summaryrefslogtreecommitdiff
path: root/mail/qmail-run
AgeCommit message (Collapse)AuthorFilesLines
2019-08-20Drop -4 from qmailqread, no longer needed by ucspi-tcp6. Bump version.schmonz2-4/+4
2019-06-19Keep it simple: set PKG_SYSCONFSUBDIR to match mail/qmail's. Bump version ↵schmonz1-19/+5
just in case.
2019-04-14Check case-insensitively whether recipient is exempt from greylisting.schmonz3-7/+7
Since ucspi-tcp6's tcpserver can no longer listen to 127.0.0.1 without specifying -4, specify it by default. Bump version.
2019-03-21Defer SSL_UID and SSL_GID to qmailfoo_enable_tls(). Listen on ":0",schmonz4-11/+17
the updated dual-stack pseudo-host for ucspi-tcp6 and ucspi-ssl. Bump version.
2019-01-18To override sslserver's default cipher list, set qmailfoo_tls_ciphers.schmonz4-19/+31
While here, make it easier to use envdir by prepending to ${qmailfoo_postenv} rather than appending. At least one Linux shell needs "--" between greetdelay and rblsmtpd, and this doesn't break NetBSD. Bump version.
2019-01-07Use RCD_SCRIPTS_DIR in MESSAGE and README.pkgsrc, and SUBST_VARS the latter.schmonz3-19/+19
2018-12-30Require latest acceptutils and rejectutils. While here, remove ancientschmonz2-9/+5
chkconfig comment in the qmail rc.d script (not sure this ever worked, and now we have rc.d-boot). Bump version.
2018-12-16rc.d scripts:schmonz6-46/+46
- ucspi-ssl and ucspi-tcp6 correctly dual-stack v4/v6 on NetBSD, so we can go back to "0" (instead of "0.0.0.0") as the default host to listen on. - FreeBSD's /bin/sh needs continuation characters to understand what we're assigning to `command` in foo_precmd(). This seems sensible and doesn't break NetBSD. Bump version.
2018-12-15Fix previous: required_files the tcprules, not the cdb (which getsschmonz5-10/+10
autogenerated if it doesn't exist). Point more actionably at SRS and TLS setup docs. Bump version.
2018-12-14K&R-style braces in rc.d scripts. NFCI.schmonz6-70/+38
2018-12-14Extract most of MESSAGE to README.pkgsrc. (MESSAGE was getting too long.)schmonz12-73/+135
Comment out qmail-qfilter-viruscan in control/smtpfilters. It's not a very precise tool, so the cost (false positives) probably outweighs the benefit (blocked malware attachments) for many users. Also not a sensible default: rejecting incoming mail on SPF explicit-fail. This needs to be an admin decision because, among other reasons, it would also reject messages forwarded through servers that haven't configured SRS. Document SPF setup, including how to reject (with this caveat) and how to greylist SPF explicit-pass (which would otherwise be exempted from greylisting). Rename greylisting-spp-with-exemptions to greylisting-spp-wrapper. Add a feature: to effectively omit IP from the (IP,sender,recipient) tuple, add GL_WRAPPER_TCPREMOTEIP="127.127.127.127" to control/tcprules/smtp. rc.d scripts: - Location of tcprules file is configurable - By default, CDB is auto-rebuilt as needed on service start - CDB auto-rebuilding can be configured off Bump version.
2018-12-12Make sure ${VARBASE}/run exists before creating the qmail-send pidfile.schmonz2-3/+4
On a freshly bootstrapped Debian 9, somehow it didn't. Bump version.
2018-12-11Add SPF checks via qmail-spp-spf (new dependency):schmonz13-46/+60
- On "fail", reject - On "pass", skip any greylisting - Else, accept mail as we otherwise would. qmail-spp-spf adds a `Received-SPF:` header to all incoming messages. Migrate ${PKG_SYSCONFDIR}/tcp.* to ${PKG_SYSCONFDIR}/control/tcprules. Bump version.
2018-12-04qmail will not start (under qmail-run or otherwise) without a few basicschmonz3-36/+7
config files. Removing them on uninstall if they haven't been changed is already mail/qmail's job; creating them on install was being done here, and this combination was probably responsible for `pkgin full-upgrade` removing some config files and qmail no longer running. Thanks to Nathan Arthur for the bug report. Instead of running config-fast-pkgsrc here, rely on mail/qmail to do it. For similar reasons, also expect mail/qmail to handle the three basic aliases (root, mailer-daemon, postmaster) and QUEUE_EXTRA. While here, set QMAILREMOTE in qmailsend_postenv in preparation for a future update. Bump version.
2018-11-28Sort rc.conf defaults to match the order in which they're used.schmonz4-18/+18
2018-11-28Install control/ofmipfilters containing qmail-qfilter-addtlsheader, aschmonz9-24/+43
new filter to add a Received header with TLS protocol and ciphers. Add qmail-qfilter-addtlsheader to control/smtpfilters, too. Bump acceptutils dependency to get this program. Point to qmail-qfilter-queue in tcp.ofmip and tcp.smtp. This replaces the formerly separate qmail-queue wrappers for ofmipd and smtpd. Bump rejectutils dependency to get this program. rc.d scripts: - ofmipd, pop3d, smtpd: let a standalone TLS key file be configured in rc.conf. - ofmipd, pop3d: let pre- and post-checkpassword commands be configured in rc.conf. - pop3d: fix typo in default TLS file paths. Bump version.
2018-11-24Bump version and acceptutils dependency for authup regression fix.schmonz2-4/+4
2018-11-24Bump dependency on qmail-acceptutils for new STARTTLS behavior, andschmonz2-4/+7
provide the necessary configuration entry.
2018-11-14On second thought, greylisting isn't a sensible default. Comment it outschmonz10-33/+46
in control/smtpplugins. Extract a "Greylisting" stanza in MESSAGE. Merge "Local non-root users to see the queue" into previous section (and provide qmail-qread-client in example mailer.conf to begin with). Mention port numbers where applicable. Enable defaults that are sensible: realrcptto in control/rcptchecks and viruscan in control/smtpfilters. Add fixsmtpio rules to make greylisting-spp's tempfails look more like qmail's other messages. Bump dependency on qmail for config-fast-pkgsrc, which is like config-fast but lets us simulate CONF_FILES-like behavior. As before, we install these minimal config files, and won't deinstall them. (But the updated qmail package will.) Bump version.
2018-11-13Enable greylisting by default via mail/greylisting-spp. To make this aschmonz8-26/+82
sensible default, we wrap it in "greylisting-spp-with-exemptions", which lets recipient addresses and domains be exempted from greylisting by editing control/greylist/exemptrcpt{s,hosts}. qmailofmipd: enable user CDB by default and remove the verbiage. qmailsmtpd: bump datalimit (seeing occasional "fixsmtpio: out of memory" in production). Improve MESSAGE a bit more. Bump version.
2018-11-10Bump dependency on qmail for SPP support and on rejectutils for anschmonz4-10/+28
SPP-compatible qmail-rcptcheck. Create control/smtpplugins so that the RCPTCHECK-compatible programs continue to run as before. No functional change intended. Bump version.
2018-11-08Bump acceptutils dependency to get STARTTLS support in fixsmtpio(8)schmonz8-31/+109
(obviating the need for qmail-smtpd(8) to be patched to link OpenSSL). Make TLS configurable for submission, POP3, and now also incoming SMTP: - "yes" (startup will fail if cert or DH params are missing) - "no" (even if they're present, don't offer TLS) - "auto" (the default: offer TLS iff they're present) Mention TLS setup in MESSAGE. Delay SMTP greeting by 2 seconds. Enable zen.spamhaus.org RBL. Bump version.
2018-11-03When tagging log entries, insert "/" between "nbqmail" and the rest ofschmonz6-15/+14
the tag; for instance, "nbqmailofmipd" becomes "nbqmail/ofmipd". Vaguely redolent of Postfix, and easier to glance at logs now that just about everything runs similarly from rc.d. Turn off sslserver verbosity by default. Bump version.
2018-10-28Point to where servercert.pem actually is. While here, use the regularlyschmonz3-8/+13
regenerated DH params too. Bump PKGREVISION.
2018-10-28Update to 20181028. Changes:schmonz6-21/+21
- CERTFILE needs to be set early enough for sslserver. Move it to rc.d. UCSPITLS is application-specific and can stay in the CDB. - Add PYMSGAUTH_TOLERATE_UNCONFIGURED to the CDB. - Switch qmailpop3d from tcpserver+qmail-popup to sslserver+authup. Set UCSPITLS in the CDB to require STLS before USER/PASS. - Specify a few new required_files. - Point more precisely at the need to inspect alias/.qmail-*.
2018-10-27Update to 20181027. Changes:schmonz10-59/+62
- Bump qmail-acceptutils for integrated privsep TLS using ucspi-ssl. - Switch qmailofmipd rc.d script to sslserver, listening on the network. - Install control/{pop3,smtp}capabilities, as newly required by authup. - Organize INSTALL a bit better. - Remove all vestiges of stunnel, including further shortening MESSAGE.
2018-10-24Add ofmipd-with-user-cdb, a wrapper to let ofmipd users control theirschmonz4-5/+28
own CDB of address rewriting rules. Ride previous bump.
2018-10-24Remove dependency on mess822, the "sasl" and "tls" options, and theirschmonz20-101/+147
respective dependencies on spamdyke and stunnel. Depend instead on qmail-acceptutils, which provides SMTP AUTH (and new filtering functionality) and brings its own unconditional mess822 and stunnel dependencies. Update rc.d scripts to match. Use CONF_FILES instead of a bunch of open-coded INSTALL cleverness. Clean up even better with a little DEINSTALL cleverness to remove CDB files if their source CONF_FILES are gone. Install sensible fixsmtpio rules and viruscan signatures. Tighten MESSAGE. The basics have gotten pretty easy. Bump version.
2018-09-14Mention the spamassassin and rspamd wrapper scripts.schmonz1-3/+4
2018-09-10Add scripts to wrap spamc and rspamc, suitable for use in .qmail filesschmonz4-16/+25
with e.g. condtomaildir(1). Bump version.
2018-08-01Depend on pkgtools/pkg_alternatives and a new enough mail/qmail to relyschmonz3-25/+9
on finding "nbcheckpassword" (which, at present, might be either checkpassword-pam or DJB's original). Depend (unconditionally) on mail/qmail-rejectutils, instead of having it as an option on mail/qmail. Bump version.
2018-07-29Detect the checkpassword program of the installed qmail, so we can referschmonz3-7/+24
to it from config files and rc.d scripts. Bump version.
2018-07-04*: Move SUBST_STAGE from post-patch to pre-configurejperkin1-2/+2
Performing substitutions during post-patch breaks tools such as mkpatches, making it very difficult to regenerate correct patches after making changes, and often leading to substituted string replacements being committed.
2018-05-28Un-mention qmail-qfilter wrapper, no longer here.schmonz1-2/+2
2017-08-05procname isn't defined in time for logcmd. Bump PKGREVISION.schmonz5-9/+10
2017-08-05Fix "reload" and "hup" (broken in 20170729).schmonz7-27/+27
For all services where we set procname, prefix "nb". This makes it even harder for observers to fail to notice that this isn't a Life with qmail install, and happens to match the log tags already being applied. Bump version.
2017-08-04If there's more than one qmail-send running (e.g., /var/qmail2 runningschmonz2-6/+20
from /service), the rc.d script can't tell which is ours. Make and use a pidfile. (The other rc.d scripts set argv[0] to names that are unlikely to collide, but there's no easy way to do that for the qmail-send process exec'd by qmail-start.) Bump PKGREVISION.
2017-07-30pkgsrc changes:schmonz3-22/+50
- Collapse redundant code for invoking service-specific rc.d scripts. - Don't try to run a service's rc.d script if it isn't enabled in rc.conf. - Run "pause" in reverse sequence, like "stop" does. - Support "stat", "pause", and "cont" in qmailqread. Bump version.
2017-07-21Update to 20170720. pkgsrc changes:schmonz5-108/+36
- Remove qmail-qfilter-*-queue shell scripts, which would conflict with the C programs of the same name included in mail/qmail 1.03nb29 with the "qmail-rejectutils" option (enabled by default). - Bump mail/qmail dependency to 1.03nb29. - Shorten and improve MESSAGE.
2017-07-06Remove qmail-qfilter-queue, deprecated in 2017Q2. Use qmail-qfilter-smtpd-queueschmonz3-9/+5
or qmail-qfilter-ofmipd-queue instead. Bump version.
2017-06-23Catch up to djbdns-run:schmonz4-20/+26
- Add "reload" as a synonym for "cdb" in qmail{ofmip,pop3,smtp}d.sh - Shorten tcprules invocations Bump version.
2017-06-17Increase default {ofmip,pop3,smtp}d softlimits by about 20 percent,schmonz8-45/+48
to 180000000 bytes. From Nathan Arthur in private mail. Allow path to tcpserver to be overridden in rc.conf (e.g., by sslserver from net/ucspi-ssl). From Thomas Lazar in private mail. Detach processes and their loggers from the controlling terminal with pgrphack(8). Include qmailqread in the services driven by the LWQ-style qmail rc.d script. Unconditionally depend on mail/mess822, now that it's correctly marked public-domain. Remove qmail-run-ofmipd option. Bump version.
2017-05-31Add dependency on qmail-qfilter. Deprecate qmail-qfilter-queue in favorschmonz4-34/+83
of qmail-qfilter-{ofmipd,smtpd}-queue, and document how to enable filtering for incoming and submitted messages. Bump version.
2017-04-11If qmailqread runs on a custom host and port, have qmail-qread-clientschmonz2-4/+12
find it there. Bump version.
2017-04-10Wrap (or shorten) long lines. Parameterize some qmailqread config toschmonz6-23/+63
match other scripts. Bump version.
2017-04-09Add "qmail-run-ofmipd" option that controls the dependency onschmonz5-11/+18
mess822. Turn it off by default. This should let us once again publish binary packages. To use another ofmipd, set qmailofmipd_ofmipdcmd in rc.conf. Likewise for qmail-smtpd and qmail-pop3d. Bump version.
2017-04-04Substitute configured qmail users in rc.d scripts. Un-hardcode someschmonz5-13/+17
paths in qmailofmipd.sh, somehow missed in 20170109. Bump version.
2017-04-02Document more stuff this package includes nowadays.schmonz1-2/+2
2017-01-14Conditionalize spamdyke and stunnel dependencies on "sasl" and "tls"schmonz2-4/+18
options, respectively. Bump version.
2017-01-09Include new dependency on spamdyke, missed in previous.schmonz1-2/+2
generated by cgit v1.2.3 (git 2.39.1) at 2024-08-05 19:37:26 +0000