head 1.153; access; symbols pkgsrc-2026Q1:1.153.0.2 pkgsrc-2026Q1-base:1.153 pkgsrc-2025Q4:1.151.0.6 pkgsrc-2025Q4-base:1.151 pkgsrc-2025Q3:1.151.0.4 pkgsrc-2025Q3-base:1.151 pkgsrc-2025Q2:1.151.0.2 pkgsrc-2025Q2-base:1.151 pkgsrc-2025Q1:1.150.0.2 pkgsrc-2025Q1-base:1.150 pkgsrc-2024Q4:1.149.0.2 pkgsrc-2024Q4-base:1.149 pkgsrc-2024Q3:1.146.0.4 pkgsrc-2024Q3-base:1.146 pkgsrc-2024Q2:1.146.0.2 pkgsrc-2024Q2-base:1.146 pkgsrc-2024Q1:1.145.0.2 pkgsrc-2024Q1-base:1.145 pkgsrc-2023Q4:1.142.0.2 pkgsrc-2023Q4-base:1.142 pkgsrc-2023Q3:1.141.0.12 pkgsrc-2023Q3-base:1.141 pkgsrc-2023Q2:1.141.0.10 pkgsrc-2023Q2-base:1.141 pkgsrc-2023Q1:1.141.0.8 pkgsrc-2023Q1-base:1.141 pkgsrc-2022Q4:1.141.0.6 pkgsrc-2022Q4-base:1.141 pkgsrc-2022Q3:1.141.0.4 pkgsrc-2022Q3-base:1.141 pkgsrc-2022Q2:1.141.0.2 pkgsrc-2022Q2-base:1.141 pkgsrc-2022Q1:1.140.0.4 pkgsrc-2022Q1-base:1.140 pkgsrc-2021Q4:1.140.0.2 pkgsrc-2021Q4-base:1.140 pkgsrc-2021Q3:1.139.0.2 pkgsrc-2021Q3-base:1.139 pkgsrc-2021Q2:1.138.0.10 pkgsrc-2021Q2-base:1.138 pkgsrc-2021Q1:1.138.0.8 pkgsrc-2021Q1-base:1.138 pkgsrc-2020Q4:1.138.0.6 pkgsrc-2020Q4-base:1.138 pkgsrc-2020Q3:1.138.0.4 pkgsrc-2020Q3-base:1.138 pkgsrc-2020Q2:1.138.0.2 pkgsrc-2020Q2-base:1.138 pkgsrc-2020Q1:1.135.0.2 pkgsrc-2020Q1-base:1.135 pkgsrc-2019Q4:1.134.0.4 pkgsrc-2019Q4-base:1.134 pkgsrc-2019Q3:1.133.0.2 pkgsrc-2019Q3-base:1.133 pkgsrc-2019Q2:1.130.0.6 pkgsrc-2019Q2-base:1.130 pkgsrc-2019Q1:1.130.0.4 pkgsrc-2019Q1-base:1.130 pkgsrc-2018Q4:1.130.0.2 pkgsrc-2018Q4-base:1.130 pkgsrc-2018Q3:1.129.0.18 pkgsrc-2018Q3-base:1.129 pkgsrc-2018Q2:1.129.0.16 pkgsrc-2018Q2-base:1.129 pkgsrc-2018Q1:1.129.0.14 pkgsrc-2018Q1-base:1.129 pkgsrc-2017Q4:1.129.0.12 pkgsrc-2017Q4-base:1.129 pkgsrc-2017Q3:1.129.0.10 pkgsrc-2017Q3-base:1.129 pkgsrc-2017Q2:1.129.0.6 pkgsrc-2017Q2-base:1.129 pkgsrc-2017Q1:1.129.0.4 pkgsrc-2017Q1-base:1.129 pkgsrc-2016Q4:1.129.0.2 pkgsrc-2016Q4-base:1.129 pkgsrc-2016Q3:1.128.0.6 pkgsrc-2016Q3-base:1.128 pkgsrc-2016Q2:1.128.0.4 pkgsrc-2016Q2-base:1.128 pkgsrc-2016Q1:1.128.0.2 pkgsrc-2016Q1-base:1.128 pkgsrc-2015Q4:1.127.0.10 pkgsrc-2015Q4-base:1.127 pkgsrc-2015Q3:1.127.0.8 pkgsrc-2015Q3-base:1.127 pkgsrc-2015Q2:1.127.0.6 pkgsrc-2015Q2-base:1.127 pkgsrc-2015Q1:1.127.0.4 pkgsrc-2015Q1-base:1.127 pkgsrc-2014Q4:1.127.0.2 pkgsrc-2014Q4-base:1.127 pkgsrc-2014Q3:1.126.0.2 pkgsrc-2014Q3-base:1.126 pkgsrc-2014Q2:1.125.0.2 pkgsrc-2014Q2-base:1.125 pkgsrc-2014Q1:1.119.0.2 pkgsrc-2014Q1-base:1.119 pkgsrc-2013Q4:1.117.0.4 pkgsrc-2013Q4-base:1.117 pkgsrc-2013Q3:1.117.0.2 pkgsrc-2013Q3-base:1.117 pkgsrc-2013Q2:1.115.0.2 pkgsrc-2013Q2-base:1.115 pkgsrc-2013Q1:1.114.0.2 pkgsrc-2013Q1-base:1.114 pkgsrc-2012Q4:1.112.0.2 pkgsrc-2012Q4-base:1.112 pkgsrc-2012Q3:1.110.0.2 pkgsrc-2012Q3-base:1.110 pkgsrc-2012Q2:1.109.0.20 pkgsrc-2012Q2-base:1.109 pkgsrc-2012Q1:1.109.0.18 pkgsrc-2012Q1-base:1.109 pkgsrc-2011Q4:1.109.0.16 pkgsrc-2011Q4-base:1.109 pkgsrc-2011Q3:1.109.0.14 pkgsrc-2011Q3-base:1.109 pkgsrc-2011Q2:1.109.0.12 pkgsrc-2011Q2-base:1.109 pkgsrc-2011Q1:1.109.0.10 pkgsrc-2011Q1-base:1.109 pkgsrc-2010Q4:1.109.0.8 pkgsrc-2010Q4-base:1.109 pkgsrc-2010Q3:1.109.0.6 pkgsrc-2010Q3-base:1.109 pkgsrc-2010Q2:1.109.0.4 pkgsrc-2010Q2-base:1.109 pkgsrc-2010Q1:1.109.0.2 pkgsrc-2010Q1-base:1.109 pkgsrc-2009Q4:1.107.0.8 pkgsrc-2009Q4-base:1.107 pkgsrc-2009Q3:1.107.0.6 pkgsrc-2009Q3-base:1.107 pkgsrc-2009Q2:1.107.0.4 pkgsrc-2009Q2-base:1.107 pkgsrc-2009Q1:1.107.0.2 pkgsrc-2009Q1-base:1.107 pkgsrc-2008Q4:1.104.0.6 pkgsrc-2008Q4-base:1.104 pkgsrc-2008Q3:1.104.0.4 pkgsrc-2008Q3-base:1.104 cube-native-xorg:1.104.0.2 cube-native-xorg-base:1.104 pkgsrc-2008Q2:1.103.0.4 pkgsrc-2008Q2-base:1.103 cwrapper:1.103.0.2 pkgsrc-2008Q1:1.102.0.4 pkgsrc-2008Q1-base:1.102 pkgsrc-2007Q4:1.102.0.2 pkgsrc-2007Q4-base:1.102 pkgsrc-2007Q3:1.101.0.2 pkgsrc-2007Q3-base:1.101 pkgsrc-2007Q2:1.100.0.2 pkgsrc-2007Q2-base:1.100 pkgsrc-2007Q1:1.95.0.2 pkgsrc-2007Q1-base:1.95 pkgsrc-2006Q4:1.94.0.2 pkgsrc-2006Q4-base:1.94 pkgsrc-2006Q3:1.92.0.2 pkgsrc-2006Q3-base:1.92 pkgsrc-2006Q2:1.90.0.2 pkgsrc-2006Q2-base:1.90 pkgsrc-2006Q1:1.84.0.2 pkgsrc-2006Q1-base:1.84 pkgsrc-2005Q4:1.80.0.2 pkgsrc-2005Q4-base:1.80 pkgsrc-2005Q3:1.79.0.2 pkgsrc-2005Q3-base:1.79 pkgsrc-2005Q2:1.76.0.2 pkgsrc-2005Q2-base:1.76 pkgsrc-2005Q1:1.74.0.2 pkgsrc-2005Q1-base:1.74 pkgsrc-2004Q4:1.73.0.4 pkgsrc-2004Q4-base:1.73 pkgsrc-2004Q3:1.73.0.2 pkgsrc-2004Q3-base:1.73 pkgsrc-2004Q2:1.70.0.2 pkgsrc-2004Q2-base:1.70 pkgsrc-2004Q1:1.68.0.2 pkgsrc-2004Q1-base:1.68 pkgsrc-2003Q4:1.64.0.2 pkgsrc-2003Q4-base:1.64 netbsd-1-6-1:1.55.0.2 netbsd-1-6-1-base:1.55 netbsd-1-6:1.51.0.6 netbsd-1-6-RELEASE-base:1.51 pkgviews:1.51.0.2 pkgviews-base:1.51 buildlink2:1.42.0.2 buildlink2-base:1.49 netbsd-1-5-PATCH003:1.42 netbsd-1-5-PATCH001:1.36 netbsd-1-5-RELEASE:1.23 netbsd-1-4-PATCH003:1.23 netbsd-1-4-PATCH002:1.12 comdex-fall-1999:1.5 netbsd-1-4-PATCH001:1.4 netbsd-1-4-RELEASE:1.4 pkgsrc-base:1.1.1.1 TNF:1.1.1; locks; strict; comment @# @; 1.153 date 2026.03.02.07.39.29; author jnemeth; state Exp; branches; next 1.152; commitid hRaoxTwMYU3L7nwG; 1.152 date 2026.01.07.08.47.49; author wiz; state Exp; branches; next 1.151; commitid 1wQ3ICD8eebefrpG; 1.151 date 2025.04.17.21.51.30; author wiz; state Exp; branches; next 1.150; commitid xcIXAVA292fk6sRF; 1.150 date 2025.03.03.07.05.10; author jnemeth; state Exp; branches; next 1.149; commitid YQnt4ifroQEFEALF; 1.149 date 2024.11.14.22.20.39; author wiz; state Exp; branches; next 1.148; commitid JmuDYqwL4erbdFxF; 1.148 date 2024.11.01.12.53.24; author wiz; state Exp; branches; next 1.147; commitid QB4Wk02mZPuBuWvF; 1.147 date 2024.11.01.00.52.37; author wiz; state Exp; branches; next 1.146; commitid QT27BdVP362gvSvF; 1.146 date 2024.05.29.16.33.24; author adam; state Exp; branches; next 1.145; commitid n8aFyEjEVZA0JUbF; 1.145 date 2024.03.18.02.46.47; author jnemeth; state Exp; branches; next 1.144; commitid Vy8JsvTy7NTjtA2F; 1.144 date 2024.02.19.04.12.36; author jnemeth; state Exp; branches; next 1.143; commitid iOtoSag0liZ2RZYE; 1.143 date 2024.01.15.04.43.22; author jnemeth; state Exp; branches; next 1.142; commitid ibRTU6YcoLIM7vUE; 1.142 date 2023.10.24.22.09.50; author wiz; state Exp; branches; next 1.141; commitid MTsrqKm6aGrQAVJE; 1.141 date 2022.05.10.13.46.49; author sborrill; state Exp; branches; next 1.140; commitid AQFrzBnlZjUbVvDD; 1.140 date 2021.11.09.22.02.36; author jnemeth; state Exp; branches 1.140.4.1; next 1.139; commitid OHMAETGK8u3dwagD; 1.139 date 2021.07.04.07.57.13; author jnemeth; state Exp; branches; next 1.138; commitid L27iNpThA37ZWDZC; 1.138 date 2020.05.16.15.36.24; author rillig; state Exp; branches; next 1.137; commitid vFcz5ofjo3UNNt8C; 1.137 date 2020.04.24.14.33.08; author manu; state Exp; branches; next 1.136; commitid oU5QaHN267BK9E5C; 1.136 date 2020.04.12.09.11.41; author jnemeth; state Exp; branches; next 1.135; commitid x94VyRjEwvYxI44C; 1.135 date 2020.01.18.21.49.54; author jperkin; state Exp; branches; next 1.134; commitid JW4hJgY8ZdoTFdTB; 1.134 date 2019.12.03.18.51.02; author bouyer; state Exp; branches; next 1.133; commitid 2QCG0IQ35vm8aiNB; 1.133 date 2019.07.15.07.05.02; author jnemeth; state Exp; branches; next 1.132; commitid 0oTXAtSdHofQN6vB; 1.132 date 2019.07.15.04.32.49; author jnemeth; state Exp; branches; next 1.131; commitid jIGa2kaE2N2eT5vB; 1.131 date 2019.07.15.02.06.42; author jnemeth; state Exp; branches; next 1.130; commitid ELNR2eQxnQc785vB; 1.130 date 2018.12.05.12.10.21; author bsiegert; state Exp; branches; next 1.129; commitid GfmFs0JwAbO7DB2B; 1.129 date 2016.12.16.16.07.29; author hans; state Exp; branches; next 1.128; commitid t5Zr4jl4FMf82eyz; 1.128 date 2016.03.05.11.28.51; author jperkin; state Exp; branches; next 1.127; commitid 1LoxeQftu903HrXy; 1.127 date 2014.12.06.23.22.20; author jnemeth; state Exp; branches; next 1.126; commitid nOUaBVqh43Tkc21y; 1.126 date 2014.09.19.21.24.05; author jnemeth; state Exp; branches; next 1.125; commitid T7XY3nFiV7Ht80Rx; 1.125 date 2014.06.21.18.39.27; author jnemeth; state Exp; branches; next 1.124; commitid 4Grsl4qMEmHm7qFx; 1.124 date 2014.06.20.16.26.55; author jnemeth; state Exp; branches; next 1.123; commitid z2V9mO8kpncGohFx; 1.123 date 2014.06.20.05.24.32; author jnemeth; state Exp; branches; next 1.122; commitid sBc9A2OkLJqhKdFx; 1.122 date 2014.06.15.21.04.30; author jnemeth; state Exp; branches; next 1.121; commitid tPGp11AtSHeL6FEx; 1.121 date 2014.06.15.20.48.49; author jnemeth; state Exp; branches; next 1.120; commitid y0gYCG4vNLA71FEx; 1.120 date 2014.05.10.14.38.26; author richard; state Exp; branches; next 1.119; commitid y1fVYpvtzc0170Ax; 1.119 date 2014.02.12.23.18.09; author tron; state Exp; branches; next 1.118; commitid dfJj7CwMMWJzNRox; 1.118 date 2014.02.09.02.02.46; author jnemeth; state Exp; branches; next 1.117; commitid 5XTrcj2Y4NMdPmox; 1.117 date 2013.09.19.10.54.05; author manu; state Exp; branches; next 1.116; commitid KRA7jNTfzpSwm26x; 1.116 date 2013.07.12.10.44.58; author jperkin; state Exp; branches; next 1.115; commitid vVOw5ngQ2VNQxaXw; 1.115 date 2013.05.05.02.36.20; author jnemeth; state Exp; branches; next 1.114; 1.114 date 2013.02.06.23.22.48; author jperkin; state Exp; branches; next 1.113; 1.113 date 2013.02.06.07.42.04; author jnemeth; state Exp; branches; next 1.112; 1.112 date 2012.12.16.01.52.23; author obache; state Exp; branches; next 1.111; 1.111 date 2012.10.08.12.19.30; author asau; state Exp; branches; next 1.110; 1.110 date 2012.07.27.17.46.01; author jnemeth; state Exp; branches; next 1.109; 1.109 date 2010.03.12.13.19.49; author obache; state Exp; branches; next 1.108; 1.108 date 2010.01.16.00.31.13; author jnemeth; state Exp; branches; next 1.107; 1.107 date 2009.03.21.21.30.58; author jnemeth; state Exp; branches; next 1.106; 1.106 date 2009.03.21.21.20.28; author jnemeth; state Exp; branches; next 1.105; 1.105 date 2009.03.09.21.24.00; author manu; state Exp; branches; next 1.104; 1.104 date 2008.08.13.15.41.29; author manu; state Exp; branches; next 1.103; 1.103 date 2008.05.25.21.42.21; author joerg; state Exp; branches; next 1.102; 1.102 date 2007.10.19.09.11.45; author jnemeth; state Exp; branches; next 1.101; 1.101 date 2007.09.25.20.05.23; author jlam; state Exp; branches; next 1.100; 1.100 date 2007.06.19.17.10.55; author jnemeth; state Exp; branches; next 1.99; 1.99 date 2007.04.26.06.26.27; author jnemeth; state Exp; branches; next 1.98; 1.98 date 2007.04.19.19.24.09; author joerg; state Exp; branches; next 1.97; 1.97 date 2007.04.18.01.39.29; author jnemeth; state Exp; branches; next 1.96; 1.96 date 2007.04.17.10.35.50; author jnemeth; state Exp; branches; next 1.95; 1.95 date 2007.01.20.20.08.31; author tv; state Exp; branches; next 1.94; 1.94 date 2006.12.29.21.44.09; author markd; state Exp; branches; next 1.93; 1.93 date 2006.10.12.21.04.27; author tv; state Exp; branches; next 1.92; 1.92 date 2006.09.05.20.01.37; author tv; state Exp; branches; next 1.91; 1.91 date 2006.07.07.18.06.27; author tv; state Exp; branches; next 1.90; 1.90 date 2006.06.14.18.53.54; author adrianp; state Exp; branches 1.90.2.1; next 1.89; 1.89 date 2006.06.07.14.48.28; author joerg; state Exp; branches; next 1.88; 1.88 date 2006.06.06.22.03.36; author adrianp; state Exp; branches; next 1.87; 1.87 date 2006.05.12.22.23.09; author adrianp; state Exp; branches; next 1.86; 1.86 date 2006.05.01.02.57.03; author jlam; state Exp; branches; next 1.85; 1.85 date 2006.04.23.00.12.39; author jlam; state Exp; branches; next 1.84; 1.84 date 2006.03.22.19.56.36; author adrianp; state Exp; branches 1.84.2.1; next 1.83; 1.83 date 2006.01.23.17.28.41; author tv; state Exp; branches; next 1.82; 1.82 date 2006.01.18.21.00.48; author adrianp; state Exp; branches; next 1.81; 1.81 date 2005.12.29.06.21.53; author jlam; state Exp; branches; next 1.80; 1.80 date 2005.12.05.20.50.35; author rillig; state Exp; branches 1.80.2.1; next 1.79; 1.79 date 2005.08.23.11.48.49; author rillig; state Exp; branches; next 1.78; 1.78 date 2005.08.01.15.30.52; author wiz; state Exp; branches; next 1.77; 1.77 date 2005.07.18.21.33.24; author adrianp; state Exp; branches; next 1.76; 1.76 date 2005.05.21.04.10.17; author jlam; state Exp; branches; next 1.75; 1.75 date 2005.04.01.18.42.08; author adrianp; state Exp; branches; next 1.74; 1.74 date 2005.02.10.22.17.24; author adrianp; state Exp; branches; next 1.73; 1.73 date 2004.08.30.20.16.28; author adrianp; state Exp; branches; next 1.72; 1.72 date 2004.07.21.23.30.16; author schmonz; state Exp; branches; next 1.71; 1.71 date 2004.06.23.11.02.02; author cjep; state Exp; branches; next 1.70; 1.70 date 2004.05.09.21.14.43; author snj; state Exp; branches; next 1.69; 1.69 date 2004.04.21.21.09.31; author cube; state Exp; branches; next 1.68; 1.68 date 2004.03.27.22.07.32; author tron; state Exp; branches; next 1.67; 1.67 date 2004.03.07.10.20.06; author grant; state Exp; branches; next 1.66; 1.66 date 2003.12.03.22.11.02; author reed; state Exp; branches; next 1.65; 1.65 date 2003.12.02.05.45.12; author ben; state Exp; branches; next 1.64; 1.64 date 2003.11.12.03.39.41; author jschauma; state Exp; branches; next 1.63; 1.63 date 2003.09.18.09.01.03; author grant; state Exp; branches; next 1.62; 1.62 date 2003.09.15.11.59.11; author markd; state Exp; branches; next 1.61; 1.61 date 2003.08.11.11.41.51; author markd; state Exp; branches; next 1.60; 1.60 date 2003.06.10.09.56.17; author wiz; state Exp; branches; next 1.59; 1.59 date 2003.05.02.11.55.40; author wiz; state Exp; branches; next 1.58; 1.58 date 2003.05.01.15.19.12; author jmmv; state Exp; branches; next 1.57; 1.57 date 2003.04.17.16.13.54; author manu; state Exp; branches; next 1.56; 1.56 date 2003.03.04.00.21.31; author seb; state Exp; branches; next 1.55; 1.55 date 2003.01.28.22.03.39; author jlam; state Exp; branches; next 1.54; 1.54 date 2002.10.03.10.09.03; author markd; state Exp; branches; next 1.53; 1.53 date 2002.09.23.12.56.57; author markd; state Exp; branches; next 1.52; 1.52 date 2002.08.21.07.47.05; author seb; state Exp; branches; next 1.51; 1.51 date 2002.06.23.12.15.03; author tron; state Exp; branches 1.51.6.1; next 1.50; 1.50 date 2002.06.23.11.46.03; author tron; state Exp; branches; next 1.49; 1.49 date 2002.06.17.21.08.16; author tron; state Exp; branches; next 1.48; 1.48 date 2002.06.17.21.05.06; author tron; state Exp; branches; next 1.47; 1.47 date 2002.06.17.20.56.53; author tron; state Exp; branches; next 1.46; 1.46 date 2002.06.17.20.21.46; author tron; state Exp; branches; next 1.45; 1.45 date 2002.06.17.20.13.10; author tron; state Exp; branches; next 1.44; 1.44 date 2002.06.17.13.27.14; author wiz; state Exp; branches; next 1.43; 1.43 date 2002.06.17.13.07.01; author wiz; state Exp; branches; next 1.42; 1.42 date 2001.11.29.01.12.40; author hubertf; state Exp; branches 1.42.2.1; next 1.41; 1.41 date 2001.10.19.08.51.31; author veego; state Exp; branches; next 1.40; 1.40 date 2001.09.09.16.41.40; author taca; state Exp; branches; next 1.39; 1.39 date 2001.08.21.06.49.53; author itojun; state Exp; branches; next 1.38; 1.38 date 2001.08.01.02.39.38; author itojun; state Exp; branches; next 1.37; 1.37 date 2001.05.29.03.31.26; author itojun; state Exp; branches; next 1.36; 1.36 date 2001.04.15.01.18.06; author itojun; state Exp; branches; next 1.35; 1.35 date 2001.04.13.05.07.50; author itojun; state Exp; branches; next 1.34; 1.34 date 2001.03.05.11.33.47; author itojun; state Exp; branches; next 1.33; 1.33 date 2001.02.28.09.30.01; author tron; state Exp; branches; next 1.32; 1.32 date 2001.02.28.03.52.18; author itojun; state Exp; branches; next 1.31; 1.31 date 2001.02.25.04.17.59; author hubertf; state Exp; branches; next 1.30; 1.30 date 2001.02.17.18.25.04; author wiz; state Exp; branches; next 1.29; 1.29 date 2001.02.01.10.33.23; author wiz; state Exp; branches; next 1.28; 1.28 date 2001.01.29.11.34.31; author wiz; state Exp; branches; next 1.27; 1.27 date 2001.01.21.05.58.50; author itojun; state Exp; branches; next 1.26; 1.26 date 2001.01.04.12.09.28; author itojun; state Exp; branches; next 1.25; 1.25 date 2000.11.19.07.44.38; author taca; state Exp; branches; next 1.24; 1.24 date 2000.10.15.14.30.21; author itojun; state Exp; branches; next 1.23; 1.23 date 2000.09.03.10.31.27; author wiz; state Exp; branches; next 1.22; 1.22 date 2000.08.13.18.10.29; author itojun; state Exp; branches; next 1.21; 1.21 date 2000.08.13.17.52.31; author itojun; state Exp; branches; next 1.20; 1.20 date 2000.08.01.12.02.40; author itojun; state Exp; branches; next 1.19; 1.19 date 2000.07.30.17.49.00; author itojun; state Exp; branches; next 1.18; 1.18 date 2000.07.24.04.22.31; author itojun; state Exp; branches; next 1.17; 1.17 date 2000.06.15.12.55.07; author kleink; state Exp; branches; next 1.16; 1.16 date 2000.06.15.12.32.33; author veego; state Exp; branches; next 1.15; 1.15 date 2000.06.14.16.40.53; author veego; state Exp; branches; next 1.14; 1.14 date 2000.06.14.13.02.16; author veego; state Exp; branches; next 1.13; 1.13 date 2000.06.14.07.30.23; author kleink; state Exp; branches; next 1.12; 1.12 date 2000.01.09.01.29.07; author wiz; state Exp; branches; next 1.11; 1.11 date 2000.01.02.17.46.47; author itojun; state Exp; branches; next 1.10; 1.10 date 99.12.01.21.55.12; author tron; state Exp; branches; next 1.9; 1.9 date 99.12.01.21.32.08; author tron; state Exp; branches; next 1.8; 1.8 date 99.12.01.21.31.04; author tron; state Exp; branches; next 1.7; 1.7 date 99.12.01.21.15.20; author tron; state Exp; branches; next 1.6; 1.6 date 99.11.23.09.57.17; author tron; state Exp; branches; next 1.5; 1.5 date 99.10.07.17.41.55; author tron; state Exp; branches; next 1.4; 1.4 date 99.04.30.17.07.11; author tv; state Exp; branches; next 1.3; 1.3 date 99.04.10.17.22.43; author tron; state Exp; branches; next 1.2; 1.2 date 99.04.10.16.41.21; author tron; state Exp; branches; next 1.1; 1.1 date 99.04.08.23.00.33; author tron; state Exp; branches 1.1.1.1; next ; 1.140.4.1 date 2022.05.20.12.58.37; author bsiegert; state Exp; branches; next ; commitid 6uOsk8v7ZEQWkNED; 1.90.2.1 date 2006.08.29.06.53.23; author ghen; state Exp; branches; next ; 1.84.2.1 date 2006.05.22.14.15.25; author salo; state Exp; branches; next 1.84.2.2; 1.84.2.2 date 2006.06.14.21.06.26; author salo; state Exp; branches; next ; 1.80.2.1 date 2006.03.24.16.12.18; author salo; state Exp; branches; next ; 1.51.6.1 date 2002.08.21.09.50.30; author agc; state Exp; branches; next ; 1.42.2.1 date 2002.06.23.18.52.04; author jlam; state Exp; branches; next ; 1.1.1.1 date 99.04.08.23.00.33; author tron; state Exp; branches; next ; desc @@ 1.153 log @Update to sendmail 8.18.2 pkgsrc changes: - fix one thing related to resn - convert from NetBSD's old blocklistd to blacklistd NOTE: UseBlocklist is now UseBlacklist SENDMAIL RELEASE NOTES This listing shows the version of the sendmail binary, the version of the sendmail configuration files, the date of release, and a summary of the changes in that release. 8.18.2/8.18.2 2025/12/27 Avoid adding a second To: header to DSNs, instead any additional addresses are appended to an existing To: header (this also applies to Cc: and Bcc:). Fix matching of wildcard SANs in the experimental support for SMTP MTA Strict Transport Security (MTA-STS). Problem reported by Dilyan Palauzo. The experimental support for SMTP MTA Strict Transport Security has been significantly rewritten to handle the problems caused by it being tied to the domain of a RCPT address (instead to an SMTP server for all the domains it handles - compare DANE). The most visible change is that an SMTP transaction where the first RCPT has an STS policy will have only RCPTs with the same domain instead of all RCPTs going to the same servers (MX). Accordingly, MTA-STS can be disabled per RCPT domain by adding access map entries of the form STS:domain NO Successful deliveries to RCPTs which have an STS policy show STS=OK in the to=... stat=Sent log entry. If an STS policy for a RCPT could not be fulfilled then the RCPT is not being sent and an error containing the string "STS" is logged. MaxQueueAge is now observed for all types of QueueSortOrder even those which internally skip some code (including the MaxQueueAge check). On some systems the rejection of a RCPT by a milter could silently be ignored. Increase size for an internal buffer which can contain AUTH data because XOAUTH2 could use very long tokens. Patch from Frank Schmirler. Portability: Add support for Darwin 24 and 25. LIBSM: Fix compilation of vfscanf.c with gcc-15. Problem reported by Jaroslav Škarvada of RedHat. MAILSTATS: Fix compilation with gcc-15. Problem reported by Jaroslav Škarvada of RedHat. New Files: cf/feature/same_domain_only.m4 devtools/OS/Darwin.24.x devtools/OS/Darwin.25.x @ text @# $NetBSD: Makefile,v 1.152 2026/01/07 08:47:49 wiz Exp $ PKGNAME= sendmail-${DIST_VERS} COMMENT= The well known Mail Transport Agent CONFLICTS+= courier-mta-[0-9]* fastforward>=0.51nb2 postfix-[0-9]* CONFLICTS+= esmtp>=1.2 .include "options.mk" .include "../../mail/sendmail/Makefile.common" USE_TOOLS+= pax MESSAGE_SRC= ${WRKDIR}/.MESSAGE_SRC PLIST_SRC= ${WRKDIR}/.PLIST_SRC SMRSH_CMDDIR?= ${PREFIX}/libexec/sm.bin PLIST_SUBST+= SMRSH_CMDDIR=${SMRSH_CMDDIR} RCD_SCRIPTS= sendmail smmsp SMF_METHODS= sendmail sendmail_include smmsp BUILD_DEFS+= VARBASE # Not OWN_DIRS, so that the admin doesn't get a suggestion to delete the # queue dirs if they are nonempty at deinstall (probably undesirable). # MAKE_DIRS_PERMS+= /${VARBASE}/spool/clientmqueue smmsp smmsp 0770 MAKE_DIRS_PERMS+= /${VARBASE}/spool/mqueue ${REAL_ROOT_USER} ${REAL_ROOT_GROUP} 0700 SPECIAL_PERMS+= libexec/sendmail/sendmail ${REAL_ROOT_USER} smmsp 2555 SPECIAL_PERMS+= libexec/sendmail/mail.local ${REAL_ROOT_USER} ${REAL_ROOT_GROUP} 4555 PKG_GROUPS= smmsp PKG_USERS= smmsp:smmsp PKG_GECOS.smmsp= Sendmail Message Submission Program SUBST_CLASSES+= paths SUBST_CLASSES+= cf-paths SUBST_STAGE.paths= pre-configure SUBST_FILES.paths= ../mailer.conf smrsh/smrsh.8 cf/cf/Makefile SUBST_SED.paths+= -e "s|@@@@BINGRP@@@@|${BINGRP}|g" SUBST_SED.paths+= -e "s|@@@@BINOWN@@@@|${BINOWN}|g" SUBST_SED.paths+= -e "s|@@@@INSTALL@@@@|${INSTALL}|g" SUBST_SED.paths+= -e "s|@@@@PREFIX@@@@|${PREFIX}|g" SUBST_SED.paths+= -e "s|@@@@SMRSH_CMDDIR@@@@|${SMRSH_CMDDIR}|g" SUBST_MESSAGE.paths= Fixing paths. SUBST_STAGE.cf-paths= pre-build .for f in cf/README cf/cf/generic-bsd4.4.cf cf/cf/generic-hpux10.cf \ cf/cf/generic-hpux9.cf cf/cf/generic-linux.cf \ cf/cf/generic-mpeix.cf cf/cf/generic-nextstep3.3.cf \ cf/cf/generic-osf1.cf cf/cf/generic-solaris.cf \ cf/cf/generic-sunos4.1.cf cf/cf/generic-ultrix4.cf \ cf/cf/knecht.mc cf/cf/submit.cf cf/feature/local_lmtp.m4 \ cf/feature/msp.m4 cf/feature/smrsh.m4 cf/m4/proto.m4 \ cf/mailer/pop.m4 cf/mailer/usenet.m4 cf/ostype/a-ux.m4 \ cf/ostype/aix3.m4 cf/ostype/aix4.m4 cf/ostype/aix5.m4 \ cf/ostype/altos.m4 cf/ostype/amdahl-uts.m4 cf/ostype/bsd4.4.m4 \ cf/ostype/darwin.m4 cf/ostype/dgux.m4 cf/ostype/domainos.m4 \ cf/ostype/dragonfly.m4 cf/ostype/dynix3.2.m4 \ cf/ostype/freebsd4.m4 cf/ostype/freebsd5.m4 \ cf/ostype/freebsd6.m4 cf/ostype/hpux10.m4 cf/ostype/hpux9.m4 \ cf/ostype/irix4.m4 cf/ostype/irix5.m4 cf/ostype/irix6.m4 \ cf/ostype/isc4.1.m4 cf/ostype/maxion.m4 cf/ostype/nextstep.m4 \ cf/ostype/openbsd.m4 cf/ostype/ptx2.m4 cf/ostype/riscos4.5.m4 \ cf/ostype/sco-uw-2.1.m4 cf/ostype/sco3.2.m4 cf/ostype/sinix.m4 \ cf/ostype/solaris11.m4 cf/ostype/solaris2.m4 \ cf/ostype/solaris2.ml.m4 cf/ostype/solaris2.pre5.m4 \ cf/ostype/solaris8.m4 cf/ostype/sunos3.5.m4 \ cf/ostype/sunos4.1.m4 cf/ostype/ultrix4.m4 cf/ostype/unicos.m4 \ cf/ostype/unicosmk.m4 cf/ostype/unicosmp.m4 \ cf/ostype/unixware7.m4 SUBST_FILES.cf-paths+= ${f} .endfor SUBST_SED.cf-paths+= -e "s|/var/spool|${VARBASE}/spool|g" SUBST_SED.cf-paths+= -e "s|/var/run|${VARBASE}/run|g" SUBST_SED.cf-paths+= -e "s|/usr/libexec|${PREFIX}/libexec/sendmail|g" SUBST_SED.cf-paths+= -e "s|/usr/lib|${PREFIX}/libexec/sendmail|g" SUBST_NOOP_OK.cf-paths= yes # some files contain only /var REPLACE_PERL= contrib/socketmapClient.pl contrib/socketmapServer.pl AUTO_MKDIRS= yes post-patch: make-sendmail-siteconfig .if !empty(PKG_OPTIONS:Mtcpwrappers) cat ${FILESDIR}/site.config.m4-tcpwrappers >>${SITECONFIG} .endif .if !empty(PKG_OPTIONS:Mldap) cat ${FILESDIR}/site.config.m4-ldap >>${SITECONFIG} .endif .if !empty(PKG_OPTIONS:Mdb2) cat ${FILESDIR}/site.config.m4-db2 >>${SITECONFIG} .endif .if !empty(PKG_OPTIONS:Mdb4) cat ${FILESDIR}/site.config.m4-db4 >>${SITECONFIG} .endif .if !empty(PKG_OPTIONS:Mtls) cat ${FILESDIR}/site.config.m4-starttls >>${SITECONFIG} .endif .if !empty(PKG_OPTIONS:Msendmail-ffr-tls) cat ${FILESDIR}/site.config.m4-ffr_tls >>${SITECONFIG} .endif .if !empty(PKG_OPTIONS:Msasl) cat ${FILESDIR}/site.config.m4-sasl2 >>${SITECONFIG} .endif .if !empty(PKG_OPTIONS:Msendmail-ffr-badrcptshutdown) cat ${FILESDIR}/site.config.m4-ffr_badrcptshutdown >>${SITECONFIG} .endif .if !empty(PKG_OPTIONS:Mblocklist) cat ${FILESDIR}/site.config.m4-blocklistd >>${SITECONFIG} .endif .if !empty(PKG_OPTIONS:Msmtputf8) cat ${FILESDIR}/site.config.m4-smtputf8 >>${SITECONFIG} .endif post-extract: cp ${FILESDIR}/mailer.conf ${WRKDIR}/mailer.conf do-build: (cd ${WRKSRC} && env ${MAKE_ENV} ./Build) (cd ${WRKSRC}/cf/cf && env ${MAKE_ENV} ./Build) post-build: cp ${PKGDIR}/MESSAGE ${MESSAGE_SRC} cp ${PKGDIR}/PLIST ${WRKDIR}/.PLIST_SRC post-install: (cd ${WRKSRC}/mail.local && env ${INSTALL_ENV} ${MAKE_ENV} ./Build force-install) ${INSTALL_DATA} ${WRKDIR}/mailer.conf \ ${DESTDIR}${PREFIX}/share/examples/sendmail/ cd ${WRKSRC}/cf && pax -rw -pp -pm -s',^.*\.orig$$,,' . ${DESTDIR}${PREFIX}/share/sendmail cp ${FILESDIR}/netbsd-proto.mc ${DESTDIR}${PREFIX}/share/sendmail/cf ${INSTALL_DATA} ${WRKSRC}/obj.`${UNAME} -srm | tr \ . | tr \/ - | sed s/sun4./sun4/`/libsm/libsm.a \ ${DESTDIR}${PREFIX}/lib ${INSTALL_DATA} \ ${WRKSRC}/obj.`${UNAME} -srm | tr \ . | tr \/ - | sed s/sun4./sun4/`/libsmutil/libsmutil.a \ ${DESTDIR}${PREFIX}/lib ${INSTALL_SCRIPT} ${WRKSRC}/contrib/socketmap*.pl \ ${DESTDIR}${PREFIX}/share/examples/sendmail/ ${INSTALL_DATA} ${WRKSRC}/RELEASE_NOTES ${DESTDIR}${PREFIX}/share/doc/sendmail ${INSTALL_DATA} ${WRKSRC}/cf/README ${DESTDIR}${PREFIX}/share/doc/sendmail ${INSTALL_DATA} ${WRKSRC}/sendmail/SECURITY ${DESTDIR}${PREFIX}/share/doc/sendmail ${INSTALL_DATA} ${WRKSRC}/doc/op/op.me ${DESTDIR}${PREFIX}/share/doc/sendmail ${INSTALL_DATA} ${WRKSRC}/doc/op/op.ps ${DESTDIR}${PREFIX}/share/doc/sendmail .include "../../mk/bsd.pkg.mk" # has to be below include for bsd.pkg.mk, else substition fails OBJDIR!= ${ECHO} obj.`${UNAME} -srm | tr \ . | tr \/ -` @ 1.152 log @*: recursive bump for icu 78.1 @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.151 2025/04/17 21:51:30 wiz Exp $ a3 1 PKGREVISION= 9 d111 2 a112 2 .if !empty(PKG_OPTIONS:Mblacklist) cat ${FILESDIR}/site.config.m4-blacklistd >>${SITECONFIG} @ 1.151 log @*: recursive bump for icu 77 and libxml2 2.14 @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.150 2025/03/03 07:05:10 jnemeth Exp $ d4 1 a4 1 PKGREVISION= 8 @ 1.150 log @Enable DANE by default when tls option is enabled. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.149 2024/11/14 22:20:39 wiz Exp $ d4 1 a4 1 PKGREVISION= 7 @ 1.149 log @*: recursive bump for icu 76 shlib major version bump @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.148 2024/11/01 12:53:24 wiz Exp $ d4 1 a4 1 PKGREVISION= 6 @ 1.148 log @*: revbump for icu downgrade @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.147 2024/11/01 00:52:37 wiz Exp $ d4 1 a4 1 PKGREVISION= 5 @ 1.147 log @*: recursive bump for icu 76.1 shlib bump @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.146 2024/05/29 16:33:24 adam Exp $ d4 1 a4 1 PKGREVISION= 4 @ 1.146 log @revbump after icu and protobuf updates @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.145 2024/03/18 02:46:47 jnemeth Exp $ d4 1 a4 1 PKGREVISION= 3 @ 1.145 log @Add rcvars for sendmail_queuetime/smmsp_queuetime to set the queue time for sendmail/smmsp. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.144 2024/02/19 04:12:36 jnemeth Exp $ d4 1 a4 1 PKGREVISION= 2 @ 1.144 log @PR/57936 -- fix build problem on netbsd-9 @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.143 2024/01/15 04:43:22 jnemeth Exp $ d4 1 a4 1 PKGREVISION= 1 @ 1.143 log @Update to sendmail 8.17.2: some feature updates and a bunch of bug fixes. pkgsrc changes: - remove some backported patches now included upstream - rename blacklistd option to blacklist to match defaults/mk.conf - accept old opiton blacklistd - add new smtputf8 option to enable SMTP SMTPUTF8 protocol option SENDMAIL RELEASE NOTES This listing shows the version of the sendmail binary, the version of the sendmail configuration files, the date of release, and a summary of the changes in that release. 8.17.2/8.17.2 2023/06/03 Make sure DANE checks (if enabled) are performed even if CACertPath or CACertFile are not set or unusable. Note: if the code to set up TLS in the client fails, then {verify} will be set to TEMP but DANE requirements will be ignored, i.e., by default mail will be sent without STARTTLS. This can be changed via a LOCAL_TLS_SERVER ruleset. Pass server name to clt_features ruleset instead of client name to account for limitations in macro availability described below in CONFIG section. This may break custom clt_features rulesets which expect to receive the client name as input. Fix a regression introduced in 8.17.1: aliases file which contain continuation lines caused parsing errors. Add an FFR (for future release) compile time option _FFR_LOG_STAGE to log the protocol stage as stage= for some errors during delivery attempts to make troubleshooting simpler. This new logging may be enabled in a future release. When EAI is enabled, milters also got the arguments of MAIL/RCPT commands in argv[0] for xxfi_envfrom()/xxfi_envrcpt() callbacks instead of just the mail address. Problem reported by Dilyan Palauzo. When EAI is enabled, mailq prints UTF-8 addresses as such if SMTPUTF8 was used. When EAI is enabled, the $h macro is now in the correct format. Previously this could cause wrong values for relay= in log entries and the mailer argument vector. When the compile time option USE_EAI is enabled, vacation could fail to respond when it should. Problem reported by Alex Hautequest. When EAI was enabled, header truncation might not have been logged even when it happened. Problem reported by Werner Wiethege. Handle a possible change in an upcoming release of Cyrus-SASL (2.1.28) by changing the definition of an internal flag. Patch from Dilyan Palauzo. Avoid an assertion failure when an smtps connection is made to the server and a milter is unavailable. Problem reported by Dilyan Palauzo. Fixed some spelling errors in documentation and comments, based on a codespell report by Jens Schleusener of fossies.org. The result of try_tls is now logged using status= instead of reject=. If tls_rcpt rejected the delivery of a recipient then a bogus dsn= entry might have been logged under some circumstances. If a server replied with 421 to a RCPT command then a bogus reply= might have been logged. When quoting the value for ${currHeader} avoid causing a syntax error (Unbalanced '"') when truncating a header value which is too long. Problem reported by Werner Wiethege. Reduce the performance impact of a change introduced in 8.12.9: the default for MaxMimeHeaderLength was set to 2048/1024. Problem reported by Tabata Shintaro of Internet Initiative Japan Inc. CONFIG: The default clt_features ruleset tried to access ${server_name} and ${server_addr} which are not set when the ruleset is invoked. Only the server name is available which is passed as an argument. CONFIG: Properly quote host variable to prevent cf build breakage when a hostname contains 'dnl'. Problem reported by Maxim Shalomikhin of Kaspersky. DEVTOOLS: Add configure.sh support for BSD's mandoc as an alternative man page formatting tool. DOC: Document that USAGE is a possible value for {verify}. LIBMILTER: The macros for the EOH and EOM callbacks are sent in reverse order which means accessing macros in the EOM callback got the macro for the EOH callback. Store those macros in the expected order in libmilter. Note: this does not affect sendmail because the macros for both callbacks are the same because the message is sent to libmilter after it is completely read by sendmail. Fix and problem report from David Buergin. Portability: Make use of IN_LOOPBACK, if defined, to determine if using a loopback address. Patch from Mike Karels of FreeBSD. On Linux use gethostbyname2(3) if glibc 2.19 or newer is used to avoid potential problems with IPv6 lookups. Patch from Werner Wiethege. Add support for Darwin 21 and Darwin 22. Solaris 12 has been renamed to Solaris 11.4, hence adapt a condition for sigwait(2) taking one argument. Patch from John Beck. New Files: devtools/M4/UNIX/sharedlib.m4 devtools/OS/Darwin.21.x devtools/OS/Darwin.22.x sendmail/sched.c libsm/notify.h 8.17.1/8.17.1 2021/08/17 Deprecation notice: due to compatibility problems with some third party code, we plan to finally switch from K&R to ANSI C. If you are using sendmail on a system which does not have a compiler for ANSI C contact us with details as soon as possible so we can determine how to proceed. Experimental support for SMTPUTF8 (EAI, see RFC 6530-6533) is available when using the compile time option USE_EAI (see also devtools/Site/site.config.m4.sample for other required settings) and the cf option SMTPUTF8. If a mail submission via the command line requires the use of SMTPUTF8, e.g., because a header uses UTF-8 encoding, but the addresses on the command line are all ASCII, then the new option -U must be used, and the cf option SMTPUTF8 must be set in submit.cf. Please test and provide feedback. Experimental support for SMTP MTA Strict Transport Security (MTA-STS, see RFC 8461) is available when using - the compile time option _FFR_MTA_STS (which requires STARTTLS, MAP_REGEX, SOCKETMAP, and _FFR_TLS_ALTNAMES), - FEATURE(sts), which implicitly sets the cf option StrictTransportSecurity, - postfix-mta-sts-resolver, see https://github.com/Snawoot/postfix-mta-sts-resolver.git New ruleset check_other which is called for all unknown SMTP commands in the server and for commands which do not have specific rulesets, e.g., NOOP and VERB. New ruleset clt_features which can be used to select features in the SMTP client per server. Currently only two flags are available: D/M to disable DANE/MTA-STS, respectively. New compile time option NO_EOH_FIELDS to disable the special meaning of the headers Message: and Text: to denote the end of the message header. Avoid leaking session macros for an envelope between delivery attempts to different servers. This problem could have affected check_compat. Avoid leaking actual SMTP replies between delivery attempts to different servers which could cause bogus logging of reply= entries. Change default SMTP reply code for STARTTLS related problems from 403 to 454 to better match the RFCs. Fix a theoretical buffer overflow when encountering an unknown/unsupported socket address family on an operating system where sa_data is larger than 30 (the standard is 14). Based on patch by Toomas Soome. Several potential memory leaks and other similar problems (mostly in error handling code) have been fixed. Problems reported by Tomas Korbar of RedHat. Previously the commands GET, POST, CONNECT, or USER terminate a connection immediately only if sent as first command. Now this is also done if any of these is sent directly after STARTTLS or if the 'h' option is set via srv_features. CDB map locking has been changed so a sendmail process which does have a CDB map open does not block an in-place update of the map by makemap. The simple workaround for that problem in earlier versions is to create the map under a different name and then move it into place. On some systems the rejection of a RCPT by a milter could silently fail. CONFIG: New FEATURE(`check_other') to provide a default check_other ruleset. CONFIG: FEATURE(`tls_failures') is deprecated and will be removed in future versions because it has a fundamental problem: it is message oriented but STARTTLS is session oriented. For example, having multiple RCPTs in one envelope for different destinations, with different temporary errors, does not work properly, as the persistent macro applies to all RCPTs and hence implicitly to all destinations (servers). The option TLSFallbacktoClear should be used if needed. CONTRIB: AuthRealm.p0 has been modified for 8.16.1 by Anne Bennett. CONTRIB: Added cidrexpand -O option for suppressing duplicates from a CIDR expansion that overlaps a later entry and -S option for skipping comments exactly like makemap does. MAIL.LOCAL: Enhance some error messages to simplify troubleshooting. Portability: Add support for Darwin 19 & 20. Use proper FreeBSD version define to allow for cross compiling. Fix from Brooks Davis of the FreeBSD project. NOTE: File locking using fcntl() does not interoperate with Berkeley DB 5.x (and probably later). Use CDB, flock() (-DHASFLOCK), or an earlier Berkeley DB version. Problem noted by Harald Hannelius. New Files: cf/feature/check_other.m4 cf/feature/sts.m4 devtools/OS/Darwin.19.x devtools/OS/Darwin.20.x include/sm/ixlen.h libsm/ilenx.c libsm/lowercase.c libsm/strcaseeq.c libsm/t-ixlen.c libsm/t-ixlen.sh libsm/t-streq.c libsm/t-streq.sh libsm/utf8_valid.c libsm/uxtext_unquote.c libsm/xleni.c libsmutil/t-lockfile.c libsmutil/t-lockfile-0.sh libsmutil/t-maplock-0.sh @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.142 2023/10/24 22:09:50 wiz Exp $ d4 1 a4 1 #PKGREVISION= 3 @ 1.142 log @*: bump for openssl 3 @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.141 2022/05/10 13:46:49 sborrill Exp $ d4 1 a4 1 PKGREVISION= 3 d38 2 a39 1 SUBST_CLASSES+= paths cf-paths d112 1 a112 1 .if !empty(PKG_OPTIONS:Mblacklistd) d115 3 @ 1.141 log @sendmail: fix SMTP AUTH Pull in SMTP AUTH fix from 8.17.1.9. Bump PKGREVISION @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.140 2021/11/09 22:02:36 jnemeth Exp $ d4 1 a4 1 PKGREVISION= 2 @ 1.140 log @make sure that mail.local gets installed with appropriate permissions @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.139 2021/07/04 07:57:13 jnemeth Exp $ d4 1 a4 1 PKGREVISION= 1 @ 1.140.4.1 log @Pullup ticket #6634 - requested by sborrill mail/sendmail: bugfix for SMTP AUTH Revisions pulled up: - mail/sendmail/Makefile 1.141 - mail/sendmail/distinfo 1.68 - mail/sendmail/patches/patch-bo 1.5 --- Module Name: pkgsrc Committed By: sborrill Date: Tue May 10 13:46:49 UTC 2022 Modified Files: pkgsrc/mail/sendmail: Makefile distinfo pkgsrc/mail/sendmail/patches: patch-bo Log Message: sendmail: fix SMTP AUTH Pull in SMTP AUTH fix from 8.17.1.9. Bump PKGREVISION @ text @d1 1 a1 1 # $NetBSD$ d4 1 a4 1 PKGREVISION= 2 @ 1.139 log @comms/sendmail: update to 8.16.1 8.16.1/8.16.1 2020/07/05 SECURITY: If sendmail tried to reuse an SMTP session which had already been closed by the server, then the connection cache could have invalid information about the session. One possible consequence was that STARTTLS was not used even if offered. This problem has been fixed by clearing out all relevant status information when a closed session is encountered. OpenSSL versions before 0.9.8 are no longer supported. OpenSSL version 1.1.0 and 1.1.1 are supported. Initial support for DANE (see RFC 7672 et.al.) is available if the compile time option DANE is set. Only TLSA RR 3-1-x is currently implemented. New options SSLEngine and SSLEnginePath to support OpenSSL engines. Note: this feature has so far only been tested with the "chil" engine; please report problems with other engines if you encounter any. New option CRLPath to specify a directory which contains hashes pointing to certificate revocations files. Based on patch from Al Smith. New rulesets tls_srv_features and tls_clt_features which can return a (semicolon separated) list of TLS related options, e.g., CipherList, CertFile, KeyFile, see doc/op/op.me for details. To automatically handle TLS interoperability problems for outgoing mail, sendmail can now immediately try a connection again without STARTTLS after a TLS handshake failure. This can be configured globally via the option TLSFallbacktoClear or per session via the 'C' flag of tls_clt_features. This also adds the new value "CLEAR" for the macro {verify}: STARTTLS has been disabled internally for a clear text delivery attempt. Apply Timeout.starttls also to the server waiting for the TLS handshake to begin. Based on patch from Simon Hradecky. New compile time option TLS_EC to enable the use of elliptic curve cryptography in STARTTLS (previously available as _FFR_TLS_EC). Handle MIME boundaries specified in headers which contain CRLF. Fix detection of loopback net (it was broken when compiled with NETINET6) and only set the macros {if_addr_out} and {if_family_out} if the interface of the outgoing connection does not belong to the loopback net. Fix logic to enable a milter to delete a recipient in DeliveryMode=interactive even if it might be subject to alias expansion. Log name of a milter making changes (this was missing for some functions). Log the actual reply of a server when an SMTP delivery problem occurs in a "reply=" field if possible. Log user= for failed AUTH attempts if possible. Based on patch from Packet Hack, Jim Hranicky, Kevin A. McGrail, and Joe Quinn. Add CDB as map type. Note: CDB is a "Constant DataBase", i.e., no changes can be made after it is created, hence it does not work with vacation(1) nor editmap(8) (except for query mode). Fix some memory leaks (mostly in error cases) and properly handle copied varargs in sm_io_vfprintf(). The issues were found using Coverity Scan and reported (including patches) by Ondřej Lysoněk of Red Hat. Do not override ServerSSLOptions and ClientSSLOptions when they are specified on the command line. Based on patch from Hiroki Sato. Add RFC7505 Null MX support for domains that declare they do not accept mail. New compile time option LDAP_NETWORK_TIMEOUT which is set automatically when LDAPMAP is used and LDAP_OPT_NETWORK_TIMEOUT is available to enable the new -c option for LDAP maps to specify the network timeout. CONFIG: New FEATURE(`tls_session_features') to enable standard rules for tls_srv_features and tls_clt_features; for details see cf/README. CONFIG: New options confSSL_ENGINE and confSSL_ENGINE_PATH for SSLEngine and SSLEnginePath, respectively. CONFIG: New options confDANE to enable DANE support. CONFIG: New option confTLS_FALLBACK_TO_CLEAR for TLSFallbacktoClear. CONFIG: New extension CITag: for TLS restrictions, see cf/README for details. CONFIG: FEATURE(`blacklist_recipients') renamed to FEATURE(`blocklist_recipients'). CONTRIB: cidrexpand updated to support IPv6 CIDR ranges and to canonicalize IPv6 addresses; if cidrexpand is used with IPv6 addresses then UseCompressedIPv6Addresses must be disabled. DOC: The dns map can return multiple values in a single result if the -z option is used. DOC: Note to set MustQuoteChars=. due to DKIM signatures. LIBMILTER: Fix typo in a macro. Patch from Ignacio Goyret of Alcatel-Lucent. LIBMILTER: Fix reference in xxfi_negotiate documentation. Patch from Sven Neuhaus. LIBMILTER: Fix function name in smfi_addrcpt_par documentation. Patch from G.W. Haywood. LIBMILTER: Fix a potential memory leak in smfi_setsymlist(). Patch from Martin Svec. MAKEMAP: New map type "implicit" refers to the first available type, i.e., it depends on the compile time options NEWDB, DBM, and CDB. This can be used in conjunction with the "implicit" map type in sendmail.cf. Note: makemap, libsmdb, and sendmail must be compiled with the same options (and library versions of course). Portability: Add support for Darwin 14-18 (Mac OS X 10.x). New option HAS_GETHOSTBYNAME2: set if your system supports gethostbyname2(2). Set SM_CONF_SEM=2 for FreeBSD 12 and later due to changes in sys/sem.h On Linux set MAXHOSTNAMELEN (the maximum length of a FQHN) to 256 if it is less than that value. Added Files: cf/feature/blocklist_recipients.m4 cf/feature/tls_failures.m4 devtools/OS/Darwin.14.x devtools/OS/Darwin.15.x devtools/OS/Darwin.16.x libsmdb/smcdb.c sendmail/ratectrl.h @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.138 2020/05/16 15:36:24 rillig Exp $ d4 1 a4 1 #PKGREVISION= 9 d32 1 @ 1.138 log @mail/sendmail: fix build in SUBST_NOOP_OK=no mode @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.137 2020/04/24 14:33:08 manu Exp $ d4 1 a4 1 PKGREVISION= 9 d58 5 a62 4 cf/ostype/amdahl-uts.m4 cf/ostype/darwin.m4 cf/ostype/dgux.m4 \ cf/ostype/domainos.m4 cf/ostype/dragonfly.m4 \ cf/ostype/dynix3.2.m4 cf/ostype/freebsd4.m4 \ cf/ostype/freebsd5.m4 cf/ostype/freebsd6.m4 cf/ostype/hpux10.m4 \ a78 1 SUBST_SED.cf-paths+= -e "s|/system/volatile|${VARBASE}/run|g" @ 1.137 log @Bug fix, submitted upstream Add missing curly brackets that caused res_ninit() to be called with non-zeroed state structure. In NetBSD, res_ninit() detects the mistake and quickly calls res_ndestroy(), which will close file descriptors based on the random data provided in the state structure. The result at mine is sendmail going mute after the MAIL FROM command. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.136 2020/04/12 09:11:41 jnemeth Exp $ d79 1 @ 1.136 log @Allow the UseBlacklist configuration option, but ignore it, on systems that don't have blacklistd. This prevents configuration errors as the default config files have: O UseBlacklist=false @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.135 2020/01/18 21:49:54 jperkin Exp $ d4 1 a4 1 PKGREVISION= 8 @ 1.135 log @*: Recursive revision bump for openssl 1.1.1. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.134 2019/12/03 18:51:02 bouyer Exp $ d4 1 a4 1 PKGREVISION= 7 @ 1.134 log @To resole hostname to IPv6 addresses gethostbyname2() is needed. Fix spurious (may be forged) logs when receiving via IPv6 socket, and fix sending to IPv6-enabled relay. Bump PKGREVISION (no revision bump for libmilter, it's not affected) @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.133 2019/07/15 07:05:02 jnemeth Exp $ d4 1 a4 1 PKGREVISION= 6 @ 1.133 log @Woops, didn't properly comment out a line that was disabling the use of res_n* functions. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.132 2019/07/15 04:32:49 jnemeth Exp $ d4 1 a4 1 PKGREVISION= 5 @ 1.132 log @Add support for working with blacklistd. These patches were originally created for FreeBSD and were ported to pkgsrc by Hauke Fath with some cleanup by myself. These patches add a new "UseBlacklist" option to sendmail to have it send authentication failure notices to blacklistd. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.131 2019/07/15 02:06:42 jnemeth Exp $ d4 1 a4 1 PKGREVISION= 4 @ 1.131 log @Add sendmail-ffr-badrcptshutdown option. This option enables the sendmail options BadRcptShutdown and BadRcptShutdownGood to be used. "ffr" stands for For Future Release, which means it is a beta test feature that may show up in a future release of sendmail. The sendmail-ffr-badrcptshutdown option is disabled by default so no change to binary packages, thus not bumping PKGREVISION. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.130 2018/12/05 12:10:21 bsiegert Exp $ d4 1 a4 1 PKGREVISION= 3 d109 3 @ 1.130 log @Fix sendmail with OpenSSL 1.1. "Lightly edited" patch from Debian via PR pkg/53401. Bump revision. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.129 2016/12/16 16:07:29 hans Exp $ d106 3 @ 1.129 log @Update SMF manifest and add methods based on whats in illumos. This will create two sendmail service instances, :mta and :msp, to start the two sendmail instances that are usually required. The :mta instance optionally depends on spamassassin and spamass-milter. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.128 2016/03/05 11:28:51 jperkin Exp $ d4 1 a4 1 PKGREVISION= 2 @ 1.128 log @Bump PKGREVISION for security/openssl ABI bump. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.127 2014/12/06 23:22:20 jnemeth Exp $ d4 1 a4 1 PKGREVISION= 1 d21 1 @ 1.127 log @Update sendmail to 8.15.1: this is mostly a feature/bugfix release. Note that there was an incompatible config change for IPv6 users. See the MESSAGE file for details. pkgsrc change: delete a couple of patches that have been upstreamed Proofpoint, Inc., and the Sendmail Consortium announce the availability of sendmail 8.15.1. This release: o offers more TLS related features, o does not ignore temporary map lookup failures during header rewriting, o uses uncompressed IPv6 addresses by default, which is an incompatible change that requires to update IPv6 related configuration data. as well as many other enhancements. For details see the release notes below. SENDMAIL RELEASE NOTES This listing shows the version of the sendmail binary, the version of the sendmail configuration files, the date of release, and a summary of the changes in that release. 8.15.1/8.15.1 2014/12/06 SECURITY: Properly set the close-on-exec flag for file descriptors (except stdin, stdout, and stderr) before executing mailers. If header rewriting fails due to a temporary map lookup failure, queue the mail for later retry instead of sending it without rewriting the header. Note: this is done while the mail is being sent and hence the transaction is aborted, which only works for SMTP/LMTP mailers hence the handling of temporary map failures is suppressed for other mailers. SMTP/LMTP servers may complain about aborted transactions when this problem occurs. See also "DNS Lookups" in sendmail/TUNING. Incompatible Change: Use uncompressed IPv6 addresses by default, i.e., they will not contain "::". For example, instead of ::1 it will be 0:0:0:0:0:0:0:1. This permits a zero subnet to have a more specific match, such as different map entries for IPv6:0:0 vs IPv6:0. This change requires that configuration data (including maps, files, classes, custom ruleset, etc) must use the same format, so make certain such configuration data is updated before using 8.15. As a very simple check search for patterns like 'IPv6:[0-9a-fA-F:]*::' and 'IPv6::'. If necessary, the prior format can be retained by compiling with: APPENDDEF(`conf_sendmail_ENVDEF', `-DIPV6_FULL=0') in your devtools/Site/site.config.m4 file. If debugging is turned on (-d0.14) also print the OpenSSL versions, both build time and run time (provided STARTTLS is compiled in). If a connection to the MTA is dropped by the client before its hostname can be validated, treat it as "may be forged", so that the unvalidated hostname is not passed to a milter in xxfi_connect(). Add a timeout for communication with socket map servers which can be specified using the -d option. Add a compile time option HESIOD_ALLOW_NUMERIC_LOGIN to allow numeric logins even if HESIOD is enabled. The new option CertFingerprintAlgorithm specifies the finger- print algorithm (digest) to use for the presented cert. If the option is not set, md5 is used and the macro {cert_md5} contains the cert fingerprint. However, if the option is set, the specified algorithm (e.g., sha1) is used and the macro {cert_fp} contains the cert fingerprint. That is, as long as the option is not set, the behaviour does not change, but otherwise, {cert_md5} is superseded by {cert_fp} even if you set CertFingerprintAlgorithm to md5. The options ServerSSLOptions and ClientSSLOptions can be used to set SSL options for the server and client side respectively. See SSL_CTX_set_options(3) for a list. Note: this change turns on SSL_OP_NO_SSLv2 and SSL_OP_NO_TICKET for the client. See doc/op/op.me for details. A new map type "arpa" is available to reverse an IP (IPv4 or IPv6) address. It returns the string for the PTR lookup, but without trailing {ip6,in-addr}.arpa. New operation mode 'C' just checks the configuration file, e.g., sendmail -C new.cf -bC will perform a basic syntax/consistency check of new.cf. The mailer flag 'I' is deprecated and will be removed in a future version. Allow local (not just TCP) socket connections to the server, e.g., O DaemonPortOptions=Family=local, Addr=/var/mta/server.sock can be used. If the new option MaxQueueAge is set to a value greater than zero, entries in the queue will be retried during a queue run only if the individual retry time has been reached which is doubled for each attempt. The maximum retry time is limited by the specified value. New DontBlameSendmail option GroupReadableDefaultAuthInfoFile to relax requirement for DefaultAuthInfo file. Reset timeout after receiving a message to appropriate value if STARTTLS is in use. Based on patch by Kelsey Cummings of Sonic.net. Report correct error messages from the LDAP library for a range of small negative return values covering those used by OpenLDAP. Fix compilation with Berkeley DB 5.0 and 6.0. Patch from Allan E Johannesen of Worcester Polytechnic Institute. CONFIG: FEATURE(`nopercenthack') takes one parameter: reject or nospecial which describes whether to disallow "%" in the local part of an address. DEVTOOLS: Fix regression in auto-detection of libraries when only shared libraries are available. Problem reported by Bryan Costales. LIBMILTER: Mark communication socket as close-on-exec in case a user's filter starts other applications. Based on patch from Paul Howarth. Portability: SunOS 5.12 has changed the API for sigwait(2) to conform with XPG7. Based on patch from Roger Faulkner of Oracle. Deleted Files: libsm/path.c @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.126 2014/09/19 21:24:05 jnemeth Exp $ d4 1 @ 1.126 log @build fix for clang @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.125 2014/06/21 18:39:27 jnemeth Exp $ a3 1 PKGREVISION= 4 @ 1.125 log @Bah! Don't bother installing rmail as it comes with the UUCP package @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.124 2014/06/20 16:26:55 jnemeth Exp $ d4 1 a4 1 PKGREVISION= 3 @ 1.124 log @Update to sendmail 8.14.9nb2: this is a pkgsrc bugfix update. This should be the last update during the freeze. PR/48566 - Emmanuel Dreyfus -- typo in patch-aw leading to build failure PR/48913 - Matthias Scheler -- libmilter fails on unprivileged builds @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.123 2014/06/20 05:24:32 jnemeth Exp $ d4 1 a4 1 PKGREVISION= 2 a118 1 (cd ${WRKSRC}/rmail && env ${INSTALL_ENV} ${MAKE_ENV} ./Build force-install) @ 1.123 log @Update to sendmail 8.14.9nb1: this is a pkgsrc bugfix update - remove some HTML cruft from netbsd-proto.mc - stop trying to set file ownership and group during stage-install - initialize sm_res earlier and test before calling res_ninit() - clear SSL_OP_TLSEXT_PADDING by defualt to fix interoperability issues - eliminate stray call to res_search() - verified with nm that all deprecated resolver functions have been eradicated The above should address the folling PRs: - PR/47207 - Richard Palo -- attempt to set ownership when unprivileged - PR/48566 - Emmanuel Dreyfus -- problem with TLS timeouts - PR/48913 - Matthias Scheler -- attempt to set ownership when unprivileged @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.122 2014/06/15 21:04:30 jnemeth Exp $ d4 1 a4 1 PKGREVISION= 1 @ 1.122 log @Rename ffr-tls option to sendmail-ffr-tls as requested by wiz@@. Ride version change done a few minutes ago. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.121 2014/06/15 20:48:49 jnemeth Exp $ d4 1 @ 1.121 log @Update to sendmail 8.14.9: this fixes a minor potential security issue pkgsrc changes: - consolidate several patches into site.config.m4 - pkgsrc LDFLAGS should always be used - don't bother specifying file owner/group anywhere except in Makefile - create include/sm/os/sm_os_netbsd.h to fix warnings and OS specific stuff - install mail.local and rmail - convert to use res_n* functions - allows for linking against threaded libraries - add a TODO file - PR/35249 - Loren M. Lang - can't find libraries on Linux, this should be fixed by using pkgsrc LDFLAGS - PR/46694 - Makoto Fujiwara - bring back netbsd-proto.mc from when sendmail was part of the base system - PR/47207 - Richard Palo - let pkgsrc infrastructure handle file ownership and group - PR/48566 - Emmanuel Dreyfus - always set _FFR_USE_GETPWNAM_ERRNO on NetBSD - roll ffr_tls_1 and the suggested ffr_tls_ec into one new ffr_tls option - not enabled by default because it changes behaviour 8.14.9/8.14.9 2014/05/21 SECURITY: Properly set the close-on-exec flag for file descriptors (except stdin, stdout, and stderr) before executing mailers. Fix a misformed comment in conf.c: "/*" within comment which may cause a compilation error on some systems. Problem reported by John Beck of Oracle. DEVTOOLS: Fix regression in auto-detection of libraries when only shared libraries are available. Problem reported by Bryan Costales. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.120 2014/05/10 14:38:26 richard Exp $ d98 1 a98 1 .if !empty(PKG_OPTIONS:Mffr_tls) @ 1.120 log @Fix INSTALLATION_DIRS to only append allowing SunOS smf support to work adding -lresolv to prevent linker unresolved symbols in site.config.m4 for SunOS as well. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.119 2014/02/12 23:18:09 tron Exp $ a3 1 PKGREVISION= 1 d35 2 a36 1 SUBST_CLASSES+= paths d46 32 d80 1 a80 5 INSTALLATION_DIRS+= bin lib sbin INSTALLATION_DIRS+= ${PKGMANDIR}/man1 ${PKGMANDIR}/man5 ${PKGMANDIR}/man8 INSTALLATION_DIRS+= ${PREFIX}/libexec/sendmail ${SMRSH_CMDDIR} INSTALLATION_DIRS+= ${PREFIX}/share/examples/sendmail INSTALLATION_DIRS+= ${PREFIX}/share/sendmail ${PREFIX}/share/doc/sendmail d98 2 a99 2 .if !empty(PKG_OPTIONS:Mffr_tls_1) cat ${FILESDIR}/site.config.m4-ffr_tls_1 >>${SITECONFIG} d110 1 d117 3 d123 1 @ 1.119 log @Recursive PKGREVISION bump for OpenSSL API version bump. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.118 2014/02/09 02:02:46 jnemeth Exp $ d48 1 a48 1 INSTALLATION_DIRS= bin lib sbin @ 1.118 log @Update to sendmail 8.14.8: this release contains some bug fixes plus some minor feature additions. 8.14.8/8.14.8 2014/01/26 Properly initialize all OpenSSL algorithms for versions before OpenSSL 0.9.8o. Without this SHA2 algorithms may not work properly, causing for example failures for certs that use sha256WithRSAEncryption as signature algorithm. When looking up hostnames, ensure only to return those records for the requested family (AF_INET or AF_INET6). On system that have NEEDSGETIPNODE and NETINET6 this may have failed and cause delivery problems. Problem noted by Kees Cook. A new mailer flag '!' is available to suppress an MH hack that drops an explicit From: header if it is the same as what sendmail would generate. Add an FFR (for future release) to use uncompressed IPv6 addresses, i.e., they will not contain "::". For example, instead of ::1 it will be 0:0:0:0:0:0:0:1. This means that configuration data (including maps, files, classes, custom ruleset, etc) have to use the same format. This will be turned on in 8.15. It can be enabled in 8.14 by compiling with: APPENDDEF(`conf_sendmail_ENVDEF', `-D_FFR_IPV6_FULL') in your devtools/Site/site.config.m4 file. Add an additional case for the WorkAroundBrokenAAAA check when dealing with broken nameservers by ignoring SERVFAIL errors returned on T_AAAA (IPv6) lookups at delivery time. Problem noted by Pavel Timofeev of OCS. If available, pass LOGIN_SETCPUMASK and LOGIN_SETLOGINCLASS to setusercontext() on deliveries as a different user. Patch from Edward Tomasz Napierala from FreeBSD. Avoid compiler warnings from a change in Cyrus-SASL 2.1.25. Patch from Hajimu UMEMOTO from FreeBSD. Add support for DHParameters 2048-bit primes. CONFIG: Accept IPv6 literals when evaluating the HELO/EHLO argument in FEATURE(`block_bad_helo'). Suggested by Andrey Chernov. LIBSMDB: Add a missing check for malloc() in libsmdb/smndbm.c. Patch from Bill Parker. LIBSMDB: Fix minor memory leaks in libsmdb/ if allocations fail. Patch from John Beck of Oracle. Portability: Add support for Darwin 12.x and 13.x (Mac OS X 10.8 and 10.9). On Linux use socklen_t as the type for the 3rd argument for getsockname/getpeername if the glibc version is at least 2.1. Added Files: devtools/OS/Darwin.12.x devtools/OS/Darwin.13.x @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.117 2013/09/19 10:54:05 manu Exp $ d4 1 @ 1.117 log @Add a ffr_tls_1 option to sendmail, which enable the O CipherList option for sendmail.cf. it is required in order to remove weak ciphers, and enforce Forward Secrecy on modern MUA Usage example: O CipherList=DH@@STRENGTH:HIGH:!MD5:!DES:!aNULL:!eNULL @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.116 2013/07/12 10:44:58 jperkin Exp $ a3 1 PKGREVISION= 2 @ 1.116 log @Bump PKGREVISION of all packages which create users, to pick up change of sysutils/user_* packages. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.115 2013/05/05 02:36:20 jnemeth Exp $ d4 1 a4 1 PKGREVISION= 1 d70 3 @ 1.115 log @Update to sendmail 8.14.7: this is a bug fix release. 8.14.7/8.14.7 2013/04/21 Drop support for IPv4-mapped IPv6 addresses to prevent the MTA from using a mapped address over a legitimate IPv6 address and to enforce the proper semantics over the IPv6 connection. Problem noted by Ulrich Sporlein. Fix a regression introduced in 8.14.6: the wrong list of macros was sent to a milter in the EHLO stage. Problem found by Fabrice Bellet, reported via RedHat (Jaroslav Skarvada). Fix handling of ORCPT parameter for DSNs: xtext decoding was not performed and a wrong syntax check was applied to the "addr-type" field. Problem noted by Dan Lukes of Obludarium. Fix handling of NUL characters in the MIME conversion functions so that message bodies containing them will be sent on properly. Note: this usually also affects mails that are not converted as those functions are used for other purposes too. Problem noted by Elchonon Edelson of Lockheed Martin. Do not perform "duplicate" elimination of recipients if they resolve to the error mailer using a temporary failure (4xy) via ruleset 0. Problem noted by Akira Takahashi of IIJ. CONTRIB: Updated version of etrn.pl script from John Beck of Oracle. Portability: Unlike gcc, clang doesn't apply full prototypes to K&R definitions. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.114 2013/02/06 23:22:48 jperkin Exp $ d4 1 @ 1.114 log @PKGREVISION bumps for the security/openssl 1.0.1d update. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.113 2013/02/06 07:42:04 jnemeth Exp $ a3 1 PKGREVISION= 1 @ 1.113 log @Update to sendmail 8.14.6: this is a general bug fix release. - will look at making recently requested changes in a subsequent commit 8.14.6/8.14.6 2012/12/23 Fix a regression introduced in 8.14.5: if a server offers two AUTH lines, the MTA would not read them after STARTTLS has been used and hence SMTP AUTH for the client side would fail. Problem noted by Lena. Do not cache hostnames internally in a non case sensitive way as that may cause addresses to change from lower case to upper case or vice versa. These header modifications can cause problems with milters that rely on receiving headers in the same way as they are being sent out such as a DKIM signing milter. If MaxQueueChildren is set then it was possible that new queue runners could not be started anymore because an internal counter was subject to a race condition. If a milter decreases the timeout it waits for a communication with the MTA, the MTA might experience a write() timeout. In some situations, the resulting error might have been ignored. Problem noted by Werner Wiethege. Note: decreasing the communication timeout in a milter should not be done without considering the potential problems. smfi_setsymlist() now properly sets the list of macros for the milter which invoked it, instead of a global list for all milters. Problem reported by David Shrimpton of the University of Queensland. If Timeout.resolver.retrans is set to a value larger than 20, then resolver.retry was temporarily set to 0 for gethostbyaddr() lookups. Now it is set to 1 instead. Patch from Peter. If sendmail could not lock the statistics file due to a system error, and sendmail later sends a DSN for a mail that triggered such an error, then sendmail tried to access memory that was freed before (causing a crash on some systems). Problem reported by Ryan Stone. Do not log negative values for size= nor pri= to avoid confusing log parsers, instead limit the values to LONG_MAX. Account for an API change in newer versions of Cyrus-SASL. Patch from Hajimu UMEMOTO from FreeBSD. Do not try to resolve link-local addresses for IPv4 (just as it is done for IPv6). Patch from John Beck of Oracle. Improve logging of client and server STARTTLS connection failures that may be due to incompatible cipher lists by including the reason for the failure in a single log line. Suggested by James Carey of Boeing. Portability: Add support for Darwin 11.x and 12.x (Mac OS X 10.7 and 10.8). Add support for SunOS 5.12 (aka Solaris 12). Patch from John Beck of Oracle. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.112 2012/12/16 01:52:23 obache Exp $ d4 1 @ 1.112 log @recursive bump from cyrus-sasl libsasl2 shlib major bump. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.111 2012/10/08 12:19:30 asau Exp $ a4 1 PKGREVISION= 2 @ 1.111 log @Drop PKG_DESTDIR_SUPPORT setting, "user-destdir" is default these days. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.110 2012/07/27 17:46:01 jnemeth Exp $ d5 1 a5 1 PKGREVISION= 1 @ 1.110 log @enable reload in rc.d scripts @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.109 2010/03/12 13:19:49 obache Exp $ a9 2 PKG_DESTDIR_SUPPORT= user-destdir @ 1.109 log @marked as CONFLICTS with esmtp>=1.2 (bin/mailq and/or bin/newaliases) @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.108 2010/01/16 00:31:13 jnemeth Exp $ d5 1 @ 1.108 log @ Update to 8.14.4: 8.14.4/8.14.4 2009/12/30 SECURITY: Handle bogus certificates containing NUL characters in CNs by placing a string indicating a bad certificate in the {cn_subject} or {cn_issuer} macro. Patch inspired by Matthias Andree's changes for fetchmail. During the generation of a queue identifier an integer overflow could occur which might result in bogus characters being used. Based on patch from John Vannoy of Pepperdine University. The value of headers, e.g., Precedence, Content-Type, et.al., was not processed correctly. Patch from Per Hedeland. Between 8.11.7 and 8.12.0 the length limitation on a return path was erroneously reduced from MAXNAME (256) to MAXSHORTSTR (203). Patch from John Gardiner Myers of Proofpoint; the problem was also noted by Steve Hubert of University of Washington. Prevent a crash when a hostname lookup returns a seemingly valid result which contains a NULL pointer (this seems to be happening on some Linux versions). The process title was missing the current load average when the MTA was delaying connections due to DelayLA. Patch from Dick St.Peters of NetHeaven. Do not reset the number of queue entries in shared memory if only some of them are processed. Fix overflow of an internal array when parsing some replies from a milter. Problem found by Scott Rotondo of Sun Microsystems. If STARTTLS is turned off in the server (via M=S) then it would not be initialized for use in the client either. Patch from Kazuteru Okahashi of IIJ. If a Diffie-Hellman cipher is selected for STARTTLS, the handshake could fail with some TLS implementations because the prime used by the server is not long enough. Note: the initialization of the DSA/DH parameters for the server can take a significant amount of time on slow machines. This can be turned off by setting DHParameters to none or a file (see doc/op/op.me). Patch from Petr Lampa of the Brno University of Technology. Fix handling of `b' modifier for DaemonPortOptions on little endian machines for loopback address. Patch from John Beck of Sun Microsystems. Fix a potential memory leak in libsmdb/smdb1.c found by parfait. Based on patch from Jonathan Gray of OpenBSD. If a milter sets the reply code to "421" during the transfer of the body, the SMTP server will terminate the SMTP session with that error to match the behavior of the other callbacks. Return EX_IOERR (instead of 0) if a mail submission fails due to missing disk space in the mail queue. Based on patch from Martin Poole of RedHat. CONFIG: Using FEATURE(`ldap_routing')'s `nodomain' argument would cause addresses not found in LDAP to be misparsed. CONFIG: Using a CN restriction did not work for TLS_Clt as it referred to a wrong macro. Patch from John Gardiner Myers of Proofpoint. CONFIG: The option relaytofulladdress of FEATURE(`access_db') did not work if FEATURE(`relay_hosts_only') is used too. Problem noted by Kristian Shaw. CONFIG: The internal function lower() was broken and hence strcasecmp() did not work either, which could cause problems for some FEATURE()s if upper case arguments were used. Patch from Vesa-Matti J Kari of the University of Helsinki. LIBMILTER: Fix internal check whether a milter application is compiled against the same version of libmilter as it is linked against (especially useful for dynamic libraries). LIBMILTER: Fix memory leak that occurred when smfi_setsymlist() was used. Based on patch by Dan Lukes. LIBMILTER: Document the effect of SMFIP_HDR_LEADSPC for filters which add, insert, or replace headers. From Benjamin Pineau. LIBMILTER: Fix error messages which refer to "select()" to be correct if SM_CONF_POLL is used. Based on patch from John Nemeth. LIBSM: Fix handling of LDAP search failures where the error is carried in the search result itself, such as seen with OpenLDAP proxy servers. VACATION: Do not refer to a local variable outside its scope. Based on patch from Mark Costlow of Southwest Cyberport. Portability: Enable HAVE_NANOSLEEP for SunOS 5.11. Patch from John Beck of Sun Microsystems. Drop NISPLUS from default SunOS 5.11 map definitions. Patch from John Beck of Sun Microsystems. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.107 2009/03/21 21:30:58 jnemeth Exp $ d7 1 @ 1.107 log @- various pkglint cleanups - add user-destdir support - this should fix PR/41004 @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.105 2009/03/09 21:24:00 manu Exp $ a3 1 PKGREVISION= 4 @ 1.106 log @As owner of the package, I have not approved this patch. Having had a chance to closely examine it, I would prefer it be done slightly differently. Also, the patch patches multiple files in direct contravention of pkgsrc guidelines. One of the files is also patched by a different patch. Having multiple patches applied to a single file makes maitenance much more difficult. @ text @d4 1 a4 1 PKGREVISION= 3 d9 1 a9 1 PKG_DESTDIR_SUPPORT= destdir d20 1 a20 1 PLIST_SUBST+= SMRSH_CMDDIR=${SMRSH_CMDDIR:Q} d23 2 d28 4 a31 2 MAKE_DIRS_PERMS+= /var/spool/clientmqueue smmsp smmsp 0770 MAKE_DIRS_PERMS+= /var/spool/mqueue ${ROOT_USER} ${ROOT_GROUP} 0700 d87 2 a88 3 ${DESTDIR:Q}${PREFIX}/share/examples/sendmail/ cd ${WRKSRC}/cf && pax -rw -pp -pm -s',^.*\.orig$$,,' . ${DESTDIR:Q}${PREFIX}/share/sendmail chown -R ${BINOWN}:${BINGRP} ${DESTDIR:Q}${PREFIX}/share/sendmail d91 1 a91 1 ${DESTDIR:Q}${PREFIX}/lib d95 1 a95 1 ${DESTDIR:Q}${PREFIX}/lib d97 6 a102 6 ${DESTDIR:Q}${PREFIX}/share/examples/sendmail/ ${INSTALL_DATA} ${WRKSRC}/RELEASE_NOTES ${DESTDIR:Q}${PREFIX}/share/doc/sendmail ${INSTALL_DATA} ${WRKSRC}/cf/README ${DESTDIR:Q}${PREFIX}/share/doc/sendmail ${INSTALL_DATA} ${WRKSRC}/sendmail/SECURITY ${DESTDIR:Q}${PREFIX}/share/doc/sendmail ${INSTALL_DATA} ${WRKSRC}/doc/op/op.me ${DESTDIR:Q}${PREFIX}/share/doc/sendmail ${INSTALL_DATA} ${WRKSRC}/doc/op/op.ps ${DESTDIR:Q}${PREFIX}/share/doc/sendmail @ 1.105 log @This patch fixes an important reliability fix when Sendmail performs local mail delivery with non local NSS passwd source, such as LDAP. Stock LDAP uses getpwnam(3) to lookup recipients. As mandated by SUSv2, getpwnam(3) does not set errno, so Sendmail has no way of distinguishing a non existing user and an error with a remote NSS source. Therefore, when the LDAP server goes down, Sendmail bounces mail to valid recipients. A first workround is to remove F=w from Mlocal in sendmail.cf. This will inhibit local recipient lookups, but it has a two drawbacks - ~/.forward do not work anymore - For multi-recipient mails with a single inexistent user, mail.local cause a DSN reporting an error for all users, whereas all valid users do get the message. A better workaround is this patch, which calls getpwnam_r(3). This newer API do set errno and do return an error code. Sendmail is therefore able to detect that it had a transcient error in NSS, and it will react by queuing the message. This is what you really want to happen when LDAP is down. I have not been able to get any feedback from Sendmail developers about this patch. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.104 2008/08/13 15:41:29 manu Exp $ d4 1 a4 1 PKGREVISION= 2 @ 1.104 log @Enable _FFR_LDAP_NETWORK_TIMEOUT This feature adds a -c switch to LDAPMAP definitions, which can be used to specify a connection timeout (the equivalent of ldap.conf's bind_timeout) Here is an usage example, in sendmail.cf: O LDAPDefaultSpec=-w 3 -c 1 -l 3 If the server does not connect after 1 second (-c 1), we give up. If it does not anwer after 3 seconds (-l 3), we give up with a temporary failure. Using -c is the only way to avoid sendmail getting stuck against a half-dead slapd, where the TCP port is in listening state but the server will not serve anything. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.103 2008/05/25 21:42:21 joerg Exp $ d4 1 a4 1 PKGREVISION= 1 @ 1.103 log @Explicitly add pax dependency in those Makefiles that use it (or have patches to add it). Drop pax from the default USE_TOOLS list. Make bsdtar the default for those places that wanted gtar to extract long links etc, as bsdtar can be built of the tree. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.102 2007/10/19 09:11:45 jnemeth Exp $ d4 1 @ 1.102 log @- create /var/spool/mqueue with mode 0700 - pre-create all directories with INSTALLATION_DIRS+=... - convert to DESTDIR @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.101 2007/09/25 20:05:23 jlam Exp $ d13 2 @ 1.101 log @The sendmail and libmilter should have different sets of options. In particular, libmilter does *not* support "ldap", "sasl", etc. which are supported by only sendmail. Do this through the following: (1) Create libmilter/options.mk with support for the "inet6" option. (2) Drop inclusion of options.mk from sendmail/Makefile.common and move it to libmilter/Makefile and sendmail/Makefile. While here, properly support IPv6 on FreeBSD, which like DragonFly has getipnodebyname() in libc. As a result of these changes, libmilter will no longer depend on cyrus-sasl or openssl or openldap-client depending on what is set in PKG_DEFAULT_OPTIONS. Bump the PKGREVISION of libmilter to 1 due to the changed dependency list. No change to sendmail as the binary package does not change. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.100 2007/06/19 17:10:55 jnemeth Exp $ d8 2 d24 1 a24 1 MAKE_DIRS_PERMS+= /var/spool/mqueue ${ROOT_USER} ${ROOT_GROUP} 0755 d44 3 a77 3 pre-install: ${INSTALL_DATA_DIR} ${PREFIX}/libexec/sendmail a78 4 ${INSTALL_DATA_DIR} ${SMRSH_CMDDIR} ${INSTALL_DATA_DIR} ${PREFIX}/share/examples/sendmail ${INSTALL_DATA_DIR} ${PREFIX}/share/sendmail ${INSTALL_DATA_DIR} ${PREFIX}/share/doc/sendmail d80 3 a82 3 ${PREFIX}/share/examples/sendmail/ cd ${WRKSRC}/cf && pax -rw -pp -pm -s',^.*\.orig$$,,' . ${PREFIX}/share/sendmail chown -R ${BINOWN}:${BINGRP} ${PREFIX}/share/sendmail d85 1 a85 1 ${PREFIX}/lib d89 1 a89 1 ${PREFIX}/lib d91 6 a96 6 ${PREFIX}/share/examples/sendmail/ ${INSTALL_DATA} ${WRKSRC}/RELEASE_NOTES ${PREFIX}/share/doc/sendmail ${INSTALL_DATA} ${WRKSRC}/cf/README ${PREFIX}/share/doc/sendmail ${INSTALL_DATA} ${WRKSRC}/sendmail/SECURITY ${PREFIX}/share/doc/sendmail ${INSTALL_DATA} ${WRKSRC}/doc/op/op.me ${PREFIX}/share/doc/sendmail ${INSTALL_DATA} ${WRKSRC}/doc/op/op.ps ${PREFIX}/share/doc/sendmail @ 1.100 log @create manpage directories @ text @d1 1 a1 3 # $NetBSD: Makefile,v 1.99 2007/04/26 06:26:27 jnemeth Exp $ .include "../../mail/sendmail/Makefile.common" d8 3 @ 1.99 log @Update to sendmail-8.14.1. Major changes since sendmail-8.13.8: 8.14.1/8.14.1 2007/04/03 Even though a milter rejects a recipient the MTA will still keep it in its list of recipients and deliver to it if the transaction is accepted. This is a regression introduced in 8.14.0 due to the change for SMFIP_RCPT_REJ. Bug found by Andy Fiddaman. The new DaemonPortOptions which begin with a lower case character could not be set in 8.14.0. If a server shut down the connection in response to a STARTTLS command, sendmail would log a misleading error message due to an internal inconsistency. Problem found by Werner Wiethege. Document how some sendmail.cf options change the behavior of mailq. Noted by Paul Menchini of the North Carolina School of Science and Mathematics. CONFIG: Add confSOFT_BOUNCE m4 option for setting SoftBounce. CONFIG: 8.14.0's RELEASE_NOTES failed to mention the addition of the confMAX_NOOP_COMMANDS and confSHARED_MEMORY_KEY_FILE m4 options for setting MaxNOOPCommands and SharedMemoryKeyFile. CONFIG: Add confMILTER_MACROS_EOH and confMILTER_MACROS_DATA m4 options for setting Milter.macros.eoh and Milter.macros.data. CONTRIB: Use flock() and fcntl() in qtool.pl if necessary. Patch from Daniel Carroll of Mesa State College. LIBMILTER: Make sure an unknown command does not affect the currently available macros. Problem found by Andy Fiddaman. LIBMILTER: The MTA did not offer SMFIF_SETSYMLIST during option negotiation. Problem reported by Bryan Costales. LIBMILTER: Fix several minor errors in the documentation. Patches from Bryan Costales. PORTABILITY FIXES: AIX 5.{1,2}: libsm/util.c failed to compile due to redefinition of several macros, e.g., SIG_ERR. Patch from Jim Pirzyk with assistance by Bob Booth, University of Illinois at Urbana-Champaign. Add support for QNX.6. Patch from Sean Boudreau of QNX Software Systems. New Files: devtools/M4/depend/QNX6.m4 devtools/OS/QNX.6.x include/sm/os/sm_os_qnx.h New Files added in 8.14.0, but not shown in the release notes entry: libmilter/docs/smfi_chgfrom.html libmilter/docs/smfi_version.html 8.14.0/8.14.0 2007/01/31 Header field values are now 8 bit clean. Notes: - header field names are still restricted to 7 bit. - RFC 2822 allows only 7 bit (US-ASCII) characters in headers. Preserve spaces after the colon in a header. Previously, any number of spaces after the colon would be changed to exactly one space. In some cases of deeply nested aliases/forwarding, mail can be silently lost. Moreover, the MaxAliasRecursion limit may be reached too early, e.g., the counter may be off by a factor of 4 in case of a sequence of .forward files that refer to others. Patch from Motonori Nakamura of Kyoto University. Fix a regression in 8.13.8: if InputMailFilters is set then "sendmail -bs" can trigger an assertion because the hostname of the client is undefined. It is now set to "localhost" for the xxfi_connect() callback. Avoid referencing a freed variable during cleanup when terminating. Problem reported and diagnosed by Joe Maimon. New option HeloName to set the name for the HELO/EHLO command. Patch from Nik Clayton. New option SoftBounce to issue temporary errors (4xy) instead of permanent errors (5xy). This can be useful for testing. New suboptions for DaemonPortOptions to set them individually per daemon socket: DeliveryMode DeliveryMode refuseLA RefuseLA delayLA DelayLA queueLA QueueLA children MaxDaemonChildren New option -K for LDAP maps to replace %1 through %9 in the lookup key with the LDAP escaped contents of the arguments specified in the map lookup. Loosely based on patch from Wolfgang Hottgenroth. Log the time after which a greet_pause delay triggered. Patch from Nik Clayton. If a client is rejected via TCP wrapper or some other check performed by validate_connection() (in conf.c) then do not also invoke greet_pause. Problem noted by Jim Pirzyk of the University of Illinois at Urbana-Champaign. If a client terminates the SMTP connection during a pause introduced by greet_pause, then a misleading message was logged previously. Problem noted by Vernon Schryver et.al., patch from Matej Vela. New command "mstat" for control socket to provide "machine readable" status. New named config file rule check_eom which is called at the end of a message, its parameter is the size of the message. If the macro {addr_type} indicates that the current address is a header address it also distinguishes between recipient and sender addresses (as it is done for envelope addresses). When a macro is set in check_relay, then its value is accessible by all transactions in the same SMTP session. Increase size of key for ldap lookups to 1024 (MAXKEY). New option MaxNOOPCommands to override default of 20 for the number of "useless" commands before the SMTP server will slow down responding. New option SharedMemoryKeyFile: if shared memory support is enabled, the MTA can be asked to select a shared memory key itself by setting SharedMemoryKey to -1 and specifying a file where to store the selected key. Try to deal with open HTTP proxies that are used to send spam by recognizing some commands from them. If the first command from the client is GET, POST, CONNECT, or USER, then the connection is terminated immediately. New PrivacyOptions noactualrecipient to avoid putting X-Actual-Recipient lines in DSNs revealing the actual account that addresses map to. Patch from Dan Harkless. New options B, z, and Z for DNS maps: -B: specify a domain that is always appended to queries. -z: specify the delimiter at which to cut off the result of a query if it is too long. -Z: specify the maximum number of entries to be concatenated to form the result of a lookup. New target "check" in the Makefile of libsm: instead of running tests implicitly while building libsm, they must be explicitly started by using "make check". Fixed some inconsistent checks for NULL pointers that have been reported by the SATURN tool which has been developed by Isil Dillig and Thomas Dillig of Stanford University. Fix a potential race condition caused by a signal handler for terminated child processes. Problem noted by David F. Skoll. When a milter deleted a recipient, that recipient could cause a queue group selection. This has been disabled as it was not intended. New operator 'r' for the arith map to return a random number. Patch from Motonori Nakamura of Kyoto University. New compile time option MILTER_NO_NAGLE to turn off the Nagle algorithm for communication with libmilter ("cork" on Linux), which may improve the communication performance on some operating systems. Patch from John Gardiner Myers of Proofpoint. If sendmail received input that contained a CR without subsequent LF (thus violating RFC 2821 (2.3.7)), it could previously generate an additional blank line in the output as the last line. Restarting persistent queue runners by sending a HUP signal to the "queue control process" (QCP) works now. Increase the length of an input line to 12288 to deal with really long lines during SMTP AUTH negotiations. Problem noted by Werner Wiethege. If ARPANET mode (-ba) was selected STARTTLS would fail (due to a missing initialization call for that case). Problem noted by Neil Rickert of Northern Illinois University. If sendmail is linked against a library that initializes Cyrus-SASL before sendmail did it (such as libnss-ldap), then SMTP AUTH could fail for the sendmail client. A patch by Moritz Both works around the API design flaw of Cyrus-SASLv2. CONFIG: Make it possible to unset the StatusFile option by undefining STATUS_FILE. By not setting StatusFile, the MTA will not attempt to open a statistics file on each delivery. CONFIG: New FEATURE(`require_rdns') to reject messages from SMTP clients whose IP address does not have proper reverse DNS. Contributed by Neil Rickert of Northern Illinois University and John Beck of Sun Microsystems. CONFIG: New FEATURE(`block_bad_helo') to reject messages from SMTP clients which provide a HELO/EHLO argument which is either unqualified, or is one of our own names (i.e., the server name instead of the client name). Contributed by Neil Rickert of Northern Illinois University and John Beck of Sun Microsystems. CONFIG: New FEATURE(`badmx') to reject envelope sender addresses (MAIL) whose domain part resolves to a "bad" MX record. Based on contribution from William Dell Wisner. CONFIG: New macros SMTP_MAILER_LL and RELAY_MAILER_LL to override the maximum line length of the smtp mailers. CONFIG: New option `relaytofulladdress' for FEATURE(`access_db') to allow entries in the access map to be of the form To:user@@example.com RELAY CONFIG: New subsuboptions eoh and data to specify the list of macros a milter should receive at those stages in the SMTP dialogue. CONFIG: New option confHELO_NAME for HeloName to set the name for the HELO/EHLO command. CONFIG: dnsbl and enhdnsbl can now also discard or quarantine messages by using those values as second argument. Patches from Nelson Fung. CONTRIB: cidrexpand uses a hash symbol as comment character and ignores everything after it unless it is in quotes or preceeded by a backslash. DEVTOOLS: New macro confMKDIR: if set to a program that creates directories, then it used for "make install" to create the required installation directories. DEVTOOLS: New macro confCCLINK to specify the linker to use for executables (defaults to confCC). LIBMILTER: A new version of the milter API has been created that has several changes which are listed below and documented in the webpages reachable via libmilter/docs/index.html. LIBMILTER: The meaning of the version macro SMFI_VERSION has been changed. It now refers only to the version of libmilter, not to the protocol version (which is used only internally, it is not user/milter-programmer visible). Additionally, a version function smfi_version() has been introduced such that a milter program can check the libmilter version also at runtime which is useful if a shared library is used. LIBMILTER: A new callback xxfi_negotiate() can be used to dynamically (i.e., at runtime) determine the available protocol actions and features of the MTA and also to specify which of these a milter wants to use. This allows for more flexibility than hardcoding these flags in the xxfi_flags field of the smfiDesc structure. LIBMILTER: A new callback xxfi_data() is available so milters can act on the DATA command. LIBMILTER: A new callback xxfi_unknown() is available so milters can receive also unknown SMTP commands. LIBMILTER: A new return code SMFIS_NOREPLY has been added which can be used by the xxfi_header() callback provided the milter requested the SMFIP_NOHREPL protocol action. LIBMILTER: The new return code SMFIS_SKIP can be used in the xxfi_body() callback to skip over further body chunks and directly advance to the xxfi_eom() callback. This is useful if a milter can make a decision based on the body chunks it already received without reading the entire rest of the body and the milter wants to invoke functions that are only available from the xxfi_eom() callback. LIBMILTER: A new function smfi_addrcpt_par() can be used to add new recipients including ESMTP parameters. LIBMILTER: A new function smfi_chgfrom() can be used to change the envelope sender including ESMTP parameters. LIBMILTER: A milter can now request to be informed about rejected recipients (RCPT) too. This requires to set the protocol flag SMFIP_RCPT_REJ during option negotiation. Whether a RCPT has been rejected can be checked by comparing the value of the macro {rcpt_mailer} with "error". LIBMILTER: A milter can now override the list of macros that it wants to receive from the MTA for each protocol step by invoking the function smfi_setsymlist() during option negotiation. LIBMILTER: A milter can receive header field values with all leading spaces by requesting the SMFIP_HDR_LEADSPC protocol action. Also, if the flag is set then the MTA does not add a leading space to headers that are added, inserted, or replaced. LIBMILTER: If a milter sets the reply code to "421" for the HELO callback, the SMTP server will terminate the SMTP session with that error to match the behavior of all other callbacks. New Files: cf/feature/badmx.m4 cf/feature/block_bad_helo.m4 cf/feature/require_rdns.m4 devtools/M4/UNIX/check.m4 include/sm/misc.h include/sm/sendmail.h include/sm/tailq.h libmilter/docs/smfi_addrcpt_par.html libmilter/docs/smfi_setsymlist.html libmilter/docs/xxfi_data.html libmilter/docs/xxfi_negotiate.html libmilter/docs/xxfi_unknown.html libmilter/example.c libmilter/monitor.c libmilter/worker.c libsm/memstat.c libsm/t-memstat.c libsm/t-qic.c libsm/util.c sendmail/daemon.h sendmail/map.h @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.98 2007/04/19 19:24:09 joerg Exp $ d40 1 @ 1.98 log @Precreate some directories for NO_MTREE. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.97 2007/04/18 01:39:29 jnemeth Exp $ a5 1 PKGREVISION= 4 d29 1 a29 1 SUBST_FILES.paths= ../mailer.conf include/sm/conf.h smrsh/smrsh.8 cf/cf/Makefile d43 1 a43 1 ${CAT} ${FILESDIR}/site.config.m4-tcpwrappers >>${SITECONFIG} d46 1 a46 1 ${CAT} ${FILESDIR}/site.config.m4-ldap >>${SITECONFIG} d49 1 a49 1 ${CAT} ${FILESDIR}/site.config.m4-db2 >>${SITECONFIG} d52 1 a52 1 ${CAT} ${FILESDIR}/site.config.m4-db4 >>${SITECONFIG} d55 1 a55 1 ${CAT} ${FILESDIR}/site.config.m4-starttls >>${SITECONFIG} d58 1 a58 1 ${CAT} ${FILESDIR}/site.config.m4-sasl2 >>${SITECONFIG} d62 1 a62 1 ${CP} ${FILESDIR}/mailer.conf ${WRKDIR}/mailer.conf d65 1 a65 1 (cd ${WRKSRC}; ${SETENV} ${MAKE_ENV} ./Build) d68 2 a69 2 ${CP} ${PKGDIR}/MESSAGE ${MESSAGE_SRC} ${CP} ${PKGDIR}/PLIST ${WRKDIR}/.PLIST_SRC d81 2 a82 2 cd ${WRKSRC}/cf && ${PAX} -rw -pp -pm -s',^.*\.orig$$,,' . ${PREFIX}/share/sendmail ${CHOWN} -R ${BINOWN}:${BINGRP} ${PREFIX}/share/sendmail d84 1 a84 1 ${INSTALL_DATA} ${WRKSRC}/obj.`${UNAME} -srm | ${TR} \ . | ${TR} \/ - | ${SED} s/sun4./sun4/`/libsm/libsm.a \ d88 1 a88 1 ${WRKSRC}/obj.`${UNAME} -srm | ${TR} \ . | ${TR} \/ - | ${SED} s/sun4./sun4/`/libsmutil/libsmutil.a \ d101 1 a101 1 OBJDIR!= ${ECHO} obj.`${UNAME} -srm | ${TR} \ . | ${TR} \/ -` @ 1.97 log @revert previous, turns out qmail and sendmail don't share any filenames @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.96 2007/04/17 10:35:50 jnemeth Exp $ d40 2 @ 1.96 log @add conflict with qmail @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.95 2007/01/20 20:08:31 tv Exp $ a9 1 CONFLICTS+= qmail-[0-9]* @ 1.95 log @REPLACE_PERL works even if Perl is not registered as a dependency. So, compile socketmap support in unconditionally (as the Perl scripts are actually only examples of socketmap functionality; any language can be used in reality). Remove socketmap related OPTIONs completely. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.94 2006/12/29 21:44:09 markd Exp $ d10 1 @ 1.94 log @Fix rpath for Solaris 10 and 11 so that pkg libraries are found. As per existing patches for earlier Solaris versions. Bump PKGREVISION. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.93 2006/10/12 21:04:27 tv Exp $ d6 1 a6 1 PKGREVISION= 3 d38 2 a58 4 .if !empty(PKG_OPTIONS:Msendmail-socketmap) ${CAT} ${FILESDIR}/site.config.m4-socketmap >>${SITECONFIG} PLIST_SRC+= ${PKGDIR}/PLIST.socketmap .endif d89 2 a90 8 .if !empty(PKG_OPTIONS:Msendmail-socketmap) ${INSTALL_SCRIPT} ${WRKSRC}/contrib/socketmapClient.pl \ ${PREFIX}/share/examples/sendmail ${INSTALL_SCRIPT} ${WRKSRC}/contrib/socketmapServer.pl \ ${PREFIX}/share/examples/sendmail .endif @ 1.93 log @8.13.8nb2: Don't install .cf files to /etc/mail directly at all; offer a message about how to install them instead. Don't create /etc/mail/statistics. Create mqueue dirs at install via MAKE_DIRS. Should fix PR pkg/20852. Make sure SMRSH_CMDDIR gets to the compile defs. Fixes PR pkg/34513. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.92 2006/09/05 20:01:37 tv Exp $ d6 1 a6 1 PKGREVISION= 2 @ 1.92 log @nb1: Add patch at http://www.sendmail.org/patches/client_name.assert.p0. Non-critical, but could cause problems if "sendmail -bs" is used in conjunction with milters. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.91 2006/07/07 18:06:27 tv Exp $ d6 1 a6 1 PKGREVISION= 1 d18 10 a104 4 PKG_GROUPS= smmsp PKG_USERS= smmsp:smmsp PKG_GECOS.smmsp= Sendmail Message Submission Program @ 1.91 log @Update to 8.13.7; changelog below. (8.13.6nb3 already had the security fixes by patch.) While here, fix PR pkg/33821 by substituting pkgsrc's BINOWN, BINGRP, and INSTALL definitions into the installed share/sendmail/cf/Makefile. 8.13.7/8.13.7 2006/06/14 A malformed MIME structure with many parts can cause sendmail to crash while trying to send a mail due to a stack overflow, e.g., if the stack size is limited (ulimit -s). This happens because the recursion of the function mime8to7() was not restricted. The function is called for MIME 8 to 7 bit conversion and also to enforce MaxMimeHeaderLength. To work around this problem, recursive calls are limited to a depth of MAXMIMENESTING (20); message content after this limit is treated as opaque and is not checked further. Problem noted by Frank Sheiness. The changes to the I/O layer in 8.13.6 caused a regression for SASL mechanisms that use the security layer, e.g., DIGEST-MD5. Problem noted by Robert Stampfli. If a timeout occurs while reading a message (during the DATA phase) a df file might have been left behind in the queue. This was another side effect of the changes to the I/O layer made in 8.13.6. Several minor problems have been fixed that were found by a Coverity scan of sendmail 8 as part of the NetBSD distribution. See http://scan.coverity.com/ Note: the scan generated also a lot of "false positives", e.g., "error" reports about situations that cannot happen. Most of those code places are marked with lint(1) comments like NOTREACHED, but Coverity does not understand those. Hence an explicit assertion has been added in some cases to avoid those false positives. If the start of the sendmail daemon fails due to a configuration error then in some cases shared memory segments or pid files were not removed. If DSN support is disabled via access_db, then related ESMTP parameters for MAIL and RCPT should be rejected. Problem reported by Akihiro Sagawa. Enabling zlib compression in OpenSSL 0.9.8[ab] breaks the padding bug work-around. Hence if sendmail is linked against either of these versions and compression is available, the padding bug work-around is turned off. Based on patch from Victor Duchovni of Morgan Stanley. CONFIG: FEATURE(`dnsbl') and FEATURE(`enhdnsbl') used blackholes.mail-abuse.org as default domain for lookups, however, that list is no longer available. To avoid further problems, no default value is available anymore, but an argument must be specified. Portability: Fix compilation on OSF/1 for sfsasl.c. Patch from Pieter Bowman of the University of Utah. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.90 2006/06/14 18:53:54 adrianp Exp $ d6 1 @ 1.90 log @Bump PKGREVISION. A malformed MIME structure with many parts can cause sendmail to crash while trying to send a mail due to a stack overflow, e.g., if the stack size is limited (ulimit -s). This happens because the recursion of the function mime8to7() was not restricted. The function is called for MIME 8 to 7 bit conversion and also to enforce MaxMimeHeaderLength. To work around this problem, recursive calls are limited to a depth of MAXMIMENESTING (20); message content after this limit is treated as opaque and is not checked further. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.89 2006/06/07 14:48:28 joerg Exp $ a5 1 PKGREVISION= 3 d18 6 a23 3 SUBST_STAGE.paths= pre-build SUBST_FILES.paths= ../mailer.conf include/sm/conf.h smrsh/smrsh.8 SUBST_SED.paths= -e "s|@@@@PREFIX@@@@|${PREFIX}|g" @ 1.90.2.1 log @Pullup ticket 1812 - requested by tv security/bugfix update for sendmail Revisions pulled up: - pkgsrc/mail/sendmail/Makefile 1.91 - pkgsrc/mail/sendmail/Makefile.common 1.37-1.38 - pkgsrc/mail/sendmail/distinfo 1.31-1.32 - pkgsrc/mail/sendmail/patches/patch-aj 1.4 - pkgsrc/mail/sendmail/patches/patch-ak removed - pkgsrc/mail/sendmail/patches/patch-al removed - pkgsrc/mail/sendmail/patches/patch-am removed Module Name: pkgsrc Committed By: tv Date: Fri Jul 7 18:06:28 UTC 2006 Modified Files: pkgsrc/mail/sendmail: Makefile Makefile.common distinfo pkgsrc/mail/sendmail/patches: patch-aj Removed Files: pkgsrc/mail/sendmail/patches: patch-ak patch-al patch-am Log Message: Update to 8.13.7; changelog below. (8.13.6nb3 already had the security fixes by patch.) While here, fix PR pkg/33821 by substituting pkgsrc's BINOWN, BINGRP, and INSTALL definitions into the installed share/sendmail/cf/Makefile. 8.13.7/8.13.7 2006/06/14 A malformed MIME structure with many parts can cause sendmail to crash while trying to send a mail due to a stack overflow, e.g., if the stack size is limited (ulimit -s). This happens because the recursion of the function mime8to7() was not restricted. The function is called for MIME 8 to 7 bit conversion and also to enforce MaxMimeHeaderLength. To work around this problem, recursive calls are limited to a depth of MAXMIMENESTING (20); message content after this limit is treated as opaque and is not checked further. Problem noted by Frank Sheiness. The changes to the I/O layer in 8.13.6 caused a regression for SASL mechanisms that use the security layer, e.g., DIGEST-MD5. Problem noted by Robert Stampfli. If a timeout occurs while reading a message (during the DATA phase) a df file might have been left behind in the queue. This was another side effect of the changes to the I/O layer made in 8.13.6. Several minor problems have been fixed that were found by a Coverity scan of sendmail 8 as part of the NetBSD distribution. See http://scan.coverity.com/ Note: the scan generated also a lot of "false positives", e.g., "error" reports about situations that cannot happen. Most of those code places are marked with lint(1) comments like NOTREACHED, but Coverity does not understand those. Hence an explicit assertion has been added in some cases to avoid those false positives. If the start of the sendmail daemon fails due to a configuration error then in some cases shared memory segments or pid files were not removed. If DSN support is disabled via access_db, then related ESMTP parameters for MAIL and RCPT should be rejected. Problem reported by Akihiro Sagawa. Enabling zlib compression in OpenSSL 0.9.8[ab] breaks the padding bug work-around. Hence if sendmail is linked against either of these versions and compression is available, the padding bug work-around is turned off. Based on patch from Victor Duchovni of Morgan Stanley. CONFIG: FEATURE(`dnsbl') and FEATURE(`enhdnsbl') used blackholes.mail-abuse.org as default domain for lookups, however, that list is no longer available. To avoid further problems, no default value is available anymore, but an argument must be specified. Portability: Fix compilation on OSF/1 for sfsasl.c. Patch from Pieter Bowman of the University of Utah. --- Module Name: pkgsrc Committed By: tv Date: Wed Aug 9 21:23:00 UTC 2006 Modified Files: pkgsrc/mail/sendmail: Makefile.common distinfo Log Message: Update to 8.13.8. Changes: 8.13.8/8.13.8 2006/08/09 Fix a regression in 8.13.7: if shared memory is activated, then the server can erroneously report that there is insufficient disk space. Additionally make sure that an internal variable is set properly to avoid those misleading errors. Based on patch from Steve Hubert of University of Washington. Fix a regression in 8.13.7: the PidFile could be removed after the process that forks the daemon exited, i.e., if sendmail -bd is invoked. Problem reported by Kan Sasaki of Fusion Communications Corp. and Werner Wiethege. Avoid opening qf files if QueueSortOrder is "none". Patch from David F. Skoll. Avoid a crash when finishing due to referencing a freed variable. Problem reported and diagnosed by Moritz Jodeit. CONTRIB: cidrexpand now deals with /0 by issuing the entire IPv4 range (0..255). LIBMILTER: The "hostname" argument of the xxfi_connect() callback previously was the equivalent of {client_ptr}. However, this did not match the documentation of the function, hence it has been changed to {client_name}. See doc/op/op.* about these macros. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.91 2006/07/07 18:06:27 tv Exp $ d6 1 d19 3 a21 6 SUBST_STAGE.paths= pre-configure SUBST_FILES.paths= ../mailer.conf include/sm/conf.h smrsh/smrsh.8 cf/cf/Makefile SUBST_SED.paths+= -e "s|@@@@BINGRP@@@@|${BINGRP}|g" SUBST_SED.paths+= -e "s|@@@@BINOWN@@@@|${BINOWN}|g" SUBST_SED.paths+= -e "s|@@@@INSTALL@@@@|${INSTALL}|g" SUBST_SED.paths+= -e "s|@@@@PREFIX@@@@|${PREFIX}|g" @ 1.89 log @Prefer PATH_MAX over MAXPATHLEN. Use a better boundary check, which doesn't depend on PATH_MAX >> NAME_MAX. Both changes are from DragonFly and have been reported upstream. Install only man pages, not the catpages. The installation was inconsistent before. Bump revision. OK from tv@@. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.88 2006/06/06 22:03:36 adrianp Exp $ d6 1 a6 1 PKGREVISION= 2 @ 1.88 log @Add sendmail and smmsp startup files for -current users Make pkglint happy Pass MAINTAINERship to tv@@ Bump PKGREVISION @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.87 2006/05/12 22:23:09 adrianp Exp $ d6 1 a6 1 PKGREVISION= 1 @ 1.87 log @Update to sendmail 8.13.6 > 8.13.6/8.13.6 2006/03/22 > SECURITY: Replace unsafe use of setjmp(3)/longjmp(3) in the server > and client side of sendmail with timeouts in the libsm I/O > layer and fix problems in that code. Also fix handling of > a buffer in sm_syslog() which could have been used as an > attack vector to exploit the unsafe handling of > setjmp(3)/longjmp(3) in combination with signals. > Problem detected by Mark Dowd of ISS X-Force. > Handle theoretical integer overflows that could triggered if > the server accepted headers larger than the maximum > (signed) integer value. This is prevented in the default > configuration by restricting the size of a header, and on > most machines memory allocations would fail before reaching > those values. Problems found by Phil Brass of ISS. > If a server returns 421 for an RSET command when trying to start > another transaction in a session while sending mail, do > not trigger an internal consistency check. Problem found > by Allan E Johannesen of Worcester Polytechnic Institute. > If a server returns a 5xy error code (other than 501) in response > to a STARTTLS command despite the fact that it advertised > STARTTLS and that the code is not valid according to RFC > 2487 treat it nevertheless as a permanent failure instead > of a protocol error (which has been changed to a > temporary error in 8.13.5). Problem reported by Jeff > A. Earickson of Colby College. > Clear SMTP state after a HELO/EHLO command. Patch from John > Myers of Proofpoint. > Observe MinQueueAge option when gathering entries from the queue > for sorting etc instead of waiting until the entries are > processed. Patch from Brian Fundakowski Feldman. > Set up TLS session cache to properly handle clients that try to > resume a stored TLS session. > Properly count the number of (direct) child processes such that > a configured value (MaxDaemonChildren) is not exceeded. > Based on patch from Attila Bruncsak. > LIBMILTER: Remove superfluous backslash in macro definition > (libmilter.h). Based on patch from Mike Kupfer of > Sun Microsystems. > LIBMILTER: Don't try to set SO_REUSEADDR on UNIX domain sockets. > This generates an error message from libmilter on > Solaris, though other systems appear to just discard the > request silently. > LIBMILTER: Deal with sigwait(2) implementations that return > -1 and set errno instead of returning an error code > directly. Patch from Chris Adams of HiWAAY Informations > Services. > Portability: > Fix compilation checks for closefrom(3) and statvfs(2) > in NetBSD. Problem noted by S. Moonesamy, patch from > Andrew Brown. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.86 2006/05/01 02:57:03 jlam Exp $ d6 1 d16 1 d21 2 a22 2 SUBST_SED.paths= -e "s|@@@@PREFIX@@@@|${PREFIX}|g" \ -e "s|@@@@SMRSH_CMDDIR@@@@|${SMRSH_CMDDIR}|g" d27 1 a27 1 @@${CAT} ${FILESDIR}/site.config.m4-tcpwrappers >>${SITECONFIG} d30 1 a30 1 @@${CAT} ${FILESDIR}/site.config.m4-ldap >>${SITECONFIG} d33 1 a33 1 @@${CAT} ${FILESDIR}/site.config.m4-db2 >>${SITECONFIG} d36 1 a36 1 @@${CAT} ${FILESDIR}/site.config.m4-db4 >>${SITECONFIG} d39 1 a39 1 @@${CAT} ${FILESDIR}/site.config.m4-starttls >>${SITECONFIG} d42 1 a42 1 @@${CAT} ${FILESDIR}/site.config.m4-sasl2 >>${SITECONFIG} d45 1 a45 1 @@${CAT} ${FILESDIR}/site.config.m4-socketmap >>${SITECONFIG} d50 1 a50 1 @@${CP} ${FILESDIR}/mailer.conf ${WRKDIR}/mailer.conf d53 1 a53 1 @@(cd ${WRKSRC}; ${SETENV} ${MAKE_ENV} ./Build) d56 2 a57 2 @@${CP} ${PKGDIR}/MESSAGE ${MESSAGE_SRC} @@${CP} ${PKGDIR}/PLIST ${WRKDIR}/.PLIST_SRC @ 1.86 log @Conflict with courier-mta. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.85 2006/04/23 00:12:39 jlam Exp $ a5 1 PKGREVISION= 2 @ 1.85 log @Modify packages that set PKG_USERS and PKG_GROUPS to follow the new syntax as specified in pkgsrc/mk/install/bsd.pkginstall.mk:1.47. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.84 2006/03/22 19:56:36 adrianp Exp $ d9 1 a9 1 CONFLICTS+= postfix-[0-9]* fastforward>=0.51nb2 @ 1.84 log @Update sendmail to address the current security issue Bump to nb2 This will change the internal version of sendmail to 8.13.5.20060308 > SECURITY: Replace unsafe use of setjmp(3)/longjmp(3) in the server > and client side of sendmail with timeouts in the libsm I/O > layer and fix problems in that code. Also fix handling of > a buffer in sm_syslog() which could have been used as an > attack vector to exploit the unsafe handling of > setjmp(3)/longjmp(3) in combination with signals. > Problem detected by Mark Dowd of ISS X-Force. > Handle theoretical integer overflows that could triggered if > the server accepted headers larger than the maximum > (signed) integer value. This is prevented in the default > configuration by restricting the size of a header, and on > most machines memory allocations would fail before reaching > those values. Problems found by Phil Brass of ISS. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.83 2006/01/23 17:28:41 tv Exp $ d91 3 a93 2 PKG_GROUPS= smmsp PKG_USERS= smmsp:smmsp::Sendmail\ Message\ Submission\ Program @ 1.84.2.1 log @Pullup ticket 1644 - requested by adrianp sync sendmail with HEAD Revisions pulled up: - pkgsrc/mail/sendmail/Makefile 1.87 - pkgsrc/mail/sendmail/Makefile.common 1.34 - pkgsrc/mail/sendmail/distinfo 1.28 - pkgsrc/mail/sendmail/patches/patch-ag 1.12 - pkgsrc/mail/sendmail/patches/patch-ai removed - pkgsrc/mail/sendmail/patches/patch-aj removed - pkgsrc/mail/sendmail/patches/patch-ak removed - pkgsrc/mail/sendmail/patches/patch-al removed Module Name: pkgsrc Committed By: adrianp Date: Fri May 12 22:23:09 UTC 2006 Modified Files: pkgsrc/mail/sendmail: Makefile Makefile.common distinfo pkgsrc/mail/sendmail/patches: patch-ag Removed Files: pkgsrc/mail/sendmail/patches: patch-ai patch-aj patch-ak patch-al Log Message: Update to sendmail 8.13.6 > 8.13.6/8.13.6 2006/03/22 > SECURITY: Replace unsafe use of setjmp(3)/longjmp(3) in the server > and client side of sendmail with timeouts in the libsm I/O > layer and fix problems in that code. Also fix handling of > a buffer in sm_syslog() which could have been used as an > attack vector to exploit the unsafe handling of > setjmp(3)/longjmp(3) in combination with signals. > Problem detected by Mark Dowd of ISS X-Force. > Handle theoretical integer overflows that could triggered if > the server accepted headers larger than the maximum > (signed) integer value. This is prevented in the default > configuration by restricting the size of a header, and on > most machines memory allocations would fail before reaching > those values. Problems found by Phil Brass of ISS. > If a server returns 421 for an RSET command when trying to start > another transaction in a session while sending mail, do > not trigger an internal consistency check. Problem found > by Allan E Johannesen of Worcester Polytechnic Institute. > If a server returns a 5xy error code (other than 501) in response > to a STARTTLS command despite the fact that it advertised > STARTTLS and that the code is not valid according to RFC > 2487 treat it nevertheless as a permanent failure instead > of a protocol error (which has been changed to a > temporary error in 8.13.5). Problem reported by Jeff > A. Earickson of Colby College. > Clear SMTP state after a HELO/EHLO command. Patch from John > Myers of Proofpoint. > Observe MinQueueAge option when gathering entries from the queue > for sorting etc instead of waiting until the entries are > processed. Patch from Brian Fundakowski Feldman. > Set up TLS session cache to properly handle clients that try to > resume a stored TLS session. > Properly count the number of (direct) child processes such that > a configured value (MaxDaemonChildren) is not exceeded. > Based on patch from Attila Bruncsak. > LIBMILTER: Remove superfluous backslash in macro definition > (libmilter.h). Based on patch from Mike Kupfer of > Sun Microsystems. > LIBMILTER: Don't try to set SO_REUSEADDR on UNIX domain sockets. > This generates an error message from libmilter on > Solaris, though other systems appear to just discard the > request silently. > LIBMILTER: Deal with sigwait(2) implementations that return > -1 and set errno instead of returning an error code > directly. Patch from Chris Adams of HiWAAY Informations > Services. > Portability: > Fix compilation checks for closefrom(3) and statvfs(2) > in NetBSD. Problem noted by S. Moonesamy, patch from > Andrew Brown. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.87 2006/05/12 22:23:09 adrianp Exp $ d6 1 @ 1.84.2.2 log @Pullup ticket 1700 - requested by adrianp security fix for sendmail Patch provided by the submitter. Module Name: pkgsrc Committed By: adrianp Date: Wed Jun 14 18:53:54 UTC 2006 Modified Files: pkgsrc/mail/sendmail: Makefile distinfo Added Files: pkgsrc/mail/sendmail/patches: patch-aj patch-ak patch-al patch-am Log Message: Bump PKGREVISION. A malformed MIME structure with many parts can cause sendmail to crash while trying to send a mail due to a stack overflow, e.g., if the stack size is limited (ulimit -s). This happens because the recursion of the function mime8to7() was not restricted. The function is called for MIME 8 to 7 bit conversion and also to enforce MaxMimeHeaderLength. To work around this problem, recursive calls are limited to a depth of MAXMIMENESTING (20); message content after this limit is treated as opaque and is not checked further. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.84.2.1 2006/05/22 14:15:25 salo Exp $ a5 1 PKGREVISION= 3 @ 1.83 log @Skip ".orig" files in the pax copy, in case local patches (or possible pkgsrc patches) patch things in cf/. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.82 2006/01/18 21:00:48 adrianp Exp $ d6 1 a6 1 PKGREVISION= 1 @ 1.82 log @Fix build on -HEAD Identified by Jean-Luc Wasmer in PR# 32527 Fixes from -HEAD by christos@@ (setuserenv -> setuserenviron) Bump to nb1 @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.81 2005/12/29 06:21:53 jlam Exp $ d68 1 a68 1 cd ${WRKSRC}/cf && ${PAX} -rw -pp -pm . ${PREFIX}/share/sendmail @ 1.81 log @Remove USE_PKGINSTALL from pkgsrc now that mk/install/pkginstall.mk automatically detects whether we want the pkginstall machinery to be used by the package Makefile. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.80 2005/12/05 20:50:35 rillig Exp $ d6 1 @ 1.80 log @Fixed pkglint warnings. The warnings are mostly quoting issues, for example MAKE_ENV+=FOO=${BAR} is changed to MAKE_ENV+=FOO=${BAR:Q}. Some other changes are outlined in http://mail-index.netbsd.org/tech-pkg/2005/12/02/0034.html @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.79 2005/08/23 11:48:49 rillig Exp $ a89 1 USE_PKGINSTALL= yes @ 1.80.2.1 log @Pullup ticket 1255 - requested by Todd Vierling security fix for sendmail Revisions pulled up: - pkgsrc/mail/sendmail/Makefile 1.84 - pkgsrc/mail/sendmail/Makefile.common 1.32 - pkgsrc/mail/sendmail/distinfo 1.27 Module Name: pkgsrc Committed By: adrianp Date: Wed Mar 22 19:56:37 UTC 2006 Modified Files: pkgsrc/mail/sendmail: Makefile Makefile.common distinfo Log Message: Update sendmail to address the current security issue Bump to nb2 This will change the internal version of sendmail to 8.13.5.20060308 > SECURITY: Replace unsafe use of setjmp(3)/longjmp(3) in the server > and client side of sendmail with timeouts in the libsm I/O > layer and fix problems in that code. Also fix handling of > a buffer in sm_syslog() which could have been used as an > attack vector to exploit the unsafe handling of > setjmp(3)/longjmp(3) in combination with signals. > Problem detected by Mark Dowd of ISS X-Force. > Handle theoretical integer overflows that could triggered if > the server accepted headers larger than the maximum > (signed) integer value. This is prevented in the default > configuration by restricting the size of a header, and on > most machines memory allocations would fail before reaching > those values. Problems found by Phil Brass of ISS. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.84 2006/03/22 19:56:36 adrianp Exp $ a5 1 PKGREVISION= 2 @ 1.79 log @The real user name in PKG_USERS does not need to be escaped with double backslashes anymore. A single backslash is enough. Changed the definition in all affected packages. For those that are not caught, an additional check is placed into bsd.pkginstall.mk. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.78 2005/08/01 15:30:52 wiz Exp $ d14 1 a14 1 PLIST_SUBST+= SMRSH_CMDDIR=${SMRSH_CMDDIR} d16 1 a16 1 SUBST_CLASSES= paths @ 1.78 log @Adapt for socketmap -> sendmail-socketmap. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.77 2005/07/18 21:33:24 adrianp Exp $ d92 1 a92 1 PKG_USERS= smmsp:smmsp::Sendmail\\ Message\\ Submission\\ Program @ 1.77 log @- Move option from "starttls" to "tls" as pointed out by schmonz@@ in private email. - Use PKG_OPTIONS_LEGACY_OPTS to deal with the change. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.76 2005/05/21 04:10:17 jlam Exp $ d42 1 a42 1 .if !empty(PKG_OPTIONS:Msocketmap) d77 1 a77 1 .if !empty(PKG_OPTIONS:Msocketmap) @ 1.76 log @SUBST_FILES.* must be relative to ${WRKSRC}. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.75 2005/04/01 18:42:08 adrianp Exp $ d36 1 a36 1 .if !empty(PKG_OPTIONS:Mstarttls) @ 1.75 log @- Fix builds with SASLv2 following removal of SASLv1 support - Patch submitted by Shin'ichiro TAYA in PR 29857, thanks. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.74 2005/02/10 22:17:24 adrianp Exp $ d18 1 a18 1 SUBST_FILES.paths= ${WRKDIR}/mailer.conf include/sm/conf.h smrsh/smrsh.8 @ 1.74 log @- Update sendmail to 8.13.3 - Fix smrsh man page patch - Tidy up MESSAGE - Replace 8.13.1 errata with 8.13.3 errata - Remove rename of file outside ${PREFIX} on db2 installs > 8.13.3/8.13.3 2005/01/11 > Enhance handling of I/O errors, especially EOF, when STARTTLS > is active. > Make sure a connection is not reused after it has been closed > due to a 421 error. Problem found by Allan E Johannesen > of Worcester Polytechnic Institute. > Avoid triggering an assertion when sendmail is interrupted while > closing a connection. Problem found by Allan E Johannesen > of Worcester Polytechnic Institute. > Regression: a change in 8.13.2 caused sendmail not to try the > next MX host (or FallbackMXhost if configured) when, at > connection open, the current server returns a 4xy or 5xy > SMTP reply code. Problem noted by Mark Tranchant. > > 8.13.2/8.13.2 2004/12/15 > Do not split the first header even if it exceeds the internal > buffer size. Previously a part of such a header would > end up in the body of the message. Problem noted by > Simple Nomad of BindView. > Do not complain about "cataddr: string too long" when checking > headers that do not contain RFC 2822 addresses. > Problem noted by Rich Graves of Brandeis University. > If a server returns a 421 reply to the RSET command between > message deliveries, do not attempt to deliver any more > messages on that connection. This prevents bogus "Bad > file number" recipient status. Problem noted by > Allan E Johannesen of Worcester Polytechnic Institute. > Allow trailing white space in EHLO command as recommended by RFC > 2821. Problem noted by Ralph Santagato of SBC Services. > Deal with clients which use AUTH but negotiate a smaller buffer size > for data exchanges than the value used by sendmail, e.g., > Cyrus IMAP lmtp server. Based on patch by Jamie Clark. > When passing ESMTP arguments for RCPT to a milter, do not cut > them off at a comma. Problem noted by Krzysztof Oledzki. > Add more logging to milter change header functions to > complement existing logging. Based on patch from > Gurusamy Sarathy of Active State. > Include in include/sm/config.h when LDAPMAP is defined. > Patch from Edgar Hoch of the University of Stuttgart. > Fix DNS lookup if IPv6 is enabled when converting an IP address > to a hostname for use with SASL. Problem noted by Ken Jones; > patch from Hajimu UMEMOTO. > CONFIG: For consistency enable MODIFY_MAILER_FLAGS for the prog > mailer. Patch from John Beck of Sun Microsystems. > LIBMILTER: It was possible that xxfi_abort() was called after > xxfi_eom() for a message if some timeouts were triggered. > Patch from Alexey Kravchuk. > LIBMILTER: Slightly rearrange mutex use in listener.c to allow > different threads to call smfi_opensocket() and smfi_main(). > Patch from Jordan Ritter of Cloudmark. > MAIL.LOCAL: Properly terminate MBDB before exiting. Problem > noted by Nelson Fung. > MAIL.LOCAL: make strip-mail.local used a wrong path to access > mail.local. Problem noted by William Park. > VACATION: Properly terminate MBDB before exiting. Problem noted > by Nelson Fung. > Portability: > Add support for DragonFly BSD. > New Files: > cf/ostype/dragonfly.m4 > devtools/OS/DragonFly > include/sm/os/sm_os_dragonfly.h > Deleted Files: > libsm/vsscanf.c @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.73 2004/08/30 20:16:28 adrianp Exp $ a39 3 @@${CAT} ${FILESDIR}/site.config.m4-sasl >>${SITECONFIG} .endif .if !empty(PKG_OPTIONS:Msasl2) @ 1.73 log @Update of sendmail to 8.13.1 pkgsrc changes: - move to use options.mk framework - solaris support tidy-up - fix linux man page extension handling bug - allow for a user defined smrsh directory - update MASTER_SITES - optional SOCKETMAP support and sample script installation - ok'ed snj@@/wiz@@ Summary of some of the major changes include: - New map "socket" to query maps via TCP/IP sockets. - Connection rate control as well as control over the number of incoming open connections. - Several LDAP enhancements such as LDAP recursion and LDAP URI support. - Message quarantining. - AUTH EXTERNAL will only be enabled if STARTTLS was successful and the client has been authenticated, i.e., {verify} is OK. - Basic support for certificate revocation lists. - New queue timeouts for DSN messages. - Experimental support for MTAMark. For a full list of changes see: - http://www.sendmail.org/8.13.0.html - http://www.sendmail.org/8.13.1.html @ text @d1 1 a1 1 # $NetBSD$ a59 6 .if !empty(PKG_OPTIONS:Mdb2) @@${ECHO} "" >>${MESSAGE_SRC} @@${ECHO} "If you are upgrading from \"sendmail\" 8.8.x don't forget to rebuild all" >>${MESSAGE_SRC} @@${ECHO} "databases with \"${PREFIX}/bin/newaliases\" and \"${PREFIX}/sbin/makemap\"." >>${MESSAGE_SRC} .endif a72 4 .if !empty(PKG_OPTIONS:Mdb2) @@${MV} -f /usr/sbin/makemap /usr/sbin/makemap.8.8 || ${TRUE} .endif @ 1.72 log @Add CONFLICTS with the upcoming mail/fastforward update. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.71 2004/06/23 11:02:02 cjep Exp $ d13 19 a31 4 .if ${OPSYS} == "SunOS" USE_DB2?= YES .else USE_DB2?= NO d33 2 a34 4 .if defined(USE_DB4) && ${USE_DB4} == YES .include "../../databases/db4/buildlink3.mk" .elif ${USE_DB2} == YES .include "../../databases/db/buildlink3.mk" d36 2 a37 3 .if defined(USE_OPENLDAP) && ${USE_OPENLDAP} == YES .include "../../databases/openldap/buildlink3.mk" d39 2 a40 5 .if defined(USE_SASL2) && ${USE_SASL2} == YES .include "../../security/cyrus-sasl2/buildlink3.mk" .elif defined(USE_SASL) && ${USE_SASL} == YES .include "../../security/cyrus-sasl/buildlink3.mk" d42 2 a43 3 .if defined(USE_STARTTLS) && ${USE_STARTTLS} == YES .include "../../security/openssl/buildlink3.mk" d45 3 a47 4 USE_TCPWRAPPERS?= YES .if ${USE_TCPWRAPPERS} == YES .include "../../security/tcp_wrappers/buildlink3.mk" d50 2 a51 28 post-patch: make-sendmail-siteconfig .if ${USE_TCPWRAPPERS} == YES ${CAT} ${FILESDIR}/site.config.m4-tcpwrappers >>${SITECONFIG} ${ECHO} -n ' TCPWRAPPERS' >>${DESCR_SRC} .endif .if defined(USE_OPENLDAP) && ${USE_OPENLDAP} == YES ${CAT} ${FILESDIR}/site.config.m4-ldap >>${SITECONFIG} ${ECHO} -n ' LDAP' >>${DESCR_SRC} .endif .if defined(USE_DB4) && ${USE_DB4} == YES ${CAT} ${FILESDIR}/site.config.m4-db4 >>${SITECONFIG} ${ECHO} -n ' DB4' >>${DESCR_SRC} .elif ${USE_DB2} == YES ${CAT} ${FILESDIR}/site.config.m4-db2 >>${SITECONFIG} ${ECHO} -n ' DB2' >>${DESCR_SRC} .endif .if defined(USE_STARTTLS) && ${USE_STARTTLS} == YES ${CAT} ${FILESDIR}/site.config.m4-starttls >>${SITECONFIG} ${ECHO} -n ' STARTTLS' >>${DESCR_SRC} .endif .if defined(USE_SASL2) && ${USE_SASL2} == YES ${CAT} ${FILESDIR}/site.config.m4-sasl2 >>${SITECONFIG} ${ECHO} -n ' SASL2' >>${DESCR_SRC} .elif defined(USE_SASL) && ${USE_SASL} == YES ${CAT} ${FILESDIR}/site.config.m4-sasl >>${SITECONFIG} ${ECHO} -n ' SASL' >>${DESCR_SRC} .endif ${ECHO} >>${DESCR_SRC} d57 7 a63 10 ${SED} -e 's#@@@@PREFIX@@@@#${PREFIX}#g' \ <${FILESDIR}/mailer.conf >${WRKDIR}/mailer.conf.sendmail ${CP} ${PKGDIR}/PLIST ${PLIST_SRC} ${CP} ${PKGDIR}/MESSAGE ${MESSAGE_SRC} .if ${USE_DB2} == YES ${ECHO} "" >>${MESSAGE_SRC} ${ECHO} "If you are upgrading from \"sendmail\" 8.8.x don't forget to rebuild all" >>${MESSAGE_SRC} ${ECHO} "databases with \"${PREFIX}/bin/newaliases\" and \"${PREFIX}/sbin/makemap\"." >>${MESSAGE_SRC} ${ECHO} >>${PLIST_SRC} "@@exec mv -f /usr/sbin/makemap /usr/sbin/makemap.8.8 || true" ${ECHO} >>${PLIST_SRC} "@@unexec mv -f /usr/sbin/makemap.8.8 /usr/sbin/makemap || true" d70 1 d73 3 a75 1 ${INSTALL_DATA} ${WRKDIR}/mailer.conf.sendmail ${PREFIX}/share/examples/sendmail/mailer.conf d78 3 a80 2 .if ${USE_DB2} == YES ${MV} -f /usr/sbin/makemap /usr/sbin/makemap.8.8 || ${TRUE} d82 2 a83 1 ${INSTALL_DATA} ${WRKSRC}/obj.`uname -srm | ${TR} \ . | ${TR} \/ - | ${SED} s/sun4./sun4/`/libsm/libsm.a \ d85 1 d87 1 a87 1 ${WRKSRC}/obj.`uname -srm | ${TR} \ . | ${TR} \/ - | ${SED} s/sun4./sun4/`/libsmutil/libsmutil.a \ d90 13 d110 1 a110 1 OBJDIR!= ${ECHO} obj.`uname -srm | ${TR} \ . | ${TR} \/ -` @ 1.71 log @Handle installation of PREFIX/share/sendmail better. Fixes PR#23735 @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.70 2004/05/09 21:14:43 snj Exp $ d8 1 a8 1 CONFLICTS+= postfix-[0-9]* @ 1.70 log @Convert to buildlink3. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.69 2004/04/21 21:09:31 cube Exp $ d93 1 d95 1 a95 1 ${CP} -pr ${WRKSRC}/cf ${PREFIX}/share/sendmail @ 1.69 log @Drop localized *_USE_LDAP definitions and consistently use USE_OPENLDAP instead. As announced on tech-pkg. Most notably affected are Postfix, sendmail, Samba and cyrus-saslauthd. Be sure to update your mk.conf accordingly. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.68 2004/03/27 22:07:32 tron Exp $ d19 1 a19 1 .include "../../databases/db4/buildlink2.mk" d21 1 a21 1 .include "../../databases/db/buildlink2.mk" d25 1 a25 1 .include "../../databases/openldap/buildlink2.mk" d29 1 a29 1 .include "../../security/cyrus-sasl2/buildlink2.mk" d31 1 a31 1 .include "../../security/cyrus-sasl/buildlink2.mk" d35 1 a35 1 .include "../../security/openssl/buildlink2.mk" d40 1 a40 1 .include "../../security/tcp_wrappers/buildlink2.mk" @ 1.68 log @Update "sendmail" and "libmilter" packages to version 8.12.11. Changes since version 8.12.10: Use QueueFileMode when opening qf files. This error was a regression in 8.12.10. Problem detected and diagnosed Lech Szychowski of the Polish Power Grid Company. Properly count the number of queue runners in a work group and make sure the total limit of MaxQueueChildren is not exceeded. Based on patch from Takayuki Yoshizawa of Techfirm, Inc. Take care of systems that can generate time values where the seconds can exceed the usual range of 0 to 59. Problem noted by Randy Diffenderfer of EDS. Avoid regeneration of identical queue identifiers by processes whose process id is the same as that of the initial sendmail process that was used to start the daemon. Problem noted by Randy Diffenderfer of EDS. When a milter invokes smfi_delrcpt() compare the supplied recipient address also against the printable addresses of the current list to deal with rewritten addresses. Based on patch from Sean Hanson of The Asylum. BadRcptThrottle now also works for addresses which return the error mailer, e.g., virtusertable entries with the right hand side error:. Patch from Per Hedeland. Fix printing of 8 bit characters as octals in log messages. Based on patch by Andrey J. Melnikoff. Undo change of algorithm for MIME 7-bit base64 encoding to 8-bit text that has been introduced in 8.12.3. There are some examples where the new code fails, but the old code works. To get the 8.12.3-8.12.10 version, compile sendmail with -DMIME7TO8_OLD=0. If you have an example of improper 7 to 8 bit conversion please send it to us. Return normal error code for unknown SMTP commands instead of the one specified by check_relay or a milter for a connection. Problem noted by Andrzej Filip. Some ident responses contain data after the terminating CRLF which causes sendmail to log "POSSIBLE ATTACK...newline in string". To avoid this everything after LF is ignored. If the operating system supports O_EXLOCK and HASFLOCK is set then a possible race condition for creating qf files can be avoided. Note: the race condition does not exist within sendmail, but between sendmail and an external application that accesses qf files. Log the proper options name for TLS related mising files for the CACertPath, CACertFile, and DHParameters options. Do not split an envelope if it will be discarded, otherwise df files could be left behind. Problem found by Wolfgang Breyha. The use of the environment variables HOME and HOSTALIASES has been deprecated and will be removed in version 8.13. This only effects configuration which preserve those variable via the 'E' command in the cf file as sendmail clears out its entire environment. Portability: Add support for Darwin 7.0/Mac OS X 10.3 (a.k.a. Panther). Solaris 10 has unsetenv(), patch from Craig Mohrman of Sun Microsystems. LIBMILTER: Add extra checks in case a broken MTA sends bogus data to libmilter. Based on code review by Rob Grzywinski. SMRSH: Properly assemble commands that contain '&&' or '||'. Problem noted by Eric Lee of Talking Heads. New Files: devtools/OS/Darwin.7.0 @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.67 2004/03/07 10:20:06 grant Exp $ d24 1 a24 1 .if defined(USE_LDAP) && ${USE_LDAP} == YES d48 1 a48 1 .if defined(USE_LDAP) && ${USE_LDAP} == YES @ 1.67 log @add CONFLICT on postfix, which also installs bin/mailq and bin/newaliases. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.66 2003/12/03 22:11:02 reed Exp $ a5 1 PKGREVISION= 2 @ 1.66 log @Replace any "/" in OPSYS name with a "-". Sendmail's build mechanism already does this, so pkgsrc for this should do the same. Make sure getipnodebyaddr is used under BSD/OS. This closes PR #23060. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.65 2003/12/02 05:45:12 ben Exp $ d9 2 @ 1.65 log @This package would install a directory and two files on the build machine that do make it into the binary package. Under the default configuration on NetBSD these files are erroneous. This fix should resolve PR 20852 Here are the details: 1) /etc/mail/statistics This file is created like so: statistics: ${CP} /dev/null statistics This file is not needed because sendmail is configured to use: O StatusFile=/var/log/sendmail.st To avoid creating this file, I added to devtools/OS/NetBSD: define(`confNO_STATISTICS_INSTALL', `') 2) /etc/mail/submit.cf This file is not needed because we install it as: ${PREFIX}/share/sendmail/cf/submit.cf To avoid installing /etc/mail/submit.cf, I added to devtools/OS/NetBSD: define(`confINST_DEP', `') If confINST_DEP is undefined, then it will default to: `${DESTDIR}/etc/mail/submit.cf ${DESTDIR}${MSPQ}' 3) /var/db/pkg/sendmail-8.12.8nb1/+INSTALL This is now created by pkg_add with the binary package. It appears the problem is resolved. 4) /var/spool/clientmqueue This directory is not needed because sendmail is configured to use: O QueueDirectory=/var/spool/mqueue To avoid installing this directory, I added to devtools/OS/NetBSD: define(`confINST_DEP', `') @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.64 2003/11/12 03:39:41 jschauma Exp $ d98 1 a98 1 ${INSTALL_DATA} ${WRKSRC}/obj.`uname -srm | ${TR} \ . | ${SED} s/sun4./sun4/`/libsm/libsm.a \ d101 1 a101 1 ${WRKSRC}/obj.`uname -srm | ${TR} \ . | ${SED} s/sun4./sun4/`/libsmutil/libsmutil.a \ d111 1 a111 1 OBJDIR!= ${ECHO} obj.`uname -srm | ${TR} \ .` @ 1.64 log @PKGREVISION++ after openssl update. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.63 2003/09/18 09:01:03 grant Exp $ d6 1 a6 1 PKGREVISION= 1 @ 1.63 log @update to sendmail 8.12.10. 8.12.10/8.12.10 2003/09/24 SECURITY: Fix a buffer overflow in address parsing. Problem detected by Michal Zalewski, patch from Todd C. Miller of Courtesan Consulting. Fix a potential buffer overflow in ruleset parsing. This problem is not exploitable in the default sendmail configuration; only if non-standard rulesets recipient (2), final (4), or mailer-specific envelope recipients rulesets are used then a problem may occur. Problem noted by Timo Sirainen. Accept 0 (and 0/0) as valid input for set MaxMimeHeaderLength. Problem noted by Thomas Schulz. Add several checks to avoid (theoretical) buffer over/underflows. Properly count message size when performing 7->8 or 8->7 bit MIME conversions. Problem noted by Werner Wiethege. Properly compute message priority based on size of entire message, not just header. Problem noted by Axel Holscher. Reset SevenBitInput to its configured value between SMTP transactions for broken clients which do not properly announce 8 bit data. Problem noted by Stefan Roehrich. Set {addr_type} during queue runs when processing recipients. Based on patch from Arne Jansen. Better error handling in case of (very unlikely) queue-id conflicts. Perform better error recovery for address parsing, e.g., when encountering a comment that is too long. Problem noted by Tanel Kokk, Union Bank of Estonia. Add ':' to the allowed character list for bogus HELO/EHLO checking. It is used for IPv6 domain literals. Patch from Iwaizako Takahiro of FreeBit Co., Ltd. Reset SASL connection context after a failed authentication attempt. Based on patch from Rob Siemborski of CMU. Check Berkeley DB compile time version against run time version to make sure they match. Do not attempt AAAA (IPv6) DNS lookups if IPv6 is not enabled in the kernel. When a milter adds recipients and one of them causes an error, do not ignore the other recipients. Problem noted by Bart Duchesne. CONFIG: Use specified SMTP error code in mailertable entries which lack a DSN, i.e., "error:### Text". Problem noted by Craig Hunt. CONFIG: Call Local_trust_auth with the correct argument. Patch from Jerome Borsboom. CONTRIB: Better handling of temporary filenames for doublebounce.pl and expn.pl to avoid file overwrites, etc. Patches from Richard A. Nelson of Debian and Paul Szabo. MAIL.LOCAL: Fix obscure race condition that could lead to an improper mailbox truncation if close() fails after the mailbox is fsync()'ed and a new message is delivered after the close() and before the truncate(). MAIL.LOCAL: If mail delivery fails, do not leave behind a stale lockfile (which is ignored after the lock timeout). Patch from Oleg Bulyzhin of Cronyx Plus LLC. Portability: Port for AIX 5.2. Thanks to Steve Hubert of University of Washington for providing access to a computer with AIX 5.2. setreuid(2) works on OpenBSD 3.3. Patch from Todd C. Miller of Courtesan Consulting. Allow for custom definition of SMRSH_CMDDIR and SMRSH_PATH on all operating systems. Patch from Robert Harker of Harker Systems. Use strerror(3) on Linux. If this causes a problem on your Linux distribution, compile with -DHASSTRERROR=0 and tell sendmail.org about it. Added Files: devtools/OS/AIX.5.2 update provided by Adrian Portelli in PR pkg/22836. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.62 2003/09/15 11:59:11 markd Exp $ d6 1 @ 1.62 log @Build Milter support in sendmail unconditionally. There is little impact if no milters configured and setting is consistent with how the in-tree version is built. Bump PKGREVISION. Closes PR pkg/21010 from Todd Vierling. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.61 2003/08/11 11:41:51 markd Exp $ a5 1 PKGREVISION= 5 @ 1.61 log @All sun4's are created equal (as far as sendmail is concerned). @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.60 2003/06/10 09:56:17 wiz Exp $ d6 1 a6 1 PKGREVISION= 4 a97 1 .if defined(USE_MILTER) && ${USE_MILTER} == "YES" a102 3 ${ECHO} "lib/libsm.a" >> ${WRKDIR}/.PLIST_SRC ${ECHO} "lib/libsmutil.a" >> ${WRKDIR}/.PLIST_SRC .endif @ 1.60 log @Bump PKGREVISION because of db4 shlib major bump. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.59 2003/05/02 11:55:40 wiz Exp $ d99 1 a99 1 ${INSTALL_DATA} ${WRKSRC}/obj.`uname -srm | ${TR} \ .`/libsm/libsm.a \ d102 1 a102 1 ${WRKSRC}/obj.`uname -srm | ${TR} \ .`/libsmutil/libsmutil.a \ @ 1.59 log @Dependency bumps, needed because of devel/pth's major bump, and related dependency bumps. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.58 2003/05/01 15:19:12 jmmv Exp $ d6 1 a6 1 PKGREVISION= 3 @ 1.58 log @Move the example mailer.conf file to the examples directory. Bump PKGREVISION to 2 (and fix PKGNAME). @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.57 2003/04/17 16:13:54 manu Exp $ d6 1 a6 1 PKGREVISION= 2 @ 1.57 log @If USE_MILTER, install libsm.a and libsmutil.a. They are needed in order to build amavis-perl 0.1 with milter support. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.56 2003/03/04 00:21:31 seb Exp $ d5 2 a6 1 PKGNAME= sendmail-${DIST_VERS}nb1 d91 2 a92 1 ${INSTALL_DATA} ${WRKDIR}/mailer.conf.sendmail ${PREFIX}/etc @ 1.56 log @Update to version 8.12.8. Security related change included. Also SASL 2 support added and PLIST tuning. 8.12.8/8.12.8 2003/02/11 SECURITY: Fix a remote buffer overflow in header parsing by dropping sender and recipient header comments if the comments are too long. Problem noted by Mark Dowd of ISS X-Force. Fix a potential non-exploitable buffer overflow in parsing the .cf queue settings and potential buffer underflow in parsing ident responses. Problem noted by Yichen Xie of Stanford University Compilation Group. Fix ETRN #queuegroup command: actually start a queue run for the selected queue group. Problem noted by Jos Vos. If MaxMimeHeaderLength is set and a malformed MIME header is fixed, log the fixup as "Fixed MIME header" instead of "Truncated MIME header". Problem noted by Ian J Hart. CONFIG: Fix regression bug in proto.m4 that caused a bogus error message: "FEATURE() should be before MAILER()". MAIL.LOCAL: Be more explicit in some error cases, i.e., whether a mailbox has more than one link or whether it is not a regular file. Patch from John Beck of Sun Microsystems. 8.12.7/8.12.7 2002/12/29 Properly clean up macros to avoid persistence of session data across various connections. This could cause session oriented restrictions, e.g., STARTTLS requirements, to erroneously allow a connection. Problem noted by Tim Maletic of Priority Health. Do not lookup MX records when sorting the MSP queue. The MSP only needs to relay all mail to the MTA. Problem found by Gary Mills of the University of Manitoba. Do not restrict the length of connection information to 100 characters in some logging statements. Problem noted by Erik Parker. When converting an enhanced status code to an exit status, use EX_CONFIG if the first digit is not 2, 4, or 5 or if *.1.5 is used. Reset macro $x when receiving another MAIL command. Problem noted by Vlado Potisk of Wigro s.r.o. Don't bother setting the permissions on the build area statistics file, the proper permissions will be put on the file at install time. This fixes installation over NFS for some users. Problem noted by Martin J. Dellwo of 3-Dimensional Pharmaceuticals, Inc. Fix problem of decoding SASLv2 encrypted data. Problem noted by Alex Deiter of Mobile TeleSystems, Komi Republic. Log milter socket open errors at MilterLogLevel 1 or higher instead of 11 or higher. Print early system errors to the console instead of silently exiting. Problem noted by James Jong of IBM. Do not process a queue group if Runners is set to 0, regardless of whether F=f or sendmail is run in verbose mode (-v). The use of -qGname will still force queue group "name" to be run even if Runners=0. Change the level for logging the fact that a daemon is refusing connections due to high load from LOG_INFO to LOG_NOTICE. Patch from John Beck of Sun Microsystems. Use location information for submit.cf from NetInfo (/locations/sendmail/submit.cf) if available. Re-enable ForkEachJob which was lost in 8.12.0. Problem noted by Neil Rickert of Northern Illinois University. Make behavior of /canon in debug mode consistent with usage in rulesets. Patch from Shigeno Kazutaka of IIJ. Fix a potential memory leak in envelope splitting. Problem noted by John Majikes of IBM. Do not try to share an mailbox database LDAP connection across different processes. Problem noted by Randy Kunkee. Fix logging for undelivered recipients when the SMTP connection times out during message collection. Problem noted by Neil Rickert of Northern Illinois University. Avoid problems with QueueSortOrder=random due to problems with qsort() on Solaris (and maybe some other operating systems). Problem noted by Stephan Schulz of Gruner+Jahr.. If -f "" is specified, set the sender address to "<>". Problem noted by Matthias Andree. Fix formatting problem of footnotes for plain text output on some versions of tmac. Patch from Per Hedeland. Portability: Berkeley DB 4.1 support (requires at least 4.1.25). Some getopt(3) implementations in GNU/Linux are broken and pass a NULL pointer to an option which requires an argument, hence the builtin version of sendmail is used instead. This can be overridden by using -DSM_CONF_GETOPT=0. Problem noted by Vlado Potisk of Wigro s.r.o. Support for nph-1.2.0 from Mark D. Roth of the University of Illinois at Urbana-Champaign. Support for FreeBSD 5.0's MAC labeling from Robert Watson of the TrustedBSD Project. Support for reading the number of processors on an IRIX system from Michel Bourget of SGI. Support for UnixWare 7.1 based on input from Larry Rosenman. Interix support from Nedelcho Stanev of Atlantic Sky Corporation. Update Mac OS X/Darwin portability from Wilfredo Sanchez. CONFIG: Enforce tls_client restrictions even if delay_checks is used. Problem noted by Malte Starostik. CONFIG: Deal with an empty hostname created via bogus DNS entries to get around access restrictions. Problem noted by Kai Schlichting. CONFIG: Use FEATURE(`msp', `[127.0.0.1]') in submit.mc by default to avoid problems with hostname resolution for localhost which on many systems does not resolve to 127.0.0.1 (or ::1 for IPv6). If you do not use IPv4 but only IPv6 then you need to change submit.mc accordingly, see the comment in the file itself. CONFIG: Set confDONT_INIT_GROUPS to True in submit.mc to avoid error messages from initgroups(3) on AIX 4.3 when sending mail to non-existing users. Problem noted by Mark Roth of the University of Illinois at Urbana-Champaign. CONFIG: Allow local_procmail to override local_lmtp settings. CONFIG: Always allow connections from 127.0.0.1 or IPv6:::1 to relay. CONTRIB: cidrexpand: Deal with the prefix tags that may be included in access_db. CONTRIB: New version of doublebounce.pl contributed by Leo Bicknell. LIBMILTER: On Solaris libmilter may get into an endless loop if an error in the communication from/to the MTA occurs. Patch from Gurusamy Sarathy of Active State. LIBMILTER: Ignore EINTR from sigwait(3) which may happen on Tru64. Patch from from Jose Marcio Martins da Cruz of Ecole Nationale Superieure des Mines de Paris. MAIL.LOCAL: Fix a truncation race condition if the close() on the mailbox fails. Problem noted by Tomoko Fukuzawa of Sun Microsystems. MAIL.LOCAL: Fix a potential file descriptor leak if mkstemp(3) fails. Patch from John Beck of Sun Microsystems. SMRSH: SECURITY: Only allow regular files or symbolic links to be used for a command. Problem noted by David Endler of iDEFENSE, Inc. New Files: devtools/OS/Interix include/sm/bdb.h @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.55 2003/01/28 22:03:39 jlam Exp $ d5 1 a5 1 PKGNAME= sendmail-${DIST_VERS} d95 9 @ 1.55 log @Instead of including bsd.pkg.install.mk directly in a package Makefile, have it be automatically included by bsd.pkg.mk if USE_PKGINSTALL is set to "YES". This enforces the requirement that bsd.pkg.install.mk be included at the end of a package Makefile. Idea suggested by Julio M. Merino Vidal . @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.54 2002/10/03 10:09:03 markd Exp $ d26 3 a28 1 .if defined(USE_SASL) && ${USE_SASL} == YES d61 4 a64 1 .if defined(USE_SASL) && ${USE_SASL} == YES @ 1.54 log @Add missing uid field in PKG_USERS entry. From kivinen@@ssh.fi in pkg/18518 @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.53 2002/09/23 12:56:57 markd Exp $ d92 1 a95 1 .include "../../mk/bsd.pkg.install.mk" @ 1.53 log @Update to sendmail-8.12.6 Large number of bug fixes and feature enhancements, especially Milter (Mail Filter) support and by default installation of sendmail does not use set-user-ID root anymore. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.52 2002/08/21 07:47:05 seb Exp $ d93 1 a93 1 PKG_USERS= smmsp:smmsp:Sendmail\\ Message\\ Submission\\ Program @ 1.52 log @If using SASL cyrus-sasl package is actually needed. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.51 2002/06/23 12:15:03 tron Exp $ d3 1 a3 18 DISTNAME= sendmail.8.11.6 PKGNAME= sendmail-8.11.6 PKGREVISION= 1 CATEGORIES= mail MASTER_SITES= ftp://ftp.sendmail.org/pub/sendmail/ \ ftp://ftp.fu-berlin.de/pub/unix/mail/sendmail/ \ ftp://ftp.kyoto.wide.ad.jp/pub/mail/sendmail/ USE_WIDEPATCH?= YES .if ${USE_WIDEPATCH} == "YES" PATCH_SITES= ftp://ftp.kyoto.wide.ad.jp/pub/mail/smtpfeed/ PATCHFILES= sendmail8.11.6+3.4W.patch.gz PATCH_DIST_ARGS=-d ${WRKSRC}/sendmail -E ${PATCH_DIST_STRIP} .if !(defined(PATCH_DEBUG) || defined(PKG_VERBOSE)) PATCH_DIST_ARGS+=--forward --quiet .endif PATCH_DIST_STRIP= -p1 .endif d5 1 a5 2 MAINTAINER= packages@@netbsd.org HOMEPAGE= http://www.sendmail.org/ a7 10 LICENSE= no-profit MAKE_ENV+= BSD_BINOWN="${BINOWN}" BSD_BINGRP="${BINGRP}" \ BSD_MANOWN="${MANOWN}" BSD_MANGRP="${MANGRP}" \ BUILDLINK_DIR="${BUILDLINK_DIR}" WRKSRC= ${WRKDIR}/${PKGNAME:C/nb[0-9]+$//} SITECONFIG= ${WRKSRC}/devtools/Site/site.config.m4 BUILD_DEFS+= USE_WIDEPATCH USE_INET6 USE_TCPWRAPPERS USE_LDAP USE_DB2 \ USE_SASL USE_STARTTLS a9 6 DESCR_SRC= ${WRKDIR}/.DESCR_SRC .include "../../mk/bsd.prefs.mk" # Make sure that ${BUILDLINK_DIR} is defined even no "buildlink.mk" gets # included below. .include "../../mk/bsd.buildlink.mk" d16 4 a19 2 .if ${USE_DB2} == YES .include "../../databases/db/buildlink.mk" d23 1 a23 1 .include "../../databases/openldap/buildlink.mk" d27 1 a27 1 .include "../../security/cyrus-sasl/buildlink.mk" d31 1 a31 1 .include "../../security/openssl/buildlink.mk" d36 1 a36 1 .include "../../security/tcp_wrappers/buildlink.mk" d39 1 a39 13 post-patch: ${CP} ${FILESDIR}/site.config.m4 ${SITECONFIG} ${CHMOD} +w ${SITECONFIG} ${CP} ${PKGDIR}/DESCR ${DESCR_SRC} ${ECHO} '---' >>${DESCR_SRC} ${ECHO} -n 'compiled features:' >>${DESCR_SRC} .if ${USE_WIDEPATCH} == YES ${ECHO} -n ' WIDE' >>${DESCR_SRC} .endif .if defined(USE_INET6) && ${USE_INET6} == YES ${CAT} ${FILESDIR}/site.config.m4-v6 >>${SITECONFIG} ${ECHO} -n ' INET6' >>${DESCR_SRC} .endif a43 3 .if ${OPSYS} == "SunOS" ${CAT} ${FILESDIR}/site.config.m4-solaris >>${SITECONFIG} .endif d48 4 a51 1 .if ${USE_DB2} == YES d92 4 @ 1.51 log @Add optional SASL support via the "cyrus-sasl" package. Based on changes supplied by Stoned Elipot in PR pkg/13316. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.50 2002/06/23 11:46:03 tron Exp $ d56 4 @ 1.51.6.1 log @Pull up revision 1.52 of the package Makefile onto the 1.6 pkgsrc branch. Requested by Stoned Elipot. > From: Stoned Elipot > Date: Wed, 21 Aug 2002 10:47:07 +0300 (EEST) > > Module Name: pkgsrc > Committed By: seb > Date: Wed Aug 21 07:47:06 UTC 2002 > > Modified Files: > pkgsrc/mail/sendmail: Makefile > > Log Message: > If using SASL cyrus-sasl package is actually needed. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.52 2002/08/21 07:47:05 seb Exp $ a55 4 .endif .if defined(USE_SASL) && ${USE_SASL} == YES .include "../../security/cyrus-sasl/buildlink.mk" @ 1.50 log @Improve buildlink support by adding the required "-I" and "-L" definitions only once in "site.config.m4" and not in each configuration file. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.49 2002/06/17 21:08:16 tron Exp $ d35 1 a35 1 USE_STARTTLS d71 2 a72 2 ${ECHO} '---' >> ${DESCR_SRC} ${ECHO} -n 'compiled features:' >> ${DESCR_SRC} d74 1 a74 1 ${ECHO} -n ' WIDE' >> ${DESCR_SRC} d77 2 a78 2 ${CAT} ${FILESDIR}/site.config.m4-v6 >> ${SITECONFIG} ${ECHO} -n ' INET6' >> ${DESCR_SRC} d81 2 a82 2 ${CAT} ${FILESDIR}/site.config.m4-tcpwrappers >> ${SITECONFIG} ${ECHO} -n ' TCPWRAPPERS' >> ${DESCR_SRC} d85 1 a85 1 ${CAT} ${FILESDIR}/site.config.m4-solaris >> ${SITECONFIG} d88 2 a89 2 ${CAT} ${FILESDIR}/site.config.m4-ldap >> ${SITECONFIG} ${ECHO} -n ' LDAP' >> ${DESCR_SRC} d92 2 a93 2 ${CAT} ${FILESDIR}/site.config.m4-db2 >> ${SITECONFIG} ${ECHO} -n ' DB2' >> ${DESCR_SRC} d96 2 a97 2 ${CAT} ${FILESDIR}/site.config.m4-starttls >> ${SITECONFIG} ${ECHO} -n ' STARTTLS' >> ${DESCR_SRC} d99 5 a103 1 ${ECHO} >> ${DESCR_SRC} d114 3 a116 3 ${ECHO} "" >> ${MESSAGE_SRC} ${ECHO} "If you are upgrading from \"sendmail\" 8.8.x don't forget to rebuild all" >> ${MESSAGE_SRC} ${ECHO} "databases with \"${PREFIX}/bin/newaliases\" and \"${PREFIX}/sbin/makemap\"." >> ${MESSAGE_SRC} @ 1.49 log @Complete buildlink conversation of this package by using it for the "db" package, too. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.48 2002/06/17 21:05:06 tron Exp $ a35 3 .include "../../mk/bsd.prefs.mk" d39 5 @ 1.48 log @Fix and buildlinkify broken LDAP support. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.47 2002/06/17 20:56:53 tron Exp $ d49 1 a49 1 DEPENDS+= db-2.7.7:../../databases/db @ 1.47 log @Don't use TCP wrappers only under NetBSD. Turn it into a build option and use the "tcp_wrapper" package if necessary. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.46 2002/06/17 20:21:46 tron Exp $ d53 1 a53 1 DEPENDS+= openldap-1.2.*:../../databases/openldap @ 1.46 log @Record various build definitions. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.45 2002/06/17 20:13:10 tron Exp $ d34 2 a35 1 BUILD_DEFS+= USE_WIDEPATCH USE_INET6 USE_LDAP USE_DB2 USE_STARTTLS d39 4 d48 3 a50 4 MESSAGE_SRC= ${WRKDIR}/.MESSAGE_SRC PLIST_SRC= ${WRKDIR}/.PLIST_SRC DESCR_SRC= ${WRKDIR}/.DESCR_SRC d55 1 a55 3 .if ${USE_DB2} == YES DEPENDS+= db-2.7.7:../../databases/db .endif d60 5 d78 1 a78 1 .if ${OPSYS} == "NetBSD" @ 1.45 log @Fix this package to use buildlink instead of "USE_SSL". @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.44 2002/06/17 13:27:14 wiz Exp $ d34 1 a34 1 BUILD_DEFS+= USE_INET6 @ 1.44 log @Undo last for now -- needs more changes. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.42 2001/11/29 01:12:40 hubertf Exp $ a27 1 NO_CONFIGURE= yes d29 2 a30 2 BSD_MANOWN="${MANOWN}" BSD_MANGRP="${MANGRP}" d55 1 a55 1 USE_SSL= yes d93 1 a93 1 @@(cd ${WRKSRC}; ./Build) @ 1.43 log @Use openssl buildlink.mk instead of USE_SSL. @ text @d56 1 a56 1 .include "../../security/openssl/buildlink.mk" @ 1.42 log @Get rid of manually adding "nbX" to PKGNAME when a pkg was changed in pkgsrc. Instead, a new variable PKGREVISION is invented that can get bumped independent of DISTNAME and PKGNAME. Example #1: DISTNAME= foo-X.Y PKGREVISION= Z => PKGNAME= foo-X.YnbZ Example #2: DISTNAME= barthing-X.Y PKGNAME= bar-X.Y PKGREVISION= Z => PKGNAME= bar=X.YnbZ (!) On subsequent changes, only PKGREVISION needs to be bumped, no more risk of getting DISTNAME changed accidentally. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.41 2001/10/19 08:51:31 veego Exp $ d56 1 a56 1 USE_SSL= yes @ 1.42.2.1 log @Merge from pkgsrc-current to buildlink2 branch. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.49 2002/06/17 21:08:16 tron Exp $ d28 1 d30 2 a31 2 BSD_MANOWN="${MANOWN}" BSD_MANGRP="${MANGRP}" \ BUILDLINK_DIR="${BUILDLINK_DIR}" d35 1 a35 2 BUILD_DEFS+= USE_WIDEPATCH USE_INET6 USE_TCPWRAPPERS USE_LDAP USE_DB2 \ USE_STARTTLS a38 4 MESSAGE_SRC= ${WRKDIR}/.MESSAGE_SRC PLIST_SRC= ${WRKDIR}/.PLIST_SRC DESCR_SRC= ${WRKDIR}/.DESCR_SRC d44 4 a47 3 .if ${USE_DB2} == YES .include "../../databases/db/buildlink.mk" .endif d50 4 a53 1 .include "../../databases/openldap/buildlink.mk" a54 1 d56 1 a56 6 .include "../../security/openssl/buildlink.mk" .endif USE_TCPWRAPPERS?= YES .if ${USE_TCPWRAPPERS} == YES .include "../../security/tcp_wrappers/buildlink.mk" d72 1 a72 1 .if ${USE_TCPWRAPPERS} == YES d94 1 a94 1 @@(cd ${WRKSRC}; ${SETENV} ${MAKE_ENV} ./Build) @ 1.41 log @Switch back to one PLIST file by adding a site.config.m4-solaris for the manpage extensions and directories. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.40 2001/09/09 16:41:40 taca Exp $ d4 2 a5 1 PKGNAME= sendmail-8.11.6nb1 @ 1.40 log @Enable wide patch and make this package sendmail-8.11.6nb1. Please look at ${WRKSRC}/sendmail/00READ_ME.WIDE file created by sendmail8.11.6+3.4W.patch.gz for detail of the patch. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.39 2001/08/21 06:49:53 itojun Exp $ d75 3 d98 1 a98 1 ${CAT} ${PKGDIR}/PLIST.common ${PKGDIR}/PLIST.${LOWER_OPSYS} > ${PLIST_SRC} @ 1.39 log @upgrade to 8.11.6. fixes a security problem with command line processing. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.38 2001/08/01 02:39:38 itojun Exp $ d4 1 a4 1 PKGNAME= sendmail-8.11.6 d10 1 a10 1 USE_WIDEPATCH= NO d13 1 a13 1 PATCHFILES= sendmail8.11.3+3.4W.patch.gz d31 1 a31 1 WRKSRC= ${WRKDIR}/${PKGNAME} @ 1.38 log @upgrade to 8.11.5. minor bug fixes from 8.11.4. patch-zz (security patch on signal handling) is now in 8.11.5. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.37 2001/05/29 03:31:26 itojun Exp $ d3 2 a4 2 DISTNAME= sendmail.8.11.5 PKGNAME= sendmail-8.11.5 @ 1.37 log @update to 8.11.4. security related change included (no exploit available yet) 8.11.4/8.11.4 2001/05/28 Clean up signal handling routines to reduce the chances of heap corruption and other potential race conditions. Terminating and restarting the daemon may not be instantaneous due to this change. Also, non-root users can no longer send out-of-band signals. Problem reported by Michal Zalewski of BindView. If LogLevel is greater than 9 and SASL fails to negotiate an encryption layer, avoid core dump logging the encryption strength. Problem noted by Miroslav Zubcic of Crol. If a server offers "AUTH=" and "AUTH " and the list of mechanisms is different in those two lines, sendmail might not have recognized (and used) all of the offered mechanisms. Fix an IP address lookup problem on Solaris 2.0 - 2.3. Patch from Kenji Miyake. This time, really don't use the .. directory when expanding QueueDirectory wildcards. If a process is interrupted while closing a map, don't try to close the same map again while exiting. Allow local mailers (F=l) to contact remote hosts (e.g., via LMTP). Problem noted by Norbert Klasen of the University of Tuebingen. If Timeout.QueueReturn was set to a value less the time it took to write a new queue file (e.g., 0 seconds), the bounce message would be lost. Problem noted by Lorraine L Goff of Oklahoma State University. Pass map argument vector into map rewriting engine for the regex and prog map types. Problem noted by Stephen Gildea of InTouch Systems, Inc. When closing an LDAP map due to a temporary error, close all of the other LDAP maps which share the original map's connection to the LDAP server. Patch from Victor Duchovni of Morgan Stanley. To detect changes of NDBM aliases files check the timestamp of the .pag file instead of the .dir file. Problem noted by Neil Rickert of Northern Illinois University. Don't treat temporary hesiod lookup failures as permanent. Patch from Werner Wiethege. If ClientPortOptions is set, make sure to create the outgoing socket with the family set in that option. Patch from Sean Farley. Avoid a segmentation fault trying to dereference a NULL pointer when logging a MaxHopCount exceeded error with an empty recipient list. Problem noted by Chris Adams of HiWAAY Internet Services. Fix DSN for "Too many hops" bounces. Problem noticed by Ulrich Windl of the Universitaet Regensburg. Fix DSN for "mail loops back to me" bounces. Problem noticed by Kari Hurtta of the Finnish Meteorological Institute. Portability: OpenBSD has a broken setreuid() implementation. CONFIG: Undo change from 8.11.1: change 501 SMTP reply code back to 553 since it is allowed by DRUMS. CONFIG: Add OSTYPE(freebsd4) for FreeBSD 4.X. DEVTOOLS: install.sh did not properly handle paths in the source file name argument. Noted by Kari Hurtta of the Finnish Meteorological Institute. DEVTOOLS: Add FAST_PID_RECYCLE to compile time options for OpenBSD since it generates random process ids. PRALIASES: Add back adaptive algorithm to deal with different endings of entries in the database (with/without trailing '\0'). Patch from John Beck of Sun Microsystems. New Files: cf/ostype/freebsd4.m4 @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.36 2001/04/15 01:18:06 itojun Exp $ d3 2 a4 2 DISTNAME= sendmail.8.11.4 PKGNAME= sendmail-8.11.4 @ 1.36 log @go back to 8.11.3. it was my mistake that i have committed 8.12.0Beta into mail/sendmail. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.34 2001/03/05 11:33:47 itojun Exp $ d3 2 a4 2 DISTNAME= sendmail.8.11.3 PKGNAME= sendmail-8.11.3 d10 2 d19 1 d64 1 d66 1 @ 1.35 log @upgrade to 8.12.0.Beta7. confDELIVERBYMIN and confSHAREDMEMORYKEY have been renamed to confDELIVER_BY_MIN and confSHARED_MEMORY_KEY, respectively. The macro {sendmailMTACluster} replaces {LDAPCluster}. Added FEATURE(`queuegroup') for selecting a queue group in the access database. Added OSTYPE(`freebsd4') sendmail/TUNING gives some hints about performance tuning. Any IPv6 addresses used in configuration should be prefixed by the "IPv6:" tag to identify the address properly. For example, if you want to add the IPv6 address [2002:c0a8:51d2::23f4] to class {w}, you would need to add [IPv6:2002:c0a8:51d2::23f4]; if you want to use it in the access database, you would need to use IPv6:2002:c0a8:51d2::23f4 on the left hand side. @ text @d3 2 a4 2 DISTNAME= sendmail.8.12.0.Beta7 PKGNAME= sendmail-8.11.99.7 d10 7 a16 7 #PATCH_SITES= ftp://ftp.kyoto.wide.ad.jp/pub/mail/smtpfeed/ #PATCHFILES= sendmail8.11.3+3.4W.patch.gz #PATCH_DIST_ARGS=-d ${WRKSRC}/sendmail -E ${PATCH_DIST_STRIP} #.if !(defined(PATCH_DEBUG) || defined(PKG_VERBOSE)) #PATCH_DIST_ARGS+=--forward --quiet #.endif #PATCH_DIST_STRIP= -p1 d28 1 a28 1 WRKSRC= ${WRKDIR}/sendmail-8.12.0.Beta7 d61 1 a61 1 # ${ECHO} -n ' WIDE' >> ${DESCR_SRC} @ 1.34 log @pull in WIDE patch for 8.11.3. this speeds up pkgsrc/mail/smtpfeed (better LMTP). @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.33 2001/02/28 09:30:01 tron Exp $ d3 2 a4 2 DISTNAME= sendmail.8.11.3 PKGNAME= sendmail-8.11.3 d10 7 a16 7 PATCH_SITES= ftp://ftp.kyoto.wide.ad.jp/pub/mail/smtpfeed/ PATCHFILES= sendmail8.11.3+3.4W.patch.gz PATCH_DIST_ARGS=-d ${WRKSRC}/sendmail -E ${PATCH_DIST_STRIP} .if !(defined(PATCH_DEBUG) || defined(PKG_VERBOSE)) PATCH_DIST_ARGS+=--forward --quiet .endif PATCH_DIST_STRIP= -p1 d28 1 a28 1 WRKSRC= ${WRKDIR}/${PKGNAME} d61 1 a61 1 ${ECHO} -n ' WIDE' >> ${DESCR_SRC} @ 1.33 log @Use "ftp.fu-berlin.de" as german mirror because newer sendmail version appear there earlier than on "ftp.cert.dfn.de". @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.32 2001/02/28 03:52:18 itojun Exp $ d10 7 a16 7 #PATCH_SITES= ftp://ftp.kyoto.wide.ad.jp/pub/mail/smtpfeed/ #PATCHFILES= sendmail8.11.2+3.4W.patch.gz #PATCH_DIST_ARGS=-d ${WRKSRC}/sendmail -E ${PATCH_DIST_STRIP} #.if !(defined(PATCH_DEBUG) || defined(PKG_VERBOSE)) #PATCH_DIST_ARGS+=--forward --quiet #.endif #PATCH_DIST_STRIP= -p1 d61 1 a61 1 # ${ECHO} -n ' WIDE' >> ${DESCR_SRC} @ 1.32 log @upgrade to 8.11.3. WIDE patch is not supplied yet, so it is not included. 8.11.3/8.11.3 2001/02/27 Prevent a segmentation fault when a bogus value was used in the LDAPDefaultSpec option's -r, -s, or -M flags and if a bogus option was used. Problem noted by Allan E Johannesen of Worcester Polytechnic Institute. Prevent "token too long" message by shortening {currHeader} which could be too long if the last copied character was a quote. Problem detected by Jan Krueger of digitalanswers communications consulting gmbh. Additional IPv6 check for unspecified addresses. Patch from Jun-ichiro itojun Hagino of the KAME Project. Do not ignore the ClientPortOptions setting if DaemonPortOptions Modifier=b (bind to same interface) is set and the connection came in from the command line. Do not bind to the loopback address if DaemonPortOptions Modifier=b (bind to same interface) is set. Patch from John Beck of Sun Microsystems. Properly deal with open failures on non-optional maps used in check_* rulesets by returning a temporary failure. Buffered file I/O files were not being properly fsync'ed to disk when they were committed. Properly encode '=' for the AUTH= parameter of the MAIL command. Problem noted by Hadmut Danisch. Under certain circumstances the macro {server_name} could be set to the wrong hostname (of a previous connection), which may cause some rulesets to return wrong results. This would usually cause mail to be queued up and delivered later on. Ignore F=z (LMTP) mailer flag if $u is given in the mailer A= equate. Problem noted by Motonori Nakamura of Kyoto University. Work around broken accept() implementations which only partially fill in the peer address if the socket is closed before accept() completes. Return an SMTP "421" temporary failure if the data file can't be opened where the "354" reply would normally be given. Prevent a CPU loop in trying to expand a macro which doesn't exist in a queue run. Problem noted by Gordon Lack of Glaxo Wellcome. If delivering via a program and that program exits with EX_TEMPFAIL, note that fact for the mailq display instead of just showing "Deferred". Problem noted by Motonori Nakamura of Kyoto University. If doing canonification via /etc/hosts, try both the fully qualified hostname as well as the first portion of the hostname. Problem noted by David Bremner of the University of New Brunswick. Portability: Fix a compilation problem for mail.local and rmail if SFIO is in use. Problem noted by Auteria Wally Winzer Jr. of Champion Nutrition. IPv6 changes for platforms using KAME. Patch from Jun-ichiro itojun Hagino of the KAME Project. OpenBSD 2.7 and higher has srandomdev(3). OpenBSD 2.8 and higher has BSDI-style login classes. Patch from Todd C. Miller of Courtesan Consulting. Unixware 7.1.1 doesn't allow h_errno to be set directly if sendmail is being compiled with -kthread. Problem noted by Orion Poplawski of CQG, Inc. CONTRIB: buildvirtuser: Substitute current domain for $DOMAIN and current left hand side for $LHS in virtuser files. DEVTOOLS: Do not pass make targets to recursive Build invocations. Problem noted by Jeff Bronson of J.D. Bronson, Inc. MAIL.LOCAL: In LMTP mode, do not return errors regarding problems storing the temporary message file until after the remote side has sent the final DATA termination dot. Problem noted by Allan E Johannesen of Worcester Polytechnic Institute. MAIL.LOCAL: If LMTP mode is set, give a temporary error if users are also specified on the command line. Patch from Motonori Nakamura of Kyoto University. PRALIASES: Skip over AliasFile specifications which aren't based on database files (i.e., only show dbm, hash, and btree). Renamed Files: devtools/OS/OSF1.V5.0 => devtools/OS/OSF1.V5.x @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.31 2001/02/25 04:17:59 hubertf Exp $ d7 1 a7 1 ftp://ftp.cert.dfn.de/pub/tools/net/sendmail/ \ @ 1.31 log @Cleanup MKDIR usage => INSTALL_*_DIR XXX need to teach pkglint to be more picky about this @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.30 2001/02/17 18:25:04 wiz Exp $ d3 2 a4 2 DISTNAME= sendmail.8.11.2 PKGNAME= sendmail-8.11.2 d10 7 a16 7 PATCH_SITES= ftp://ftp.kyoto.wide.ad.jp/pub/mail/smtpfeed/ PATCHFILES= sendmail8.11.2+3.4W.patch.gz PATCH_DIST_ARGS=-d ${WRKSRC}/sendmail -E ${PATCH_DIST_STRIP} .if !(defined(PATCH_DEBUG) || defined(PKG_VERBOSE)) PATCH_DIST_ARGS+=--forward --quiet .endif PATCH_DIST_STRIP= -p1 @ 1.30 log @Update to new COMMENT style: COMMENT var in Makefile instead of pkg/COMMENT. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.29 2001/02/01 10:33:23 wiz Exp $ d101 1 a101 1 ${MKDIR} ${PREFIX}/libexec/sendmail @ 1.29 log @Remove a test target I forgot I had added. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.28 2001/01/29 11:34:31 wiz Exp $ d20 1 @ 1.28 log @Add automatic ${VARIABLE} handling for MESSAGE files. Convert most MESSAGE files to new syntax (${VARIABLE} gets replaced, not @@VARIABLE@@, nor @@@@VARIABLE@@@@). By default, substitutions are done for LOCALBASE, PKGNAME, PREFIX, X11BASE, X11PREFIX; additional patterns can be added via MESSAGE_SUBST. Clean up some packages while I'm there; add RCS tags to most MESSAGEs. Remove some uninteresting MESSAGEs. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.27 2001/01/21 05:58:50 itojun Exp $ a89 1 test-build: @ 1.27 log @bring in WIDE patch for 8.11.2, to support mail/smtpfeed better. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.26 2001/01/04 12:09:28 itojun Exp $ a26 1 MESSAGE_FILE= ${WRKDIR}/MESSAGE d40 1 a88 3 ${SED} -e 's#@@@@PKGNAME@@@@#${PKGNAME}#g' \ -e 's#@@@@PREFIX@@@@#${PREFIX}#g' \ <${PKGDIR}/MESSAGE >${MESSAGE_FILE} d90 2 d93 3 a95 3 ${ECHO} >>${MESSAGE_FILE} "" ${ECHO} >>${MESSAGE_FILE} "If you are upgrading from \"sendmail\" 8.8.x don't forget to rebuild all" ${ECHO} >>${MESSAGE_FILE} "databases with \"${PREFIX}/bin/newaliases\" and \"${PREFIX}/sbin/makemap\"." @ 1.26 log @upgrade to sendmail 8.11.2. 8.11.2/8.11.2 2000/12/29 Prevent a segmentation fault when trying to set a class in address test mode due to a negative array index. Audit other array indexing. This bug is not believed to be exploitable. Noted by Michal Zalewski of the "Internet for Schools" project (IdS). Add an FFR (for future release) to drop privileges when using address test mode. This will be turned on in 8.12. It can be enabled by compiling with: APPENDDEF(`conf_sendmail_ENVDEF', `-D_FFR_TESTMODE_DROP_PRIVS') in your devtools/Site/site.config.m4 file. Suggested by Michal Zalewski of the "Internet for Schools" project (IdS). Fix potential problem with Cyrus-SASL security layer which may have caused I/O errors, especially for mechanism DIGEST-MD5. When QueueSortOrder was set to host, sendmail might not read enough of the queue file to determine the host, making the sort sub-optimal. Problem noted by Jeff Earickson of Colby College. Don't issue DSNs for addresses which use the NOTIFY parameter (per RFC 1891) but don't have FAILURE as value. Initialize Cyrus-SASL library before the SMTP daemon is started. This implies that every change to SASL related files requires a restart of the daemon, e.g., Sendmail.conf, new SASL mechanisms (in form of shared libraries). Properly set the STARTTLS related macros during a queue run for a cached connection. Bug reported by Michael Kellen of NxNetworks, Inc. Log the server name in relay= for ruleset tls_server instead of the client name. Include original length of bad field/header when reporting MaxMimeHeaderLength problems. Requested by Ulrich Windl of the Universitat Regensburg. Fix delivery to set-user-ID files that are expanded from aliases in DeliveryMode queue. Problem noted by Ric Anderson of the University of Arizona. Fix LDAP map -m (match only) flag. Problem noted by Jeff Giuliano of Collective Technologies. Avoid using a negative argument for sleep() calls when delaying answers to EXPN/VRFY commands on systems which respond very slowly. Problem noted by Mikolaj J. Habryn of Optus Internet Engineering. Make sure the F=u flag is set in the default prog mailer definition. Problem noted by Kari Hurtta of the Finnish Meteorological Institute. Fix IPv6 check for unspecified addresses. Patch from Jun-ichiro itojun Hagino of the KAME Project. Fix return values for IRIX nsd map. From Kari Hurtta of the Finnish Meteorological Institute. Fix parsing of DaemonPortOptions and ClientPortOptions. Read all of the parameters to find Family= setting before trying to interpret Addr= and Port=. Problem noted by Valdis Kletnieks of Virginia Tech. When delivering to a file directly from an alias, do not call initgroups(); instead use the DefaultUser group information. Problem noted by Marc Schaefer of ALPHANET NF. RunAsUser now overrides the ownership of the control socket, if created. Otherwise, sendmail can not remove it upon close. Problem noted by Werner Wiethege. Fix ConnectionRateThrottle counting as the option is the number of overall connections, not the number of connections per socket. A future version may change this to per socket counting. Portability: Clean up libsmdb so it functions properly on platforms where sizeof(u_int32_t) != sizeof(size_t). Problem noted by Rein Tollevik of Basefarm AS. Fix man page formatting for compatibility with Solaris' whatis. From Stephen Gildea of InTouch Systems, Inc. UnixWare 7 includes snprintf() support. From Larry Rosenman. IPv6 changes for platforms using KAME. Patch from Jun-ichiro itojun Hagino of the KAME Project. Avoid a typedef compile conflict with Berkeley DB 3.X and Solaris 2.5 or earlier. Problem noted by Bob Hughes of Pacific Access. Add preliminary support for AIX 5. Contributed by Valdis Kletnieks of Virginia Tech. Solaris 9 load average support from Andrew Tucker of Sun Microsystems. CONFIG: Reject addresses of the form a!b if FEATURE(`nouucp', `r') is used. Problem noted by Phil Homewood of Asia Online, patch from Neil Rickert of Northern Illinois University. CONFIG: Change the default DNS based blacklist server for FEATURE(`dnsbl') to blackholes.mail-abuse.org. CONFIG: Deal correctly with the 'C' flag in {daemon_flags}, i.e., implicitly assume canonical host names. CONFIG: Deal with "::" in IPv6 addresses for access_db. Based on patch by Motonori Nakamura of Kyoto University. CONFIG: New OSTYPE(`aix5') contributed by Valdis Kletnieks of Virginia Tech. CONFIG: Pass the illegal header form through untouched instead of making it worse. Problem noted by Motonori Nakamura of Kyoto University. CONTRIB: Added buildvirtuser (see `perldoc contrib/buildvirtuser`). CONTRIB: qtool.pl: An empty queue is not an error. Problem noted by Jan Krueger of digitalanswers communications consulting gmbh. CONTRIB: domainmap.m4: Handle domains with '-' in them. From Mark Roth of the University of Illinois at Urbana-Champaign. DEVTOOLS: Change the internal devtools OS, REL, and ARCH m4 variables into bldOS, bldREL, and bldARCH to prevent namespace collisions. Problem noted by Motonori Nakamura of Kyoto University. RMAIL: Undo the 8.11.1 change to use -G when calling sendmail. It causes some changes in behavior and may break rmail for installations where sendmail is actually a wrapper to another MTA. The change will re-appear in a future version. SMRSH: Use the vendor supplied directory on HPUX 10.X, HPUX 11.X, and SunOS 5.8. Requested by Jeff A. Earickson of Colby College and John Beck of Sun Microsystems. VACATION: Fix pattern matching for addresses to ignore. VACATION: Don't reply to addresses of the form owner-* or *-owner. New Files: cf/ostype/aix5.m4 contrib/buildvirtuser devtools/OS/AIX.5.0 @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.25 2000/11/19 07:44:38 taca Exp $ d9 8 @ 1.25 log @- re-enable using WIDE patch with sendmail8.11.1+3.4W.patch. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.24 2000/10/15 14:30:21 itojun Exp $ d3 2 a4 2 DISTNAME= sendmail.8.11.1 PKGNAME= sendmail-8.11.1 a9 7 PATCH_SITES= ftp://ftp.kyoto.wide.ad.jp/pub/mail/smtpfeed/ PATCHFILES= sendmail8.11.1+3.4W.patch.gz PATCH_DIST_ARGS=-d ${WRKSRC}/sendmail -E ${PATCH_DIST_STRIP} .if !(defined(PATCH_DEBUG) || defined(PKG_VERBOSE)) PATCH_DIST_ARGS+=--forward --quiet .endif d52 1 a52 1 ${ECHO} -n ' WIDE' >> ${DESCR_SRC} @ 1.24 log @update to 8.11.1. make SASL-enabled build to use tolek stdio code, not sfio code (no longer depends onto devel/sfio) 8.11.1/8.11.1 2000/09/27 Fix SMTP EXPN command output if the address expands to a single name. Fix from John Beck of Sun Microsystems. Don't try STARTTLS in the client if the PRNG has not been properly seeded. This problem only occurs on systems without /dev/urandom. Problem detected by Jan Krueger of digitalanswers communications consulting gmbh and Neil Rickert of Northern Illinois University. Don't use the . and .. directories when expanding QueueDirectory wildcards. Do not try to cache LDAP connections across processes as a parent process may close the connection before the child process has completed. Problem noted by Lai Yiu Fai of the Hong Kong University of Science and Technology and Wolfgang Hottgenroth of UUNET. Use Timeout.fileopen to limit the amount of time spent trying to read the LDAP secret from a file. Prevent SIGTERM from removing a command line submitted item after the user submits the message and before the first delivery attempt completes. Problem noted by Max France of AlphaNet. Fix from Neil Rickert of Northern Illinois University. Deal correctly with MaxMessageSize restriction if message size is greater than 2^31. Turn off queue checkpointing if CheckpointInterval is set to zero. Treat an empty home directory (from getpw*() or $HOME) as non-existent instead of treating it as /. Problem noted by Todd C. Miller of Courtesan Consulting. Don't drop duplicate headers when reading a queued item. Problem noted by Motonori Nakamura of Kyoto University. Avoid bogus error text when logging the savemail panic "cannot save rejected email anywhere". Problem noted by Marc G. Fournier of Acadia University. If an LDAP search fails because the LDAP server went down, close the map so subsequent searches reopen the map. If there are multiple LDAP servers, the down server will be skipped and one of the others may be able to take over. Set the ${load_avg} macro to the current load average, not the previous load average query result. If a non-optional map used in a check_* ruleset can't be opened, return a temporary failure to the remote SMTP client instead of ignoring the map. Problem noted by Allan E Johannesen of Worcester Polytechnic Institute. Avoid a race condition when queuing up split envelopes by saving the split envelopes before the original envelope. Fix a bug in the PH_MAP code which caused mail to bounce instead of defer if the PH server could not be contacted. From Mark Roth of the University of Illinois at Urbana-Champaign. Prevent QueueSortOrder=Filename from interfering with -qR, -qS, and ETRN. Problem noted by Erik R. Leo of SoVerNet. Change error code for unrecognized parameters to the SMTP MAIL and RCPT commands from 501 to 555 per RFC 1869. Problem reported to Postfix by Robert Norris of Monash University. Prevent overwriting the argument of -B on certain OS. Problem noted by Matteo Gelosa of I.NET S.p.A. Use the proper routine for freeing memory with Netscape's LDAP client libraries. Patch from Paul Hilchey of the University of British Columbia. Portability: Move the NETINET6 define to devtools/OS/SunOS.5.{8,9} instead of defining it in conf.h so users can override the setting. Suggested by Henrik Nordstrom of Ericsson. On HP-UX 10.X and 11.X, use /usr/sbin/sendmail instead of /usr/lib/sendmail for rmail and vacation. From Jeff A. Earickson of Colby College. On HP-UX 11.X, use /usr/sbin instead of /usr/libexec (which does not exist). From Jeff A. Earickson of Colby College. Avoid using the UCB subsystem on NCR MP-RAS 3.x. From Tom Moore of NCR. NeXT 3.X and 4.X installs man pages in /usr/man. From Hisanori Gogota of NTT/InterCommunicationCenter. Solaris 8 and later include /var/run. The default PID file location is now /var/run/sendmail.pid. From John Beck of Sun Microsystems. SFIO includes snprintf() for those operating systems which do not. From Todd C. Miller of Courtesan Consulting. CONFIG: Use the result of _CERT_REGEX_SUBJECT_ not {cert_subject}. Problem noted by Kaspar Brand of futureLab AG. CONFIG: Change 553 SMTP reply code to 501 to avoid problems with errors in the MAIL address. CONFIG: Fix FEATURE(nouucp) usage in example .mc files. Problem noted by Ron Jarrell of Virginia Tech. CONFIG: Add support for Solaris 8 (and later) as OSTYPE(solaris8). Contributed by John Beck of Sun Microsystems. CONFIG: Set confFROM_HEADER such that the mail hub can possibly add GECOS information for an address. This more closely matches pre-8.10 nullclient behavior. From Per Hedeland of Ericsson. CONFIG: Fix MODIFY_MAILER_FLAGS(): apply the flag modifications for SMTP to all *smtp* mailers and those for RELAY to the relay mailer as described in cf/README. MAIL.LOCAL: Open the mailbox as the recipient not root so quotas are obeyed. Problem noted by Damian Kuczynski of NIK. MAKEMAP: Do not change a map's owner to the TrustedUser if using makemap to 'unmake' the map. RMAIL: Avoid overflowing the list of recipients being passed to sendmail. RMAIL: Invoke sendmail with '-G' to indicate this is a gateway submission. Problem noted by Kari Hurtta of the Finnish Meteorological Institute. VACATION: Read the complete message to avoid "broken pipe" signals. VACATION: Do not cut off vacation.msg files which have a single dot as the only character on the line. New Files: cf/ostype/solaris8.m4 @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.23 2000/09/03 10:31:27 wiz Exp $ d10 6 a15 6 #PATCH_SITES= ftp://ftp.kyoto.wide.ad.jp/pub/mail/smtpfeed/ #PATCHFILES= sendmail8.11.0+3.3W.patch.gz #PATCH_DIST_ARGS=-d ${WRKSRC}/sendmail -E ${PATCH_DIST_STRIP} #.if !(defined(PATCH_DEBUG) || defined(PKG_VERBOSE)) #PATCH_DIST_ARGS+=--forward --quiet #.endif @ 1.23 log @echo -> ${ECHO} @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.22 2000/08/13 18:10:29 itojun Exp $ d3 2 a4 2 DISTNAME= sendmail.8.11.0 PKGNAME= sendmail-8.11.0 d10 6 a15 6 PATCH_SITES= ftp://ftp.kyoto.wide.ad.jp/pub/mail/smtpfeed/ PATCHFILES= sendmail8.11.0+3.3W.patch.gz PATCH_DIST_ARGS=-d ${WRKSRC}/sendmail -E ${PATCH_DIST_STRIP} .if !(defined(PATCH_DEBUG) || defined(PKG_VERBOSE)) PATCH_DIST_ARGS+=--forward --quiet .endif d50 1 a50 4 DEPENDS+= sfio-1999:../../devel/sfio .if !defined(PATENTEDOPENSSLSRC) && !exists(/usr/include/openssl/rsa.h) DEPENDS+= openssl-0.9.5a:../../security/openssl .endif @ 1.22 log @mention inclusion of WIDE patch in installed DESCR @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.21 2000/08/13 17:52:31 itojun Exp $ d60 3 a62 3 echo '---' >> ${DESCR_SRC} echo -n 'compiled features:' >> ${DESCR_SRC} echo -n ' WIDE' >> ${DESCR_SRC} d65 1 a65 1 echo -n ' INET6' >> ${DESCR_SRC} d69 1 a69 1 echo -n ' TCPWRAPPERS' >> ${DESCR_SRC} d73 1 a73 1 echo -n ' LDAP' >> ${DESCR_SRC} d77 1 a77 1 echo -n ' DB2' >> ${DESCR_SRC} d81 1 a81 1 echo -n ' STARTTLS' >> ${DESCR_SRC} d83 1 a83 1 echo >> ${DESCR_SRC} @ 1.21 log @add USE_STARTTLS case (requires sfio-1999 and RSA-capable openssl). need testing (needs certificate properly installed into filesystem). append compiled-in features at the bottom of installed DESCR, as we have so many USE_xx. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.20 2000/08/01 12:02:40 itojun Exp $ d62 1 @ 1.20 log @chmod +w to files we append something. PR10728. From: Wolfgang Rupprecht not sure if this PR is a generic problem - it seems to me that Wolfgang may checked things out from pkgsrc tree with non-writable permission. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.19 2000/07/30 17:49:00 itojun Exp $ d41 1 d49 6 d59 3 d64 1 d68 1 d72 1 d76 5 d82 1 @ 1.19 log @include wide patch, which is necessary to work better with pkgsrc/mail/smtpfeed. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.18 2000/07/24 04:22:31 itojun Exp $ d28 1 d50 2 a51 1 ${CP} ${FILESDIR}/site.config.m4 ${WRKSRC}/devtools/Site/site.config.m4 d53 1 a53 2 ${CAT} ${FILESDIR}/site.config.m4-v6 \ >> ${WRKSRC}/devtools/Site/site.config.m4 d56 1 a56 2 ${CAT} ${FILESDIR}/site.config.m4-tcpwrappers \ >> ${WRKSRC}/devtools/Site/site.config.m4 d59 1 a59 2 ${CAT} ${FILESDIR}/site.config.m4-ldap \ >> ${WRKSRC}/devtools/Site/site.config.m4 d62 1 a62 2 ${CAT} ${FILESDIR}/site.config.m4-db2 \ >> ${WRKSRC}/devtools/Site/site.config.m4 @ 1.18 log @upgrade to 8.11.0 from sendmail.org. the new Makefile tries to obey sendmail "Build" script better than before. need checking for solaris build, and ldap build. TODO: STARTTLS support --- 8.10.2 -> 8.11.0 8.11.0/8.11.0 2000/07/19 SECURITY: If sendmail is installed as a non-root set-user-ID binary (not the normal case), some operating systems will still keep a saved-uid of the effective-uid when sendmail tries to drop all of its privileges. If sendmail needs to drop these privileges and the operating system doesn't set the saved-uid as well, exit with an error. Problem noted by Kari Hurtta of the Finnish Meteorological Institute. SECURITY: sendmail depends on snprintf() NUL terminating the string it populates. It is possible that some broken implementations of snprintf() exist that do not do this. Systems in this category should compile with -DSNPRINTF_IS_BROKEN=1. Use test/t_snprintf.c to test your system and report broken implementations to sendmail-bugs@@sendmail.org and your OS vendor. Problem noted by Slawomir Piotrowski of TELSAT GP. Support SMTP Service Extension for Secure SMTP (RFC 2487) (STARTTLS). Implementation influenced by the example programs of OpenSSL and the work of Lutz Jaenicke of TU Cottbus. Add new STARTTLS related options CACERTPath, CACERTFile, ClientCertFile, ClientKeyFile, DHParameters, RandFile, ServerCertFile, and ServerKeyFile. These are documented in cf/README and doc/op/op.*. New STARTTLS related macros: ${cert_issuer}, ${cert_subject}, ${tls_version}, ${cipher}, ${cipher_bits}, ${verify}, ${server_name}, and ${server_addr}. These are documented in cf/README and doc/op/op.*. Add support for the Entropy Gathering Daemon (EGD) for better random data. New DontBlameSendmail option InsufficientEntropy for systems which don't properly seed the PRNG for OpenSSL but want to try to use STARTTLS despite the security problems. Support the security layer in SMTP AUTH for mechanisms which support encryption. Based on code contributed by Tim Martin of CMU. Add new macro ${auth_ssf} to reflect the SMTP AUTH security strength factor. LDAP's -1 (single match only) flag was not honored if the -z (delimiter) flag was not given. Problem noted by ST Wong of the Chinese University of Hong Kong. Fix from Mark Adamson of CMU. Add more protection from accidentally tripping OpenLDAP 1.X's ld_errno == LDAP_DECODING_ERROR hack on ldap_next_attribute(). Suggested by Kurt Zeilenga of OpenLDAP. Fix the default family selection for DaemonPortOptions. As documented, unless a family is specified in a DaemonPortOptions option, "inet" is the default. It is also the default if no DaemonPortOptions value is set. Therefore, IPv6 users should configure additional sockets by adding DaemonPortOptions settings with Family=inet6 if they wish to also listen on IPv6 interfaces. Problem noted by Jun-ichiro itojun Hagino of the KAME Project. Set ${if_family} when setting ${if_addr} and ${if_name} to reflect the interface information for an outgoing connection. Not doing so was creating a mismatch between the socket family and address used in subsequent connections if the M=b modifier was set in DaemonPortOptions. Problem noted by John Beck of Sun Microsystems. If DaemonPortOptions modifier M=b is used, determine the socket family based on the IP address. ${if_family} is no longer persistent (i.e., saved in qf files). Patch from John Beck of Sun Microsystems. sendmail 8.10 and 8.11 reused the ${if_addr} and ${if_family} macros for both the incoming interface address/family and the outgoing interface address/family. In order for M=b modifier in DaemonPortOptions to work properly, preserve the incoming information in the queue file for later delivery attempts. Use SMTP error code and enhanced status code from check_relay in responses to commands. Problem noted by Jeff Wasilko of smoe.org. Add more vigilance in checking for putc() errors on output streams to protect from a bug in Solaris 2.6's putc(). Problem noted by Graeme Hewson of Oracle. The LDAP map -n option (return attribute names only) wasn't working. Problem noted by Ajay Matia. Under certain circumstances, an address could be listed as deferred but would be bounced back to the sender as failed to be delivered when it really should have been queued. Problem noted by Allan E Johannesen of Worcester Polytechnic Institute. Prevent a segmentation fault in a child SMTP process from getting the SMTP transaction out of sync. Problem noted by Per Hedeland of Ericsson. Turn off RES_DEBUG if SFIO is defined unless SFIO_STDIO_COMPAT is defined to avoid a core dump due to incompatibilities between sfio and stdio. Problem noted by Neil Rickert of Northern Illinois University. Don't log useless envelope ID on initial connection log. Problem noted by Kari Hurtta of the Finnish Meteorological Institute. Convert the free disk space shown in a control socket status query to kilobyte units. If TryNullMXList is True and there is a temporary DNS failure looking up the hostname, requeue the message for a later attempt. Problem noted by Ari Heikkinen of Pohjois-Savo Polytechnic. Under the proper circumstances, failed connections would be recorded as "Bad file number" instead of "Connection failed" in the queue file and persistent host status. Problem noted by Graeme Hewson of Oracle. Avoid getting into an endless loop if a non-hoststat directory exists within the hoststatus directory (e.g., lost+found). Patch from Valdis Kletnieks of Virginia Tech. Make sure Timeout.queuereturn=now returns a bounce message to the sender. Problem noted by Per Hedeland of Ericsson. If a message data file can't be opened at delivery time, panic and abort the attempt instead of delivering a message that states "<<< No Message Collected >>>". Fixup the GID checking code from 8.10.2 as it was overly restrictive. Problem noted by Mark G. Thomas of Mark G. Thomas Consulting. Preserve source port number instead of replacing it with the ident port number (113). Document the queue status characters in the mailq man page. Suggested by Ulrich Windl of the Universitat Regensburg. Process queued items in which none of the recipient addresses have host portions (or there are no recipients). Problem noted by Valdis Kletnieks of Virginia Tech. If a cached LDAP connection is used for multiple maps, make sure only the first to open the connection is allowed to close it so a later map close doesn't break the connection for other maps. Problem noted by Wolfgang Hottgenroth of UUNET. Netscape's LDAP libraries do not support Kerberos V4 authentication. Patch from Rainer Schoepf of the University of Mainz. Provide workaround for inconsistent handling of data passed via callbacks to Cyrus SASL prior to version 1.5.23. Mention ENHANCEDSTATUSCODES in the SMTP HELP helpfile. Omission noted by Ulrich Windl of the Universitat Regensburg. Portability: Add the ability to read IPv6 interface addresses into class 'w' under FreeBSD (and possibly others). From Jun Kuriyama of IMG SRC, Inc. and the FreeBSD Project. Replace code for finding the number of CPUs on HPUX. NCRUNIX MP-RAS 3.02 SO_REUSEADDR socket option does not work properly causing problems if the accept() fails and the socket needs to be reopened. Patch from Tom Moore of NCR. NetBSD uses a .0 extension of formatted man pages. From Andrew Brown of Graffiti World Wide, Inc. Return to using the IPv6 AI_DEFAULT flag instead of AI_V4MAPPED for calls to getipnodebyname(). The Linux implementation is broken so AI_ADDRCONFIG is stripped under Linux. From John Beck of Sun Microsystems and John Kennedy of Cal State University, Chico. CONFIG: Catch invalid addresses containing a ',' at the wrong place. Patch from Neil Rickert of Northern Illinois University. CONFIG: New variables for the new sendmail options: confCACERT_PATH CACERTPath confCACERT CACERTFile confCLIENT_CERT ClientCertFile confCLIENT_KEY ClientKeyFile confDH_PARAMETERS DHParameters confRAND_FILE RandFile confSERVER_CERT ServerCertFile confSERVER_KEY ServerKeyFile CONFIG: Provide basic rulesets for TLS policy control and add new tags to the access database to support these policies. See cf/README for more information. CONFIG: Add TLS information to the Received: header. CONFIG: Call tls_client ruleset from check_mail in case it wasn't called due to a STARTTLS command. CONFIG: If TLS_PERM_ERR is defined, TLS related errors are permanent instead of temporary. CONFIG: FEATURE(`relay_hosts_only') didn't work in combination with the access map and relaying to a domain without using a To: tag. Problem noted by Mark G. Thomas of Mark G. Thomas Consulting. CONFIG: Set confEBINDIR to /usr/sbin to match the devtools entry in OSTYPE(`linux') and OSTYPE(`mklinux'). From Tim Pierce of RootsWeb.com. CONFIG: Make sure FEATURE(`nullclient') doesn't use aliasing and forwarding to make it as close to the old behavior as possible. Problem noted by George W. Baltz of the University of Maryland. CONFIG: Added OSTYPE(`darwin') for Mac OS X and Darwin users. From Wilfredo Sanchez of Apple Computer, Inc. CONFIG: Changed the map names used by FEATURE(`ldap_routing') from ldap_mailhost and ldap_mailroutingaddress to ldapmh and ldapmra as underscores in map names cause problems if underscore is in OperatorChars. Problem noted by Bob Zeitz of the University of Alberta. CONFIG: Apply blacklist_recipients also to hosts in class {w}. Patch from Michael Tratz of Esosoft Corporation. CONFIG: Use A=TCP ... instead of A=IPC ... in SMTP mailers. CONTRIB: Add link_hash.sh to create symbolic links to the hash of X.509 certificates. CONTRIB: passwd-to-alias.pl: More protection from special characters; treat special shells as root aliases; skip entries where the GECOS full name and username match. From Ulrich Windl of the Universitat Regensburg. CONTRIB: qtool.pl: Add missing last_modified_time method and fix a typo. Patch from Graeme Hewson of Oracle. CONTRIB: re-mqueue.pl: Improve handling of a race between re-mqueue and sendmail. Patch from Graeme Hewson of Oracle. CONTRIB: re-mqueue.pl: Don't exit(0) at end so can be called as subroutine Patch from Graeme Hewson of Oracle. CONTRIB: Add movemail.pl (move old mail messages between queues by calling re-mqueue.pl) and movemail.conf (configuration script for movemail.pl). From Graeme Hewson of Oracle. CONTRIB: Add cidrexpand (expands CIDR blocks as a preprocessor to makemap). From Derek J. Balling of Yahoo,Inc. DEVTOOLS: INSTALL_RAWMAN installation option mistakenly applied any extension modifications (e.g., MAN8EXT) to the installation target. Patch from James Ralston of Carnegie Mellon University. DEVTOOLS: Add support for SunOS 5.9. DEVTOOLS: New option confLN contains the command used to create links. LIBSMDB: Berkeley DB 2.X and 3.X errors might be lost and not reported. MAIL.LOCAL: DG/UX portability. Problem noted by Tim Boyer of Denman Tire Corporation. MAIL.LOCAL: Prevent a possible DoS attack when compiled with -DCONTENTLENGTH. Based on patch from 3APA3A@@SECURITY.NNOV.RU. MAILSTATS: Fix usage statement (-p and -o are optional). MAKEMAP: Change man page layout as workaround for problem with nroff and -man on Solaris 7. Patch from Larry Williamson. RMAIL: AIX 4.3 has snprintf(). Problem noted by David Hayes of Black Diamond Equipment, Limited. RMAIL: Prevent a segmentation fault if the incoming message does not have a From line. VACATION: Read all of the headers before deciding whether or not to respond instead of stopping after finding recipient. Added Files: cf/ostype/darwin.m4 contrib/cidrexpand contrib/link_hash.sh contrib/movemail.conf contrib/movemail.pl devtools/OS/SunOS.5.9 test/t_snprintf.c @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.17 2000/06/15 12:55:07 kleink Exp $ d9 7 @ 1.17 log @Match openldap-1.2.*. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.16 2000/06/15 12:32:33 veego Exp $ d3 2 a4 2 DISTNAME= sendmail.8.9.3 PKGNAME= sendmail-8.9.3 a9 7 PATCH_SITES= ftp://ftp.kyoto.wide.ad.jp/pub/mail/sendmail/ PATCHFILES= sendmail893+3.2W.patch.gz PATCH_DIST_ARGS=-d ${WRKSRC}/src -E ${PATCH_DIST_STRIP} .if !(defined(PATCH_DEBUG) || defined(PKG_VERBOSE)) PATCH_DIST_ARGS+=--forward --quiet .endif a25 4 .if defined(USE_INET6) && ${USE_INET6} == YES MAKE_ENV+= CONFIG="-f ${WRKSRC}/site.config-v6" .endif a31 9 .if ${USE_DB2} == YES DEPENDS+= db-2.7.7:../../databases/db MAKE_ENV+= DB_ENVDEF="-I${LOCALBASE}/include/db2" \ DB_LIBS="-L${LOCALBASE}/lib -ldb2" .else MAKE_ENV+= DB_ENVDEF="" DB_LIBS="" .endif a35 6 MAKE_ENV+= LDAP_CONF="-DLDAPMAP" \ LDAP_ENVDEF="-I${LOCALBASE}/include" \ LDAP_LIBS="-L${LOCALBASE}/lib -Wl,-R${LOCALBASE}/lib -lldap -llber" .else MAKE_ENV+= LDAP_CONF="" LDAP_ENVDEF="" LDAP_LIBS="" d37 2 a38 5 .if ${OPSYS} == "NetBSD" MAKE_ENV+= TCPD_CONF="-DTCPWRAPPERS" TCPD_LIBS="-lwrap" .else MAKE_ENV+= TCPD_CONF="" TCPD_LIBS="" d42 1 d44 10 a53 1 @@(${CP} ${FILESDIR}/site.config-v6 ${WRKSRC}) d55 7 @ 1.16 log @Fix the PLIST_SRC problem. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.15 2000/06/14 16:40:53 veego Exp $ d55 1 a55 1 DEPENDS+= openldap-1.2.7p1:../../databases/openldap @ 1.15 log @Now fix the libwrap compile problem on NetBSD. Thanks to Matthias Scheler for noticing it. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.14 2000/06/14 13:02:16 veego Exp $ a47 1 PLIST_SRC= ${WRKDIR}/.PLIST_SRC d52 2 d81 1 a85 1 ${CAT} ${PKGDIR}/PLIST.common ${PKGDIR}/PLIST.${LOWER_OPSYS} > ${PLIST_SRC} @ 1.14 log @Add Solaris support and move the libwrap support from patch-ab to patch-aa. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.13 2000/06/14 07:30:23 kleink Exp $ d61 6 @ 1.13 log @Add support to plug in LDAP maps easily. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.12 2000/01/09 01:29:07 wiz Exp $ d37 3 d41 1 d48 1 a48 1 PLIST_SRC= ${WRKDIR}/PLIST d78 1 a78 1 ${CP} ${PKGDIR}/PLIST ${PLIST_SRC} @ 1.12 log @replaced some commands by their ${COMMAND} counterparts @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.11 2000/01/02 17:46:47 itojun Exp $ d47 10 @ 1.11 log @incorporate WIDE sendmail patch (IPv6 support and other enhancements). enable USE_INET6 cases. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.10 1999/12/01 21:55:12 tron Exp $ a26 1 OBJDIR!= echo obj.`uname -srm | tr \ .` d51 1 a51 1 @@(cp ${FILESDIR}/site.config-v6 ${WRKSRC}) d81 3 @ 1.10 log @Only remind user to rebuild databases if DB 2.x is used. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.9 1999/12/01 21:32:08 tron Exp $ d7 9 a15 1 ftp://ftp.cert.dfn.de/pub/tools/net/sendmail/ d30 2 d34 4 d48 5 @ 1.9 log @Let "post-install" rule recognize "${USE_DB2}", too. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.8 1999/12/01 21:31:04 tron Exp $ d37 2 a41 2 ${SED} -e 's#@@@@PREFIX@@@@#${PREFIX}#g' \ <${FILESDIR}/mailer.conf >${WRKDIR}/mailer.conf.sendmail d43 3 @ 1.8 log @Rename "/usr/sbin/makemap" only if DB 2.x is used. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.7 1999/12/01 21:15:20 tron Exp $ d55 1 d57 1 @ 1.7 log @Because sendmail 8.9.3 works fine for several NetBSD users with the bug fixed DB 1.85 code in "libc" and using DB 2.x causes problems with 3rd party applications we use it only if "${USE_DB2}" is set to "YES". @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.6 1999/11/23 09:57:17 tron Exp $ d19 1 a20 1 OBJDIR!= echo obj.`uname -srm | tr \ .` d24 3 a26 1 .if defined(USE_DB2) && ${USE_DB2} == YES d31 1 d42 5 @ 1.6 log @Update dependence on "db" package. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.5 1999/10/07 17:41:55 tron Exp $ a11 2 DEPENDS+= db-2.7.7:../../databases/db d21 11 @ 1.5 log @Remove me as maintainer of those packages. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.4 1999/04/30 17:07:11 tv Exp $ d12 1 a12 1 DEPENDS+= db-2.7.3:../../databases/db @ 1.4 log @Move /usr/sbin/makemap to /usr/sbin/makemap.8.8 while the pkg is installed, since the DB formats are radically different. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.3 1999/04/10 17:22:43 tron Exp $ d9 1 a9 1 MAINTAINER= tron@@netbsd.org @ 1.3 log @Use correct users for owning binaries and manual pages. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.2 1999/04/10 16:41:21 tron Exp $ d38 1 @ 1.2 log @Major cleanup: - Use Sleepycat Software's DB library from "db-2.7.3" package. - Install complete package because we need a tools using the new DB library. @ text @d1 1 a1 1 # $NetBSD: Makefile,v 1.1.1.1 1999/04/08 23:00:33 tron Exp $ d17 2 a18 1 MAKE_ENV+= MANOWN="${MANOWN}" MANGRP="${MANGRP}" MANMODE="${MANMODE}" @ 1.1 log @Initial revision @ text @d1 1 a1 1 # $NetBSD$ d12 2 d16 3 a19 1 NO_CONFIGURE= yes a22 3 LIBEXECDIR= ${PREFIX}/libexec/sendmail SBINDIR= ${PREFIX}/sbin d30 4 a33 1 do-install: a34 11 ${MKDIR} -p ${LIBEXECDIR} ${INSTALL_PROGRAM} ${WRKSRC}/src/${OBJDIR}/sendmail ${LIBEXECDIR} ${CHMOD} u+s ${LIBEXECDIR}/sendmail .for SECTION in 1 5 8 ${INSTALL_DATA} ${WRKSRC}/src/${OBJDIR}/*.${SECTION} \ ${PREFIX}/man/man${SECTION} .endfor ${INSTALL_PROGRAM} ${WRKSRC}/mailstats/${OBJDIR}/mailstats ${SBINDIR} ${INSTALL_DATA} ${WRKSRC}/mailstats/${OBJDIR}/*.8 ${PREFIX}/man/man8 ${INSTALL_PROGRAM} ${WRKSRC}/praliases/${OBJDIR}/praliases ${SBINDIR} ${INSTALL_DATA} ${WRKSRC}/praliases/${OBJDIR}/*.8 ${PREFIX}/man/man8 @ 1.1.1.1 log @New "sendmail-8.9.3" package: The well known Mail Transport Agent. @ text @@