summaryrefslogtreecommitdiff
path: root/mail/qmail-run/files
AgeCommit message (Collapse)AuthorFilesLines
2021-01-14Take steps toward running under other UCSPI-TLS server implementations:schmonz4-28/+25
- Set CADIR in the environment. - Prefer a separate keyfile for TLS. If it's not present, attempt to generate it by copying out the private key from the certfile. - Don't provide an affordance for overriding the compiled-in cipherlist. - Be willing to enable TLS without a DH params file. While here, invent control/localfilters. If it exists, it's a sequence of filters for SMTP connections on localhost. Bump version.
2020-12-11Depend on qmail-acceptutils 20201211 for authup(8) that fixes AUTH retryschmonz1-2/+2
under TLS. Bump version.
2020-11-02qmail MESSAGE went away; point to its README.tls where I meant to.schmonz1-1/+1
2020-10-05If any of our several rcvars aren't YES, that's fine: don't exitschmonz2-4/+11
nonzero. Bump version. While here, document in qmail-qread-client that its rc.conf vars are shared with the qmailqread service.
2020-05-19Explicitly ulimit qmailsend. Bump PKGREVISION.schmonz1-1/+3
2019-08-20Drop -4 from qmailqread, no longer needed by ucspi-tcp6. Bump version.schmonz1-2/+2
2019-04-14Check case-insensitively whether recipient is exempt from greylisting.schmonz2-5/+5
Since ucspi-tcp6's tcpserver can no longer listen to 127.0.0.1 without specifying -4, specify it by default. Bump version.
2019-03-21Defer SSL_UID and SSL_GID to qmailfoo_enable_tls(). Listen on ":0",schmonz3-9/+15
the updated dual-stack pseudo-host for ucspi-tcp6 and ucspi-ssl. Bump version.
2019-01-18To override sslserver's default cipher list, set qmailfoo_tls_ciphers.schmonz3-17/+29
While here, make it easier to use envdir by prepending to ${qmailfoo_postenv} rather than appending. At least one Linux shell needs "--" between greetdelay and rblsmtpd, and this doesn't break NetBSD. Bump version.
2019-01-07Use RCD_SCRIPTS_DIR in MESSAGE and README.pkgsrc, and SUBST_VARS the latter.schmonz1-13/+13
2018-12-30Require latest acceptutils and rejectutils. While here, remove ancientschmonz1-5/+1
chkconfig comment in the qmail rc.d script (not sure this ever worked, and now we have rc.d-boot). Bump version.
2018-12-16rc.d scripts:schmonz5-44/+44
- ucspi-ssl and ucspi-tcp6 correctly dual-stack v4/v6 on NetBSD, so we can go back to "0" (instead of "0.0.0.0") as the default host to listen on. - FreeBSD's /bin/sh needs continuation characters to understand what we're assigning to `command` in foo_precmd(). This seems sensible and doesn't break NetBSD. Bump version.
2018-12-15Fix previous: required_files the tcprules, not the cdb (which getsschmonz4-8/+8
autogenerated if it doesn't exist). Point more actionably at SRS and TLS setup docs. Bump version.
2018-12-14K&R-style braces in rc.d scripts. NFCI.schmonz6-70/+38
2018-12-14Extract most of MESSAGE to README.pkgsrc. (MESSAGE was getting too long.)schmonz8-30/+119
Comment out qmail-qfilter-viruscan in control/smtpfilters. It's not a very precise tool, so the cost (false positives) probably outweighs the benefit (blocked malware attachments) for many users. Also not a sensible default: rejecting incoming mail on SPF explicit-fail. This needs to be an admin decision because, among other reasons, it would also reject messages forwarded through servers that haven't configured SRS. Document SPF setup, including how to reject (with this caveat) and how to greylist SPF explicit-pass (which would otherwise be exempted from greylisting). Rename greylisting-spp-with-exemptions to greylisting-spp-wrapper. Add a feature: to effectively omit IP from the (IP,sender,recipient) tuple, add GL_WRAPPER_TCPREMOTEIP="127.127.127.127" to control/tcprules/smtp. rc.d scripts: - Location of tcprules file is configurable - By default, CDB is auto-rebuilt as needed on service start - CDB auto-rebuilding can be configured off Bump version.
2018-12-12Make sure ${VARBASE}/run exists before creating the qmail-send pidfile.schmonz1-1/+2
On a freshly bootstrapped Debian 9, somehow it didn't. Bump version.
2018-12-11Add SPF checks via qmail-spp-spf (new dependency):schmonz9-24/+25
- On "fail", reject - On "pass", skip any greylisting - Else, accept mail as we otherwise would. qmail-spp-spf adds a `Received-SPF:` header to all incoming messages. Migrate ${PKG_SYSCONFDIR}/tcp.* to ${PKG_SYSCONFDIR}/control/tcprules. Bump version.
2018-12-04qmail will not start (under qmail-run or otherwise) without a few basicschmonz1-3/+3
config files. Removing them on uninstall if they haven't been changed is already mail/qmail's job; creating them on install was being done here, and this combination was probably responsible for `pkgin full-upgrade` removing some config files and qmail no longer running. Thanks to Nathan Arthur for the bug report. Instead of running config-fast-pkgsrc here, rely on mail/qmail to do it. For similar reasons, also expect mail/qmail to handle the three basic aliases (root, mailer-daemon, postmaster) and QUEUE_EXTRA. While here, set QMAILREMOTE in qmailsend_postenv in preparation for a future update. Bump version.
2018-11-28Sort rc.conf defaults to match the order in which they're used.schmonz4-18/+18
2018-11-28Install control/ofmipfilters containing qmail-qfilter-addtlsheader, aschmonz7-15/+30
new filter to add a Received header with TLS protocol and ciphers. Add qmail-qfilter-addtlsheader to control/smtpfilters, too. Bump acceptutils dependency to get this program. Point to qmail-qfilter-queue in tcp.ofmip and tcp.smtp. This replaces the formerly separate qmail-queue wrappers for ofmipd and smtpd. Bump rejectutils dependency to get this program. rc.d scripts: - ofmipd, pop3d, smtpd: let a standalone TLS key file be configured in rc.conf. - ofmipd, pop3d: let pre- and post-checkpassword commands be configured in rc.conf. - pop3d: fix typo in default TLS file paths. Bump version.
2018-11-24Bump version and acceptutils dependency for authup regression fix.schmonz1-1/+1
2018-11-24Bump dependency on qmail-acceptutils for new STARTTLS behavior, andschmonz1-1/+4
provide the necessary configuration entry.
2018-11-14On second thought, greylisting isn't a sensible default. Comment it outschmonz5-3/+9
in control/smtpplugins. Extract a "Greylisting" stanza in MESSAGE. Merge "Local non-root users to see the queue" into previous section (and provide qmail-qread-client in example mailer.conf to begin with). Mention port numbers where applicable. Enable defaults that are sensible: realrcptto in control/rcptchecks and viruscan in control/smtpfilters. Add fixsmtpio rules to make greylisting-spp's tempfails look more like qmail's other messages. Bump dependency on qmail for config-fast-pkgsrc, which is like config-fast but lets us simulate CONF_FILES-like behavior. As before, we install these minimal config files, and won't deinstall them. (But the updated qmail package will.) Bump version.
2018-11-13Enable greylisting by default via mail/greylisting-spp. To make this aschmonz5-5/+45
sensible default, we wrap it in "greylisting-spp-with-exemptions", which lets recipient addresses and domains be exempted from greylisting by editing control/greylist/exemptrcpt{s,hosts}. qmailofmipd: enable user CDB by default and remove the verbiage. qmailsmtpd: bump datalimit (seeing occasional "fixsmtpio: out of memory" in production). Improve MESSAGE a bit more. Bump version.
2018-11-10Bump dependency on qmail for SPP support and on rejectutils for anschmonz2-1/+18
SPP-compatible qmail-rcptcheck. Create control/smtpplugins so that the RCPTCHECK-compatible programs continue to run as before. No functional change intended. Bump version.
2018-11-08Bump acceptutils dependency to get STARTTLS support in fixsmtpio(8)schmonz6-26/+100
(obviating the need for qmail-smtpd(8) to be patched to link OpenSSL). Make TLS configurable for submission, POP3, and now also incoming SMTP: - "yes" (startup will fail if cert or DH params are missing) - "no" (even if they're present, don't offer TLS) - "auto" (the default: offer TLS iff they're present) Mention TLS setup in MESSAGE. Delay SMTP greeting by 2 seconds. Enable zen.spamhaus.org RBL. Bump version.
2018-11-03When tagging log entries, insert "/" between "nbqmail" and the rest ofschmonz5-12/+12
the tag; for instance, "nbqmailofmipd" becomes "nbqmail/ofmipd". Vaguely redolent of Postfix, and easier to glance at logs now that just about everything runs similarly from rc.d. Turn off sslserver verbosity by default. Bump version.
2018-10-28Point to where servercert.pem actually is. While here, use the regularlyschmonz2-7/+11
regenerated DH params too. Bump PKGREVISION.
2018-10-28Update to 20181028. Changes:schmonz4-13/+16
- CERTFILE needs to be set early enough for sslserver. Move it to rc.d. UCSPITLS is application-specific and can stay in the CDB. - Add PYMSGAUTH_TOLERATE_UNCONFIGURED to the CDB. - Switch qmailpop3d from tcpserver+qmail-popup to sslserver+authup. Set UCSPITLS in the CDB to require STLS before USER/PASS. - Specify a few new required_files. - Point more precisely at the need to inspect alias/.qmail-*.
2018-10-27Update to 20181027. Changes:schmonz5-21/+12
- Bump qmail-acceptutils for integrated privsep TLS using ucspi-ssl. - Switch qmailofmipd rc.d script to sslserver, listening on the network. - Install control/{pop3,smtp}capabilities, as newly required by authup. - Organize INSTALL a bit better. - Remove all vestiges of stunnel, including further shortening MESSAGE.
2018-10-24Add ofmipd-with-user-cdb, a wrapper to let ofmipd users control theirschmonz1-0/+16
own CDB of address rewriting rules. Ride previous bump.
2018-10-24Remove dependency on mess822, the "sasl" and "tls" options, and theirschmonz13-17/+78
respective dependencies on spamdyke and stunnel. Depend instead on qmail-acceptutils, which provides SMTP AUTH (and new filtering functionality) and brings its own unconditional mess822 and stunnel dependencies. Update rc.d scripts to match. Use CONF_FILES instead of a bunch of open-coded INSTALL cleverness. Clean up even better with a little DEINSTALL cleverness to remove CDB files if their source CONF_FILES are gone. Install sensible fixsmtpio rules and viruscan signatures. Tighten MESSAGE. The basics have gotten pretty easy. Bump version.
2018-09-10Add scripts to wrap spamc and rspamc, suitable for use in .qmail filesschmonz2-0/+12
with e.g. condtomaildir(1). Bump version.
2018-08-01Depend on pkgtools/pkg_alternatives and a new enough mail/qmail to relyschmonz2-4/+4
on finding "nbcheckpassword" (which, at present, might be either checkpassword-pam or DJB's original). Depend (unconditionally) on mail/qmail-rejectutils, instead of having it as an option on mail/qmail. Bump version.
2018-07-29Detect the checkpassword program of the installed qmail, so we can referschmonz2-4/+4
to it from config files and rc.d scripts. Bump version.
2017-08-05procname isn't defined in time for logcmd. Bump PKGREVISION.schmonz4-8/+8
2017-08-05Fix "reload" and "hup" (broken in 20170729).schmonz6-25/+25
For all services where we set procname, prefix "nb". This makes it even harder for observers to fail to notice that this isn't a Life with qmail install, and happens to match the log tags already being applied. Bump version.
2017-08-04If there's more than one qmail-send running (e.g., /var/qmail2 runningschmonz1-4/+18
from /service), the rc.d script can't tell which is ours. Make and use a pidfile. (The other rc.d scripts set argv[0] to names that are unlikely to collide, but there's no easy way to do that for the qmail-send process exec'd by qmail-start.) Bump PKGREVISION.
2017-07-30pkgsrc changes:schmonz2-20/+48
- Collapse redundant code for invoking service-specific rc.d scripts. - Don't try to run a service's rc.d script if it isn't enabled in rc.conf. - Run "pause" in reverse sequence, like "stop" does. - Support "stat", "pause", and "cont" in qmailqread. Bump version.
2017-07-21Update to 20170720. pkgsrc changes:schmonz2-67/+2
- Remove qmail-qfilter-*-queue shell scripts, which would conflict with the C programs of the same name included in mail/qmail 1.03nb29 with the "qmail-rejectutils" option (enabled by default). - Bump mail/qmail dependency to 1.03nb29. - Shorten and improve MESSAGE.
2017-06-23Catch up to djbdns-run:schmonz3-18/+24
- Add "reload" as a synonym for "cdb" in qmail{ofmip,pop3,smtp}d.sh - Shorten tcprules invocations Bump version.
2017-06-17Increase default {ofmip,pop3,smtp}d softlimits by about 20 percent,schmonz6-36/+43
to 180000000 bytes. From Nathan Arthur in private mail. Allow path to tcpserver to be overridden in rc.conf (e.g., by sslserver from net/ucspi-ssl). From Thomas Lazar in private mail. Detach processes and their loggers from the controlling terminal with pgrphack(8). Include qmailqread in the services driven by the LWQ-style qmail rc.d script. Unconditionally depend on mail/mess822, now that it's correctly marked public-domain. Remove qmail-run-ofmipd option. Bump version.
2017-05-31Add dependency on qmail-qfilter. Deprecate qmail-qfilter-queue in favorschmonz1-22/+52
of qmail-qfilter-{ofmipd,smtpd}-queue, and document how to enable filtering for incoming and submitted messages. Bump version.
2017-04-11If qmailqread runs on a custom host and port, have qmail-qread-clientschmonz1-2/+10
find it there. Bump version.
2017-04-10Wrap (or shorten) long lines. Parameterize some qmailqread config toschmonz5-21/+61
match other scripts. Bump version.
2017-04-09Add "qmail-run-ofmipd" option that controls the dependency onschmonz3-6/+9
mess822. Turn it off by default. This should let us once again publish binary packages. To use another ofmipd, set qmailofmipd_ofmipdcmd in rc.conf. Likewise for qmail-smtpd and qmail-pop3d. Bump version.
2017-04-04Substitute configured qmail users in rc.d scripts. Un-hardcode someschmonz4-11/+11
paths in qmailofmipd.sh, somehow missed in 20170109. Bump version.
2017-01-09Update to 20170109. pkgsrc changes:schmonz5-5/+121
- Add qmailofmipd service for outgoing submissions. - Add dependencies on mess822, spamdyke, and stunnel. - Add sample spamdyke and stunnel configs for SMTP AUTH over TLS. - Control ofmipd from the main qmail script. - Fix broken link to "12 Steps to qmail List Bliss".
2015-11-25Remove mk/find-prefix.mk usage from the mail category.jperkin8-34/+34
The find-prefix infrastructure was required in a pkgviews world where packages installed from pkgsrc could have different installation prefixes, and this was a way for a dependency prefix to be determined. Now that pkgviews has been removed there is no longer any need for the overhead of this infrastructure. Instead we use BUILDLINK_PREFIX.pkg for dependencies pulled in via buildlink, or LOCALBASE/PREFIX where the dependency is coming from pkgsrc. Provides a reasonable performance win due to the reduction of `pkg_info -qp` calls, some of which were redundant anyway as they were duplicating the same information provided by BUILDLINK_PREFIX.pkg.
2014-12-06Placate pkglint by abolishing LOCALBASE (no functional changeschmonz8-34/+34
intended) and adding LICENSE and NO_CHECKSUM. Bump version.
generated by cgit v1.2.3 (git 2.39.1) at 2025-02-16 06:47:33 +0000