sent by a filter. Problem noted by Kari Hurtta of
1840 the Finnish Meteorological Institute.
1841 In 8.12.0 and 8.12.1, the headers were mistakenly not included in
1842 the message size calculation. Problem noted by Kari Hurtta
1843 of the Finnish Meteorological Institute.
1844 Since 8.12 no longer forks at the SMTP MAIL command, the daemon
1845 needs to collect children status to avoid zombie processes.
1846 Problem noted by Chris Adams of HiWAAY Informations Services.
1847 Shut down "nullserver" and ETRN-only connections after 25 bad
1848 commands are issued. This makes it consistent with normal
1849 SMTP connections.
1850 Avoid duplicate logging of milter rejections. Problem noted by
1851 William D. Colburn of the New Mexico Institute of Mining
1852 and Technology.
1853 Error and delay DSNs were being sent to postmaster instead of the
1854 message sender if the sender had used a deprecated RFC822
1855 source route. Problem noted by Kari Hurtta of the Finnish
1856 Meteorological Institute.
1857 Fix FallbackMXhost behavior for temporary errors during address
1858 parsing. Problem noted by Jorg Bielak from Coastal Web
1859 Online.
1860 For systems on which stat(2) does not return a value for st_blksize
1861 that is the "optimal blocksize for I/O" three new compile
1862 time flags are available: SM_IO_MAX_BUF_FILE, SM_IO_MIN_BUF,
1863 and SM_IO_MAX_BUF, which define an upper limit for
1864 regular files, and a lower and upper limit for other file
1865 types, respectively.
1866 Fix a potential deadlock if two events are supposed to occur at
1867 exactly the same time. Problem noted by Valdis Kletnieks
1868 of Virginia Tech.
1869 Perform envelope splitting for aliases listed directly in the
1870 alias file, not just for include/.forward files.
1871 Problem noted by John Beck of Sun Microsystems.
1872 Allow selection of queue group for mailq using -qGgroup.
1873 Based on patch by John Beck of Sun Microsystems.
1874 Make sure cached LDAP connections used my multiple maps in the same
1875 process are closed. Patch from Taso N. Devetzis.
1876 If running as root, allow reading of class files in protected
1877 directories. Patch from Alexander Talos of the University
1878 of Vienna.
1879 Correct a few LDAP related memory leaks. Patch from David Powell
1880 of Sun Microsystems.
1881 Allow specification of an empty realm via the authinfo ruleset.
1882 This is necessary to interoperate as an SMTP AUTH client
1883 with servers that do not support realms when using
1884 CRAM-MD5. Problem noted by Bjoern Voigt of TU Berlin.
1885 Avoid a potential information leak if AUTH PLAIN is used and the
1886 server gets stuck while processing that command. Problem
1887 noted by Chris Adams from HiWAAY Informations Services.
1888 In addition to printing errors when parsing recipients during
1889 command line invocations log them to make it simpler
1890 to understand possible DSNs to postmaster.
1891 Do not use FallbackMXhost on mailers which have the F=0 flag set.
1892 Allow local mailers (F=l) to specify a host for TCP connections
1893 instead of forcing localhost.
1894 Obey ${DESTDIR} for installation of the client mail queue and
1895 submit.cf. Patch from Peter 'Luna' Runestig.
1896 Re-enable support for -M option which was broken in 8.12.1. Problem
1897 noted by Neil Rickert of Northern Illinois University.
1898 If a remote server violates the SMTP standard by unexpectedly
1899 dropping the connection during an SMTP transaction, stop
1900 sending commands. This prevents bogus "Bad file number"
1901 recipient status. Problem noted by Allan E Johannesen of
1902 Worcester Polytechnic Institute.
1903 Do not use a size estimate of 100 for postmaster bounces, it's
1904 almost always too small; do not guess the size at all.
1905 New VENDOR_DEC for Compaq/DEC. Requested by James Seagraves of
1906 Compaq Computer Corp.
1907 Fix DaemonPortOptions IPv6 address parsing such that ::1 works
1908 properly. Problem noted by Valdis Kletnieks of Virginia
1909 Tech.
1910 Portability:
1911 Fix IPv6 network interface probing on HP-UX 11.X. Based on
1912 patch provided by HP.
1913 Mac OS X (aka Darwin) has a broken setreuid() call, but a
1914 working seteuid() call. From Daniel J. Luke.
1915 Use proper type for a 32-bit integer on SINIX. From Ganu
1916 Sachin of Siemens.
1917 Set SM_IO_MIN_BUF (4K) and SM_IO_MAX_BUF (8K) for HP-UX.
1918 Reduce optimization from +O3 to +O2 on HP-UX 11. This
1919 fixes a problem that caused additional bogus
1920 characters to be written to the qf file. Problem
1921 noted by Tapani Tarvainen.
1922 Set LDA_USE_LOCKF by default for UnixWare. Problem noted
1923 by Boyd Lynn Gerber.
1924 Add support for HP MPE/iX. See sendmail/README for port
1925 information. From Mark Bixby of Hewlett-Packard.
1926 New portability defines HASNICE, HASRRESVPORT, USE_ENVIRON,
1927 USE_DOUBLE_FORK, and NEEDLINK. See sendmail/README
1928 for more information. From Mark Bixby of
1929 Hewlett-Packard.
1930 If an OS doesn't have a method of finding free disk space
1931 (SFS_NONE), lie and say there is plenty of space.
1932 From Mark Bixby of Hewlett-Packard.
1933 Add support for AIX 5.1. From Valdis Kletnieks of
1934 Virginia Tech.
1935 Fix man page location for NeXTSTEP. From Hisanori Gogota
1936 of the NTT/InterCommunication Center.
1937 Do not assume that strerror() always returns a string.
1938 Problem noted by John Beck of Sun Microsystems.
1939 CONFIG: Add OSTYPE(freebsd5) for FreeBSD 5.X, which has removed
1940 UUCP from the base operating system. From Mark Murray of
1941 FreeBSD Services, Ltd.
1942 CONFIG: Add OSTYPE(mpeix) and a generic .mc file for HP MPE/iX
1943 systems. From Mark Bixby of Hewlett-Packard.
1944 CONFIG: Add support for selecting a queue group for all mailers.
1945 Based on proposal by Stephen L. Ulmer of the University of
1946 Florida.
1947 CONFIG: Fix error reporting for compat_check.m4. Problem noted by
1948 Altin Waldmann.
1949 CONFIG: Do not override user selections for confRUN_AS_USER and
1950 confTRUSTED_USER in FEATURE(msp). From Mark Bixby of
1951 Hewlett-Packard.
1952 LIBMILTER: Fix bug that prevented the removal of a socket after
1953 libmilter terminated. Problem reported by Andrey V. Pevnev
1954 of MSFU.
1955 LIBMILTER: Fix configuration error that required libsm for linking.
1956 Problem noted by Kari Hurtta of the Finnish Meteorological
1957 Institute.
1958 LIBMILTER: Portability fix for OpenUNIX. Patch from Larry Rosenman.
1959 LIBMILTER: Fix a theoretical memory leak and a possible attempt
1960 to free memory twice.
1961 LIBSM: Fix a potential segmentation violation in the I/O library.
1962 Problem found and analyzed by John Beck and Tim Haley
1963 of Sun Microsystems.
1964 LIBSM: Do not clear the LDAP configuration information when
1965 terminating the mailbox database connection in the LDAP
1966 example code. Problem noted by Nikos Voutsinas of the
1967 University of Athens.
1968 New Files:
1969 cf/cf/generic-mpeix.cf
1970 cf/cf/generic-mpeix.mc
1971 cf/ostype/freebsd5.m4
1972 cf/ostype/mpeix.m4
1973 devtools/OS/AIX.5.1
1974 devtools/OS/MPE-iX
1975 include/sm/os/sm_os_mpeix.h
1976 libsm/mpeix.c
1978 8.12.1/8.12.1 2001/10/01
1979 SECURITY: Check whether dropping group privileges actually succeeded
1980 to avoid possible compromises of the mail system by
1981 supplying bogus data. Add configuration options for
1982 different set*gid() calls to reset saved gid. Problem
1983 found by Michal Zalewski.
1984 PRIVACY: Prevent information leakage when sendmail has extra
1985 privileges by disabling debugging (command line -d flag)
1986 during queue runs and disabling ETRN when sendmail -bs is
1987 used. Suggested by Michal Zalewski.
1988 Avoid memory corruption problems resulting from bogus .cf files.
1989 Problem found by Michal Zalewski.
1990 Set the ${server_addr} macro to name of mailer when doing LMTP
1991 delivery. LMTP systems may offer SMTP Authentication or
1992 STARTTLS causing sendmail to use this macro in rulesets.
1993 If debugging is turned on (-d0.10) print not just the default
1994 values for configuration file and pid file but also the
1995 selected values. Problem noted by Brad Chapman.
1996 Continue dealing with broken nameservers by ignoring SERVFAIL
1997 errors returned on T_AAAA (IPv6) lookups at delivery time
1998 if ResolverOptions=WorkAroundBrokenAAAA is set. Previously
1999 this only applied to hostname canonification. Problem
2000 noted by Bill Fenner of AT&T Research.
2001 Ignore comments in NIS host records when trying to find the
2002 canonical name for a host.
2003 When sendmail has extra privileges, limit mail submission command
2004 line flags (i.e., -G, -h, -F, etc.) to mail submission
2005 operating modes (i.e., -bm, -bs, -bv, etc.). Idea based on
2006 suggestion from Michal Zalewski.
2007 Portability:
2008 AIX: Use `oslevel` if available to determine OS version.
2009 `uname` does not given complete information.
2010 Problem noted by Keith Neufeld of the Cessna
2011 Aircraft Company.
2012 OpenUNIX: Use lockf() for LDA delivery (affects mail.local).
2013 Problem noticed by Boyd Lynn Gerber of ZENEX.
2014 Avoid compiler warnings by not using pointers to pass
2015 integers. Problem noted by Todd C. Miller of
2016 Courtesan Consulting.
2017 CONFIG: Add restrictqrun to PrivacyOptions for the MSP to minimize
2018 problems with potential misconfigurations.
2019 CONFIG: Fix comment showing default value of MaxHopCount. Problem
2020 noted by Greg Robinson of the Defence Science and
2021 Technology Organisation of Australia.
2022 CONFIG: dnsbl: If an argument specifies an error message in case
2023 of temporary lookup failures for DNS based blacklists
2024 then use it.
2025 LIBMILTER: Install mfdef.h, required by mfapi.h. Problem noted by
2026 Richard A. Nelson of Debian.
2027 LIBMILTER: Add __P definition for OS that lack it. Problem noted
2028 by Chris Adams from HiWAAY Informations Services.
2029 LIBSMDB: Fix a lock race condition that affects makemap, praliases,
2030 and vacation.
2031 MAKEMAP: Avoid going beyond the end of an input line if it does
2032 not contain a value for a key. Based on patch from
2033 Mark Bixby from Hewlett-Packard.
2034 New Files:
2035 test/Build
2036 test/Makefile
2037 test/Makefile.m4
2038 test/README
2039 test/t_dropgid.c
2040 test/t_setgid.c
2041 Deleted Files:
2042 include/sm/stdio.h
2043 include/sm/sysstat.h
2045 8.12.0/8.12.0 2001/09/08
2046 *NOTICE*: The default installation of sendmail does not use
2047 set-user-ID root anymore. You need to create a new user and
2048 a new group before installing sendmail (both called smmsp by
2049 default). The installation process tries to install
2050 /etc/mail/submit.cf and creates /var/spool/clientmqueue by
2051 default. Please see sendmail/SECURITY for details.
2052 SECURITY: Check for group and world writable forward and :include:
2053 files. These checks can be turned off if absolutely
2054 necessary using the DontBlameSendmail option and the new
2055 flags:
2056 GroupWritableForwardFile
2057 WorldWritableForwardFile
2058 GroupWritableIncludeFile
2059 WorldWritableIncludeFile
2060 Problem noted by Slawek Zak of Politechnika Warszawska,
2061 SECURITY: Drop privileges when using address test mode. Suggested
2062 by Michal Zalewski of the "Internet for Schools" project
2063 (IdS).
2064 Fixed problem of a global variable being used for a timeout jump
2065 point where the variable could become overused for more than
2066 one timeout concurrently. This erroneous behavior resulted in
2067 a corrupted stack causing a core dump. The timeout is now
2068 handled via libsm. Problem noted by Michael Shapiro,
2069 John Beck, and Carl Smith of Sun Microsystems.
2070 If sendmail is set-group-ID then that group ID is used for permission
2071 checks (group ID of RunAsUser). This allows use of a
2072 set-group-ID sendmail binary for initial message submission
2073 and no set-user-ID root sendmail is needed. For details
2074 see sendmail/SECURITY.
2075 Log a warning if a non-trusted user changes the syslog label.
2076 Based on notice from Bryan Costales of SL3D, Inc.
2077 If sendmail is called for initial delivery, try to use submit.cf
2078 with a fallback of sendmail.cf as configuration file. See
2079 sendmail/SECURITY.
2080 New configuration file option UseMSP to allow group writable queue
2081 files if the group is the same as that of a set-group-ID
2082 sendmail binary. See sendmail/SECURITY.
2083 The .cf file is chosen based on the operation mode. For -bm (default),
2084 -bs, and -t it is submit.cf if it exists for all others it
2085 is sendmail.cf (to be backward compatible). This selection
2086 can be changed by the new option -Ac or -Am (alternative .cf
2087 file: client or mta). See sendmail/SECURITY.
2088 The SMTP server no longer forks on each MAIL command. The ONEX
2089 command has been removed.
2090 Implement SMTP PIPELINING per RFC 2920. It can be turned off
2091 at compile time or per host (ruleset).
2092 New option MailboxDatabase specifies the type of mailbox database
2093 used to look up local mail recipients; the default value
2094 is "pw", which means to use getpwnam(). New mailbox database
2095 types can be added by adding custom code to libsm/mbdb.c.
2096 Queue file names are now 15 characters long, rather than 14 characters
2097 long, to accomodate envelope splitting. File systems with
2098 a 14 character file name length limit are no longer
2099 supported.
2100 Recipient list used for delivery now gets internally ordered by
2101 hostsignature (character string version of MX RR). This orders
2102 recipients for the same MX RR's together meaning smaller
2103 portions of the list need to be scanned (instead of the whole
2104 list) each delivery() pass to determine piggybacking. The
2105 significance of the change is better the larger the recipient
2106 list. Hostsignature is now created during recipient list
2107 creation rather than just before delivery.
2108 Enhancements for more opportunistic piggybacking. Previous
2109 piggybacking (called coincidental) extended to coattail
2110 piggybacking. Rather than complete MX RR matching
2111 (coincidental) piggybacking is done if just the lowest value
2112 preference matches (coattail).
2113 If sendmail receives a temporary error on a RCPT TO: command, it will
2114 try other MX hosts if available.
2115 DefaultAuthInfo can contain a list of mechanisms to be used for
2116 outgoing (client-side) SMTP Authentication.
2117 New modifier 'A' for DaemonPortOptions/ClientPortOptions to disable
2118 AUTH (overrides 'a' modifier in DaemonPortOptions). Based
2119 on patch from Lyndon Nerenberg of Messaging Direct.
2120 Enable AUTH mechanism EXTERNAL if STARTTLS is used.
2121 A new ruleset authinfo can be used to return client side
2122 authentication information for AUTH instead of DefaultAuthInfo.
2123 Therefore the DefaultAuthInfo option is deprecated and will be
2124 removed in future versions.
2125 Accept any SMTP continuation code 3xy for AUTH even though RFC 2554
2126 requires 334. Mercury 1.48 is a known offender.
2127 Add new option AuthMaxBits to limit the overall encryption strength
2128 for the security layer in SMTP AUTH (SASL). See
2129 doc/op/op.me for details.
2130 Introduce new STARTTLS related macros {cn_issuer}, {cn_subject},
2131 {cert_md5} which hold the CN (common name) of the CA that
2132 signed the presented certificate, the CN and the MD5 hash
2133 of the presented certificate, respectively.
2134 New ruleset try_tls to decide whether to try (as client) STARTTLS.
2135 New ruleset srv_features to enable/disable certain features in the
2136 server per connection. See doc/op/op.me for details.
2137 New ruleset tls_rcpt to decide whether to send e-mail to a particular
2138 recipient; useful to decide whether a conection is secure
2139 enough on a per recipient basis.
2140 New option TLSSrvOptions to modify some aspects of the server
2141 for STARTTLS.
2142 If no certificate has been requested, the macro {verify} has the
2143 value "NOT".
2144 New M=S modifier for ClientPortOptions/DaemonPortOptions to turn off
2145 using/offering STARTTLS when delivering/receiving e-mail.
2146 Macro expand filenames/directories for certs and keys in the .cf file.
2147 Proposed by Neil Rickert of Northern Illinois University.
2148 Generate an ephemeral RSA key for a STARTTLS connection only if
2149 really required. This change results in a noticable
2150 performance gains on most machines. Moreover, if shared
2151 memory is in use, reuse the key several times.
2152 Add queue groups which can be used to group queue directories with
2153 the same behavior together. See doc/op/op.me for details.
2154 If the new option FastSplit (defaults to one) has a value greater
2155 than zero, it suppresses the MX lookups on addresses when they
2156 are initially sorted which may result in faster envelope
2157 splitting. If the mail is submitted directly from the
2158 command line, then the value also limits the number of
2159 processes to deliver the envelopes; if more envelopes are
2160 created they are only queued up and must be taken care of
2161 by a queue run.
2162 The check for 'enough disk space' now pays attention to which file
2163 system each queue directory resides in.
2164 All queue runners can be cleanly terminated via SIGTERM to parent.
2165 New option QueueFileMode for the default permissions of queue files.
2166 Add parallel queue runner code. Allows multiple queue runners per work
2167 group (one or more queues in a multi-queue environment
2168 collected together) to process the same work list at the
2169 same time.
2170 Option MaxQueueChildren added to limit the number of concurrently
2171 active queue runner processes.
2172 New option MaxRunnersPerQueue to specify the maximum number of queue
2173 runners per queue group.
2174 Queue member selection by substring pattern matching now allows
2175 the pattern to be negated. For -qI, -qR and -qS it is
2176 permissible for -q!I, -q!R and -q!S to mean remove members
2177 of the queue that match during processing.
2178 New -qp[time] option is similar to -qtime, except that instead of
2179 periodically forking a child to process the queue, a single
2180 child is forked for each queue that sleeps between queue
2181 runs. A SIGHUP signal can be sent to restart this
2182 persistent queue runner.
2183 The SIGHUP signal now restarts a timed queue run process (i.e., a
2184 sendmail process which only runs the queue at an interval:
2185 sendmail -q15m).
2186 New option NiceQueueRun to set the priority of queue runners.
2187 Proposed by Thom O'Connor.
2188 sendmail will run the queue(s) in the background when invoked with -q
2189 unless the new -qf option or -v is used.
2190 QueueSortOrder=Random sorts the queue randomly, which is useful if
2191 several queue runners are started by hand to avoid contention.
2192 QueueSortOrder=Modification sorts the queue by the modification time
2193 of the qf file (older entries first).
2194 Support Deliver By SMTP Service Extension (RFC 2852) which allows
2195 a client to specify an amount of time within which an e-mail
2196 should be delivered. New option DeliverByMin added to set the
2197 minimum amount of time or disable the extension.
2198 Non-printable characters (ASCII: 0-31, 127) in mailbox addresses are
2199 not allowed unless escaped or quoted.
2200 Add support for a generic DNS map. Based on a patch contributed
2201 by Leif Johansson of Stockholm University, which was based on
2202 work by Assar Westerlund of Swedish Institute of Computer
2203 Science, Kista, and Johan Danielsson of Royal Institute of
2204 Technology, Stockholm, Sweden.
2205 MX records will be looked up for FallBackMXhost. To use the old
2206 behavior (no MX lookups), put the name in square brackets.
2207 Proposed by Thom O'Connor.
2208 Use shared memory to store free space of filesystems that are used
2209 for queues, if shared memory is available and if a key is set
2210 via SharedMemoryKey. This minimizes the number of system
2211 calls to check the available space. See doc/op/op.me for
2212 details.
2213 If shared memory is compiled in the option -bP can be used to print
2214 the number of entries in the queue(s).
2215 Enable generic mail filter API (milter). See libmilter/README
2216 and the usual documentation for details.
2217 Remove AutoRebuildAliases option, deprecated since 8.10.
2218 Remove '-U' (initial user submission) command line option as
2219 announced in 8.10.
2220 Remove support for non-standard SMTP command XUSR. Use an MSA instead.
2221 New macro {addr_type} which contains whether the current address is
2222 an envelope sender or recipient address. Suggested by
2223 Neil Rickert of Northern Illinois University.
2224 Two new options for host maps: -d (retransmission timeout),
2225 -r (number of retries).
2226 New option for LDAP maps: the -V<sep> allows you to specify a
2227 separator such that a lookup can return both an attribute
2228 and value separated by the given separator.
2229 Add new operators '%', '|', '&' (modulo, binary or, binary and)
2230 to map class arith.
2231 If DoubleBounceAddress expands to an empty string, ``double bounces''
2232 (errors that occur when sending an error message) are dropped.
2233 New DontBlameSendmail options GroupReadableSASLDBFile and
2234 GroupWritableSASLDBFile to relax requirements for sasldb files.
2235 New DontBlameSendmail options GroupReadableKeyFile to relax
2236 requirements for files containing secret keys. This is
2237 necessary for the MSP if client authentification is used.
2238 Properly handle quoted filenames for class files (to allow for
2239 filenames with spaces).
2240 Honor the resolver option RES_NOALIASES when canonifying hostnames.
2241 Add macros to avoid the reuse of {if_addr} etc:
2242 {if_name_out} hostname of interface of outgoing connection.
2243 {if_addr_out} address of interface of outgoing connection.
2244 {if_family_out} family of interface of outgoing connection.
2245 The latter two are only set if the interface does not belong
2246 to the loopback net.
2247 Add macro {nrcpts} which holds the number of (validated) recipients.
2248 DialDelay option applies only to mailers with flag 'Z'. Patch from
2249 Juergen Georgi of RUS University of Stuttgart.
2250 New Timeout.lhlo,auth,starttls options to limit the time waiting for
2251 an answer to the LMTP LHLO, SMTP AUTH or STARTTLS command.
2252 New Timeout.aconnect option to limit the overall waiting time for
2253 all connections for a single delivery attempt to succeed.
2254 Limit the rate recipients in the SMTP envelope are accepted once
2255 a threshold number of recipients has been rejected (option
2256 BadRcptThrottle). From Gregory A Lundberg of the WU-FTPD
2257 Development Group.
2258 New option DelayLA to delay connections if the load averages
2259 exceeds the specified value. The default of 0 does not
2260 change the previous behavior. A value greater than 0
2261 will cause sendmail to sleep for one second on most
2262 SMTP commands and before accepting connections if that
2263 load average is exceeded.
2264 Use a dynamic (instead of fixed-size) buffer for the list of
2265 recipients that are sent during a connection to a mailer.
2266 This also introduces a new mailer field 'r' which defines
2267 the maximum number of recipients (defaults to 100).
2268 Based on patch by Motonori Nakamura of Kyoto University.
2269 Add new F=1 mailer flag to disable sending of null characters ('\0').
2270 Add new F=2 mailer flag to disable use of ESMTP, using SMTP instead.
2271 The deprecated [TCP] builtin mailer pathname (P=) is gone. Use [IPC]
2272 instead.
2273 IPC is no longer available as first mailer argument (A=) for [IPC]
2274 builtin mailer pathnames. Use TCP instead.
2275 PH map code updated to use the new libphclient API instead of the
2276 old libqiapi library. Contributed by Mark Roth of the
2277 University of Illinois at Urbana-Champaign.
2278 New option DirectSubmissionModifiers to define {daemon_flags}
2279 for direct (command line) submissions.
2280 New M=O modifier for DaemonPortOptions to ignore the socket in
2281 case of failures. Based on patch by Jun-ichiro itojun
2282 Hagino of the KAME Project.
2283 Add Disposition-Notification-To: (RFC 2298) to the list of headers
2284 whose content is rewritten similar to Reply-To:.
2285 Proposed by Andrzej Filip.
2286 Use STARTTLS/AUTH=server/client for logging incoming/outgoing
2287 STARTTLS/AUTH connections; log incoming connections at level
2288 9 or higher. Use AUTH/STARTTLS instead of SASL/TLS for SMTP
2289 AUTH/STARTTLS related logfile entries.
2290 Convert unprintable characters (and backslash) into octal or C format
2291 before logging.
2292 Log recipients if no message is transferred but QUIT/RSET is given
2293 (at LogLevel 9/10 or higher).
2294 Log discarded recipients at LogLevel 10 or higher.
2295 Do not log "did not issue MAIL/EXPN/VRFY/ETRN" for connections
2296 in which most commands are rejected due to check_relay or
2297 TCP Wrappers if the host tries one of those commands anyway.
2298 Change logging format for cloned envelopes to be similar to that for
2299 DSNs ("old id: new id: clone"). Suggested by Ulrich Windl
2300 of the Universitat Regensburg.
2301 Added libsm, a C library of general purpose abstractions including
2302 assertions, tracing and debugging with named debug categories,
2303 exception handling, malloc debugging, resource pools,
2304 portability abstractions, and an extensible buffered I/O
2305 package. It will at some point replace libsmutil.
2306 See libsm/index.html for details.
2307 Fixed most memory leaks in sendmail which were previously taken
2308 care of by fork() and exit().
2309 Use new sm_io*() functions in place of stdio calls. Allows for
2310 more consistent portablity amongst different platforms
2311 new and old (from new libsm).
2312 Common I/O pkg means just one buffering method needed instead of two
2313 ('bf_portable' and 'bf_torek' now just 'bf').
2314 Sfio no longer needed as SASL/TLS code uses sm_io*() API's.
2315 New possible value 'interactive' for SuperSafe which can be used
2316 together with DeliveryMode=interactive is to avoid some disk
2317 synchronizations calls.
2318 Add per-recipient status information to mailq -v output.
2319 T_ANY queries are no longer used by sendmail.
2320 When compiling with "gcc -O -Wall" specify "-DSM_OMIT_BOGUS_WARNINGS"
2321 too (see include/sm/cdefs.h for more info).
2322 sendmail -d now has general support for named debug categories.
2323 See libsm/debug.html and section 3.4 of doc/op/op.me
2324 for details.
2325 Eliminate the "postmaster warning" DSNs on address parsing errors
2326 such as unbalanced angle brackets or parentheses. The DSNs
2327 generated by this condition were illegal (not RFC conform).
2328 Problem noted by Ulrich Windl of the Universitaet Regensburg.
2329 Do not issue a DSN if the ruleset localaddr resolves to the $#error
2330 mailer and the recipient has hence been rejected during the
2331 SMTP dialogue. Problem reported by Larry Greenfield of CMU.
2332 Deal with a case of multiple deliveries on misconfigured systems
2333 that do not have postmaster defined. If an email was sent
2334 from an address to which a DSN cannot be returned and
2335 in which at least one recipient address is non-deliverable,
2336 then that email had been delivered in each queue run.
2337 Problem reported by Matteo HCE Valsasna of Universita
2338 degli Studi dell'Insubria.
2339 The compilation options SMTP, DAEMON, and QUEUE have been removed,
2340 i.e., the corresponding code is always compiled in now.
2341 Log the command line in daemon/queue-run mode at LogLevel 10 and
2342 higher. Suggested by Robert Harker of Harker Systems.
2343 New ResolverOptions setting: WorkAroundBrokenAAAA. When
2344 attempting to canonify a hostname, some broken nameservers
2345 will return SERVFAIL (a temporary failure) on T_AAAA (IPv6)
2346 lookups. If you want to excuse this behavior, use this new
2347 flag. Suggested by Chris Foote of SE Network Access and
2348 Mark Roth of the University of Illinois at
2349 Urbana-Champaign.
2350 Free the memory allocated by getipnodeby{addr,name}(). Problem
2351 noted by Joy Latten of IBM.
2352 ConnectionRateThrottle limits the number of connections per second
2353 to each daemon individually, not the overall number of
2354 connections.
2355 Specifying only "ldap:" as an AliasFile specification will force
2356 sendmail to use a default alias schema as outlined in the
2357 ``USING LDAP FOR ALIASES, MAPS, and CLASSES'' section of
2358 cf/README.
2359 Add a new syntax for the 'F' (file class) sendmail.cf command. If
2360 the first character after the class name is not a '/' or a
2361 '|' and it contains an '@' (e.g., F{X}key@class:spec), the
2362 rest of the line will be parsed as a map lookup. This
2363 allows classes to be filled via a map lookup. See op.me
2364 for more syntax information. Specifically, this can be
2365 used for commands such as VIRTUSER_DOMAIN_FILE() to read
2366 the list of domains via LDAP (see the ``USING LDAP FOR
2367 ALIASES, MAPS, and CLASSES'' section of cf/README for an
2368 example).
2369 The new macro ${sendmailMTACluster} determines the LDAP cluster for
2370 the default schema used in the above two items.
2371 Unless DontBlameSendmail=RunProgramInUnsafeDirPath is set, log a
2372 warning if a program being run from a mailer or file class
2373 (e.g., F|/path/to/prog) is in an unsafe directory path.
2374 Unless DontBlameSendmail=RunWritableProgram is set, log a warning
2375 if a program being run from a mailer or file class
2376 (e.g., F|/path/to/prog) is group or world writable.
2377 Loopback interfaces (e.g., "lo0") are now probed for class {w}
2378 hostnames. Setting DontProbeInterfaces to "loopback"
2379 (without quotes) will disable this and return to the
2380 pre-8.12 behavior of only probing non-loopback interfaces.
2381 Suggested by Bryan Stansell of GNAC.
2382 In accordance with RFC 2821 section 4.1.4, accept multiple
2383 HELO/EHLO commands.
2384 Multiple ClientPortOptions settings are now allowed, one for each
2385 possible protocol family which may be used for outgoing
2386 connections. Restrictions placed on one family only affect
2387 outgoing connections on that particular family. Because of
2388 this change, the ${client_flags} macro is not set until the
2389 connection is established. Based on patch from Motonori
2390 Nakamura of Kyoto University.
2391 PrivacyOptions=restrictexpand instructs sendmail to drop privileges
2392 when the -bv option is given by users who are neither root
2393 nor the TrustedUser so users can not read private aliases,
2394 forwards, or :include: files. It also will override the -v
2395 (verbose) command line option.
2396 If the M=b modifier is set in DaemonPortOptions and the interface
2397 address can't be used for the outgoing connection, fall
2398 back to the settings in ClientPortOptions (if set).
2399 Problem noted by John Beck of Sun Microsystems.
2400 New named config file rule check_data for DATA command (input:
2401 number of recipients). Based on patch from Mark Roth of
2402 the University of Illinois at Urbana-Champaign.
2403 Add support for ETRN queue selection per RFC 1985. The queue group
2404 can be specified using the '#' option character. For
2405 example, 'ETRN #queuegroup'.
2406 If an LDAP server times out or becomes unavailable, close the
2407 current connection and reopen to get to one of the fallback
2408 servers. Patch from Paul Hilchey of the University of
2409 British Columbia.
2410 Make default error number on $#error messages 550 instead of 501
2411 because 501 is not allowed on all commands.
2412 The .cf file option UnsafeGroupWrites is deprecated, it should be
2413 replaced with the settings GroupWritableForwardFileSafe
2414 and GroupWritableIncludeFileSafe in DontBlameSendmail
2415 if required.
2416 The deprecated ldapx map class has been removed. Use the ldap map
2417 class instead.
2418 Any IPv6 addresses used in configuration should be prefixed by the
2419 "IPv6:" tag to identify the address properly. For example,
2420 if you want to add the IPv6 address [2002:c0a8:51d2::23f4] to
2421 class {w}, you would need to add [IPv6:2002:c0a8:51d2::23f4].
2422 Change the $&{opMode} macro if the operation mode changes while the
2423 MTA is running. For example, during a queue run.
2424 Add "use_inet6" as a new ResolverOptions flag to control the
2425 RES_USE_INET6 resolver option. Based on patch from Rick
2426 Nelson of IBM.
2427 The maximum number of commands before the MTA slows down when too
2428 many "light weight" commands have been received are now
2429 configurable during compile time. The current values and
2430 their defaults are:
2431 MAXBADCOMMANDS 25 unknown commands
2432 MAXNOOPCOMMANDS 20 NOOP, VERB, ONEX, XUSR
2433 MAXHELOCOMMANDS 3 HELO, EHLO
2434 MAXVRFYCOMMANDS 6 VRFY, EXPN
2435 MAXETRNCOMMANDS 8 ETRN
2436 Setting a value to 0 disables the check. Patch from Bryan
2437 Costales of SL3D, Inc.
2438 The header syntax H?${MyMacro}?X-My-Header: now not only checks if
2439 ${MyMacro} is defined but also that it is not empty.
2440 Properly quote usernames with special characters if they are used
2441 in headers. Problem noted by Kari Hurtta of the Finnish
2442 Meteorological Institute.
2443 Be sure to include the proper Final-Recipient: DSN header in bounce
2444 messages for messages for mailing list expanded addresses
2445 which are not delivered on the initial attempt.
2446 Do not treat errors as sticky when doing delivery via LMTP after
2447 the final dot has been sent to avoid affecting future
2448 deliveries. Problem reported by Larry Greenfield of CMU.
2449 New compile time flag REQUIRES_DIR_FSYNC which turns on support for
2450 file systems that require to call fsync() for a directory
2451 if the meta-data in it has been changed. This should be
2452 set at least for ReiserFS; it is enabled by default for Linux.
2453 See sendmail/README for further information.
2454 Avoid file locking deadlock when updating the statistics file if
2455 sendmail is signaled to terminate. Problem noted by
2456 Christophe Wolfhugel of France Telecom.
2457 Set the $c macro (hop count) as it is being set instead of when the
2458 envelope is initialized. Problem noted by Kari Hurtta of
2459 the Finnish Meteorological Institute.
2460 Properly count recipients for DeliveryMode defer and queue. Fix
2461 from Peter A. Friend of EarthLink.
2462 Treat invalid hesiod lookups as permanent errors instead of
2463 temporary errors. Problem noted by Russell McOrmond of
2464 flora.ca.
2465 Portability:
2466 Remove support for AIX 2, which supports only 14 character
2467 filenames and is outdated anyway. Suggested by
2468 Valdis Kletnieks of Virginia Tech.
2469 Change several settings for Irix 6: remove confSBINDIR,
2470 i.e., use default /usr/sbin, change owner/group
2471 of man pages and user-executable to root/sys, set
2472 optimization limit to 0 (unlimited). Based on patch
2473 from Ayamura Kikuchi, M.D, and proposal from Kari
2474 Hurtta of the Finnish Meteorological Institute.
2475 Do not assume LDAP support is installed by default under
2476 Solaris 8 and later.
2477 Add support for OpenUNIX.
2478 CONFIG: Increment version number of config file to 10.
2479 CONFIG: Add an install target and a README file in cf/cf.
2480 CONFIG: Don't accept addresses of the form a@b@, a@b@c, a@[b]c, etc.
2481 CONFIG: Reject empty recipient addresses (in check_rcpt).
2482 CONFIG: The access map uses an option of -T<TMPF> to deal with
2483 temporary lookup failures.
2484 CONFIG: New value for access map: SKIP, which causes the default
2485 action to be taken by aborting the search for domain names
2486 or IP nets.
2487 CONFIG: check_rcpt can deal with TEMPFAIL for either recipient or
2488 relay address as long as the other part allows the email
2489 to get through.
2490 CONFIG: Entries for virtusertable can make use of a third parameter
2491 "%3" which contains "+detail" of a wildcard match, i.e., an
2492 entry like user+*@domain. This allows handling of details by
2493 using %1%3 as the RHS. Additionally, a "+" wildcard has been
2494 introduced to match only non-empty details of addresses.
2495 CONFIG: Numbers for rulesets used by MAILERs have been removed
2496 and hence there is no required order within the MAILER
2497 section anymore except for MAILER(`uucp') which must come
2498 after MAILER(`smtp') if uucp-dom and uucp-uudom are used.
2499 CONFIG: Hosts listed in the generics domain class {G}
2500 (GENERICS_DOMAIN() and GENERICS_DOMAIN_FILE()) are treated
2501 as canonical. Suggested by Per Hedeland of Ericsson.
2502 CONFIG: If FEATURE(`delay_checks') is used, make sure that a lookup
2503 in the access map which returns OK or RELAY actually
2504 terminates check_* ruleset checking.
2505 CONFIG: New tag TLS_Rcpt: for access map to be used by ruleset
2506 tls_rcpt, see cf/README for details.
2507 CONFIG: Change format of Received: header line which reveals whether
2508 STARTTLS has been used to "(version=${tls_version}
2509 cipher=${cipher} bits=${cipher_bits} verify=${verify})".
2510 CONFIG: Use "Spam:" as tag for lookups for FEATURE(`delay_checks')
2511 options friends/haters instead of "To:" and enable
2512 specification of whole domains instead of just users.
2513 Notice: this change is not backward compatible.
2514 Suggested by Chris Adams from HiWAAY Informations Services.
2515 CONFIG: Allow for local extensions for most new rulesets, see
2516 cf/README for details.
2517 CONFIG: New FEATURE(`lookupdotdomain') to lookup also .domain in
2518 the access map. Proposed by Randall Winchester of the
2519 University of Maryland.
2520 CONFIG: New FEATURE(`local_no_masquerade') to avoid masquerading for
2521 the local mailer. Proposed by Ingo Brueckl of Wupper Online.
2522 CONFIG: confRELAY_MSG/confREJECT_MSG can override the default
2523 messages for an unauthorized relaying attempt/for access
2524 map entries with RHS REJECT, respectively.
2525 CONFIG: FEATURE(`always_add_domain') takes an optional argument
2526 to specify another domain to be added instead of the local one.
2527 Suggested by Richard H. Gumpertz of Computer Problem
2528 Solving.
2529 CONFIG: confAUTH_OPTIONS allows setting of Cyrus-SASL specific
2530 options, see doc/op/op.me for details.
2531 CONFIG: confAUTH_MAX_BITS sets the maximum encryption strength for
2532 the security layer in SMTP AUTH (SASL).
2533 CONFIG: If Local_localaddr resolves to $#ok, localaddr is terminated
2534 immediately.
2535 CONFIG: FEATURE(`enhdnsbl') is an enhanced version of dnsbl which
2536 allows checking of the return values of the DNS lookups.
2537 See cf/README for details.
2538 CONFIG: FEATURE(`dnsbl') allows now to specify the behavior for
2539 temporary lookup failures.
2540 CONFIG: New option confDELIVER_BY_MIN to specify minimum time for
2541 Deliver By (RFC 2852) or to turn off the extension.
2542 CONFIG: New option confSHARED_MEMORY_KEY to set the key for shared
2543 memory use.
2544 CONFIG: New FEATURE(`compat_check') to look up a key consisting
2545 of the sender and the recipient address delimited by the
2546 string "<@>", e.g., sender@sdomain<@>recipient@rdomain,
2547 in the access map. Based on code contributed by Mathias
2548 Koerber of Singapore Telecommunications Ltd.
2549 CONFIG: Add EXPOSED_USER_FILE() command to allow an exposed user
2550 file. Suggested by John Beck of Sun Microsystems.
2551 CONFIG: Don't use MAILER-DAEMON for error messages delivered
2552 via LMTP. Problem reported by Larry Greenfield of CMU.
2553 CONFIG: New FEATURE(`preserve_luser_host') to preserve the name of
2554 the recipient host if LUSER_RELAY is used.
2555 CONFIG: New FEATURE(`preserve_local_plus_detail') to preserve the
2556 +detail portion of the address when passing address to
2557 local delivery agent. Disables alias and .forward +detail
2558 stripping. Only use if LDA supports this.
2559 CONFIG: Removed deprecated FEATURE(`rbl').
2560 CONFIG: Add LDAPROUTE_EQUIVALENT() and LDAPROUTE_EQUIVALENT_FILE()
2561 which allow you to specify 'equivalent' hosts for LDAP
2562 Routing lookups. Equivalent hostnames are replaced by the
2563 masquerade domain name for lookups. See cf/README for
2564 additional details.
2565 CONFIG: Add a fourth argument to FEATURE(`ldap_routing') which
2566 instructs the rulesets on what to do if the address being
2567 looked up has +detail information. See cf/README for more
2568 information.
2569 CONFIG: When chosing a new destination via LDAP Routing, also look
2570 up the new routing address/host in the mailertable. Based
2571 on patch from Don Badrak of the United States Census Bureau.
2572 CONFIG: Do not reject the SMTP Mail from: command if LDAP Routing
2573 is in use and the bounce option is enabled. Only reject
2574 recipients as user unknown.
2575 CONFIG: Provide LDAP support for the remaining database map
2576 features. See the ``USING LDAP FOR ALIASES AND MAPS''
2577 section of cf/README for more information.
2578 CONFIG: Add confLDAP_CLUSTER which defines the ${sendmailMTACluster}
2579 macro used for LDAP searches as described above in ``USING
2580 LDAP FOR ALIASES, MAPS, AND CLASSES''.
2581 CONFIG: confCLIENT_OPTIONS has been replaced by CLIENT_OPTIONS(),
2582 which takes the options as argument and can be used
2583 multiple times; see cf/README for details.
2584 CONFIG: Add configuration macros for new options:
2585 confBAD_RCPT_THROTTLE BadRcptThrottle
2586 confDIRECT_SUBMISSION_MODIFIERS DirectSubmissionModifiers
2587 confMAILBOX_DATABASE MailboxDatabase
2588 confMAX_QUEUE_CHILDREN MaxQueueChildren
2589 confMAX_RUNNERS_PER_QUEUE MaxRunnersPerQueue
2590 confNICE_QUEUE_RUN NiceQueueRun
2591 confQUEUE_FILE_MODE QueueFileMode
2592 confFAST_SPLIT FastSplit
2593 confTLS_SRV_OPTIONS TLSSrvOptions
2594 See above (and related documentation) for further information.
2595 CONFIG: Add configuration variables for new timeout options:
2596 confTO_ACONNECT Timeout.aconnect
2597 confTO_AUTH Timeout.auth
2598 confTO_LHLO Timeout.lhlo
2599 confTO_STARTTLS Timeout.starttls
2600 CONFIG: Add configuration macros for mail filter API:
2601 confINPUT_MAIL_FILTERS InputMailFilters
2602 confMILTER_LOG_LEVEL Milter.LogLevel
2603 confMILTER_MACROS_CONNECT Milter.macros.connect
2604 confMILTER_MACROS_HELO Milter.macros.helo
2605 confMILTER_MACROS_ENVFROM Milter.macros.envfrom
2606 confMILTER_MACROS_ENVRCPT Milter.macros.envrcpt
2607 Mail filters can be defined via INPUT_MAIL_FILTER() and
2608 MAIL_FILTER(). See libmilter/README, cf/README, and
2609 doc/op/op.me for details.
2610 CONFIG: Add support for accepting temporarily unresolvable domains.
2611 See cf/README for details. Based on patch by Motonori
2612 Nakamura of Kyoto University.
2613 CONFIG: confDEQUOTE_OPTS can be used to specify options for the
2614 dequote map.
2615 CONFIG: New macro QUEUE_GROUP() to define queue groups.
2616 CONFIG: New FEATURE(`queuegroup') to select a queue group based
2617 on the full e-mail address or the domain of the recipient.
2618 CONFIG: Any IPv6 addresses used in configuration should be prefixed
2619 by the "IPv6:" tag to identify the address properly. For
2620 example, if you want to use the IPv6 address
2621 2002:c0a8:51d2::23f4 in the access database, you would need
2622 to use IPv6:2002:c0a8:51d2::23f4 on the left hand side.
2623 This affects the access database as well as the
2624 relay-domains and local-host-names files.
2625 CONFIG: OSTYPE(aux) has been renamed to OSTYPE(a-ux).
2626 CONFIG: Avoid expansion of m4 keywords in SMART_HOST.
2627 CONFIG: Add MASQUERADE_EXCEPTION_FILE() for reading masquerading
2628 exceptions from a file. Suggested by Trey Breckenridge of
2629 Mississippi State University.
2630 CONFIG: Add LOCAL_USER_FILE() for reading local users
2631 (LOCAL_USER() -- $={L}) entries from a file.
2632 CONTRIB: dnsblaccess.m4 is a further enhanced version of enhdnsbl.m4
2633 which allows to lookup error codes in the access map.
2634 Contributed by Neil Rickert of Northern Illinois University.
2635 DEVTOOLS: Add new options for installation of include and library
2636 files: confINCGRP, confINCMODE, confINCOWN, confLIBGRP,
2637 confLIBMODE, confLIBOWN.
2638 DEVTOOLS: Add new option confDONT_INSTALL_CATMAN to turn off
2639 installation of the the formatted man pages on operating
2640 systems which don't include cat directories.
2641 EDITMAP: New program for editing maps as supplement to makemap.
2642 MAIL.LOCAL: Mail.local now uses the libsm mbdb package to look up
2643 local mail recipients. New option -D mbdb specifies the
2644 mailbox database type.
2645 MAIL.LOCAL: New option "-h filename" which instructs mail.local to
2646 deliver the mail to the named file in the user's home
2647 directory instead of the system mail spool area. Based on
2648 patch from Doug Hardie of the Los Angeles Free-Net.
2649 MAILSTATS: New command line option -P which acts the same as -p but
2650 doesn't truncate the statistics file.
2651 MAKEMAP: Add new option -t to specify a different delimiter
2652 instead of white space.
2653 RMAIL: Invoke sendmail with '-G' to indicate this is a gateway
2654 submission. Problem noted by Kari Hurtta of the Finnish
2655 Meteorological Institute.
2656 SMRSH: Use the vendor supplied directory on FreeBSD 3.3 and later.
2657 VACATION: Change Auto-Submitted: header value from auto-generated to
2658 auto-replied. From Kenneth Murchison of Oceana Matrix Ltd.
2659 VACATION: New option -d to send error/debug messages to stdout
2660 instead of syslog.
2661 VACATION: New option -U which prevents the attempt to lookup login
2662 in the password file. The -f and -m options must be used
2663 to specify the database and message file since there is no
2664 home directory for the default settings for these options.
2665 VACATION: Vacation now uses the libsm mbdb package to look up
2666 local mail recipients; it reads the MailboxDatabase option
2667 from the sendmail.cf file. New option -C cffile which
2668 specifies the path of the sendmail.cf file.
2669 New Directories:
2670 libmilter/docs
2671 New Files:
2672 cf/cf/README
2673 cf/cf/submit.cf
2674 cf/cf/submit.mc
2675 cf/feature/authinfo.m4
2676 cf/feature/compat_check.m4
2677 cf/feature/enhdnsbl.m4
2678 cf/feature/msp.m4
2679 cf/feature/local_no_masquerade.m4
2680 cf/feature/lookupdotdomain.m4
2681 cf/feature/preserve_luser_host.m4
2682 cf/feature/preserve_local_plus_detail.m4
2683 cf/feature/queuegroup.m4
2684 cf/sendmail.schema
2685 contrib/dnsblaccess.m4
2686 devtools/M4/UNIX/sm-test.m4
2687 devtools/OS/OpenUNIX.5.i386
2688 editmap/*
2689 include/sm/*
2690 libsm/*
2691 libsmutil/cf.c
2692 libsmutil/err.c
2693 sendmail/SECURITY
2694 sendmail/TUNING
2695 sendmail/bf.c
2696 sendmail/bf.h
2697 sendmail/sasl.c
2698 sendmail/sm_resolve.c
2699 sendmail/sm_resolve.h
2700 sendmail/tls.c
2701 Deleted Files:
2702 cf/feature/rbl.m4
2703 cf/ostype/aix2.m4
2704 devtools/OS/AIX.2
2705 include/sendmail/cdefs.h
2706 include/sendmail/errstring.h
2707 include/sendmail/useful.h
2708 libsmutil/errstring.c
2709 sendmail/bf_portable.c
2710 sendmail/bf_portable.h
2711 sendmail/bf_torek.c
2712 sendmail/bf_torek.h
2713 sendmail/clock.c
2714 Renamed Files:
2715 cf/cf/generic-solaris2.mc => cf/cf/generic-solaris.mc
2716 cf/cf/generic-solaris2.cf => cf/cf/generic-solaris.cf
2717 cf/ostype/aux.m4 => cf/ostype/a-ux.m4
2719 8.11.7/8.11.7 2003/03/29
2720 SECURITY: Fix a remote buffer overflow in header parsing by
2721 dropping sender and recipient header comments if the
2722 comments are too long. Problem noted by Mark Dowd
2723 of ISS X-Force.
2724 SECURITY: Fix a buffer overflow in address parsing due to
2725 a char to int conversion problem which is potentially
2726 remotely exploitable. Problem found by Michal Zalewski.
2727 Note: an MTA that is not patched might be vulnerable to
2728 data that it receives from untrusted sources, which
2729 includes DNS.
2730 To provide partial protection to internal, unpatched sendmail MTAs,
2731 8.11.7 changes by default (char)0xff to (char)0x7f in
2732 headers etc. To turn off this conversion compile with
2733 -DALLOW_255 or use the command line option -d82.101.
2734 To provide partial protection for internal, unpatched MTAs that may be
2735 performing 7->8 or 8->7 bit MIME conversions, the default
2736 for MaxMimeHeaderLength has been changed to 2048/1024.
2737 Note: this does have a performance impact, and it only
2738 protects against frontal attacks from the outside.
2739 To disable the checks and return to pre-8.11.7 defaults,
2740 set MaxMimeHeaderLength to 0/0.
2741 Properly clean up macros to avoid persistence of session data
2742 across various connections. This could cause session
2743 oriented restrictions, e.g., STARTTLS requirements,
2744 to erroneously allow a connection. Problem noted
2745 by Tim Maletic of Priority Health.
2746 Ignore comments in NIS host records when trying to find the
2747 canonical name for a host.
2748 Fix a memory leak when closing Hesiod maps.
2749 Set ${msg_size} macro when reading a message from the command line
2750 or the queue.
2751 Prevent a segmentation fault when clearing the event list by
2752 turning off alarms before checking if event list is
2753 empty. Problem noted by Allan E Johannesen of Worcester
2754 Polytechnic Institute.
2755 Fix a potential core dump problem if the environment variable
2756 NAME is set. Problem noted by Beth A. Chaney of
2757 Purdue University.
2758 Prevent a race condition on child cleanup for delivery to files.
2759 Problem noted by Fletcher Mattox of the University of
2760 Texas.
2761 CONFIG: Do not bounce mail if FEATURE(`ldap_routing')'s bounce
2762 parameter is set and the LDAP lookup returns a temporary
2763 error.
2764 CONFIG: Fix a syntax error in the try_tls ruleset if
2765 FEATURE(`access_db') is not enabled.
2766 LIBSMDB: Fix a lock race condition that affects makemap, praliases,
2767 and vacation.
2768 LIBSMDB: Avoid a file creation race condition for Berkeley DB 1.X
2769 and NDBM on systems with the O_EXLOCK open(2) flag.
2770 MAKEMAP: Avoid going beyond the end of an input line if it does
2771 not contain a value for a key. Based on patch from
2772 Mark Bixby from Hewlett-Packard.
2773 MAIL.LOCAL: Fix a truncation race condition if the close() on
2774 the mailbox fails. Problem noted by Tomoko Fukuzawa of
2775 Sun Microsystems.
2776 SMRSH: SECURITY: Only allow regular files or symbolic links to be
2777 used for a command. Problem noted by David Endler of
2778 iDEFENSE, Inc.
2780 8.11.6/8.11.6 2001/08/20
2781 SECURITY: Fix a possible memory access violation when specifying
2782 out-of-bounds debug parameters. Problem detected by
2783 Cade Cairns of SecurityFocus.
2784 Avoid leaking recipient information in unrelated DSNs. This could
2785 happen if a connection is aborted, several mails had been
2786 scheduled for delivery via that connection, and the timeout
2787 is reached such that several DSNs are sent next. Problem
2788 noted by Dileepan Moorkanat of Hewlett-Packard.
2789 Fix a possible segmentation violation when specifying too many
2790 wildcard operators in a rule. Problem detected by
2791 Werner Wiethege.
2792 Avoid a segmentation fault on non-matching Hesiod lookups. Problem
2793 noted by Russell McOrmond of flora.ca
2795 8.11.5/8.11.5 2001/07/31
2796 Fix a possible race condition when sending a HUP signal to restart
2797 the daemon. This could terminate the current process without
2798 starting a new daemon. Problem reported by Wolfgang Breyha
2799 of SE Netway Communications.
2800 Only apply MaxHeadersLength when receiving a message via SMTP or
2801 the command line. Problem noted by Andrey J. Melnikoff.
2802 When finding the system's local hostname on an IPv6-enabled system
2803 which doesn't have any IPv6 interface addresses, fall back
2804 to looking up only IPv4 addresses. Problem noted by Tim
2805 Bosserman of EarthLink.
2806 When commands were being rejected due to check_relay or TCP
2807 Wrappers, the ETRN command was not giving a response.
2808 Incoming IPv4 connections on a Family=inet6 daemon (using
2809 IPv4-mapped addresses) were incorrectly labeled as "may be
2810 forged". Problem noted by Per Steinar Iversen of Oslo
2811 University College.
2812 Shutdown address test mode cleanly on SIGTERM. Problem noted by
2813 Greg King of the OAO Corporation.
2814 Restore the original real uid (changed in main() to prevent
2815 out of band signals) before invoking a delivery agent.
2816 Some delivery agents use this for the "From " envelope
2817 "header". Problem noted by Leslie Carroll of the
2818 University at Albany.
2819 Mark closed file descriptors properly to avoid reuse. Problem
2820 noted by Jeff Bronson of J.D. Bronson, Inc.
2821 Setting Timeout options on the command line will also override
2822 their sub-suboptions in the .cf file, e.g., -O
2823 Timeout.queuereturn=2d will set all queuereturn timeouts
2824 to 2 days. Problem noted by Roger B.A. Klorese.
2825 Portability:
2826 BSD/OS has a broken setreuid() implementation. Problem
2827 noted by Vernon Schryver of Rhyolite Software.
2828 BSD/OS has /dev/urandom(4) (as of version 4.1/199910 ?).
2829 Noted by Vernon Schryver of Rhyolite Software.
2830 BSD/OS has fchown(2). Noted by Dave Yadallee of Netline
2831 2000 Internet Solutions Inc.
2832 Solaris 2.X and later have strerror(3). From Sebastian
2833 Hagedorn of Cologne University.
2834 CONFIG: Fix parsing for IPv6 domain literals in addresses
2835 (user@[IPv6:address]). Problem noted by Liyuan Zhou.
2837 8.11.4/8.11.4 2001/05/28
2838 Clean up signal handling routines to reduce the chances of heap
2839 corruption and other potential race conditions.
2840 Terminating and restarting the daemon may not be
2841 instantaneous due to this change. Also, non-root users can
2842 no longer send out-of-band signals. Problem reported by
2843 Michal Zalewski of BindView.
2844 If LogLevel is greater than 9 and SASL fails to negotiate an
2845 encryption layer, avoid core dump logging the encryption
2846 strength. Problem noted by Miroslav Zubcic of Crol.
2847 If a server offers "AUTH=" and "AUTH " and the list of mechanisms is
2848 different in those two lines, sendmail might not have
2849 recognized (and used) all of the offered mechanisms.
2850 Fix an IP address lookup problem on Solaris 2.0 - 2.3. Patch
2851 from Kenji Miyake.
2852 This time, really don't use the .. directory when expanding
2853 QueueDirectory wildcards.
2854 If a process is interrupted while closing a map, don't try to close
2855 the same map again while exiting.
2856 Allow local mailers (F=l) to contact remote hosts (e.g., via
2857 LMTP). Problem noted by Norbert Klasen of the University
2858 of Tuebingen.
2859 If Timeout.QueueReturn was set to a value less the time it took
2860 to write a new queue file (e.g., 0 seconds), the bounce
2861 message would be lost. Problem noted by Lorraine L Goff of
2862 Oklahoma State University.
2863 Pass map argument vector into map rewriting engine for the regex
2864 and prog map types. Problem noted by Stephen Gildea of
2865 InTouch Systems, Inc.
2866 When closing an LDAP map due to a temporary error, close all of the
2867 other LDAP maps which share the original map's connection
2868 to the LDAP server. Patch from Victor Duchovni of
2869 Morgan Stanley.
2870 To detect changes of NDBM aliases files check the timestamp of the
2871 .pag file instead of the .dir file. Problem noted by Neil
2872 Rickert of Northern Illinois University.
2873 Don't treat temporary hesiod lookup failures as permanent. Patch
2874 from Werner Wiethege.
2875 If ClientPortOptions is set, make sure to create the outgoing socket
2876 with the family set in that option. Patch from Sean Farley.
2877 Avoid a segmentation fault trying to dereference a NULL pointer
2878 when logging a MaxHopCount exceeded error with an empty
2879 recipient list. Problem noted by Chris Adams of HiWAAY
2880 Internet Services.
2881 Fix DSN for "Too many hops" bounces. Problem noticed by Ulrich
2882 Windl of the Universitaet Regensburg.
2883 Fix DSN for "mail loops back to me" bounces. Problem noticed by
2884 Kari Hurtta of the Finnish Meteorological Institute.
2885 Portability:
2886 OpenBSD has a broken setreuid() implementation.
2887 CONFIG: Undo change from 8.11.1: change 501 SMTP reply code back
2888 to 553 since it is allowed by DRUMS.
2889 CONFIG: Add OSTYPE(freebsd4) for FreeBSD 4.X.
2890 DEVTOOLS: install.sh did not properly handle paths in the source
2891 file name argument. Noted by Kari Hurtta of the Finnish
2892 Meteorological Institute.
2893 DEVTOOLS: Add FAST_PID_RECYCLE to compile time options for OpenBSD
2894 since it generates random process ids.
2895 PRALIASES: Add back adaptive algorithm to deal with different endings
2896 of entries in the database (with/without trailing '\0').
2897 Patch from John Beck of Sun Microsystems.
2898 New Files:
2899 cf/ostype/freebsd4.m4
2901 8.11.3/8.11.3 2001/02/27
2902 Prevent a segmentation fault when a bogus value was used in the
2903 LDAPDefaultSpec option's -r, -s, or -M flags and if a bogus
2904 option was used. Problem noted by Allan E Johannesen of
2905 Worcester Polytechnic Institute.
2906 Prevent "token too long" message by shortening {currHeader} which
2907 could be too long if the last copied character was a quote.
2908 Problem detected by Jan Krueger of digitalanswers
2909 communications consulting gmbh.
2910 Additional IPv6 check for unspecified addresses. Patch from
2911 Jun-ichiro itojun Hagino of the KAME Project.
2912 Do not ignore the ClientPortOptions setting if DaemonPortOptions
2913 Modifier=b (bind to same interface) is set and the
2914 connection came in from the command line.
2915 Do not bind to the loopback address if DaemonPortOptions
2916 Modifier=b (bind to same interface) is set. Patch from
2917 John Beck of Sun Microsystems.
2918 Properly deal with open failures on non-optional maps used in
2919 check_* rulesets by returning a temporary failure.
2920 Buffered file I/O files were not being properly fsync'ed to disk
2921 when they were committed.
2922 Properly encode '=' for the AUTH= parameter of the MAIL command.
2923 Problem noted by Hadmut Danisch.
2924 Under certain circumstances the macro {server_name} could be set
2925 to the wrong hostname (of a previous connection), which may
2926 cause some rulesets to return wrong results. This would
2927 usually cause mail to be queued up and delivered later on.
2928 Ignore F=z (LMTP) mailer flag if $u is given in the mailer A=
2929 equate. Problem noted by Motonori Nakamura of Kyoto
2930 University.
2931 Work around broken accept() implementations which only partially
2932 fill in the peer address if the socket is closed before
2933 accept() completes.
2934 Return an SMTP "421" temporary failure if the data file can't be
2935 opened where the "354" reply would normally be given.
2936 Prevent a CPU loop in trying to expand a macro which doesn't exist
2937 in a queue run. Problem noted by Gordon Lack of Glaxo
2938 Wellcome.
2939 If delivering via a program and that program exits with EX_TEMPFAIL,
2940 note that fact for the mailq display instead of just showing
2941 "Deferred". Problem noted by Motonori Nakamura of Kyoto
2942 University.
2943 If doing canonification via /etc/hosts, try both the fully
2944 qualified hostname as well as the first portion of the
2945 hostname. Problem noted by David Bremner of the
2946 University of New Brunswick.
2947 Portability:
2948 Fix a compilation problem for mail.local and rmail if SFIO
2949 is in use. Problem noted by Auteria Wally
2950 Winzer Jr. of Champion Nutrition.
2951 IPv6 changes for platforms using KAME. Patch from
2952 Jun-ichiro itojun Hagino of the KAME Project.
2953 OpenBSD 2.7 and higher has srandomdev(3). OpenBSD 2.8 and
2954 higher has BSDI-style login classes. Patch from
2955 Todd C. Miller of Courtesan Consulting.
2956 Unixware 7.1.1 doesn't allow h_errno to be set directly if
2957 sendmail is being compiled with -kthread. Problem
2958 noted by Orion Poplawski of CQG, Inc.
2959 CONTRIB: buildvirtuser: Substitute current domain for $DOMAIN and
2960 current left hand side for $LHS in virtuser files.
2961 DEVTOOLS: Do not pass make targets to recursive Build invocations.
2962 Problem noted by Jeff Bronson of J.D. Bronson, Inc.
2963 MAIL.LOCAL: In LMTP mode, do not return errors regarding problems
2964 storing the temporary message file until after the remote
2965 side has sent the final DATA termination dot. Problem
2966 noted by Allan E Johannesen of Worcester Polytechnic
2967 Institute.
2968 MAIL.LOCAL: If LMTP mode is set, give a temporary error if users
2969 are also specified on the command line. Patch from
2970 Motonori Nakamura of Kyoto University.
2971 PRALIASES: Skip over AliasFile specifications which aren't based on
2972 database files (i.e., only show dbm, hash, and btree).
2973 Renamed Files:
2974 devtools/OS/OSF1.V5.0 => devtools/OS/OSF1.V5.x
2976 8.11.2/8.11.2 2000/12/29
2977 Prevent a segmentation fault when trying to set a class in
2978 address test mode due to a negative array index. Audit
2979 other array indexing. This bug is not believed to be
2980 exploitable. Noted by Michal Zalewski of the "Internet for
2981 Schools" project (IdS).
2982 Add an FFR (for future release) to drop privileges when using
2983 address test mode. This will be turned on in 8.12. It can
2984 be enabled by compiling with:
2985 APPENDDEF(`conf_sendmail_ENVDEF', `-D_FFR_TESTMODE_DROP_PRIVS')
2986 in your devtools/Site/site.config.m4 file. Suggested by
2987 Michal Zalewski of the "Internet for Schools" project (IdS).
2988 Fix potential problem with Cyrus-SASL security layer which may have
2989 caused I/O errors, especially for mechanism DIGEST-MD5.
2990 When QueueSortOrder was set to host, sendmail might not read
2991 enough of the queue file to determine the host, making the
2992 sort sub-optimal. Problem noted by Jeff Earickson of
2993 Colby College.
2994 Don't issue DSNs for addresses which use the NOTIFY parameter (per
2995 RFC 1891) but don't have FAILURE as value.
2996 Initialize Cyrus-SASL library before the SMTP daemon is started.
2997 This implies that every change to SASL related files requires
2998 a restart of the daemon, e.g., Sendmail.conf, new SASL
2999 mechanisms (in form of shared libraries).
3000 Properly set the STARTTLS related macros during a queue run for
3001 a cached connection. Bug reported by Michael Kellen of
3002 NxNetworks, Inc.
3003 Log the server name in relay= for ruleset tls_server instead of the
3004 client name.
3005 Include original length of bad field/header when reporting
3006 MaxMimeHeaderLength problems. Requested by Ulrich Windl of
3007 the Universitat Regensburg.
3008 Fix delivery to set-user-ID files that are expanded from aliases in
3009 DeliveryMode queue. Problem noted by Ric Anderson of the
3010 University of Arizona.
3011 Fix LDAP map -m (match only) flag. Problem noted by Jeff Giuliano
3012 of Collective Technologies.
3013 Avoid using a negative argument for sleep() calls when delaying answers
3014 to EXPN/VRFY commands on systems which respond very slowly.
3015 Problem noted by Mikolaj J. Habryn of Optus Internet
3016 Engineering.
3017 Make sure the F=u flag is set in the default prog mailer
3018 definition. Problem noted by Kari Hurtta of the Finnish
3019 Meteorological Institute.
3020 Fix IPv6 check for unspecified addresses. Patch from
3021 Jun-ichiro itojun Hagino of the KAME Project.
3022 Fix return values for IRIX nsd map. From Kari Hurtta of the Finnish
3023 Meteorological Institute.
3024 Fix parsing of DaemonPortOptions and ClientPortOptions. Read all
3025 of the parameters to find Family= setting before trying to
3026 interpret Addr= and Port=. Problem noted by Valdis
3027 Kletnieks of Virginia Tech.
3028 When delivering to a file directly from an alias, do not call
3029 initgroups(); instead use the DefaultUser group information.
3030 Problem noted by Marc Schaefer of ALPHANET NF.
3031 RunAsUser now overrides the ownership of the control socket, if
3032 created. Otherwise, sendmail can not remove it upon
3033 close. Problem noted by Werner Wiethege.
3034 Fix ConnectionRateThrottle counting as the option is the number of
3035 overall connections, not the number of connections per
3036 socket. A future version may change this to per socket
3037 counting.
3038 Portability:
3039 Clean up libsmdb so it functions properly on platforms
3040 where sizeof(u_int32_t) != sizeof(size_t). Problem
3041 noted by Rein Tollevik of Basefarm AS.
3042 Fix man page formatting for compatibility with Solaris'
3043 whatis. From Stephen Gildea of InTouch Systems, Inc.
3044 UnixWare 7 includes snprintf() support. From Larry
3045 Rosenman.
3046 IPv6 changes for platforms using KAME. Patch from
3047 Jun-ichiro itojun Hagino of the KAME Project.
3048 Avoid a typedef compile conflict with Berkeley DB 3.X and
3049 Solaris 2.5 or earlier. Problem noted by Bob Hughes
3050 of Pacific Access.
3051 Add preliminary support for AIX 5. Contributed by
3052 Valdis Kletnieks of Virginia Tech.
3053 Solaris 9 load average support from Andrew Tucker of Sun
3054 Microsystems.
3055 CONFIG: Reject addresses of the form a!b if FEATURE(`nouucp', `r')
3056 is used. Problem noted by Phil Homewood of Asia Online,
3057 patch from Neil Rickert of Northern Illinois University.
3058 CONFIG: Change the default DNS based blacklist server for
3059 FEATURE(`dnsbl') to blackholes.mail-abuse.org.
3060 CONFIG: Deal correctly with the 'C' flag in {daemon_flags}, i.e.,
3061 implicitly assume canonical host names.
3062 CONFIG: Deal with "::" in IPv6 addresses for access_db. Based on
3063 patch by Motonori Nakamura of Kyoto University.
3064 CONFIG: New OSTYPE(`aix5') contributed by Valdis Kletnieks of
3065 Virginia Tech.
3066 CONFIG: Pass the illegal header form <list:;> through untouched
3067 instead of making it worse. Problem noted by Motonori
3068 Nakamura of Kyoto University.
3069 CONTRIB: Added buildvirtuser (see `perldoc contrib/buildvirtuser`).
3070 CONTRIB: qtool.pl: An empty queue is not an error. Problem noted
3071 by Jan Krueger of digitalanswers communications consulting
3072 gmbh.
3073 CONTRIB: domainmap.m4: Handle domains with '-' in them. From Mark
3074 Roth of the University of Illinois at Urbana-Champaign.
3075 DEVTOOLS: Change the internal devtools OS, REL, and ARCH m4
3076 variables into bldOS, bldREL, and bldARCH to prevent
3077 namespace collisions. Problem noted by Motonori Nakamura
3078 of Kyoto University.
3079 RMAIL: Undo the 8.11.1 change to use -G when calling sendmail. It
3080 causes some changes in behavior and may break rmail for
3081 installations where sendmail is actually a wrapper to
3082 another MTA. The change will re-appear in a future
3083 version.
3084 SMRSH: Use the vendor supplied directory on HPUX 10.X, HPUX 11.X,
3085 and SunOS 5.8. Requested by Jeff A. Earickson of Colby
3086 College and John Beck of Sun Microsystems.
3087 VACATION: Fix pattern matching for addresses to ignore.
3088 VACATION: Don't reply to addresses of the form owner-*
3089 or *-owner.
3090 New Files:
3091 cf/ostype/aix5.m4
3092 contrib/buildvirtuser
3093 devtools/OS/AIX.5.0
3095 8.11.1/8.11.1 2000/09/27
3096 Fix SMTP EXPN command output if the address expands to a single
3097 name. Fix from John Beck of Sun Microsystems.
3098 Don't try STARTTLS in the client if the PRNG has not been properly
3099 seeded. This problem only occurs on systems without
3100 /dev/urandom. Problem detected by Jan Krueger of
3101 digitalanswers communications consulting gmbh and
3102 Neil Rickert of Northern Illinois University.
3103 Don't use the . and .. directories when expanding QueueDirectory
3104 wildcards.
3105 Do not try to cache LDAP connections across processes as a parent
3106 process may close the connection before the child process
3107 has completed. Problem noted by Lai Yiu Fai of the Hong
3108 Kong University of Science and Technology and Wolfgang
3109 Hottgenroth of UUNET.
3110 Use Timeout.fileopen to limit the amount of time spent trying to
3111 read the LDAP secret from a file.
3112 Prevent SIGTERM from removing a command line submitted item after
3113 the user submits the message and before the first delivery
3114 attempt completes. Problem noted by Max France of AlphaNet.
3115 Fix from Neil Rickert of Northern Illinois University.
3116 Deal correctly with MaxMessageSize restriction if message size is
3117 greater than 2^31. Problem noted by Tim "Darth Dice" Bosserman
3118 of EarthLink.
3119 Turn off queue checkpointing if CheckpointInterval is set to zero.
3120 Treat an empty home directory (from getpw*() or $HOME) as
3121 non-existent instead of treating it as /. Problem noted by
3122 Todd C. Miller of Courtesan Consulting.
3123 Don't drop duplicate headers when reading a queued item. Problem
3124 noted by Motonori Nakamura of Kyoto University.
3125 Avoid bogus error text when logging the savemail panic "cannot
3126 save rejected email anywhere". Problem noted by Marc G.
3127 Fournier of Acadia University.
3128 If an LDAP search fails because the LDAP server went down, close
3129 the map so subsequent searches reopen the map. If there are
3130 multiple LDAP servers, the down server will be skipped and
3131 one of the others may be able to take over.
3132 Set the ${load_avg} macro to the current load average, not the
3133 previous load average query result.
3134 If a non-optional map used in a check_* ruleset can't be opened,
3135 return a temporary failure to the remote SMTP client
3136 instead of ignoring the map. Problem noted by Allan E
3137 Johannesen of Worcester Polytechnic Institute.
3138 Avoid a race condition when queuing up split envelopes by saving
3139 the split envelopes before the original envelope.
3140 Fix a bug in the PH_MAP code which caused mail to bounce instead of
3141 defer if the PH server could not be contacted. From Mark
3142 Roth of the University of Illinois at Urbana-Champaign.
3143 Prevent QueueSortOrder=Filename from interfering with -qR, -qS, and
3144 ETRN. Problem noted by Erik R. Leo of SoVerNet.
3145 Change error code for unrecognized parameters to the SMTP MAIL and
3146 RCPT commands from 501 to 555 per RFC 1869. Problem
3147 reported to Postfix by Robert Norris of Monash University.
3148 Prevent overwriting the argument of -B on certain OS. Problem
3149 noted by Matteo Gelosa of I.NET S.p.A.
3150 Use the proper routine for freeing memory with Netscape's LDAP
3151 client libraries. Patch from Paul Hilchey of the
3152 University of British Columbia.
3153 Portability:
3154 Move the NETINET6 define to devtools/OS/SunOS.5.{8,9}
3155 instead of defining it in conf.h so users can
3156 override the setting. Suggested by
3157 Henrik Nordstrom of Ericsson.
3158 On HP-UX 10.X and 11.X, use /usr/sbin/sendmail instead of
3159 /usr/lib/sendmail for rmail and vacation. From
3160 Jeff A. Earickson of Colby College.
3161 On HP-UX 11.X, use /usr/sbin instead of /usr/libexec (which
3162 does not exist). From Jeff A. Earickson of Colby
3163 College.
3164 Avoid using the UCB subsystem on NCR MP-RAS 3.x. From
3165 Tom Moore of NCR.
3166 NeXT 3.X and 4.X installs man pages in /usr/man. From
3167 Hisanori Gogota of NTT/InterCommunicationCenter.
3168 Solaris 8 and later include /var/run. The default PID file
3169 location is now /var/run/sendmail.pid. From John
3170 Beck of Sun Microsystems.
3171 SFIO includes snprintf() for those operating systems
3172 which do not. From Todd C. Miller of Courtesan
3173 Consulting.
3174 CONFIG: Use the result of _CERT_REGEX_SUBJECT_ not {cert_subject}.
3175 Problem noted by Kaspar Brand of futureLab AG.
3176 CONFIG: Change 553 SMTP reply code to 501 to avoid problems with
3177 errors in the MAIL address.
3178 CONFIG: Fix FEATURE(nouucp) usage in example .mc files. Problem
3179 noted by Ron Jarrell of Virginia Tech.
3180 CONFIG: Add support for Solaris 8 (and later) as OSTYPE(solaris8).
3181 Contributed by John Beck of Sun Microsystems.
3182 CONFIG: Set confFROM_HEADER such that the mail hub can possibly add
3183 GECOS information for an address. This more closely
3184 matches pre-8.10 nullclient behavior. From Per Hedeland of
3185 Ericsson.
3186 CONFIG: Fix MODIFY_MAILER_FLAGS(): apply the flag modifications for
3187 SMTP to all *smtp* mailers and those for RELAY to the relay
3188 mailer as described in cf/README.
3189 MAIL.LOCAL: Open the mailbox as the recipient not root so quotas
3190 are obeyed. Problem noted by Damian Kuczynski of NIK.
3191 MAKEMAP: Do not change a map's owner to the TrustedUser if using
3192 makemap to 'unmake' the map.
3193 RMAIL: Avoid overflowing the list of recipients being passed to
3194 sendmail.
3195 RMAIL: Invoke sendmail with '-G' to indicate this is a gateway
3196 submission. Problem noted by Kari Hurtta of the Finnish
3197 Meteorological Institute.
3198 VACATION: Read the complete message to avoid "broken pipe" signals.
3199 VACATION: Do not cut off vacation.msg files which have a single
3200 dot as the only character on the line.
3201 New Files:
3202 cf/ostype/solaris8.m4
3204 8.11.0/8.11.0 2000/07/19
3205 SECURITY: If sendmail is installed as a non-root set-user-ID binary
3206 (not the normal case), some operating systems will still
3207 keep a saved-uid of the effective-uid when sendmail tries
3208 to drop all of its privileges. If sendmail needs to drop
3209 these privileges and the operating system doesn't set the
3210 saved-uid as well, exit with an error. Problem noted by
3211 Kari Hurtta of the Finnish Meteorological Institute.
3212 SECURITY: sendmail depends on snprintf() NUL terminating the string
3213 it populates. It is possible that some broken
3214 implementations of snprintf() exist that do not do this.
3215 Systems in this category should compile with
3216 -DSNPRINTF_IS_BROKEN=1. Use test/t_snprintf.c to test your
3217 system and report broken implementations to
3218 sendmail-bugs@sendmail.org and your OS vendor. Problem
3219 noted by Slawomir Piotrowski of TELSAT GP.
3220 Support SMTP Service Extension for Secure SMTP (RFC 2487) (STARTTLS).
3221 Implementation influenced by the example programs of
3222 OpenSSL and the work of Lutz Jaenicke of TU Cottbus.
3223 Add new STARTTLS related options CACERTPath, CACERTFile,
3224 ClientCertFile, ClientKeyFile, DHParameters, RandFile,
3225 ServerCertFile, and ServerKeyFile. These are documented in
3226 cf/README and doc/op/op.*.
3227 New STARTTLS related macros: ${cert_issuer}, ${cert_subject},
3228 ${tls_version}, ${cipher}, ${cipher_bits}, ${verify},
3229 ${server_name}, and ${server_addr}. These are documented
3230 in cf/README and doc/op/op.*.
3231 Add support for the Entropy Gathering Daemon (EGD) for better
3232 random data.
3233 New DontBlameSendmail option InsufficientEntropy for systems which
3234 don't properly seed the PRNG for OpenSSL but want to
3235 try to use STARTTLS despite the security problems.
3236 Support the security layer in SMTP AUTH for mechanisms which
3237 support encryption. Based on code contributed by Tim
3238 Martin of CMU.
3239 Add new macro ${auth_ssf} to reflect the SMTP AUTH security
3240 strength factor.
3241 LDAP's -1 (single match only) flag was not honored if the -z
3242 (delimiter) flag was not given. Problem noted by ST Wong of
3243 the Chinese University of Hong Kong. Fix from Mark Adamson
3244 of CMU.
3245 Add more protection from accidentally tripping OpenLDAP 1.X's
3246 ld_errno == LDAP_DECODING_ERROR hack on ldap_next_attribute().
3247 Suggested by Kurt Zeilenga of OpenLDAP.
3248 Fix the default family selection for DaemonPortOptions. As
3249 documented, unless a family is specified in a
3250 DaemonPortOptions option, "inet" is the default. It is
3251 also the default if no DaemonPortOptions value is set.
3252 Therefore, IPv6 users should configure additional sockets
3253 by adding DaemonPortOptions settings with Family=inet6 if
3254 they wish to also listen on IPv6 interfaces. Problem noted
3255 by Jun-ichiro itojun Hagino of the KAME Project.
3256 Set ${if_family} when setting ${if_addr} and ${if_name} to reflect
3257 the interface information for an outgoing connection.
3258 Not doing so was creating a mismatch between the socket
3259 family and address used in subsequent connections if the
3260 M=b modifier was set in DaemonPortOptions. Problem noted
3261 by John Beck of Sun Microsystems.
3262 If DaemonPortOptions modifier M=b is used, determine the socket
3263 family based on the IP address. ${if_family} is no longer
3264 persistent (i.e., saved in qf files). Patch from John Beck
3265 of Sun Microsystems.
3266 sendmail 8.10 and 8.11 reused the ${if_addr} and ${if_family}
3267 macros for both the incoming interface address/family and
3268 the outgoing interface address/family. In order for M=b
3269 modifier in DaemonPortOptions to work properly, preserve
3270 the incoming information in the queue file for later
3271 delivery attempts.
3272 Use SMTP error code and enhanced status code from check_relay in
3273 responses to commands. Problem noted by Jeff Wasilko of
3274 smoe.org.
3275 Add more vigilance in checking for putc() errors on output streams
3276 to protect from a bug in Solaris 2.6's putc(). Problem
3277 noted by Graeme Hewson of Oracle.
3278 The LDAP map -n option (return attribute names only) wasn't working.
3279 Problem noted by Ajay Matia.
3280 Under certain circumstances, an address could be listed as deferred
3281 but would be bounced back to the sender as failed to be
3282 delivered when it really should have been queued. Problem
3283 noted by Allan E Johannesen of Worcester Polytechnic Institute.
3284 Prevent a segmentation fault in a child SMTP process from getting
3285 the SMTP transaction out of sync. Problem noted by Per
3286 Hedeland of Ericsson.
3287 Turn off RES_DEBUG if SFIO is defined unless SFIO_STDIO_COMPAT
3288 is defined to avoid a core dump due to incompatibilities
3289 between sfio and stdio. Problem noted by Neil Rickert
3290 of Northern Illinois University.
3291 Don't log useless envelope ID on initial connection log. Problem
3292 noted by Kari Hurtta of the Finnish Meteorological Institute.
3293 Convert the free disk space shown in a control socket status query
3294 to kilobyte units.
3295 If TryNullMXList is True and there is a temporary DNS failure
3296 looking up the hostname, requeue the message for a later
3297 attempt. Problem noted by Ari Heikkinen of Pohjois-Savo
3298 Polytechnic.
3299 Under the proper circumstances, failed connections would be recorded
3300 as "Bad file number" instead of "Connection failed" in the
3301 queue file and persistent host status. Problem noted by
3302 Graeme Hewson of Oracle.
3303 Avoid getting into an endless loop if a non-hoststat directory exists
3304 within the hoststatus directory (e.g., lost+found).
3305 Patch from Valdis Kletnieks of Virginia Tech.
3306 Make sure Timeout.queuereturn=now returns a bounce message to the
3307 sender. Problem noted by Per Hedeland of Ericsson.
3308 If a message data file can't be opened at delivery time, panic and
3309 abort the attempt instead of delivering a message that
3310 states "<<< No Message Collected >>>".
3311 Fixup the GID checking code from 8.10.2 as it was overly
3312 restrictive. Problem noted by Mark G. Thomas of Mark
3313 G. Thomas Consulting.
3314 Preserve source port number instead of replacing it with the ident
3315 port number (113).
3316 Document the queue status characters in the mailq man page.
3317 Suggested by Ulrich Windl of the Universitat Regensburg.
3318 Process queued items in which none of the recipient addresses have
3319 host portions (or there are no recipients). Problem noted
3320 by Valdis Kletnieks of Virginia Tech.
3321 If a cached LDAP connection is used for multiple maps, make sure
3322 only the first to open the connection is allowed to close
3323 it so a later map close doesn't break the connection for
3324 other maps. Problem noted by Wolfgang Hottgenroth of UUNET.
3325 Netscape's LDAP libraries do not support Kerberos V4
3326 authentication. Patch from Rainer Schoepf of the
3327 University of Mainz.
3328 Provide workaround for inconsistent handling of data passed
3329 via callbacks to Cyrus SASL prior to version 1.5.23.
3330 Mention ENHANCEDSTATUSCODES in the SMTP HELP helpfile. Omission
3331 noted by Ulrich Windl of the Universitat Regensburg.
3332 Portability:
3333 Add the ability to read IPv6 interface addresses into class
3334 'w' under FreeBSD (and possibly others). From Jun
3335 Kuriyama of IMG SRC, Inc. and the FreeBSD Project.
3336 Replace code for finding the number of CPUs on HPUX.
3337 NCRUNIX MP-RAS 3.02 SO_REUSEADDR socket option does not
3338 work properly causing problems if the accept()
3339 fails and the socket needs to be reopened. Patch
3340 from Tom Moore of NCR.
3341 NetBSD uses a .0 extension of formatted man pages. From
3342 Andrew Brown of Crossbar Security.
3343 Return to using the IPv6 AI_DEFAULT flag instead of AI_V4MAPPED
3344 for calls to getipnodebyname(). The Linux
3345 implementation is broken so AI_ADDRCONFIG is stripped
3346 under Linux. From John Beck of Sun Microsystems and
3347 John Kennedy of Cal State University, Chico.
3348 CONFIG: Catch invalid addresses containing a ',' at the wrong place.
3349 Patch from Neil Rickert of Northern Illinois University.
3350 CONFIG: New variables for the new sendmail options:
3351 confCACERT_PATH CACERTPath
3352 confCACERT CACERTFile
3353 confCLIENT_CERT ClientCertFile
3354 confCLIENT_KEY ClientKeyFile
3355 confDH_PARAMETERS DHParameters
3356 confRAND_FILE RandFile
3357 confSERVER_CERT ServerCertFile
3358 confSERVER_KEY ServerKeyFile
3359 CONFIG: Provide basic rulesets for TLS policy control and add new
3360 tags to the access database to support these policies. See
3361 cf/README for more information.
3362 CONFIG: Add TLS information to the Received: header.
3363 CONFIG: Call tls_client ruleset from check_mail in case it wasn't
3364 called due to a STARTTLS command.
3365 CONFIG: If TLS_PERM_ERR is defined, TLS related errors are permanent
3366 instead of temporary.
3367 CONFIG: FEATURE(`relay_hosts_only') didn't work in combination with
3368 the access map and relaying to a domain without using a To:
3369 tag. Problem noted by Mark G. Thomas of Mark G. Thomas
3370 Consulting.
3371 CONFIG: Set confEBINDIR to /usr/sbin to match the devtools entry in
3372 OSTYPE(`linux') and OSTYPE(`mklinux'). From Tim Pierce of
3373 RootsWeb.com.
3374 CONFIG: Make sure FEATURE(`nullclient') doesn't use aliasing and
3375 forwarding to make it as close to the old behavior as
3376 possible. Problem noted by George W. Baltz of the
3377 University of Maryland.
3378 CONFIG: Added OSTYPE(`darwin') for Mac OS X and Darwin users. From
3379 Wilfredo Sanchez of Apple Computer, Inc.
3380 CONFIG: Changed the map names used by FEATURE(`ldap_routing') from
3381 ldap_mailhost and ldap_mailroutingaddress to ldapmh and
3382 ldapmra as underscores in map names cause problems if
3383 underscore is in OperatorChars. Problem noted by Bob Zeitz
3384 of the University of Alberta.
3385 CONFIG: Apply blacklist_recipients also to hosts in class {w}.
3386 Patch from Michael Tratz of Esosoft Corporation.
3387 CONFIG: Use A=TCP ... instead of A=IPC ... in SMTP mailers.
3388 CONTRIB: Add link_hash.sh to create symbolic links to the hash
3389 of X.509 certificates.
3390 CONTRIB: passwd-to-alias.pl: More protection from special characters;
3391 treat special shells as root aliases; skip entries where the
3392 GECOS full name and username match. From Ulrich Windl of the
3393 Universitat Regensburg.
3394 CONTRIB: qtool.pl: Add missing last_modified_time method and fix a
3395 typo. Patch from Graeme Hewson of Oracle.
3396 CONTRIB: re-mqueue.pl: Improve handling of a race between re-mqueue
3397 and sendmail. Patch from Graeme Hewson of Oracle.
3398 CONTRIB: re-mqueue.pl: Don't exit(0) at end so can be called as
3399 subroutine Patch from Graeme Hewson of Oracle.
3400 CONTRIB: Add movemail.pl (move old mail messages between queues by
3401 calling re-mqueue.pl) and movemail.conf (configuration
3402 script for movemail.pl). From Graeme Hewson of Oracle.
3403 CONTRIB: Add cidrexpand (expands CIDR blocks as a preprocessor to
3404 makemap). From Derek J. Balling of Yahoo,Inc.
3405 DEVTOOLS: INSTALL_RAWMAN installation option mistakenly applied any
3406 extension modifications (e.g., MAN8EXT) to the installation
3407 target. Patch from James Ralston of Carnegie Mellon
3408 University.
3409 DEVTOOLS: Add support for SunOS 5.9.
3410 DEVTOOLS: New option confLN contains the command used to create
3411 links.
3412 LIBSMDB: Berkeley DB 2.X and 3.X errors might be lost and not
3413 reported.
3414 MAIL.LOCAL: DG/UX portability. Problem noted by Tim Boyer of
3415 Denman Tire Corporation.
3416 MAIL.LOCAL: Prevent a possible DoS attack when compiled with
3417 -DCONTENTLENGTH. Based on patch from 3APA3A@SECURITY.NNOV.RU.
3418 MAILSTATS: Fix usage statement (-p and -o are optional).
3419 MAKEMAP: Change man page layout as workaround for problem with nroff
3420 and -man on Solaris 7. Patch from Larry Williamson.
3421 RMAIL: AIX 4.3 has snprintf(). Problem noted by David Hayes of
3422 Black Diamond Equipment, Limited.
3423 RMAIL: Prevent a segmentation fault if the incoming message does not
3424 have a From line.
3425 VACATION: Read all of the headers before deciding whether or not
3426 to respond instead of stopping after finding recipient.
3427 Added Files:
3428 cf/ostype/darwin.m4
3429 contrib/cidrexpand
3430 contrib/link_hash.sh
3431 contrib/movemail.conf
3432 contrib/movemail.pl
3433 devtools/OS/SunOS.5.9
3434 test/t_snprintf.c
3436 8.10.2/8.10.2 2000/06/07
3437 SECURITY: Work around broken Linux setuid() implementation.
3438 On Linux, a normal user process has the ability to subvert
3439 the setuid() call such that it is impossible for a root
3440 process to drop its privileges. Problem noted by Wojciech
3441 Purczynski of elzabsoft.pl.
3442 SECURITY: Add more vigilance around set*uid(), setgid(), setgroups(),
3443 initgroups(), and chroot() calls.
3444 Added Files:
3445 test/t_setuid.c
3447 8.10.1/8.10.1 2000/04/06
3448 SECURITY: Limit the choice of outgoing (client-side) SMTP
3449 Authentication mechanisms to those specified in
3450 AuthMechanisms to prevent information leakage. We do not
3451 recommend use of PLAIN for outgoing mail as it sends the
3452 password in clear text to possibly untrusted servers. See
3453 cf/README's DefaultAuthInfo section for additional information.
3454 Copy the ident argument for openlog() to avoid problems on some
3455 OSs. Based on patch from Rob Bajorek from Webhelp.com.
3456 Avoid bogus error message when reporting an alias line as too long.
3457 Avoid bogus socket error message if sendmail.cf version level is
3458 greater than sendmail binary supported version. Patch
3459 from John Beck of Sun Microsystems.
3460 Prevent a malformed ruleset (missing right hand side) from causing
3461 a segmentation fault when using address test mode. Based on
3462 patch from John Beck of Sun Microsystems.
3463 Prevent memory leak from use of NIS maps and yp_match(3). Problem
3464 noted by Gil Kloepfer of the University of Texas at Austin.
3465 Fix queue file permission checks to allow for TrustedUser ownership.
3466 Change logging of errors from the trust_auth ruleset to LogLevel 10
3467 or higher.
3468 Avoid simple password cracking attacks against SMTP AUTH by using
3469 exponential delay after too many tries within one connection.
3470 Encode an initial empty AUTH challenge as '=', not as empty string.
3471 Avoid segmentation fault on EX_SOFTWARE internal error logs.
3472 Problem noted by Allan E Johannesen of Worcester
3473 Polytechnic Institute.
3474 Ensure that a header check which resolves to $#discard actually
3475 discards the message.
3476 Emit missing value warnings for aliases with no right hand side
3477 when newaliases is run instead of only when delivery is
3478 attempted to the alias.
3479 Remove AuthOptions missing value warning for consistency with other
3480 flag options.
3481 Portability:
3482 SECURITY: Specify a run-time shared library search path for
3483 AIX 4.X instead of using the dangerous AIX 4.X
3484 linker semantics. AIX 4.X users should consult
3485 sendmail/README for further information. Problem
3486 noted by Valdis Kletnieks of Virginia Tech.
3487 Avoid use of strerror(3) call. Problem noted by Charles
3488 Levert of Ecole Polytechnique de Montreal.
3489 DGUX requires -lsocket -lnsl and has a non-standard install
3490 program. From Tim Boyer of Denman Tire Corporation.
3491 HPUX 11.0 has a broken res_search() function.
3492 Updates to devtools/OS/NeXT.3.X, NeXT.4.X, and NEXTSTEP.4.X
3493 from J. P. McCann of E I A.
3494 Digital UNIX/Compaq Tru64 5.0 now includes snprintf(3).
3495 Problem noted by Michael Long of Info Avenue Internet
3496 Services, LLC.
3497 Modern (post-199912) OpenBSD versions include working
3498 strlc{at,py}(3) functions. From Todd C. Miller of
3499 Courtesan Consulting.
3500 SINIX doesn't have random(3). From Gerald Rinske of
3501 Siemens Business Services.
3502 CONFIG: Change error message about unresolvable sender domain to
3503 include the sender address. Proposed by Wolfgang Rupprecht
3504 of WSRCC.
3505 CONFIG: Fix usenet mailer calls.
3506 CONFIG: If RELAY_MAILER_FLAGS is not defined, use SMTP_MAILER_FLAGS
3507 to be backward compatible with 8.9.
3508 CONFIG: Change handling of default case @domain for virtusertable
3509 to allow for +*@domain to deal with +detail.
3510 CONTRIB: Remove converting.sun.configs -- it is obsolete.
3511 DEVTOOLS: confUBINMODE was being ignored. Fix from KITAZIMA, Tuneki
3512 of NEC.
3513 DEVTOOLS: Add to NCR platform list and include the architecture
3514 (i486). From Tom J. Moore of NCR.
3515 DEVTOOLS: SECURITY: Change method of linking with sendmail utility
3516 libraries to work around the AIX 4.X and SunOS 4.X linker's
3517 overloaded -L option. Problem noted by Valdis Kletnieks of
3518 Virginia Tech.
3519 DEVTOOLS: configure.sh was overriding the user's choice for
3520 confNROFF. Problem noted by Glenn A. Malling of Syracuse
3521 University.
3522 DEVTOOLS: New variables conf_prog_LIB_POST and confBLDVARIANT added
3523 for other internal projects but included in the open source
3524 release.
3525 LIBSMDB: Check for ".db" instead of simply "db" at the end of the
3526 map name to determine whether or not to add the extension.
3527 This fixes makemap when building the userdb file. Problem
3528 noted by Andrew J Cole of the University of Leeds.
3529 LIBSMDB: Allow a database to be opened for updating and created if
3530 it doesn't already exist. Problem noted by Rand Wacker of
3531 Sendmail.
3532 LIBSMDB: If type is SMDB_TYPE_DEFAULT and both NEWDB and NDBM are
3533 available, fall back to NDBM if NEWDB open fails. This
3534 fixes praliases. Patch from John Beck of Sun Microsystems.
3535 LIBSMUTIL: safefile()'s SFF_NOTEXCL check was being misinterpreted
3536 as SFF_NOWRFILES.
3537 OP.ME: Clarify some issues regarding mailer flags. Suggested by
3538 Martin Mokrejs of The Charles University and Neil Rickert of
3539 Northern Illinois University.
3540 PRALIASES: Restore 8.9.X functionality of being able to search for
3541 particular keys in a database by specifying the keys on the
3542 command line. Man page updated accordingly. Patch from
3543 John Beck of Sun Microsystems.
3544 VACATION: SunOS 4.X portability from Charles Levert of Ecole
3545 Polytechnique de Montreal.
3546 VACATION: Fix -t option which is ignored but available for
3547 compatibility with Sun's version, based on patch from
3548 Volker Dobler of Infratest Burke.
3549 Added Files:
3550 devtools/M4/UNIX/smlib.m4
3551 devtools/OS/OSF1.V5.0
3552 Deleted Files:
3553 contrib/converting.sun.configs
3554 Deleted Directories (already done in 8.10.0 but not listed):
3555 doc/intro
3556 doc/usenix
3557 doc/changes
3559 8.10.0/8.10.0 2000/03/01
3560 *************************************************************
3561 * The engineering department at Sendmail, Inc. has suffered *
3562 * the tragic loss of a key member of our engineering team. *
3563 * Julie Van Bourg was the Vice President of Engineering *
3564 * at Sendmail, Inc. during the development and deployment *
3565 * of this release. It was her vision, dedication, and *
3566 * support that has made this release a success. Julie died *
3567 * on October 26, 1999 of cancer. We have lost a leader, a *
3568 * coach, and a friend. *
3569 * *
3570 * This release is dedicated to her memory and to the joy, *
3571 * strength, ideals, and hope that she brought to all of us. *
3572 * Julie, we miss you! *
3573 *************************************************************
3574 SECURITY: The safe file checks now back track through symbolic
3575 links to make sure the files can't be compromised due
3576 to poor permissions on the parent directories of the
3577 symbolic link target.
3578 SECURITY: Only root, TrustedUser, and users in class t can rebuild
3579 the alias map. Problem noted by Michal Zalewski of the
3580 "Internet for Schools" project (IdS).
3581 SECURITY: There is a potential for a denial of service attack if
3582 the AutoRebuildAliases option is set as a user can kill the
3583 sendmail process while it is rebuilding the aliases file
3584 (leaving it in an inconsistent state). This option and
3585 its use is deprecated and will be removed from a future
3586 version of sendmail.
3587 SECURITY: Make sure all file descriptors (besides stdin, stdout, and
3588 stderr) are closed before restarting sendmail. Problem noted
3589 by Michal Zalewski of the "Internet for Schools" project
3590 (IdS).
3591 Begin using /etc/mail/ for sendmail related files. This affects
3592 a large number of files. See cf/README for more details.
3593 The directory structure of the distribution has changed slightly
3594 for easier code sharing among the programs.
3595 Support SMTP AUTH (see RFC 2554). New macros for this purpose
3596 are ${auth_authen}, ${auth_type}, and ${auth_author}
3597 which hold the client's authentication credentials,
3598 the mechanism used for authentication, and the
3599 authorization identity (i.e., the AUTH= parameter if
3600 supplied). Based on code contributed by Tim Martin of CMU.
3601 On systems which use the Torek stdio library (all of the BSD
3602 distributions), use memory-buffered files to reduce
3603 file system overhead by not creating temporary files on
3604 disk. Contributed by Exactis.com, Inc.
3605 New option DataFileBufferSize to control the maximum size of a
3606 memory-buffered data (df) file before a disk-based file is
3607 used. Contributed by Exactis.com, Inc.
3608 New option XscriptFileBufferSize to control the maximum size of a
3609 memory-buffered transcript (xf) file before a disk-based
3610 file is used. Contributed by Exactis.com, Inc.
3611 sendmail implements RFC 2476 (Message Submission), e.g., it can
3612 now listen on several different ports. Use:
3613 O DaemonPortOptions=Name=MSA, Port=587, M=E
3614 to run a Message Submission Agent (MSA); this is turned
3615 on by default in m4-generated .cf files; it can be turned
3616 off with FEATURE(`no_default_msa').
3617 The 'XUSR' SMTP command is deprecated. Mail user agents should
3618 begin using RFC 2476 Message Submission for initial user
3619 message submission. XUSR may disappear from a future release.
3620 The new '-G' (relay (gateway) submission) command line option
3621 indicates that the message being submitted from the command
3622 line is for relaying, not initial submission. This means
3623 the message will be rejected if the addresses are not fully
3624 qualified and no canonicalization will be done. Future
3625 releases may even reject improperly formed messages.
3626 The '-U' (initial user submission) command line option is
3627 deprecated and may be removed from a future release.
3628 Mail user agents should begin using '-G' to indicate that
3629 this is a relay submission (the inverse of -U).
3630 The next release of sendmail will assume that any message submitted
3631 from the command line is an initial user submission and act
3632 accordingly.
3633 If sendmail doesn't have enough privileges to run a .forward
3634 program or deliver to file as the owner of that file, the
3635 address is marked as unsafe. This means if RunAsUser is
3636 set, users won't be able to use programs or delivery to
3637 files in their .forward files. Administrators can override
3638 this by setting the DontBlameSendmail option to the new
3639 setting NonRootSafeAddr.
3640 Allow group or world writable directories if the sticky bit is set
3641 on the directory and DontBlameSendmail is set to
3642 TrustStickyBit. Based on patch from Chris Metcalf of
3643 InCert Software.
3644 Prevent logging of unsafe directory paths for non-existent forward
3645 files if the new DontWarnForwardFileInUnsafeDirPath bit is
3646 set in the DontBlameSendmail option. Requested by many.
3647 New Timeout.control option to limit the total time spent satisfying
3648 a control socket request.
3649 New Timeout.resolver options for controlling BIND resolver
3650 settings:
3651 Timeout.resolver.retrans
3652 Sets the resolver's retransmission time interval (in
3653 seconds). Sets both Timeout.resolver.retrans.first
3654 and Timeout.resolver.retrans.normal.
3655 Timeout.resolver.retrans.first
3656 Sets the resolver's retransmission time interval (in
3657 seconds) for the first attempt to deliver a message.
3658 Timeout.resolver.retrans.normal
3659 Sets the resolver's retransmission time interval (in
3660 seconds) for all resolver lookups except the first
3661 delivery attempt.
3662 Timeout.resolver.retry
3663 Sets the number of times to retransmit a resolver
3664 query. Sets both Timeout.resolver.retry.first
3665 and Timeout.resolver.retry.normal.
3666 Timeout.resolver.retry.first
3667 Sets the number of times to retransmit a resolver
3668 query for the first attempt to deliver a message.
3669 Timeout.resolver.retry.normal
3670 Sets the number of times to retransmit a resolver
3671 query for all resolver lookups except the first
3672 delivery attempt.
3673 Contributed by Exactis.com, Inc.
3674 Support multiple queue directories. To use multiple queues, supply
3675 a QueueDirectory option value ending with an asterisk. For
3676 example, /var/spool/mqueue/q* will use all of the
3677 directories or symbolic links to directories beginning with
3678 'q' in /var/spool/mqueue as queue directories. Keep in
3679 mind, the queue directory structure should not be changed
3680 while sendmail is running. Queue runs create a separate
3681 process for running each queue unless the verbose flag is
3682 given on a non-daemon queue run. New items are randomly
3683 assigned to a queue. Contributed by Exactis.com, Inc.
3684 Support different directories for qf, df, and xf queue files; if
3685 subdirectories or symbolic links to directories of those names
3686 exist in the queue directories, they are used for the
3687 corresponding queue files. Keep in mind, the queue
3688 directory structure should not be changed while sendmail is
3689 running. Proposed by Mathias Koerber of Singapore
3690 Telecommunications Ltd.
3691 New queue file naming system which uses a filename guaranteed to be
3692 unique for 60 years. This allows queue IDs to be assigned
3693 without fancy file system locking. Queued items can be
3694 moved between queues easily. Contributed by Exactis.com,
3695 Inc.
3696 Messages which are undeliverable due to temporary address failures
3697 (e.g., DNS failure) will now go to the FallBackMX host, if
3698 set. Contributed by Exactis.com, Inc.
3699 New command line option '-L tag' which sets the identifier used for
3700 syslog. Contributed by Exactis.com, Inc.
3701 QueueSortOrder=Filename will sort the queue by filename. This
3702 avoids opening and reading each queue file when preparing
3703 to run the queue. Contributed by Exactis.com, Inc.
3704 Shared memory counters and microtimers functionality has been
3705 donated by Exactis.com, Inc.
3706 The SCCS ID tags have been replaced with RCS ID tags.
3707 Allow trusted users (those on a T line or in $=t) to set the
3708 QueueDirectory (Q) option without an X-Authentication-Warning:
3709 being added. Suggested by Michael K. Sanders.
3710 IPv6 support based on patches from John Kennedy of Cal State
3711 University, Chico, Motonori Nakamura of Kyoto University,
3712 and John Beck of Sun Microsystems.
3713 In low-disk space situations, where sendmail would previously refuse
3714 connections, still accept them, but only allow ETRN commands.
3715 Suggested by Mathias Koerber of Singapore Telecommunications
3716 Ltd.
3717 The [IPC] builtin mailer now allows delivery to a UNIX domain socket
3718 on systems which support them. This can be used with LMTP
3719 local delivery agents which listen on a named socket. An
3720 example mailer might be:
3721 Mexecmail, P=[IPC], F=lsDFMmnqSXzA5@/:|, E=\r\n,
3722 S=10, R=20/40, T=DNS/RFC822/X-Unix,
3723 A=FILE /var/run/lmtpd
3724 Code contributed by Lyndon Nerenberg of Messaging Direct.
3725 The [TCP] builtin mailer name is now deprecated. Use [IPC]
3726 instead.
3727 The first mailer argument in the [IPC] mailer is now checked for a
3728 legitimate value. Possible values are TCP (for TCP/IP
3729 connections), IPC (which will be deprecated in a future
3730 version), and FILE (for UNIX domain socket delivery).
3731 PrivacyOptions=goaway no longer includes the noetrn and the noreceipts
3732 flags.
3733 PrivacyOptions=nobodyreturn instructs sendmail not to include the
3734 body of the original message on delivery status
3735 notifications.
3736 Don't announce DSN if PrivacyOptions=noreceipts is set. Problem noted
3737 by Dan Bernstein, fix from Robert Harker of Harker Systems.
3738 Accept the SMTP RSET command even when rejecting commands due to TCP
3739 Wrappers or the check_relay ruleset. Problem noted by
3740 Steve Schweinhart of America Online.
3741 Warn if OperatorChars is set multiple times. OperatorChars should
3742 not be set after rulesets are defined. Suggested by
3743 Mitchell Blank Jr of Exec-PC.
3744 Do not report temporary failure on delivery to files. In
3745 interactive delivery mode, this would result in two SMTP
3746 responses after the DATA command. Problem noted by
3747 Nik Conwell of Boston University.
3748 Check file close when mailing to files. Problem noted by Nik
3749 Conwell of Boston University.
3750 Avoid a segmentation fault when using the LDAP map. Patch from
3751 Curtis W. Hillegas of Princeton University.
3752 Always bind to the LDAP server regardless of whether you are using
3753 ldap_open() or ldap_init(). Fix from Raj Kunjithapadam of
3754 @Home Network.
3755 New ruleset trust_auth to determine whether a given AUTH=
3756 parameter of the MAIL command should be trusted. See SMTP
3757 AUTH, cf/README, and doc/op/op.ps.
3758 Allow new named config file rules check_vrfy, check_expn, and
3759 check_etrn for VRFY, EXPN, and ETRN commands, respectively,
3760 similar to check_rcpt etc.
3761 Introduce new macros ${rcpt_mailer}, ${rcpt_host}, ${rcpt_addr},
3762 ${mail_mailer}, ${mail_host}, ${mail_addr} that hold
3763 the results of parsing the RCPT and MAIL arguments, i.e.
3764 the resolved triplet from $#mailer $@host $:addr.
3765 From Kari Hurtta of the Finnish Meteorological Institute.
3766 New macro ${client_resolve} which holds the result of the resolve
3767 call for ${client_name}: OK, FAIL, FORGED, TEMP. Proposed
3768 by Kari Hurtta of the Finnish Meteorological Institute.
3769 New macros ${dsn_notify}, ${dsn_envid}, and ${dsn_ret} that hold
3770 the corresponding DSN parameter values. Proposed by
3771 Mathias Herberts.
3772 New macro ${msg_size} which holds the value of the SIZE= parameter,
3773 i.e., usually the size of the message (in an ESMTP dialogue),
3774 before the message has been collected, thereafter it holds
3775 the message size as computed by sendmail (and can be used
3776 in check_compat).
3777 The macro ${deliveryMode} now specifies the current delivery mode
3778 sendmail is using instead of the value of the DeliveryMode
3779 option.
3780 New macro ${ntries} holds the number of delivery attempts.
3781 Drop explicit From: if same as what would be generated only if it is
3782 a local address. From Motonori Nakamura of Kyoto University.
3783 Write pid to file also if sendmail only processes the queue.
3784 Proposed by Roy J. Mongiovi of Georgia Tech.
3785 Log "low on disk space" only when necessary.
3786 New macro ${load_avg} can be used to check the current load average.
3787 Suggested by Scott Gifford of The Internet Ramp.
3788 Return-Receipt-To: header implies DSN request if option RrtImpliesDsn
3789 is set.
3790 Flag -S for maps to specify the character which is substituted
3791 for spaces (instead of the default given by O BlankSub).
3792 Flag -D for maps: perform no lookup in deferred delivery mode.
3793 This flag is set by default for the host map. Based on a
3794 proposal from Ian MacPhedran of the University of Saskatchewan.
3795 Open maps only on demand, not at startup.
3796 Log warning about unsupported IP address families.
3797 New option MaxHeadersLength allows to specify a maximum length
3798 of the sum of all headers. This can be used to prevent
3799 a denial-of-service attack.
3800 New option MaxMimeHeaderLength which limits the size of MIME
3801 headers and parameters within those headers. This option
3802 is intended to protect mail user agents from buffer
3803 overflow attacks.
3804 Added option MaxAliasRecursion to specify the maximum depth of
3805 alias recursion.
3806 New flag F=6 for mailers to strip headers to seven bit.
3807 Map type syslog to log the key via syslogd.
3808 Entries in the alias file can be continued by putting a backslash
3809 directly before the newline.
3810 New option DeadLetterDrop to define the location of the system-wide
3811 dead.letter file, formerly hardcoded to
3812 /usr/tmp/dead.letter. If this option is not set (the
3813 default), sendmail will not attempt to save to a
3814 system-wide dead.letter file if it can not bounce the mail
3815 to the user nor postmaster. Instead, it will rename the qf
3816 file as it has in the past when the dead.letter file
3817 could not be opened.
3818 New option PidFile to define the location of the pid file. The
3819 value of this option is macro expanded.
3820 New option ProcessTitlePrefix specifies a prefix string for the
3821 process title shown in 'ps' listings.
3822 New macros for use with the PidFile and ProcessTitlePrefix options
3823 (along with the already existing macros):
3824 ${daemon_info} Daemon information, e.g.
3825 SMTP+queueing@00:30:00
3826 ${daemon_addr} Daemon address, e.g., 0.0.0.0
3827 ${daemon_family} Daemon family, e.g., inet, inet6, etc.
3828 ${daemon_name} Daemon name, e.g., MSA.
3829 ${daemon_port} Daemon port, e.g., 25
3830 ${queue_interval} Queue run interval, e.g., 00:30:00
3831 New macros especially for virtual hosting:
3832 ${if_name} hostname of interface of incoming connection.
3833 ${if_addr} address of interface of incoming connection.
3834 The latter is only set if the interface does not belong to the
3835 loopback net.
3836 If a message being accepted via a method other than SMTP and
3837 would be rejected by a header check, do not send the message.
3838 Suggested by Phil Homewood of Mincom Pty Ltd.
3839 Don't strip comments for header checks if $>+ is used instead of $>.
3840 Provide header value as quoted string in the macro
3841 ${currHeader} (possibly truncated to MAXNAME). Suggested by
3842 Jan Krueger of Unix-AG of University of Hannover.
3843 The length of the header value is stored in ${hdrlen}.
3844 H*: allows to specify a default ruleset for header checks. This
3845 ruleset will only be called if the individual header does
3846 not have its own ruleset assigned. Suggested by Jan
3847 Krueger of Unix-AG of University of Hannover.
3848 The name of the header field stored in ${hdr_name}.
3849 Comments (i.e., text within parentheses) in rulesets are not
3850 removed if the config file version is greater than or equal
3851 to 9. For example, "R$+ ( 1 ) $@ 1" matches the
3852 input "token (1)" but does not match "token".
3853 Avoid removing the Content-Transfer-Encoding MIME header on
3854 MIME messages. Problem noted by Sigurbjorn B. Larusson of
3855 Multimedia Consumer Services. Fix from Per Hedeland of
3856 Ericsson.
3857 Avoid duplicate Content-Transfer-Encoding MIME header on
3858 messages with 8-bit text in headers. Problem noted by
3859 Per Steinar Iversen of Oslo College. Fix from Per Hedeland
3860 of Ericsson.
3861 Avoid keeping maps locked longer than necessary when re-opening a
3862 modified database map file. Problem noted by Chris Adams
3863 of Renaissance Internet Services.
3864 Resolving to the $#error mailer with a temporary failure code (e.g.,
3865 $#error $@ tempfail $: "400 Temporary failure") will now
3866 queue up the message instead of bouncing it.
3867 Be more liberal in acceptable responses to an SMTP RSET command as
3868 standard does not provide any indication of what to do when
3869 something other than 250 is received. Based on a patch
3870 from Steve Schweinhart of America Online.
3871 New option TrustedUser allows to specify a user who can own
3872 important files instead of root. This requires HASFCHOWN.
3873 Fix USERDB conditional so compiling with NEWDB or HESIOD and
3874 setting USERDB=0 works. Fix from Jorg Zanger of Schock.
3875 Fix another instance (similar to one in 8.9.3) of a network failure
3876 being mis-logged as "Illegal Seek" instead of whatever
3877 really went wrong. From John Beck of Sun Microsystems.
3878 $? tests also whether the macro is non-null.
3879 Print an error message if a mailer definition contains an invalid
3880 equate name.
3881 New mailer equate /= to specify a directory to chroot() into before
3882 executing the mailer program. Suggested by Igor Vinokurov.
3883 New mailer equate W= to specify the maximum time to wait for the
3884 mailer to return after sending all data to it.
3885 Only free memory from the process list when adding a new process
3886 into a previously filled slot. Previously, the memory was
3887 freed at removal time. Since removal can happen in a
3888 signal handler, this may leave the memory map in an
3889 inconsistent state. Problem noted by Jeff A. Earickson and
3890 David Cooley of Colby College.
3891 When using the UserDB @hostname catch-all, do not try to lookup
3892 local users in the passwd file. The UserDB code has
3893 already decided the message will be passed to another host
3894 for processing. Fix from Tony Landells of Burdett
3895 Buckeridge Young Limited.
3896 Support LDAP authorization via either a file containing the
3897 password or Kerberos V4 using the new map options
3898 '-ddistinguished_name', '-Mmethod', and '-Pfilename'. The
3899 distinguished_name is who to login as. The method can be
3900 one of LDAP_AUTH_NONE, LDAP_AUTH_SIMPLE, or
3901 LDAP_AUTH_KRBV4. The filename is the file containing the
3902 secret key for LDAP_AUTH_SIMPLE or the name of the Kerberos
3903 ticket file for LDAP_AUTH_KRBV4. Patch from Booker Bense
3904 of Stanford University.
3905 The ldapx map has been renamed to ldap. The use of ldapx is
3906 deprecated and will be removed in a future version.
3907 If the result of an LDAP search returns a multi-valued attribute
3908 and the map has the column delimiter set, it turns that
3909 response into a delimiter separated string. The LDAP map
3910 will traverse multiple entries as well. LDAP alias maps
3911 automatically set the column delimiter to the comma.
3912 Based on patch from Booker Bense of Stanford University and
3913 idea from Philip A. Prindeville of Mirapoint, Inc.
3914 Support return of multiple values for a single LDAP lookup. The
3915 values to be returned should be in a comma separated string.
3916 For example, `-v "email,emailother"'. Patch from
3917 Curtis W. Hillegas of Princeton University.
3918 Allow the use of LDAP for alias maps.
3919 If no LDAP attributes are specified in an LDAP map declaration, all
3920 attributes found in the match will be returned.
3921 Prevent commas in quoted strings in the AliasFile value from
3922 breaking up a single entry into multiple entries. This is
3923 needed for LDAP alias file specifications to allow for
3924 comma separated key and value strings.
3925 Keep connections to LDAP server open instead of opening and closing
3926 for each lookup. To reduce overhead, sendmail will cache
3927 connections such that multiple maps which use the same
3928 host, port, bind DN, and authentication will only result in
3929 a single connection to that host.
3930 Put timeout in the proper place for USE_LDAP_INIT.
3931 Be more careful about checking for errors and freeing memory on
3932 LDAP lookups.
3933 Use asynchronous LDAP searches to save memory and network
3934 resources.
3935 Do not copy LDAP query results if the map's match only flag is set.
3936 Increase portability to the Netscape LDAP libraries.
3937 Change the parsing of the LDAP filter specification. '%s' is still
3938 replaced with the literal contents of the map lookup key --
3939 note that this means a lookup can be done using the LDAP
3940 special characters. The new '%0' token can be used instead
3941 of '%s' to encode the key buffer according to RFC 2254.
3942 For example, if the LDAP map specification contains '-k
3943 "(user=%s)"' and a lookup is done on "*", this would be
3944 equivalent to '-k "(user=*)"' -- matching ANY record with a
3945 user attribute. Instead, if the LDAP map specification
3946 contains '-k "(user=%0)"' and a lookup is done on "*", this
3947 would be equivalent to '-k "(user=\2A)"' -- matching a user
3948 with the name "*".
3949 New LDAP map flags: "-1" requires a single match to be returned, if
3950 more than one is returned, it is equivalent to no records
3951 being found; "-r never|always|search|find" sets the LDAP
3952 alias dereference option; "-Z size" limits the number of
3953 matches to return.
3954 New option LDAPDefaultSpec allows a default map specification for
3955 LDAP maps. The value should only contain LDAP specific
3956 settings such as "-h host -p port -d bindDN", etc. The
3957 settings will be used for all LDAP maps unless they are
3958 specified in the individual map specification ('K'
3959 command). This option should be set before any LDAP maps
3960 are defined.
3961 Prevent an NDBM alias file opening loop when the NDBM open
3962 continually fails. Fix from Roy J. Mongiovi of Georgia
3963 Tech.
3964 Reduce memory utilization for smaller symbol table entries. In
3965 particular, class entries get much smaller, which can be
3966 important if you have large classes.
3967 On network-related temporary failures, record the hostname which
3968 gave error in the queued status message. Requested by
3969 Ulrich Windl of the Universitat Regensburg.
3970 Add new F=% mailer flag to allow for a store and forward
3971 configuration. Mailers which have this flag will not attempt
3972 delivery on initial receipt of a message or on queue runs
3973 unless the queued message is selected using one of the
3974 -qI/-qR/-qS queue run modifiers or an ETRN request. Code
3975 provided by Philip Guenther of Gustavus Adolphus College.
3976 New option ControlSocketName which, when set, creates a daemon
3977 control socket. This socket allows an external program to
3978 control and query status from the running sendmail daemon
3979 via a named socket, similar to the ctlinnd interface to the
3980 INN news server. Access to this interface is controlled by
3981 the UNIX file permissions on the named socket on most UNIX
3982 systems (see sendmail/README for more information). An
3983 example control program is provided as contrib/smcontrol.pl.
3984 Change the default values of QueueLA from 8 to (8 * numproc) and
3985 RefuseLA from 12 to (12 * numproc) where numproc is the
3986 number of processors online on the system (if that can be
3987 determined). For single processor machines, this change
3988 has no effect.
3989 Don't return body of message to postmaster on "Too many hops" bounces.
3990 Based on fix from Motonori Nakamura of Kyoto University.
3991 Give more detailed DSN descriptions for some cases. Patch from
3992 Motonori Nakamura of Kyoto University.
3993 Logging of alias, forward file, and UserDB expansion now happens
3994 at LogLevel 11 or higher instead of 10 or higher.
3995 Logging of an envelope's complete delivery (the "done" message) now
3996 happens at LogLevel 10 or higher instead of 11 or higher.
3997 Logging of TCP/IP or UNIX standard input connections now happens at
3998 LogLevel 10 or higher. Previously, only TCP/IP connections
3999 were logged, and on at LogLevel 12 or higher. Setting
4000 LogLevel to 10 will now assist users in tracking frequent
4001 connection-based denial of service attacks.
4002 Log basic information about authenticated connections at LogLevel
4003 10 or higher.
4004 Log SMTP Authentication mechanism and author when logging the sender
4005 information (from= syslog line).
4006 Log the DSN code for each recipient if one is available as a new
4007 equate (dsn=).
4008 Macro expand PostmasterCopy and DoubleBounceAddress options.
4009 New "ph" map for performing ph queries in rulesets, see
4010 sendmail/README for details. Contributed by Mark Roth
4011 of the University of Illinois at Urbana-Champaign.
4012 Detect temporary lookup failures in the host map if looking up a
4013 bracketed IP address. Problem noted by Kari Hurtta of the
4014 Finnish Meteorological Institute.
4015 Do not report a Remote-MTA on local deliveries. Problem noted by
4016 Kari Hurtta of the Finnish Meteorological Institute.
4017 When a forward file points to an alias which runs a program, run
4018 the program as the default user and the default group, not
4019 the forward file user. This change also assures the
4020 :include: directives in aliases are also processed using
4021 the default user and group. Problem noted by Sergiu
4022 Popovici of DNT Romania.
4023 Prevent attempts to save a dead.letter file for a user with
4024 no home directory (/no/such/directory). Problem noted by
4025 Michael Brown of Finnigan FT/MS.
4026 Include message delay and number of tries when logging that a
4027 message has been completely delivered (LogLevel of 10 or
4028 above). Suggested by Nick Hilliard of Ireland Online.
4029 Log the sender of a message even if none of the recipients were
4030 accepted. If some of the recipients were rejected, it is
4031 helpful to know the sender of the message.
4032 Check the root directory (/) when checking a path for safety.
4033 Problem noted by John Beck of Sun Microsystems.
4034 Prevent multiple responses to the DATA command if DeliveryMode is
4035 interactive and delivering to an alias which resolves to
4036 multiple files.
4037 Macros in the helpfile are expanded if the helpfile version is 2 or
4038 greater (see below); the help function doesn't print the
4039 version of sendmail any longer, instead it is placed in
4040 the helpfile ($v). Suggested by Chuck Foster of UUNET
4041 PIPEX. Additionally, comment lines (starting with #) are
4042 skipped and a version line (#vers) is introduced. The
4043 helpfile version for 8.10.0 is 2, if no version or an older
4044 version is found, a warning is logged. The '#vers'
4045 directive should be placed at the top of the help file.
4046 Use fsync() when delivering to a file to guarantee the delivery to
4047 disk succeeded. Suggested by Nick Christenson.
4048 If delivery to a file is unsuccessful, truncate the file back to its
4049 length before the attempt.
4050 If a forward points to a filename for delivery, change to the
4051 user's uid before checking permissions on the file. This
4052 allows delivery to files on NFS mounted directories where
4053 root is remapped to nobody. Problem noted by Harald
4054 Daeubler of Universitaet Ulm.
4055 purgestat and sendmail -bH purge only expired (Timeout.hoststatus)
4056 host status files, not all files.
4057 Any macros stored in the class $={persistentMacros} will be saved
4058 in the queue file for the message and set when delivery
4059 is attempted on the queued item. Suggested by Kyle Jones of
4060 Wonderworks Inc.
4061 Add support for storing information between rulesets using the new
4062 macro map class. This can be used to store information
4063 between queue runs as well using $={persistentMacros}.
4064 Based on an idea from Jan Krueger of Unix-AG of University
4065 of Hannover.
4066 New map class arith to allow for computations in rules. The
4067 operation (+, -, *, /, l (for less than), and =) is given
4068 as key. The two operands are specified as arguments; the
4069 lookup returns the result of the computation. For example,
4070 "$(arith l $@ 4 $@ 2 $)" will return "FALSE" and
4071 "$(arith + $@ 4 $@ 2 $)" will return "6".
4072 Add new syntax for header declarations which decide whether to
4073 include the header based on a macro rather than a mailer
4074 flag:
4075 H?${MyMacro}?X-My-Header: ${MyMacro}
4076 This should be used along with $={persistentMacros}.
4077 It can be used for adding headers to a message based on
4078 the results of check_* and header check rulesets.
4079 Allow new named config file rule check_eoh which is called after
4080 all of the headers have been collected. The input to the
4081 ruleset the number of headers and the size of all of the
4082 headers in bytes separated by $|. This ruleset along with
4083 the macro storage map can be used to correlate information
4084 gathered between headers and to check for missing headers.
4085 See cf/README or doc/op/op.ps for an example.
4086 Change the default for the MeToo option to True to correspond
4087 to the clarification in the DRUMS SMTP Update spec. This
4088 option is deprecated and will be removed from a future
4089 version.
4090 Change the sendmail binary default for SendMimeErrors to True.
4091 Change the sendmail binary default for SuperSafe to True.
4092 Display ruleset names in debug and address test mode output
4093 if referencing a named ruleset.
4094 New mailer equate m= which will limit the number of messages
4095 delivered per connection on an SMTP or LMTP mailer.
4096 Improve QueueSortOrder=Host by reversing the hostname before
4097 using it to sort. Now all the same domains are really run
4098 through the queue together. If they have the same MX host,
4099 then they will have a much better opportunity to use the
4100 connection cache if available. This should be a reasonable
4101 performance improvement. Patch from Randall Winchester of
4102 the University of Maryland.
4103 If a message is rejected by a header check ruleset, log who would
4104 have received the message if it had not been rejected.
4105 New "now" value for Timeout.queuereturn to bounce entries from the
4106 queue immediately. No delivery attempt is made.
4107 Increase sleeping time exponentially after too many "bad" commands
4108 up to 4 minutes delay (compare MAX{BAD,NOOP,HELO,VRFY,ETRN}-
4109 COMMANDS).
4110 New option ClientPortOptions similar to DaemonPortOptions
4111 but for outgoing connections.
4112 New suboptions for DaemonPortOptions: Name (a name used for
4113 error messages and logging) and Modifiers, i.e.
4114 a require authentication
4115 b bind to interface through which mail has
4116 been received
4117 c perform hostname canonification
4118 f require fully qualified hostname
4119 h use name of interface for outgoing HELO
4120 command
4121 C don't perform hostname canonification
4122 E disallow ETRN (see RFC 2476)
4123 New suboption for ClientPortOptions: Modifiers, i.e.
4124 h use name of interface for HELO command
4125 The version number for queue files (qf) has been incremented to 4.
4126 Log unacceptable HELO/EHLO domain name attempts if LogLevel is set
4127 to 10 or higher. Suggested by Rick Troxel of the National
4128 Institutes of Health.
4129 If a mailer dies, print the status in decimal instead of octal
4130 format. Suggested by Michael Shapiro of Sun Microsystems.
4131 Limit the length of all MX records considered for delivery to 8k.
4132 Move message priority from sender to recipient logging. Suggested by
4133 Ulrich Windl of the Universitat Regensburg.
4134 Add support for Berkeley DB 3.X.
4135 Add fix for Berkeley DB 2.X fcntl() locking race condition.
4136 Requires a post-2.7.5 version of Berkeley DB.
4137 Support writing traffic log (sendmail -X option) to a FIFO.
4138 Patch submitted by Rick Heaton of Network Associates, Inc.
4139 Do not ignore Timeout settings in the .cf file when a Timeout
4140 sub-options is set on the command line. Problem noted by
4141 Graeme Hewson of Oracle.
4142 Randomize equal preference MX records each time delivery is
4143 attempted via a new connection to a host instead of once per
4144 session. Suggested by Scott Salvidio of Compaq.
4145 Implement enhanced status codes as defined by RFC 2034.
4146 Add [hostname] to class w for the names of all interfaces unless
4147 DontProbeInterfaces is set. This is useful for sending mails
4148 to hosts which have dynamically assigned names.
4149 If a message is bounced due to bad MIME conformance, avoid bouncing
4150 the bounce for the same reason. If the body is not 8-bit
4151 clean, and EightBitMode isn't set to pass8, the body will
4152 not be included in the bounce. Problem noted by Valdis
4153 Kletnieks of Virginia Tech.
4154 The timeout for sending a message via SMTP has been changed from
4155 '${msgsize} / 16 + (${nrcpts} * 300)' to a timeout which
4156 simply checks for progress on sending data every 5 minutes.
4157 This will detect the inability to send information quicker
4158 and reduce the number of processes simply waiting to
4159 timeout.
4160 Prevent a segmentation fault on systems which give a partial filled
4161 interface address structure when loading the system network
4162 interface addresses. Fix from Reinier Bezuidenhout of
4163 Nanoteq.
4164 Add a compile-time configuration macro, MAXINTERFACES, which
4165 indicates the number of interfaces to read when probing
4166 for hostnames and IP addresses for class w ($=w). The
4167 default value is 512. Based on idea from Reinier
4168 Bezuidenhout of Nanoteq.
4169 If the RefuseLA option is set to 0, do not reject connections based
4170 on load average.
4171 Allow ruleset 0 to have a name. Problem noted by Neil Rickert of
4172 Northern Illinois University.
4173 Expand the Return-Path: header at delivery time, after "owner-"
4174 envelope splitting has occurred.
4175 Don't try to sort the queue if there are no entries. Patch from
4176 Luke Mewburn from RMIT University.
4177 Add a "/quit" command to address test mode.
4178 Include the proper sender in the UNIX "From " line and Return-Path:
4179 header when undeliverable mail is saved to ~/dead.letter.
4180 Problem noted by Kari Hurtta of the Finnish Meteorological
4181 Institute.
4182 The contents of a class can now be copied to another class using
4183 the syntax: "C{Dest} $={Source}". This would copy all of
4184 the items in class $={Source} into the class $={Dest}.
4185 Include original envelope's error transcript in bounces created for
4186 split (owner-) envelopes to see the original errors when
4187 the recipients were added. Based on fix from Motonori
4188 Nakamura of Kyoto University.
4189 Show reason for permanent delivery errors directly after the
4190 addresses. From Motonori Nakamura of Kyoto University.
4191 Prevent a segmentation fault when bouncing a split-envelope
4192 message. Patch from Motonori Nakamura of Kyoto University.
4193 If the specification for the queue run interval (-q###) has a
4194 syntax error, consider the error fatal and exit.
4195 Pay attention to CheckpointInterval during LMTP delivery. Problem
4196 noted by Motonori Nakamura of Kyoto University.
4197 On operating systems which have setlogin(2), use it to set the
4198 login name to the RunAsUserName when starting as a daemon.
4199 This is for delivery to programs which use getlogin().
4200 Based on fix from Motonori Nakamura of Kyoto University.
4201 Differentiate between "command not implemented" and "command
4202 unrecognized" in the SMTP dialogue.
4203 Strip returns from forward and include files. Problem noted by
4204 Allan E Johannesen of Worcester Polytechnic Institute.
4205 Prevent a core dump when using 'sendmail -bv' on an address which
4206 resolves to the $#error mailer with a temporary failure.
4207 Based on fix from Neil Rickert of Northern Illinois
4208 University.
4209 Prevent multiple deliveries of a message with a "non-local alias"
4210 pointing to a local user, if canonicalization fails
4211 the message was requeued *and* delivered to the alias.
4212 If an invalid ruleset is declared, the ruleset name could be
4213 ignored and its rules added to S0. Instead, ignore the
4214 ruleset lines as well.
4215 Avoid incorrect Final-Recipient, Action, and X-Actual-Recipient
4216 success DSN fields as well as duplicate entries for a
4217 single address due to S5 and UserDB processing. Problems
4218 noted by Kari Hurtta of the Finnish Meteorological
4219 Institute.
4220 Turn off timeouts when exiting sendmail due to an interrupt signal
4221 to prevent the timeout from firing during the exit process.
4222 Problem noted by Michael Shapiro of Sun Microsystems.
4223 Do not append @MyHostName to non-RFC822 addresses output by the EXPN
4224 command or on Final-Recipient: and X-Actual-Recipient: DSN
4225 headers. Non-RFC822 addresses include deliveries to
4226 programs, file, DECnet, etc.
4227 Fix logic for determining if a local user is using -f or -bs to
4228 spoof their return address. Based on idea from Neil Rickert
4229 of Northern Illinois University and patch from Per Hedeland
4230 of Ericsson.
4231 Report the proper UID in the bounce message if an :include: file is
4232 owned by a uid that doesn't map to a username and the
4233 :include: file contains delivery to a file or program.
4234 Problem noted by John Beck of Sun Microsystems.
4235 Avoid the attempt of trying to send a second SMTP QUIT command if
4236 the remote server responds to the first QUIT with a 4xx
4237 response code and drops the connection. This behavior was
4238 noted by Ulrich Windl of the Universitat Regensburg when
4239 sendmail was talking to the Mercury 1.43 MTA.
4240 If a hostname lookup times out and ServiceSwitchFile is set but the
4241 file is not present, the lookup failure would be marked as
4242 a permanent failure instead of a temporary failure. Fix
4243 from Russell King of the ARM Linux Project.
4244 Handle aliases or forwards which deliver to programs using tabs
4245 instead of spaces between arguments. Problem noted by Randy
4246 Wormser. Fix from Neil Rickert of Northern Illinois
4247 University.
4248 Allow MaxRecipientsPerMessage option to be set on the command line
4249 by normal users (e.g., sendmail won't drop its root
4250 privileges) to allow overrides for message submission via
4251 'sendmail -bs'.
4252 Set the names for help file and statistics file to "helpfile" and
4253 "statistics", respectively, if no parameters are given for
4254 them in the .cf file.
4255 Avoid bogus 'errbody: I/O Error -7' log messages when sending
4256 success DSN messages for messages relayed to non-DSN aware
4257 systems. Problem noted by Juergen Georgi of RUS University
4258 of Stuttgart and Kyle Tucker of Parexel International.
4259 Prevent +detail information from interfering with local delivery to
4260 multiple users in the same transaction (F=m).
4261 Add H_FORCE flag for the X-Authentication-Warning: header, so it
4262 will be added even if one already exists. Problem noted
4263 by Michal Zalewski of Marchew Industries.
4264 Stop processing SMTP commands if the SMTP connection is dropped.
4265 This prevents a remote system from flooding the connection
4266 with commands and then disconnecting. Previously, the
4267 server would process all of the buffered commands. Problem
4268 noted by Michal Zalewski of Marchew Industries.
4269 Properly process user-supplied headers beginning with '?'. Problem
4270 noted by Michal Zalewski of Marchew Industries.
4271 If multiple header checks resolve to the $#error mailer, use the
4272 last permanent (5XX) failure if any exist. Otherwise, use
4273 the last temporary (4XX) failure.
4274 RFC 1891 requires "hexchar" in a "xtext" to be upper case. Patch
4275 from Ronald F. Guilmette of Infinite Monkeys & Co.
4276 Timeout.ident now defaults to 5 seconds instead of 30 seconds to
4277 prevent the now common delays associated with mailing to a
4278 site which drops IDENT packets. Suggested by many.
4279 Persistent host status data is not reloaded disk when current data
4280 is available in the in-memory cache. Problem noted by Per
4281 Hedeland of Ericsson.
4282 mailq displays unprintable characters in addresses as their octal
4283 representation and a leading backslash. This avoids problems
4284 with "unprintable" characters. Problem noted by Michal
4285 Zalewski of the "Internet for Schools" project (IdS).
4286 The mail line length limit (L= equate) was adding the '!' indicator
4287 one character past the limit. This would cause subsequent
4288 hops to break the line again. The '!' is now placed in
4289 the last column of the limit if the line needs to be broken.
4290 Problem noted by Joe Pruett of Q7 Enterprises. Based on fix
4291 from Per Hedeland of Ericsson.
4292 If a resolver ANY query is larger than the UDP packet size, the
4293 resolver will fall back to TCP. However, some
4294 misconfigured firewalls black 53/TCP so the ANY lookup
4295 fails whereas an MX or A record might succeed. Therefore,
4296 don't fail on ANY queries.
4297 If an SMTP recipient is rejected due to syntax errors in the
4298 address, do not send an empty postmaster notification DSN
4299 to the postmaster. Problem noted by Neil Rickert of
4300 Northern Illinois University.
4301 Allow '_' and '.' in map names when parsing a sequence map
4302 specification. Patch from William Setzer of North Carolina
4303 State University.
4304 Fix hostname in logging of read timeouts for the QUIT command on
4305 cached connections. Problem noted by Neil Rickert of
4306 Northern Illinois University.
4307 Use a more descriptive entry to log "null" connections, i.e.,
4308 "host did not issue MAIL/EXPN/VRFY/ETRN during connection".
4309 Fix a file descriptor leak in ONEX mode.
4310 Portability:
4311 Reverse signal handling logic such that sigaction(2) with
4312 the SA_RESTART flag is the preferred method and the
4313 other signal methods are only tried if SA_RESTART
4314 is not available. Problem noted by Allan E
4315 Johannesen of Worcester Polytechnic Institute.
4316 AIX 4.x supports the sa_len member of struct sockaddr.
4317 This allows network interface probing to work
4318 properly. Fix from David Bronder of the
4319 University of Iowa.
4320 AIX 4.3 has snprintf() support.
4321 Use "PPC" as the architecture name when building under
4322 AIX. This will be reflected in the obj.* directory
4323 name.
4324 Apple Darwin support based on Apple Rhapsody port.
4325 Fixed AIX 'make depend' method from Valdis Kletnieks of
4326 Virginia Tech.
4327 Digital UNIX has uname(2).
4328 GNU Hurd updates from Mark Kettenis of the University of
4329 Amsterdam.
4330 Improved HPUX 11.0 portability.
4331 Properly determine the number of CPUs on FreeBSD 2.X,
4332 FreeBSD 3.X, HP/UX 10.X and HP/UX 11.X.
4333 Remove special IRIX ABI cases from Build script and the OS
4334 files. Use the standard 'cc' options used by SGI
4335 in building the operating system. Users can
4336 override the defaults by setting confCC and
4337 confLIBSEARCHPATH appropriately.
4338 IRIX nsd map support from Bob Mende of SGI.
4339 Minor devtools fixes for IRIX from Bob Mende of SGI.
4340 Linux patch for IP_SRCROUTE support from Joerg Dorchain
4341 of MW EDV & ELECTRONIC.
4342 Linux now uses /usr/sbin for confEBINDIR in the build
4343 system. From MATSUURA Takanori of Osaka University.
4344 Remove special treatment for Linux PPC in the build
4345 system. From MATSUURA Takanori of Osaka University.
4346 Motorolla UNIX SYSTEM V/88 Release 4.0 support from
4347 Sergey Rusanov of the Republic of Udmurtia.
4348 NCR MP-RAS 3.x includes regular expression support. From
4349 Tom J. Moore of NCR.
4350 NEC EWS-UX/V series settings for _PATH_VENDOR_CF and
4351 _PATH_SENDMAILPID from Oota Toshiya of
4352 NEC Computers Group Planning Division.
4353 Minor NetBSD owner/group tweaks from Ayamura Kikuchi, M.D.
4354 NEWS-OS 6.X listed SYSLOG_BUFSIZE as 256 in confENVDEF and
4355 1024 in conf.h. Since confENVDEF would be used,
4356 use that value in conf.h.
4357 Use NeXT's NETINFO to get domain name. From Gerd Knops of
4358 BITart Consulting.
4359 Use NeXT's NETINFO for alias and hostname resolution if
4360 AUTO_NETINFO_ALIASES and AUTO_NETINFO_HOSTS are
4361 defined. Patch from Wilfredo Sanchez of Apple
4362 Computer, Inc.
4363 NeXT portability tweaks. Problems reported by Dragan
4364 Milicic of the University of Utah and J. P. McCann
4365 of E I A.
4366 New compile flag FAST_PID_RECYCLE: set this if your system
4367 can reuse the same PID in the same second.
4368 New compile flag HASFCHOWN: set this if your OS has
4369 fchown(2).
4370 New compile flag HASRANDOM: set this to 0 if your OS does
4371 not have random(3). rand() will be used instead.
4372 New compile flag HASSRANDOMDEV: set this if your OS has
4373 srandomdev(3).
4374 New compile flag HASSETLOGIN: set this if your OS has
4375 setlogin(2).
4376 Replace SINIX and ReliantUNIX support with version
4377 specific SINIX files. From Gerald Rinske of
4378 Siemens Business Services.
4379 Use the 60-second load average instead of the 5 second load
4380 average on Compaq Tru64 UNIX (formerly Digital
4381 UNIX). From Chris Teakle of the University of Qld.
4382 Use ANSI C by default for Compaq Tru64 UNIX. Suggested by
4383 Randall Winchester of Swales Aerospace.
4384 Correct setgroups() prototype for Compaq Tru64 UNIX.
4385 Problem noted by Randall Winchester of Swales
4386 Aerospace.
4387 Hitachi 3050R/3050RX and 3500 Workstations running
4388 HI-UX/WE2 4.02, 6.10 and 7.10 from Motonori
4389 NAKAMURA of Kyoto University.
4390 New compile flag NO_GETSERVBYNAME: set this to disable
4391 use of getservbyname() on systems which can
4392 not lookup a service by name over NIS, such as
4393 HI-UX. Patch from Motonori NAKAMURA of Kyoto
4394 University.
4395 Use devtools/bin/install.sh on SCO 5.x. Problem noted
4396 by Sun Wenbing of the China Engineering and
4397 Technology Information Network.
4398 make depend didn't work properly on UNIXWARE 4.2. Problem
4399 noted by Ariel Malik of Netology, Ltd.
4400 Use /usr/lbin as confEBINDIR for Compaq Tru64 (Digital UNIX).
4401 Set confSTDIO_TYPE to torek for BSD-OS, FreeBSD, NetBSD,
4402 and OpenBSD.
4403 A recent Compaq Ultrix 4.5 Y2K patch has broken detection
4404 of local_hostname_length(). See sendmail/README
4405 for more details. Problem noted by Allan E
4406 Johannesen of Worcester Polytechnic Institute.
4407 CONFIG: Begin using /etc/mail/ for sendmail related files. This
4408 affects a large number of files. See cf/README for more
4409 details.
4410 CONFIG: New macro MAIL_SETTINGS_DIR contains the path (including
4411 trailing slash) for the mail settings directory.
4412 CONFIG: Increment version number of config file to 9.
4413 CONFIG: OSTYPE(`bsdi1.0') and OSTYPE(`bsdi2.0') have been
4414 deprecated and may be removed from a future release.
4415 BSD/OS users should begin using OSTYPE(`bsdi').
4416 CONFIG: OpenBSD 2.4 installs mail.local non-set-user-ID root. This
4417 requires a new OSTYPE(`openbsd'). From Todd C. Miller of
4418 Courtesan Consulting.
4419 CONFIG: New OSTYPE(`hpux11') for HP/UX 11.X.
4420 CONFIG: A syntax error in check_mail would cause fake top-level
4421 domains (.BITNET, .DECNET, .FAX, .USENET, and .UUCP) to
4422 be improperly rejected as unresolvable.
4423 CONFIG: New FEATURE(`dnsbl') takes up to two arguments (name of
4424 DNS server, rejection message) and can be included
4425 multiple times.
4426 CONFIG: New FEATURE(`relay_mail_from') allows relaying if the
4427 mail sender is listed as RELAY in the access map (and tagged
4428 with From:).
4429 CONFIG: Optional tagging of LHS in the access map (Connect:,
4430 From:, To:) to enable finer control.
4431 CONFIG: New FEATURE(`ldap_routing') implements LDAP address
4432 routing. See cf/README for a complete description of the
4433 new functionality.
4434 CONFIG: New variables for the new sendmail options:
4435 confAUTH_MECHANISMS AuthMechanisms
4436 confAUTH_OPTIONS AuthOptions
4437 confCLIENT_OPTIONS ClientPortOptions
4438 confCONTROL_SOCKET_NAME ControlSocketName
4439 confDEAD_LETTER_DROP DeadLetterDrop
4440 confDEF_AUTH_INFO DefaultAuthInfo
4441 confDF_BUFFER_SIZE DataFileBufferSize
4442 confLDAP_DEFAULT_SPEC LDAPDefaultSpec
4443 confMAX_ALIAS_RECURSION MaxAliasRecursion
4444 confMAX_HEADERS_LENGTH MaxHeadersLength
4445 confMAX_MIME_HEADER_LENGTH MaxMimeHeaderLength
4446 confPID_FILE PidFile
4447 confPROCESS_TITLE_PREFIX ProcessTitlePrefix
4448 confRRT_IMPLIES_DSN RrtImpliesDsn
4449 confTO_CONTROL Timeout.control
4450 confTO_RESOLVER_RETRANS Timeout.resolver.retrans
4451 confTO_RESOLVER_RETRANS_FIRST Timeout.resolver.retrans.first
4452 confTO_RESOLVER_RETRANS_NORMAL Timeout.resolver.retrans.normal
4453 confTO_RESOLVER_RETRY Timeout.resolver.retry
4454 confTO_RESOLVER_RETRY_FIRST Timeout.resolver.retry.first
4455 confTO_RESOLVER_RETRY_NORMAL Timeout.resolver.retry.normal
4456 confTRUSTED_USER TrustedUser
4457 confXF_BUFFER_SIZE XscriptFileBufferSize
4458 CONFIG: confDAEMON_OPTIONS has been replaced by DAEMON_OPTIONS(),
4459 which takes the options as argument and can be used
4460 multiple times; see cf/README for details.
4461 CONFIG: Add a fifth mailer definition to MAILER(`smtp') called
4462 "dsmtp". This mail provides on-demand delivery using the
4463 F=% mailer flag described above. The "dsmtp" mailer
4464 definition uses the new DSMTP_MAILER_ARGS which defaults
4465 to "IPC $h".
4466 CONFIG: New variables LOCAL_MAILER_MAXMSGS, SMTP_MAILER_MAXMSGS,
4467 and RELAY_MAILER_MAXMSGS for setting the m= equate for the
4468 local, smtp, and relay mailers respectively.
4469 CONFIG: New variable LOCAL_MAILER_DSN_DIAGNOSTIC_CODE for setting
4470 the DSN Diagnostic-Code type for the local mailer. The
4471 value should be changed with care.
4472 CONFIG: FEATURE(`local_lmtp') now sets the DSN Diagnostic-Code type
4473 for the local mailer to the proper value of "SMTP".
4474 CONFIG: All included maps are no longer optional by default; if
4475 there there is a problem with a map, sendmail will
4476 complain.
4477 CONFIG: Removed root from class E; use EXPOSED_USER(`root')
4478 to get the old behavior. Suggested by Joe Pruett
4479 of Q7 Enterprises.
4480 CONFIG: MASQUERADE_EXCEPTION() defines hosts/subdomains which
4481 will not be masqueraded. Proposed by Arne Wichmann
4482 of MPI Saarbruecken, Griff Miller of PGS Tensor,
4483 Jayme Cox of Broderbund Software Inc.
4484 CONFIG: A list of exceptions for FEATURE(`nocanonify') can be
4485 specified by CANONIFY_DOMAIN or CANONIFY_DOMAIN_FILE,
4486 i.e., a list of domains which are passed to $[ ... $]
4487 for canonification. Based on an idea from Neil Rickert
4488 of Northern Illinois University.
4489 CONFIG: If `canonify_hosts' is specified as parameter for
4490 FEATURE(`nocanonify') then addresses which have only
4491 a hostname, e.g., <user@host>, will be canonified.
4492 CONFIG: If FEATURE(`nocanonify') is turned on, a trailing dot is
4493 nevertheless added to addresses with more than one component
4494 in it.
4495 CONFIG: Canonification is no longer attempted for any host or domain
4496 in class 'P' ($=P).
4497 CONFIG: New class for matching virtusertable entries $={VirtHost} that
4498 can be populated by VIRTUSER_DOMAIN or VIRTUSER_DOMAIN_FILE.
4499 FEATURE(`virtuser_entire_domain') can be used to apply this
4500 class also to entire subdomains. Hosts in this class are
4501 treated as canonical in SCanonify2, i.e., a trailing dot
4502 is added.
4503 CONFIG: If VIRTUSER_DOMAIN() or VIRTUSER_DOMAIN_FILE() are used,
4504 include $={VirtHost} in $=R (hosts allowed to relay).
4505 CONFIG: FEATURE(`generics_entire_domain') can be used to apply the
4506 genericstable also to subdomains of $=G.
4507 CONFIG: Pass "+detail" as %2 for virtusertable lookups.
4508 Patch from Noam Freedman from University of Chicago.
4509 CONFIG: Pass "+detail" as %1 for genericstable lookups. Suggested
4510 by Raymond S Brand of rsbx.net.
4511 CONFIG: Allow @domain in genericstable to override masquerading.
4512 Suggested by Owen Duffy from Owen Duffy & Associates.
4513 CONFIG: LOCAL_DOMAIN() adds entries to class w. Suggested by Steve
4514 Hubert of University of Washington.
4515 CONFIG: OSTYPE(`gnuhurd') has been replaced by OSTYPE(`gnu') as
4516 GNU is now the canonical system name. From Mark
4517 Kettenis of the University of Amsterdam.
4518 CONFIG: OSTYPE(`unixware7') updates from Larry Rosenman.
4519 CONFIG: Do not include '=' in option expansion if there is no value
4520 associated with the option. From Andrew Brown of
4521 Graffiti World Wide, Inc.
4522 CONFIG: Add MAILER(`qpage') to define a new pager mailer. Contributed
4523 by Philip A. Prindeville of Enteka Enterprise Technology
4524 Services.
4525 CONFIG: MAILER(`cyrus') was not preserving case for mail folder
4526 names. Problem noted by Randall Winchester of Swales
4527 Aerospace.
4528 CONFIG: RELAY_MAILER_FLAGS can be used to define additional flags
4529 for the relay mailer. Suggested by Doug Hughes of Auburn
4530 University and Brian Candler.
4531 CONFIG: LOCAL_MAILER_FLAGS now includes 'P' (Add Return-Path:
4532 header) by default. Suggested by Per Hedeland of Ericsson.
4533 CONFIG: Use SMART_HOST for bracketed addresses, e.g., user@[host].
4534 Suggested by Kari Hurtta of the Finnish Meteorological
4535 Institute.
4536 CONFIG: New macro MODIFY_MAILER_FLAGS to tweak *_MAILER_FLAGS;
4537 i.e., to set, add, or delete flags.
4538 CONFIG: If SMTP AUTH is used then relaying is allowed for any user
4539 who authenticated via a "trusted" mechanism, i.e., one that
4540 is defined via TRUST_AUTH_MECH(`list of mechanisms').
4541 CONFIG: FEATURE(`delay_checks') delays check_mail and check_relay
4542 after check_rcpt and allows for exceptions from the checks.
4543 CONFIG: Map declarations have been moved into their associated
4544 feature files to allow greater flexibility in use of
4545 sequence maps. Suggested by Per Hedeland of Ericsson.
4546 CONFIG: New macro LOCAL_MAILER_EOL to override the default end of
4547 line string for the local mailer. Requested by Il Oh of
4548 Willamette Industries, Inc.
4549 CONFIG: Route addresses are stripped, i.e., <@a,@b,@c:user@d> is
4550 converted to <user@d>
4551 CONFIG: Reject bogus return address of <@@hostname>, generated by
4552 Sun's older, broken configuration files.
4553 CONFIG: FEATURE(`nullclient') now provides the full rulesets of a
4554 normal configuration, allowing anti-spam checks to be
4555 performed.
4556 CONFIG: Don't return a permanent error (Relaying denied) if
4557 ${client_name} can't be resolved just temporarily.
4558 Suggested by Kari Hurtta of the Finnish Meteorological
4559 Institute.
4560 CONFIG: Change numbered rulesets into named (which still can
4561 be accessed by their numbers).
4562 CONFIG: FEATURE(`nouucp') takes one parameter: reject or nospecial
4563 which describes whether to disallow "!" in the local part
4564 of an address.
4565 CONFIG: Call Local_localaddr from localaddr (S5) which can be used
4566 to rewrite an address from a mailer which has the F=5 flag
4567 set. If the ruleset returns a mailer, the appropriate
4568 action is taken, otherwise the returned tokens are ignored.
4569 CONFIG: cf/ostype/solaris.m4 has been renamed to solaris2.pre5.m4
4570 and cf/ostype/solaris2.m4 is now a copy of solaris2.ml.m4.
4571 The latter is kept around for backward compatibility.
4572 CONFIG: Allow ":D.S.N:" for mailer/virtusertable "error:" entries,
4573 where "D.S.N" is an RFC 1893 compliant error code.
4574 CONFIG: Use /usr/lbin as confEBINDIR for Compaq Tru64 (Digital UNIX).
4575 CONFIG: Remove second space between username and date in UNIX From_
4576 line. Noted by Allan E Johannesen of Worcester Polytechnic
4577 Institute.
4578 CONFIG: Make sure all of the mailers have complete T= equates.
4579 CONFIG: Extend FEATURE(`local_procmail') so it can now take
4580 arguments overriding the mailer program, arguments, and
4581 mailer definition flags. This makes it possible to use
4582 other programs such as maildrop for local delivery.
4583 CONFIG: Emit warning if FEATURE(`local_lmtp') or
4584 FEATURE(`local_procmail') is given after MAILER(`local').
4585 Patch from Richard A. Nelson of IBM.
4586 CONFIG: Add SMTP Authentication information to Received: header
4587 default value (confRECEIVED_HEADER).
4588 CONFIG: Remove `l' flag from USENET_MAILER_FLAGS as it is not a
4589 local mailer. Problem noted by Per Hedeland of Ericsson.
4590 CONTRIB: Added bounce-resender.pl from Brian R. Gaeke of the
4591 University of California at Berkeley.
4592 CONTRIB: Added domainmap.m4 from Mark D. Roth of the University of
4593 Illinois at Urbana-Champaign.
4594 CONTRIB: etrn.pl now recognizes bogus host names. Patch from
4595 Bruce Barnett of GE's R&D Lab.
4596 CONTRIB: Patches for re-mqueue.pl by Graeme Hewson of Oracle
4597 Corporation UK.
4598 CONTRIB: Added qtool.pl to assist in managing the queues.
4599 DEVTOOLS: Prevent user environment variables from interfering with
4600 the Build scripts. Problem noted by Ezequiel H. Panepucci of
4601 Yale University.
4602 DEVTOOLS: 'Build -M' will display the obj.* directory which will
4603 be used for building.
4604 DEVTOOLS: 'Build -A' will display the architecture that would be
4605 used for a fresh build.
4606 DEVTOOLS: New variable confRANLIB, set automatically by configure.sh.
4607 DEVTOOLS: New variable confRANLIBOPTS for the options to send to
4608 ranlib.
4609 DEVTOOLS: 'Build -O <path>' will have the object files build in
4610 <path>/obj.*. Suggested by Bryan Costales of Exactis.
4611 DEVTOOLS: New variable confNO_MAN_BUILD which will prevent the
4612 building of the man pages when defined. Suggested by Bryan
4613 Costales.
4614 DEVTOOLS: New variables confNO_HELPFILE_INSTALL and
4615 confNO_STATISTICS_INSTALL which will prevent the
4616 installation of the sendmail helpfile and statistics file
4617 respectively. Suggested by Bryan Costales.
4618 DEVTOOLS: Recognize ReliantUNIX as SINIX. Patch from Gerald Rinske
4619 of Siemens Business Services.
4620 DEVTOOLS: New variable confSTDIO_TYPE which defines the type of
4621 stdio library. The new buffered file I/O depends on the
4622 Torek stdio library. This option can be either portable or
4623 torek.
4624 DEVTOOLS: New variables confSRCADD and confSMSRCADD which
4625 correspond to confOBJADD and confSMOBJADD respectively.
4626 They should contain the C source files for the object files
4627 listed in confOBJADD and confSMOBJADD. These file names
4628 will be passed to the 'make depend' stage of compilation.
4629 DEVTOOLS: New program specific variables for each of the programs
4630 in the sendmail distribution. Each has the form
4631 `conf_prog_ENVDEF', for example, `conf_sendmail_ENVDEF'.
4632 The new variables are conf_prog_ENVDEF, conf_prog_LIBS,
4633 conf_prog_SRCADD, and conf_prog_OBJADD.
4634 DEVTOOLS: Build system redesign. This should have little affect on
4635 building the distribution, but documentation on the changes
4636 are in devtools/README.
4637 DEVTOOLS: Don't allow 'Build -f file' if an object directory already
4638 exists. Suggested by Valdis Kletnieks of Virginia Tech.
4639 DEVTOOLS: Rename confSRCDIR to confSMSRCDIR since it only identifies
4640 the path to the sendmail source directory. confSRCDIR is a
4641 new variable which identifies the root of the source
4642 directories for all of the programs in the distribution.
4643 DEVTOOLS: confSRCDIR and confSMSRCDIR are now determined at Build
4644 time. They can both still be overridden by setting the m4
4645 macro.
4646 DEVTOOLS: confSBINGRP now defaults to bin instead of kmem.
4647 DEVTOOLS: 'Build -Q prefix' uses devtools/Site/prefix.*.m4 for
4648 build configurations, and places objects in obj.prefix.*/.
4649 Complains as 'Build -f file' does for existing object
4650 directories. Suggested by Tom Smith of Digital Equipment
4651 Corporation.
4652 DEVTOOLS: Setting confINSTALL_RAWMAN will install unformatted
4653 manual pages in the directory tree specified by
4654 confMANROOTMAN.
4655 DEVTOOLS: If formatting the manual pages fails, copy in the
4656 preformatted pages from the distribution. The new variable
4657 confCOPY specifies the copying program.
4658 DEVTOOLS: Defining confFORCE_RMAIL will install rmail without
4659 question. Suggested by Terry Lambert of Whistle
4660 Communications.
4661 DEVTOOLS: confSTFILE and confHFFILE can be used to change the names
4662 of the installed statistics and help files, respectively.
4663 DEVTOOLS: Remove spaces in `uname -r` output when determining
4664 operating system identity. Problem noted by Erik
4665 Wachtenheim of Dartmouth College.
4666 DEVTOOLS: New variable confLIBSEARCHPATH to specify the paths that
4667 will be search for the libraries specified in confLIBSEARCH.
4668 Defaults to "/lib /usr/lib /usr/shlib".
4669 DEVTOOLS: New variables confSTRIP and confSTRIPOPTS for specifying
4670 how to strip binaries. These are used by the new
4671 install-strip target.
4672 DEVTOOLS: New config file site.post.m4 which is included after
4673 the others (if it exists).
4674 DEVTOOLS: Change order of LIBS: first product specific libraries
4675 then the default ones.
4676 MAIL.LOCAL: Will not be installed set-user-ID root. To use mail.local
4677 as local delivery agent without LMTP mode, use
4678 MODIFY_MAILER_FLAGS(`LOCAL', `+S')
4679 to set the S flag.
4680 MAIL.LOCAL: Do not reject addresses which would otherwise be
4681 accepted by sendmail. Suggested by Neil Rickert of
4682 Northern Illinois University.
4683 MAIL.LOCAL: New -7 option which causes LMTP mode not to advertise
4684 8BITMIME in the LHLO response. Suggested by Kari Hurtta of
4685 the Finnish Meteorological Institute.
4686 MAIL.LOCAL: Add support for the maillock() routines by defining
4687 MAILLOCK when compiling. Also requires linking with
4688 -lmail. Patch from Neil Rickert of Northern Illinois
4689 University.
4690 MAIL.LOCAL: Create a Content-Length: header if CONTENTLENGTH is
4691 defined when compiling. Automatically set for Solaris 2.3
4692 and later. Patch from Neil Rickert of Northern Illinois
4693 University.
4694 MAIL.LOCAL: Move the initialization of the 'notifybiff' address
4695 structure to the beginning of the program. This ensures that
4696 the getservbyname() is done before any seteuid to a possibly
4697 unauthenticated user. If you are using NIS+ and secure RPC
4698 on a Solaris system, this avoids syslog messages such as,
4699 "authdes_refresh: keyserv(1m) is unable to encrypt session
4700 key." Patch from Neil Rickert of Northern Illinois
4701 University.
4702 MAIL.LOCAL: Support group writable mail spool files when MAILGID is
4703 set to the gid to use (-DMAILGID=6) when compiling.
4704 Patch from Neil Rickert of Northern Illinois University.
4705 MAIL.LOCAL: When a mail message included lines longer than 2046
4706 characters (in LMTP mode), mail.local split the incoming
4707 line up into 2046-character output lines (excluding the
4708 newline). If an input line was 2047 characters long
4709 (excluding CR-LF) and the last character was a '.',
4710 mail.local saw it as the end of input, transfered it to the
4711 user mailbox and tried to write an `ok' back to sendmail.
4712 If the message was much longer, both sendmail and
4713 mail.local would deadlock waiting for each other to read
4714 what they have written. Problem noted by Peter Jeremy of
4715 Alcatel Australia Limited.
4716 MAIL.LOCAL: New option -b to return a permanent error instead of a
4717 temporary error if a mailbox exceeds quota. Suggested by
4718 Neil Rickert of Northern Illinois University.
4719 MAIL.LOCAL: The creation of a lockfile is subject to a global
4720 timeout to avoid starvation.
4721 MAIL.LOCAL: Properly parse addresses with multiple quoted
4722 local-parts. Problem noted by Ronald F. Guilmette of
4723 Infinite Monkeys & Co.
4724 MAIL.LOCAL: NCR MP/RAS 3.X portability from Tom J. Moore of NCR.
4725 MAILSTATS: New -p option to invoke program mode in which stats are
4726 printed in a machine readable fashion and the stats file
4727 is reset. Patch from Kevin Hildebrand of the University
4728 of Maryland.
4729 MAKEMAP: If running as root, automatically change the ownership of
4730 generated maps to the TrustedUser as specified in the
4731 sendmail configuration file.
4732 MAKEMAP: New -C option to accept an alternate sendmail
4733 configuration file to use for finding the TrustedUser
4734 option.
4735 MAKEMAP: New -u option to dump (unmap) a database. Based on
4736 code contributed by Roy Mongiovi of Georgia Tech.
4737 MAKEMAP: New -e option to allow empty values. Suggested by Philip
4738 A. Prindeville of Enteka Enterprise Technology Services.
4739 MAKEMAP: Compile cleanly on 64-bit operating systems. Problem
4740 noted by Gerald Rinske of Siemens Business Services.
4741 OP.ME: Correctly document interaction between F=S and U= mailer
4742 equates. Problem noted by Bob Halley of Internet Engines.
4743 OP.ME: Fixup Timeout documentation. From Graeme Hewson of Oracle
4744 Corporation UK.
4745 OP.ME: The Timeout [r] option was incorrectly listed as "safe"
4746 (e.g., sendmail would not drop root privileges if the
4747 option was specified on the command line). Problem noted
4748 by Todd C. Miller of Courtesan Consulting.
4749 PRALIASES: Handle the hash and btree map specifications for
4750 Berkeley DB. Patch from Brian J. Coan of the
4751 Institute for Global Communications.
4752 PRALIASES: Read the sendmail.cf file for the location(s) of the
4753 alias file(s) if the -f option is not used. Patch from
4754 John Beck of Sun Microsystems.
4755 PRALIASES: New -C option to specify an alternate sendmail
4756 configuration file to use for finding alias file(s). Patch
4757 from John Beck of Sun Microsystems.
4758 SMRSH: allow shell commands echo, exec, and exit. Allow command
4759 lists using || and &&. Based on patch from Brian J. Coan
4760 of the Institute for Global Communications.
4761 SMRSH: Update README for the new Build system. From Tim Pierce
4762 of RootsWeb Genealogical Data Cooperative.
4763 VACATION: Added vacation auto-responder to sendmail distribution.
4764 LIBSMDB: Added abstracted database library. Works with Berkeley
4765 DB 1.85, Berkeley DB 2.X, Berkeley DB 3.X, and NDBM.
4766 Changed Files:
4767 The Build script in the various program subdirectories are
4768 no longer symbolic links. They are now scripts
4769 which execute the actual Build script in
4770 devtools/bin.
4771 All the manual pages are now written against -man and not
4772 -mandoc as they were previously.
4773 Add a simple Makefile to every directory so make instead
4774 of Build will work (unless parameters are
4775 required for Build).
4776 New Directories:
4777 devtools/M4/UNIX
4778 include
4779 libmilter
4780 libsmdb
4781 libsmutil
4782 vacation
4783 Renamed Directories:
4784 BuildTools => devtools
4785 src => sendmail
4786 Deleted Files:
4787 cf/m4/nullrelay.m4
4788 devtools/OS/Linux.ppc
4789 devtools/OS/ReliantUNIX
4790 devtools/OS/SINIX
4791 sendmail/ldap_map.h
4792 New Files:
4793 INSTALL
4794 PGPKEYS
4795 cf/cf/generic-linux.cf
4796 cf/cf/generic-linux.mc
4797 cf/feature/delay_checks.m4
4798 cf/feature/dnsbl.m4
4799 cf/feature/generics_entire_domain.m4
4800 cf/feature/no_default_msa.m4
4801 cf/feature/relay_mail_from.m4
4802 cf/feature/virtuser_entire_domain.m4
4803 cf/mailer/qpage.m4
4804 cf/ostype/bsdi.m4
4805 cf/ostype/hpux11.m4
4806 cf/ostype/openbsd.m4
4807 contrib/bounce-resender.pl
4808 contrib/domainmap.m4
4809 contrib/qtool.8
4810 contrib/qtool.pl
4811 devtools/M4/depend/AIX.m4
4812 devtools/M4/list.m4
4813 devtools/M4/string.m4
4814 devtools/M4/subst_ext.m4
4815 devtools/M4/switch.m4
4816 devtools/OS/Darwin
4817 devtools/OS/GNU
4818 devtools/OS/SINIX.5.43
4819 devtools/OS/SINIX.5.44
4820 devtools/OS/m88k
4821 devtools/bin/find_in_path.sh
4822 mail.local/Makefile
4823 mailstats/Makefile
4824 makemap/Makefile
4825 praliases/Makefile
4826 rmail/Makefile
4827 sendmail/Makefile
4828 sendmail/bf.h
4829 sendmail/bf_portable.c
4830 sendmail/bf_portable.h
4831 sendmail/bf_torek.c
4832 sendmail/bf_torek.h
4833 sendmail/shmticklib.c
4834 sendmail/statusd_shm.h
4835 sendmail/timers.c
4836 sendmail/timers.h
4837 smrsh/Makefile
4838 vacation/Makefile
4839 Renamed Files:
4840 cf/ostype/gnuhurd.m4 => cf/ostype/gnu.m4
4841 sendmail/cdefs.h => include/sendmail/cdefs.h
4842 sendmail/sendmail.hf => sendmail/helpfile
4843 sendmail/mailstats.h => include/sendmail/mailstats.h
4844 sendmail/pathnames.h => include/sendmail/pathnames.h
4845 sendmail/safefile.c => libsmutil/safefile.c
4846 sendmail/snprintf.c => libsmutil/snprintf.c
4847 sendmail/useful.h => include/sendmail/useful.h
4848 cf/ostype/solaris2.m4 => cf/ostype/solaris2.pre5.m4
4849 Copied Files:
4850 cf/ostype/solaris2.ml.m4 => cf/ostype/solaris2.m4
4852 8.9.3/8.9.3 1999/02/04
4853 SECURITY: Limit message headers to a maximum of 32K bytes (total
4854 of all headers in a single message) to prevent a denial of
4855 service attack. This limit will be configurable in 8.10.
4856 Problem noted by Michal Zalewski of the "Internet for
4857 Schools" project (IdS).
4858 Prevent segmentation fault on an LDAP lookup if the LDAP map
4859 was closed due to an earlier failure. Problem noted by
4860 Jeff Wasilko of smoe.org. Fix from Booker Bense of
4861 Stanford University and Per Hedeland of Ericsson.
4862 Preserve the order of the MIME headers in multipart messages
4863 when performing the MIME header length check. This
4864 will allow PGP signatures to function properly. Problem
4865 noted by Lars Hecking of University College, Cork, Ireland.
4866 If ruleset 5 rewrote the local address to an :include: directive,
4867 the delivery would fail with an "aliasing/forwarding loop
4868 broken" error. Problem noted by Eric C Hagberg of Morgan
4869 Stanley. Fix from Per Hedeland of Ericsson.
4870 Allow -T to work for bestmx maps. Fix from Aaron Schrab of
4871 ExecPC Internet Systems.
4872 During the transfer of a message in an SMTP transaction, if a
4873 TCP timeout occurs, the message would be properly queued
4874 for later retry but the failure would be logged as
4875 "Illegal Seek" instead of a timeout. Problem noted by
4876 Piotr Kucharski of the Warsaw School of Economics (SGH)
4877 and Carles Xavier Munyoz Baldo of CTV Internet.
4878 Prevent multiple deliveries on a self-referencing alias if the
4879 F=w mailer flag is not set. Problem noted by Murray S.
4880 Kucherawy of Concentric Network Corporation and Per
4881 Hedeland of Ericsson.
4882 Do not strip empty headers but if there is no value and a
4883 default is defined in sendmail.cf, use the default.
4884 Problem noted by Philip Guenther of Gustavus Adolphus
4885 College and Christopher McCrory of Netus, Inc.
4886 Don't inherit information about the sender (notably the full name)
4887 in SMTP (-bs) mode, since this might be called from inetd.
4888 Accept any 3xx reply code in response to DATA command instead of
4889 requiring 354. This change will match the wording to be
4890 published in the updated SMTP specification from the DRUMS
4891 group of the IETF.
4892 Portability:
4893 AIX 4.2.0 or 4.2.1 may become updated by the fileset
4894 bos.rte.net level 4.2.0.2. This introduces the
4895 softlink /usr/lib/libbind.a which should
4896 not be used. It conflicts with the resolver
4897 built into libc.a. "bind" has been removed
4898 from the confLIBSEARCH BuildTools variable.
4899 Users who have installed BIND 8.X will have
4900 to add it back in their site.config.m4 file.
4901 Problem noted by Ole Holm Nielsen of the
4902 Technical University of Denmark.
4903 CRAY TS 10.0.x from Sven Nielsen of San Diego
4904 Supercomputer Center.
4905 Improved LDAP version 3 integration based on input
4906 from Kurt D. Zeilenga of the OpenLDAP Foundation,
4907 John Beck of Sun Microsystems, and Booker Bense
4908 of Stanford University.
4909 Linux doesn't have a standard way to get the timezone
4910 between different releases. Back out the
4911 change in 8.9.2 and don't attempt to derive
4912 a timezone. Problem reported by Igor S. Livshits
4913 of the University of Illinois at Urbana-Champaign
4914 and Michael Dickens of Tetranet Communications.
4915 Reliant UNIX, the new name for SINIX, from Gert-Jan Looy
4916 of Siemens/SNI.
4917 SunOS 5.8 from John Beck of Sun Microsystems.
4918 CONFIG: SCO UnixWare 2.1 and 7.0 need TZ to get the proper
4919 timezone. Problem noted by Petr Lampa of Technical
4920 University of Brno.
4921 CONFIG: Handle <@bestmx-host:user@otherhost> addressing properly
4922 when using FEATURE(bestmx_is_local). Patch from Neil W.
4923 Rickert of Northern Illinois University.
4924 CONFIG: Properly handle source routed and %-hack addresses on
4925 hosts which the mailertable remaps to local:. Patch from
4926 Neil W. Rickert of Northern Illinois University.
4927 CONFIG: Internal fixup of mailertable local: map value. Patch from
4928 Larry Parmelee of Cornell University.
4929 CONFIG: Only add back +detail from host portion of mailer triplet
4930 on local mailer triplets if it was originally +detail.
4931 Patch from Neil W. Rickert of Northern Illinois University.
4932 CONFIG: The bestmx_is_local checking done in check_rcpt would
4933 cause later checks to fail. Patch from Paul J Murphy of
4934 MIDS Europe.
4935 New Files:
4936 BuildTools/OS/CRAYTS.10.0.x
4937 BuildTools/OS/ReliantUNIX
4938 BuildTools/OS/SunOS.5.8
4940 8.9.2/8.9.2 1998/12/30
4941 SECURITY: Remove five second sleep on accepting daemon connections
4942 due to an accept() failure. This sleep could be used
4943 for a denial of service attack.
4944 Do not silently ignore queue files with names which are too long.
4945 Patch from Bryan Costales of InfoBeat, Inc.
4946 Do not store failures closing an SMTP session in persistent
4947 host status. Reported by Graeme Hewson of Oracle
4948 Corporation UK.
4949 Allow symbolic link forward files if they are in safe directories.
4950 Problem noted by Andreas Schott of the Max Planck Society.
4951 Missing columns in a text map could cause a segmentation fault.
4952 Fix from David Lee of the University of Durham.
4953 Note that for 8.9.X, PrivacyOptions=goaway also includes the
4954 noetrn flag. This is scheduled to change in a future
4955 version of sendmail. Problem noted by Theo Van Dinter of
4956 Chrysalis Symbolic Designa and Alan Brown of Manawatu
4957 Internet Services.
4958 When trying to do host canonification in a Wildcard MX
4959 environment, try an MX lookup of the hostname without the
4960 default domain appended. Problem noted by Olaf Seibert of
4961 Polderland Language & Speech Technology.
4962 Reject SMTP RCPT To: commands with only comments (i.e.
4963 'RCPT TO: (comment)'. Problem noted by Earle Ake of
4964 Hassler Communication Systems Technology, Inc.
4965 Handle any number of %s in the LDAP filter spec. Patch from
4966 Per Hedeland of Ericsson.
4967 Clear ldapx open timeouts even if the map open failed to prevent
4968 a segmentation fault. Patch from Wayne Knowles of the
4969 National Institute of Water & Atmospheric Research Ltd.
4970 Do not syslog envelope clone messages when using address
4971 verification (-bv). Problem noted by Kari Hurtta of the
4972 Finnish Meteorological Institute.
4973 Continue to perform queue runs while in daemon mode even if the
4974 daemon is rejecting connections due to a disk full
4975 condition. Problem noted by JR Oldroyd of TerraNet
4976 Internet Services.
4977 Include full filename on installation of the sendmail.hf file
4978 in case the $HFDIR directory does not exist. Problem
4979 noted by Josef Svitak of Montana State University.
4980 Close all maps when exiting the process with one exception.
4981 Berkeley DB can use internal shared memory locking for
4982 its memory pool. Closing a map opened by another process
4983 will interfere with the shared memory and locks of the
4984 parent process leaving things in a bad state. For
4985 Berkeley DB, only close the map if the current process
4986 is also the one that opened the map, otherwise only close
4987 the map file descriptor. Thanks to Yoseff Francus of
4988 Collective Technologies for volunteering his system for
4989 extended testing.
4990 Avoid null pointer dereference on XDEBUG output for SMTP reply
4991 failures. Problem noted by Carlos Canau of EUnet Portugal.
4992 On mailq and hoststat listings being piped to another program, such
4993 as more, if the pipe closes (i.e., the user quits more),
4994 stop sending output and exit. Patch from Allan E Johannesen
4995 of Worcester Polytechnic Institute.
4996 In accordance with the documentation, LDAP map lookup failures
4997 are now considered temporary failures instead of permanent
4998 failures unless the -t flag is used in the map definition.
4999 Problem noted by Booker Bense of Stanford University and
5000 Eric C. Hagberg of Morgan Stanley.
5001 Fix by one error reporting on long alias names. Problem noted by
5002 H. Paul Hammann of the Missouri Research and Education
5003 Network.
5004 Fix DontBlameSendmail=IncludeFileInUnsafeDirPath behavior. Problem
5005 noted by Barry S. Finkel of Argonne National Laboratory.
5006 When automatically converting from 8 bit to quoted printable MIME,
5007 be careful not to miss a multi-part boundary if that
5008 boundary is preceded by a boundary-like line. Problem
5009 noted by Andreas Raschle of Ansid Inc. Fix from
5010 Kari Hurtta of the Finnish Meteorological Institute.
5011 Avoid bogus reporting of "LMTP tobuf overflow" when the buffer
5012 has enough space for the additional address. Problem
5013 noted by Steve Cliffe of the University of Wollongong.
5014 Fix DontBlameSendmail=FileDeliveryToSymlink behavior. Problem
5015 noted by Alex Vorobiev of Swarthmore College.
5016 If the check_compat ruleset resolves to the $#discard mailer,
5017 discard the current recipient. Unlike check_relay,
5018 check_mail, and check_rcpt, the entire envelope is not
5019 discarded. Problem noted by RZ D. Rahlfs. Fix from
5020 Claus Assmann of Christian-Albrechts-University of Kiel.
5021 Avoid segmentation fault when reading ServiceSwitchFile files with
5022 bogus formatting. Patch from Kari Hurtta of the Finnish
5023 Meteorological Institute.
5024 Support Berkeley DB 2.6.4 API change.
5025 OP.ME: Pages weren't properly output on duplexed printers. Fix
5026 from Matthew Black of CSU Long Beach.
5027 Portability:
5028 Apple Rhapsody from Wilfredo Sanchez of Apple Computer, Inc.
5029 Avoid a clash with IRIX 6.2 getopt.h and the UserDatabase
5030 option structure. Problem noted by Ashley M.
5031 Kirchner of Photo Craft Laboratories, Inc.
5032 Break out IP address to hostname translation for
5033 reading network interface addresses into
5034 class 'w'. Patch from John Kennedy of
5035 Cal State University, Chico.
5036 AIX 4.x use -qstrict with -O3 to prevent the optimized
5037 from changing the semantics of the compiled
5038 program. From Simon Travaglia of the
5039 University of Waikato, New Zealand.
5040 FreeBSD 2.2.2 and later support setusercontext(). From
5041 Peter Wemm of DIALix.
5042 FreeBSD 3.x fix from Peter Wemm of DIALix.
5043 IRIX 5.x has a syslog buffer size of 512 bytes. From
5044 Nao NINOMIYA of Utsunomiya University.
5045 IRIX 6.5 64-bit Build support.
5046 LDAP Version 3 support from John Beck and Ravi Iyer
5047 of Sun Microsystems.
5048 Linux does not implement seteuid() properly. From
5049 John Kennedy of Cal State University, Chico.
5050 Linux timezone type was set improperly. From Takeshi Itoh
5051 of Bits Co., Ltd.
5052 NCR MP-RAS 3.x needs -lresolv for confLIBS. From
5053 Tom J. Moore of NCR.
5054 NeXT 4.x correction to man page path. From J. P. McCann
5055 of E I A.
5056 System V Rel 5.x (a.k.a UnixWare7 w/o BSD-Compatibility Libs)
5057 from Paul Gampe of the Asia Pacific Network
5058 Information Center.
5059 ULTRIX now requires an optimization limit of 970 from
5060 Allan E Johannesen of Worcester Polytechnic
5061 Institute.
5062 Fix extern declaration for sm_dopr(). Fix from Henk
5063 van Oers of Algemeen Nederlands Persbureau.
5064 CONFIG: Catch @hostname,user@anotherhost.domain as relaying.
5065 Problem noted by Mark Rogov of AirMedia, Inc. Fix from
5066 Claus Assmann of Christian-Albrechts-University of Kiel.
5067 CONFIG: Do not refer to http://maps.vix.com/ on RBL rejections as
5068 there are multiple RBL's available and the MAPS RBL may
5069 not be the one in use. Suggested by Alan Brown of
5070 Manawatu Internet Services.
5071 CONFIG: Properly strip route addresses (i.e., @host1:user@host2)
5072 when stripping down a recipient address to check for
5073 relaying. Patch from Claus Assmann of
5074 Christian-Albrechts-University of Kiel and Neil W Rickert
5075 of Northern Illinois University.
5076 CONFIG: Allow the access database to override RBL lookups. Patch
5077 from Claus Assmann of Christian-Albrechts-University of
5078 Kiel.
5079 CONFIG: UnixWare 7 support from Phillip P. Porch of The Porch
5080 Dot Com.
5081 CONFIG: Fixed check for deferred delivery mode warning. Patch
5082 from Claus Assmann of Christian-Albrechts-University of
5083 Kiel and Per Hedeland of Ericsson.
5084 CONFIG: If a recipient using % addressing is used, e.g.
5085 user%site@othersite, and othersite's MX records are now
5086 checked for local hosts if FEATURE(relay_based_on_MX) is
5087 used. Problem noted by Alexander Litvin of Lucky Net Ltd.
5088 Patch from Alexander Litvin of Lucky Net Ltd and
5089 Claus Assmann of Christian-Albrechts-University of Kiel.
5090 MAIL.LOCAL: Prevent warning messages from appearing in the LMTP
5091 stream. Do not allow more than one response per recipient.
5092 MAIL.LOCAL: Handle routed addresses properly when using LMTP. Fix
5093 from John Beck of Sun Microsystems.
5094 MAIL.LOCAL: Properly check for CRLF when using LMTP. Fix from
5095 John Beck of Sun Microsystems.
5096 MAIL.LOCAL: Substitute MAILER-DAEMON for the LMTP empty sender in
5097 the envelope From header.
5098 MAIL.LOCAL: Accept underscores in hostnames in LMTP mode.
5099 Problem noted by Glenn A. Malling of Syracuse University.
5100 MAILSTATS: Document msgsrej and msgsdis fields in the man page.
5101 Problem noted by Richard Wong of Princeton University.
5102 MAKEMAP: Build group list so group writable files are allowed with
5103 the -s flag. Problem noted by Curt Sampson of Internet
5104 Portal Services, Inc.
5105 PRALIASES: Automatically handle alias files created without the
5106 NULL byte at the end of the key. Patch from John Beck of
5107 Sun Microsystems.
5108 PRALIASES: Support Berkeley DB 2.6.4 API change.
5109 New Files:
5110 BuildTools/OS/IRIX64.6.5
5111 BuildTools/OS/UnixWare.5.i386
5112 cf/ostype/unixware7.m4
5113 contrib/smcontrol.pl
5114 src/control.c
5116 8.9.1/8.9.1 1998/07/02
5117 If both an OS specific site configuration file and a generic
5118 site.config.m4 file existed, only the latter was used
5119 instead of both. Problem noted by Geir Johannessen of
5120 the Norwegian University of Science and Technology.
5121 Fix segmentation fault while converting 8 bit to 7 bit MIME
5122 multipart messages by trying to write to an unopened
5123 file descriptor. Fix from Kari Hurtta of the Finnish
5124 Meteorological Institute.
5125 Do not assume Message: and Text: headers indicate the end of
5126 the header area when parsing MIME headers. Problem noted
5127 by Kari Hurtta of the Finnish Meteorological Institute.
5128 Setting the confMAN#SRC Build variable would only effect the
5129 installation commands. The man pages would still be
5130 built with .0 extensions. Problem noted by Bryan
5131 Costales of InfoBeat, Inc.
5132 Installation of manual pages didn't honor the DESTDIR environment
5133 variable. Problem noted by Bryan Costales of InfoBeat, Inc.
5134 If the check_relay ruleset resolved to the discard mailer, messages
5135 were still delivered. Problem noted by Mirek Luc of NASK.
5136 Mail delivery to files would fail with an Operating System Error
5137 if sendmail was not running as root, i.e., RunAsUser was set.
5138 Problem noted by Leonard N. Zubkoff of Dandelion Digital.
5139 Prevent MinQueueAge from interfering from queued items created
5140 in the future, i.e., if the system clock was set ahead
5141 and then back. Problem noted by Michael Miller of the
5142 University of Natal, Pietermaritzburg.
5143 Do not advertise ETRN support in ESTMP EHLO reply if noetrn is
5144 set in the PrivacyOptions option. Fix from Ted Rule of
5145 Flextech TV.
5146 Log invalid persistent host status file lines instead of
5147 bouncing the message. Problem noted by David Lindes of
5148 DaveLtd Enterprises.
5149 Move creation of empty sendmail.st file from installation to
5150 compilation. Installation may be done from a read-only
5151 mount. Fix from Bryan Costales of InfoBeat, Inc. and Ric
5152 Anderson of the Oasis Research Center, Inc.
5153 Enforce the maximum number of User Database entries limit. Problem
5154 noted by Gary Buchanan of Credence Systems Inc.
5155 Allow dead.letter files in root's home directory. Problem noted
5156 by Anna Ullman of Sun Microsystems.
5157 Program deliveries in forward files could be marked unsafe if
5158 any directory listed in the ForwardPath option did not
5159 exist. Problem noted by Jorg Bielak of Coastal Web Online.
5160 Do not trust the length of the address structure returned by
5161 gethostbyname(). Problem noted by Chris Evans of Oxford
5162 University.
5163 If the SIZE= MAIL From: ESMTP parameter is too large, use the
5164 5.3.4 DSN status code instead of 5.2.2. Similarly, for
5165 non-local deliveries, if the message is larger than the
5166 mailer maximum message size, use 5.3.4 instead of 5.2.3.
5167 Suggested by Antony Bowesman of
5168 Fujitsu/TeaWARE Mail/MIME System.
5169 Portability:
5170 Fix the check for an IP address reverse lookup for
5171 use in $&{client_name} on 64 bit platforms.
5172 From Gilles Gallot of Institut for Development
5173 and Resources in Intensive Scientific computing.
5174 BSD-OS uses .0 for man page extensions. From Jeff Polk
5175 of BSDI.
5176 DomainOS detection for Build. Also, version 10.4 and later
5177 ship a unistd.h. Fixes from Takanobu Ishimura of
5178 PICT Inc.
5179 NeXT 4.x uses /usr/lib/man/cat for its man pages. From
5180 J. P. McCann of E I A.
5181 SCO 4.X and 5.X include NDBM support. From Vlado Potisk
5182 of TEMPEST, Ltd.
5183 CONFIG: Do not pass spoofed PTR results through resolver for
5184 qualification. Problem noted by Michiel Boland of
5185 Digital Valley Internet Professionals; fix from
5186 Kari Hurtta of the Finnish Meteorological Institute.
5187 CONFIG: Do not try to resolve non-DNS hostnames such as UUCP,
5188 BITNET, and DECNET addresses for resolvable senders.
5189 Problem noted by Alexander Litvin of Lucky Net Ltd.
5190 CONFIG: Work around Sun's broken configuration which sends bounce
5191 messages as coming from @@hostname instead of <>. LMTP
5192 would not accept @@hostname.
5193 OP.ME: Corrections to complex sendmail startup script from Rick
5194 Troxel of the National Institutes of Health.
5195 RMAIL: Do not install rmail by default, require 'make force-install'
5196 as this rmail isn't the same as others. Suggested by
5197 Kari Hurtta of the Finnish Meteorological Institute.
5198 New Files:
5199 BuildTools/OS/DomainOS.10.4
5201 8.9.0/8.9.0 1998/05/19
5202 SECURITY: To prevent users from reading files not normally
5203 readable, sendmail will no longer open forward, :include:,
5204 class, ErrorHeader, or HelpFile files located in unsafe
5205 (i.e., group or world writable) directory paths. Sites
5206 which need the ability to override security can use the
5207 DontBlameSendmail option. See the README file for more
5208 information.
5209 SECURITY: Problems can occur on poorly managed systems, specifically,
5210 if maps or alias files are in world writable directories.
5211 This fixes the change added to 8.8.6 to prevent links in these
5212 world writable directories.
5213 SECURITY: Make sure ServiceSwitchFile option file is not a link if
5214 it is in a world writable directory.
5215 SECURITY: Never pass a tty to a mailer -- if a mailer can get at the
5216 tty it may be able to push bytes back to the senders input.
5217 Unfortunately this breaks -v mode. Problem noted by
5218 Wietse Venema of the Global Security Analysis Lab at
5219 IBM T.J. Watson Research.
5220 SECURITY: Empty group list if DontInitGroups is set to true to
5221 prevent program deliveries from picking up extra group
5222 privileges. Problem reported by Wolfgang Ley of DFN-CERT.
5223 SECURITY: The default value for DefaultUser is now set to the uid and
5224 gid of the first existing user mailnull, sendmail, or daemon
5225 that has a non-zero uid. If none of these exist, sendmail
5226 reverts back to the old behavior of using uid 1 and gid 1.
5227 This is a security problem for Linux which has chosen that
5228 uid and gid for user bin instead of daemon. If DefaultUser
5229 is set in the configuration file, that value overrides this
5230 default.
5231 SECURITY: Since 8.8.7, the check for non-set-user-ID binaries
5232 interfered with setting an alternate group id for the
5233 RunAsUser option. Problem noted by Randall Winchester of
5234 the University of Maryland.
5235 Add support for Berkeley DB 2.X. Based on patch from John Kennedy
5236 of Cal State University, Chico.
5237 Remove support for OLD_NEWDB (pre-1.5 version of Berkeley DB). Users
5238 which previously defined OLD_NEWDB=1 must now upgrade to the
5239 current version of Berkeley DB.
5240 Added support for regular expressions using the new map class regex.
5241 From Jan Krueger of Unix-AG of University of Hannover.
5242 Support for BIND 8.1.1's hesiod for hesiod maps and hesiod
5243 UserDatabases from Randall Winchester of the University
5244 of Maryland.
5245 Allow any shell for user shell on program deliveries on V1
5246 configurations for backwards compatibility on machines which
5247 do not have getusershell(). Fix from John Beck of Sun
5248 Microsystems.
5249 On operating systems which change the process title by reusing the
5250 argument vector memory, sendmail could corrupt memory if the
5251 last argument was either "-q" or "-d". Problem noted by
5252 Frank Langbein of the University of Stuttgart.
5253 Support Local Mail Transfer Protocol (LMTP) between sendmail and
5254 mail.local on the F=z flag.
5255 Macro-expand the contents of the ErrMsgFile. Previously this was
5256 only done if you had magic characters (0x81) to indicate
5257 macro expansion. Now $x will be expanded. This means that
5258 real dollar signs have to be backslash escaped.
5259 TCP Wrappers expects "unknown" in the hostname argument if the
5260 reverse DNS lookup for the incoming connection fails.
5261 Problem noted by Randy Grimshaw of Syracuse University and
5262 Wietse Venema of the Global Security Analysis Lab at
5263 IBM T.J. Watson Research.
5264 DSN success bounces generated from an invocation of sendmail -t
5265 would be sent to both the sender and MAILER-DAEMON.
5266 Problem noted by Claus Assmann of
5267 Christian-Albrechts-University of Kiel.
5268 Avoid "Error 0" messages on delivery mailers which exit with a
5269 valid exit value such as EX_NOPERM. Fix from Andreas Luik
5270 of ISA Informationssysteme GmbH.
5271 Tokenize $&x expansions on right hand side of rules. This eliminates
5272 the need to use tricks like $(dequote "" $&{client_name} $)
5273 to cause the ${client_name} macro to be properly tokenized.
5274 Add the MaxRecipientsPerMessage option: this limits the number of
5275 recipients that will be accepted in a single SMTP
5276 transaction. After this number is reached, sendmail
5277 starts returning "452 Too many recipients" to all RCPT
5278 commands. This can be used to limit the number of recipients
5279 per envelope (in particular, to discourage use of the server
5280 for spamming). Note: a better approach is to restrict
5281 relaying entirely.
5282 Fixed pointer initialization for LDAP lmap struct, fixed -s option
5283 to ldapx map and added timeout for ldap_open call to
5284 avoid hanging sendmail in the event of hung LDAP servers.
5285 Patch from Booker Bense of Stanford University.
5286 Allow multiple -qI, -qR, or -qS queue run limiters. For example,
5287 '-qRfoo -qRbar' would deliver mail to recipients with foo or
5288 bar in their address. Patch from Allan E Johannesen of
5289 Worcester Polytechnic Institute.
5290 The bestmx map will now return a list of the MX servers for a host if
5291 passed a column delimiter via the -z map flag. This can be
5292 used to check if the server is an MX server for the recipient
5293 of a message. This can be used to help prevent relaying.
5294 Patch from Mitchell Blank Jr of Exec-PC.
5295 Mark failures for the *file* mailer and return bounce messages to the
5296 sender for those failures.
5297 Prevent bogus syslog timestamps on errors in sendmail.cf by
5298 preserving the TZ environment variable until TimeZoneSpec
5299 has been determined. Problem noted by Ralf Hildebrandt of
5300 Technical University of Braunschweig. Patch from Per Hedeland
5301 of Ericsson.
5302 Print test input in address test mode when input is not from the tty
5303 when the -v flag is given (i.e., sendmail -bt -v) to make
5304 output easier to decipher. Problem noted by Aidan Nichol
5305 of Procter & Gamble.
5306 The LDAP map -s flag was not properly parsed and the error message
5307 given included the remainder of the arguments instead of
5308 solely the argument in error. Problem noted by Aidan Nichol
5309 of Procter & Gamble.
5310 New DontBlameSendmail option. This option allows administrators to
5311 bypass some of sendmail's file security checks at the expense
5312 of system security. This should only be used if you are
5313 absolutely sure you know the consequences. The available
5314 DontBlameSendmail options are:
5315 Safe
5316 AssumeSafeChown
5317 ClassFileInUnsafeDirPath
5318 ErrorHeaderInUnsafeDirPath
5319 GroupWritableDirPathSafe
5320 GroupWritableForwardFileSafe
5321 GroupWritableIncludeFileSafe
5322 GroupWritableAliasFile
5323 HelpFileinUnsafeDirPath
5324 WorldWritableAliasFile
5325 ForwardFileInGroupWritableDirPath
5326 IncludeFileInGroupWritableDirPath
5327 ForwardFileInUnsafeDirPath
5328 IncludeFileInUnsafeDirPath
5329 ForwardFileInUnsafeDirPathSafe
5330 IncludeFileInUnsafeDirPathSafe
5331 MapInUnsafeDirPath
5332 LinkedAliasFileInWritableDir
5333 LinkedClassFileInWritableDir
5334 LinkedForwardFileInWritableDir
5335 LinkedIncludeFileInWritableDir
5336 LinkedMapInWritableDir
5337 LinkedServiceSwitchFileInWritableDir
5338 FileDeliveryToHardLink
5339 FileDeliveryToSymLink
5340 WriteMapToHardLink
5341 WriteMapToSymLink
5342 WriteStatsToHardLink
5343 WriteStatsToSymLink
5344 RunProgramInUnsafeDirPath
5345 RunWritableProgram
5346 New DontProbeInterfaces option to turn off the inclusion of all the
5347 interface names in $=w on startup. In particular, if you
5348 have lots of virtual interfaces, this option will speed up
5349 startup. However, unless you make other arrangements, mail
5350 sent to those addresses will be bounced.
5351 Automatically create alias databases if they don't exist and
5352 AutoRebuildAliases is set.
5353 Add PrivacyOptions=noetrn flag to disable the SMTP ETRN command.
5354 Suggested by Christophe Wolfhugel of the Institut Pasteur.
5355 Add PrivacyOptions=noverb flag to disable the SMTP VERB command.
5356 When determining the client host name ($&{client_name} macro), do
5357 a forward (A) DNS lookup on the result of the PTR lookup
5358 and compare results. If they differ or if the PTR lookup
5359 fails, &{client_name} will contain the IP address
5360 surrounded by square brackets (e.g., [127.0.0.1]).
5361 New map flag: -Tx appends "x" to lookups that return temporary failure
5362 (i.e, it is like -ax for the temporary failure case, in
5363 contrast to the success case).
5364 New syntax to do limited checking of header syntax. A config line
5365 of the form:
5366 HHeader: $>Ruleset
5367 causes the indicated Ruleset to be invoked on the Header
5368 when read. This ruleset works like the check_* rulesets --
5369 that is, it can reject mail on the basis of the contents.
5370 Limit the size of the HELO/EHLO parameter to prevent spammers
5371 from hiding their connection information in Received:
5372 headers.
5373 When SingleThreadDelivery is active, deliveries to locked hosts
5374 are skipped. This will cause the delivering process to
5375 try the next MX host or queue the message if no other MX
5376 hosts are available. Suggested by Alexander Litvin.
5377 The [FILE] mailer type now delivers to the file specified in the
5378 A= equate of the mailer definition instead of $u. It also
5379 obeys all of the F= mailer flags such as the MIME
5380 7/8 bit conversion flags. This is useful for defining
5381 a mailer which delivers to the same file regardless of the
5382 recipient (e.g., 'A=FILE /dev/null' to discard unwanted mail).
5383 Do not assume the identity of a remote connection is root@localhost
5384 if the remote connection closes the socket before the
5385 remote identity can be queried.
5386 Change semantics of the F=S mailer flag back to 8.7.5 behavior.
5387 Some mailers, including procmail, require that the real
5388 uid is left unchanged by sendmail. Problem noted by Per
5389 Hedeland of Ericsson.
5390 No longer is the src/obj*/Makefile selected from a large list -- it
5391 is now generated using the information in BuildTools/OS/ --
5392 some of the details are determined dynamically via
5393 BuildTools/bin/configure.sh.
5394 The other programs in the sendmail distribution -- mail.local,
5395 mailstats, makemap, praliases, rmail, and smrsh -- now use
5396 the new Build method which creates an operating system
5397 specific Makefile using the information in BuildTools.
5398 Make 4xx reply codes to the SMTP MAIL command be non-sticky (i.e.,
5399 a failure on one message won't affect future messages to the
5400 same host). This is necessary if the remote host sends
5401 a 451 error if the domain of the sender does not resolve
5402 as is common in anti-spam configurations. Problem noted
5403 by Mitchell Blank Jr of Exec-PC.
5404 New "discard" mailer for check_* rulesets and header checking
5405 rulesets. If one of the above rulesets resolves to the
5406 $#discard mailer, the commands will be accepted but the
5407 message will be completely discarded after it is accepting.
5408 This means that even if only one of the recipients
5409 resolves to the $#discard mailer, none of the recipients
5410 will receive the mail. Suggested by Brian Kantor.
5411 All but the last cloned envelope of a split envelope were queued
5412 instead of being delivered. Problem noted by John Caruso
5413 of CNET: The Computer Network.
5414 Fix deadlock situation in persistent host status file locking.
5415 Syslog an error if a user forward file could not be read due to
5416 an error. Patch from John Beck of Sun Microsystems.
5417 Use the first name returned on machine lookups when canonifying a
5418 hostname via NetInfo. Patch from Timm Wetzel of GWDG.
5419 Clear the $&{client_addr}, $&{client_name}, and $&{client_port}
5420 macros when delivering a bounce message to prevent
5421 rejection by a check_compat ruleset which uses these macros.
5422 Problem noted by Jens Hamisch of AgiX Internetservices GmbH.
5423 If the check_relay ruleset resolves to the the error mailer, the
5424 error in the $: portion of the resolved triplet is used
5425 in the rejection message given to the remote machine.
5426 Suggested by Scott Gifford of The Internet Ramp.
5427 Set the $&{client_addr}, $&{client_name}, and $&{client_port} macros
5428 before calling the check_relay ruleset. Suggested by Scott
5429 Gifford of The Internet Ramp.
5430 Sendmail would get a segmentation fault if a mailer exited with an
5431 exit code of 79. Problem noted by Aaron Schrab of ExecPC
5432 Internet. Fix from Christophe Wolfhugel of the Pasteur
5433 Institute.
5434 Separate snprintf/vsnprintf routines into separate file for use by
5435 mail.local.
5436 Allow multiple map lookups on right hand side, e.g.,
5437 R$* $( host $1 $) $| $( passwd $1 $). Patch from
5438 Christophe Wolfhugel of the Pasteur Institute.
5439 Properly generate success DSN messages if requested for aliases
5440 which have owner- aliases. Problem noted by Kari Hurtta
5441 of the Finnish Meteorological Institute.
5442 Properly display delayed-expansion macros ($&{macroname}) in
5443 address test mode (-bt). Problem noted by Bryan Costales
5444 of InfoBeat, Inc.
5445 -qR could sometimes match names incorrectly. Problem noted by
5446 Lutz Euler of Lavielle EDV Systemberatung GmbH & Co.
5447 Include a magic number and version in the StatusFile for the
5448 mailstats command.
5449 Record the number of rejected and discarded messages in the
5450 StatusFile for display by the mailstats command. Patch
5451 from Randall Winchester of the University of Maryland.
5452 IDENT returns where the OSTYPE field equals "OTHER" now list the
5453 user portion as IDENT:username@site instead of
5454 username@site to differentiate the two. Suggested by
5455 Kari Hurtta of the Finnish Meteorological Institute.
5456 Enforce timeout for LDAP queries. Patch from Per Hedeland of
5457 Ericsson.
5458 Change persistent host status filename substitution so '/' is
5459 replaced by ':' instead of '|' to avoid clashes. Also
5460 avoid clashes with hostnames with leading dots. Fix from
5461 Mitchell Blank Jr. of Exec-PC.
5462 If the system lock table is full, only attempt to create a new
5463 queue entry five times before giving up. Previously, it
5464 was attempted indefinitely which could cause the partition
5465 to run out of inodes. Problem noted by Suzie Weigand of
5466 Stratus Computer, Inc.
5467 In verbose mode, warn if the sendmail.cf version is less than the
5468 currently supported version.
5469 Sorting for QueueSortOrder=host is now case insensitive. Patch
5470 from Randall S. Winchester of the University of Maryland.
5471 Properly quote a full name passed via the -F command line option,
5472 the Full-Name: header, or the NAME environment variable if
5473 it contains characters which must be quoted. Problem noted
5474 by Kari Hurtta of the Finnish Meteorological Institute.
5475 Avoid possible race condition that unlocked a mail job before
5476 releasing the transcript file on systems that use flock(2).
5477 In some cases, this might result in a "Transcript Unavailable"
5478 message in error bounces.
5479 Accept SMTP replies which contain only a reply code and no
5480 accompanying text. Problem noted by Fernando Fraticelli of
5481 Digital Equipment Corporation.
5482 Portability:
5483 AIX 4.1 uses int for SOCKADDR_LEN_T from Motonori Nakamura
5484 of Kyoto University.
5485 AIX 4.2 requires <userpw.h> before <usersec.h>. Patch from
5486 Randall S. Winchester of the University of
5487 Maryland.
5488 AIX 4.3 from Valdis Kletnieks of Virginia Tech CNS.
5489 CRAY T3E from Manu Mahonen of Center for Scientific Computing
5490 in Finland.
5491 Digital UNIX now uses statvfs for determining free
5492 disk space. Patch from Randall S. Winchester of
5493 the University of Maryland.
5494 HP-UX 11.x from Richard Allen of Opin Kerfi HF and
5495 Regis McEwen of Progress Software Corporation.
5496 IRIX 64 bit fixes from Kari Hurtta of the Finnish
5497 Meteorological Institute.
5498 IRIX 6.2 configuration fix for mail.local from Michael Kyle
5499 of CIC/Advanced Computing Laboratory.
5500 IRIX 6.5 from Thomas H Jones II of SGI.
5501 IRIX 6.X load average code from Bob Mende of SGI.
5502 QNX from Glen McCready <glen@qnx.com>.
5503 SCO 4.2 and 5.x use /usr/bin instead of /usr/ucb for links
5504 to sendmail. Install with group bin instead of kmem
5505 as kmem does not exist. From Guillermo Freige of
5506 Gobernacion de la Pcia de Buenos Aires and Paul
5507 Fischer of BTG, Inc.
5508 SunOS 4.X does not include memmove(). Patch from
5509 Per Hedeland of Ericsson.
5510 SunOS 5.7 includes getloadavg() function for determining
5511 load average. Patch from John Beck of Sun
5512 Microsystems.
5513 CONFIG: Increment version number of config file.
5514 CONFIG: add DATABASE_MAP_TYPE to set the default type of database
5515 map for the various maps. The default is hash. Patch from
5516 Robert Harker of Harker Systems.
5517 CONFIG: new confEBINDIR m4 variable for defining the executable
5518 directory for certain programs.
5519 CONFIG: new FEATURE(local_lmtp) to use the new LMTP support for
5520 local mail delivery. By the default, /usr/libexec/mail.local
5521 is used. This is expected to be the mail.local shipped
5522 with 8.9 which is LMTP capable. The path is based on the
5523 new confEBINDIR m4 variable.
5524 CONFIG: Use confEBINDIR in determining path to smrsh for
5525 FEATURE(smrsh). Note that this changes the default from
5526 /usr/local/etc/smrsh to /usr/libexec/smrsh. To obtain the
5527 old path for smrsh, use FEATURE(smrsh, /usr/local/etc/smrsh).
5528 CONFIG: DOMAIN(generic) changes the default confFORWARD_PATH to
5529 include $z/.forward.$w+$h and $z/.forward+$h which allow
5530 the user to setup different .forward files for
5531 user+detail addressing.
5532 CONFIG: add confMAX_RCPTS_PER_MESSAGE, confDONT_PROBE_INTERFACES,
5533 and confDONT_BLAME_SENDMAIL to set MaxRecipientsPerMessage,
5534 DontProbeInterfaces, and DontBlameSendmail options.
5535 CONFIG: by default do not allow relaying (that is, accepting mail
5536 from outside your domain and sending it to another host
5537 outside your domain).
5538 CONFIG: new FEATURE(promiscuous_relay) to allow mail relaying from
5539 any site to any site.
5540 CONFIG: new FEATURE(relay_entire_domain) allows any host in your
5541 domain as defined by the 'm' class ($=m) to relay.
5542 CONFIG: new FEATURE(relay_based_on_MX) to allow relaying based on
5543 the MX records of the host portion of an incoming recipient.
5544 CONFIG: new FEATURE(access_db) which turns on the access database
5545 feature. This database gives you the ability to allow
5546 or refuse to accept mail from specified domains for
5547 administrative reasons. By default, names that are listed
5548 as "OK" in the access db are domain names, not host names.
5549 CONFIG: new confCR_FILE m4 variable for defining the name of the file
5550 used for class 'R'. Defaults to /etc/mail/relay-domains.
5551 CONFIG: new command RELAY_DOMAIN(domain) and RELAY_DOMAIN_FILE(file)
5552 to add items to class 'R' ($=R) for hosts allowed to relay.
5553 CONFIG: new FEATURE(relay_hosts_only) to change the behavior
5554 of FEATURE(access_db) and class 'R' to lookup individual
5555 host names only.
5556 CONFIG: new FEATURE(loose_relay_check). Normally, if a recipient
5557 using % addressing is used, e.g. user%site@othersite,
5558 and othersite is in class 'R', the check_rcpt ruleset
5559 will strip @othersite and recheck user@site for relaying.
5560 This feature changes that behavior. It should not be
5561 needed for most installations.
5562 CONFIG: new FEATURE(relay_local_from) to allow relaying if the
5563 domain portion of the mail sender is a local host. This
5564 should only be used if absolutely necessary as it opens
5565 a window for spammers. Patch from Randall S. Winchester of
5566 the University of Maryland.
5567 CONFIG: new FEATURE(blacklist_recipients) turns on the ability to
5568 block incoming mail destined for certain recipient
5569 usernames, hostnames, or addresses.
5570 CONFIG: By default, MAIL FROM: commands in the SMTP session will be
5571 refused if the host part of the argument to MAIL FROM: cannot
5572 be located in the host name service (e.g., DNS).
5573 CONFIG: new FEATURE(accept_unresolvable_domains) accepts
5574 unresolvable hostnames in MAIL FROM: SMTP commands.
5575 CONFIG: new FEATURE(accept_unqualified_senders) accepts
5576 MAIL FROM: senders which do not include a domain.
5577 CONFIG: new FEATURE(rbl) Turns on rejection of hosts found in the
5578 Realtime Blackhole List. You can specify the RBL name
5579 server to contact by specifying it as an optional argument.
5580 The default is rbl.maps.vix.com. For details, see
5581 http://maps.vix.com/rbl/.
5582 CONFIG: Call Local_check_relay, Local_check_mail, and
5583 Local_check_rcpt from check_relay, check_mail, and
5584 check_rcpt. Users with local rulesets should place the
5585 rules using LOCAL_RULESETS. If a Local_check_* ruleset
5586 returns $#OK, the message is accepted. If the ruleset
5587 returns a mailer, the appropriate action is taken, else
5588 the return of the ruleset is ignored.
5589 CONFIG: CYRUS_MAILER_FLAGS now includes the /:| mailer flags by
5590 default to support file, :include:, and program deliveries.
5591 CONFIG: Remove the default for confDEF_USER_ID so the binary can
5592 pick the proper default value. See the SECURITY note
5593 above for more information.
5594 CONFIG: FEATURE(nodns) now warns the user that the feature is a
5595 no-op. Patch from Kari Hurtta of the Finnish
5596 Meteorological Institute.
5597 CONFIG: OSTYPE(osf1) now sets DefaultUserID (confDEF_USER_ID) to
5598 daemon since DEC's /bin/mail will drop the envelope
5599 sender if run as mailnull. See the Digital UNIX section
5600 of src/README for more information. Problem noted by
5601 Kari Hurtta of the Finnish Meteorological Institute.
5602 CONFIG: .cf files are now stored in the same directory with the
5603 .mc files instead of in the obj directory.
5604 CONFIG: New options confSINGLE_LINE_FROM_HEADER,
5605 confALLOW_BOGUS_HELO, and confMUST_QUOTE_CHARS for
5606 setting SingleLineFromHeader, AllowBogusHELO, and
5607 MustQuoteChars respectively.
5608 MAIL.LOCAL: support -l flag to run LMTP on stdin/stdout. This
5609 SMTP-like protocol allows detailed reporting of delivery
5610 status on a per-user basis. Code donated by John Myers of
5611 CMU (now of Netscape).
5612 MAIL.LOCAL: HP-UX support from Randall S. Winchester of the
5613 University of Maryland. NOTE: mail.local is not
5614 compatible with the stock HP-UX mail format. Be sure to
5615 read mail.local/README.
5616 MAIL.LOCAL: Prevent other mail delivery agents from stealing a
5617 mailbox lock. Patch from Randall S. Winchester of the
5618 University of Maryland.
5619 MAIL.LOCAL: glibc portability from John Kennedy of Cal State
5620 University, Chico.
5621 MAIL.LOCAL: IRIX portability from Kari Hurtta of the Finnish
5622 Meteorological Institute.
5623 MAILSTATS: Display the number of rejected and discarded messages
5624 in the StatusFile. Patch from Randall Winchester of the
5625 University of Maryland.
5626 MAKEMAP: New -s flag to ignore safety checks on database map files
5627 such as linked files in world writable directories.
5628 MAKEMAP: Add support for Berkeley DB 2.X. Remove OLD_NEWDB support.
5629 PRALIASES: Add support for Berkeley DB 2.X.
5630 PRALIASES: Do not automatically include NDBM support. Problem
5631 noted by Ralf Hildebrandt of the Technical University of
5632 Braunschweig.
5633 RMAIL: Improve portability for other platforms. Patches from
5634 Randall S. Winchester of the University of Maryland and
5635 Kari Hurtta of the Finnish Meteorological Institute.
5636 Changed Files:
5637 src/Makefiles/Makefile.* files have been modified to use
5638 the new build mechanism and are now BuildTools/OS/*.
5639 src/makesendmail changed to symbolic link to src/Build.
5640 New Files:
5641 BuildTools/M4/header.m4
5642 BuildTools/M4/depend/BSD.m4
5643 BuildTools/M4/depend/CC-M.m4
5644 BuildTools/M4/depend/NCR.m4
5645 BuildTools/M4/depend/Solaris.m4
5646 BuildTools/M4/depend/X11.m4
5647 BuildTools/M4/depend/generic.m4
5648 BuildTools/OS/AIX.4.2
5649 BuildTools/OS/AIX.4.x
5650 BuildTools/OS/CRAYT3E.2.0.x
5651 BuildTools/OS/HP-UX.11.x
5652 BuildTools/OS/IRIX.6.5
5653 BuildTools/OS/NEXTSTEP.4.x
5654 BuildTools/OS/NeXT.4.x
5655 BuildTools/OS/NetBSD.8.3
5656 BuildTools/OS/QNX
5657 BuildTools/OS/SunOS.5.7
5658 BuildTools/OS/dcosx.1.x.NILE
5659 BuildTools/README
5660 BuildTools/Site/README
5661 BuildTools/bin/Build
5662 BuildTools/bin/configure.sh
5663 BuildTools/bin/find_m4.sh
5664 BuildTools/bin/install.sh
5665 Makefile
5666 cf/cf/Build
5667 cf/cf/generic-hpux10.cf
5668 cf/feature/accept_unqualified_senders.m4
5669 cf/feature/accept_unresolvable_domains.m4
5670 cf/feature/access_db.m4
5671 cf/feature/blacklist_recipients.m4
5672 cf/feature/loose_relay_check.m4
5673 cf/feature/local_lmtp.m4
5674 cf/feature/promiscuous_relay.m4
5675 cf/feature/rbl.m4
5676 cf/feature/relay_based_on_MX.m4
5677 cf/feature/relay_entire_domain.m4
5678 cf/feature/relay_hosts_only.m4
5679 cf/feature/relay_local_from.m4
5680 cf/ostype/qnx.m4
5681 contrib/doublebounce.pl
5682 mail.local/Build
5683 mail.local/Makefile.m4
5684 mail.local/README
5685 mailstats/Build
5686 mailstats/Makefile.m4
5687 makemap/Build
5688 makemap/Makefile.m4
5689 praliases/Build
5690 praliases/Makefile.m4
5691 rmail/Build
5692 rmail/Makefile.m4
5693 rmail/rmail.0
5694 smrsh/Build
5695 smrsh/Makefile.m4
5696 src/Build
5697 src/Makefile.m4
5698 src/snprintf.c
5699 Deleted Files:
5700 cf/cf/Makefile (replaced by Makefile.dist)
5701 mail.local/Makefile
5702 mail.local/Makefile.dist
5703 mailstats/Makefile
5704 mailstats/Makefile.dist
5705 makemap/Makefile
5706 makemap/Makefile.dist
5707 praliases/Makefile
5708 praliases/Makefile.dist
5709 rmail/Makefile
5710 smrsh/Makefile
5711 smrsh/Makefile.dist
5712 src/Makefile
5713 src/Makefiles/Makefile.AIX.4 (split into AIX.4.x and AIX.4.2)
5714 src/Makefiles/Makefile.SMP_DC.OSx.NILE
5715 (renamed BuildTools/OS/dcosx.1.x.NILE)
5716 src/Makefiles/Makefile.Utah (obsolete platform)
5717 Renamed Files:
5718 READ_ME => README
5719 cf/cf/Makefile.dist => Makefile
5720 cf/cf/obj/* => cf/cf/*
5721 src/READ_ME => src/README
5723 8.8.8/8.8.8 1997/10/24
5724 If the check_relay ruleset failed, the relay= field was logged
5725 incorrectly. Problem noted by Kari Hurtta of the Finnish
5726 Meteorological Institute.
5727 If /usr/tmp/dead.letter already existed, sendmail could not
5728 add additional bounces to it. Problem noted by Thomas J.
5729 Arseneault of SRI International.
5730 If an SMTP mailer used a non-standard port number for the outgoing
5731 connection, it would be displayed incorrectly in verbose mode.
5732 Problem noted by John Kennedy of Cal State University, Chico.
5733 Log the ETRN parameter specified by the client before altering them
5734 to internal form. Suggested by Bob Kupiec of GES-Verio.
5735 EXPN and VRFY SMTP commands on malformed addresses were logging as
5736 User unknown with bogus delay= values. Change them to log
5737 the same as compliant addresses. Problem noted by Kari E.
5738 Hurtta of the Finnish Meteorological Institute.
5739 Ignore the debug resolver option unless using sendmail debug trace
5740 option for resolver. Problem noted by Greg Nichols of Wind
5741 River Systems.
5742 If SingleThreadDelivery was enabled and the remote server returned a
5743 protocol error on the DATA command, the connection would be
5744 closed but the persistent host status file would not be
5745 unlocked so other sendmail processes could not deliver to
5746 that host. Problem noted by Peter Wemm of DIALix.
5747 If queueing up a message due to an expensive mailer, don't increment
5748 the number of delivery attempts or set the last delivery
5749 attempt time so the message will be delivered on the next
5750 queue run regardless of MinQueueAge. Problem noted by
5751 Brian J. Coan of the Institute for Global Communications.
5752 Authentication warnings of "Processed from queue _directory_" and
5753 "Processed by _username_ with -C _filename_" would be logged
5754 with the incorrect timestamp. Problem noted by Kari E. Hurtta
5755 of the Finnish Meteorological Institute.
5756 Use a better heuristic for detecting GDBM.
5757 Log null connections on dropped connections. Problem noted by
5758 Jon Lewis of Florida Digital Turnpike.
5759 If class dbm maps are rebuilt, sendmail will now detect this and
5760 reopen the map. Previously, they could give stale
5761 results during a single message processing (but would
5762 recover when the next message was received). Fix from
5763 Joe Pruett of Q7 Enterprises.
5764 Do not log failures such as "User unknown" on -bv or SMTP VRFY
5765 requests. Problem noted by Kari E. Hurtta of the
5766 Finnish Meteorological Institute.
5767 Do not send a bounce message back to the sender regarding bad
5768 recipients if the SMTP connection is dropped before the
5769 message is accepted. Problem noted by Kari E. Hurtta of the
5770 Finnish Meteorological Institute.
5771 Use "localhost" instead of "[UNIX: localhost]" when connecting to
5772 sendmail via a UNIX pipe. This will allow rulesets using
5773 $&{client_name} to process without sending the string through
5774 dequote. Problem noted by Alan Barrett of Internet Africa.
5775 A combination of deferred delivery mode, a double bounce situation,
5776 and the inability to save a bounce message to
5777 /var/tmp/dead.letter would cause sendmail to send a bounce
5778 to postmaster but not remove the offending envelope from the
5779 queue causing it to create a new bounce message each time the
5780 queue was run. Problem noted by Brad Doctor of Net Daemons
5781 Associates.
5782 Remove newlines from hostname information returned via DNS. There are
5783 no known security implications of newlines in hostnames as
5784 sendmail filters newlines in all vital areas; however, this
5785 could cause confusing error messages.
5786 Starting with sendmail 8.8.6, mail sent with the '-t' option would be
5787 rejected if any of the specified addresses were bad. This
5788 behavior was modified to only reject the bad addresses and not
5789 the entire message. Problem noted by Jozsef Hollosi of
5790 SuperNet, Inc.
5791 Use Timeout.fileopen when delivering mail to a file. Suggested by
5792 Bryan Costales of InfoBeat, Inc.
5793 Display the proper Final-Recipient on DSN messages for non-SMTP
5794 mailers. Problem noted by Kari E. Hurtta of the
5795 Finnish Meteorological Institute.
5796 An error in calculating the available space in the list of addresses
5797 for logging deliveries could cause an address to be silently
5798 dropped.
5799 Include the initial user environment if sendmail is restarted via
5800 a HUP signal. This will give room for the process title.
5801 Problem noted by Jon Lewis of Florida Digital Turnpike.
5802 Mail could be delivered without a body if the machine does not
5803 support flock locking and runs out of processes during
5804 delivery. Fix from Chuck Lever of the University of Michigan.
5805 Drop recipient address from 251 and 551 SMTP responses per RFC 821.
5806 Problem noted by Kari E. Hurtta of the Finnish Meteorological
5807 Institute.
5808 Make sure non-rebuildable database maps are opened before the
5809 rebuildable maps (i.e., alias files) in case the database maps
5810 are needed for verifying the left hand side of the aliases.
5811 Problem noted by Lloyd Parkes of Victoria University.
5812 Make sure sender RFC822 source route addresses are alias expanded for
5813 bounce messages. Problem noted by Juergen Georgi of
5814 RUS University of Stuttgart.
5815 Minor lint fixes.
5816 Return a temporary error instead of a permanent error if an LDAP map
5817 search returns an error. This will allow sequenced maps which
5818 use other LDAP servers to be checked. Fix from Booker Bense
5819 of Stanford University.
5820 When automatically converting from quoted printable to 8bit text do
5821 not pad bare linefeeds with a space. Problem noted by Theo
5822 Nolte of the University of Technology Aachen, Germany.
5823 Portability:
5824 Non-standard C compilers may have had a problem compiling
5825 conf.c due to a standard C external declaration of
5826 setproctitle(). Problem noted by Ted Roberts of
5827 Electronic Data Systems.
5828 AUX: has a broken O_EXCL implementation. Reported by Jim
5829 Jagielski of jaguNET Access Services.
5830 BSD/OS: didn't compile if HASSETUSERCONTEXT was defined.
5831 Digital UNIX: Digital UNIX (and possibly others) moves
5832 loader environment variables into the loader memory
5833 area. If one of these environment variables (such as
5834 LD_LIBRARY_PATH) was the last environment variable,
5835 an invalid memory address would be used by the process
5836 title routine causing memory corruption. Problem
5837 noted by Sam Hartman of Mesa Internet Systems.
5838 GNU libc: uses an enum for _PC_CHOWN_RESTRICTED which caused
5839 chownsafe() to always return 0 even if the OS does
5840 not permit file giveaways. Problem noted by
5841 Yasutaka Sumi of The University of Tokyo.
5842 IRIX6: Syslog buffer size set to 512 bytes. Reported by
5843 Gerald Rinske of Siemens Business Services VAS.
5844 Linux: Pad process title with NULLs. Problem noted by
5845 Jon Lewis of Florida Digital Turnpike.
5846 SCO OpenServer 5.0: SIOCGIFCONF ioctl call returns an
5847 incorrect value for the number of interfaces.
5848 Problem noted by Chris Loelke of JetStream Internet
5849 Services.
5850 SINIX: Update for Makefile and syslog buffer size from Gerald
5851 Rinske of Siemens Business Services VAS.
5852 Solaris: Make sure HASGETUSERSHELL setting for SunOS is not
5853 used on a Solaris machine. Problem noted by
5854 Stephen Ma of Jtec Pty Limited.
5855 CONFIG: SINIX: Update from Gerald Rinske of Siemens Business
5856 Services VAS.
5857 MAKEMAP: Use a better heuristic for detecting GDBM.
5858 CONTRIB: expn.pl: Updated version from the author, David Muir Sharnoff.
5859 OP.ME: Document the F=i mailer flag. Problem noted by Per Hedeland of
5860 Ericsson.
5862 8.8.7/8.8.7 1997/08/03
5863 If using Berkeley DB on systems without O_EXLOCK (open a file with
5864 an exclusive lock already set -- i.e., almost all systems
5865 except 4.4-BSD derived systems), the initial attempt at
5866 rebuilding aliases file if the database didn't already
5867 exist would fail. Patch from Raymund Will of LST Software
5868 GmbH.
5869 Bogus incoming SMTP commands would reset the SMTP conversation.
5870 Problem noted by Fredrik Jönsson of the Royal Institute
5871 of Technology, Stockholm.
5872 Since TCP Wrappers includes setenv(), unsetenv(), and putenv(),
5873 some environments could give "multiple definitions" for these
5874 routines during compilation. If using TCP Wrappers, assume
5875 that these routines are included as though they were in the
5876 C library. Patch from Robert La Ferla.
5877 When a NEWDB database map was rebuilt at the same time it was being
5878 used by a queue run, the maps could be left locked for the
5879 duration of the queue run, causing other processes to hang.
5880 Problem noted by Kendall Libby of Shore.NET.
5881 In some cases, NoRecipientAction=add-bcc was being ignored, so the
5882 mail was passed on without any recipient header. This could
5883 cause problems downstream. Problem noted by Xander Jansen
5884 of SURFnet ExpertiseCentrum.
5885 Give error when GDBM is used with sendmail. GDBM's locking and
5886 linking of the .dir and .pag files interferes with sendmail's
5887 locking and security checks. Problems noted by Fyodor
5888 Yarochkin of the Kyrgyz Republic FreeNet.
5889 Don't fsync qf files if SuperSafe option is not set.
5890 Avoid extra calls to gethostbyname for addresses for which a
5891 gethostbyaddr found no value. Also, ignore any returns
5892 from gethostbyaddr that look like a dotted quad.
5893 If PTR lookup fails when looking up an SMTP peer, don't tag it as
5894 "may be forged", since at the network level we pretty much
5895 have to assume that the information is good.
5896 In some cases, errors during an SMTP session could leave files
5897 open or locked.
5898 Better handling of missing file descriptors (0, 1, 2) on startup.
5899 Better handling of non-set-user-ID binaries -- avoids certain obnoxious
5900 errors during testing.
5901 Errors in file locking of NEWDB maps had the incorrect file name
5902 printed in the error message.
5903 If the AllowBogusHELO option were set and an EHLO with a bad or
5904 missing parameter were issued, the EHLO behaved like a HELO.
5905 Load limiting never kicked in for incoming SMTP transactions if the
5906 DeliveryMode=background and any recipient was an alias or
5907 had a .forward file. From Nik Conwell of Boston University.
5908 On some non-Posix systems, the decision of whether chown(2) permits
5909 file giveaway was undefined. From Tetsu Ushijima of the
5910 Tokyo Institute of Technology.
5911 Fix race condition that could cause the body of a message to be
5912 lost (so only the header was delivered). This only occurs
5913 on systems that do not use flock(2), and only when a queue
5914 runner runs during a critical section in another message
5915 delivery. Based on a patch from Steve Schweinhart of
5916 Results Computing.
5917 If a qf file was found in a mail queue directory that had a problem
5918 (wrong ownership, bad format, etc.) and the file name was
5919 exactly MAXQFNAME bytes long, then instead of being tried
5920 once, it would be tried on every queue run. Problem noted
5921 by Bryan Costales of Mercury Mail.
5922 If the system supports an st_gen field in the status structure,
5923 include it when reporting that a file has changed after open.
5924 This adds a new compile flag, HAS_ST_GEN (0/1 option).
5925 This out to be checked as well as reported, since it is
5926 theoretically possible for an attacker to remove a file after
5927 it is opened and replace it with another file that has the
5928 same i-number, but some filesystems (notably AFS) return
5929 garbage in this field, and hence always look like the file
5930 has changed. As a practical matter this is not a security
5931 problem, since the files can be neither hard nor soft links,
5932 and on no filesystem (that I am aware of) is it possible to
5933 have two files on the same filesystem with the same i-number
5934 simultaneously.
5935 Delete the root Makefile from the distribution -- it is only for
5936 use internally, and does not work at customer sites.
5937 Fix botch that caused the second MAIL FROM: command in a single
5938 transaction to clear the entire transaction. Problem
5939 noted by John Kennedy of Cal State University, Chico.
5940 Work properly on machines that have _PATH_VARTMP defined without
5941 a trailing slash. (And a pox on vendors that decide to
5942 ignore the established conventions!) Problem noted by
5943 Gregory Neil Shapiro of WPI.
5944 Internal changes to make it easier to add another protocol family
5945 (intended for IPv6). Patches are from John Kennedy of
5946 CSU Chico.
5947 In certain cases, 7->8 bit MIME decoding of Base64 text could leave
5948 an extra space at the beginning of some lines. Problem
5949 noted by Charles Karney of Princeton University; fix based
5950 on a patch from Christophe Wolfhugel.
5951 Portability:
5952 Allow _PATH_VENDOR_CF to be set in Makefile for consistency
5953 with the _Sendmail_ book, 2nd edition. Note that
5954 the book is actually wrong: _PATH_SENDMAILCF should
5955 be used instead.
5956 AIX 3.x: Include <sys/select.h>. Patch from Gene Rackow
5957 of Argonne National Laboratory.
5958 OpenBSD from from Paul DuBois of the University of Wisconsin.
5959 RISC/os 4.0 from Paul DuBois of the University of Wisconsin.
5960 SunOS: Include <memory.h> to fix warning from util.c. From
5961 James Aldridge of EUnet Ltd.
5962 Solaris: Change STDIR (location of status file) to /etc/mail
5963 in Makefiles.
5964 Linux, Dynix, UNICOS: Remove -DNDBM and -lgdbm from
5965 Makefiles. Use NEWDB on Linux instead.
5966 NCR MP-RAS 3.x with STREAMware TCP/IP: SIOCGIFNUM ioctl
5967 exists but behaves differently than other OSes.
5968 Add SIOCGIFNUM_IS_BROKEN compile flag to get
5969 around the problem. Problem noted by Tom Moore of
5970 NCR Corp.
5971 HP-UX 9.x: fix compile warnings for old select API. Problem
5972 noted by Tom Smith of Digital Equipment Corp.
5973 UnixWare 2.x: compile warnings on offsetof macro. Problem
5974 noted by Tom Good of the Community Access Information
5975 Resource Network
5976 SCO 4.2: compile problems caused by a change in the type of
5977 the "length" parameters passed to accept, getpeername,
5978 getsockname, and getsockopt. Adds new compile flags
5979 SOCKADDR_SIZE_T and SOCKOPT_SIZE_T. Problem reported
5980 by Tom Good of St. Vincent's North Richmond Community
5981 Mental Health Center Residential Services.
5982 AIX 4: Use size_t for SOCKADDR_SIZE_T and SOCKOPT_SIZE_T.
5983 Suggested by Brett Hogden of Rochester Gas & Electric
5984 Corp.
5985 Linux: avoid compile problem for versions of <setjmp.h> that
5986 #define both setjmp and longjmp. Problem pointed out
5987 by J.R. Oldroyd of TerraNet.
5988 CONFIG: SCO UnixWare 2.1: Support for OSTYPE(sco-uw-2.1)
5989 from Christopher Durham of SCO.
5990 CONFIG: NEXTSTEP: define confCW_FILE to
5991 /etc/sendmail/sendmail.cw to match the usual
5992 configuration. Patch from Dennis Glatting of
5993 PlainTalk.
5994 CONFIG: MAILER(fax) called a program that hasn't existed for a long
5995 time. Convert to use the HylaFAX 4.0 conventions. Suggested
5996 by Harry Styron.
5997 CONFIG: Improve sample anti-spam rulesets in cf/cf/knecht.mc. These
5998 are the rulesets in use on sendmail.org.
5999 MAKEMAP: give error on GDBM files.
6000 MAIL.LOCAL: Make error messages a bit more explicit, for example,
6001 telling more details on what actually changed when "file
6002 changed after open".
6003 CONTRIB: etrn.pl: Ignore comments in Fw files. Support multiple Fw
6004 files.
6005 CONTRIB: passwd-to-alias.pl: Handle 8 bit characters and '-'.
6006 NEW FILES:
6007 src/Makefiles/Makefile.OpenBSD
6008 src/Makefiles/Makefile.RISCos.4_0
6009 test/t_exclopen.c
6010 cf/ostype/sco-uw-2.1.m4
6011 DELETED FILES:
6012 Makefile
6014 8.8.6/8.8.6 1997/06/14
6015 *************************************************************
6016 * The extensive assistance of Gregory Neil Shapiro of WPI *
6017 * in preparing this release is gratefully appreciated. *
6018 * Sun Microsystems has also provided resources toward *
6019 * continued sendmail development. *
6020 *************************************************************
6021 SECURITY: A few systems allow an open with the O_EXCL|O_CREAT open
6022 mode bits set to create a file that is a symbolic link that
6023 points nowhere. This makes it possible to create a root
6024 owned file in an arbitrary directory by inserting the symlink
6025 into a writable directory after the initial lstat(2) check
6026 determined that the file did not exist. The only verified
6027 example of a system having these odd semantics for O_EXCL
6028 and symbolic links was HP-UX prior to version 9.07. Most
6029 systems do not have the problem, since a exclusive create
6030 of a file disallows symbolic links. Systems that have been
6031 verified to NOT have the problem include AIX 3.x, *BSD,
6032 DEC OSF/1, HP-UX 9.07 and higher, Linux, SunOS, Solaris,
6033 and Ultrix. This is a potential exposure on systems that
6034 have this bug and which do not have a MAILER-DAEMON alias
6035 pointing at a legitimate account, since this will cause old
6036 mail to be dropped in /var/tmp/dead.letter.
6037 SECURITY: Problems can occur on poorly managed systems, specifically,
6038 if maps or alias files are in world writable directories.
6039 If your system has alias maps in writable directories, it
6040 is potentially possible for an attacker to replace the .db
6041 (or .dir and .pag) files by symbolic links pointing at
6042 another database; this can be used either to expose
6043 information (e.g., by pointing an alias file at /etc/spwd.db
6044 and probing for accounts), or as a denial-of-service attack
6045 (by trashing the password database). The fix disallows
6046 symbolic links entirely when rebuilding alias files or on
6047 maps that are in writable directories, and always warns on
6048 writable directories; 8.9 will probably consider writable
6049 directories to be fatal errors. This does not represent an
6050 exposure on systems that have alias files in unwritable
6051 system directories.
6052 SECURITY: disallow .forward or :include: files that are links (hard
6053 or soft) if the parent directory (or any directory in the
6054 path) is writable by anyone other than the owner. This is
6055 similar to the previous case for user files. This change
6056 should not affect most systems, but is necessary to prevent
6057 an attacker who can write the directory from pointing such
6058 files at other files that are readable only by the owner.
6059 SECURITY: Tighten safechown rules: many systems will say that they
6060 have a safe (restricted to root) chown even on files that
6061 are mounted from another system that allows owners to give
6062 away files. The new rules are very strict, trusting file
6063 ownership only in those few cases where the system has
6064 been verified to be at least as paranoid as necessary.
6065 However, it is possible to relax the rules to partially
6066 trust the ownership if the directory path is not world or
6067 group writable. This might allow someone who has a legitimate
6068 :include: file (referenced directly from /etc/aliases) to
6069 become another non-root user if the :include: file is in a
6070 non-writable directory on an NFS-mounted filesystem where
6071 the local system says that giveaway is denied but it is
6072 actually permitted. I believe this to be a very small set
6073 of cases. If in doubt, do not point :include: aliases at
6074 NFS-mounted filesystems.
6075 SECURITY: When setting a numeric group id using the RunAsUser option
6076 (e.g., "O RunAsUser=10:20", the group id would not be set.
6077 Implicit group ids (e.g., "O RunAsUser=mailnull") or alpha
6078 group ids (e.g., "O RunAsUser=mailuser:mailgrp") worked fine.
6079 The user id was still set properly. Problem noted by Uli
6080 Pralle of the Technical University of Berlin.
6081 Save the initial gid set for use when checking for if the
6082 PrivacyOptions=restrictmailq option is set. Problem reported
6083 by Wolfgang Ley of DFN-CERT.
6084 Make 55x reply codes to the SMTP DATA-"." be non-sticky (i.e., a
6085 failure on one message won't affect future messages to the
6086 same host).
6087 IP source route printing had an "off by one" error that would
6088 affect any options that came after the route option. Patch
6089 from Theo de Raadt.
6090 The "Message is too large" error didn't successfully bounce the error
6091 back to the sender. Problem reported by Stephen More of
6092 PSI; patch from Gregory Neil Shapiro of WPI.
6093 Change SMTP status code 553 to map into Extended code 5.1.0 (instead
6094 of 5.1.3); it apparently gets used in multiple ways.
6095 Suggested by John Myers of Portola Communications.
6096 Fix possible extra null byte generated during collection if errors
6097 occur at the beginning of the stream. Patch contributed by
6098 Andrey A. Chernov and Gregory Neil Shapiro.
6099 Code changes to avoid possible reentrant call of malloc/free within
6100 a signal handler. Problem noted by John Beck of Sun
6101 Microsystems.
6102 Move map initialization to be earlier so that check_relay ruleset
6103 will have the latest version of the map data. Problem noted
6104 by Paul Forgey of Metainfo; patch from Gregory Neil Shapiro.
6105 If there are fatal errors during the collection phase (e.g., message
6106 too large) don't send the bogus message.
6107 Avoid "cannot open xfAAA00000" messages when sending to aliases that
6108 have errors and have owner- aliases. Problem noted by Michael
6109 Barber of MTU; fix from Gregory Neil Shapiro of WPI.
6110 Avoid null pointer dereference on illegal Boundary= parameters in
6111 multipart/mixed Content-Type: header. Problem noted by
6112 Richard Muirden of RMIT University.
6113 Always print error messages during newaliases (-bi) even if the
6114 ErrorMode is not set to "print". Fix from Gregory Neil
6115 Shapiro.
6116 Test mode could core dump if you did a /map lookup in an optional map
6117 that could not be opened. Based on a fix from John Beck of
6118 Sun Microsystems.
6119 If DNS is misconfigured so that the last MX record tried points to
6120 a host that does not have an A record, but other MX records
6121 pointed to something reasonable, don't bounce the message
6122 with a "host unknown" error. Note that this should really
6123 be fixed in the zone file for the domain. Problem noted by
6124 Joe Rhett of Navigist, Inc.
6125 If a map fails (e.g., DNS times out) on all recipient addresses, mark
6126 the message as having been tried; otherwise the next queue
6127 run will not realize that this is a second attempt and will
6128 retry immediately. Problem noted by Bryan Costales of
6129 Mercury Mail.
6130 If the clock is set backwards, and a MinQueueAge is set, no jobs
6131 will be run until the later setting of the clock is reached.
6132 "Problem" (I use the term loosely) noted by Eric Hagberg of
6133 Morgan Stanley.
6134 If the load average rises above the cutoff threshold (above which
6135 sendmail will not process the queue at all) during a queue
6136 run, abort the queue run immediately. Problem noted by
6137 Bryan Costales of Mercury Mail.
6138 The variable queue processing algorithm (based on the message size,
6139 number of recipients, message precedence, and job age) was
6140 non-functional -- either the entire queue was processed or
6141 none of the queue was processed. The updated algorithm
6142 does no queue run if a single recipient zero size job will
6143 not be run.
6144 If there is a fatal ("panic") message that will cause sendmail to
6145 die immediately, never hold the error message for future
6146 printing.
6147 Force ErrorMode=print in -bt mode so that all errors are printed
6148 regardless of the setting of the ErrorMode option in the
6149 configuration file. Patch from Gregory Neil Shapiro.
6150 New compile flag HASSTRERROR says that this OS has the strerror(3)
6151 routine available in one of the libraries. Use it in conf.h.
6152 The -m (match only) flag now works on host class maps.
6153 If class hash or btree maps are rebuilt, sendmail will now detect
6154 this and reopen the map. Previously, they could give
6155 erroneous results during a single message processing
6156 (but would recover when the next message was received).
6157 Don't delete zero length queue files when doing queue runs until the
6158 files are at least ten minutes old. This avoids a potential
6159 race condition: the creator creates the qf file, getting back
6160 a file descriptor. The queue runner locks it and deletes it
6161 because it is zero length. The creator then writes the
6162 descriptor that is now for a disconnected file, and the
6163 job goes away. Based on a suggestion by Bryan Costales.
6164 When determining the "validated" host name ($_ macro), do a forward
6165 (A) DNS lookup on the result of the PTR lookup and compare
6166 results. If they differ or if the PTR lookup fails, tag the
6167 address as "may be forged".
6168 Log null connections (i.e., hosts that connect but do not do any
6169 substantive activity on the connection before disconnecting;
6170 "substantive" is defined to be MAIL, EXPN, VRFY, or ETRN.
6171 Always permit "writes" to /dev/null regardless of the link count.
6172 This is safe because /dev/null is special cased, and no open
6173 or write is ever actually attempted. Patch from Villy Kruse
6174 of TwinCom.
6175 If a message cannot be sent because of a 552 (exceeded storage
6176 allocation) response to the MAIL FROM:<>, and a SIZE= parameter
6177 was given, don't return the body in the bounce, since there
6178 is a very good chance that the message will double-bounce.
6179 Fix possible line truncation if a quoted-printable had an =00 escape
6180 in the body. Problem noted by Charles Karney of the Princeton
6181 Plasma Physics Laboratory.
6182 Notify flags (e.g., -NSUCCESS) were lost on user+detail addresses.
6183 Problem noted by Kari Hurtta of the Finnish Meteorological
6184 Institute.
6185 The MaxDaemonChildren option wasn't applying to queue runs as
6186 documented. Note that this increases the potential denial
6187 of service problems with this option: an attacker can
6188 connect many times, and thereby lock out queue runs as well
6189 as incoming connections. If you use this option, you should
6190 run the "sendmail -bd" and "sendmail -q30m" jobs separately
6191 to avoid this attack. Failure to limit noted by Matthew
6192 Dillon of BEST Internet Communications.
6193 Always give a message in newaliases if alias files cannot be
6194 opened instead of failing silently. Suggested by Gregory
6195 Neil Shapiro. This change makes the code match the O'Reilly
6196 book (2nd edition).
6197 Some older versions of the resolver could return with h_errno == -1
6198 if no name server could be reached, causing mail to bounce
6199 instead of queueing. Treat this like TRY_AGAIN. Fix from
6200 John Beck of SunSoft.
6201 If a :include: file is owned by a user that does not have an entry
6202 in the passwd file, sendmail could dereference a null pointer.
6203 Problem noted by Satish Mynam of Sun Microsystems.
6204 Take precautions to make sure that the SMTP protocol cannot get out
6205 of sync if (for example) an alias file cannot be opened.
6206 Fix a possible race condition that can cause a SIGALRM to come in
6207 immediately after a SIGHUP, causing the new sendmail to die.
6208 Avoid possible hang on SVr3 systems when doing child reaping. Patch
6209 from Villy Kruse of TwinCom.
6210 Ignore improperly formatted SMTP reply codes. Previously these were
6211 partially processed, which could cause confusing error
6212 returns.
6213 Fix possible bogus pointer dereference when doing ldapx map lookups
6214 on some architectures.
6215 Portability:
6216 A/UX: from Jim Jagielski of NASA/GSFC.
6217 glibc: SOCK_STREAM was changed from a #define to an enum,
6218 thus breaking #ifdef SOCK_STREAM. Only option seems
6219 to be to assume SOCK_STREAM if __GNU_LIBRARY__ is
6220 defined. Problem reported by A Sun of the University
6221 of Washington.
6222 Solaris: use SIOCGIFNUM to get the number of interfaces on
6223 the system rather than guessing at compile time.
6224 Patch contributed by John Beck of Sun Microsystems.
6225 Intel Paragon: from Wendy Lin of Purdue University.
6226 GNU Hurd: from Miles Bader of the GNU project.
6227 RISC/os 4.50 from Harlan Stenn of PFCS Corporation.
6228 ISC Unix: wait never returns if SIGCLD signals are blocked.
6229 Unfortunately releasing them opens a race condition,
6230 but there appears to be no fix for this. Patch from
6231 Gregory Neil Shapiro.
6232 BIND 8.1 for IPv6 compatibility from John Kennedy.
6233 Solaris: a bug in strcasecmp caused characters with the
6234 high order bit set to apparently randomly match
6235 letters -- for example, $| (0233) matches "i" and "I".
6236 Problem noted by John Gregson of the University of
6237 Cambridge.
6238 IRIX 6.x: make Makefile.IRIX.6.2 apply to all 6.x. From
6239 Kari Hurtta.
6240 IRIX 6.x: Create Makefiles for systems that claim to be
6241 IRIX64 but are 6.2 or higher (so use the regular
6242 IRIX Makefile).
6243 IRIX 6.x: Fix load average computation on 64 bit kernels.
6244 Problem noted by Eric Hagberg of Morgan Stanley.
6245 CONFIG: Some canonification was still done for UUCP-like addresses
6246 even if FEATURE(nocanonify) was set. Problem pointed out by
6247 Brian Candler.
6248 CONFIG: In some cases UUCP mailers wouldn't properly recognize all
6249 local names as local. Problem noted by Jeff Polk of BSDI;
6250 fix provided by Gregory Neil Shapiro.
6251 CONFIG: The "local:user" syntax entries in mailertables and other
6252 "mailer:user" syntax locations returned an incorrect value
6253 for the $h macro. Problem noted by Gregory Neil Shapiro.
6254 CONFIG: Retain "+detail" information when forwarding mail to a
6255 MAIL_HUB, LUSER_RELAY, or LOCAL_RELAY. Patch from Philip
6256 Guenther of Gustavus Adolphus College.
6257 CONFIG: Make sure user+detail works for FEATURE(virtusertable);
6258 rules are the same as for aliasing. Based on a patch from
6259 Gregory Neil Shapiro.
6260 CONFIG: Break up parsing rules into several pieces; this should
6261 have no functional change in this release, but makes it
6262 possible to have better anti-spam rulesets in the future.
6263 CONFIG: Disallow double dots in host names to avoid having the
6264 HostStatusDirectory store status under the wrong name.
6265 In some cases this can be used as a denial-of-service attack.
6266 Problem noted by Ron Jarrell of Virginia Tech, patch from
6267 Gregory Neil Shapiro.
6268 CONFIG: Don't use F=m (multiple recipients per invocation) for
6269 MAILER(procmail), but do pass F=Pn9 (include Return-Path:,
6270 don't include From_, and convert to 8-bit). Suggestions
6271 from Kimmo Suominen and Roderick Schertler.
6272 CONFIG: Domains under $=M (specified with MASQUERADE_DOMAIN) were
6273 being masqueraded as though FEATURE(masquerade_entire_domain)
6274 was specified, even when it wasn't.
6275 MAIL.LOCAL: Solaris 2.6 has snprintf. From John Beck of SunSoft.
6276 MAIL.LOCAL: SECURITY: check to make sure that an attacker doesn't
6277 "slip in" a symbolic link between the lstat(2) call and the
6278 exclusive open. This is only a problem on System V derived
6279 systems that allow an exclusive create on files that are
6280 symbolic links pointing nowhere.
6281 MAIL.LOCAL: If the final mailbox close() failed, the user id was
6282 not reset back to root, which on some systems would cause
6283 later mailboxes to fail. Also, any partial message would
6284 not be truncated, which could result in repeated deliveries.
6285 Problem noted by Bruce Evans via Peter Wemm (FreeBSD
6286 developers).
6287 MAKEMAP: Handle cases where O_EXLOCK is #defined to be 0. A similar
6288 change to the sendmail map code was made in 8.8.3. Problem
6289 noted by Gregory Neil Shapiro.
6290 MAKEMAP: Give warnings on file problems such as map files that are
6291 symbolic links; although makemap is not set-user-ID root, it is
6292 often run as root and hence has the potential for the same
6293 sorts of problems as alias rebuilds.
6294 MAKEMAP: Change compilation so that it will link properly on
6295 NEXTSTEP.
6296 CONTRIB: etrn.pl: search for Cw as well as Fw lines in sendmail.cf.
6297 Accept an optional list of arguments following the server
6298 name for the ETRN arguments to use (instead of $=w). Other
6299 miscellaneous bug fixes. From Christian von Roques via
6300 John Beck of Sun Microsystems.
6301 CONTRIB: Add passwd-to-alias.pl, contributed by Kari Hurtta. This
6302 Perl script converts GECOS information in the /etc/passwd
6303 file into aliases, allowing for faster access to full name
6304 lookups; it is also clever about adding aliases (to root)
6305 for system accounts.
6306 NEW FILES:
6307 src/safefile.c
6308 cf/ostype/gnuhurd.m4
6309 cf/ostype/irix6.m4
6310 contrib/passwd-to-alias.pl
6311 src/Makefiles/Makefile.IRIX64.6.1
6312 src/Makefiles/Makefile.IRIX64.6.x
6313 RENAMED FILES:
6314 src/Makefiles/Makefile.IRIX.6.2 => Makefile.IRIX.6.x
6315 src/Makefiles/Makefile.IRIX64 => Makefile.IRIX64.6.0
6317 8.8.5/8.8.5 1997/01/21
6318 SECURITY: Clear out group list during startup. Without this, sendmail
6319 will continue to run with the group permissions of the caller,
6320 even if RunAsUser is specified.
6321 SECURITY: Make purgestat (-bH) be root-only. This is not in response
6322 to any known attack, but it's best to be conservative.
6323 Suggested by Peter Wemm of DIALix.
6324 SECURITY: Fix buffer overrun problem in MIME code that has possible
6325 security implications. Patch from Alex Garthwaite of the
6326 University of Pennsylvania.
6327 Use of a -f flag with a phrase attached (e.g., "-f 'Full Name <addr>'")
6328 would truncate the address after "Full". Although the -f
6329 syntax is incorrect (since it is in the envelope, it
6330 shouldn't have comments and full names), the failure mode
6331 was unnecessarily awful.
6332 Fix a possible null pointer dereference when converting 8-bit data
6333 to a 7-bit format. Problem noted by Jim Hutchins of
6334 Sandia National Labs and David James of British Telecom.
6335 Clear out stale state that affected F=9 on SMTP mailers in queue
6336 runs. Although this really shouldn't be used (F=9 is for
6337 final delivery only, and using it on an SMTP mailer makes
6338 it possible for a message to be converted from 8->7->8->7
6339 bits several times), it shouldn't have failed with a syserr.
6340 Problem noted by Eric Hagberg of Morgan Stanley.
6341 _Really_ fix the multiple :maildrop code in the user database
6342 module. Patch from Roy Mongiovi of Georgia Tech.
6343 Let F lines in the configuration file actually read root-only
6344 files if the configuration file is safe. Based on a
6345 patch from Keith Reynolds of SCO.
6346 ETRN followed by QUIT would hold the connection open until the queue
6347 run completed. Problem noted by Truck Lewis of TDK
6348 Semiconductor Corp.
6349 It turns out that despite the documentation, the TCP wrappers library
6350 does _not_ log rejected connections. Do the logging ourselves.
6351 Problem noted by Fletcher Mattox of the University of Texas
6352 at Austin.
6353 If sendmail finds a qf file in its queue directory that is an unknown
6354 version (e.g., when backing out to an old version), the
6355 error is reported on every queue run. Change it to only
6356 give the error once (and rename the qf => Qf). Patch from
6357 William A. Gianopoulos of Raytheon Company.
6358 Start a new session when doing background delivery; currently it
6359 ignored signals but didn't start a new signal, that caused
6360 some problems if a background process tried to send mail
6361 under certain circumstances. Problem noted by Eric Hagberg
6362 of Morgan Stanley; fix from Kari Hurtta.
6363 Simplify test for skipping a queue run to just check if the current
6364 load average is >= the queueing load average. Previously
6365 the check factored in some other parameters that caused it
6366 to essentially never skip the queue run. Patch from Bryan
6367 Costales.
6368 If the SMTP server is running in "nullserver" mode (that is, it is
6369 rejecting all commands), start sleeping after MAXBADCOMMAND
6370 (25) commands; this helps prevent a bad guy from putting
6371 you into a tight loop as a denial-of-service attack. Based
6372 on an e-mail conversation with Brad Knowles of AOL.
6373 Slow down when too many "light weight" commands have been issued;
6374 this helps prevent a class of denial-of-service attacks.
6375 The current values and defaults are:
6376 MAXNOOPCOMMANDS 20 NOOP, VERB, ONEX, XUSR
6377 MAXHELOCOMMANDS 3 HELO, EHLO
6378 MAXVRFYCOMMANDS 6 VRFY, EXPN
6379 MAXETRNCOMMANDS 8 ETRN
6380 These will probably be configurable in a future release.
6381 On systems that have uid_t typedefed to be an unsigned short, programs
6382 that had the F=S flag and no U= equate would be invoked with
6383 the real uid set to 65535 rather than being left unchanged.
6384 In some cases, NOTIFY=NEVER was not being honored. Problem noted
6385 by Steve Hubert of the University of Washington, Seattle.
6386 Mail that was Quoted-Printable encoded and had a soft line break on
6387 the last line (i.e., an incomplete continuation) had the last
6388 line dropped. Since this appears to be illegal it isn't
6389 clear what to do with it, but flushing the last line seems
6390 to be a better "fail soft" approach. Based on a patch from
6391 Eric Hagberg.
6392 If AllowBogusHELO and PrivacyOptions=needmailhelo are both set, a
6393 bogus HELO command still causes the "Polite people say HELO
6394 first" error message. Problem pointed out by Chris Thomas
6395 of UCLA; patch from John Beck of SunSoft.
6396 Handle "sendmail -bp -qSfoobar" properly if restrictqrun is set
6397 in PrivacyOptions. The -q shouldn't turn this command off.
6398 Problem noted by Murray Kucherawy of Pacific Bell Internet;
6399 based on a patch from Gregory Neil Shapiro of WPI.
6400 Don't consider SMTP reply codes 452 or 552 (exceeded storage allocation)
6401 in a DATA transaction to be sticky; these can occur because
6402 a message is too large, and smaller messages should still go
6403 through. Problem noted by Matt Dillon of Best Internet
6404 Communications.
6405 In some cases bounces were saved in /var/tmp/dead.letter even if they
6406 had been successfully delivered to the envelope sender.
6407 Problem noted Eric Hagberg of Morgan Stanley; solution from
6408 Gregory Neil Shapiro of WPI.
6409 Give better diagnostics on long alias lines. Based on code contributed
6410 by Patrick Gosling of the University of Cambridge.
6411 Increase the number of virtual interfaces that will be probed for
6412 alternate names. Problem noted by Amy Rich of Shore.Net.
6413 PORTABILITY:
6414 UXP/DS V20L10 for Fujitsu DS/90: Makefile patches from
6415 Toshiaki Nomura of Fujitsu Limited.
6416 SunOS with LDAP support: compile problems with struct timeval.
6417 Patch from Nick Cuccia of TCSI Corporation.
6418 SCO: from Keith Reynolds of SCO.
6419 Solaris: kstat load average computation wasn't being used.
6420 Fixes from Michael Ju. Tokarev of Telecom Service, JSC
6421 (Moscow).
6422 OpenBSD: from Jason Downs of teeny.org.
6423 Altos System V: from Tim Rice.
6424 Solaris 2.5: from Alan Perry of SunSoft.
6425 Solaris 2.6: from John Beck of SunSoft.
6426 Harris Nighthawk PowerUX (mh6000 box): from Bob Miorelli
6427 of Pratt & Whitney <miorelli@pweh.com>.
6428 CONFIG: It seems that I hadn't gotten the Received: line syntax
6429 _just_right_ yet. Tweak it again. I'll omit the names
6430 of the "contributors" (quantity two) in this one case.
6431 As of now, NO MORE DISCUSSION about the syntax of the
6432 Received: line.
6433 CONFIG: Although FEATURE(nullclient) uses EXPOSED_USER (class $=E),
6434 it never inserts that class into the output file. Fix it
6435 so it will honor EXPOSED_USER but will _not_ include root
6436 automatically in this class. Problem noted by Ronan KERYELL
6437 of Centre de Recherche en Informatique de l'École Nationale
6438 Supérieure des Mines de Paris (CRI-ENSMP).
6439 CONFIG: Clean up handling of "local:" syntax in relay specifications
6440 such as LUSER_RELAY. This change permits the following
6441 syntaxes: ``local:'' will send to the same user on the
6442 local machine (e.g., in a mailertable entry for "host",
6443 ``local:'' will cause an address addressed to user@host to
6444 go to user on the local machone). ``local:user'' will send
6445 to the named user on the local machine. ``local:user@host''
6446 is equivalent to ``local:user'' (the host is ignored). In
6447 all cases, the original user@host is passed in $@ (i.e., the
6448 detail information). Inspired by a report from Michael Fuhr.
6449 CONFIG: Strip quotes from the first word of an "error:" host
6450 indication. This lets you set (for example) the LUSER_RELAY
6451 to be ``error:\"5.1.1\" Your Message Here''. Note the use
6452 of the \" so that the resulting string is properly quoted.
6453 Problem noted by Gregory Neil Shapiro of WPI.
6454 OP.ME: documentation was inconsistent about whether sendmail did a
6455 NOOP or a RSET to probe the connection (it does a RSET).
6456 Inconsistency noted by Deeran Peethamparam.
6457 OP.ME: insert additional blank pages so it will print properly on
6458 a duplex printer. From Matthew Black of Cal State University,
6459 Long Beach.
6461 8.8.4/8.8.4 1996/12/02
6462 SECURITY: under some circumstances, an attacker could get additional
6463 permissions by hard linking to files that were group
6464 writable by the attacker. The solution is to disallow any
6465 files that have hard links -- this will affect .forward,
6466 :include:, and output files. Problem noted by Terry
6467 Kyriacopoulos of Interlog Internet Services. As a
6468 workaround, set UnsafeGroupWrites -- always a good idea.
6469 SECURITY: the TryNullMXList (w) option should not be safe -- if it
6470 is, it is possible to do a denial-of-service attack on
6471 MX hosts that rely on the use of the null MX list. There
6472 is no danger if you have this option turned off (the default).
6473 Problem noted by Dan Bernstein. Also, make the DontInitGroups
6474 unsafe. I know of no specific attack against this, although
6475 a denial-of-service attack is probably possible, but in theory
6476 you should not be able to safely tweak anything that affects
6477 the permissions that are used when mail is delivered.
6478 Purgestat could go into an infinite loop if one of the host status
6479 directories somehow became empty. Problem noted by Roy
6480 Mongiovi of Georgia Tech.
6481 Processes got "lost" when counting children due to a race condition.
6482 This caused "proc_list_probe: lost pid" messages to be logged.
6483 Problem noted by several people.
6484 On systems with System V SIGCLD child signal semantics (notably AIX
6485 and HP-UX), mail transactions would print the message "451
6486 SMTP-MAIL: lost child: No child processes". Problem noted
6487 by several people.
6488 Miscellaneous compiler warnings on picky compilers (or when setting
6489 gcc to high warning levels). From Tom Moore of NCR Corp.
6490 SMTP protocol errors, and most errors on MAIL FROM: lines should
6491 not be persistent between runs, since they are based on the
6492 message rather than the host. Problem noted by Matt Dillon
6493 of Best Internet Communications.
6494 The F=7 flag was ignored on SMTP mailers. Problem noted by Tom Moore
6495 of NCR (a.k.a., AT&T Global Information Solutions).
6496 Avoid the possibility of having a child daemon run to completion
6497 (including closing the SMTP socket) before the parent has
6498 had a chance to close the socket; this can cause the parent
6499 to hang for a long time waiting for the socket to drain.
6500 Patch from Don Lewis of TDK Semiconductor.
6501 If the fork() failed in a queue run, the queue runners would not be
6502 rescheduled (so queue runs would stop). Patch from Don Lewis.
6503 Some error conditions in ETRN could cause output without an SMTP
6504 status code. Problem noted by Don Lewis.
6505 Multiple :maildrop addresses in the user database didn't work properly.
6506 Patch from Roy Mongiovi of Georgia Tech.
6507 Add ".db" automatically onto any user database spec that does not
6508 already have it; this is for consistency with makemap, the
6509 K line, and the documentation. Inconsistency pointed out
6510 by Roy Mongiovi.
6511 Allow sendmail to be properly called in nohup mode. Patch from
6512 Kyle Jones of UUNET.
6513 Change ETRN to ignore but still update host status files; previously
6514 it would ignore them and not save the updated status, which
6515 caused stale information to be maintained. Based on a patch
6516 from Christopher Davis of Kapor Enterprises Inc. Also, have
6517 ETRN ignore the MinQueueAge option.
6518 Patch long term host status to recover more gracefully from an empty
6519 host status file condition. Patch from NAKAMURA Motonori
6520 of Kyoto University.
6521 Several patches to signal handling code to fix potential race
6522 conditions from Don Lewis.
6523 Make it possible to compile with -DDAEMON=0 (previously it had some
6524 compile errors). This turns DAEMON, QUEUE, and SMTP into
6525 0/1 compilation flags. Note that DAEMON is an obsolete
6526 compile flag; use NETINET instead. Solution based on a
6527 patch from Bryan Costales.
6528 PORTABILITY FIXES:
6529 AIX4: getpwnam() and getpwuid() do a sequential scan of the
6530 /etc/security/passwd file when called as root. This
6531 is very slow on some systems. To speed it up, use the
6532 (undocumented) _getpw{nam,uid}_shadow() routines.
6533 Patch from Chris Thomas of UCLA/OAC Systems Group.
6534 SCO 5.x: include -lprot in the Makefile. Patch from Bill
6535 Glicker of Burrelle's Information Service.
6536 NEWS-OS 4.x: need a definition for MODE_T to compile. Patch
6537 from Makoto MATSUSHITA of Osaka University.
6538 SunOS 4.0.3: compile problems. Patches from Andrew Cole of
6539 Leeds University and SASABE Tetsuro of the University
6540 of Tokyo.
6541 DG/UX 5.4.4.11 from Brian J. Murrell of InterLinx Support
6542 Services, Inc.
6543 Domain/OS from Don (Truck) Lewis of TDK Semiconductor Corp.
6544 I believe this to have only been a problem if you
6545 compiled with -DUSE_VENDOR_CF_PATH -- another reason
6546 to stick with /etc/sendmail.cf as your One True Path.
6547 Digital UNIX (OSF/1 on Alpha) load average computation from
6548 Martin Laubach of the Technischen Universität Wien.
6549 CONFIG: change default Received: line to be multiple lines rather
6550 than one long one. By popular demand.
6551 MAIL.LOCAL: warnings weren't being logged on some systems. Patch
6552 from Jerome Berkman of U.C. Berkeley.
6553 MAKEMAP: be sure to zero hinfo to avoid cruft that can cause runs
6554 to take a very long time. Problem noted by Yoshiro YONEYA
6555 of NTT Software Corporation.
6556 CONTRIB: add etrn.pl, contributed by John Beck.
6557 NEW FILES:
6558 contrib/etrn.pl
6560 8.8.3/8.8.3 1996/11/17
6561 SECURITY: it was possible to get a root shell by lying to sendmail
6562 about argv[0] and then sending it a signal. Problem noted
6563 by Leshka Zakharoff <leshka@leshka.chuvashia.su> on the
6564 best-of-security list.
6565 Log sendmail binary version number in "Warning: .cf version level
6566 (%d) exceeds program functionality (%d) message" -- this
6567 should make it clearer to people that they are running
6568 the wrong binary.
6569 Fix a problem that occurs when you open an SMTP connection and then
6570 do one or more ETRN commands followed by a MAIL command; at
6571 the end of the DATA phase sendmail would incorrectly report
6572 "451 SMTP-MAIL: lost child: No child processes". Problem
6573 noted by Eric Bishop of Virginia Tech.
6574 When doing text-based host canonification (typically /etc/hosts
6575 lookup), a null host name would match any /etc/hosts entry
6576 with space at the end of the line. Problem noted by Steve
6577 Hubert of the University of Washington, Seattle.
6578 7 to 8 bit BASE64 MIME conversions could duplicate bits of text.
6579 Problem reported by Tom Smith of Digital Equipment Corp.
6580 Increase the size of the DNS answer buffer -- the standard UDP packet
6581 size PACKETSZ (512) is not sufficient for some nameserver
6582 answers containing very many resource records. The resolver
6583 may also switch to TCP and retry if it detects UDP packet
6584 overflow. Also, allow for the fact that the resolver
6585 routines res_query and res_search return the size of the
6586 *un*truncated answer in case the supplied answer buffer it
6587 not big enough to accommodate the entire answer. Patch from
6588 Eric Wassenaar.
6589 Improvements to MaxDaemonChildren code. If you think you have too
6590 many children, probe the ones you have to verify that they
6591 are still around. Suggested by Jared Mauch of CICnet, Inc.
6592 Also, do this probe before growing the vector of children
6593 pids; this previously caused the vector to grow indefinitely
6594 due to a race condition. Problem reported by Kyle Jones of
6595 UUNET.
6596 On some architectures, <db.h> (from the Berkeley DB library) defines
6597 O_EXLOCK to zero; this fools the map compilation code into
6598 thinking that it can avoid race conditions by locking on open.
6599 Change it to check for O_EXLOCK non-zero. Problem noted by
6600 Leif Erlingsson of Data Lege.
6601 Always call res_init() on startup (if compiled in, of course) to
6602 allow the sendmail.cf file to tweak resolver flags; without
6603 it, flag tweaks in ResolverOptions are ignored. Patch from
6604 Andrew Sun of Merrill Lynch.
6605 Improvements to host status printing code. Suggested by Steve Hubert
6606 of the University of Washington, Seattle.
6607 Change MinQueueAge option processing to do the check for the job age
6608 when reading the queue file, rather than at the end; this
6609 avoids parsing the addresses, which can do DNS lookups.
6610 Problem noted by John Beck of InReference, Inc.
6611 When MIME was being 7->8 bit decoded, "From " lines weren't being
6612 properly escaped. Problem noted by Peter Nilsson of the
6613 University of Linkoping.
6614 In some cases, sendmail would retain root permissions during queue
6615 runs even if RunAsUser was set. Problem noted by Mark
6616 Thomas of Mark G. Thomas Consulting.
6617 If the F=l flag was set on an SMTP mailer to indicate that it is
6618 actually local delivery, and NOTIFY=SUCCESS is specified in
6619 the envelope, and the receiving SMTP server speaks DSN, then
6620 the DSN would be both generated locally and propagated to the
6621 other end.
6622 The U= mailer field didn't correctly extract the group id if the
6623 user id was numeric. Problem noted by Kenneth Herron of
6624 MCI Telecommunications Communications.
6625 If a message exceeded the fixed maximum size on input, the body of
6626 the message was included in the bounce. Note that this did
6627 not occur if it exceeded the maximum _output_ size. Problem
6628 reported by Kyle Jones of UUNET.
6629 PORTABILITY FIXES:
6630 AIX4: 4.1 doesn't have a working setreuid(2); change the
6631 AIX4 defines to use seteuid(2) instead, which
6632 works on 4.1 as well as 4.2. Problem noted by
6633 Håkan Lindholm of interAF, Sweden.
6634 AIX4: use tzname[] vector to determine time zone name.
6635 Patch from NAKAMURA Motonori of Kyoto University.
6636 MkLinux: add Makefile.Linux.ppc and OSTYPE(mklinux) support.
6637 Contributed by Paul DuBois <dubois@primate.wisc.edu>.
6638 Solaris: kstat(3k) support for retrieving the load average.
6639 This adds the LA_KSTAT definition for LA_TYPE.
6640 The outline of the implementation was contributed
6641 by Michael Tokarev of Telecom Service, JSC, Moscow.
6642 HP-UX 10.0 gripes about the (perfectly legal!) forward
6643 declaration of struct rusage at the top of conf.h;
6644 change it to only be included if you are using gcc,
6645 which is apparently the only compiler that requires
6646 it in the first place. Problem noted by Jeff
6647 Earickson of Colby College.
6648 IRIX: don't default to using gcc. IRIX is a civilized
6649 operating system that comes with a decent compiler
6650 by default. Problem noted by Barry Bouwsma and
6651 Kari Hurtta.
6652 CONFIG: specify F=9 as default in FEATURE(local_procmail) for
6653 consistency with other local mailers. Inconsistency
6654 pointed out by Teddy Hogeborn <teddy@fukt.hk-r.se>.
6655 CONFIG: if the "limited best mx" feature is used (to reduce DNS
6656 overhead) as part of the bestmx_is_local feature, the
6657 domain part was dropped from the name. Patch from Steve
6658 Hubert of the University of Washington, Seattle.
6659 CONFIG: catch addresses of the form "user@.dom.ain"; these could
6660 end up being translated to the null host name, which would
6661 return any entry in /etc/hosts that had a space at the end
6662 of the line. Problem noted by Steve Hubert of the
6663 University of Washington, Seattle.
6664 CONFIG: add OSTYPE(aix4). From Michael Sofka of Rensselaer
6665 Polytechnic Institute.
6666 MAKEMAP: tweak hash and btree parameters for better performance.
6667 Patch from Matt Dillon of Best Internet Communications.
6668 NEW FILES:
6669 src/Makefiles/Makefile.Linux.ppc
6670 cf/ostype/aix4.m4
6671 cf/ostype/mklinux.m4
6673 8.8.2/8.8.2 1996/10/18
6674 SECURITY: fix a botch in the 7-bit MIME patch; the previous patch
6675 changed the code but didn't fix the problem.
6676 PORTABILITY FIXES:
6677 Solaris: Don't use the system getusershell(3); it can
6678 apparently corrupt the heap in some circumstances.
6679 Problem found by Ken Pizzini of Spry, Inc.
6680 OP.ME: document several mailer flags that were accidentally omitted
6681 from this document. These flags were F=d, F=j, F=R, and F=9.
6682 CONFIG: no changes.
6684 8.8.1/8.8.1 1996/10/17
6685 SECURITY: unset all environment variables that the resolver will
6686 examine during queue runs and daemon mode. Problem noted
6687 by Dan Bernstein of the University of Illinois at Chicago.
6688 SECURITY: in some cases an illegal 7-bit MIME-encoded text/plain
6689 message could overflow a buffer if it was converted back
6690 to 8 bits. This caused core dumps and has the potential
6691 for a remote attack. Problem first noted by Gregory Shapiro
6692 of WPI.
6693 Avoid duplicate deliveries of error messages on systems that don't
6694 have flock(2) support. Patch from Motonori Nakamura of
6695 Kyoto University.
6696 Ignore null FallBackMX (V) options. If this option is null (as
6697 opposed to undefined) it can cause "null signature" syserrs
6698 on illegal host names.
6699 If a Base64 encoded text/plain message has no trailing newline in
6700 the encoded text, conversion back to 8 bits will drop the
6701 final line. Problem noted by Pierre David.
6702 If running with a RunAsUser, sendmail would give bogus "cannot
6703 setuid" (or seteuid, or setreuid) messages on some systems.
6704 Problem pointed out by Jordan Mendelson of Web Services, Inc.
6705 Always print error messages in -bv mode -- previously, -bv would
6706 be absolutely silent on errors if the error mode was sent
6707 to (say) mail-back. Problem noted by Kyle Jones of UUNET.
6708 If -qI/R/S is set (or the ETRN command is used), ignore all long
6709 term host status. This is necessary because it is common
6710 to do this when you know a host has just come back up.
6711 Disallow duplicate HELO/EHLO commands as required by RFC 1651 section
6712 4.2. Excessive permissiveness noted by Lee Flight of the
6713 University of Leicester.
6714 If a service (such as NIS) is specified as the last entry in the
6715 service switch, but that service is not compiled in, sendmail
6716 would return a temporary failure when an entry was not found
6717 in the map. This caused the message to be queued instead of
6718 bouncing immediately. Problem noted by Harry Edmon of the
6719 University of Washington.
6720 PORTABILITY FIXES:
6721 Solaris 2.3 had compilation problems in conf.c. Several
6722 people pointed this out.
6723 NetBSD from Charles Hannum of MIT.
6724 AIX4 improvements based on info from Steve Bauer of South
6725 Dakota School of Mines & Technology.
6726 CONFIG: ``error:code message'' syntax was broken in virtusertable.
6727 Patch from Gil Kloepfer Jr.
6728 CONFIG: if FEATURE(nocanonify) was specified, hosts in $=M (set
6729 using MASQUERADE_DOMAIN) were not masqueraded unless they
6730 were also in $=w. Problem noted by Zoltan Basti of
6731 Softec.
6732 MAIL.LOCAL: patches to compile and link cleanly on AIX. Based
6733 on a patch from Eric Hagberg of Morgan Stanley.
6734 MAIL.LOCAL: patches to compile on NEXTSTEP. From Patrick Nolan
6735 of Stanford via Robert La Ferla.
6737 8.8.0/8.8.0 1996/09/26
6738 Under some circumstances, Bcc: headers would not be properly
6739 deleted. Pointed out by Jonathan Kamens of OpenVision.
6740 Log a warning if the sendmail daemon is invoked without a full
6741 pathname, which prevents "kill -1" from working. I was
6742 urged to put this in by Andrey A. Chernov of DEMOS (Russia).
6743 Fix small buffer overflow. Since the data in this buffer was not
6744 read externally, there was no security problem (and in fact
6745 probably wouldn't really overflow on most compilers). Pointed
6746 out by KIZU takashi of Osaka University.
6747 Fix problem causing domain literals such as [1.2.3.4] to be ignored
6748 if a FallbackMXHost was specified in the configuration file
6749 -- all mail would be sent to the fallback even if the original
6750 host was accessible. Pointed out by Munenari Hirayama of
6751 NSC (Japan).
6752 A message that didn't terminate with a newline would (sometimes) not
6753 have the trailing "." added properly in the SMTP dialogue,
6754 causing SMTP to hang. Patch from Per Hedeland of Ericsson.
6755 The DaemonPortOptions suboption to bind to a particular address was
6756 incorrect and nonfunctional due to a misunderstanding of the
6757 semantics of binding on a passive socket. Patch from
6758 NIIBE Yutaka of Mitsubishi Research Institute.
6759 Increase the number of MX hosts for a single name to 100 to better
6760 handle the truly huge service providers such as AOL, which
6761 has 13 at the moment (and climbing). In order to avoid
6762 trashing memory, the buffer for all names has only been
6763 slightly increased in size, to 12.8K from 10.2K -- this means
6764 that if a single name had 100 MX records, the average size
6765 of those records could not exceed 128 bytes. Requested by
6766 Brad Knowles of America On Line.
6767 Restore use of IDENT returns where the OSTYPE field equals "OTHER".
6768 Urged by Dan Bernstein of U.C. Berkeley.
6769 Print q_statdate and q_specificity in address structure debugging
6770 printout.
6771 Expand MCI structure flag bits for debugging output.
6772 Support IPv6-style domain literals, which can have colons between
6773 square braces.
6774 Log open file descriptors for the "cannot dup" messages in deliver();
6775 this is an attempt to track down a bug that one person seems
6776 to be having (it may be a Solaris bug!).
6777 DSN NOTIFY parameters were not properly propagated across queue runs;
6778 this caused the NOTIFY info to sometimes be lost. Problem
6779 pointed out by Claus Assmann of the
6780 Christian-Albrechts-University of Kiel.
6781 The statistics gathered in the sendmail.st file were too high; in
6782 some cases failures (e.g., user unknown or temporary failure)
6783 would count as a delivery as far as the statistics were
6784 concerned. Problem noted by Tom Moore of AT&T GIS.
6785 Systems that don't have flock() would not send split envelopes in
6786 the initial run. Problem pointed out by Leonard Zubkoff of
6787 Dandelion Digital.
6788 Move buffer overflow checking -- these primarily involve distrusting
6789 results that may come from NIS and DNS.
6790 4.4-BSD-derived systems, including FreeBSD, NetBSD, and BSD/OS didn't
6791 include <paths.h> and hence had the wrong pathnames for a few
6792 things like /var/tmp. Reported by Matthew Green.
6793 Conditions were reversed for the Priority: header, resulting in all
6794 values being interpreted as non-urgent except for non-urgent,
6795 which was interpreted as normal. Patch from Bryan Costales.
6796 The -o (optional) flag was being ignored on hash and btree maps
6797 since 8.7.2. Fix from Bryan Costales.
6798 Content-Types listed in class "q" will always be encoded as
6799 Quoted-Printable (or more accurately, will never be encoded
6800 as base64). The class can have primary types (e.g., "text")
6801 or full types (e.g., "text/plain"). Based on a suggestion by
6802 Marius Olafsson of the University of Iceland.
6803 Define ${envid} to be the original envelope id (from the ESMTP DSN
6804 dialogue) so it can be passed to programs in mailers.
6805 Define ${bodytype} to be the body type (from the -B flag or the
6806 BODY= ESMTP parameter) so it can be passed to programs in
6807 mailers.
6808 Cause the VRFY command to return 252 instead of 250 unless the F=q
6809 flag is set in the mailer descriptor. Suggested by John
6810 Myers of CMU.
6811 Implement ESMTP ETRN command to flush the queue for a specific host.
6812 The command takes a host name; data for that host is
6813 immediately (and asynchronously) flushed. Because this shares
6814 the -qR implementation, other hosts may be attempted, but
6815 there should be no security implications. Implementation
6816 from John Beck of InReference, Inc. See RFC 1985 for details.
6817 Add three new command line flags to pass in DSN parameters: -V envid
6818 (equivalent to ENVID=envid on the MAIL command), -R ret
6819 (equivalent to RET=ret on the MAIL command), and -Nnotify
6820 (equivalent to NOTIFY=notify on the RCPT command). Note
6821 that the -N flag applies to all recipients; there is no way
6822 to specify per-address notifications on the command line,
6823 nor is there an equivalent for the ORCPT= per-address
6824 parameter.
6825 Restore LogLevel option to be safe (it can only be increased);
6826 apparently I went into paranoid mode between 8.6 and 8.7
6827 and made it unsafe. Pointed out by Dabe Murphy of the
6828 University of Maryland.
6829 New logging on log level 15: all SMTP traffic. Patches from
6830 Andrew Gross of San Diego Supercomputer Center.
6831 NetInfo property value searching code wasn't stopping when it found
6832 a match. This was causing the wrong values to be found (and
6833 had a memory leak). Found by Bastian Schleuter of TU-Berlin.
6834 Add new F=0 (zero) mailer flag to turn off MX lookups. It was pointed
6835 out by Bill Wisner of Electronics for Imaging that you can't
6836 use the bracket address form for the MAIL_HUB macro, since
6837 that causes the brackets to remain in the envelope recipient
6838 address used for delivery. The simple fix (stripping off the
6839 brackets in the config file) breaks the use of IP literal
6840 addresses. This flag will solve that problem.
6841 Add MustQuoteChars option. This is a list of characters that must
6842 be quoted if they are found in the phrase part of an address
6843 (that is, the full name part). The characters @,;:\()[] are
6844 always in this list and cannot be removed. The default is
6845 this list plus . and ' to match RFC 822.
6846 Add AllowBogusHELO option; if set, sendmail will allow HELO commands
6847 that do not include a host name for back compatibility with
6848 some stupid SMTP clients. Setting this violates RFC 1123
6849 section 5.2.5.
6850 Add MaxDaemonChildren option; if this is set, sendmail will start
6851 rejecting connections if it has more than this many
6852 outstanding children accepting mail. Note that you may
6853 see more processes than this because of outgoing mail; this
6854 is for incoming connections only.
6855 Add ConnectionRateThrottle option. If set to a positive value, the
6856 number of incoming SMTP connections that will be permitted
6857 in a single second is limited to this number. Connections are
6858 not refused during this time, just deferred. The intent is to
6859 flatten out demand so that load average limiting can kick in.
6860 It is less radical than MaxDaemonChildren, which will stop
6861 accepting connections even if all the connections are idle
6862 (e.g., due to connection caching).
6863 Add Timeout.hoststatus option. This interval (defaulting to 30m)
6864 specifies how long cached information about the state of a
6865 host will be kept before they are considered stale and the
6866 host is retried. If you are using persistent host status
6867 (i.e., the HostStatusDirectory option is set) this will apply
6868 between runs; otherwise, it applies only within a single queue
6869 run and hence is useful only for hosts that have large queues
6870 that take a very long time to run.
6871 Add SingleLineFromHeader option. If set, From: headers are coerced
6872 into being a single line even if they had newlines in them
6873 when read. This is to get around a botch in Lotus Notes.
6874 Text class maps were totally broken -- if you ever retrieved the last
6875 item in a table it would be truncated. Problem noted by
6876 Gregory Neil Shapiro of WPI.
6877 Extend the lines printed by the mailq command (== the -bp flag) when
6878 -v is given to 120 characters; this allows more information
6879 to be displayed. Suggested by Gregory Neil Shapiro of WPI.
6880 Allow macro definitions (`D' lines) with unquoted commas; previously
6881 this was treated as end-of-input. Problem noted by Bryan
6882 Costales.
6883 The RET= envelope parameter (used for DSNs) wasn't properly written
6884 to the queue file. Fix from John Hughes of Atlantic
6885 Technologies, Inc.
6886 Close /var/tmp/dead.letter after a successful write -- otherwise
6887 if this happens in a queue run it can cause nasty delays.
6888 Problem noted by Mark Horton of AT&T.
6889 If userdb entries pointed to userdb entries, and there were multiple
6890 values for a given key, the database cursor would get
6891 trashed by the recursive call. Problem noted by Roy Mongiovi
6892 of Georgia Tech. Fixed by reading all the values and creating
6893 a comma-separated list; thus, the -v output will be somewhat
6894 different for this case.
6895 Fix buffer allocation problem with Hesiod-based userdb maps when
6896 HES_GETMAILHOST is defined. Based on a patch by Betty Lee
6897 of Stanford University.
6898 When envelopes were split due to aliases with owner- aliases, and
6899 there was some error on one of the lists, more than one of
6900 the owners would get the message. Problem pointed out by
6901 Roy Mongiovi of Georgia Tech.
6902 Detect excessive recursion in macro expansions, e.g., $X defined
6903 in terms of $Y which is defined in terms of $X. Problem
6904 noted by Bryan Costales; patch from Eric Wassenaar.
6905 When using F=U to get "ugly UUCP" From_ lines, a buffer could in
6906 some cases get trashed causing bogus From_ lines. Fix from
6907 Kyle Jones of UUNET.
6908 When doing load average initialization, if the nlist call for avenrun
6909 failed, the second and subsequent lookups wouldn't notice
6910 that fact causing bogus load averages to be returned. Noted
6911 by Casper Dik of Sun Holland.
6912 Fix problem with incompatibility with some versions of inet_aton that
6913 have changed the return value to unsigned, so a check for an
6914 error return of -1 doesn't work. Use INADDR_NONE instead.
6915 This could cause mail to addresses such as [foo.com] to bounce
6916 or get dropped. Problem noted by Christophe Wolfhugel of the
6917 Pasteur Institute.
6918 DSNs were inconsistent if a failure occurred during the DATA phase
6919 rather than the RCPT phase: the Action: would be correct, but
6920 the detailed status information would be wrong. Problem noted
6921 by Bob Snyder of General Electric Company.
6922 Add -U command line flag and the XUSR ESMTP extension, both indicating
6923 that this is the initial MUA->MTA submission. The flag current
6924 does nothing, but in future releases (when MUAs start using
6925 these flags) it will probably turn on things like DNS
6926 canonification.
6927 Default end-of-line string (E= specification on mailer [M] lines)
6928 to \r\n on SMTP mailers. Default remains \n on non-SMTP
6929 mailers.
6930 Change the internal definition for the *file* and *include* mailers
6931 to have $u in the argument vectors so that they aren't
6932 misinterpreted as SMTP mailers and thus use \r\n line
6933 termination. This will affect anyone who has redefined
6934 either of these in their configuration file.
6935 Don't assume that IDENT servers close the connection after a query;
6936 responses can be newline terminated. From Terry Kennedy of
6937 St. Peter's College.
6938 Avoid core dumps on erroneous configuration files that have
6939 $#mailer with nothing following. From Bryan Costales.
6940 Avoid null pointer dereference with high debug values in unlockqueue.
6941 Fix from Randy Martin of Clemson University.
6942 Fix possible buffer overrun when expanding very large macros. Fix
6943 from Kyle Jones of UUNET.
6944 After 25 EXPN or VRFY commands, start pausing for a second before
6945 processing each one. This avoids a certain form of denial
6946 of service attack. Potential attack pointed out by Bryan
6947 Costales.
6948 Allow new named (not numbered!) config file rules to do validity
6949 checking on SMTP arguments: check_mail for MAIL commands and
6950 check_rcpt for RCPT commands. These rulesets can do anything
6951 they want; their result is ignored unless they resolve to the
6952 $#error mailer, in which case the indicated message is printed
6953 and the command is rejected. Similarly, the check_compat
6954 ruleset is called before delivery with "from_addr $| to_addr"
6955 (the $| is a meta-symbol used to separate the two addresses);
6956 it can give a "this sender can't send to this recipient"
6957 notification. Note that this patch allows $| to stand alone
6958 in rulesets.
6959 Define new macros ${client_name}, ${client_addr}, and ${client_port}
6960 that have the name, IP address, and port number (respectively)
6961 of the SMTP client (that is, the entity at the other end of
6962 the connection. These can be used in (e.g.) check_rcpt to
6963 verify that someone isn't trying to relay mail through your
6964 host inappropriately. Be sure to use the deferred evaluation
6965 form, for example $&{client_name}, to avoid having these bound
6966 when sendmail reads the configuration file.
6967 Add new config file rule check_relay to check the incoming connection
6968 information. Like check_compat, it is passed the host name
6969 and host address separated by $| and can reject connections
6970 on that basis.
6971 Allow IDA-style recursive function calls. Code contributed by Mark
6972 Lovell and Paul Vixie.
6973 Eliminate the "No ! in UUCP From address!" message" -- instead, create
6974 a virtual UUCP address using either a domain address or the $k
6975 macro. Based on code contributed by Mark Lovell and Paul
6976 Vixie.
6977 Add Stanford LDAP map. Requires special libraries that are not
6978 included with sendmail. Contributed by Booker C. Bense
6979 <bbense@networking.stanford.edu>; contact him for support.
6980 See also the src/READ_ME file.
6981 Allow -dANSI to turn on ANSI escape sequences in debug output; this
6982 puts metasymbols (e.g., $+) in reverse video. Really useful
6983 only for debugging deep bits of code where it is important to
6984 distinguish between the single-character metasymbol $+ and the
6985 two characters $, +.
6986 Changed ruleset 89 (executed in dumpstate()) to a named ruleset,
6987 debug_dumpstate.
6988 Add new UnsafeGroupWrites option; if set, .forward and :include:
6989 files that are group writable are considered "unsafe" -- that
6990 is, programs and files referenced from such files are not
6991 valid recipients.
6992 Delete bogosity test for FallBackMX host; this prevented it to be a
6993 name that was not in DNS or was a domain-literal. Problem
6994 noted by Tom May.
6995 Change the introduction to error messages to more clearly delineate
6996 permanent from temporary failures; if both existed in a
6997 single message it could be confusing. Suggested by John
6998 Beck of InReference, Inc.
6999 The IngoreDot (i) option didn't work for lines that were terminated
7000 with CRLF. Problem noted by Ted Stockwell of Secure
7001 Computing Corporation.
7002 Add a heuristic to improve the handling of unbalanced `<' signs in
7003 message headers. Problem reported by Matt Dillon of Best
7004 Internet Communications.
7005 Check for bogus characters in the 0200-0237 range; since these are
7006 used internally, very strange errors can occur if those
7007 characters appear in headers. Problem noted by Anders Gertz
7008 of Lysator.
7009 Implement 7 -> 8 bit MIME conversions. This only takes place if the
7010 recipient mailer has the F=9 flag set, and only works on
7011 text/plain body types. Code contributed by Marius Olafsson
7012 of the University of Iceland.
7013 Special case "postmaster" name so that it is always treated as lower
7014 case in alias files regardless of configuration settings;
7015 this prevents some potential problems where "Postmaster" or
7016 "POSTMASTER" might not match "postmaster". In most cases
7017 this change is a no-op.
7018 The -o map flag was ignored for text maps. Problem noted by Bryan
7019 Costales.
7020 The -a map flag was ignored for dequote maps. Problem noted by
7021 Bryan Costales.
7022 Fix core dump when a lookup of a class "prog" map returns no
7023 response. Patch from Bryan Costales.
7024 Log instances where sendmail is deferring or rejecting connections
7025 on LogLevel 14. Suggested by Kyle Jones of UUNET.
7026 Include port number in process title for network daemons. Suggested
7027 by Kyle Jones of UUNET.
7028 Send ``double bounces'' (errors that occur when sending an error
7029 message) to the address indicated in the DoubleBounceAddress
7030 option (default: postmaster). Previously they were always
7031 sent to postmaster. Suggested by Kyle Jones of UUNET.
7032 Add new mode, -bD, that acts like -bd in all respects except that
7033 it runs in foreground. This is useful for using with a
7034 wrapper that "watches" system services. Suggested by Kyle
7035 Jones of UUNET.
7036 Fix botch in spacing around (parenthesized) comments in addresses
7037 when the comment comes before the address. Patch from
7038 Motonori Nakamura of Kyoto University.
7039 Use the prefix "Postmaster notify" on the Subject: lines of messages
7040 that are being bounced to postmaster, rather than "Returned
7041 mail". This permits the person who is postmaster more
7042 easily determine what messages are to their role as
7043 postmaster versus bounces to mail they actually sent. Based
7044 on a suggestion by Motonori Nakamura.
7045 Add new value "time" for QueueSortOrder option; this causes the queue
7046 to be sorted strictly by the time of submission. Note that
7047 this can cause very bad behavior over slow lines (because
7048 large jobs will tend to delay small jobs) and on nodes with
7049 heavy traffic (because old things in the queue for hosts that
7050 are down delay processing of new jobs). Also, this does not
7051 guarantee that jobs will be delivered in submission order
7052 unless you also set DeliveryMode=queue. In general, it should
7053 probably only be used on the command line, and only in
7054 conjunction with -qRhost.domain. In fact, there are very few
7055 cases where it should be used at all. Based on an
7056 implementation by Motonori Nakamura.
7057 If a map lookup in ruleset 5 returns tempfail, queue the message in
7058 the same manner as other rulesets. Previously a temporary
7059 failure in ruleset 5 was ignored. Patch from Booker Bense
7060 of Stanford University.
7061 Don't proceed to the next MX host if an SMTP MAIL command returns a
7062 5yz (permanent failure) code. The next MX host will still be
7063 tried if the connection cannot be opened in the first place
7064 or if the MAIL command returns a 4yz (temporary failure) code.
7065 (It's hard to know what to do here, since neither RFC 974 nor
7066 RFC 1123 specify when to proceed to the next MX host.)
7067 Suggested by Jonathan Kamens of OpenVision, Inc.
7068 Add new "-t" flag for map definitions (the "K" line in the .cf file).
7069 This causes map lookups that get a temporary failure (e.g.,
7070 name server failure) to _not_ defer the delivery of the
7071 message. This should only be used if your configuration file
7072 is prepared to do something sensible in this case. Based on
7073 an idea by Gregory Shapiro of WPI.
7074 Fix problem finding network interface addresses. Patch from
7075 Motonori Nakamura.
7076 Don't reject qf entries that are not owned by your effective uid if
7077 you are not running set-user-ID; this makes management of
7078 certain kinds of firewall setups difficult. Patch
7079 suggested by Eamonn Coleman of Qualcomm.
7080 Add persistent host status. This keeps the information normally
7081 maintained within a single queue run in disk files that are
7082 shared between sendmail instances. The HostStatusDirectory
7083 is the directory in which the information is maintained. If
7084 not set, persistent host status is turned off. If not a full
7085 pathname, it is relative to the queue directory. A common
7086 value is ".hoststat".
7087 There are also two new operation modes:
7088 * -bh prints the status of hosts that have had recent
7089 connections.
7090 * -bH purges the host statuses. No attempt is made to save
7091 recent status information.
7092 This feature was originally written by Paul Vixie of Vixie
7093 Enterprises for KJS and adapted for V8 by Mark Lovell of
7094 Bigrock Consulting. Paul's funding of Mark and Mark's patience
7095 with my insistence that things fit cleanly into the V8
7096 framework is gratefully appreciated.
7097 New SingleThreadDelivery option (requires HostStatusDirectory to
7098 operate). Avoids letting two sendmails on the local machine
7099 open connections to the same remote host at the same time.
7100 This reduces load on the other machine, but can cause mail to
7101 be delayed (for example, if one sendmail is delivering a huge
7102 message, other sendmails won't be able to send even small
7103 messages). Also, it requires another file descriptor (for the
7104 lock file) per connection, so you may have to reduce
7105 ConnectionCacheSize to avoid running out of per-process
7106 file descriptors. Based on the persistent host status code
7107 contributed by Paul Vixie and Mark Lovell.
7108 Allow sending to non-simple files (e.g., /dev/null) even if the
7109 SafeFileEnvironment option is set. Problem noted by Bryan
7110 Costales.
7111 The -qR flag mistakenly matched flags in the "R" line of the queue
7112 file. Problem noted by Bryan Costales.
7113 If a job was aborted using the interrupt signal (e.g., control-C from
7114 the keyboard), on some occasions an empty df file would be
7115 left around; these would collect in the queue directory.
7116 Problem noted by Bryan Costales.
7117 Change the makesendmail script to enhance the search for Makefiles
7118 based on release number. For example, on SunOS 5.5.1, it will
7119 search for Makefile.SunOS.5.5.1, Makefile.SunOS.5.5, and then
7120 Makefile.SunOS.5.x (in addition to the other rules, e.g.,
7121 adding $arch). Problem noted by Jason Mastaler of Atlanta
7122 Webmasters.
7123 When creating maps using "newaliases", always map the keys to lower
7124 case when creating the map unless the -f flag is specified on
7125 the map itself. Previously this was done based on the F=u
7126 flag in the local mailer, which meant you could create aliases
7127 that you could never access. Problem noted by Bob Wu of DEC.
7128 When a job was read from the queue, the bits causing notification on
7129 failure or delay were always set. This caused those
7130 notifications to be sent even if NOTIFY=NEVER had been
7131 specified. Problem noted by Steve Hubert of the University
7132 of Washington, Seattle.
7133 Add new configurable routine validate_connection (in conf.c). This
7134 lets you decide if you are willing to accept traffic from
7135 this host. If it returns FALSE, all SMTP commands will return
7136 "550 Access denied". -DTCPWRAPPERS will include support for
7137 TCP wrappers; you will need to add -lwrap to the link line.
7138 (See src/READ_ME for details.)
7139 Don't include the "THIS IS A WARNING MESSAGE ONLY" banner on postmaster
7140 bounces. Some people seemed to think that this could be
7141 confusing (even though it is true). Suggested by Motonori
7142 Nakamura.
7143 Add new RunAsUser option; this causes sendmail to do a setuid to that
7144 user early in processing to avoid potential security problems.
7145 However, this means that all .forward and :include: files must
7146 be readable by that user, and all files to be written must be
7147 writable by that user and all programs will be executed by that
7148 user. It is also incompatible with the SafeFileEnvironment
7149 option. In other words, it may not actually add much to
7150 security. However, it should be useful on firewalls and other
7151 places where users don't have accounts and the aliases file is
7152 well constrained.
7153 Add Timeout.iconnect. This is like Timeout.connect except it is used
7154 only on the first attempt to delivery to an address. It could
7155 be set to be lower than Timeout.connect on the principle that
7156 the mail should go through quickly to responsive hosts; less
7157 responsive hosts get to wait for the next queue run.
7158 Fix a problem on Solaris that occasionally causes programs
7159 (such as vacation) to hang with their standard input connected
7160 to a UDP port. It also created some signal handling problems.
7161 The problems turned out to be an interaction between vfork(2)
7162 and some of the libraries, particularly NIS/NIS+. I am
7163 indebted to Tor Egge <tegge@idt.ntnu.no> for this fix.
7164 Change user class map to do the same matching that actual delivery
7165 will do instead of just a /etc/passwd lookup. This adds
7166 fuzzy matching to the user map. Patch from Dan Oscarsson.
7167 The Timeout.* options are not safe -- they can be used to create a
7168 denial-of-service attack. Problem noted by Christophe
7169 Wolfhugel.
7170 Don't send PostmasterCopy messages in the event of a "delayed"
7171 notification. Suggested by Barry Bouwsma.
7172 Don't advertise "VERB" ESMTP extension if the "noexpn" privacy
7173 option is set, since this disables VERB mode. Suggested
7174 by John Hawkinson of MIT.
7175 Complain if the QueueDirectory (Q) option is not set. Problem noted
7176 by Motonori Nakamura of Kyoto University.
7177 Only queue messages on transient .forward open failures if there
7178 were no successful opens. The previous behavior caused it
7179 to queue even if a "fall back" .forward was found. Problem
7180 noted by Ann-Kian Yeo of the Dept. of Information Systems
7181 and Computer Science (DISCS), NUS, Singapore.
7182 Don't do 8->7 bit conversions when bouncing a MIME message that
7183 is bouncing because of a MIME error during 8->7 bit conversion;
7184 the encapsulated message will bounce again, causing a loop.
7185 Problem noted by Steve Hubert of the University of Washington.
7186 Create xf (transcript) files using the TempFileMode option value
7187 instead of 0644. Suggested by Ann-Kian Yeo of the
7188 National University of Singapore.
7189 Print errors if setgid/setuid/etc. fail during delivery. This helps
7190 detect cases where DefaultUid is set to something that the
7191 system can't cope with.
7192 PORTABILITY FIXES:
7193 Support for AIX/RS 2.2.1 from Mark Whetzel of Western
7194 Atlas International.
7195 Patches for Intel Paragon OSF/1 1.3 from Leo Bicknell
7196 <bicknell@ufp.org>.
7197 On DEC OSF/1 3.2 and earlier, the MatchGECOS code would only
7198 work on the first recipient of a message due to a
7199 bug in the getpwent family. If this is something you
7200 use, you can define DEC_OSF_BROKEN_GETPWENT=1 for a
7201 workaround. From Maximum Entropy of Sanford C.
7202 Bernstein and Associates.
7203 FreeBSD 1.1.5.1 uname -r returns a string containing
7204 parentheses, which breaks makesendmail. Reported
7205 by Piero Serini <piero@strider.ibenet.it>.
7206 Sequent DYNIX/ptx 4.0.2 patches from Jack Woolley of
7207 Systems and Computer Technology Corporation.
7208 Solaris 2.x: omit the UUCP grade parameter (-g flag) because
7209 it is system-dependent. Problem noted by J.J. Bailey
7210 of Bailey Computer Consulting.
7211 Pyramid NILE running DC/OSx support from Earle F. Ake of
7212 Hassler Communication Systems Technology, Inc.
7213 HP-UX 10.x compile glitches, reported by Anne Brink of the
7214 U.S. Army and James Byrne of Harte & Lyne Limited.
7215 NetBSD from Matthew Green of the NetBSD crew.
7216 SCO 5.x from Keith Reynolds of SCO.
7217 IRIX 6.2 from Robert Tarrall of the University of
7218 Colorado and Kari Hurtta of the Finnish Meteorological
7219 Institute.
7220 UXP/DS (Fujitsu/ICL DS/90 series) support from Diego R.
7221 Lopez, CICA (Seville).
7222 NCR SVR4 MP-RAS 3.x support from Tom Moore of NCR.
7223 PTX 3.2.0 from Kenneth Stailey of the US Department of Labor
7224 Employment Standards Administration.
7225 Altos System V (5.3.1) from Tim Rice of Multitalents.
7226 Concurrent Systems Corporation Maxion from Donald R. Laster
7227 Jr.
7228 NetInfo maps (improved debugging and multi-valued aliases)
7229 from Adrian Steinmann of Steinmann Consulting.
7230 ConvexOS 11.5 (including SecureWare C2 and the Share Scheduler)
7231 from Eric Schnoebelen of Convex.
7232 Linux 2.0 mail.local patches from Horst von Brand.
7233 NEXTSTEP 3.x compilation from Robert La Ferla.
7234 NEXTSTEP 3.x code changes from Allan J. Nathanson of NeXT.
7235 Solaris 2.5 configuration fixes for mail.local by Jim Davis
7236 of the University of Arizona.
7237 Solaris 2.5 has a working setreuid. Noted by David Linn of
7238 Vanderbilt University.
7239 Solaris changes for praliases, makemap, mailstats, and smrsh.
7240 Previously you had to add -DSOLARIS in Makefile.dist;
7241 this auto-detects. Based on a patch from Randall
7242 Winchester of the University of Maryland.
7243 CONFIG: add generic-nextstep3.3.mc file. Contributed by
7244 Robert La Ferla of Hot Software.
7245 CONFIG: allow mailertables to resolve to ``error:code message''
7246 (where "code" is an exit status) on domains (previously
7247 worked only on hosts). Patch from Cor Bosman of Xs4all
7248 Foundation.
7249 CONFIG: hooks for IPv6-style domain literals.
7250 CONFIG: predefine ALIAS_FILE and change the prototype file so that
7251 if it is undefined the AliasFile option is never set; this
7252 should be transparent for most everyone. Suggested by John
7253 Myers of CMU.
7254 CONFIG: add FEATURE(limited_masquerade). Without this feature, any
7255 domain listed in $=w is masqueraded. With it, only those
7256 domains listed in a MASQUERADE_DOMAIN macro are masqueraded.
7257 CONFIG: add FEATURE(masquerade_entire_domain). This causes
7258 masquerading specified by MASQUERADE_DOMAIN to apply to all
7259 hosts under those domains as well as the domain headers
7260 themselves. For example, if a configuration had
7261 MASQUERADE_DOMAIN(foo.com), then without this feature only
7262 foo.com would be masqueraded; with it, *.foo.com would be
7263 masqueraded as well. Based on an implementation by Richard
7264 (Pug) Bainter of U. Texas.
7265 CONFIG: add FEATURE(genericstable) to do a more general rewriting of
7266 outgoing addresses. Defaults to ``hash -o /etc/genericstable''.
7267 Keys are user names; values are outgoing mail addresses. Yes,
7268 this does overlap with the user database, and figuring out
7269 just when to use which one may be tricky. Based on code
7270 contributed by Richard (Pug) Bainter of U. Texas with updates
7271 from Per Hedeland of Ericsson.
7272 CONFIG: add FEATURE(virtusertable) to do generalized rewriting of
7273 incoming addresses. Defaults to ``hash -o /etc/virtusertable''.
7274 Keys are either fully qualified addresses or just the host
7275 part (with the @ sign). For example, a table containing:
7276 info@foo.com foo-info
7277 info@bar.com bar-info
7278 @baz.org jane@elsewhere.net
7279 would send all mail destined for info@foo.com to foo-info
7280 (which is presumably an alias), mail addressed to info@bar.com
7281 to bar-info, and anything addressed to anyone at baz.org will
7282 be sent to jane@elsewhere.net. The names foo.com, bar.com,
7283 and baz.org must all be in $=w. Based on discussions with
7284 a great many people.
7285 CONFIG: add nullclient configurations to define SMTP_MAILER_FLAGS.
7286 Suggested by Richard Bainter.
7287 CONFIG: add FAX_MAILER_ARGS to tweak the arguments passed to the
7288 "fax" mailer.
7289 CONFIG: allow mailertable entries to resolve to local:user; this
7290 passes the original user@host in to procmail-style local
7291 mailers as the "detail" information to allow them to do
7292 additional clever processing. From Joe Pruett of
7293 Teleport Corporation. Delivery to the original user can
7294 be done by specifying "local:" (with nothing after the colon).
7295 CONFIG: allow any context that takes "mailer:domain" to also take
7296 "mailer:user@domain" to force mailing to the given user;
7297 "local:user" can also be used to do local delivery. This
7298 applies on *_RELAY and in the mailertable entries. Based
7299 on a suggestion by Ribert Kiessling of Easynet.
7300 CONFIG: Allow FEATURE(bestmx_is_local) to take an argument that
7301 limits the possible domains; this reduces the number of DNS
7302 lookups required to support this feature. For example,
7303 FEATURE(bestmx_is_local, my.site.com) limits the lookups
7304 to domains under my.site.com. Code contributed by Anthony
7305 Thyssen <anthony@cit.gu.edu.au>.
7306 CONFIG: LOCAL_RULESETS introduces any locally defined rulesets,
7307 such as the check_rcpt ruleset. Suggested by Gregory Shapiro
7308 of WPI.
7309 CONFIG: MAILER_DEFINITIONS introduces any mailer definitions, in the
7310 event you have to define local mailers. Suggested by
7311 Gregory Shapiro of WPI.
7312 CONFIG: fix cases where a three- (or more-) stage route-addr could
7313 be misinterpreted as a list:...; syntax. Based on a patch by
7314 Vlado Potisk <Vlado_Potisk@tempest.sk>.
7315 CONFIG: Fix masquerading of UUCP addresses when the UUCP relay is
7316 remotely connected. The address host!user was being
7317 converted to host!user@thishost instead of host!user@uurelay.
7318 Problem noted by William Gianopoulos of Raytheon Company.
7319 CONFIG: add confTO_ICONNECT to set Timeout.iconnect.
7320 CONFIG: change FEATURE(redirect) message from "User not local" to
7321 "User has moved"; the former wording was confusing if the
7322 new address is still on the local host. Based on a suggestion
7323 by Andreas Luik.
7324 CONFIG: add support in FEATURE(nullclient) for $=E (exposed users).
7325 However, the class is not pre-initialized to contain root.
7326 Suggested by Gregory Neil Shapiro.
7327 CONTRIB: Remove XLA code at the request of the author, Christophe
7328 Wolfhugel.
7329 CONTRIB: Add re-mqueue.pl, contributed by Paul Pomes of Qualcomm.
7330 MAIL.LOCAL: make it possible to compile mail.local on Solaris. Note
7331 well: this produces a slightly different mailbox format (no
7332 Content-Length: headers), file ownerships and modes are
7333 different (not owned by group mail; mode 600 instead of 660),
7334 and the local mailer flags will have to be tweaked (make them
7335 match bsd4.4) in order to use this mailer. Patches from Paul
7336 Hammann of the Missouri Research and Education Network.
7337 MAIL.LOCAL: in some cases it could return EX_OK even though there
7338 was a delivery error, such as if the ownership on the file
7339 was wrong or the mode changed between the initial stat and
7340 the open. Problem reported by William Colburn of the New
7341 Mexico Institute of Mining and Technology.
7342 MAILSTATS: handle zero length files more reliably. Patch from Bryan
7343 Costales.
7344 MAILSTATS: add man page contributed by Keith Bostic of BSDI.
7345 MAKEMAP: The -d flag (to allow duplicate keys) to a btree map wasn't
7346 honored. Fix from Michael Scott Shappe.
7347 PRALIASES: add man page contributed by Keith Bostic of BSDI.
7348 NEW FILES:
7349 src/Makefiles/Makefile.AIX.2
7350 src/Makefiles/Makefile.IRIX.6.2
7351 src/Makefiles/Makefile.maxion
7352 src/Makefiles/Makefile.NCR.MP-RAS.3.x
7353 src/Makefiles/Makefile.SCO.5.x
7354 src/Makefiles/Makefile.UXPDSV20
7355 mailstats/mailstats.8
7356 praliases/praliases.8
7357 cf/cf/generic-nextstep3.3.mc
7358 cf/feature/genericstable.m4
7359 cf/feature/limited_masquerade.m4
7360 cf/feature/masquerade_entire_domain.m4
7361 cf/feature/virtusertable.m4
7362 cf/ostype/aix2.m4
7363 cf/ostype/altos.m4
7364 cf/ostype/maxion.m4
7365 cf/ostype/solaris2.ml.m4
7366 cf/ostype/uxpds.m4
7367 contrib/re-mqueue.pl
7368 DELETED FILES:
7369 src/Makefiles/Makefile.Solaris
7370 contrib/xla/README
7371 contrib/xla/xla.c
7372 RENAMED FILES:
7373 src/Makefiles/Makefile.NCR3000 => Makefile.NCR.MP-RAS.2.x
7374 src/Makefiles/Makefile.SCO.3.2v4.2 => Makefile.SCO.4.2
7375 src/Makefiles/Makefile.UXPDS => Makefile.UXPDSV10
7376 src/Makefiles/Makefile.NeXT => Makefile.NeXT.2.x
7377 src/Makefiles/Makefile.NEXTSTEP => Makefile.NeXT.3.x
7379 8.7.6/8.7.3 1996/09/17
7380 SECURITY: It is possible to force getpwuid to fail when writing the
7381 queue file, causing sendmail to fall back to running programs
7382 as the default user. This is not exploitable from off-site.
7383 Workarounds include using a unique user for the DefaultUser
7384 (old u & g options) and using smrsh as the local shell.
7385 SECURITY: fix some buffer overruns; in at least one case this allows
7386 a local user to get root. This is not known to be exploitable
7387 from off-site. The workaround is to disable chfn(1) commands.
7389 8.7.5/8.7.3 1996/03/04
7390 Fix glitch in 8.7.4 when putting certain internal lines; this can
7391 in some case cause connections to hang or messages to have
7392 extra spaces in odd places. Patch from Eric Wassenaar;
7393 reports from Eric Hall of Chiron Corporation, Stephen
7394 Hansen of Stanford University, Dean Gaudet of HotWired,
7395 and others.
7397 8.7.4/8.7.3 1996/02/18
7398 SECURITY: In some cases it was still possible for an attacker to
7399 insert newlines into a queue file, thus allowing access to
7400 any user (except root).
7401 CONFIG: no changes -- it is not a bug that the configuration
7402 version number is unchanged.
7404 8.7.3/8.7.3 1995/12/03
7405 Fix botch in name server timeout in RCPT code; this problem caused
7406 two responses in SMTP, which breaks things horribly. Fix
7407 from Gregory Neil Shapiro of WPI.
7408 Verify that L= value on M lines cannot be negative, which could cause
7409 negative array subscripting. Not a security problem since
7410 this has to be in the config file, but it could have caused
7411 core dumps. Pointed out by Bryan Costales.
7412 Fix -d21 debug output for long macro names. Pointed out by Bryan
7413 Costales.
7414 PORTABILITY FIXES:
7415 SCO doesn't have ftruncate. From Bill Aten of Computerizers.
7416 IBM's version of arpa/nameser.h defaults to the wrong byte
7417 order. Tweak it to work properly. Based on fixes
7418 from Fletcher Mattox of UTexas and Betty Lee of
7419 Stanford University.
7420 CONFIG: add confHOSTS_FILE m4 variable to set HostsFile option.
7421 Deficiency pointed out by Bryan Costales of ICSI.
7423 8.7.2/8.7.2 1995/11/19
7424 REALLY fix the backslash escapes in SmtpGreetingMessage,
7425 OperatorChars, and UnixFromLine options. They were not
7426 properly repaired in 8.7.1.
7427 Completely delete the Bcc: header if and only if there are other
7428 valid recipient headers (To:, Cc: or Apparently-To:, the
7429 last being a historic botch, of course). If Bcc: is the
7430 only recipient header in the message, its value is tossed,
7431 but the header name is kept. The old behavior (always keep
7432 the header name and toss the value) allowed primary recipients
7433 to see that a Bcc: went to _someone_.
7434 Include queue id on ``Authentication-Warning: <host>: <user> set
7435 sender to <address> using -f'' syslog messages. Suggested
7436 by Kari Hurtta.
7437 If a sequence or switch map lookup entry gets a tempfail but then
7438 continues on to another map type, but the name is not found,
7439 return a temporary failure from the sequence or switch map.
7440 For example, if hosts search ``dns files'' and DNS fails
7441 with a tempfail, the hosts map will go on and search files,
7442 but if it fails the whole thing should be a tempfail, not
7443 a permanent (host unknown) failure, even though that is the
7444 failure in the hosts.files map. This error caused hard
7445 bounces when it should have requeued.
7446 Aliases to files such as /users/bar/foo/inbox, with /users/bar/foo
7447 owned by bar mode 700 and inbox being set-user-ID bar stopped
7448 working properly due to excessive paranoia. Pointed out by
7449 John Hawkinson of Panix.
7450 An SMTP RCPT command referencing a host that gave a nameserver
7451 timeout would return a 451 command (8.6 accepted it and
7452 queued it locally). Revert to the 8.6 behavior in order
7453 to simplify queue management for clustered systems. Suggested
7454 by Gregory Neil Shapiro of WPI. The same problem could break
7455 MH, which assumes that the SMTP session will succeed (tsk, tsk
7456 -- mail gets lost!); this was pointed out by Stuart Pook of
7457 Infobiogen.
7458 Fix possible buffer overflow in munchstring(). This was not a security
7459 problem because you couldn't specify any argument to this
7460 without first giving up root privileges, but it is still a
7461 good idea to avoid future problems. Problem noted by John
7462 Hawkinson and Sam Hartman of MIT.
7463 ``452 Out of disk space for temp file'' messages weren't being
7464 printed. Fix from David Perlin of Nanosoft.
7465 Don't advertise the ESMTP DSN extension if the SendMimeErrors option
7466 is not set, since this is required to get the actual DSNs
7467 created. Problem pointed out by John Gardiner Myers of CMU.
7468 Log permission problems that cause .forward and :include: files to
7469 be untrusted or ignored on log level 12 and higher. Suggested
7470 by Randy Martin of Clemson University.
7471 Allow user ids in U= clauses of M lines to have hyphens and
7472 underscores.
7473 Fix overcounting of recipients -- only happened when sending to an
7474 alias. Pointed out by Mark Andrews of SGI and Jack Woolley
7475 of Systems and Computer Technology Corporation.
7476 If a message is sent to an address that fails, the error message that
7477 is returned could show some extraneous "success" information
7478 included even if the user did not request success notification,
7479 which was confusing. Pointed out by Allan Johannesen of WPI.
7480 Config files that had no AliasFile definition were defaulting to
7481 using /etc/aliases; this caused problems with nullclient
7482 configurations. Change it back to the 8.6 semantics of
7483 having no local alias file unless it is declared. Problem
7484 noted by Charles Karney of Princeton University.
7485 Fix compile problem if NOTUNIX is defined. Pointed out by Bryan
7486 Costales of ICSI.
7487 Map lookups of class "userdb" maps were always case sensitive; they
7488 should be controlled by the -f flag like other maps. Pointed
7489 out by Bjart Kvarme <bjart.kvarme@usit.uio.no>.
7490 Fix problem that caused some addresses to be passed through ruleset 5
7491 even when they were tagged as "sticky" by prefixing the
7492 address with an "@". Patch from Thomas Dwyer III of Michigan
7493 Technological University.
7494 When converting a message to Quoted-Printable, prevent any lines with
7495 dots alone on a line by themselves. This is because of the
7496 preponderance of broken mailers that still get this wrong.
7497 Code contributed by Per Hedeland of Ericsson.
7498 Fix F{macro}/file construct -- it previously did nothing. Pointed
7499 out by Bjart Kvarme of USIT/UiO (Norway).
7500 Announce whether a cached connection is SMTP or ESMTP (in -v mode).
7501 Requested by Allan Johannesen.
7502 Delete check for text format of alias files -- it should be legal
7503 to have the database format of the alias files without the
7504 text version. Problem pointed out by Joe Rhett of Navigist,
7505 Inc.
7506 If "Ot" was specified with no value, the TZ variable was not properly
7507 imported from the environment. Pointed out by Frank Crawford
7508 <frank@ansto.gov.au>.
7509 Some architectures core dumped on "program" maps that didn't have
7510 extra arguments. Patch from Booker C. Bense of Stanford
7511 University.
7512 Queue run processes would re-spawn daemons when given a SIGHUP; only
7513 the parent should do this. Fix from Brian Coan of the
7514 Association for Progressive Communications.
7515 If MinQueueAge was set and a message was considered but not run
7516 during a queue run and the Timeout.queuereturn interval was
7517 reached, a "timed out" error message would be returned that
7518 didn't include the failed address (and claimed to be a warning
7519 even though it was fatal). The fix is to not return such
7520 messages until they are actually tried, i.e., in the next
7521 MinQueueAge interval. Problem noted by Rein Tollevik of
7522 SINTEF RUNIT, Oslo.
7523 Add HES_GETMAILHOST compile flag to support MIT Hesiod distributions
7524 that have the hes_getmailhost() routine. DEC Hesiod
7525 distributions do not have this routine. Based on a patch
7526 from Betty Lee of Stanford University.
7527 Extensive cleanups to map open code to handle a locking race condition
7528 in ndbm, hash, and btree format database files on some (most
7529 non-4.4-BSD based) OS architectures. This should solve the
7530 occasional "user unknown" problem during alias rebuilds that
7531 has plagued me for quite some time. Based on a patch from
7532 Thomas Dwyer III of Michigan Technological University.
7533 PORTABILITY FIXES:
7534 Solaris: Change location of newaliases and mailq from
7535 /usr/ucb to /usr/bin to match Sun settings. From
7536 James B. Davis of TCI.
7537 DomainOS: Makefile.DomainOS doesn't require -ldbm. From
7538 Don Lewis of Silicon Systems.
7539 HP-UX 10: rename Makefile.HP-UX.10 => Makefile.HP-UX.10.x
7540 so that the makesendmail script will find it. Pointed
7541 out by Richard Allen of the University of Iceland.
7542 Also, use -Aa -D_HPUX_SOURCE instead of -Ae, which
7543 isn't supported on all compilers.
7544 UXPDS: compilation fixes from Diego R. Lopez.
7545 CONFIG: FAX mailer wasn't setting .FAX as a pseudo-domain unless
7546 you also had a FAX_RELAY. From Thomas.Tornblom@Hax.SE.
7547 CONFIG: Minor glitch in S21 -- attachment of local domain name
7548 didn't have trailing dot. From Jim Hickstein of Teradyne.
7549 CONFIG: Fix best_mx_is_local feature to allow nested addresses such as
7550 user%host@thishost. From Claude Scarpelli of Infobiogen
7551 (France).
7552 CONFIG: OSTYPE(hpux10) failed to define the location of the help file.
7553 Pointed out by Hannu Martikka of Nokia Telecommunications.
7554 CONFIG: Diagnose some inappropriate ordering in configuration files,
7555 such as FEATURE(smrsh) listed after MAILER(local). Based on
7556 a bug report submitted by Paul Hoffman of Proper Publishing.
7557 CONFIG: Make OSTYPE files consistently not override settings that
7558 have already been set. Previously it worked differently
7559 for different files.
7560 CONFIG: Change relay mailer to do masquerading like 8.6 did. My take
7561 is that this is wrong, but the change was causing problems
7562 for some people. From Per Hedeland of Ericsson.
7563 CONTRIB: bitdomain.c patch from John Gardiner Myers <jgm+@CMU.EDU>;
7564 portability changes for Posix environments (no functional
7565 changes).
7567 8.7.1/8.7.1 1995/10/01
7568 Old macros that have become options (SmtpGreetingMessage,
7569 OperatorChars, and UnixFromLine) didn't allow backslash
7570 escapes in the options, where they previously had. Bug
7571 pointed out by John Hawkinson of MIT.
7572 Fix strange case of an executable called by a program map that
7573 returns a value but also a non-zero exit status; this
7574 would give contradictory results in the higher level; in
7575 particular, the default clause in the map lookup would be
7576 ignored. Change to ignore the value if the program returns
7577 non-zero exit status. From Tom Moore of AT&T GIS.
7578 Shorten parameters passed to syslog() in some contexts to avoid a
7579 bug in many vendors' implementations of that routine. Although
7580 this isn't really a bug in sendmail per se, and my solution
7581 has to assume that syslog() has at least a 1K buffer size
7582 internally (I know some vendors have shortened this
7583 dramatically -- they're on their own), sendmail is a popular
7584 target. Also, limit the size of %s arguments in sprintf.
7585 These both have possible security implications. Solutions
7586 suggested by Casper Dik of Sun's Network Security Group
7587 (Holland), Mark Seiden, and others.
7588 Fix a problem that might cause a non-standard -B (body type)
7589 parameter to be passed to the next server with undefined
7590 results. This could have security implications.
7591 If a filesystem was at > 100% utilization, the freediskspace()
7592 routine incorrectly returned an error rather than zero.
7593 Problem noted by G. Paul Ziemba of Alantec.
7594 Change MX sort order so that local hostnames (those in $=w) always
7595 sort first within a given preference. This forces the bestmx
7596 map to always return the local host first, if it is included
7597 in the list of highest priority MX records. From K. Robert
7598 Elz.
7599 Avoid some possible null pointer dereferences. Fixes from Randy
7600 Martin <WOLF@CLEMSON.EDU>
7601 When sendmail starts up on systems that have no fully qualified
7602 domain name (FQDN) anywhere in the first matching host map
7603 (e.g., /etc/hosts if the hosts service searches "files dns"),
7604 sendmail would sleep to try to find a FQDN, which it really
7605 really needs. This has been changed to fall through to the
7606 next map type if it can't find a FQDN -- i.e., if the hosts
7607 file doesn't have a FQDN, it will try dns even though the
7608 short name was found in /etc/hosts. This is probably a crock,
7609 but many people have hosts files without FQDNs. Remember:
7610 domain names are your friends.
7611 Log a high-priority message if you can't find your FQDN during startup.
7612 Suggested by Simon Barnes of Schlumberger Limited.
7613 When using Hesiod, initialize it early to improve error reporting.
7614 Patch from Don Lewis of Silicon Systems, Inc.
7615 Apparently at least some versions of Linux have a 90 !minute! TCP
7616 connection timeout in the kernel. Add a new "connect" timeout
7617 to limit this time. Defaults to zero (use whatever the
7618 kernel provides). Based on code contributed by J.R. Oldroyd
7619 of TerraNet.
7620 Under some circumstances, a failed message would not be properly
7621 removed from the queue, causing tons of bogus error messages.
7622 (This fix eliminates the problematic EF_KEEPQUEUE flag.)
7623 Problem noted by Allan E Johannesen and Gregory Neil Shapiro
7624 of WPI.
7625 PORTABILITY FIXES:
7626 On IRIX 5.x, there was an inconsistency in the setting
7627 of sendmail.st location. Change the Makefile to
7628 install it in /var/sendmail.st to match the OSTYPE
7629 file and SGI standards. From Andre
7630 <andre@curry.zfe.siemens.de>.
7631 Support for Fujitsu/ICL UXP/DS (For the DS/90 Series)
7632 from Diego R. Lopez <drlopez@cica.es>.
7633 Linux compilation patches from J.R. Oldroyd of TerraNet, Inc.
7634 LUNA 2 Mach patches from Motonori Nakamura.
7635 SunOS Makefile was including -ldbm, which is for the old
7636 dbm library. The ndbm library is part of libc.
7637 CONFIG: avoid bouncing ``user@host.'' (note trailing dot) with
7638 ``local configuration error'' in nullclient configuration.
7639 Patch from Gregory Neil Shapiro of WPI.
7640 CONFIG: don't allow an alias file in nullclient configurations --
7641 since all addresses are relayed, they give errors during
7642 rebuild. Suggested by Per Hedeland of Ericsson.
7643 CONFIG: local mailer on Solaris 2 should always get a -f flag because
7644 otherwise the F=S causes the From_ line to imply that root is
7645 the sender. Problem pointed out by Claude Scarpelli of
7646 Infobiogen (France).
7647 NEW FILES:
7648 cf/feature/use_ct_file.m4 (omitted from 8.7 by mistake)
7649 src/Makefiles/Makefile.KSR (omitted from 8.7 by mistake)
7650 src/Makefiles/Makefile.UXPDS
7652 8.7/8.7 1995/09/16
7653 Fix a problem that could cause sendmail to run out of file
7654 descriptors due to a trashed data structure after a
7655 vfork. Fix from Brian Coan of the Institute for
7656 Global Communications.
7657 Change the VRFY response if you have disabled VRFY -- some
7658 people seemed to think that it was too rude.
7659 Avoid reference to uninitialized file descriptor if HASFLOCK
7660 was not defined. This was used "safely" in the sense
7661 that it only did a stat, but it would have set the
7662 map modification time improperly. Problem pointed out
7663 by Roy Mongiovi of Georgia Tech.
7664 Clean up the Subject: line on warning messages and return
7665 receipts so that they don't say "Returned mail:"; this
7666 can be confusing.
7667 Move ruleset entry/exit debugging from 21.2 to 21.1 -- this is
7668 useful enough to make it worthwhile printing on "-d".
7669 Avoid logging alias statistics every time you read the alias
7670 file on systems with no database method compiled in.
7671 If you have a name with a trailing dot, and you try looking it
7672 up using gethostbyname without the dot (for /etc/hosts
7673 compatibility), be sure to turn off RES_DEFNAMES and
7674 RES_DNSRCH to avoid finding the wrong name accidentally.
7675 Problem noted by Charles Amos of the University of
7676 Maryland.
7677 Don't do timeouts in collect if you are not running SMTP.
7678 There is nothing that says you can't have a long
7679 running program piped into sendmail (possibly via
7680 /bin/mail, which just execs sendmail). Problem reported
7681 by Don "Truck" Lewis of Silicon Systems.
7682 Try gethostbyname() even if the DNS lookup fails iff option I
7683 is not set. This allows you to have hosts listed in
7684 NIS or /etc/hosts that are not known to DNS. It's normally
7685 a bad idea, but can be useful on firewall machines. This
7686 should really be broken out on a separate flag, I suppose.
7687 Avoid compile warnings against BIND 4.9.3, which uses function
7688 prototypes. From Don Lewis of Silicon Systems.
7689 Avoid possible incorrect diagnosis of DNS-related errors caused
7690 by things like attempts to resolve uucp names using
7691 $[ ... $] -- the fix is to clear h_errno at appropriate
7692 times. From Kyle Jones of UUNET.
7693 SECURITY: avoid denial-of-service attacks possible by destroying
7694 the alias database file by setting resource limits low.
7695 This involves adding two new compile-time options:
7696 HASSETRLIMIT (indicating that setrlimit(2) support is
7697 available) and HASULIMIT (indicating that ulimit(2) support
7698 is available -- the Release 3 form is used). The former
7699 is assumed on BSD-based systems, the latter on System
7700 V-based systems. Attack noted by Phil Brandenberger of
7701 Swarthmore University.
7702 New syntaxes in test (-bt) mode:
7703 ``.Dmvalue'' will define macro "m" to "value".
7704 ``.Ccvalue'' will add "value" to class "c".
7705 ``=Sruleset'' will dump the contents of the indicated
7706 ruleset.
7707 ``=M'' will display the known mailers.
7708 ``-ddebug-spec'' is equivalent to the command-line
7709 -d debug flag.
7710 ``$m'' will print the value of macro $m.
7711 ``$=c'' will print the contents of class $=c.
7712 ``/mx host'' returns the MX records for ``host''.
7713 ``/parse address'' will parse address, returning the value of
7714 crackaddr (essentially, the comment information)
7715 and the parsed address.
7716 ``/try mailer address'' will rewrite address into the form
7717 it will have when presented to the indicated mailer.
7718 ``/tryflags flags'' will set flags used by parsing. The
7719 flags can be `H' for header or `E' for envelope,
7720 and `S' for sender or `R' for recipient. These
7721 can be combined, so `HR' sets flags for header
7722 recipients.
7723 ``/canon hostname'' will try to canonify hostname and
7724 return the result.
7725 ``/map mapname key'' will look up `key' in the indicated
7726 `mapname' and return the result.
7727 Somewhat better handling of UNIX-domain socket addresses -- it
7728 should show the pathname rather than hex bytes.
7729 Restore ``-ba'' mode -- this reads a file from stdin and parses
7730 the header for envelope sender information and uses
7731 CR-LF as message terminators. It was thought to be
7732 obsolete (used only for Arpanet NCP protocols), but it
7733 turns out that the UK ``Grey Book'' protocols require
7734 that functionality.
7735 Fix a fix in previous release -- if gethostname and gethostbyname
7736 return a name without dots, and if an attempt to canonify
7737 that name fails, wait one minute and try again. This can
7738 result in an extra 60 second delay on startup if your system
7739 hostname (as returned by hostname(1)) has no dot and no names
7740 listed in /etc/hosts or your NIS map have a dot.
7741 Check for proper domain name on HELO and EHLO commands per
7742 RFC 1123 section 5.2.5. Problem noted by Thomas Dwyer III
7743 of Michigan Technological University.
7744 Relax chownsafe rules slightly -- old version said that if you
7745 can't tell if _POSIX_CHOWN_RESTRICTED is set (that is,
7746 if fpathconf returned EINVAL or ENOSYS), assume that
7747 chown is not safe. The new version falls back to whether
7748 you are on a BSD system or not. This is important for
7749 SunOS, which apparently always returns one of those
7750 error codes. This impacts whether you can mail to files
7751 or not.
7752 Syntax errors such as unbalanced parentheses in the configuration
7753 file could be omitted if you had "Oem" prior to the
7754 syntax error in the config file. Change to always print
7755 the error message. It was especially weird because it
7756 would cause a "warning" message to be sent to the Postmaster
7757 for every message sent (but with no transcript). Problem
7758 noted by Gregory Paris of Motorola.
7759 Rewrite collect and putbody to handle full 8-bit data, including
7760 zero bytes. These changes are internally extensive, but
7761 should have minimal impact on external function.
7762 Allow full words for option names -- if the option letter is
7763 (apparently) a space, then take the word following -- e.g.,
7764 O MatchGECOS=TRUE
7765 The full list of old and new names is as follows:
7766 7 SevenBitInput
7767 8 EightBitMode
7768 A AliasFile
7769 a AliasWait
7770 B BlankSub
7771 b MinFreeBlocks/MaxMessageSize
7772 C CheckpointInterval
7773 c HoldExpensive
7774 D AutoRebuildAliases
7775 d DeliveryMode
7776 E ErrorHeader
7777 e ErrorMode
7778 f SaveFromLine
7779 F TempFileMode
7780 G MatchGECOS
7781 H HelpFile
7782 h MaxHopCount
7783 i IgnoreDots
7784 I ResolverOptions
7785 J ForwardPath
7786 j SendMimeErrors
7787 k ConnectionCacheSize
7788 K ConnectionCacheTimeout
7789 L LogLevel
7790 l UseErrorsTo
7791 m MeToo
7792 n CheckAliases
7793 O DaemonPortOptions
7794 o OldStyleHeaders
7795 P PostmasterCopy
7796 p PrivacyOptions
7797 Q QueueDirectory
7798 q QueueFactor
7799 R DontPruneRoutes
7800 r, T Timeout
7801 S StatusFile
7802 s SuperSafe
7803 t TimeZoneSpec
7804 u DefaultUser
7805 U UserDatabaseSpec
7806 V FallbackMXHost
7807 v Verbose
7808 w TryNullMXList
7809 x QueueLA
7810 X RefuseLA
7811 Y ForkEachJob
7812 y RecipientFactor
7813 z ClassFactor
7814 Z RetryFactor
7815 The old macros that passed information into sendmail have
7816 been changed to options; those correspondences are:
7817 $e SmtpGreetingMessage
7818 $l UnixFromLine
7819 $o OperatorChars
7820 $q (deleted -- not necessary)
7821 To avoid possible problems with an older sendmail,
7822 configuration level 6 is accepted by this version of
7823 sendmail; any config file using the new names should
7824 specify "V6" in the configuration.
7825 Change address parsing to properly note that a phrase before a
7826 colon and a trailing semicolon are essentially the same
7827 as text outside of angle brackets (i.e., sendmail should
7828 treat them as comments). This is to handle the
7829 ``group name: addr1, addr2, ..., addrN;'' syntax (it will
7830 assume that ``group name:'' is a comment on the first
7831 address and the ``;'' is a comment on the last address).
7832 This requires config file support to get right. It does
7833 understand that :: is NOT this syntax, and can be turned
7834 off completely by setting the ColonOkInAddresses option.
7835 Level 6 config files added with new mailer flags:
7836 A Addresses are aliasable.
7837 i Do udb rewriting on envelope as well as header
7838 sender lines. Applies to the from address mailer
7839 flags rather than the recipient mailer flags.
7840 j Do udb rewriting on header recipient addresses.
7841 Applies to the sender mailer flags rather than the
7842 recipient mailer flags.
7843 k Disable check for loops when doing HELO command.
7844 o Always run as the mail recipient, even on local
7845 delivery.
7846 w Check for an /etc/passwd entry for this user.
7847 5 Pass addresses through ruleset 5.
7848 : Check for :include: on this address.
7849 | Check for |program on this address.
7850 / Check for /file on this address.
7851 @ Look up sender header addresses in the user
7852 database. Applies to the mailer flags for the
7853 mailer corresponding to the envelope sender
7854 address, rather than to recipient mailer flags.
7855 Pre-level 6 configuration files set A, w, 5, :, |, /, and @
7856 on the "local" mailer, the o flag on the "prog" and "*file*"
7857 mailers, and the ColonOkInAddresses option.
7858 Eight-to-seven bit MIME conversions. This borrows ideas from
7859 John Beck of Hewlett-Packard, who generously contributed
7860 their implementation to me, which I then didn't use (see
7861 mime.c for an explanation of why). This adds the
7862 EightBitMode option (a.k.a. `8') and an F=8 mailer flag
7863 to control handling of 8-bit data. These have to cope with
7864 two types of 8-bit data: unlabelled 8-bit data (that is,
7865 8-bit data that is entered without declaring it as 8-bit
7866 MIME -- technically this is illegal according to the
7867 specs) and labelled 8-bit data (that is, it was declared
7868 as 8BITMIME in the ESMTP session or by using the
7869 -B8BITMIME command line flag). If the F=8 mailer flag is
7870 set then 8-bit data is sent to non-8BITMIME machines
7871 instead of converting to 7 bit (essentially using
7872 just-send-8 semantics). The values for EightBitMode are:
7873 m convert unlabelled 8-bit input to 8BITMIME, and do
7874 any necessary conversion of 8BITMIME to 7BIT
7875 (essentially, the full MIME option).
7876 p pass unlabelled 8-bit input, but convert labelled
7877 8BITMIME input to 7BIT as required (default).
7878 s strict adherence: reject unlabelled 8-bit input,
7879 convert 8BITMIME to 7BIT as required. The F=8
7880 flag is ignored.
7881 Unlabelled 8-bit data is rejected in mode `s' regardless of
7882 the setting of F=8.
7883 Add new internal class 'n', which is the set of MIME Content-Types
7884 which can not be 8 to 7 bit encoded because of other
7885 considerations. Types "multipart/*" and "message/*" are
7886 never directly encoded (although their components can be).
7887 Add new internal class 's', which is the set of subtypes of the
7888 MIME message/* content type that can be treated as though
7889 they are an RFC822 message. It is predefined to have
7890 "rfc822". Suggested By Kari Hurtta.
7891 Add new internal class 'e'. This is the set of MIME
7892 Content-Transfer-Encodings that can be converted to
7893 a seven bit format (Quoted-Printable or Base64). It is
7894 preinitialized to contain "7bit", "8bit", and "binary".
7895 Add C=charset mailer parameter and the the DefaultCharSet option (no
7896 short name) to set the default character set to use in the
7897 Content-Type: header when doing encoding of an 8-bit message
7898 which isn't marked as MIME into MIME format. If the C=
7899 parameter is set on the Envelope From address, use that as
7900 the default encoding; else use the DefaultCharSet option.
7901 If neither is set, it defaults to "unknown-8bit" as
7902 suggested by RFC 1428 section 3.
7903 Allow ``U=user:group'' field in mailer definition to set a default
7904 user and group that a mailer will be executed as. This
7905 overrides the 'u' and 'g' options, and if the `F=S' flag is
7906 also set, it is the uid/gid that will always be used (that
7907 is, the controlling address is ignored). The values may be
7908 numeric or symbolic; if only a symbolic user is given (no
7909 group) that user's default group in the passwd file is used
7910 as the group. Based on code donated by Chip Rosenthal of
7911 Unicom.
7912 Allow `u' option to also accept user:group as a value, in the same
7913 fashion as the U= mailer option.
7914 Add the symbolic time zone name in the Arpanet format dates (as
7915 a comment). This adds a new compile-time configuration
7916 flag: TZ_TYPE can be set to TZ_TM_NAME (use the value
7917 of (struct tm *)->tm_name), TZ_TM_ZONE (use the value
7918 of (struct tm *)->tm_zone), TZ_TZNAME (use extern char
7919 *tzname[(struct tm *)->tm_isdst]), TZ_TIMEZONE (use
7920 timezone()), or TZ_NONE (don't include the comment). Code
7921 from Chip Rosenthal.
7922 The "Timeout" option (formerly "r") is extended to allow suboptions.
7923 For example,
7924 O Timeout.helo = 2m
7925 There are also two new suboptions "queuereturn" and
7926 "queuewarn"; these subsume the old T option. Thus, to
7927 set them both the preferred new syntax is
7928 O Timeout.queuereturn = 5d
7929 O Timeout.queuewarn = 4h
7930 Sort queue by host name instead of by message priority if the
7931 QueueSortOrder option (no short name) is set is set to
7932 ``host''. This makes better use of the connection cache,
7933 but may delay more ``interactive'' messages behind large
7934 backlogs under some circumstances. This is probably a
7935 good option if you have high speed links or don't do lots
7936 of ``batch'' messages, but less good if you are using
7937 something like PPP on a 14.4 modem. Based on code
7938 contributed by Roy Mongiovi of Georgia Tech (my main
7939 contribution was to make it configurable).
7940 Save i-number of df file in qf file to simplify rebuilding of queue
7941 after disastrous disk crash. Suggested by Kyle Jones of
7942 UUNET; closely based on code from KJS DECWRL code written
7943 by Paul Vixie. NOTA BENE: The qf files produced by 8.7
7944 are NOT back compatible with 8.6 -- that is, you can convert
7945 from 8.6 to 8.7, but not the other direction.
7946 Add ``F=d'' mailer flag to disable all use of angle brackets in
7947 route-addrs in envelopes; this is because in some cases
7948 they can be sent to the shell, which interprets them as
7949 I/O redirection.
7950 Don't include error file (option E) with return-receipts; this
7951 can be confusing.
7952 Don't send "Warning: cannot send" messages to owner-* or
7953 *-request addresses. Suggested by Christophe Wolfhugel
7954 of the Institut Pasteur, Paris.
7955 Allow -O command line flag to set long form options.
7956 Add "MinQueueAge" option to set the minimum time between attempts
7957 to run the queue. For example, if the queue interval
7958 (-q value) is five minutes, but the minimum queue age
7959 is fifteen minutes, jobs won't be tried more often than
7960 once every fifteen minutes. This can be used to give
7961 you more responsiveness if your delivery mode is set to
7962 queue-only.
7963 Allow "fileopen" timeout (default: 60 seconds) for opening
7964 :include: and .forward files.
7965 Add "-k", "-v", and "-z" flags to map definitions; these set the
7966 key field name, the value field name, and the field
7967 delimiter. The field delimiter can be a single character
7968 or the sequence "\t" or "\n" for tab or newline.
7969 These are for use by NIS+ and similar access methods.
7970 Change maps to always strip quotes before lookups; the -q flag
7971 turns off this behavior. Suggested by Motonori Nakamura.
7972 Add "nisplus" map class. Takes -k and -v flags to choose the
7973 key and value field names respectively. Code donated by
7974 Sun Microsystems.
7975 Add "hesiod" map class. The "file name" is used as the
7976 "HesiodNameType" parameter to hes_resolve(3). Returns the
7977 first value found for the match. Code donated by Scott
7978 Hutton of Indiana University.
7979 Add "netinfo" (NeXT NetInfo) map class. Maps can have a -k flag to
7980 specify the name of the property that is searched as the
7981 key and a -v flag to specify the name of the property that
7982 is returned as the value (defaults to "members"). The
7983 default map is "/aliases". Some code based on code
7984 contributed by Robert La Ferla of Hot Software.
7985 Add "text" map class. This does slow, linear searches through
7986 text files. The -z flag specifies a column delimiter
7987 (defaults to any sequence of white space), the -k flag
7988 sets the key column number, and the -v flag sets the
7989 value column number. Lines beginning with `#' are treated
7990 as comments.
7991 Add "program" map class to execute arbitrary programs. The search
7992 key is presented as the last argument; the output is one
7993 line read from the programs standard output. Exit statuses
7994 are from sysexits.h.
7995 Add "sequence" map class -- searches maps in sequence until it
7996 finds a match. For example, the declarations:
7997 Kmap1 ...
7998 Kmap2 ...
7999 Kmapseq sequence map1 map2
8000 defines a map "mapseq" that first searches map1; if the
8001 value is found it is returned immediately, otherwise
8002 map2 is searched and the value returned.
8003 Add "switch" map class. This is much like "sequence" except that
8004 the ordering is fetched from an external file, usually
8005 the system service switch. The parameter is the name of
8006 the service to switch on, and the maps that it will use
8007 are the name of the switch map followed by ".service_type".
8008 For example, if the declaration of the map is
8009 Ksample switch hosts
8010 and the system service switch specifies that hosts are
8011 looked up using dns and nis in that order, then this is
8012 equivalent to
8013 Ksample sequence sample.dns sample.nis
8014 The subordinate maps (sample.*) must already be defined.
8015 Add "user" map class -- looks up users using getpwnam. Takes a
8016 "-v field" flag on the definition that tells what passwd
8017 entry to return -- legal values are name, passwd, uid, gid,
8018 gecos, dir, and shell. Generally expected to be used with
8019 the -m (matchonly) flag.
8020 Add "bestmx" map class -- returns the best MX value for the host
8021 listed as the value. If there are several "best" MX records
8022 for this host, one will be chosen at random.
8023 Add "userdb" map class -- looks up entries in the user database.
8024 The "file name" is actually the tag that will be used,
8025 typically "mailname". If there are multiple entries
8026 matching the name, the one chosen is undefined.
8027 Add multiple queue timeouts (both return and warning). These are
8028 set by the Precedence: or Priority: header fields to one of
8029 three values. If a Priority: is set and has value "normal",
8030 "urgent", or "non-urgent" the corresponding timeouts are
8031 used. If no priority is set, the Precedence: is consulted;
8032 if negative, non-urgent timeouts are used; if greater than
8033 zero, urgent timeouts are used. Otherwise, normal timeouts
8034 are used. The timeouts are set by setting the six timeouts
8035 queue{warn,return}.{urgent,normal,non-urgent}.
8036 Fix problem when a mail address is resolved to a $#error mailer
8037 with a temporary failure indication; it works in SMTP,
8038 but when delivering locally the mail is silently discarded.
8039 This patch, from Kyle Jones of UUNET, bounces it instead
8040 of queueing it (queueing is very hard).
8041 When using /etc/hosts or NIS-style lookups, don't assume that
8042 the first name in the list is the best one -- instead,
8043 search for the first one with a dot. For example, if
8044 an /etc/hosts entry reads
8045 128.32.149.68 mammoth mammoth.CS.Berkeley.EDU
8046 this change will use the second name as the canonical
8047 machine name instead of the initial, unqualified name.
8048 Change dequote map to replace spaces in quoted text with a value
8049 indicated by the -s flag on the dequote map definition.
8050 For example, ``Mdequote dequote -s_'' will change
8051 "Foo Bar" into an unquoted Foo_Bar instead of leaving it
8052 quoted (because of the space character). Suggested by Dan
8053 Oscarsson for use in X.400 addresses.
8054 Implement long macro names as ${name}; long class names can
8055 be similarly referenced as $={name} and $~{name}.
8056 Definitions are (e.g.) ``D{name}value''. Names that have
8057 a leading lower case letter or punctuation characters are
8058 reserved for internal use by sendmail; i.e., config files
8059 should use names that begin with a capital letter. Based
8060 on code contributed by Dan Oscarsson.
8061 Fix core dump if getgrgid returns a null group list (as opposed
8062 to an empty group list, that is, a pointer to a list
8063 with no members). Fix from Andrew Chang of Sun Microsystems.
8064 Fix possible core dump if malloc fails -- if the malloc in xalloc
8065 failed, it called syserr which called newstr which called
8066 xalloc.... The newstr is now avoided for "panic" messages.
8067 Reported by Stuart Kemp of James Cook University.
8068 Improve connection cache timeouts; previously, they were not even
8069 checked if you were delivering to anything other than an
8070 IPC-connected host, so a series of (say) local mail
8071 deliveries could cause cached connections to be open
8072 much longer than the specified timeout.
8073 If an incoming message exceeds the maximum message size, stop
8074 writing the incoming bytes to the queue data file, since
8075 this can fill your mqueue partition -- this is a possible
8076 denial-of-service attack.
8077 Don't reject all numeric local user names unless HESIOD is
8078 defined. It turns out that Posix allows all-numeric
8079 user names. Fix from Tony Sanders of BSDI.
8080 Add service switch support. If the local OS has a service
8081 switch (e.g., /etc/nsswitch.conf on Solaris or /etc/svc.conf
8082 on DEC systems) that will be used; otherwise, it falls back
8083 to using a local mechanism based on the ServiceSwitchFile
8084 option (default: /etc/service.switch). For example, if the
8085 service switch lists "files" and "nis" for the aliases
8086 service, that will be the default lookup order. the "files"
8087 ("local" on DEC) service type expands to any alias files
8088 you listed in the configuration file, even if they aren't
8089 actually file lookups.
8090 Option I (NameServerOptions) no longer sets the "UseNameServer"
8091 variable which tells whether or not DNS should be considered
8092 canonical. This is now determined based on whether or not
8093 "dns" is in the service list for "hosts".
8094 Add preliminary support for the ESMTP "DSN" extension (Delivery
8095 Status Notifications). DSN notifications override
8096 Return-Receipt-To: headers, which are bogus anyhow --
8097 support for them has been removed.
8098 Add T=mts-name-type/address-type/diagnostic-type keyletter to mailer
8099 definitions to define the types used in DSN returns for
8100 MTA names, addresses, and diagnostics respectively.
8101 Extend heuristic to force running in ESMTP mode to look for the
8102 five-character string "ESMTP" anywhere in the 220 greeting
8103 message (not just the second line). This is to provide
8104 better compatibility with other ESMTP servers.
8105 Print sequence number of job when running the queue so you can
8106 easily see how much progress you have made. Suggested
8107 by Peter Wemm of DIALix.
8108 Map newlines to spaces in logged message-ids; some versions of
8109 syslog truncate the rest of the line after newlines.
8110 Suggested by Fletcher Mattox of U. Texas.
8111 Move up forking for job runs so that if a message is split into
8112 multiple envelopes you don't get "fork storms" -- this
8113 also improves the connection cache utilization.
8114 Accept "<<>>", "<<<>>>", and so forth as equivalent to "<>" for
8115 the purposes of refusing to send error returns. Suggested
8116 by Motonori Nakamura of Ritsumeikan University.
8117 Relax rules on when a file can be written when referenced from
8118 the aliases file: use the default uid/gid instead of the
8119 real uid/gid. This allows you to create a file owned by
8120 and writable only by the default uid/gid that will work
8121 all the time (without having the set-user-ID bit set). Change
8122 suggested by Shau-Ping Lo and Andrew Cheng of Sun
8123 Microsystems.
8124 Add "DialDelay" option (no short name) to provide an "extra"
8125 delay for dial on demand systems. If this is non-zero
8126 and a connect fails, sendmail will wait this long and
8127 then try again. If it takes longer than the kernel
8128 timeout interval to establish the connection, this
8129 option can give the network software time to establish
8130 the link. The default units are seconds.
8131 Move logging of sender information to be as early as possible;
8132 previously, it could be delayed a while for SMTP mail
8133 sent to aliases. Suggested by Brad Knowles of the
8134 Defense Information Systems Agency.
8135 Call res_init() before setting RES_DEBUG; this is required by
8136 BIND 4.9.3, or so I'm told. From Douglas Anderson of
8137 the National Computer Security Center.
8138 Add xdelay= field in logs -- this is a transaction delay, telling
8139 you how long it took to deliver to this address on the
8140 last try. It is intended to be used for sorting mailing
8141 lists to favor "quick" addresses. Provided for use by
8142 the mailprio scripts (see below).
8143 If a map cannot be opened, and that map is non-optional, and
8144 an address requires that map for resolution, queue the
8145 map instead of bouncing it. This involves creating a
8146 pseudo-class of maps called "bogus-map" -- if a required
8147 map cannot be opened, the class is changed to bogus-map;
8148 all queries against bogus-map return "tempfail". The
8149 bogus-map class is not directly accessible. A sample
8150 implementation was donated by Jem Taylor of Glasgow
8151 University Computing Service.
8152 Fix a possible core dump when mailing to a program that talks
8153 SMTP on its standard input. Fix from Keith Moore of
8154 the University of Kentucky.
8155 Make it possible to resolve filenames to $#local $: @ /filename;
8156 previously, the "@" would cause it to not be recognized
8157 as a file. Problem noted by Brian Hill of U.C. Davis.
8158 Accept a -1 signal to re-exec the daemon. This only works if
8159 argv[0] is a full path to sendmail.
8160 Fix bug in "addr=..." field in O option on little-endian machines
8161 -- the network number wasn't being converted to network
8162 byte order. Patch from Kurt Lidl of Pix Technologies
8163 Corporation.
8164 Pre-initialize the resolver early on; this is to avoid a bug with
8165 BIND 4.9.3 that can cause the _res.retry field to get
8166 reset to zero, causing all name server lookups to time
8167 out. Fix from Matt Day of Artisoft.
8168 Restore T line (trusted users) in config file -- but instead of
8169 locking out the -f flag, they just tell whether or not
8170 an X-Authentication-Warning: will be added. This really
8171 just creates new entries in class 't', so "Ft/file/name"
8172 can be used to read trusted user names from a file.
8173 Trusted users are also allowed to execute programs even
8174 if they have a shell that isn't in /etc/shells.
8175 Improve NEWDB alias file rebuilding so it will create them
8176 properly if they do not already exist. This had been
8177 a MAYBENEXTRELEASE feature in 8.6.9.
8178 Check for @:@ entry in NIS maps before starting up to avoid
8179 (but not prevent, sigh) race conditions. This ought to
8180 be handled properly in ypserv, but isn't. Suggested by
8181 Michael Beirne of Motorola.
8182 Refuse connections if there isn't enough space on the filesystem
8183 holding the queue. Contributed by Robert Dana of Wolf
8184 Communications.
8185 Skip checking for directory permissions in the path to a file
8186 when checking for file permissions iff setreuid()
8187 succeeded -- it is unnecessary in that case. This avoids
8188 significant performance problems when looking for .forward
8189 files. Based on a suggestion by Win Bent of USC.
8190 Allow symbolic ruleset names. Syntax can be "Sname" to get an
8191 arbitrary ruleset number assigned or "Sname = integer"
8192 to assign a specific ruleset number. Reference is
8193 $>name_or_number. Names can be composed of alphas, digits,
8194 underscore, or hyphen (first character must be non-numeric).
8195 Allow -o flag on AliasFile lines to make the alias file optional.
8196 From Bryan Costales of ICSI.
8197 Add NoRecipientAction option to handle the case where there is
8198 no legal recipient header in the message. It can take
8199 on values:
8200 None Leave the message as is. The
8201 message will be passed on even
8202 though it is in technically
8203 illegal syntax.
8204 Add-To Add a To: header with any
8205 recipients that it can find from
8206 the envelope. This risks exposing
8207 Bcc: recipients.
8208 Add-Apparently-To Add an Apparently-To: header. This
8209 has almost no redeeming social value,
8210 and is provided only for back
8211 compatibility.
8212 Add-To-Undisclosed Add a header reading
8213 To: undisclosed-recipients:;
8214 which will have the effect of
8215 making the message legal without
8216 exposing Bcc: recipients.
8217 Add-Bcc To add an empty Bcc: header.
8218 There is a chance that mailers down
8219 the line will delete this header,
8220 which could cause exposure of Bcc:
8221 recipients.
8222 The default is NoRecipientAction=None.
8223 Truncate (rather than delete) Bcc: lines in the header. This
8224 should prevent later sendmails (at least, those that don't
8225 themselves delete Bcc:) from considering this message to
8226 be non-conforming -- although it does imply that non-blind
8227 recipients can see that a Bcc: was sent, albeit not to whom.
8228 Add SafeFileEnvironment option. If declared, files named as delivery
8229 targets must be regular files in addition to the regular
8230 checks. Also, if the option is non-null then it is used as
8231 the name of a directory that is used as a chroot(2)
8232 environment for the delivery; the file names listed in an
8233 alias or forward should include the name of this root.
8234 For example, if you run with
8235 O SafeFileEnvironment=/arch
8236 then aliases should reference "/arch/rest/of/path". If a
8237 value is given, sendmail also won't try to save to
8238 /usr/tmp/dead.letter (instead it just leaves the job in the
8239 queue as Qfxxxxxx). Inspired by *Hobbit*'s sendmail patch kit.
8240 Support -A flag for alias files; this will comma concatenate like
8241 entries. For example, given the aliases:
8242 list: member1
8243 list: member2
8244 and an alias file declared as:
8245 OAhash:-A /etc/aliases
8246 the final alias inserted will be "list: member1,member2";
8247 without -A you will get an error on the second and subsequent
8248 alias for "list". Contributed by Bryan Costales of ICSI.
8249 Line-buffer transcript file. Suggested by Liudvikas Bukys.
8250 Fix a problem that could cause very long addresses to core dump in
8251 some special circumstances. Problem pointed out by Allan
8252 Johannesen.
8253 (Internal change.) Change interface to expand() (macro expansion)
8254 to be simpler and more consistent.
8255 Delete check for funny qf file names. This didn't really give
8256 any extra security and caused some people some problems.
8257 (If you -really- want this, define PICKY_QF_NAME_CHECK
8258 at compile time.) Suggested by Kyle Jones of UUNET.
8259 (Internal change.) Change EF_NORETURN to EF_NO_BODY_RETN and
8260 merge with DSN code; this is simpler and more consistent.
8261 This may affect some people who have written their own
8262 checkcompat() routine.
8263 (Internal change.) Eliminate `D' line in qf file. The df file
8264 is now assumed to be the same name as the qf file (with
8265 the `q' changed to a `d', of course).
8266 Avoid forking for delivery if all recipient mailers are marked as
8267 "expensive" -- this can be a major cost on some systems.
8268 Essentially, this forces sendmail into "queue only" mode
8269 if all it is going to do is queue anyway.
8270 Avoid sending a null message in some rather unusual circumstances
8271 (specifically, the RCPT command returns a temporary
8272 failure but the connection is lost before the DATA
8273 command). Fix from Scott Hammond of Secure Computing
8274 Corporation.
8275 Change makesendmail to use a somewhat more rational naming scheme:
8276 Makefiles and obj directories are named $os.$rel.$arch,
8277 where $os is the operating system (e.g., SunOS), $rel is
8278 the release number (e.g., 5.3), and $arch is the machine
8279 architecture (e.g., sun4). Any of these can be omitted,
8280 and anything after the first dot in a release number can
8281 be replaced with "x" (e.g., SunOS.4.x.sun4). The previous
8282 version used $os.$arch.$rel and was rather less general.
8283 Change makesendmail to do a "make depend" in the target directory
8284 when it is being created. This involves adding an empty
8285 "depend:" entry in most Makefiles.
8286 Ignore IDENT return value if the OSTYPE field returns "OTHER",
8287 as indicated by RFC 1413. Pointed out by Kari Hurtta
8288 of the Finnish Meteorological Institute.
8289 Fix problem that could cause multiple responses to DATA command
8290 on header syntax errors (e.g., lines beginning with colons).
8291 Problem noted by Jens Thomassen of the University of Oslo.
8292 Don't let null bytes in headers cause truncation of the rest of
8293 the header.
8294 Log Authentication-Warning:s. Suggested by Motonori Nakamura.
8295 Increase timeouts on message data puts to allow time for receivers
8296 to canonify addresses in headers on the fly. This is still
8297 a rather ugly heuristic. From Motonori Nakamura.
8298 Add "HasWildcardMX" suboption to ResolverOptions; if set, MX
8299 records are not used when canonifying names, and when MX
8300 lookups are done for addressing they must be fully
8301 qualified. This is useful if you have a wildcard MX record,
8302 although it may cause other problems. In general, don't use
8303 wildcard MX records. Patch from Motonori Nakamura.
8304 Eliminate default two-line SMTP greeting message. Instead of
8305 adding an extra "ESMTP spoken here" line, the word "ESMTP"
8306 is added between the first and second word of the first
8307 line of the greeting message (i.e., immediately after the
8308 host name). This eliminates the need for the BROKEN_SMTP_PEERS
8309 compile flag. Old sendmails won't see the ESMTP, but that's
8310 acceptable because SIZE was the only useful extension that
8311 old sendmails understand.
8312 Avoid gethostbyname calls on UNIX domain sockets during SIGUSR1
8313 invoked state dumps. From Masaharu Onishi.
8314 Allow on-line comments in .forward and :include: files; they are
8315 introduced by the string "<LWSP>#@#<LWSP>", where <LWSP>
8316 is a space or a tab. This is intended for native
8317 representation of non-ASCII sets such as Japanese, where
8318 existing encodings would be unreadable or would lose
8319 data -- for example,
8320 <motonori@cs.ritsumei.ac.jp> NAKAMURA Motonori
8321 (romanized/less information)
8322 <motonori@cs.ritsumei.ac.jp> =?ISO-2022-JP?B?GyRCQ2ZCPBsoQg==?=
8323 =?ISO-2022-JP?B?GyRCQUdFNRsoQg==?=
8324 (with MIME encoding, not human readable)
8325 <motonori@cs.ritsumei.ac.jp> #@# ^[$BCfB<^[(B ^[$BAGE5^[(B
8326 (native encoding with ISO-2022-JP)
8327 The last form is human readable in the Japanese environment.
8328 Based on a fix from (surprise!) Motonori Nakamura.
8329 Don't make SMTP error returns on MAIL FROM: line be "sticky" for all
8330 messages to that host; these are most frequently associated
8331 with addresses rather than the host, with the exception of
8332 421 (service shutting down). The effect was to cause queues
8333 to sometimes take an excessive time to flush. Reported by
8334 Robert Sargent of Southern Geographics Technologies and
8335 Eric Prestemon of American University.
8336 Add Nice=N mailer option to set the niceness at which a mailer will
8337 run. This is actually a relative niceness (that is, an
8338 increment on the background value).
8339 Log queue runs that are skipped due to high loads. They are logged
8340 at LOG_INFO priority iff the log level is > 8. Contributed
8341 by Bruce Nagel of Data General.
8342 Allow the error mailer to accept a DSN-style error status code
8343 instead of an sysexits status code in the host part.
8344 Anything with a dot will be interpreted as a DSN-style code.
8345 Add new mailer flag: F=3 will tell translations to Quoted-Printable
8346 to encode characters that might be munged by an EBCDIC system
8347 in addition to the set required by RFC 1521. The additional
8348 characters are !, ", #, $, @, [, \, ], ^, `, {, |, }, and ~.
8349 (Think of "IBM 360" as the mnemonic for this flag.)
8350 Change check for mailing to files to look for a pathname of [FILE]
8351 rather than looking for the mailer named *file*. The mapping
8352 of leading slashes still goes to the *file* mailer. This
8353 allows you to implement the *file* mailer as a separate
8354 program, for example, to insert a Content-Length: header
8355 or do special security policy. However, note that the usual
8356 initial checking for the file permissions is still done, and
8357 the program in question needs to be very careful about how
8358 it does the file write to avoid security problems.
8359 Be able to read ~root/.forward even if the path isn't accessible to
8360 regular users. This is disrecommended because sendmail
8361 sometimes does not run as root (e.g., when an unsafe option
8362 is specified on the command line), but should otherwise be
8363 safe because .forward files must be owned by the user for
8364 whom mail is being forwarded, and cannot be a symbolic link.
8365 Suggested by Forrest Aldrich of Wang Laboratories.
8366 Add new "HostsFile" option that is the pathname to the /etc/hosts
8367 file. This is used for canonifying hostnames when the
8368 service type is "files".
8369 Implement programs on F (read class from file) line. The syntax is
8370 Fc|/path/to/program to read the output from the program
8371 into class "c".
8372 Probe the network interfaces to find alternate names for this
8373 host. Requires the SIOCGIFCONF ioctl call. Code
8374 contributed by SunSoft.
8375 Add "E" configuration line to set or propagate environment
8376 variables into children. "E<envar>" will propagate
8377 the named variable from the environment when sendmail
8378 was invoked into any children it calls; "E<envar>=<value>"
8379 sets the named variable to the indicated value. Any
8380 variables not explicitly named will not be in the child
8381 environment. However, sendmail still forces an
8382 "AGENT=sendmail" environment variable, in part to enforce
8383 at least one environment variable, since many programs and
8384 libraries die horribly if this is not guaranteed.
8385 Change heuristic for rebuilding both NEWDB and NDBM versions of
8386 alias databases -- new algorithm looks for the substring
8387 "/yp/" in the file name. This is more portable and involves
8388 less overhead. Suggested by Motonori Nakamura.
8389 Dynamically allocate the queue work list so that you don't lose
8390 jobs in large queue runs. The old QUEUESIZE compile parameter
8391 is replaced by QUEUESEGSIZE (the unit of allocation, which
8392 should not need to be changed) and the MaxQueueRunSize option,
8393 which is the absolute maximum number of jobs that will ever
8394 be handled in a single queue run. Based on code contributed
8395 by Brian Coan of the Institute for Global Communications.
8396 Log message when a message is dropped because it exceeds the maximum
8397 message size. Suggested by Leo Bicknell of Virginia Tech.
8398 Allow trusted users (those on a T line or in $=t) to use -bs without
8399 an X-Authentication-Warning: added. Suggested by Mark Thomas
8400 of Mark G. Thomas Consulting.
8401 Announce state of compile flags on -d0.1 (-d0.10 throws in the
8402 OS-dependent defines). The old semantic of -d0.1 to not
8403 run the daemon in background has been moved to -d99.100,
8404 and the old 52.5 flag (to avoid disconnect() from closing
8405 all output files) has been moved to 52.100. This makes
8406 things more consistent (flags below .100 don't change
8407 semantics) and separates out the backgrounding so that
8408 it doesn't happen automatically on other unrelated debugging
8409 flags.
8410 If -t is used but no addresses are found in the header, give an
8411 error message rather than just doing nothing. Fix from
8412 Motonori Nakamura.
8413 On systems (like SunOS) where the effective gid is not necessarily
8414 included in the group list returned by getgroups(), the
8415 `restrictmailq' option could sometimes cause an authorized
8416 user to not be able to use `mailq'. Fix from Charles Hannum
8417 of MIT.
8418 Allow symbolic service names for [IPC] mailers. Suggested by
8419 Gerry Magennis of Logica International.
8420 Add DontExpandCnames option to prevent $[ ... $] from expanding CNAMEs
8421 when running DNS. For example, if the name FTP.Foo.ORG is
8422 a CNAME for Cruft.Foo.ORG, then when sitting on a machine in
8423 the Foo.ORG domain a lookup of "FTP" returns "Cruft.Foo.ORG"
8424 if this option is not set, or "FTP.Foo.ORG" if it is set.
8425 This is technically illegal under RFC 822 and 1123, but the
8426 IETF is moving toward legalizing it. Note that turning on
8427 this option is not sufficient to guarantee that a downstream
8428 neighbor won't rewrite the address for you.
8429 Add "-m" flag to makesendmail script -- this tells you what object
8430 directory and Makefile it will use, but doesn't actually do
8431 the make.
8432 Do some additional checking on the contents of the qf file to try
8433 to detect attacks against the qf file. In particular,
8434 abort on any line beginning "From ", and add an "end of
8435 file" line -- any data after that line is prohibited.
8436 Always use /etc/sendmail.cf, regardless of the arbitrary vendor
8437 choices. This can be overridden in the Makefile by using
8438 either -DUSE_VENDOR_CF_PATH to get the vendor location
8439 (to the extent that we know it) or by defining
8440 _PATH_SENDMAILCF (which is a "hard override"). This allows
8441 sendmail 8 to have more consistent installation instructions.
8442 Allow macros on `K' line in config file. Suggested by Andrew Chang
8443 of Sun Microsystems.
8444 Improved symbol table hash function from Eric Wassenaar. This one
8445 is at least 50% faster.
8446 Fix problem that didn't notice that timeout on file open was a
8447 transient error. Fix from Larry Parmelee of Cornell
8448 University.
8449 Allow comments (lines beginning with a `#') in files read for
8450 classes. Suggested by Motonori Nakamura.
8451 Make SIGINT (usually ^C) in test mode return to the prompt instead
8452 of dropping out entirely. This makes testing some of the
8453 name server lookups easier to deal with when there are
8454 hung servers. From Motonori Nakamura.
8455 Add new ${opMode} macro that is set to the current operation mode
8456 (e.g., `s' for -bs, `t' for -bt, etc.). Suggested by
8457 Claude Marinier <MARINIER@emp.ewd.dreo.dnd.ca>.
8458 Add new delivery mode (Odd) that defers all map lookups to queue runs.
8459 Kind of like queue-only mode (Odq) except it tries to avoid
8460 any external service requests; for dial-on-demand hosts that
8461 want to minimize DNS lookups when mail is being queued. For
8462 this to work you will also have to make sure that gethostbyname
8463 of your local host name does not do a DNS lookup.
8464 Improved handling of "out of space" conditions from John Myers of
8465 Carnegie Mellon.
8466 Improved security for mailing to files on systems that have fchmod(2)
8467 support.
8468 Improve "cannot send message for N days" message -- now says "could
8469 not send for past N days". Suggested by Tom Moore of AT&T
8470 Global Information Solutions.
8471 Less misleading Subject: line on messages sent to postmaster only.
8472 From Motonori Nakamura.
8473 Avoid duplicate error messages on bad command line flags. From
8474 Motonori Nakamura.
8475 Better error message for case where ruleset 0 falls off the end
8476 or otherwise does not resolve to a canonical triple.
8477 Fix a problem that could cause multiple bounce messages if a bad
8478 address was sent along with a good address to an SMTP
8479 site where that SMTP site returned a 4yz code in response
8480 to the final dot of the data. Problem reported by David
8481 James of British Telecom.
8482 Add "volatile" declarations so that gcc -O2 will work. Patches
8483 from Alexander Dupuy of System Management ARTS.
8484 Delete duplicates in MX lists -- believe it or not, there are sites
8485 that list the same host twice in an MX list. This deletion
8486 only works on adjacent preferences, so an MX list that
8487 had A=5, B=10, A=15 would leave both As, but one that had
8488 A=5, A=10, B=15 would reduce to A, B. This is intentional,
8489 just in case there is something weird I haven't thought of.
8490 Suggested by Barry Shein of Software Tool & Die.
8491 SECURITY: .forward files cannot be symbolic links. If they are,
8492 a bad guy can read your private files.
8493 PORTABILITY FIXES:
8494 Solaris 2 from Rob McMahon <cudcv@csv.warwick.ac.uk>.
8495 System V Release 4 from Motonori Nakamura of Ritsumeikan
8496 University. This expands the disk size
8497 checking to include all (?) SVR4 configurations.
8498 System V Release 4 from Kimmo Suominen -- initgroups(3)
8499 and setrlimit(2) are both available.
8500 System V Release 4 from sob@sculley.ffg.com -- some versions
8501 apparently "have EX_OK defined in other headerfiles."
8502 Linux Makefile typo.
8503 Linux getusershell(3) is broken in Slackware 2.0 --
8504 from Andrew Pam of Xanadu Australia.
8505 More Linux tweaking from John Kennedy of California State
8506 University, Chico.
8507 Cray changes from Eric Wassenaar: ``On Cray, shorts,
8508 ints, and longs are all 64 bits, and all structs
8509 are multiples of 64 bits. This means that the
8510 sizeof operator returns only multiples of 8.
8511 This requires adaptation of code that really
8512 deals with 32 bit or 16 bit fields, such as IP
8513 addresses or nameserver fields.''
8514 DG/UX 5.4.3 from Mark T. Robinson <mtr@ornl.gov>. To
8515 get the old behavior, use -DDGUX_5_4_2.
8516 DG/UX hack: add _FORCE_MAIL_LOCAL_=yes environment
8517 variable to fix bogus /bin/mail behavior.
8518 Tandem NonStop-UX from Rick McCarty <mccarty@mpd.tandem.com>.
8519 This also cleans up some System V Release 4 compile
8520 problems.
8521 Solaris 2: sendmail.cw file should be in /etc/mail to
8522 match all the other configuration files. Fix
8523 from Glenn Barry of Emory University.
8524 Solaris 2.3: compile problem in conf.c. Fix from Alain
8525 Nissen of the University of Liege, Belgium.
8526 Ultrix: freespace calculation was incorrect. Fix from
8527 Takashi Kizu of Osaka University.
8528 SVR4: running in background gets a SIGTTOU because the
8529 emulation code doesn't realize that "getpeername"
8530 doesn't require reading the file. Fix from Peter
8531 Wemm of DIALix.
8532 Solaris 2.3: due to an apparent bug in the socket emulation
8533 library, sockets can get into a "wedged" state where
8534 they just return EPROTO; closing and re-opening the
8535 socket clears the problem. Fix from Bob Manson
8536 of Ohio State University.
8537 Hitachi 3050R & 3050RX running HI-UX/WE2: portability
8538 fixes from Akihiro Hashimoto ("Hash") of Chiba
8539 University.
8540 AIX changes to allow setproctitle to work from Rainer Schöpf
8541 of Zentrum für Datenverarbeitung der Universität
8542 Mainz.
8543 AIX changes for load average from Ed Ravin of NASA/Goddard.
8544 SCO Unix from Chip Rosenthal of Unicom (code was using the
8545 wrong statfs call).
8546 ANSI C fixes from Adam Glass (NetBSD project).
8547 Stardent Titan/ANSI C fixes from Kate Hedstrom of Rutgers
8548 University.
8549 DG-UX fixes from Bruce Nagel of Data General.
8550 IRIX64 updates from Mark Levinson of the University of
8551 Rochester Medical Center.
8552 Altos System V (``the first UNIX/XENIX merge the Altos
8553 did for their Series 1000 & Series 2000 line;
8554 their merged code was licensed back to AT&T and
8555 Microsoft and became System V release 3.2'') from
8556 Tim Rice <timr@crl.com>.
8557 OSF/1 running on Intel Paragon from Jeff A. Earickson
8558 <jeff@ssd.intel.com> of Intel Scalable Systems
8559 Division.
8560 Amdahl UTS System V 2.1.5 (SVr3-based) from Janet Jackson
8561 <janet@dialix.oz.au>.
8562 System V Release 4 (statvfs semantic fix) from Alain
8563 Durand of I.M.A.G.
8564 HP-UX 10.x multiprocessor load average changes from
8565 Scott Hutton and Jeff Sumler of Indiana University.
8566 Cray CSOS from Scott Bolte of Cray Computer Corporation.
8567 Unicos 8.0 from Douglas K. Rand of the University of North
8568 Dakota, Scientific Computing Center.
8569 Solaris 2.4 fixes from Sanjay Dani of Dani Communications.
8570 ConvexOS 11.0 from Christophe Wolfhugel.
8571 IRIX 4.0.5 from David Ashton-Reader of CADcentre.
8572 ISC UNIX from J. J. Bailey.
8573 HP-UX 9.xx on the 8xx series machines from Remy Giraud
8574 of Meteo France.
8575 HP-UX configuration from Tom Lane <tgl@sss.pgh.pa.us>.
8576 IRIX 5.2 and 5.3 from Kari E. Hurtta.
8577 FreeBSD 2.0 from Mike Hickey of Federal Data Corporation.
8578 Sony NEWS-OS 4.2.1R and 6.0.3 from Motonori Nakamura.
8579 Omron LUNA unios-b, mach from Motonori Nakamura.
8580 NEC EWS-UX/V 4.2 from Motonori Nakamura.
8581 NeXT 2.1 from Bryan Costales.
8582 AUX patch thanks to Mike Erwin of Apple Computer.
8583 HP-UX 10.0 from John Beck of Hewlett-Packard.
8584 Ultrix: allow -DBROKEN_RES_SEARCH=0 if you are using a
8585 non-DEC resolver. Suggested by Allan Johannesen.
8586 UnixWare 2.0 fixes from Petr Lampa of the Technical
8587 University of Brno (Czech Republic).
8588 KSR OS 1.2.2 support from Todd Miller of the University
8589 of Colorado.
8590 UX4800 support from Kazuhisa Shimizu of NEC.
8591 MAKEMAP: allow -d flag to allow insertion of duplicate aliases
8592 in type ``btree'' maps. The semantics of this are undefined
8593 for regular maps, but it can be useful for the user database.
8594 MAKEMAP: lock database file while rebuilding to avoid sendmail
8595 lookups while the rebuild is going on. There is a race
8596 condition between the open(... O_TRUNC ...) and the lock
8597 on the file, but it should be quite small.
8598 SMRSH: sendmail restricted shell added to the release. This can
8599 be used as an alternative to /bin/sh for the "prog" mailer,
8600 giving the local administrator more control over what
8601 programs can be run from sendmail.
8602 MAIL.LOCAL: add this local mailer to the tape. It is not really
8603 part of the release proper, and isn't fully supported; in
8604 particular, it does not run on System V based systems and
8605 never will.
8606 CONTRIB: a patch to rmail.c from Bill Gianopoulos of Raytheon
8607 to allow rmail to compile on systems that don't have
8608 function prototypes and systems that don't have snprintf.
8609 CONTRIB: add the "mailprio" scripts that will help you sort mailing
8610 lists by transaction delay times so that addresses that
8611 respond quickly get sent first. This is to prevent very
8612 sluggish servers from delaying other peoples' mail.
8613 Contributed by Tony Sanders of BSDI.
8614 CONTRIB: add the "bsdi.mc" file as contributed by Tony Sanders
8615 of BSDI. This has a lot of comments to help people out.
8616 CONFIG: Don't have .mc files include(../m4/cf.m4) -- instead,
8617 put this on the m4 command line. On GNU m4 (which
8618 supports the __file__ primitive) you can run m4 in an
8619 arbitrary directory -- use either:
8620 m4 ${CFDIR}/m4/cf.m4 config.mc > config.cf
8621 or
8622 m4 -I${CFDIR} m4/cf.m4 config.mc > config.cf
8623 On other versions of m4 that don't support __file__, you
8624 can use:
8625 m4 -D_CF_DIR_=${CFDIR}/ ${CFDIR}/m4/cf.m4 ...
8626 (Note the trailing slash on the _CF_DIR_ definition.)
8627 Old versions of m4 will default to _CF_DIR_=.. for back
8628 compatibility.
8629 CONFIG: fix mail from <> so it will properly convert to
8630 MAILER-DAEMON on local addresses.
8631 CONFIG: fix code that was supposed to catch colons in host
8632 names. Problem noted by John Gardiner Myers of CMU.
8633 CONFIG: allow use of SMTP_MAILER_MAX in nullclient configuration.
8634 From Paul Riddle of the University of Maryland, Baltimore
8635 County.
8636 CONFIG: Catch and reject "." as a host address.
8637 CONFIG: Generalize domaintable to look up all domains, not
8638 just unqualified ones.
8639 CONFIG: Delete OLD_SENDMAIL support -- as near as I can tell, it
8640 was never used and didn't work anyway.
8641 CONFIG: Set flags A, w, 5, :, /, |, and @ on the "local" mailer
8642 and d on all mailers in the UUCP class.
8643 CONFIG: Allow "user+detail" to be aliased specially: it will first
8644 look for an alias for "user+detail", then for "user+*", and
8645 finally for "user". This is intended for forwarding mail
8646 for system aliases such as root and postmaster to a
8647 centralized hub.
8648 CONFIG: add confEIGHT_BIT_HANDLING to set option 8 (see above).
8649 CONFIG: add smtp8 mailer; this has the F=8 (just-send-8) flag set.
8650 The F=8 flag is also set on the "relay" mailer, since
8651 this is expected to be another sendmail.
8652 CONFIG: avoid qualifying all UUCP addresses sent via SMTP with
8653 the name of the UUCP_RELAY -- in some cases, this is the
8654 wrong value (e.g., when we have local UUCP connections),
8655 and this can create unreplyable addresses. From Chip
8656 Rosenthal of Unicom.
8657 CONFIG: add confRECEIVED_HEADER to change the format of the
8658 Received: header inserted into all messages. Suggested by
8659 Gary Mills of the University of Manitoba.
8660 CONFIG: Make "notsticky" the default; use FEATURE(stickyhost)
8661 to get the old behavior. I did this upon observing
8662 that almost everyone needed this feature, and that the
8663 concept I was trying to make happen didn't work with
8664 some user agents anyway. FEATURE(notsticky) still works,
8665 but it is a no-op.
8666 CONFIG: Add LUSER_RELAY -- the host to which unrecognized user
8667 names are sent, rather than immediately diagnosing them
8668 as User Unknown.
8669 CONFIG: Add SMTP_MAILER_ARGS, ESMTP_MAILER_ARGS, SMTP8_MAILER_ARGS,
8670 and RELAY_MAILER_ARGS to set the arguments for the
8671 indicated mailers. All default to "IPC $h". Patch from
8672 Larry Parmelee of Cornell University.
8673 CONFIG: pop mailer needs F=n flag to avoid "annoying side effects
8674 on the client side" and F=P to get an appropriate
8675 return-path. From Kimmo Suominen.
8676 CONFIG: add FEATURE(local_procmail) to use the procmail program
8677 as the local mailer. For addresses of the form "user+detail"
8678 the "detail" part is passed to procmail via the -a flag.
8679 Contributed by Kimmo Suominen.
8680 CONFIG: add MAILER(procmail) to add an interface to procmail for
8681 use from mailertables. This lets you execute arbitrary
8682 procmail scripts. Contributed by Kimmo Suominen.
8683 CONFIG: add T= fields (MTS type) to local, smtp, and uucp mailers.
8684 CONFIG: add OSTYPE(ptx2) for DYNIX/ptx 2.x from Sequent. From
8685 Paul Southworth of CICNet Systems Support.
8686 CONFIG: use -a$g as default to UUCP mailers, instead of -a$f.
8687 This causes the null return path to be rewritten as
8688 MAILER-DAEMON; otherwise UUCP gets horribly confused.
8689 From Michael Hohmuth of Technische Universitat Dresden.
8690 CONFIG: Add FEATURE(bestmx_is_local) to cause any hosts that
8691 list us as the best possible MX record to be treated as
8692 though they were local (essentially, assume that they
8693 are included in $=w). This can cause additional DNS
8694 traffic, but is easier to administer if this fits your
8695 local model. It does not work reliably if there are
8696 multiple hosts that share the best MX preference.
8697 Code contributed by John Oleynick of Rutgers.
8698 CONFIG: Add FEATURE(smrsh) to use smrsh (the SendMail Restricted
8699 SHell) instead of /bin/sh as the program used for delivery
8700 to programs. If an argument is included, it is used as
8701 the path to smrsh; otherwise, /usr/local/etc/smrsh is
8702 assumed.
8703 CONFIG: Add LOCAL_MAILER_MAX and PROCMAILER_MAILER_MAX to limit the
8704 size of messages to the local and procmail mailers
8705 respectively. Contributed by Brad Knowles of the Defense
8706 Information Systems Agency.
8707 CONFIG: Handle leading ``phrase:'' and trailing ``;'' as comments
8708 (just like text outside of angle brackets) in order to
8709 properly deal with ``group: addr1, ... addrN;'' syntax.
8710 CONFIG: Require OSTYPE macro (the defaults really don't apply to
8711 any real systems any more) and tweak the DOMAIN macro
8712 so that it is less likely that users will accidentally use
8713 the Berkeley defaults. Also, create some generic files
8714 that really can be used in the real world.
8715 CONFIG: Add new configuration macros to set character sets for
8716 messages _arriving from_ various mailers: LOCAL_MAILER_CHARSET,
8717 SMTP_MAILER_CHARSET, and UUCP_MAILER_CHARSET.
8718 CONFIG: Change UUCP_MAX_SIZE to UUCP_MAILER_MAX for consistency.
8719 The old name will still be accepted for a while at least.
8720 CONFIG: Implement DECNET_RELAY as spec for host to which DECNET
8721 mail (.DECNET pseudo-domain or node::user) will be sent.
8722 As with all relays, it can be ``mailer:hostname''. Suggested
8723 by Scott Hutton.
8724 CONFIG: Add MAILER(mail11) to get DECnet support. Code contributed
8725 by Barb Dijker of Labyrinth Computer Services.
8726 CONFIG: change confCHECK_ALIASES to default to False -- it has poor
8727 performance for large alias files, and this confused many
8728 people.
8729 CONFIG: Add confCF_VERSION to append local information to the
8730 configuration version number displayed during SMTP startup.
8731 CONFIG: fix some.newsgroup.usenet@local.host syntax (previously it
8732 would only work when locally addressed. Fix from
8733 Edvard Tuinder of Cistron Internet Services.
8734 CONFIG: use ${opMode} to avoid error on .REDIRECT addresses if option
8735 "n" (CheckAliases) is set when rebuilding alias database.
8736 Based on code contributed by Claude Marinier.
8737 CONFIG: Allow mailertable to have values of the form
8738 ``error:code message''. The ``code'' is a status code
8739 derived from the sysexits codes -- e.g., NOHOST or UNAVAILABLE.
8740 Contributed by David James <dwj@agw.bt.co.uk>.
8741 CONFIG: add MASQUERADE_DOMAIN(domain list) to extend the list of
8742 sender domains that will be replaced with the masquerade name.
8743 These domains will not be treated as local, but if mail passes
8744 through with sender addresses in those domains they will be
8745 replaced by the masquerade name. These can also be specified
8746 in a file using MASQUERADE_DOMAIN_FILE(filename).
8747 CONFIG: add FEATURE(masquerade_envelope) to masquerade the envelope
8748 as well as the header. Substantial improvements to this
8749 code were contributed by Per Hedeland.
8750 CONFIG: add MAILER(phquery) to define a new "ph" mailer; this can be
8751 accessed from a mailertable to do CCSO ph lookups. Contributed
8752 by Kimmo Suominen.
8753 CONFIG: add MAILER(cyrus) to define a new Cyrus mailer; this can be
8754 used to define cyrus and cyrusbb mailers (for IMAP support).
8755 Contributed by John Gardiner Myers of Carnegie Mellon.
8756 CONFIG: add confUUCP_MAILER to select default mailer to use for
8757 UUCP addressing. Suggested by Tom Moore of AT&T GIS.
8758 NEW FILES:
8759 cf/cf/cs-hpux10.mc
8760 cf/cf/cs-solaris2.mc
8761 cf/cf/cyrusproto.mc
8762 cf/cf/generic-bsd4.4.mc
8763 cf/cf/generic-hpux10.mc
8764 cf/cf/generic-hpux9.mc
8765 cf/cf/generic-osf1.mc
8766 cf/cf/generic-solaris2.mc
8767 cf/cf/generic-sunos4.1.mc
8768 cf/cf/generic-ultrix4.mc
8769 cf/cf/huginn.cs.mc
8770 cf/domain/berkeley-only.m4
8771 cf/domain/generic.m4
8772 cf/feature/bestmx_is_local.m4
8773 cf/feature/local_procmail.m4
8774 cf/feature/masquerade_envelope.m4
8775 cf/feature/smrsh.m4
8776 cf/feature/stickyhost.m4
8777 cf/feature/use_ct_file.m4
8778 cf/m4/cfhead.m4
8779 cf/mailer/cyrus.m4
8780 cf/mailer/mail11.m4
8781 cf/mailer/phquery.m4
8782 cf/mailer/procmail.m4
8783 cf/ostype/amdahl-uts.m4
8784 cf/ostype/bsdi2.0.m4
8785 cf/ostype/hpux10.m4
8786 cf/ostype/irix5.m4
8787 cf/ostype/isc4.1.m4
8788 cf/ostype/ptx2.m4
8789 cf/ostype/unknown.m4
8790 contrib/bsdi.mc
8791 contrib/mailprio
8792 contrib/rmail.oldsys.patch
8793 mail.local/mail.local.0
8794 makemap/makemap.0
8795 smrsh/README
8796 smrsh/smrsh.0
8797 smrsh/smrsh.8
8798 smrsh/smrsh.c
8799 src/Makefiles/Makefile.CSOS
8800 src/Makefiles/Makefile.EWS-UX_V
8801 src/Makefiles/Makefile.HP-UX.10
8802 src/Makefiles/Makefile.IRIX.5.x
8803 src/Makefiles/Makefile.IRIX64
8804 src/Makefiles/Makefile.ISC
8805 src/Makefiles/Makefile.KSR
8806 src/Makefiles/Makefile.NEWS-OS.4.x
8807 src/Makefiles/Makefile.NEWS-OS.6.x
8808 src/Makefiles/Makefile.NEXTSTEP
8809 src/Makefiles/Makefile.NonStop-UX
8810 src/Makefiles/Makefile.Paragon
8811 src/Makefiles/Makefile.SCO.3.2v4.2
8812 src/Makefiles/Makefile.SunOS.5.3
8813 src/Makefiles/Makefile.SunOS.5.4
8814 src/Makefiles/Makefile.SunOS.5.5
8815 src/Makefiles/Makefile.UNIX_SV.4.x.i386
8816 src/Makefiles/Makefile.uts.systemV
8817 src/Makefiles/Makefile.UX4800
8818 src/aliases.0
8819 src/mailq.0
8820 src/mime.c
8821 src/newaliases.0
8822 src/sendmail.0
8823 test/t_seteuid.c
8824 RENAMED FILES:
8825 cf/cf/alpha.mc => cf/cf/s2k-osf1.mc
8826 cf/cf/chez.mc => cf/cf/chez.cs.mc
8827 cf/cf/hpux-cs-exposed.mc => cf/cf/cs-hpux9.mc
8828 cf/cf/osf1-cs-exposed.mc => cf/cf/cs-osf1.mc
8829 cf/cf/s2k.mc => cf/cf/s2k-ultrix4.mc
8830 cf/cf/sunos4.1-cs-exposed.mc => cf/cf/cs-sunos4.1.mc
8831 cf/cf/ultrix4.1-cs-exposed.mc => cf/cf/cs-ultrix4.mc
8832 cf/cf/vangogh.mc => cf/cf/vangogh.cs.mc
8833 cf/domain/Berkeley.m4 => cf/domain/Berkeley.EDU.m4
8834 cf/domain/cs-exposed.m4 => cf/domain/CS.Berkeley.EDU.m4
8835 cf/domain/eecs-hidden.m4 => cf/domain/EECS.Berkeley.EDU.m4
8836 cf/domain/s2k.m4 => cf/domain/S2K.Berkeley.EDU.m4
8837 cf/ostype/hpux.m4 => cf/ostype/hpux9.m4
8838 cf/ostype/irix.m4 => cf/ostype/irix4.m4
8839 cf/ostype/ultrix4.1.m4 => cf/ostype/ultrix4.m4
8840 src/Makefile.* => src/Makefiles/Makefile.*
8841 src/Makefile.AUX => src/Makefiles/Makefile.A-UX
8842 src/Makefile.BSDI => src/Makefiles/Makefile.BSD-OS
8843 src/Makefile.DGUX => src/Makefiles/Makefile.dgux
8844 src/Makefile.RISCos => src/Makefiles/Makefile.UMIPS
8845 src/Makefile.SunOS.4.0.3 => src/Makefiles/Makefile.SunOS.4.0
8846 OBSOLETED FILES:
8847 cf/cf/cogsci.mc
8848 cf/cf/cs-exposed.mc
8849 cf/cf/cs-hidden.mc
8850 cf/cf/hpux-cs-hidden.mc
8851 cf/cf/knecht.mc
8852 cf/cf/osf1-cs-hidden.mc
8853 cf/cf/sunos3.5-cs-exposed.mc
8854 cf/cf/sunos3.5-cs-hidden.mc
8855 cf/cf/sunos4.1-cs-hidden.mc
8856 cf/cf/ultrix4.1-cs-hidden.mc
8857 cf/domain/cs-hidden.m4
8858 contrib/rcpt-streaming
8859 src/Makefiles/Makefile.SunOS.5.x
8861 8.6.13/8.6.12 1996/01/25
8862 SECURITY: In some cases it was still possible for an attacker to
8863 insert newlines into a queue file, thus allowing access to
8864 any user (except root).
8865 CONFIG: no changes -- it is not a bug that the configuration
8866 version number is unchanged.
8868 8.6.12/8.6.12 1995/03/28
8869 Fix to IDENT code (it was getting the size of the reply buffer
8870 too small, so nothing was ever accepted). Fix from several
8871 people, including Allan Johannesen, Shane Castle of the
8872 Boulder County Information Services, and Jeff Smith of
8873 Warwick University (all arrived within a few hours of
8874 each other!).
8875 Fix a problem that could cause large jobs to run out of
8876 file descriptors on systems that use vfork() rather
8877 than fork().
8879 8.6.11/8.6.11 1995/03/08
8880 The ``possible attack'' message would be logged more often
8881 than necessary if you are using Pine as a user agent.
8882 The wrong host would be reported in the ``possible attack''
8883 message when attempted from IDENT.
8884 In some cases the syslog buffer could be overflowed when
8885 reporting the ``possible attack'' message. This can
8886 cause denial of service attacks. Truncate the message
8887 to 80 characters to prevent this problem.
8888 When reading the IDENT response a loop is needed around the
8889 read from the network to ensure that you don't get
8890 partial lines.
8891 Password entries without any shell listed (that is, a null
8892 shell) wouldn't match as "ok". Problem noted by
8893 Rob McMahon.
8894 When running BIND 4.9.x a problem could occur because the
8895 _res.options field is initialized differently than it
8896 was historically -- this requires that sendmail call
8897 res_init before it tweaks any bits.
8898 Fix an incompatibility in openxscript() between the file open mode
8899 and the stdio mode passed to fdopen. This caused UnixWare
8900 2.0 to have conniptions. Fix from Martin Sohnius of
8901 Novell Labs Europe.
8902 Fix problem with static linking of local getopt routine when
8903 using GNU's ld command. Fix from John Kennedy of
8904 Cal State Chico.
8905 It was possible to turn off privacy flags. Problem noted by
8906 *Hobbit*.
8907 Be more paranoid about writing files. Suggestions by *Hobbit*
8908 and Liudvikas Bukys.
8909 MAKEMAP: fixes for 64 bit machines (DEC Alphas in particular)
8910 from Spider Boardman.
8911 CONFIG: No changes (version number only, to keep it in sync
8912 with the binaries).
8914 8.6.10/8.6.10 1995/02/10
8915 SECURITY: Diagnose bogus values to some command line flags that
8916 could allow trash to get into headers and qf files.
8917 Validate the name of the user returned by the IDENT protocol.
8918 Some systems that really dislike IDENT send intentionally
8919 bogus information. Problem pointed out by Michael Bushnell
8920 of the Free Software Foundation. Has some security
8921 implications.
8922 Fix a problem causing error messages about DNS problems when
8923 the host name contained a percent sign to act oddly
8924 because it was passed as a printf-style format string.
8925 In some cases this could cause core dumps.
8926 Avoid possible buffer overrun in returntosender() if error
8927 message is quite long. From Fletcher Mattox of the
8928 University of Texas.
8929 Fix a problem that would silently drop "too many hops" error
8930 messages if and only if you were sending to an alias.
8931 From Jon Giltner of the University of Colorado and
8932 Dan Harton of Oak Ridge National Laboratory.
8933 Fix a bug that caused core dumps on some systems if -d11.2 was
8934 set and e->e_message was null. Fix from Bruce Nagel of
8935 Data General.
8936 Fix problem that can still cause df files to be left around
8937 after "hop count exceeded" messages. Fix from Andrew
8938 Chang and Shau-Ping Lo of SunSoft.
8939 Fix a problem that can cause buffer overflows on very long
8940 user names (as might occur if you piped to a program
8941 with a lot of arguments).
8942 Avoid returning an error and re-queueing if the host signature
8943 is null; this can occur on addresses like ``user@.''.
8944 Problem noted by Wesley Craig and the University of
8945 Michigan.
8946 Avoid possible calls to malloc(0) if MCI caching is turned
8947 off. Bug fix from Pierre David of the Laboratoire
8948 Parallelisme, Reseaux, Systemes et Modelisation (PRiSM),
8949 Universite de Versailles - St Quentin, and Jacky
8950 Thibault.
8951 Make a local copy of the line being sent via senttolist() -- in
8952 some cases, buffers could get trashed by map lookups
8953 causing it to do unexpected things. This also simplifies
8954 some of the map code.
8955 CONFIG: No changes (version number only, to keep it in sync
8956 with the binaries).
8958 8.6.9/8.6.9 1994/04/19
8959 Do all mail delivery completely disconnected from any terminal.
8960 This provides consistency with daemon delivery and
8961 may have some security implications.
8962 Make sure that malloc doesn't get called with zero size,
8963 since that fails on some systems. Reported by Ed
8964 Hill of the University of Iowa.
8965 Fix multi-line values for $e (SMTP greeting message). Reported
8966 by Mike O'Connor of Ford Motor Company.
8967 Avoid syserr if no NIS domain name is defined, but the map it
8968 is trying to open is optional. From Win Bent of USC.
8969 Changes for picky compilers from Ed Gould of Digital Equipment.
8970 Hesiod support for UDB from Todd Miller of the University of
8971 Colorado. Use "hesiod" as the service name in the U
8972 option.
8973 Fix a problem that failed to set the "authentic" host name (that
8974 is, the one derived from the socket info) if you called
8975 sendmail -bs from inetd. Based on code contributed by
8976 Todd Miller (this problem was also reported by Guy Helmer
8977 of Dakota State University). This also fixes a related
8978 problem reported by Liudvikas Bukys of the University of
8979 Rochester.
8980 Parameterize "nroff -h" in all the Makefiles so people with
8981 variant versions can use them easily. Suggested by
8982 Peter Collinson of Hillside Systems.
8983 SMTP "MAIL" commands with multiple ESMTP parameters required two
8984 spaces between parameters instead of one. Reported by
8985 Valdis Kletnieks of Virginia Tech.
8986 Reduce the number of system calls during message collection by
8987 using global timeouts around the collect() loop. This
8988 code was contributed by Eric Wassenaar.
8989 If the initial hostname name gathering results in a name
8990 without a dot (usually caused by NIS misconfiguration)
8991 and BIND is compiled in, directly access DNS to get
8992 the canonical name. This should make life easier for
8993 Solaris systems. If it still can't be resolved, and
8994 if the name server is listed as "required", try again
8995 in 30 seconds. If that also fails, exit immediately to
8996 avoid bogus "config error: mail loops back to myself"
8997 messages.
8998 Improve the "MAIL DELETED BECAUSE OF LACK OF DISK SPACE" error
8999 message to explain how much space was available and
9000 sound a bit less threatening. Suggested by Stan Janet
9001 of the National Institute of Standards and Technology.
9002 If mail is delivered to an alias that has an owner, deliver any
9003 requested return-receipt immediately, and strip the
9004 Return-Receipt-To: header from the subsequent message.
9005 This prevents a certain class of denial of service
9006 attack, arguably gives more reasonable semantics, and
9007 moves things more towards what will probably become a
9008 network standard. Suggested by Christopher Davis of
9009 Kapor Enterprises.
9010 Add a "noreceipts" privacy flag to turn off all return receipts
9011 without recompiling.
9012 Avoid printing ESMTP parameters as part of the error message
9013 if there are errors during parsing. This change is
9014 purely cosmetic.
9015 Avoid sending out error messages during the collect phase of
9016 SMTP; there is an MVS mailer from UCLA that gets
9017 confused by this. Of course, I think it's their bug....
9018 Check for the $j macro getting undefined, losing a dot, or getting
9019 lost from $=w in the daemon before accepting a connection;
9020 if it is, it dumps state, prints a LOG_ALERT message,
9021 and drops core for debugging. This is an attempt to
9022 track down a bug that I thought was long since gone.
9023 If you see this, please forward the log fragment to
9024 sendmail@sendmail.ORG.
9025 Change OLD_NEWDB from a #ifdef to a #if so it can be turned off
9026 with -DOLD_NEWDB=0 on the command line. From Christophe
9027 Wolfhugel.
9028 Instead of trying to truncate the listen queue for the server
9029 SMTP port when the load average is too high, just close
9030 the port completely and reopen it later as needed.
9031 This ensures that the other end gets a quick "connection
9032 refused" response, and that the connection can be
9033 recovered later. In particular, some socket emulations
9034 seem to get confused if you tweak the listen queue
9035 size around and can never start listening to connections
9036 again. The down side is that someone could start up
9037 another daemon process in the interim, so you could
9038 have multiple daemons all not listening to connections;
9039 this could in turn cause the sendmail.pid file to be
9040 incorrect. A better approach might be to accept the
9041 connection and give a 421 code, but that could break
9042 other mailers in mysterious ways and have paging behavior
9043 implications.
9044 Fix a glitch in TCP-level debugging that caused flag 16.101 to
9045 set debugging on the wrong socket. From Eric Wassenaar.
9046 When creating a df* temporary file, be sure you truncate any
9047 existing data in the file -- otherwise system crashes
9048 and the like could result in extra data being sent.
9049 DOC: Replace the CHANGES-R5-R8 readme file with a paper in the
9050 doc directory. This includes some additional
9051 information.
9052 CONFIG: change UUCP rules to never add $U! or $k! on the front
9053 of recipient envelope addresses. This should have been
9054 handled by the $&h trick, but broke if people were
9055 mixing domainized and UUCP addresses. They should
9056 probably have converted all the way over to uucp-uudom
9057 instead of uucp-{new,old}, but the failure mode was to
9058 loop the mail, which was bad news.
9059 Portability fixes:
9060 Newer BSDI systems (several people).
9061 Older BSDI systems from Christophe Wolfhugel.
9062 Intergraph CLIX, from Paul Southworth of CICNet.
9063 UnixWare, from Evan Champion.
9064 NetBSD from Adam Glass.
9065 Solaris from Quentin Campbell of the University of
9066 Newcastle upon Tyne.
9067 IRIX from Dean Cookson and Bill Driscoll of Mitre
9068 Corporation.
9069 NCR 3000 from Kevin Darcy of Chrysler Financial Corporation.
9070 SunOS (it has setsid() and setvbuf() calls) from
9071 Jonathan Kamens of OpenVision Technologies.
9072 HP-UX from Tor Lillqvist.
9073 New Files:
9074 src/Makefile.CLIX
9075 src/Makefile.NCR3000
9076 doc/changes/Makefile
9077 doc/changes/changes.me
9078 doc/changes/changes.ps
9080 8.6.8/8.6.6 1994/03/21
9081 SECURITY: it was possible to read any file as root using the
9082 E (error message) option. Reported by Richard Jones;
9083 fixed by Michael Corrigan and Christophe Wolfhugel.
9085 8.6.7/8.6.6 1994/03/14
9086 SECURITY: it was possible to get root access by using weird
9087 values to the -d flag. Thanks to Alain Durand of
9088 INRIA for forwarding me the notice from the bugtraq
9089 list.
9091 8.6.6/8.6.6 1994/03/13
9092 SECURITY: the ability to give files away on System V-based
9093 systems proved dangerous -- don't run as the owner
9094 of a :include: file on a system that allows giveaways.
9095 Unfortunately, this also applies to determining a
9096 valid shell.
9097 IMPORTANT: Previous versions weren't expiring old connections
9098 in the connection cache for a long time under some
9099 circumstances. This could result in resource exhaustion,
9100 both at your end and at the other end. This checks the
9101 connections for timeouts much more frequently. From
9102 Doug Anderson of NCSC.
9103 Fix a glitch that snuck in that caused programs to be run as
9104 the sender instead of the recipient if the mail was
9105 from a local user to another local user. From
9106 Motonori Nakamura of Kyoto University.
9107 Fix "wildcard" on /etc/shells matching -- instead of looking
9108 for "*", look for "/SENDMAIL/ANY/SHELL/". From
9109 Bryan Costales of ICSI.
9110 Change the method used to declare the "statfs" availability;
9111 instead of HASSTATFS and/or HASUSTAT with a ton of
9112 tweaking in conf.c, there is a single #define called
9113 SFS_TYPE which takes on one of six values (SFS_NONE
9114 for no statfs availability, SFS_USTAT for the ustat(2)
9115 syscall, SFS_4ARGS for a four argument statfs(2) call,
9116 and SFS_VFS, SFS_MOUNT, or SFS_STATFS for a two argument
9117 statfs(2) call with the declarations in <sys/vfs.h>,
9118 <sys/mount.h>, or <sys/statfs.h> respectively).
9119 Fix glitch in NetInfo support that could return garbage if
9120 there was no "/locations/sendmail" property. From
9121 David Meyer of the University of Virginia.
9122 Change HASFLOCK from defined/not-defined to a 0/1 definition
9123 to allow Linux to turn it off even though it is a
9124 BSD-like system.
9125 Allow setting of "ident" timeout to zero to turn off the ident
9126 protocol entirely.
9127 Make 7-bit stripping local to a connection (instead of to a
9128 mailer); this allows you to specify that SMTP is a
9129 7-bit channel, but revert to 8-bit should it advertise
9130 that it supports 8BITMIME. You still have to specify
9131 mailer flag 7 to get this stripping at all.
9132 Improve makesendmail script so it handles more cases automatically.
9133 Tighten up restrictions on taking ownership of :include: files
9134 to avoid problems on systems that allow you to give away
9135 files.
9136 Fix a problem that made it impossible to rebuild the alias
9137 file if it was on a read-only file system. From
9138 Harry Edmon of the University of Washington.
9139 Improve MX randomization function. From John Gardiner Myers
9140 of CMU.
9141 Fix a minor glitch causing a bogus message to be printed (used
9142 %s instead of %d in a printf string for the line number)
9143 when a bad queue file was read. From Harry Edmon.
9144 Allow $s to remain NULL on locally generated mail. I'm not
9145 sure this is necessary, but a lot of people have complained
9146 about it, and there is a legitimate question as to whether
9147 "localhost" is legal as an 822-style domain.
9148 Fix a problem with very short line lengths (mailer L= flag) in
9149 headers. This causes a leading space to be added onto
9150 continuation lines (including in the body!), and also
9151 tries to wrap headers containing addresses (From:, To:,
9152 etc) intelligently at the shorter line lengths. Problem
9153 Reported by Lars-Johan Liman of SUNET Operations Center.
9154 Log the real user name when logging syserrs, since these can have
9155 security implications. Suggested by several people.
9156 Fix address logging of cached connections -- it used to always
9157 log the numeric address as zero. This is a somewhat
9158 bogus implementation in that it does an extra system
9159 call, but it should be an inexpensive one. Fix from
9160 Motonori Nakamura.
9161 Tighten up handling of short syslog buffers even more -- there
9162 were cases where the outgoing relay= name was too long
9163 to share a line with delay= and mailer= logging.
9164 Limit the overhead on split envelopes to one open file descriptor
9165 per envelope -- previously the overhead was three
9166 descriptors. This was in response to a problem reported
9167 by P{r (Pell) Emanuelsson.
9168 Fixes to better handle the case of unexpected connection closes;
9169 this redirects the output to the transcript so the info
9170 is not lost. From Eric Wassenaar.
9171 Fix potential string overrun if you macro evaluate a string that
9172 has a naked $ at the end. Problem noted by James Matheson
9173 <jmrm@eng.cam.ac.uk>.
9174 Make default error number on $#error messages 553 (``Requested
9175 action not taken: mailbox name not allowed'') instead of
9176 501 (``Syntax error in parameters or arguments'') to
9177 avoid bogus "protocol error" messages.
9178 Strip off any existing trailing dot on names during $[ ... $]
9179 lookup. This prevents it from ending up with two dots
9180 on the end of dot terminated names. From Wesley Craig
9181 of the University of Michigan and Bryan Costales of ICSI.
9182 Clean up file class reading so that the debugging information is
9183 more informative. It hadn't been using setclass, so you
9184 didn't see the class items being added.
9185 Avoid core dump if you are running a version of sendmail where
9186 NIS is compiled in, and you specify an NIS map, but
9187 NIS is not running. Fix from John Oleynick of
9188 Rutgers.
9189 Diagnose bizarre case where res_search returns a failure value,
9190 but sets h_errno to a success value.
9191 Make sure that "too many hops" messages are considered important
9192 enough to send an error to the Postmaster (that is, the
9193 address specified in the P option). This fix should
9194 help problems that cause the df file to be left around
9195 sometimes -- unfortunately, I can't seem to reproduce
9196 the problem myself.
9197 Avoid core dump (null pointer reference) on EXPN command; this
9198 only occurred if your log level was set to 10 or higher
9199 and the target account was an alias or had a .forward file.
9200 Problem noted by Janne Himanka.
9201 Avoid "denial of service" attacks by someone who is flooding your
9202 SMTP port with bad commands by shutting the connection
9203 after 25 bad commands are issued. From Kyle Jones of
9204 UUNET.
9205 Fix core dump on error messages with very long "to" buffers;
9206 fmtmsg overflows the message buffer. Fixed by trimming
9207 the to address to 203 characters. Problem reported by
9208 John Oleynick.
9209 Fix configuration for HASFLOCK -- there were some spots where
9210 a #ifndef was incorrectly #ifdef. Pointed out by
9211 George Baltz of the University of Maryland.
9212 Fix a typo in savemail() that could cause the error message To:
9213 lists to be incorrect in some places. From Motonori
9214 Nakamura.
9215 Fix a glitch that can cause duplicate error messages on split
9216 envelopes where an address on one of the lists has a
9217 name server failure. Fix from Voradesh Yenbut of the
9218 University of Washington.
9219 Fix possible bogus pointer reference on ESMTP parameters that
9220 don't have an ``=value'' part.
9221 CNAME loops caused an error message to be generated, but also
9222 re-queued the message. Changed to just re-queue the
9223 message (it's really hard to just bounce it because
9224 of the weird way the name server works in the presence
9225 of CNAME loops). Problem noted by James M.R.Matheson
9226 of Cambridge University.
9227 Avoid giving ``warning: foo owned process doing -bs'' messages
9228 if they use ``MAIL FROM:<foo>'' where foo is their true
9229 user name. Suggested by Andreas Stolcke of ICSI.
9230 Change the NAMED_BIND compile flag to be a 0/1 flag so you can
9231 override it easily in the Makefile -- that is, you can
9232 turn it off using -DNAMED_BIND=0.
9233 If a gethostbyname(...) of an address with a trailing dot fails,
9234 try it without the trailing dot. This is because if
9235 you have a version of gethostbyname() that falls back
9236 to NIS or the /etc/hosts file it will fail to find
9237 perfectly reasonable names that just don't happen to
9238 be dot terminated in the hosts file. You don't want to
9239 strip the dot first though because we're trying to ensure
9240 that country names that match one of your subdomains get
9241 a chance.
9242 PRALIASES: fix bogus output on non-null-terminated strings.
9243 From Bill Gianopoulos of Raytheon.
9244 CONFIG: Avoid rewriting anything that matches $w to be $j.
9245 This was in code intended to only catch the self-literal
9246 address (that is, [1.2.3.4], where 1.2.3.4 is your
9247 IP address), but the code was broken. However, it will
9248 still do this if $M is defined; this is necessary to
9249 get client configurations to work (sigh). Note that this
9250 means that $M overrides :mailname entries in the user
9251 database! Problem noted by Paul Southworth.
9252 CONFIG: Fix definition of Solaris help file location. From
9253 Steve Cliffe <steve@gorgon.cs.uow.edu.au>.
9254 CONFIG: Fix bug that broke news.group.USENET mappings.
9255 CONFIG: Allow declaration of SMTP_MAILER_MAX, FAX_MAILER_MAX,
9256 and USENET_MAILER_MAX to tweak the maximum message
9257 size for various mailers.
9258 CONFIG: Change definition of USENET_MAILER_ARGS to include argv[0]
9259 instead of assuming that it is "inews" for consistency
9260 with other mailers. From Michael Corrigan of UC San Diego.
9261 CONFIG: When mail is forwarded to a LOCAL_RELAY or a MAIL_HUB,
9262 qualify the address in the SMTP envelope as user@{relay|hub}
9263 instead of user@$j. From Bill Wisner of The Well.
9264 CONFIG: Fix route-addr syntax in nullrelay configuration set.
9265 CONFIG: Don't turn off case mapping of user names in the local
9266 mailer for IRIX. This was different than most every other
9267 system.
9268 CONFIG: Avoid infinite loops on certainly list:; syntaxes in
9269 envelope. Noted by Thierry Besancon
9270 <besancon@excalibur.ens.fr>.
9271 CONFIG: Don't include -z by default on uux line -- most systems
9272 don't want it set by default. Pointed out by Philippe
9273 Michel of Thomson CSF.
9274 CONFIG: Fix some bugs with mailertables -- for example, if your
9275 host name was foo.bar.ray.com and you matched against
9276 ".ray.com", the old implementation bound %1 to "bar"
9277 instead of "foo.bar". Also, allow "." in the mailertable
9278 to match anything -- essentially, take over SMART_HOST.
9279 This also moves matching of explicit local host names
9280 before the mailertable so they don't have to be special
9281 cased in the mailertable data. Reported by Bill
9282 Gianopoulos of Raytheon; the fix for the %1 binding
9283 problem was contributed by Nicholas Comanos of the
9284 University of Sydney.
9285 CONFIG: Don't include "root" in class $=L (users to deliver
9286 locally, even if a hub or relay exists) by default.
9287 This is because of the known bug where definition of
9288 both a LOCAL_RELAY and a MAIL_HUB causes $=L to ignore
9289 both and deliver into the local mailbox.
9290 CONFIG: Move up bitdomain and uudomain handling so that they
9291 are done before .UUCP class matching; uudomain was
9292 reported as ineffective before. This also frees up
9293 diversion 8 for future use. Problem reported by Kimmo
9294 Suominen.
9295 CONFIG: Don't try to convert dotted IP address (e.g., [1.2.3.4])
9296 into host names. As pointed out by Jonathan Kamens,
9297 these are often used because either the forward or reverse
9298 mapping is broken; this translation makes it broken again.
9299 DOC: Clarify $@ and $: in the Install & Op Guide. From Kimmo
9300 Suominen.
9301 Portability fixes:
9302 Unicos from David L. Kensiski of Sterling Software.
9303 DomainOS from Don Lewis of Silicon Systems.
9304 GNU m4 1.0.3 from Karst Koymans of Utrecht University.
9305 Convex from Kimmo Suominen <kim@tac.nyc.ny.us>.
9306 NetBSD from Adam Glass <glass@sun-lamp.cs.berkeley.edu>.
9307 BSD/386 from Tony Sanders of BSDI.
9308 Apollo from Eric Wassenaar.
9309 DGUX from Doug Anderson.
9310 Sequent DYNIX/ptx 2.0 from Tim Wright of Sequent.
9311 NEW FILES:
9312 src/Makefile.DomainOS
9313 src/Makefile.PTX
9314 src/Makefile.SunOS.5.1
9315 src/Makefile.SunOS.5.2
9316 src/Makefile.SunOS.5.x
9317 src/mailq.1
9318 cf/ostype/domainos.m4
9319 doc/op/Makefile
9320 doc/intro/Makefile
9321 doc/usenix/Makefile
9323 8.6.5/8.6.5 1994/01/13
9324 Security fix: /.forward could be owned by anyone (the test
9325 to allow root to own any file was backwards). From
9326 Bob Campbell at U.C. Berkeley.
9327 Security fix: group ids were not completely set when programs
9328 were invoked. This caused programs to have group
9329 permissions they should not have had (usually group
9330 daemon instead of their own group). In particular,
9331 Perl scripts would refuse to run.
9332 Security: check to make sure files that are written are not
9333 symbolic links (at least under some circumstances).
9334 Although this does not respond to a specific known
9335 attack, it's just a good idea. Suggested by
9336 Christian Wettergren.
9337 Security fix: if a user had an NFS mounted home directory on
9338 a system with a restricted shell listed in their
9339 /etc/passwd entry, they could still execute any
9340 program by putting that in their .forward file.
9341 This fix prevents that by insisting that their shell
9342 appear in /etc/shells before allowing a .forward to
9343 execute a program or write a file. You can disable
9344 this by putting "*" in /etc/shells. It also won't
9345 permit world-writable :include: files to reference
9346 programs or files (there's no way to disable this).
9347 These behaviors are only one level deep -- for
9348 example, it is legal for a world-writable :include:
9349 file to reference an alias that writes a file, on
9350 the assumption that the alias file is well controlled.
9351 Security fix: root was not treated suspiciously enough when
9352 looking into subdirectories. This would potentially
9353 allow a cracker to examine files that were publicly
9354 readable but in a non-publicly searchable directory.
9355 Fix a problem that causes an error on QUIT on a cached
9356 connection to create problems on the current job.
9357 These are typically unrelated, so errors occur in
9358 the wrong place.
9359 Reset CurrentLA in sendall() -- this makes sendmail queue
9360 runs more responsive to load average, and fixes a
9361 problem that ignored the load average in locally
9362 generated mail. From Eric Wassenaar.
9363 Fix possible core dump on aliases with null LHS. From
9364 John Orthoefer of BB&N.
9365 Revert to using flock() whenever possible -- there are just
9366 too many bugs in fcntl() locking, particularly over
9367 NFS, that cause sendmail to fail in perverse ways.
9368 Fix a bug that causes the connection cache to get confused
9369 when sending error messages. This resulted in
9370 "unexpected close" messages. It should fix itself
9371 on the following queue run. Problem noted by
9372 Liudvikas Bukys of the University of Rochester.
9373 Include $k in $=k as documented in the Install & Op Guide.
9374 This seems odd, but it was documented.... From
9375 Michael Corrigan of UCSD.
9376 Fix problem that caused :include:s from alias files to be
9377 forced to be owned by root instead of daemon
9378 (actually DefUid). From Tim Irvin.
9379 Diagnose unrecognized I option values -- from Mortin Forssen
9380 of the Chalmers University of Technology.
9381 Make "error" mailer work consistently when there is no error
9382 code associated with it -- previously it returned OK
9383 even though there was a real problem. Now it assumes
9384 EX_UNAVAILABLE.
9385 Fix bug that caused the last header line of messages that had
9386 no body and which were terminated with EOF instead of
9387 "." to be discarded. Problem noted by Liudvikas Bukys.
9388 Fix core dump on SMTP mail to programs that failed -- it tried
9389 to go to a "next MX host" when none existed, causing
9390 a core dump. From der Mouse at McGill University.
9391 Change IDENTPROTO from a defined/not defined to a 0/1 switch;
9392 this makes it easier to turn it off (using
9393 -DIDENTPROTO=0 in the Makefile). From der Mouse.
9394 Fix YP_MASTER_NAME store to use the unupdated result of
9395 gethostname() (instead of myhostname(), which tries
9396 to fully qualify the name) to be consistent with
9397 SunOS. If your hostname is unqualified, this fixes
9398 transfers to slave servers. Bug noted by Keith
9399 McMillan of Ameritech Services, Inc.
9400 Fix Ultrix problem: gethostbyname() can return a very large
9401 (> 500) h_length field, which causes the sockaddr
9402 to be trashed. Use the size of the sockaddr instead.
9403 Fix from Bob Manson of Ohio State.
9404 Don't assume "-a." on host lookups if NAMED_BIND is not
9405 defined -- this confuses gethostbyname on hosts
9406 file lookups, which doesn't understand the trailing
9407 dot convention.
9408 Log SMTP server subprocesses that die with a signal instead
9409 of from a clean exit.
9410 If you don't have option "I" set, don't assume that a DNS
9411 "host unknown" message is authoritative -- it
9412 might still be found in /etc/hosts.
9413 Fix a problem that would cause Deferred: messages to be sent
9414 as the subject of an error message, even though the
9415 actual cause of a message was more severe than that.
9416 Problem noted by Chris Seabrook of OSSI.
9417 Fix race condition in DBM alias file locking. From Kyle
9418 Jones of UUNET.
9419 Limit delivery syslog line length to avoid bugs in some
9420 versions of syslog(3). This adds a new compile time
9421 variable SYSLOG_BUFSIZE. From Jay Plett of Princeton
9422 University, which is in turn derived from IDA.
9423 Fix quotes inside of comments in addresses -- previously
9424 it insisted that they be balanced, but the 822 spec
9425 says that they should be ignored.
9426 Dump open file state to syslog upon receiving SIGUSR1 (for
9427 debugging). This also evaluates ruleset 89, if set
9428 (with the null input), and logs the result. This
9429 should be used sparingly, since the rewrite process
9430 is not reentrant.
9431 Change -qI, -qR, and -qS flags to be case-insensitive as
9432 documented in the Bat Book.
9433 If the mailer returned EX_IOERR or EX_OSERR, sendmail did not
9434 return an error message and did not requeue the message.
9435 Fix based on code from Roland Dirlewanger of
9436 Reseau Regional Aquarel, Bordeaux, France.
9437 Fix a problem that caused a seg fault if you got a 421 error
9438 code during some parts of connection initialization.
9439 I've only seen this when talking to buggy mailers on
9440 the other end, but it shouldn't give a seg fault in
9441 any case. From Amir Plivatsky.
9442 Fix core dump caused by a ruleset call that returns null.
9443 Fix from Bryan Costales of ICSI.
9444 Full-Name: field was being ignored. Fix from Motonori Nakamura
9445 of Kyoto University.
9446 Fix a possible problem with very long input lines in setproctitle.
9447 From P{r Emanuelsson.
9448 Avoid putting "This is a warning message" out on return receipts.
9449 Suggested by Douglas Anderson.
9450 Detect loops caused by recursive ruleset calls. Suggested by
9451 Bryan Costales.
9452 Initialize non-alias maps during alias rebuilds -- they may be
9453 needed for parsing. Problem noted by Douglas Anderson.
9454 Log sender address even if no message was collected in SMTP
9455 (e.g., if all RCPTs failed). Suggested by Motonori
9456 Nakamura.
9457 Don't reflect the owner-list contents into the envelope sender
9458 address if the value contains ", :, /, or | (to avoid
9459 illegal addresses appearing there).
9460 Efficiency hack for toktype macro -- from Craig Partridge of
9461 BB&N.
9462 Clean up DNS error printing so that a host name is always
9463 included.
9464 Remember to set $i during queue runs. Reported by Stephen
9465 Campbell of Dartmouth University.
9466 If the environment variable HOSTALIASES is set, use it during
9467 canonification as the name of a file with per-user host
9468 translations so that headers are properly mapped. Reported
9469 by Anne Bennett of Concordia University.
9470 Avoid printing misleading error message if SMTP mailer (not
9471 using [IPC]) should die on a core dump.
9472 Avoid incorrect diagnosis of "file 1 closed" when it is caused
9473 by the other end closing the connection. From
9474 Dave Morrison of Oracle.
9475 Improve several of the error messages printed by "mailq"
9476 to include a host name or other useful information.
9477 Add NetInfo preliminary support for NeXT systems. From Vince
9478 DeMarco.
9479 Fix a glitch that sometimes caused :include:s that pointed to
9480 NFS filesystems that were down to give an "aliasing/
9481 forwarding loop broken" message instead of queueing
9482 the message for retry. Noted by William C Fenner of
9483 the NRL Connection Machine Facility.
9484 Fix a problem that could cause a core dump if the input sequence
9485 had (or somehow acquired) a \231 character.
9486 Make sure that route-addrs always have <angle brackets> around
9487 them in non-SMTP envelopes (SMTP envelopes already do
9488 this properly).
9489 Avoid weird headers on unbalanced punctuation of the form:
9490 ``Joe User <user)'' -- this caused reference to the
9491 null macro. Fix from Rick McCarty of IO.COM.
9492 Fix a problem that caused an alias "user: user@local.host" to
9493 not have the QNOTREMOTE bit set; this caused configs
9494 to act as if FEATURE(notsticky) was defined even when
9495 it was not. The effect of the problem was to make it
9496 very hard to to set up satellite sites that had a few
9497 local accounts, with everything else forwarded to a
9498 corporate hub. Reported by Detlef Drewanz of the
9499 University of Rostock and Mark Frost of NCD.
9500 Change queuing to not call rulesets 3, {1 or 2}, 4 on header
9501 addresses. This is more efficient (fewer name server
9502 calls) and fixes certain unusual configurations, such
9503 as those that have ruleset 4 do something that is
9504 non-idempotent unless a mailer-specific ruleset did
9505 something else. Problem reported by Brian J. Coan
9506 of the Institute for Global Communications.
9507 Fix the "obsolete argument" routine in main to better understand
9508 new arguments. For example, if you used ``sendmail
9509 -C config -v -q'' it would choke on the -q because
9510 the -C would stop looking for old-format arguments.
9511 Fix the code that was intended to allow two users to forward their
9512 mail to the same program and have them appear unique.
9513 Portability fixes for:
9514 SCO UNIX from Murray Kucherawy.
9515 SCO Open Server 3.2v4 from Philippe Brand.
9516 System V Release 4 from Rick Ellis and others.
9517 OSF/1 from Steve Campbell.
9518 DG/UX from Ben Mesander of the USGS and Bryan Curnutt
9519 of Stoner Associates.
9520 Motorola SysV88 from Kevin Johnson of Motorola.
9521 Solaris 2.3 from Casper H.S. Dik of the University
9522 of Amsterdam and John Caruso of University
9523 of Maryland.
9524 FreeBSD from Ollivier Robert.
9525 NetBSD from Adam Glass.
9526 TitanOS from Kate Hedstrom of Rutgers University.
9527 Irix from Bryan Curnutt.
9528 Dynix from Jim Davis of the University of Arizona.
9529 RISC/os.
9530 Linux from John Kennedy of California State University
9531 at Chico.
9532 Solaris 2.x from Tony Boner of the U.S. Air Force.
9533 NEXTSTEP 3.x from Vince DeMarco.
9534 HP-UX from various people. NOTA BENE: the location
9535 of the config file has moved to /usr/lib
9536 to match the HP-UX version of sendmail.
9537 CONFIG: Don't do any recipient rewriting on relay mailer;
9538 since this is intended only for internal use, the
9539 usual RFC 821/822/1123 rules can be relaxed. The
9540 main point of this is to avoid munging (ugh) UUCP
9541 addresses when relaying internally.
9542 CONFIG: fix typo in mailer/uucp.m4 that mutilates list:;
9543 syntax addresses delivered via UUCP. Solution
9544 provided by Peter Wemm.
9545 CONFIG: fix thumb-fumble in default UUCP relaying in ruleset
9546 zero; it caused double @ signs in addresses. From
9547 Irving Reid of the University of Toronto.
9548 CONFIG: Portability fixes for SCO Unix 3.2 with TCP/IP 1.2.1
9549 from Markku Toijala of ICL Personal Systems Oy.
9550 CONFIG: Add trailing "." on pseudo-domains for consistency;
9551 this fixes a problem (noted by Al Whaley of Sunnyside)
9552 that made it hard to recognize your own pseudodomain
9553 names.
9554 CONFIG: catch "@host" syntax errors (i.e., null local-parts)
9555 rather than letting them get "local configuration
9556 error"s. Problem noted by John Gardiner Myers.
9557 CONFIG: add uucp-uudom mailer variant, based on code posted
9558 by Spider Boardman <spider@Orb.Nashua.NH.US>; this
9559 has uucp-dom semantics but old UUCP syntax. This
9560 also permits "uucp-old" as an alias for "uucp" and
9561 "uucp-new" as a synonym for "suucp" for consistency.
9562 CONFIG: add POP mailer support (from Kimmo Suominen
9563 <kim@grendel.lut.fi>).
9564 CONFIG: drop CSNET_RELAY support -- CSNET is long gone.
9565 CONFIG: fix bug caused with domain literal addresses (e.g.,
9566 ``[128.32.131.12]'') when FEATURE(allmasquerade)
9567 was set; it would get an additional @masquerade.host
9568 added to the address. Problem noted by Peter Wan
9569 of Georgia Tech.
9570 CONFIG: make sure that the local UUCP name is in $=w. From
9571 Jim Murray of Stratus.
9572 CONFIG: changes to UUCP rewriting to simulate IDA-style "V"
9573 mailer flag. Briefly, if you are sending to host
9574 "foo", then it rewrites "foo!...!baz" to "...!baz",
9575 "foo!baz" remains "foo!baz", and anything else has
9576 the local name prepended.
9577 CONFIG: portability fixes for HP-UX.
9578 DOC: several minor problems fixed in the Install & Op Guide.
9579 MAKEMAP: fix core dump problem on lines that are too long or
9580 which lack newline. From Mark Delany.
9581 MAILSTATS: print sums of columns (total messages & kbytes
9582 in and out of the system). From Tom Ferrin of UC
9583 San Francisco Computer Graphics Lab.
9584 SIGNIFICANT USER- OR SYSAD-VISIBLE CHANGES:
9585 On HP-UX, /etc/sendmail.cf has been moved to
9586 /usr/lib/sendmail.cf to match HP sendmail.
9587 Permissions have been tightened up on world-writable
9588 :include: files and accounts that have shells
9589 that are not listed in /etc/shells. This may
9590 cause some .forward files that have worked
9591 before to start failing.
9592 SIGUSR1 dumps some state to the log.
9593 NEW FILES:
9594 src/Makefile.DGUX
9595 src/Makefile.Dynix
9596 src/Makefile.FreeBSD
9597 src/Makefile.Mach386
9598 src/Makefile.NetBSD
9599 src/Makefile.RISCos
9600 src/Makefile.SCO
9601 src/Makefile.SVR4
9602 src/Makefile.Titan
9603 cf/mailer/pop.m4
9604 cf/ostype/bsdi1.0.m4
9605 cf/ostype/dgux.m4
9606 cf/ostype/dynix3.2.m4
9607 cf/ostype/sco3.2.m4
9608 makemap/Makefile.dist
9609 praliases/Makefile.dist
9611 8.6.4/8.6.4 1993/10/31
9612 Repair core-dump problem (write to read-only memory segment)
9613 if you fall back to the return-to-Postmaster case in
9614 savemail. Problem reported by Richard Liu.
9615 Immediately diagnose bogus sender addresses in SMTP. This
9616 makes quite certain that crackers can't use this
9617 class of attack.
9618 Reliability Fix: check return value from fclose() and fsync()
9619 in a few critical places.
9620 Minor problem in initsys() that reversed a condition for
9621 redirecting the output channel on queue runs. It's
9622 not clear this code even does anything. From Eric
9623 Wassenaar of the Dutch National Institute for Nuclear
9624 and High-Energy Physics.
9625 Fix some problems that caused queue runs to do "too much work",
9626 such as double-reading the Errors-To: header. From
9627 Eric Wassenaar.
9628 Error messages on writing the temporary file (including the
9629 data file) were getting suppressed in SMTP -- this
9630 fix causes them to be properly reported. From Eric
9631 Wassenaar.
9632 Some changes to support AF_UNIX sockets -- this will only
9633 really become relevant in the next release, but some
9634 people need it for local patches. From Michael
9635 Corrigan of UC San Diego.
9636 Use dynamically allocated memory (instead of static buffers)
9637 for macros defined in initsys() and settime(); since
9638 these can have different values depending on which
9639 envelope they are in. From Eric Wassenaar.
9640 Improve logging to show ctladdr on to= logging; this tells you
9641 what uid/gid processes ran as.
9642 Fix a problem that caused error messages to be discarded if
9643 the sender address was unparseable for some reason;
9644 this was supposed to fall back to the "return to
9645 postmaster" case.
9646 Improve aliaswait backoff algorithm.
9647 Portability patches for Linux (8.6.3 required another header
9648 file) (from Karl London) and SCO UNIX.
9649 CONFIG: patch prog mailer to not strip host name off of envelope
9650 addresses (so that it matches local again). From
9651 Christopher Davis.
9652 CONFIG: change uucp-dom mailer so that "<>" translates to $n;
9653 this prevents uux from seeing lines with null names like
9654 ``From Sat Oct 30 14:55:31 1993''. From Motonori
9655 Nakamura of Kyoto University.
9656 CONFIG: handle <list:;> syntax correctly. This isn't legal, but
9657 it shouldn't fail miserably. From Motonori Nakamura.
9659 8.6.2/8.6.2 1993/10/15
9660 Put a "successful delivery" message in the transcript for
9661 addresses that get return-receipts.
9662 Put a prominent "this is only a warning" message in warning
9663 messages -- some people don't read carefully enough
9664 and end up sending the message several times.
9665 Include reason for temporary failure in the "warning" return
9666 message. Currently, it just says "cannot send for
9667 four hours".
9668 Fix the "Original message received" time generated for
9669 returntosender messages. It was previously listed as
9670 the current time. Bug reported by Eric Hagberg of
9671 Cornell University Medical College.
9672 If there is an error when writing the body of a message,
9673 don't send the trailing dot and wait for a response
9674 in sender SMTP, as this could cause the connection to
9675 hang up under some bizarre circumstances. From Eric
9676 Wassenaar.
9677 Fix some server SMTP synchronization problems caused when
9678 connections fail during message collection. From
9679 Eric Wassenaar.
9680 Fix a problem that can cause srvrsmtp to reject mail if the
9681 name server is down -- it accepts the RCPT but rejects
9682 the DATA command. Problem reported by Jim Murray of
9683 Stratus.
9684 Fix a problem that can cause core dumps if the config file
9685 incorrectly resolves to a null hostname. Reported by
9686 Allan Johannesen of WPI.
9687 Non-root use of -C flag, dangerous -f flags, and use of -oQ
9688 by non-root users were not put into
9689 X-Authentication-Warning:s as intended because the
9690 config file hadn't set the PrivacyOptions yet. Fix
9691 from Sven-Ove Westberg of the University of Lulea.
9692 Under very odd circumstances, the alias file rebuild code
9693 could get confused as to whether a database was
9694 open or not.
9695 Check "vendor code" on the end of V lines -- this is
9696 intended to provide a hook for vendor-specific
9697 configuration syntax. (This is a "new feature",
9698 but I've made an exception to my rule in a belief
9699 that this is a highly exceptional case.)
9700 Portability fixes for DG/UX (from Douglas Anderson of NCSC),
9701 SCO Unix (from Murray Kucherawy), A/UX, and OSF/1
9702 (from Jon Forrest of UC Berkeley)
9703 CONFIG: fix ``mailer:host'' form of UUCP relay naming.
9705 8.6.1/8.6 1993/10/08
9706 Portability fixes for A/UX and Encore UMAX V.
9707 Fix error message handling -- if you had a name server down
9708 causing an error during parsing, that message was never
9709 propagated to the queue file.
9711 8.6/8.6 1993/10/05
9712 Configuration cleanup: make it easier to undo IDENTPROTO in
9713 conf.h (other systems have the same bug).
9714 If HASGETDTABLESIZE and _SC_OPEN_MAX are both defined, assume
9715 getdtablesize() instead of sysconf(); a disturbingly
9716 large number of systems defined _SC_OPEN_MAX in the
9717 header files but don't have the syscall.
9718 Another patch to really truly ignore MX records in getcanonname
9719 if trymx == FALSE.
9720 Fix problem that caused the "250 IAA25499 Message accepted for
9721 delivery" message to be omitted if there was an error
9722 in the header of the message (e.g., a bad Errors-To:
9723 line). Pointed out by Michael Corrigan of UCSD.
9724 Announce name of host we are chatting when we get errors; this
9725 is an IDA-ism suggested by Christophe Wolfhugel.
9726 Portability fixes for Alpha OSF/1 (from Anthony Baxter of the
9727 Australian Artificial Intelligence Institute), SCO Unix
9728 (from Murray Kucherawy of Hookup Communication Corp.),
9729 NeXT (from Vince DeMarco and myself), Linux (from
9730 Karl London <karl@borg.demon.co.uk>), BSDI (from
9731 Christophe Wolfhugel, and SVR4 on Dell (from Kimmo
9732 Suominen), AUX 3.0 on Macintosh, and ANSI C compilers.
9733 Some changes to get around gcc optimizer bugs. From Takahiro
9734 Kanbe.
9735 Fix error recovery in queueup if another tf file of the same
9736 name already exists. Problem stumbled over by Bill
9737 Wisner of The Well.
9738 Output YP_MASTER_NAME and YP_LAST_MODIFIED without null bytes.
9739 Problem noted by Keith McMillan of Ameritech Services.
9740 Deal with group permissions properly when opening .forward and
9741 :include: files. This relaxes the 8.1C restrictions
9742 slightly more. This includes proper setting of groups
9743 when reading :include: files, allowing you to read some
9744 files that you should be able to read but have previously
9745 been denied unless you owned them or they had "other"
9746 read permission.
9747 Make certain that $j is in $=w (after the .cf is read) so that
9748 if the user is forced to override some silly system,
9749 MX suppression will still work.
9750 Fix a couple of efficiency problems where newstr was double-
9751 calling expensive routines. In at least one case, it
9752 wasn't guaranteed that they would always return the
9753 same result. Problem noted by Christophe Wolfhugel.
9754 Fix null pointer dereference in putoutmsg -- only on an error
9755 condition from a non-SMTP mailer. From Motonori
9756 Nakamura.
9757 Macro expand "C" line class definitions before scanning so that
9758 "CX $Z" works.
9759 Fix problem that caused error message to be sent while still
9760 trying to send the original message if the connection
9761 is closed during a DATA command after getting an error
9762 on an RCPT command (pretty obscure). Problem reported
9763 by John Myers of CMU.
9764 Fix reply to NOOP to be 250 instead of 200 -- this is a long
9765 term bug.
9766 Fix a nasty bug causing core dumps when returning the "warning:
9767 cannot deliver for N hours -- will keep trying" message;
9768 it only occurred if you had PostmasterCopy set and
9769 only on some architectures. Although sendmail would
9770 keep trying, it would send error messages on each
9771 queue interval. This is an important fix.
9772 Allow u and g options to take user and group names respectively.
9773 Don't do a chdir into the queue directory in -bt mode to make
9774 ruleset testing a bit easier.
9775 Don't allow users to turn off logging (using -oL) on the command
9776 line -- command line can only raise, not lower, logging
9777 level.
9778 Set $u to the original recipient on the SMTP transaction or on
9779 the command line. This is only done if there is exactly
9780 one recipient. Technically, this does not meet the
9781 specs, because it does not guarantee a domain on the
9782 address.
9783 Fix a problem that dumped error messages on bad addresses if
9784 you used the -t flag. Problem noted by Josh Smith of
9785 Harvey Mudd College.
9786 Given an address such as ``<foo> <bar>'', auto-quote the first
9787 ``<foo>'' part, giving ``"<foo>" <bar>''. This is to
9788 avoid the problem of people who use angle brackets in
9789 their full name information.
9790 Fix a null pointer dereference if you set option "l", have
9791 an Errors-To: header in the message, and have Errors-To:
9792 defined in the config file H lines. From J.R. Oldroyd.
9793 Put YPCOMPAT on #ifdef NIS instead -- it's one less thing to get
9794 wrong when compiling. Suggested by Rick McCarty of TI.
9795 Fix a problem that could pass negative SIZE parameter if the
9796 df file got lost; this would cause servers to always
9797 give a temporary failure, making the problem even worse.
9798 Problem noted by Allan Johannesen of WPI.
9799 Add "ident" timeout (one of the "r" option selectors) for IDENT
9800 protocol timeouts (30s default). Requested by Murray
9801 Kucherawy of HookUp Communication Corp. to handle bogus
9802 PC TCP/IP implementations.
9803 Change $w default definition to be just the first component of
9804 the domain name on config level 5. The $j macro defaults
9805 to the FQDN; $m remains as before. This lets well-behaved
9806 config files use any of the short, long, or subdomain
9807 names.
9808 Add makesendmail script in src to try to automate multi-architecture
9809 builds. I know, this is sub-optimal, but it is still
9810 helpful.
9811 Fix very obscure race condition that can cause a queue run to
9812 get a queue file for an already completed job. This
9813 problem has existed for years. Problem noted by the
9814 long suffering Allan Johannesen of WPI.
9815 Fix a problem that caused the raw sender name to be passed to
9816 udbsender instead of the canonified name -- this caused
9817 it to sometimes miss records that it should have found.
9818 Relax check of name on HELO packet so that a program using -bs
9819 that claims to be itself works properly.
9820 Restore rewriting of $: part of address through 2, R, 4 in
9821 buildaddr -- this requires passing a lot of flags to get
9822 it right. Unlike old versions, this ONLY rewrites
9823 recipient addresses, not sender addresses.
9824 Fix a bug that caused core dumps in config files that cannot
9825 resolve /file/name style addresses. Fix from Jonathan
9826 Kamens of OpenVision Technologies.
9827 Fix problem with fcntl locking that can cause error returns to
9828 be lost if the lock is lost; this required fully
9829 queueing everything, dropping the envelope (so errors
9830 would get returned), and then re-reading the queue from
9831 scratch.
9832 Fix a problem that caused aliases that redefine an otherwise
9833 true address to still send to the original address
9834 if and only if the alias failed in certain bizarre
9835 ways (e.g, if they pointed at a list:; syntax address).
9836 Problem pointed out by Jonathan Kamens.
9837 Remove support for frozen configuration files. They caused
9838 more trouble than it was worth.
9839 Fix problem that can cause error messages to get ignored when
9840 using both -odb and -t flags. Problem noted by Rob
9841 McNicholas at U.C. Berkeley.
9842 Include all "normal" variations on hostname in $=w. For example,
9843 if the host name is vangogh.cs.berkeley.edu, $=w will
9844 contain vangogh, vangogh.cs, and vangogh.cs.berkeley.edu.
9845 Add "restrictqrun" privacy flag -- without this, anyone can run
9846 the queue.
9847 Reset SmtpPhase global on initial connection creation so that
9848 messages don't come out with stale information.
9849 Pass an "ext" argument to lockfile so that error/log messages
9850 will properly reflect the true filename being locked.
9851 Put all [...] address forms into $=w -- this eliminates the need
9852 for MAXIPADDR in conf.h. Suggested by John Gardiner
9853 Myers of CMU.
9854 Fix a bug that can cause qf files to be left around even after
9855 an SMTP RSET command. Problem and fix from Michael
9856 Corrigan.
9857 Don't send a PostmasterCopy to errors when the Precedence: is
9858 negative. Error reports still go to the envelope
9859 sender address.
9860 Add LA_SHORT for load averages.
9861 Lock sendmail.st file when posting statistics.
9862 Add "SendBufSize" and "RcvBufSize" suboptions to "O" option to
9863 set the size of the TCP send and receive buffers; if you
9864 run over a slow slip line you may need to set these down
9865 (although it would be better to fix the SLIP implementation
9866 so that it's not necessary to recompile every program
9867 that does bulk data transfer).
9868 Allow null defaults on $( ... $) lookups. Problem reported by
9869 Amir Plivatsky.
9870 Diagnose crufty S and V config lines. This resulted from an
9871 observation that some people were using the SITE macro
9872 without the SITECONFIG macro first, which was causing
9873 bogus config files that were not caught.
9874 Fix makemap -f flag to turn off case folding (it was turning it
9875 on instead). THIS IS A USER VISIBLE CHANGE!!!
9876 Fix a problem that caused multiple error messages to be sent if
9877 you used "sendmail -t -oem -odb", your system uses fcntl
9878 locking, and one of the recipient addresses is unknown.
9879 Reset uid earlier in include() so that recursive .forwards or
9880 :include:s don't use the wrong uid.
9881 If file descriptor 0, 1, or 2 was closed when sendmail was
9882 called, the code to recover the descriptor was broken.
9883 This sometimes (only sometimes) caused problems with the
9884 alias file. Fix from Motonori Nakamura.
9885 Fix a problem that caused aliaswait to go into infinite recursion
9886 if the @:@ metasymbol wasn't found in the alias file.
9887 Improve error message on newaliases if database files cannot be
9888 opened or if running with no database format defined.
9889 Do a better estimation of the size of error messages when NoReturn
9890 is set. Problem noted by P{r (Pell) Emanuelsson.
9891 Fix a problem causing the "c" option (don't connect to expensive
9892 mailers) to be ignored in SMTP. Problem noted and the
9893 solution suggested by Robert Elz of The University of
9894 Melbourne.
9895 Improve connection caching algorithm by passing "[host]" to
9896 hostsignature, which strips the square brackets and
9897 returns the real name. This allows mailertable entries
9898 to match regular entries.
9899 Re-enable Return-Receipt-To: -- people seem to want this stupid
9900 feature, even if it doesn't work right.
9901 Catch and log attempts to try the "wiz" command in server SMTP.
9902 This also ups the log level from LOG_NOTICE to LOG_CRIT.
9903 Be more generous at assigning $z to the home directory -- do this
9904 for programs that are specified through a .forward file.
9905 Fix from Andrew Chang of Sun Microsystems.
9906 Always save a fatal error message in preference to a non-fatal
9907 error message so that the "subject" line of return
9908 messages is the best possible.
9909 CONFIG: reduce the number of quotes needed to quote configuration
9910 parameters with commas: two quotes should work now, e.g.,
9911 define(ALIAS_FILE, ``/etc/aliases,/etc/aliases.local'').
9912 CONFIG: class $=Z is a set of UUCP hosts that use uucp-dom
9913 connections (domain-ized UUCP).
9914 CONFIG: fix bug in default maps (-o must be before database file
9915 name). Pointed out by Christophe Wolfhugel.
9916 CONFIG: add FEATURE(nodns) to state that we are not relying on
9917 DNS. This would presumably be used in UUCP islands.
9918 CONFIG: add OSTYPE(nextstep) and OSTYPE(linux).
9919 CONFIG: log $u in Received: line. This is in technical violation
9920 of the standards, since it doesn't guarantee a domain
9921 on the address.
9922 CONFIG: don't assume "m" in local mailer flags -- this means that
9923 if you redefine LOCAL_MAILER_FLAGS you will have to include
9924 the "m" flag should you want it. Apparently some Solaris 2.2
9925 installations can't handle multiple local recipients.
9926 Problem noted by Josh Smith.
9927 CONFIG: add confDOMAIN_NAME to set $j (if undefined, $j defaults).
9928 CONFIG: change default version level from 4 to 5.
9929 CONFIG: add FEATURE(nullclient) to create a config file that
9930 forwards all mail to a hub without ever looking at the
9931 addresses in any detail.
9932 CONFIG: properly strip mailer: information off of relays when
9933 used to change .BITNET form into %-hack form.
9934 CONFIG: fix a problem that caused infinite loops if presented
9935 with an address such as "!foo".
9936 CONFIG: check for self literal (e.g., [128.32.131.12]) even if
9937 the reverse "PTR" mapping is broken. There's a better
9938 way to do this, but the change is fairly major and I
9939 want to hold it for another release. Problem noted by
9940 Bret Marquis.
9942 8.5/8.5 1993/07/23
9943 Serious bug: if you used a command line recipient that was unknown
9944 sendmail would not send a return message (it was treating
9945 everything as though it had an SMTP-style client that
9946 would do the return itself). Problem noted by Josh Smith.
9947 Change "trymx" option in getcanonname() to ignore all MX data,
9948 even during a T_ANY query. This actually didn't break
9949 anything, because the only time you called getcanonname
9950 with !trymx was if you already knew there were no MX
9951 records, but it is somewhat cleaner. From Motonori
9952 Nakamura.
9953 Don't call getcanonname from getmxrr if you already know there
9954 are no DNS records matching the name.
9955 Fix a problem causing error messages to always include "The
9956 original message was received ... from localhost".
9957 The correct original host information is now included.
9958 Previous change to cf/sh/makeinfo.sh doesn't port to Ultrix (their
9959 version of "test" doesn't have the -x flag). Change it
9960 to use -f instead. From John Myers.
9961 CONFIG: 8.4 mistakenly set the default SMTP-style mailer to
9962 esmtp -- it should be smtp.
9963 CONFIG: send all relayed mail using confRELAY_MAILER (defaults
9964 to "relay" (a variant of "smtp") if MAILER(smtp) is used,
9965 else "suucp" if MAILER(uucp) is used, else "unknown");
9966 this cleans up the configs somewhat. This fixes a serious
9967 problem that caused route-addrs to get mistaken as relays,
9968 pointed out by John Myers. WARNING: this also causes
9969 the default on SMART_HOST to change from "suucp" to
9970 "relay" if you have MAILER(smtp) specified.
9972 8.4/8.4 1993/07/22
9973 Add option `w'. If you receive a message that comes to you because
9974 you are the best (lowest preference) target of an MX, and
9975 you haven't explicitly recognized the source MX host in
9976 your .cf file, this option will cause you to try the target
9977 host directly (as if there were no MX for it at all). If
9978 `w' is not set, this case is a configuration error.
9979 Beware: if `w' is set, senders may get bogus errors like
9980 "message timed out" or "host unknown" for problems that
9981 are really configuration errors. This option is
9982 disrecommended, provided only for compatibility with
9983 UIUC sendmail.
9984 Fix a problem that caused the incoming socket to be left open
9985 when sendmail forks after the DATA command. This caused
9986 calling systems to wait in FIN_WAIT_2 state until the
9987 entire list was processed and the child closed -- a
9988 potentially prodigious amount of time. Problem noted
9989 by Neil Rickert.
9990 Fix problem (created in 6.64) that caused mail sent to multiple
9991 addresses, one of which was a bad address, to completely
9992 suppress the sending of the message. This changes
9993 handling of EF_FATALERRS somewhat, and adds an
9994 EF_GLOBALERRS flag. This also fixes a potential problem
9995 with duplicate error messages if there is a syntax error
9996 in the header of a message that isn't noticed until late
9997 in processing. Original problem pointed out by Josh Smith
9998 of Harvey Mudd College. This release includes quite a bit
9999 of dickering with error handling (see below).
10000 Back out SMTP transaction if MAIL gets nested 501 error. This
10001 will only hurt already-broken software and should help
10002 humans.
10003 Fix a problem that broke aliases when neither NDBM nor NEWDB were
10004 compiled in. It would never read the alias file.
10005 Repair unbalanced `)' and `>' (the "open" versions are already
10006 repaired).
10007 Logging of "done" in dropenvelope() was incorrect: it would
10008 log this even when the queue file still existed. Change
10009 this to only log "done" (at log level 11) when the
10010 queue file is actually removed. From John Myers.
10011 Log "lost connection" in server SMTP at log level 20 if there
10012 is no pending transaction. Some senders just close the
10013 connection rather than sending QUIT.
10014 Fix a bug causing getmxrr to add a dot to the end of unqualified
10015 domains that do not have MX records -- this would cause
10016 the subsequent host name lookup to fail. The problem
10017 only occurred if you had FEATURE(nocanonify) set.
10018 Problem noted by Rick McCarty of Texas Instruments.
10019 Fix invocation of setvbuf when passed a -X flag -- I had
10020 unwittingly used an ANSI C extension, and this caused
10021 core dumps on some machines.
10022 Diagnose self-destructive alias loops on RCPT as well as EXPN.
10023 Previously it just gave an empty send queue, which
10024 then gave either "Need RCPT (recipient)" at the DATA
10025 (confusing, since you had given an RCPT command which
10026 returned 250) or just dropped the email, depending on
10027 whether you were running VERBose mode. Now it usually
10028 diagnoses this case as "aliasing/forwarding loop broken".
10029 Unfortunately, it still doesn't adequately diagnose
10030 some true error conditions.
10031 Add internal concept of "warning messages" using 6xx codes.
10032 These are not reported only to Postmaster. Unbalanced
10033 parens, brackets, and quotes are printed as 653 codes.
10034 They are always mapped to 5xx codes before use in SMTP.
10035 Clean up error messages to tell both the actual address that
10036 failed and the alias they arose from. This makes it
10037 somewhat easier to diagnose problems. Difficulty noted
10038 by Motonori Nakamura.
10039 Fix a problem that inappropriately added a ctladdr to addresses
10040 that shouldn't have had one during a queue run. This
10041 caused error messages to be handled differently during
10042 a queue run than a direct run.
10043 Don't print the qf name and line number if you get errors during
10044 the direct run of the queue from srvrsmtp -- this was
10045 just extra stuff for users to crawl through.
10046 Put command line flags on second line of pid file so you can
10047 auto-restart the daemon with all appropriate arguments.
10048 Use "kill `head -1 /etc/sendmail.pid`" to stop the
10049 daemon, and "eval `tail -1 /etc/sendmail.pid`" to
10050 restart it.
10051 Remove the ``setuid(getuid())'' in main -- this caused the
10052 IDENT daemon to screw up. This required that I change
10053 HASSETEUID to HASSETREUID and complicate the mode
10054 changing somewhat because both Ultrix and SunOS seem
10055 to have a bug causing seteuid() to set the saved uid
10056 as well as the effective. The program test/t_setreuid.c
10057 will test to see if your implementation of setreuid(2)
10058 is appropriately functional.
10059 The FallBackMX (option V) handling failed to properly identify
10060 fallback to yourself -- most of the code was there,
10061 but it wasn't being enabled. Problem noted by Murray
10062 Kucherawy of the University of Waterloo.
10063 Change :include: open timeout from ETIMEDOUT to an internal
10064 code EOPENTIMEOUT; this avoids adding "during SmtpPhase
10065 with CurHostName" in error messages, which can be
10066 confusing. Reported by Jonathan Kamens of OpenVision
10067 Technologies.
10068 Back out setpgrp (setpgid on POSIX systems) call to reset the
10069 process group id. The original fix was to get around
10070 some problems with recalcitrant MUAs, but it breaks
10071 any call from a shell that creates a process group id
10072 different from the process id. I could try to fix
10073 this by diddling the tty owner (using tcsetpgrp or
10074 equivalent) but this is too likely to break other
10075 things.
10076 Portability changes:
10077 Support -M as equivalent to -oM on Ultrix -- apparently
10078 DECnet calls sendmail with -MrDECnet -Ms<HOST> -bs
10079 instead of using standard flags. Oh joy. This
10080 behavior reported by Jon Giltner of University
10081 of Colorado.
10082 SGI IRIX -- this includes several changes that should
10083 help other strict ANSI compilers.
10084 SCO Unix -- from Murray Kucherawy of HookUp Communication
10085 Corporation.
10086 Solaris running the Sun C compiler (which despite the
10087 documentation apparently doesn't define
10088 __STDC__ by default).
10089 ConvexOS from Eric Schnoebelen of Convex.
10090 Sony NEWS workstations and Omron LUNA workstations from
10091 Motonori Nakamura.
10092 CONFIG: add confTRY_NULL_MX_LIST to set option `w'.
10093 CONFIG: delete `C' and `e' from default SMTP mailers flags;
10094 several people have made a good argument that this
10095 creates more problems than it solves (although this
10096 may prove painful in the short run).
10097 CONFIG: generalize all the relays to accept a "mailer:host"
10098 format.
10099 CONFIG: move local processing in ruleset 0 into a new ruleset
10100 98 (8 on old sendmail). Domain literal [a.b.c.d]
10101 addresses are also passed through this ruleset.
10102 CONFIG: if neither SMART_HOST nor MAILER(smtp) were defined,
10103 internet-style addresses would "fall off the end" of
10104 ruleset zero and be interpreted as local -- however,
10105 the angle brackets confused the recursive call.
10106 These are now diagnosed as "Unrecognized host name".
10107 CONFIG: USENET rules weren't included in S0 because of a mistaken
10108 ifdef(`_MAILER_USENET_') instead of
10109 ifdef(`_MAILER_usenet_'). Problem found by Rein Tollevik
10110 of SINTEF RUNIT, Oslo.
10111 CONFIG: move up LOCAL_RULE_0 processing so that it happens very
10112 early in ruleset 0; this allows .mc authors to bypass
10113 things like the "short circuit" code for local addresses.
10114 Prompted by a comment by Bill Wisner of The Well.
10115 CONFIG: add confSMTP_MAILER to define the mailer used (smtp or
10116 esmtp) to send SMTP mail. This allows you to default
10117 to esmtp but use a mailertable or other override to
10118 deal with broken servers. This logic was pointed out
10119 to me by Bill Wisner. Ditto for confLOCAL_MAILER.
10120 Changes to cf/sh/makeinfo.sh to make it portable to SVR4
10121 environments. Ugly as sin.
10123 8.3/8.3 1993/07/13
10124 Fix setuid problems introduced in 8.2 that caused messages
10125 like "Cannot create qfXXXXXX: Invalid argument"
10126 or "Cannot reopen dfXXXXXX: Permission denied". This
10127 involved a new compile flag "HASSETEUID" that takes
10128 the place of the old _POSIX_SAVED_IDS -- it turns out
10129 that the POSIX interface is broken enough to break
10130 some systems badly. This includes some fixes for
10131 HP-UX. Also fixes problems where the real uid is
10132 not reset properly on startup (from Neil Rickert).
10133 Fix a problem that caused timed out messages to not report the
10134 addresses that timed out. Error messages are also more
10135 "user friendly".
10136 Drop required bandwidth on connections from 64 bytes/sec to
10137 16 bytes/sec.
10138 Further Solaris portability changes -- doesn't require the BSD
10139 compatibility library. This also adds a new
10140 "HASGETDTABLESIZE" compile flag which can be used if
10141 you want to use getdtablesize(2) instead of sysconf(2).
10142 These are loosely based on changes from David Meyer at
10143 University of Oregon. This now seems to work, at least
10144 for quick test cases.
10145 Fix a problem that can cause duplicate error messages to be
10146 sent if you are in SMTP, you send to multiple addresses,
10147 and at least one of those addresses is good and points
10148 to an account that has a .forward file (whew!).
10149 Fix a problem causing messages to be discarded if checkcompat()
10150 returned EX_TEMPFAIL (because it didn't properly mark
10151 the "to" address). Problem noted by John Myers.
10152 Fix dfopen to return NULL if the open failed; I was depending
10153 on fdopen(-1) returning NULL, which isn't the case. This
10154 isn't serious, but does result in weird error diagnoses.
10155 From Michael Corrigan.
10156 CONFIG: add UUCP_MAX_SIZE M4 macro to set the maximum size of
10157 messages sent through UUCP-family mailers. Suggested
10158 by Bill Wisner of The Well.
10159 CONFIG: if both MAILER(uucp) and MAILER(smtp) are specified,
10160 include a "uucp-dom" mailer that uses domain-style
10161 addressing. Suggested by Bill Wisner.
10162 CONFIG: Add LOCAL_SHELL_FLAGS and LOCAL_SHELL_ARGS to match
10163 LOCAL_MAILER_FLAGS and LOCAL_MAILER_ARGS. Suggested by
10164 Christophe Wolfhugel.
10165 CONFIG: Add OSTYPE(aix3). From Christophe Wolfhugel.
10167 8.2/8.2 1993/07/11
10168 Don't drop out on config file parse errors in -bt mode.
10169 On older configuration files, assume option "l" (use Errors-To
10170 header) for back compatibility. NOTE: this DOES NOT
10171 imply an endorsement of the Errors-To: header in any way.
10172 Accept -x flag on AIX-3 as well as OSF/1. Why, why, why???
10173 Don't log errors on EHLO -- it isn't a "real" error for an old
10174 SMTP server to give an error on this command, and
10175 logging it in the transcript can be confusing. Fix
10176 from Bill Wisner.
10177 IRIX compatibility changes provided by Dan Rich
10178 <drich@sandman.lerc.nasa.gov>.
10179 Solaris 2 compatibility changes. Provided by Bob Cunningham
10180 <bob@kahala.soest.hawaii.edu>, John Oleynick
10181 <juo@klinzhai.rutgers.edu>
10182 Debugging: -d17 was overloaded (hostsignature and usersmtp.c);
10183 move usersmtp (smtpinit and smtpmailfrom) to -d18 to
10184 match the other flags in that file.
10185 Flush transcript before fork in mailfile(). From Eric Wassenaar.
10186 Save h_errno in mci struct and improve error message display.
10187 Changes from Eric Wassenaar.
10188 Open /dev/null for the transcript if the create of the xf file
10189 failed; this avoids at least one possible null pointer
10190 reference in very weird cases. From Eric Wassenaar.
10191 Clean up statistics gathering; it was over-reporting because of
10192 forks. From Eric Wassenaar.
10193 Fix problem that causes old Return-Path: line to override new
10194 Return-Path: line (conf.c needs H_FORCE to avoid
10195 re-using old value). From Motonori Nakamura.
10196 Fix broken -m flag in K definition -- even if -m (match only)
10197 was specified, it would still replace the key with the
10198 value. Noted by Rick McCarty of Texas Instruments.
10199 If the name server timed out over several days, no "timed out"
10200 message would ever be sent back. The timeout code
10201 has been moved from markfailure() to dropenvelope()
10202 so that all such failures should be diagnosed. Pointed
10203 out by Christophe Wolfhugel and others.
10204 Relax safefile() constraints: directories in an include or
10205 forward path must be readable by self if the controlling
10206 user owns the entry, readable by all otherwise (e.g.,
10207 when reading your .forward file, you have to own and
10208 have X permission in it; everyone needs X permission in
10209 the root and directories leading up to your home);
10210 include files must be readable by anyone, but need not
10211 be owned by you.
10212 If _POSIX_SAVED_IDS is defined, setuid to the owner before
10213 reading a .forward file; this gets around some problems
10214 on NFS mounts if root permission is not exported and
10215 the user's home directory isn't x'able.
10216 Additional NeXT portability enhancements from Axel Zinser.
10217 Additional HP-UX portability enhancements from Brian Bullen.
10218 Add a timeout around SMTP message writes; this assumes you can
10219 get throughput of at least 64 bytes/second. Note that
10220 this does not impact the "datafinal" default, which
10221 is separate; this is just intended to work around
10222 network clogs that will occur before the final dot
10223 is sent. From Eric Wassenaar.
10224 Change map code to set the "include null" flag adaptively --
10225 it initially tries both, but if it finds anything
10226 matching without a null it never tries again with a
10227 null and vice versa. If -N is specified, it never
10228 tries without the null and creates new maps with a
10229 null byte. If -O is specified, it never tries with
10230 the null (for efficiency). If -N and -O are specified,
10231 you get -NO (get it?) lookup at all, so this would
10232 be a bad idea. If you don't specify either -N or -O,
10233 it adapts.
10234 Fix recognition of "same from address" so that MH submissions
10235 will insert the appropriate full name information;
10236 this used to work and got broken somewhere along the
10237 way.
10238 Some changes to eliminate some unnecessary SYSERRs in the
10239 log. For example, if you lost a connection, don't
10240 bother reporting that fact on the connection you lost.
10241 Add some "extended debugging" flags to try to track down
10242 why we get occasional problems with file descriptor
10243 one being closed when execing a mailer; it seems to
10244 only happen when there has been another error in the
10245 same transaction. This requires XDEBUG, defined
10246 by default in conf.h.
10247 Add "-X filename" command line flag, which logs both sides of
10248 all SMTP transactions. This is intended ONLY for
10249 debugging bad implementations of other mailers; start
10250 it up, send a message from a mailer that is failing,
10251 and then kill it off and examine the indicated log.
10252 This output is not intended to be particularly human
10253 readable. This also adds the HASSETVBUF compile
10254 flag, defaulted on if your compiler defines __STDC__.
10255 CONFIG: change SMART_HOST to override an SMTP mailer. If you
10256 have a local net that should get direct connects, you
10257 will need to use LOCAL_NET_CONFIG to catch these hosts.
10258 See cf/README for an example.
10259 CONFIG: add LOCAL_MAILER_ARGS (default: `mail -d $u') to handle
10260 sites that don't use the -d flag.
10261 CONFIG: hide recipient addresses as well as sender addresses
10262 behind $M if FEATURE(allmasquerade) is specified; this
10263 has been requested by several people, but can break
10264 local aliases. For example, if you mail to "localalias"
10265 this will be rewritten as "localalias@masqueradehost";
10266 although initial delivery will work, replies will be
10267 broken. Use it sparingly.
10268 CONFIG: add FEATURE(domaintable). This maps unqualified domains
10269 to qualified domains in headers. I believe this is
10270 largely equivalent to the IDA feature of the same name.
10271 CONFIG: use $U as UUCP name instead of $k. This permits you
10272 to override the "system name" as your UUCP name --
10273 in particular, to use domain-ized UUCP names. From
10274 Bill Wisner of The Well.
10275 CONFIG: create new mailer "esmtp" that always tries EHLO
10276 first. This is currently unused in the config files,
10277 but could be used in a mailertable entry.
10279 8.1C/8.1B 1993/06/27
10280 Serious security bug fix: it was possible to read any file on
10281 the system, regardless of ownership and permissions.
10282 If a subroutine returns a fully qualified address, return it
10283 immediately instead of feeding it back into rewriting.
10284 This fixes a problem with mailertable lookups.
10285 CONFIG: fix some M4 frotz (concat => CONCAT)
10287 8.1B/8.1A 1993/06/12
10288 Serious bug fix: pattern matching backup algorithm stepped by
10289 two tokens in classes instead of one. Found by Claus
10290 Assmann at University of Kiel, Germany.
10292 8.1A/8.1A 1993/06/08
10293 Another mailertable fix....
10295 8.1/8.1 1993/06/07
10296 4.4BSD freeze. No semantic changes.