summaryrefslogtreecommitdiffstats
path: root/qmail-remote.c
Commit message (Collapse)AuthorAgeFilesLines
* qmail-remote: show EHLO response even after connection has been droppedHEADmastermanuel2026-01-191-23/+29
| | | | | | | | | | | | | | | | | | this was actually way harder than assumed. turns out we need to issue HELO after EHLO, in case EHLO is not supported. however qmail overwrites the old reply as soon as we issue the next command. furthermore some mail servers drop the connection after issueing a 5xx reply. we only notice this after reading from the socket which usually happens on the next smtp commmand. so we need to run HELO to determine if the connection has been dropped, however running HELO truncates the EHLO reply we want to show in the bounce message. and we have TLS-required as possible variants. so after EHLO fails.. * in TLS-required: show EHLO reponse in case EHLO code is non-success * in non-TLS: copy EHLO response, issue HELO, show EHLO response in case connection dies, otherwise show HELO response
* Fix utf8received failing to detect empty newlines (body starts)manuel2025-01-271-1/+4
| | | | This resulted in invalid mail encoding (bare LF, \r\n\n)
* Do not enable legacy TLS version any longermanuel2025-01-221-1/+0
|
* Add support for "require TLS"-settingsmanuel2023-09-261-10/+38
|
* openssl: ignore unexpected EOF + only 1 session ticketmanuel2023-08-101-0/+2
|
* Disable TLS renegotiationmanuel2023-08-101-0/+2
|
* Get rid of useless "User and password not set, continuing withoutmanuel2023-08-101-4/+4
| | | | authentication...." message
* Use ASN1_STRING_...-functions where possiblemanuel2023-08-101-1/+1
|
* DANE: only enabled if MX lookup has been validatedmanuel2023-08-101-28/+23
| | | | additionally require TLSA RRs to be validated as well
* qmail-remote: disable QMTPmanuel2023-08-091-0/+2
|
* Make qmail openssl 3.0 compatiblemanuel2023-08-081-90/+107
| | | | | | | - remove support for loading custom DH params from pem. use opensslconf if really required - remove support for loading custom ec group from params - reimplement DANE support using openssl DANE functions
* Revert "Rewrite 554 smtp code for web.de/gmx.net/1&1 servers"manuel2020-06-021-17/+1
| | | | This reverts commit f2ef25deb1aa356d41cdd3f6e46d9a68c48bfce0.
* Rewrite 554 smtp code for web.de/gmx.net/1&1 serversmanuel2019-12-021-1/+17
|
* Fix compile warnings...Manuel Mausz2019-06-111-5/+5
|
* Enable PRIORITIZE_CHACHA per defaultmanuel2018-09-171-1/+1
|
* OpenSSL 1.1 compatibilityManuel Mausz2018-06-271-5/+44
| | | | | | | | | | | | | | This adds compatibility for OpenSSL 1.1 Since renegotiation is removed from TLS 1.3 we also removed support for authentication via client certificates (control/tlsclients). In general this is still supported by TLS 1.3 however I'm just lazy and we don't need this feature anyway. This also adds optional support for OpenSSL configuration commands for qmail-smtpd and qmail-remote. Commands are loaded from control/opensslconf. For a list of supported commands see https://www.openssl.org/docs/man1.0.2/ssl/SSL_CONF_cmd.html#SUPPORTED-CONFIGURATION-FILE-COMMANDS
* work around a libval bugmanuel2018-04-161-0/+3
|
* Disable SSLv3 and enable prefer server ciphersmanuel2018-04-161-1/+1
|
* SMTPUTF8: substract null terminationmanuel2017-10-101-0/+1
| | | | | qmail-remote assumes host is not null terminated. IDN requires null termination so subtract the trailing NULL after appending.
* add support for SMTPUTF8manuel2017-08-171-5/+91
|
* make qmail support EC keysmanuel2016-08-071-1/+1
|
* disable SSLv2manuel2016-03-011-0/+1
|
* update DANE support to libval 2.1 (+fixes)manuel2015-07-241-20/+35
|
* fix missing check for invalid dane statusmanuel2015-07-061-13/+14
| | | | | libval returns VAL_DANE_NOERROR if domain is insecure and no TLSA RR exists. we should stop all further dane handling in this case
* add SMTP DANE supportmanuel2015-07-041-51/+110
|
* opportunistic TLSmanuel2015-06-301-2/+26
| | | | When the TLS handshake fails, retry delivery with TLS disabled
* Treat ECONNREFUSED the same as ETIMEDOUTmanuel2014-05-201-1/+1
| | | | | | | | After an SMTP connection attempt times out, qmail-remote records the relevant IP address. If the same address fails again (after at least two minutes with no intervening successful connections), qmail-remote assumes that further attempts will fail for at least another hour.
* Fix qmail-remote to handle multiple MX records correctly as in rfc2821manuel2014-05-201-2/+3
| | | | | | | | This patch changes qmail-remote to skip over MX servers that greet with codes 400 to 499 and to bounce mail when any MX server that qmail tries greets with a code 500 to 599. see http://www-dt.e-technik.uni-dortmund.de/~ma/qmail/patch-qmail-1.03-rfc2821.diff
* get rid of DNS ANY querymanuel2014-02-181-24/+4
| | | | | | | | UltraDNS started blocking UDP-ANY queries so this is a problem. This will disable domain canonicalization of the envelope address of outgoing messages. This is as specified by RFC 1123 section 5.2.2. However this requirement is obsolete and modern MTAs have disabled it too.
* [PATCH] qmail-1.03-accept-5xxmanuel2013-02-041-2/+6
|
* [PATCH] Adding support for remote QMTP hostsmanuel2013-02-041-6/+127
| | | | qmail-1.03-qmtpc
* [PATCH] qregex-starttls-2way-auth-20060423-mmmanuel2013-02-041-9/+435
|
* qmail 1.03 importmanuel2013-02-041-0/+427
generated by cgit v1.2.3 (git 2.25.1) at 2026-03-04 03:00:37 +0000