update to pre-4.87 master
[exim.git] / src / src / readconf.c
1 /*************************************************
2 * Exim - an Internet mail transport agent *
3 *************************************************/
4
5 /* Copyright (c) University of Cambridge 1995 - 2015 */
6 /* See the file NOTICE for conditions of use and distribution. */
7
8 /* Functions for reading the configuration file, and for displaying
9 overall configuration values. Thanks to Brian Candler for the original
10 implementation of the conditional .ifdef etc. */
11
12 #include "exim.h"
13
14 static void fn_smtp_receive_timeout(const uschar * name, const uschar * str);
15 static void save_config_line(const uschar* line);
16 static void save_config_position(const uschar *file, int line);
17 static void print_config(BOOL admin);
18
19 #define CSTATE_STACK_SIZE 10
20
21
22 /* Structure for chain (stack) of .included files */
23
24 typedef struct config_file_item {
25 struct config_file_item *next;
26 uschar *filename;
27 FILE *file;
28 int lineno;
29 } config_file_item;
30
31 /* Structure for chain of configuration lines (-bP config) */
32
33 typedef struct config_line_item {
34 struct config_line_item *next;
35 uschar *line;
36 } config_line_item;
37
38 static config_line_item* config_lines;
39
40 /* Structure of table of conditional words and their state transitions */
41
42 typedef struct cond_item {
43 uschar *name;
44 int namelen;
45 int action1;
46 int action2;
47 int pushpop;
48 } cond_item;
49
50 /* Structure of table of syslog facility names and values */
51
52 typedef struct syslog_fac_item {
53 uschar *name;
54 int value;
55 } syslog_fac_item;
56
57 /* constants */
58 static const char * const hidden = "<value not displayable>";
59
60 /* Static variables */
61
62 static config_file_item *config_file_stack = NULL; /* For includes */
63
64 static uschar *syslog_facility_str = NULL;
65 static uschar next_section[24];
66 static uschar time_buffer[24];
67
68 /* State variables for conditional loading (.ifdef / .else / .endif) */
69
70 static int cstate = 0;
71 static int cstate_stack_ptr = -1;
72 static int cstate_stack[CSTATE_STACK_SIZE];
73
74 /* Table of state transitions for handling conditional inclusions. There are
75 four possible state transitions:
76
77 .ifdef true
78 .ifdef false
79 .elifdef true (or .else)
80 .elifdef false
81
82 .endif just causes the previous cstate to be popped off the stack */
83
84 static int next_cstate[3][4] =
85 {
86 /* State 0: reading from file, or reading until next .else or .endif */
87 { 0, 1, 2, 2 },
88 /* State 1: condition failed, skipping until next .else or .endif */
89 { 2, 2, 0, 1 },
90 /* State 2: skipping until .endif */
91 { 2, 2, 2, 2 },
92 };
93
94 /* Table of conditionals and the states to set. For each name, there are four
95 values: the length of the name (to save computing it each time), the state to
96 set if a macro was found in the line, the state to set if a macro was not found
97 in the line, and a stack manipulation setting which is:
98
99 -1 pull state value off the stack
100 0 don't alter the stack
101 +1 push value onto stack, before setting new state
102 */
103
104 static cond_item cond_list[] = {
105 { US"ifdef", 5, 0, 1, 1 },
106 { US"ifndef", 6, 1, 0, 1 },
107 { US"elifdef", 7, 2, 3, 0 },
108 { US"elifndef", 8, 3, 2, 0 },
109 { US"else", 4, 2, 2, 0 },
110 { US"endif", 5, 0, 0, -1 }
111 };
112
113 static int cond_list_size = sizeof(cond_list)/sizeof(cond_item);
114
115 /* Table of syslog facility names and their values */
116
117 static syslog_fac_item syslog_list[] = {
118 { US"mail", LOG_MAIL },
119 { US"user", LOG_USER },
120 { US"news", LOG_NEWS },
121 { US"uucp", LOG_UUCP },
122 { US"local0", LOG_LOCAL0 },
123 { US"local1", LOG_LOCAL1 },
124 { US"local2", LOG_LOCAL2 },
125 { US"local3", LOG_LOCAL3 },
126 { US"local4", LOG_LOCAL4 },
127 { US"local5", LOG_LOCAL5 },
128 { US"local6", LOG_LOCAL6 },
129 { US"local7", LOG_LOCAL7 },
130 { US"daemon", LOG_DAEMON }
131 };
132
133 static int syslog_list_size = sizeof(syslog_list)/sizeof(syslog_fac_item);
134
135
136
137
138 /*************************************************
139 * Main configuration options *
140 *************************************************/
141
142 /* The list of options that can be set in the main configuration file. This
143 must be in alphabetic order because it is searched by binary chop. */
144
145 static optionlist optionlist_config[] = {
146 { "*set_exim_group", opt_bool|opt_hidden, &exim_gid_set },
147 { "*set_exim_user", opt_bool|opt_hidden, &exim_uid_set },
148 { "*set_system_filter_group", opt_bool|opt_hidden, &system_filter_gid_set },
149 { "*set_system_filter_user", opt_bool|opt_hidden, &system_filter_uid_set },
150 { "accept_8bitmime", opt_bool, &accept_8bitmime },
151 { "acl_not_smtp", opt_stringptr, &acl_not_smtp },
152 #ifdef WITH_CONTENT_SCAN
153 { "acl_not_smtp_mime", opt_stringptr, &acl_not_smtp_mime },
154 #endif
155 { "acl_not_smtp_start", opt_stringptr, &acl_not_smtp_start },
156 { "acl_smtp_auth", opt_stringptr, &acl_smtp_auth },
157 { "acl_smtp_connect", opt_stringptr, &acl_smtp_connect },
158 { "acl_smtp_data", opt_stringptr, &acl_smtp_data },
159 #ifndef DISABLE_PRDR
160 { "acl_smtp_data_prdr", opt_stringptr, &acl_smtp_data_prdr },
161 #endif
162 #ifndef DISABLE_DKIM
163 { "acl_smtp_dkim", opt_stringptr, &acl_smtp_dkim },
164 #endif
165 { "acl_smtp_etrn", opt_stringptr, &acl_smtp_etrn },
166 { "acl_smtp_expn", opt_stringptr, &acl_smtp_expn },
167 { "acl_smtp_helo", opt_stringptr, &acl_smtp_helo },
168 { "acl_smtp_mail", opt_stringptr, &acl_smtp_mail },
169 { "acl_smtp_mailauth", opt_stringptr, &acl_smtp_mailauth },
170 #ifdef WITH_CONTENT_SCAN
171 { "acl_smtp_mime", opt_stringptr, &acl_smtp_mime },
172 #endif
173 { "acl_smtp_notquit", opt_stringptr, &acl_smtp_notquit },
174 { "acl_smtp_predata", opt_stringptr, &acl_smtp_predata },
175 { "acl_smtp_quit", opt_stringptr, &acl_smtp_quit },
176 { "acl_smtp_rcpt", opt_stringptr, &acl_smtp_rcpt },
177 #ifdef SUPPORT_TLS
178 { "acl_smtp_starttls", opt_stringptr, &acl_smtp_starttls },
179 #endif
180 { "acl_smtp_vrfy", opt_stringptr, &acl_smtp_vrfy },
181 { "admin_groups", opt_gidlist, &admin_groups },
182 { "allow_domain_literals", opt_bool, &allow_domain_literals },
183 { "allow_mx_to_ip", opt_bool, &allow_mx_to_ip },
184 { "allow_utf8_domains", opt_bool, &allow_utf8_domains },
185 { "auth_advertise_hosts", opt_stringptr, &auth_advertise_hosts },
186 { "auto_thaw", opt_time, &auto_thaw },
187 #ifdef WITH_CONTENT_SCAN
188 { "av_scanner", opt_stringptr, &av_scanner },
189 #endif
190 { "bi_command", opt_stringptr, &bi_command },
191 #ifdef EXPERIMENTAL_BRIGHTMAIL
192 { "bmi_config_file", opt_stringptr, &bmi_config_file },
193 #endif
194 { "bounce_message_file", opt_stringptr, &bounce_message_file },
195 { "bounce_message_text", opt_stringptr, &bounce_message_text },
196 { "bounce_return_body", opt_bool, &bounce_return_body },
197 { "bounce_return_message", opt_bool, &bounce_return_message },
198 { "bounce_return_size_limit", opt_mkint, &bounce_return_size_limit },
199 { "bounce_sender_authentication",opt_stringptr,&bounce_sender_authentication },
200 { "callout_domain_negative_expire", opt_time, &callout_cache_domain_negative_expire },
201 { "callout_domain_positive_expire", opt_time, &callout_cache_domain_positive_expire },
202 { "callout_negative_expire", opt_time, &callout_cache_negative_expire },
203 { "callout_positive_expire", opt_time, &callout_cache_positive_expire },
204 { "callout_random_local_part",opt_stringptr, &callout_random_local_part },
205 { "check_log_inodes", opt_int, &check_log_inodes },
206 { "check_log_space", opt_Kint, &check_log_space },
207 { "check_rfc2047_length", opt_bool, &check_rfc2047_length },
208 { "check_spool_inodes", opt_int, &check_spool_inodes },
209 { "check_spool_space", opt_Kint, &check_spool_space },
210 { "daemon_smtp_port", opt_stringptr|opt_hidden, &daemon_smtp_port },
211 { "daemon_smtp_ports", opt_stringptr, &daemon_smtp_port },
212 { "daemon_startup_retries", opt_int, &daemon_startup_retries },
213 { "daemon_startup_sleep", opt_time, &daemon_startup_sleep },
214 #ifdef EXPERIMENTAL_DCC
215 { "dcc_direct_add_header", opt_bool, &dcc_direct_add_header },
216 { "dccifd_address", opt_stringptr, &dccifd_address },
217 { "dccifd_options", opt_stringptr, &dccifd_options },
218 #endif
219 { "delay_warning", opt_timelist, &delay_warning },
220 { "delay_warning_condition", opt_stringptr, &delay_warning_condition },
221 { "deliver_drop_privilege", opt_bool, &deliver_drop_privilege },
222 { "deliver_queue_load_max", opt_fixed, &deliver_queue_load_max },
223 { "delivery_date_remove", opt_bool, &delivery_date_remove },
224 #ifdef ENABLE_DISABLE_FSYNC
225 { "disable_fsync", opt_bool, &disable_fsync },
226 #endif
227 { "disable_ipv6", opt_bool, &disable_ipv6 },
228 #ifndef DISABLE_DKIM
229 { "dkim_verify_signers", opt_stringptr, &dkim_verify_signers },
230 #endif
231 #ifdef EXPERIMENTAL_DMARC
232 { "dmarc_forensic_sender", opt_stringptr, &dmarc_forensic_sender },
233 { "dmarc_history_file", opt_stringptr, &dmarc_history_file },
234 { "dmarc_tld_file", opt_stringptr, &dmarc_tld_file },
235 #endif
236 { "dns_again_means_nonexist", opt_stringptr, &dns_again_means_nonexist },
237 { "dns_check_names_pattern", opt_stringptr, &check_dns_names_pattern },
238 { "dns_csa_search_limit", opt_int, &dns_csa_search_limit },
239 { "dns_csa_use_reverse", opt_bool, &dns_csa_use_reverse },
240 { "dns_dnssec_ok", opt_int, &dns_dnssec_ok },
241 { "dns_ipv4_lookup", opt_stringptr, &dns_ipv4_lookup },
242 { "dns_retrans", opt_time, &dns_retrans },
243 { "dns_retry", opt_int, &dns_retry },
244 { "dns_trust_aa", opt_stringptr, &dns_trust_aa },
245 { "dns_use_edns0", opt_int, &dns_use_edns0 },
246 /* This option is now a no-op, retained for compability */
247 { "drop_cr", opt_bool, &drop_cr },
248 /*********************************************************/
249 { "dsn_advertise_hosts", opt_stringptr, &dsn_advertise_hosts },
250 { "dsn_from", opt_stringptr, &dsn_from },
251 { "envelope_to_remove", opt_bool, &envelope_to_remove },
252 { "errors_copy", opt_stringptr, &errors_copy },
253 { "errors_reply_to", opt_stringptr, &errors_reply_to },
254 #ifndef DISABLE_EVENT
255 { "event_action", opt_stringptr, &event_action },
256 #endif
257 { "exim_group", opt_gid, &exim_gid },
258 { "exim_path", opt_stringptr, &exim_path },
259 { "exim_user", opt_uid, &exim_uid },
260 { "extra_local_interfaces", opt_stringptr, &extra_local_interfaces },
261 { "extract_addresses_remove_arguments", opt_bool, &extract_addresses_remove_arguments },
262 { "finduser_retries", opt_int, &finduser_retries },
263 { "freeze_tell", opt_stringptr, &freeze_tell },
264 { "gecos_name", opt_stringptr, &gecos_name },
265 { "gecos_pattern", opt_stringptr, &gecos_pattern },
266 #ifdef SUPPORT_TLS
267 { "gnutls_allow_auto_pkcs11", opt_bool, &gnutls_allow_auto_pkcs11 },
268 { "gnutls_compat_mode", opt_bool, &gnutls_compat_mode },
269 /* These three gnutls_require_* options stopped working in Exim 4.80 */
270 /* From 4.83 we log a warning; a future relase will remove them */
271 { "gnutls_require_kx", opt_stringptr, &gnutls_require_kx },
272 { "gnutls_require_mac", opt_stringptr, &gnutls_require_mac },
273 { "gnutls_require_protocols", opt_stringptr, &gnutls_require_proto },
274 #endif
275 { "header_line_maxsize", opt_int, &header_line_maxsize },
276 { "header_maxsize", opt_int, &header_maxsize },
277 { "headers_charset", opt_stringptr, &headers_charset },
278 { "helo_accept_junk_hosts", opt_stringptr, &helo_accept_junk_hosts },
279 { "helo_allow_chars", opt_stringptr, &helo_allow_chars },
280 { "helo_lookup_domains", opt_stringptr, &helo_lookup_domains },
281 { "helo_try_verify_hosts", opt_stringptr, &helo_try_verify_hosts },
282 { "helo_verify_hosts", opt_stringptr, &helo_verify_hosts },
283 { "hold_domains", opt_stringptr, &hold_domains },
284 { "host_lookup", opt_stringptr, &host_lookup },
285 { "host_lookup_order", opt_stringptr, &host_lookup_order },
286 { "host_reject_connection", opt_stringptr, &host_reject_connection },
287 { "hosts_connection_nolog", opt_stringptr, &hosts_connection_nolog },
288 #ifdef SUPPORT_PROXY
289 { "hosts_proxy", opt_stringptr, &hosts_proxy },
290 #endif
291 { "hosts_treat_as_local", opt_stringptr, &hosts_treat_as_local },
292 #ifdef LOOKUP_IBASE
293 { "ibase_servers", opt_stringptr, &ibase_servers },
294 #endif
295 { "ignore_bounce_errors_after", opt_time, &ignore_bounce_errors_after },
296 { "ignore_fromline_hosts", opt_stringptr, &ignore_fromline_hosts },
297 { "ignore_fromline_local", opt_bool, &ignore_fromline_local },
298 { "keep_malformed", opt_time, &keep_malformed },
299 #ifdef LOOKUP_LDAP
300 { "ldap_ca_cert_dir", opt_stringptr, &eldap_ca_cert_dir },
301 { "ldap_ca_cert_file", opt_stringptr, &eldap_ca_cert_file },
302 { "ldap_cert_file", opt_stringptr, &eldap_cert_file },
303 { "ldap_cert_key", opt_stringptr, &eldap_cert_key },
304 { "ldap_cipher_suite", opt_stringptr, &eldap_cipher_suite },
305 { "ldap_default_servers", opt_stringptr, &eldap_default_servers },
306 { "ldap_require_cert", opt_stringptr, &eldap_require_cert },
307 { "ldap_start_tls", opt_bool, &eldap_start_tls },
308 { "ldap_version", opt_int, &eldap_version },
309 #endif
310 { "local_from_check", opt_bool, &local_from_check },
311 { "local_from_prefix", opt_stringptr, &local_from_prefix },
312 { "local_from_suffix", opt_stringptr, &local_from_suffix },
313 { "local_interfaces", opt_stringptr, &local_interfaces },
314 { "local_scan_timeout", opt_time, &local_scan_timeout },
315 { "local_sender_retain", opt_bool, &local_sender_retain },
316 { "localhost_number", opt_stringptr, &host_number_string },
317 { "log_file_path", opt_stringptr, &log_file_path },
318 { "log_selector", opt_stringptr, &log_selector_string },
319 { "log_timezone", opt_bool, &log_timezone },
320 { "lookup_open_max", opt_int, &lookup_open_max },
321 { "max_username_length", opt_int, &max_username_length },
322 { "message_body_newlines", opt_bool, &message_body_newlines },
323 { "message_body_visible", opt_mkint, &message_body_visible },
324 { "message_id_header_domain", opt_stringptr, &message_id_domain },
325 { "message_id_header_text", opt_stringptr, &message_id_text },
326 { "message_logs", opt_bool, &message_logs },
327 { "message_size_limit", opt_stringptr, &message_size_limit },
328 #ifdef SUPPORT_MOVE_FROZEN_MESSAGES
329 { "move_frozen_messages", opt_bool, &move_frozen_messages },
330 #endif
331 { "mua_wrapper", opt_bool, &mua_wrapper },
332 #ifdef LOOKUP_MYSQL
333 { "mysql_servers", opt_stringptr, &mysql_servers },
334 #endif
335 { "never_users", opt_uidlist, &never_users },
336 #ifdef SUPPORT_TLS
337 { "openssl_options", opt_stringptr, &openssl_options },
338 #endif
339 #ifdef LOOKUP_ORACLE
340 { "oracle_servers", opt_stringptr, &oracle_servers },
341 #endif
342 { "percent_hack_domains", opt_stringptr, &percent_hack_domains },
343 #ifdef EXIM_PERL
344 { "perl_at_start", opt_bool, &opt_perl_at_start },
345 { "perl_startup", opt_stringptr, &opt_perl_startup },
346 #endif
347 #ifdef LOOKUP_PGSQL
348 { "pgsql_servers", opt_stringptr, &pgsql_servers },
349 #endif
350 { "pid_file_path", opt_stringptr, &pid_file_path },
351 { "pipelining_advertise_hosts", opt_stringptr, &pipelining_advertise_hosts },
352 #ifndef DISABLE_PRDR
353 { "prdr_enable", opt_bool, &prdr_enable },
354 #endif
355 { "preserve_message_logs", opt_bool, &preserve_message_logs },
356 { "primary_hostname", opt_stringptr, &primary_hostname },
357 { "print_topbitchars", opt_bool, &print_topbitchars },
358 { "process_log_path", opt_stringptr, &process_log_path },
359 { "prod_requires_admin", opt_bool, &prod_requires_admin },
360 { "qualify_domain", opt_stringptr, &qualify_domain_sender },
361 { "qualify_recipient", opt_stringptr, &qualify_domain_recipient },
362 { "queue_domains", opt_stringptr, &queue_domains },
363 { "queue_list_requires_admin",opt_bool, &queue_list_requires_admin },
364 { "queue_only", opt_bool, &queue_only },
365 { "queue_only_file", opt_stringptr, &queue_only_file },
366 { "queue_only_load", opt_fixed, &queue_only_load },
367 { "queue_only_load_latch", opt_bool, &queue_only_load_latch },
368 { "queue_only_override", opt_bool, &queue_only_override },
369 { "queue_run_in_order", opt_bool, &queue_run_in_order },
370 { "queue_run_max", opt_int, &queue_run_max },
371 { "queue_smtp_domains", opt_stringptr, &queue_smtp_domains },
372 { "receive_timeout", opt_time, &receive_timeout },
373 { "received_header_text", opt_stringptr, &received_header_text },
374 { "received_headers_max", opt_int, &received_headers_max },
375 { "recipient_unqualified_hosts", opt_stringptr, &recipient_unqualified_hosts },
376 { "recipients_max", opt_int, &recipients_max },
377 { "recipients_max_reject", opt_bool, &recipients_max_reject },
378 #ifdef LOOKUP_REDIS
379 { "redis_servers", opt_stringptr, &redis_servers },
380 #endif
381 { "remote_max_parallel", opt_int, &remote_max_parallel },
382 { "remote_sort_domains", opt_stringptr, &remote_sort_domains },
383 { "retry_data_expire", opt_time, &retry_data_expire },
384 { "retry_interval_max", opt_time, &retry_interval_max },
385 { "return_path_remove", opt_bool, &return_path_remove },
386 { "return_size_limit", opt_mkint|opt_hidden, &bounce_return_size_limit },
387 { "rfc1413_hosts", opt_stringptr, &rfc1413_hosts },
388 { "rfc1413_query_timeout", opt_time, &rfc1413_query_timeout },
389 { "sender_unqualified_hosts", opt_stringptr, &sender_unqualified_hosts },
390 { "slow_lookup_log", opt_int, &slow_lookup_log },
391 { "smtp_accept_keepalive", opt_bool, &smtp_accept_keepalive },
392 { "smtp_accept_max", opt_int, &smtp_accept_max },
393 { "smtp_accept_max_nonmail", opt_int, &smtp_accept_max_nonmail },
394 { "smtp_accept_max_nonmail_hosts", opt_stringptr, &smtp_accept_max_nonmail_hosts },
395 { "smtp_accept_max_per_connection", opt_int, &smtp_accept_max_per_connection },
396 { "smtp_accept_max_per_host", opt_stringptr, &smtp_accept_max_per_host },
397 { "smtp_accept_queue", opt_int, &smtp_accept_queue },
398 { "smtp_accept_queue_per_connection", opt_int, &smtp_accept_queue_per_connection },
399 { "smtp_accept_reserve", opt_int, &smtp_accept_reserve },
400 { "smtp_active_hostname", opt_stringptr, &raw_active_hostname },
401 { "smtp_banner", opt_stringptr, &smtp_banner },
402 { "smtp_check_spool_space", opt_bool, &smtp_check_spool_space },
403 { "smtp_connect_backlog", opt_int, &smtp_connect_backlog },
404 { "smtp_enforce_sync", opt_bool, &smtp_enforce_sync },
405 { "smtp_etrn_command", opt_stringptr, &smtp_etrn_command },
406 { "smtp_etrn_serialize", opt_bool, &smtp_etrn_serialize },
407 { "smtp_load_reserve", opt_fixed, &smtp_load_reserve },
408 { "smtp_max_synprot_errors", opt_int, &smtp_max_synprot_errors },
409 { "smtp_max_unknown_commands",opt_int, &smtp_max_unknown_commands },
410 { "smtp_ratelimit_hosts", opt_stringptr, &smtp_ratelimit_hosts },
411 { "smtp_ratelimit_mail", opt_stringptr, &smtp_ratelimit_mail },
412 { "smtp_ratelimit_rcpt", opt_stringptr, &smtp_ratelimit_rcpt },
413 { "smtp_receive_timeout", opt_func, &fn_smtp_receive_timeout },
414 { "smtp_reserve_hosts", opt_stringptr, &smtp_reserve_hosts },
415 { "smtp_return_error_details",opt_bool, &smtp_return_error_details },
416 #ifdef SUPPORT_I18N
417 { "smtputf8_advertise_hosts", opt_stringptr, &smtputf8_advertise_hosts },
418 #endif
419 #ifdef WITH_CONTENT_SCAN
420 { "spamd_address", opt_stringptr, &spamd_address },
421 #endif
422 #ifdef EXPERIMENTAL_SPF
423 { "spf_guess", opt_stringptr, &spf_guess },
424 #endif
425 { "split_spool_directory", opt_bool, &split_spool_directory },
426 { "spool_directory", opt_stringptr, &spool_directory },
427 #ifdef LOOKUP_SQLITE
428 { "sqlite_lock_timeout", opt_int, &sqlite_lock_timeout },
429 #endif
430 #ifdef EXPERIMENTAL_SRS
431 { "srs_config", opt_stringptr, &srs_config },
432 { "srs_hashlength", opt_int, &srs_hashlength },
433 { "srs_hashmin", opt_int, &srs_hashmin },
434 { "srs_maxage", opt_int, &srs_maxage },
435 { "srs_secrets", opt_stringptr, &srs_secrets },
436 { "srs_usehash", opt_bool, &srs_usehash },
437 { "srs_usetimestamp", opt_bool, &srs_usetimestamp },
438 #endif
439 { "strict_acl_vars", opt_bool, &strict_acl_vars },
440 { "strip_excess_angle_brackets", opt_bool, &strip_excess_angle_brackets },
441 { "strip_trailing_dot", opt_bool, &strip_trailing_dot },
442 { "syslog_duplication", opt_bool, &syslog_duplication },
443 { "syslog_facility", opt_stringptr, &syslog_facility_str },
444 { "syslog_processname", opt_stringptr, &syslog_processname },
445 { "syslog_timestamp", opt_bool, &syslog_timestamp },
446 { "system_filter", opt_stringptr, &system_filter },
447 { "system_filter_directory_transport", opt_stringptr,&system_filter_directory_transport },
448 { "system_filter_file_transport",opt_stringptr,&system_filter_file_transport },
449 { "system_filter_group", opt_gid, &system_filter_gid },
450 { "system_filter_pipe_transport",opt_stringptr,&system_filter_pipe_transport },
451 { "system_filter_reply_transport",opt_stringptr,&system_filter_reply_transport },
452 { "system_filter_user", opt_uid, &system_filter_uid },
453 { "tcp_nodelay", opt_bool, &tcp_nodelay },
454 #ifdef USE_TCP_WRAPPERS
455 { "tcp_wrappers_daemon_name", opt_stringptr, &tcp_wrappers_daemon_name },
456 #endif
457 { "timeout_frozen_after", opt_time, &timeout_frozen_after },
458 { "timezone", opt_stringptr, &timezone_string },
459 { "tls_advertise_hosts", opt_stringptr, &tls_advertise_hosts },
460 #ifdef SUPPORT_TLS
461 { "tls_certificate", opt_stringptr, &tls_certificate },
462 { "tls_crl", opt_stringptr, &tls_crl },
463 { "tls_dh_max_bits", opt_int, &tls_dh_max_bits },
464 { "tls_dhparam", opt_stringptr, &tls_dhparam },
465 { "tls_eccurve", opt_stringptr, &tls_eccurve },
466 # ifndef DISABLE_OCSP
467 { "tls_ocsp_file", opt_stringptr, &tls_ocsp_file },
468 # endif
469 { "tls_on_connect_ports", opt_stringptr, &tls_in.on_connect_ports },
470 { "tls_privatekey", opt_stringptr, &tls_privatekey },
471 { "tls_remember_esmtp", opt_bool, &tls_remember_esmtp },
472 { "tls_require_ciphers", opt_stringptr, &tls_require_ciphers },
473 { "tls_try_verify_hosts", opt_stringptr, &tls_try_verify_hosts },
474 { "tls_verify_certificates", opt_stringptr, &tls_verify_certificates },
475 { "tls_verify_hosts", opt_stringptr, &tls_verify_hosts },
476 #endif
477 { "trusted_groups", opt_gidlist, &trusted_groups },
478 { "trusted_users", opt_uidlist, &trusted_users },
479 { "unknown_login", opt_stringptr, &unknown_login },
480 { "unknown_username", opt_stringptr, &unknown_username },
481 { "untrusted_set_sender", opt_stringptr, &untrusted_set_sender },
482 { "uucp_from_pattern", opt_stringptr, &uucp_from_pattern },
483 { "uucp_from_sender", opt_stringptr, &uucp_from_sender },
484 { "warn_message_file", opt_stringptr, &warn_message_file },
485 { "write_rejectlog", opt_bool, &write_rejectlog }
486 };
487
488 static int optionlist_config_size =
489 sizeof(optionlist_config)/sizeof(optionlist);
490
491
492
493 /*************************************************
494 * Find the name of an option *
495 *************************************************/
496
497 /* This function is to aid debugging. Various functions take arguments that are
498 pointer variables in the options table or in option tables for various drivers.
499 For debugging output, it is useful to be able to find the name of the option
500 which is currently being processed. This function finds it, if it exists, by
501 searching the table(s).
502
503 Arguments: a value that is presumed to be in the table above
504 Returns: the option name, or an empty string
505 */
506
507 uschar *
508 readconf_find_option(void *p)
509 {
510 int i;
511 router_instance *r;
512 transport_instance *t;
513
514 for (i = 0; i < optionlist_config_size; i++)
515 if (p == optionlist_config[i].value) return US optionlist_config[i].name;
516
517 for (r = routers; r != NULL; r = r->next)
518 {
519 router_info *ri = r->info;
520 for (i = 0; i < *ri->options_count; i++)
521 {
522 if ((ri->options[i].type & opt_mask) != opt_stringptr) continue;
523 if (p == (char *)(r->options_block) + (long int)(ri->options[i].value))
524 return US ri->options[i].name;
525 }
526 }
527
528 for (t = transports; t != NULL; t = t->next)
529 {
530 transport_info *ti = t->info;
531 for (i = 0; i < *ti->options_count; i++)
532 {
533 optionlist * op = &ti->options[i];
534 if ((op->type & opt_mask) != opt_stringptr) continue;
535 if (p == ( op->type & opt_public
536 ? (char *)t
537 : (char *)t->options_block
538 )
539 + (long int)op->value)
540 return US op->name;
541 }
542 }
543
544 return US"";
545 }
546
547
548
549
550 /*************************************************
551 * Deal with an assignment to a macro *
552 *************************************************/
553
554 /* This function is called when a line that starts with an upper case letter is
555 encountered. The argument "line" should contain a complete logical line, and
556 start with the first letter of the macro name. The macro name and the
557 replacement text are extracted and stored. Redefinition of existing,
558 non-command line, macros is permitted using '==' instead of '='.
559
560 Arguments:
561 s points to the start of the logical line
562
563 Returns: nothing
564 */
565
566 static void
567 read_macro_assignment(uschar *s)
568 {
569 uschar name[64];
570 int namelen = 0;
571 BOOL redef = FALSE;
572 macro_item *m;
573 macro_item *mlast = NULL;
574
575 while (isalnum(*s) || *s == '_')
576 {
577 if (namelen >= sizeof(name) - 1)
578 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
579 "macro name too long (maximum is " SIZE_T_FMT " characters)", sizeof(name) - 1);
580 name[namelen++] = *s++;
581 }
582 name[namelen] = 0;
583
584 while (isspace(*s)) s++;
585 if (*s++ != '=')
586 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "malformed macro definition");
587
588 if (*s == '=')
589 {
590 redef = TRUE;
591 s++;
592 }
593 while (isspace(*s)) s++;
594
595 /* If an existing macro of the same name was defined on the command line, we
596 just skip this definition. It's an error to attempt to redefine a macro without
597 redef set to TRUE, or to redefine a macro when it hasn't been defined earlier.
598 It is also an error to define a macro whose name begins with the name of a
599 previously defined macro. Note: it is documented that the other way round
600 works. */
601
602 for (m = macros; m != NULL; m = m->next)
603 {
604 int len = Ustrlen(m->name);
605
606 if (Ustrcmp(m->name, name) == 0)
607 {
608 if (!m->command_line && !redef)
609 log_write(0, LOG_CONFIG|LOG_PANIC_DIE, "macro \"%s\" is already "
610 "defined (use \"==\" if you want to redefine it", name);
611 break;
612 }
613
614 if (len < namelen && Ustrstr(name, m->name) != NULL)
615 log_write(0, LOG_CONFIG|LOG_PANIC_DIE, "\"%s\" cannot be defined as "
616 "a macro because previously defined macro \"%s\" is a substring",
617 name, m->name);
618
619 /* We cannot have this test, because it is documented that a substring
620 macro is permitted (there is even an example).
621 *
622 * if (len > namelen && Ustrstr(m->name, name) != NULL)
623 * log_write(0, LOG_CONFIG|LOG_PANIC_DIE, "\"%s\" cannot be defined as "
624 * "a macro because it is a substring of previously defined macro \"%s\"",
625 * name, m->name);
626 */
627
628 mlast = m;
629 }
630
631 /* Check for an overriding command-line definition. */
632
633 if (m != NULL && m->command_line) return;
634
635 /* Redefinition must refer to an existing macro. */
636
637 if (redef)
638 {
639 if (m == NULL)
640 log_write(0, LOG_CONFIG|LOG_PANIC_DIE, "can't redefine an undefined macro "
641 "\"%s\"", name);
642 }
643
644 /* We have a new definition. The macro_item structure includes a final vector
645 called "name" which is one byte long. Thus, adding "namelen" gives us enough
646 room to store the "name" string. */
647
648 else
649 {
650 m = store_get(sizeof(macro_item) + namelen);
651 if (macros == NULL) macros = m; else mlast->next = m;
652 Ustrncpy(m->name, name, namelen);
653 m->name[namelen] = 0;
654 m->next = NULL;
655 m->command_line = FALSE;
656 }
657
658 /* Set the value of the new or redefined macro */
659
660 m->replacement = string_copy(s);
661 }
662
663
664
665
666
667 /*************************************************
668 * Read configuration line *
669 *************************************************/
670
671 /* A logical line of text is read from the configuration file into the big
672 buffer, taking account of macros, .includes, and continuations. The size of
673 big_buffer is increased if necessary. The count of configuration lines is
674 maintained. Physical input lines starting with # (ignoring leading white space,
675 and after macro replacement) and empty logical lines are always ignored.
676 Leading and trailing spaces are removed.
677
678 If we hit a line of the form "begin xxxx", the xxxx is placed in the
679 next_section vector, and the function returns NULL, indicating the end of a
680 configuration section. On end-of-file, NULL is returned with next_section
681 empty.
682
683 Arguments: none
684
685 Returns: a pointer to the first non-blank in the line,
686 or NULL if eof or end of section is reached
687 */
688
689 static uschar *
690 get_config_line(void)
691 {
692 int startoffset = 0; /* To first non-blank char in logical line */
693 int len = 0; /* Of logical line so far */
694 int newlen;
695 uschar *s, *ss;
696 macro_item *m;
697 BOOL macro_found;
698
699 /* Loop for handling continuation lines, skipping comments, and dealing with
700 .include files. */
701
702 for (;;)
703 {
704 if (Ufgets(big_buffer+len, big_buffer_size-len, config_file) == NULL)
705 {
706 if (config_file_stack != NULL) /* EOF inside .include */
707 {
708 (void)fclose(config_file);
709 config_file = config_file_stack->file;
710 config_filename = config_file_stack->filename;
711 config_lineno = config_file_stack->lineno;
712 config_file_stack = config_file_stack->next;
713 if (config_lines)
714 save_config_position(config_filename, config_lineno);
715 continue;
716 }
717
718 /* EOF at top level */
719
720 if (cstate_stack_ptr >= 0)
721 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
722 "Unexpected end of configuration file: .endif missing");
723
724 if (len != 0) break; /* EOF after continuation */
725 next_section[0] = 0; /* EOF at start of logical line */
726 return NULL;
727 }
728
729 config_lineno++;
730 newlen = len + Ustrlen(big_buffer + len);
731
732 if (config_lines && config_lineno == 1)
733 save_config_position(config_filename, config_lineno);
734
735 /* Handle pathologically long physical lines - yes, it did happen - by
736 extending big_buffer at this point. The code also copes with very long
737 logical lines. */
738
739 while (newlen == big_buffer_size - 1 && big_buffer[newlen - 1] != '\n')
740 {
741 uschar *newbuffer;
742 big_buffer_size += BIG_BUFFER_SIZE;
743 newbuffer = store_malloc(big_buffer_size);
744
745 /* This use of strcpy is OK because we know that the string in the old
746 buffer is shorter than the new buffer. */
747
748 Ustrcpy(newbuffer, big_buffer);
749 store_free(big_buffer);
750 big_buffer = newbuffer;
751 if (Ufgets(big_buffer+newlen, big_buffer_size-newlen, config_file) == NULL)
752 break;
753 newlen += Ustrlen(big_buffer + newlen);
754 }
755
756 /* Find the true start of the physical line - leading spaces are always
757 ignored. */
758
759 ss = big_buffer + len;
760 while (isspace(*ss)) ss++;
761
762 /* Process the physical line for macros. If this is the start of the logical
763 line, skip over initial text at the start of the line if it starts with an
764 upper case character followed by a sequence of name characters and an equals
765 sign, because that is the definition of a new macro, and we don't do
766 replacement therein. */
767
768 s = ss;
769 if (len == 0 && isupper(*s))
770 {
771 while (isalnum(*s) || *s == '_') s++;
772 while (isspace(*s)) s++;
773 if (*s != '=') s = ss; /* Not a macro definition */
774 }
775
776 /* For each defined macro, scan the line (from after XXX= if present),
777 replacing all occurrences of the macro. */
778
779 macro_found = FALSE;
780 for (m = macros; m != NULL; m = m->next)
781 {
782 uschar *p, *pp;
783 uschar *t = s;
784
785 while ((p = Ustrstr(t, m->name)) != NULL)
786 {
787 int moveby;
788 int namelen = Ustrlen(m->name);
789 int replen = Ustrlen(m->replacement);
790
791 /* Expand the buffer if necessary */
792
793 while (newlen - namelen + replen + 1 > big_buffer_size)
794 {
795 int newsize = big_buffer_size + BIG_BUFFER_SIZE;
796 uschar *newbuffer = store_malloc(newsize);
797 memcpy(newbuffer, big_buffer, newlen + 1);
798 p = newbuffer + (p - big_buffer);
799 s = newbuffer + (s - big_buffer);
800 ss = newbuffer + (ss - big_buffer);
801 t = newbuffer + (t - big_buffer);
802 big_buffer_size = newsize;
803 store_free(big_buffer);
804 big_buffer = newbuffer;
805 }
806
807 /* Shuffle the remaining characters up or down in the buffer before
808 copying in the replacement text. Don't rescan the replacement for this
809 same macro. */
810
811 pp = p + namelen;
812 moveby = replen - namelen;
813 if (moveby != 0)
814 {
815 memmove(p + replen, pp, (big_buffer + newlen) - pp + 1);
816 newlen += moveby;
817 }
818 Ustrncpy(p, m->replacement, replen);
819 t = p + replen;
820 macro_found = TRUE;
821 }
822 }
823
824 /* An empty macro replacement at the start of a line could mean that ss no
825 longer points to the first non-blank character. */
826
827 while (isspace(*ss)) ss++;
828
829 /* Check for comment lines - these are physical lines. */
830
831 if (*ss == '#') continue;
832
833 /* Handle conditionals, which are also applied to physical lines. Conditions
834 are of the form ".ifdef ANYTEXT" and are treated as true if any macro
835 expansion occured on the rest of the line. A preliminary test for the leading
836 '.' saves effort on most lines. */
837
838 if (*ss == '.')
839 {
840 int i;
841
842 /* Search the list of conditional directives */
843
844 for (i = 0; i < cond_list_size; i++)
845 {
846 int n;
847 cond_item *c = cond_list+i;
848 if (Ustrncmp(ss+1, c->name, c->namelen) != 0) continue;
849
850 /* The following character must be white space or end of string */
851
852 n = ss[1 + c->namelen];
853 if (n != ' ' && n != 't' && n != '\n' && n != 0) break;
854
855 /* .ifdef and .ifndef push the current state onto the stack, then set
856 a new one from the table. Stack overflow is an error */
857
858 if (c->pushpop > 0)
859 {
860 if (cstate_stack_ptr >= CSTATE_STACK_SIZE - 1)
861 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
862 ".%s nested too deeply", c->name);
863 cstate_stack[++cstate_stack_ptr] = cstate;
864 cstate = next_cstate[cstate][macro_found? c->action1 : c->action2];
865 }
866
867 /* For any of the others, stack underflow is an error. The next state
868 comes either from the stack (.endif) or from the table. */
869
870 else
871 {
872 if (cstate_stack_ptr < 0)
873 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
874 ".%s without matching .ifdef", c->name);
875 cstate = (c->pushpop < 0)? cstate_stack[cstate_stack_ptr--] :
876 next_cstate[cstate][macro_found? c->action1 : c->action2];
877 }
878
879 /* Having dealt with a directive, break the loop */
880
881 break;
882 }
883
884 /* If we have handled a conditional directive, continue with the next
885 physical line. Otherwise, fall through. */
886
887 if (i < cond_list_size) continue;
888 }
889
890 /* If the conditional state is not 0 (actively using these lines), ignore
891 this input line. */
892
893 if (cstate != 0) continue; /* Conditional skip */
894
895 /* Handle .include lines - these are also physical lines. */
896
897 if (Ustrncmp(ss, ".include", 8) == 0 &&
898 (isspace(ss[8]) ||
899 (Ustrncmp(ss+8, "_if_exists", 10) == 0 && isspace(ss[18]))))
900 {
901 uschar *t;
902 int include_if_exists = isspace(ss[8])? 0 : 10;
903 config_file_item *save;
904 struct stat statbuf;
905
906 ss += 9 + include_if_exists;
907 while (isspace(*ss)) ss++;
908 t = ss + Ustrlen(ss);
909 while (t > ss && isspace(t[-1])) t--;
910 if (*ss == '\"' && t[-1] == '\"')
911 {
912 ss++;
913 t--;
914 }
915 *t = 0;
916
917 if (*ss != '/')
918 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, ".include specifies a non-"
919 "absolute path \"%s\"", ss);
920
921 if (include_if_exists != 0 && (Ustat(ss, &statbuf) != 0)) continue;
922
923 if (config_lines)
924 save_config_position(config_filename, config_lineno);
925 save = store_get(sizeof(config_file_item));
926 save->next = config_file_stack;
927 config_file_stack = save;
928 save->file = config_file;
929 save->filename = config_filename;
930 save->lineno = config_lineno;
931
932 config_file = Ufopen(ss, "rb");
933 if (config_file == NULL)
934 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "failed to open included "
935 "configuration file %s", ss);
936 config_filename = string_copy(ss);
937 config_lineno = 0;
938 continue;
939 }
940
941 /* If this is the start of the logical line, remember where the non-blank
942 data starts. Otherwise shuffle down continuation lines to remove leading
943 white space. */
944
945 if (len == 0)
946 startoffset = ss - big_buffer;
947 else
948 {
949 s = big_buffer + len;
950 if (ss > s)
951 {
952 memmove(s, ss, (newlen - len) - (ss - s) + 1);
953 newlen -= ss - s;
954 }
955 }
956
957 /* Accept the new addition to the line. Remove trailing white space. */
958
959 len = newlen;
960 while (len > 0 && isspace(big_buffer[len-1])) len--;
961 big_buffer[len] = 0;
962
963 /* We are done if the line does not end in backslash and contains some data.
964 Empty logical lines are ignored. For continuations, remove the backslash and
965 go round the loop to read the continuation line. */
966
967 if (len > 0)
968 {
969 if (big_buffer[len-1] != '\\') break; /* End of logical line */
970 big_buffer[--len] = 0; /* Remove backslash */
971 }
972 } /* Loop for reading multiple physical lines */
973
974 /* We now have a logical line. Test for the end of a configuration section (or,
975 more accurately, for the start of the next section). Place the name of the next
976 section in next_section, and return NULL. If the name given is longer than
977 next_section, truncate it. It will be unrecognized later, because all the known
978 section names do fit. Leave space for pluralizing. */
979
980 s = big_buffer + startoffset; /* First non-space character */
981
982 if (config_lines)
983 save_config_line(s);
984
985 if (strncmpic(s, US"begin ", 6) == 0)
986 {
987 s += 6;
988 while (isspace(*s)) s++;
989 if (big_buffer + len - s > sizeof(next_section) - 2)
990 s[sizeof(next_section) - 2] = 0;
991 Ustrcpy(next_section, s);
992 return NULL;
993 }
994
995 /* Return the first non-blank character. */
996
997 return s;
998 }
999
1000
1001
1002 /*************************************************
1003 * Read a name *
1004 *************************************************/
1005
1006 /* The yield is the pointer to the next uschar. Names longer than the
1007 output space are silently truncated. This function is also used from acl.c when
1008 parsing ACLs.
1009
1010 Arguments:
1011 name where to put the name
1012 len length of name
1013 s input pointer
1014
1015 Returns: new input pointer
1016 */
1017
1018 uschar *
1019 readconf_readname(uschar *name, int len, uschar *s)
1020 {
1021 int p = 0;
1022 while (isspace(*s)) s++;
1023 if (isalpha(*s))
1024 {
1025 while (isalnum(*s) || *s == '_')
1026 {
1027 if (p < len-1) name[p++] = *s;
1028 s++;
1029 }
1030 }
1031 name[p] = 0;
1032 while (isspace(*s)) s++;
1033 return s;
1034 }
1035
1036
1037
1038
1039 /*************************************************
1040 * Read a time value *
1041 *************************************************/
1042
1043 /* This function is also called from outside, to read argument
1044 time values. The format of a time value is:
1045
1046 [<n>w][<n>d][<n>h][<n>m][<n>s]
1047
1048 as long as at least one is present. If a format error is encountered,
1049 return a negative value. The value must be terminated by the given
1050 terminator.
1051
1052 Arguments:
1053 s input pointer
1054 terminator required terminating character
1055 return_msec if TRUE, allow fractional seconds and return milliseconds
1056
1057 Returns: the time value, or -1 on syntax error
1058 value is seconds if return_msec is FALSE
1059 value is milliseconds if return_msec is TRUE
1060 */
1061
1062 int
1063 readconf_readtime(const uschar *s, int terminator, BOOL return_msec)
1064 {
1065 int yield = 0;
1066 for (;;)
1067 {
1068 int value, count;
1069 double fraction;
1070
1071 if (!isdigit(*s)) return -1;
1072 (void)sscanf(CCS s, "%d%n", &value, &count);
1073 s += count;
1074
1075 switch (*s)
1076 {
1077 case 'w': value *= 7;
1078 case 'd': value *= 24;
1079 case 'h': value *= 60;
1080 case 'm': value *= 60;
1081 case 's': s++;
1082 break;
1083
1084 case '.':
1085 if (!return_msec) return -1;
1086 (void)sscanf(CCS s, "%lf%n", &fraction, &count);
1087 s += count;
1088 if (*s++ != 's') return -1;
1089 yield += (int)(fraction * 1000.0);
1090 break;
1091
1092 default: return -1;
1093 }
1094
1095 if (return_msec) value *= 1000;
1096 yield += value;
1097 if (*s == terminator) return yield;
1098 }
1099 /* Control never reaches here. */
1100 }
1101
1102
1103
1104 /*************************************************
1105 * Read a fixed point value *
1106 *************************************************/
1107
1108 /* The value is returned *1000
1109
1110 Arguments:
1111 s input pointer
1112 terminator required terminator
1113
1114 Returns: the value, or -1 on error
1115 */
1116
1117 static int
1118 readconf_readfixed(const uschar *s, int terminator)
1119 {
1120 int yield = 0;
1121 int value, count;
1122 if (!isdigit(*s)) return -1;
1123 (void)sscanf(CS s, "%d%n", &value, &count);
1124 s += count;
1125 yield = value * 1000;
1126 if (*s == '.')
1127 {
1128 int m = 100;
1129 while (isdigit((*(++s))))
1130 {
1131 yield += (*s - '0') * m;
1132 m /= 10;
1133 }
1134 }
1135
1136 return (*s == terminator)? yield : (-1);
1137 }
1138
1139
1140
1141 /*************************************************
1142 * Find option in list *
1143 *************************************************/
1144
1145 /* The lists are always in order, so binary chop can be used.
1146
1147 Arguments:
1148 name the option name to search for
1149 ol the first entry in the option list
1150 last one more than the offset of the last entry in the option list
1151
1152 Returns: pointer to an option entry, or NULL if not found
1153 */
1154
1155 static optionlist *
1156 find_option(uschar *name, optionlist *ol, int last)
1157 {
1158 int first = 0;
1159 while (last > first)
1160 {
1161 int middle = (first + last)/2;
1162 int c = Ustrcmp(name, ol[middle].name);
1163 if (c == 0) return ol + middle;
1164 else if (c > 0) first = middle + 1;
1165 else last = middle;
1166 }
1167 return NULL;
1168 }
1169
1170
1171
1172 /*************************************************
1173 * Find a set flag in option list *
1174 *************************************************/
1175
1176 /* Because some versions of Unix make no restrictions on the values of uids and
1177 gids (even negative ones), we cannot represent "unset" by a special value.
1178 There is therefore a separate boolean variable for each one indicating whether
1179 a value is set or not. This function returns a pointer to the boolean, given
1180 the original option name. It is a major disaster if the flag cannot be found.
1181
1182 Arguments:
1183 name the name of the uid or gid option
1184 oltop points to the start of the relevant option list
1185 last one more than the offset of the last item in the option list
1186 data_block NULL when reading main options => data values in the option
1187 list are absolute addresses; otherwise they are byte offsets
1188 in data_block (used for driver options)
1189
1190 Returns: a pointer to the boolean flag.
1191 */
1192
1193 static BOOL *
1194 get_set_flag(uschar *name, optionlist *oltop, int last, void *data_block)
1195 {
1196 optionlist *ol;
1197 uschar name2[64];
1198 sprintf(CS name2, "*set_%.50s", name);
1199 ol = find_option(name2, oltop, last);
1200 if (ol == NULL) log_write(0, LOG_MAIN|LOG_PANIC_DIE,
1201 "Exim internal error: missing set flag for %s", name);
1202 return (data_block == NULL)? (BOOL *)(ol->value) :
1203 (BOOL *)((uschar *)data_block + (long int)(ol->value));
1204 }
1205
1206
1207
1208
1209 /*************************************************
1210 * Output extra characters message and die *
1211 *************************************************/
1212
1213 /* Called when an option line has junk on the end. Sometimes this is because
1214 the sysadmin thinks comments are permitted.
1215
1216 Arguments:
1217 s points to the extra characters
1218 t1..t3 strings to insert in the log message
1219
1220 Returns: doesn't return; dies
1221 */
1222
1223 static void
1224 extra_chars_error(const uschar *s, const uschar *t1, const uschar *t2, const uschar *t3)
1225 {
1226 uschar *comment = US"";
1227 if (*s == '#') comment = US" (# is comment only at line start)";
1228 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
1229 "extra characters follow %s%s%s%s", t1, t2, t3, comment);
1230 }
1231
1232
1233
1234 /*************************************************
1235 * Read rewrite information *
1236 *************************************************/
1237
1238 /* Each line of rewrite information contains:
1239
1240 . A complete address in the form user@domain, possibly with
1241 leading * for each part; or alternatively, a regex.
1242
1243 . A replacement string (which will be expanded).
1244
1245 . An optional sequence of one-letter flags, indicating which
1246 headers etc. to apply this rule to.
1247
1248 All this is decoded and placed into a control block. The OR of the flags is
1249 maintained in a common word.
1250
1251 Arguments:
1252 p points to the string that makes up the rule
1253 existflags points to the overall flag word
1254 isglobal TRUE if reading global rewrite rules
1255
1256 Returns: the control block for the parsed rule.
1257 */
1258
1259 static rewrite_rule *
1260 readconf_one_rewrite(const uschar *p, int *existflags, BOOL isglobal)
1261 {
1262 rewrite_rule *next = store_get(sizeof(rewrite_rule));
1263
1264 next->next = NULL;
1265 next->key = string_dequote(&p);
1266
1267 while (isspace(*p)) p++;
1268 if (*p == 0)
1269 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
1270 "missing rewrite replacement string");
1271
1272 next->flags = 0;
1273 next->replacement = string_dequote(&p);
1274
1275 while (*p != 0) switch (*p++)
1276 {
1277 case ' ': case '\t': break;
1278
1279 case 'q': next->flags |= rewrite_quit; break;
1280 case 'w': next->flags |= rewrite_whole; break;
1281
1282 case 'h': next->flags |= rewrite_all_headers; break;
1283 case 's': next->flags |= rewrite_sender; break;
1284 case 'f': next->flags |= rewrite_from; break;
1285 case 't': next->flags |= rewrite_to; break;
1286 case 'c': next->flags |= rewrite_cc; break;
1287 case 'b': next->flags |= rewrite_bcc; break;
1288 case 'r': next->flags |= rewrite_replyto; break;
1289
1290 case 'E': next->flags |= rewrite_all_envelope; break;
1291 case 'F': next->flags |= rewrite_envfrom; break;
1292 case 'T': next->flags |= rewrite_envto; break;
1293
1294 case 'Q': next->flags |= rewrite_qualify; break;
1295 case 'R': next->flags |= rewrite_repeat; break;
1296
1297 case 'S':
1298 next->flags |= rewrite_smtp;
1299 if (next->key[0] != '^' && Ustrncmp(next->key, "\\N^", 3) != 0)
1300 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
1301 "rewrite rule has the S flag but is not a regular expression");
1302 break;
1303
1304 default:
1305 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
1306 "unknown rewrite flag character '%c' "
1307 "(could be missing quotes round replacement item)", p[-1]);
1308 break;
1309 }
1310
1311 /* If no action flags are set, set all the "normal" rewrites. */
1312
1313 if ((next->flags & (rewrite_all | rewrite_smtp)) == 0)
1314 next->flags |= isglobal? rewrite_all : rewrite_all_headers;
1315
1316 /* Remember which exist, for optimization, and return the rule */
1317
1318 *existflags |= next->flags;
1319 return next;
1320 }
1321
1322
1323
1324
1325 /*************************************************
1326 * Read global rewrite information *
1327 *************************************************/
1328
1329 /* Each line is a single rewrite rule; it is parsed into a control block
1330 by readconf_one_rewrite(), and its flags are ORed into the global flag
1331 word rewrite_existflags. */
1332
1333 void
1334 readconf_rewrites(void)
1335 {
1336 rewrite_rule **chain = &global_rewrite_rules;
1337 uschar *p;
1338
1339 while ((p = get_config_line()) != NULL)
1340 {
1341 rewrite_rule *next = readconf_one_rewrite(p, &rewrite_existflags, TRUE);
1342 *chain = next;
1343 chain = &(next->next);
1344 }
1345 }
1346
1347
1348
1349 /*************************************************
1350 * Read a string *
1351 *************************************************/
1352
1353 /* Strings are read into the normal store pool. As long we aren't too
1354 near the end of the current block, the string will just use what is necessary
1355 on the top of the stacking pool, because string_cat() uses the extension
1356 mechanism.
1357
1358 Argument:
1359 s the rest of the input line
1360 name the option name (for errors)
1361
1362 Returns: pointer to the string
1363 */
1364
1365 static uschar *
1366 read_string(const uschar *s, const uschar *name)
1367 {
1368 uschar *yield;
1369 const uschar *ss;
1370
1371 if (*s != '\"') return string_copy(s);
1372
1373 ss = s;
1374 yield = string_dequote(&s);
1375
1376 if (s == ss+1 || s[-1] != '\"')
1377 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
1378 "missing quote at end of string value for %s", name);
1379
1380 if (*s != 0) extra_chars_error(s, US"string value for ", name, US"");
1381
1382 return yield;
1383 }
1384
1385
1386 /*************************************************
1387 * Custom-handler options *
1388 *************************************************/
1389 static void
1390 fn_smtp_receive_timeout(const uschar * name, const uschar * str)
1391 {
1392 if (*str == '$')
1393 smtp_receive_timeout_s = string_copy(str);
1394 else
1395 {
1396 /* "smtp_receive_timeout", opt_time, &smtp_receive_timeout */
1397 smtp_receive_timeout = readconf_readtime(str, 0, FALSE);
1398 if (smtp_receive_timeout < 0)
1399 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "invalid time value for %s",
1400 name);
1401 }
1402 }
1403
1404 /*************************************************
1405 * Handle option line *
1406 *************************************************/
1407
1408 /* This function is called from several places to process a line containing the
1409 setting of an option. The first argument is the line to be decoded; it has been
1410 checked not to be empty and not to start with '#'. Trailing newlines and white
1411 space have been removed. The second argument is a pointer to the list of
1412 variable names that are to be recognized, together with their types and
1413 locations, and the third argument gives the number of entries in the list.
1414
1415 The fourth argument is a pointer to a data block. If it is NULL, then the data
1416 values in the options list are absolute addresses. Otherwise, they are byte
1417 offsets in the data block.
1418
1419 String option data may continue onto several lines; this function reads further
1420 data from config_file if necessary.
1421
1422 The yield of this function is normally zero. If a string continues onto
1423 multiple lines, then the data value is permitted to be followed by a comma
1424 or a semicolon (for use in drivers) and the yield is that character.
1425
1426 Arguments:
1427 buffer contains the configuration line to be handled
1428 oltop points to the start of the relevant option list
1429 last one more than the offset of the last item in the option list
1430 data_block NULL when reading main options => data values in the option
1431 list are absolute addresses; otherwise they are byte offsets
1432 in data_block when they have opt_public set; otherwise
1433 they are byte offsets in data_block->options_block.
1434 unknown_txt format string to use in panic message for unknown option;
1435 must contain %s for option name
1436 if given as NULL, don't panic on unknown option
1437
1438 Returns: TRUE if an option was read successfully,
1439 FALSE false for an unknown option if unknown_txt == NULL,
1440 otherwise panic and die on an unknown option
1441 */
1442
1443 static BOOL
1444 readconf_handle_option(uschar *buffer, optionlist *oltop, int last,
1445 void *data_block, uschar *unknown_txt)
1446 {
1447 int ptr = 0;
1448 int offset = 0;
1449 int n, count, type, value;
1450 int issecure = 0;
1451 uid_t uid;
1452 gid_t gid;
1453 BOOL boolvalue = TRUE;
1454 BOOL freesptr = TRUE;
1455 optionlist *ol, *ol2;
1456 struct passwd *pw;
1457 void *reset_point;
1458 int intbase = 0;
1459 uschar *inttype = US"";
1460 uschar *sptr;
1461 uschar *s = buffer;
1462 uschar *saved_condition, *strtemp;
1463 uschar **str_target;
1464 uschar name[64];
1465 uschar name2[64];
1466
1467 /* There may be leading spaces; thereafter, we expect an option name starting
1468 with a letter. */
1469
1470 while (isspace(*s)) s++;
1471 if (!isalpha(*s))
1472 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "option setting expected: %s", s);
1473
1474 /* Read the name of the option, and skip any subsequent white space. If
1475 it turns out that what we read was "hide", set the flag indicating that
1476 this is a secure option, and loop to read the next word. */
1477
1478 for (n = 0; n < 2; n++)
1479 {
1480 while (isalnum(*s) || *s == '_')
1481 {
1482 if (ptr < sizeof(name)-1) name[ptr++] = *s;
1483 s++;
1484 }
1485 name[ptr] = 0;
1486 while (isspace(*s)) s++;
1487 if (Ustrcmp(name, "hide") != 0) break;
1488 issecure = opt_secure;
1489 ptr = 0;
1490 }
1491
1492 /* Deal with "no_" or "not_" here for booleans */
1493
1494 if (Ustrncmp(name, "no_", 3) == 0)
1495 {
1496 boolvalue = FALSE;
1497 offset = 3;
1498 }
1499
1500 if (Ustrncmp(name, "not_", 4) == 0)
1501 {
1502 boolvalue = FALSE;
1503 offset = 4;
1504 }
1505
1506 /* Search the list for the given name. A non-existent name, or an option that
1507 is set twice, is a disaster. */
1508
1509 ol = find_option(name + offset, oltop, last);
1510
1511 if (ol == NULL)
1512 {
1513 if (unknown_txt == NULL) return FALSE;
1514 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, CS unknown_txt, name);
1515 }
1516
1517 if ((ol->type & opt_set) && !(ol->type & (opt_rep_con | opt_rep_str)))
1518 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
1519 "\"%s\" option set for the second time", name);
1520
1521 ol->type |= opt_set | issecure;
1522 type = ol->type & opt_mask;
1523
1524 /* Types with data values must be followed by '='; the "no[t]_" prefix
1525 applies only to boolean values. */
1526
1527 if (type < opt_bool || type > opt_bool_last)
1528 {
1529 if (offset != 0)
1530 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
1531 "negation prefix applied to a non-boolean option");
1532 if (*s == 0)
1533 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
1534 "unexpected end of line (data missing) after %s", name);
1535 if (*s != '=')
1536 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "missing \"=\" after %s", name);
1537 }
1538
1539 /* If a boolean wasn't preceded by "no[t]_" it can be followed by = and
1540 true/false/yes/no, or, in the case of opt_expand_bool, a general string that
1541 ultimately expands to one of those values. */
1542
1543 else if (*s != 0 && (offset != 0 || *s != '='))
1544 extra_chars_error(s, US"boolean option ", name, US"");
1545
1546 /* Skip white space after = */
1547
1548 if (*s == '=') while (isspace((*(++s))));
1549
1550 /* If there is a data block and the opt_public flag is not set, change
1551 the data block pointer to the private options block. */
1552
1553 if (data_block != NULL && (ol->type & opt_public) == 0)
1554 data_block = (void *)(((driver_instance *)data_block)->options_block);
1555
1556 /* Now get the data according to the type. */
1557
1558 switch (type)
1559 {
1560 /* If a string value is not enclosed in quotes, it consists of
1561 the rest of the current line, verbatim. Otherwise, string escapes
1562 are processed.
1563
1564 A transport is specified as a string, which is then looked up in the
1565 list of transports. A search type is specified as one of a number of
1566 known strings.
1567
1568 A set or rewrite rules for a driver is specified as a string, which is
1569 then parsed into a suitable chain of control blocks.
1570
1571 Uids and gids are specified as strings which are then looked up in the
1572 passwd file. Lists of uids and gids are similarly specified as colon-
1573 separated strings. */
1574
1575 case opt_stringptr:
1576 case opt_uid:
1577 case opt_gid:
1578 case opt_expand_uid:
1579 case opt_expand_gid:
1580 case opt_uidlist:
1581 case opt_gidlist:
1582 case opt_rewrite:
1583
1584 reset_point = sptr = read_string(s, name);
1585
1586 /* Having read a string, we now have several different ways of using it,
1587 depending on the data type, so do another switch. If keeping the actual
1588 string is not required (because it is interpreted), freesptr is set TRUE,
1589 and at the end we reset the pool. */
1590
1591 switch (type)
1592 {
1593 /* If this was a string, set the variable to point to the new string,
1594 and set the flag so its store isn't reclaimed. If it was a list of rewrite
1595 rules, we still keep the string (for printing), and parse the rules into a
1596 control block and flags word. */
1597
1598 case opt_stringptr:
1599 if (data_block == NULL)
1600 str_target = (uschar **)(ol->value);
1601 else
1602 str_target = (uschar **)((uschar *)data_block + (long int)(ol->value));
1603 if (ol->type & opt_rep_con)
1604 {
1605 /* We already have a condition, we're conducting a crude hack to let
1606 multiple condition rules be chained together, despite storing them in
1607 text form. */
1608 saved_condition = *str_target;
1609 strtemp = string_sprintf("${if and{{bool_lax{%s}}{bool_lax{%s}}}}",
1610 saved_condition, sptr);
1611 *str_target = string_copy_malloc(strtemp);
1612 /* TODO(pdp): there is a memory leak here and just below
1613 when we set 3 or more conditions; I still don't
1614 understand the store mechanism enough to know
1615 what's the safe way to free content from an earlier store.
1616 AFAICT, stores stack, so freeing an early stored item also stores
1617 all data alloc'd after it. If we knew conditions were adjacent,
1618 we could survive that, but we don't. So I *think* we need to take
1619 another bit from opt_type to indicate "malloced"; this seems like
1620 quite a hack, especially for this one case. It also means that
1621 we can't ever reclaim the store from the *first* condition.
1622
1623 Because we only do this once, near process start-up, I'm prepared to
1624 let this slide for the time being, even though it rankles. */
1625 }
1626 else if (ol->type & opt_rep_str)
1627 {
1628 uschar sep_o = Ustrncmp(name, "headers_add", 11)==0 ? '\n' : ':';
1629 int sep_i = -(int)sep_o;
1630 const uschar * list = sptr;
1631 uschar * s;
1632 uschar * list_o = *str_target;
1633
1634 while ((s = string_nextinlist(&list, &sep_i, NULL, 0)))
1635 list_o = string_append_listele(list_o, sep_o, s);
1636 if (list_o)
1637 *str_target = string_copy_malloc(list_o);
1638 }
1639 else
1640 {
1641 *str_target = sptr;
1642 freesptr = FALSE;
1643 }
1644 break;
1645
1646 case opt_rewrite:
1647 if (data_block == NULL)
1648 *((uschar **)(ol->value)) = sptr;
1649 else
1650 *((uschar **)((uschar *)data_block + (long int)(ol->value))) = sptr;
1651 freesptr = FALSE;
1652 if (type == opt_rewrite)
1653 {
1654 int sep = 0;
1655 int *flagptr;
1656 uschar *p = sptr;
1657 rewrite_rule **chain;
1658 optionlist *ol3;
1659
1660 sprintf(CS name2, "*%.50s_rules", name);
1661 ol2 = find_option(name2, oltop, last);
1662 sprintf(CS name2, "*%.50s_flags", name);
1663 ol3 = find_option(name2, oltop, last);
1664
1665 if (ol2 == NULL || ol3 == NULL)
1666 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
1667 "rewrite rules not available for driver");
1668
1669 if (data_block == NULL)
1670 {
1671 chain = (rewrite_rule **)(ol2->value);
1672 flagptr = (int *)(ol3->value);
1673 }
1674 else
1675 {
1676 chain = (rewrite_rule **)((uschar *)data_block + (long int)(ol2->value));
1677 flagptr = (int *)((uschar *)data_block + (long int)(ol3->value));
1678 }
1679
1680 while ((p = string_nextinlist(CUSS &sptr, &sep, big_buffer, BIG_BUFFER_SIZE)))
1681 {
1682 rewrite_rule *next = readconf_one_rewrite(p, flagptr, FALSE);
1683 *chain = next;
1684 chain = &(next->next);
1685 }
1686
1687 if ((*flagptr & (rewrite_all_envelope | rewrite_smtp)) != 0)
1688 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "rewrite rule specifies a "
1689 "non-header rewrite - not allowed at transport time -");
1690 }
1691 break;
1692
1693 /* If it was an expanded uid, see if there is any expansion to be
1694 done by checking for the presence of a $ character. If there is, save it
1695 in the corresponding *expand_user option field. Otherwise, fall through
1696 to treat it as a fixed uid. Ensure mutual exclusivity of the two kinds
1697 of data. */
1698
1699 case opt_expand_uid:
1700 sprintf(CS name2, "*expand_%.50s", name);
1701 ol2 = find_option(name2, oltop, last);
1702 if (ol2 != NULL)
1703 {
1704 uschar *ss = (Ustrchr(sptr, '$') != NULL)? sptr : NULL;
1705
1706 if (data_block == NULL)
1707 *((uschar **)(ol2->value)) = ss;
1708 else
1709 *((uschar **)((uschar *)data_block + (long int)(ol2->value))) = ss;
1710
1711 if (ss != NULL)
1712 {
1713 *(get_set_flag(name, oltop, last, data_block)) = FALSE;
1714 freesptr = FALSE;
1715 break;
1716 }
1717 }
1718
1719 /* Look up a fixed uid, and also make use of the corresponding gid
1720 if a passwd entry is returned and the gid has not been set. */
1721
1722 case opt_uid:
1723 if (!route_finduser(sptr, &pw, &uid))
1724 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "user %s was not found", sptr);
1725 if (data_block == NULL)
1726 *((uid_t *)(ol->value)) = uid;
1727 else
1728 *((uid_t *)((uschar *)data_block + (long int)(ol->value))) = uid;
1729
1730 /* Set the flag indicating a fixed value is set */
1731
1732 *(get_set_flag(name, oltop, last, data_block)) = TRUE;
1733
1734 /* Handle matching gid if we have a passwd entry: done by finding the
1735 same name with terminating "user" changed to "group"; if not found,
1736 ignore. Also ignore if the value is already set. */
1737
1738 if (pw == NULL) break;
1739 Ustrcpy(name+Ustrlen(name)-4, "group");
1740 ol2 = find_option(name, oltop, last);
1741 if (ol2 != NULL && ((ol2->type & opt_mask) == opt_gid ||
1742 (ol2->type & opt_mask) == opt_expand_gid))
1743 {
1744 BOOL *set_flag = get_set_flag(name, oltop, last, data_block);
1745 if (! *set_flag)
1746 {
1747 if (data_block == NULL)
1748 *((gid_t *)(ol2->value)) = pw->pw_gid;
1749 else
1750 *((gid_t *)((uschar *)data_block + (long int)(ol2->value))) = pw->pw_gid;
1751 *set_flag = TRUE;
1752 }
1753 }
1754 break;
1755
1756 /* If it was an expanded gid, see if there is any expansion to be
1757 done by checking for the presence of a $ character. If there is, save it
1758 in the corresponding *expand_user option field. Otherwise, fall through
1759 to treat it as a fixed gid. Ensure mutual exclusivity of the two kinds
1760 of data. */
1761
1762 case opt_expand_gid:
1763 sprintf(CS name2, "*expand_%.50s", name);
1764 ol2 = find_option(name2, oltop, last);
1765 if (ol2 != NULL)
1766 {
1767 uschar *ss = (Ustrchr(sptr, '$') != NULL)? sptr : NULL;
1768
1769 if (data_block == NULL)
1770 *((uschar **)(ol2->value)) = ss;
1771 else
1772 *((uschar **)((uschar *)data_block + (long int)(ol2->value))) = ss;
1773
1774 if (ss != NULL)
1775 {
1776 *(get_set_flag(name, oltop, last, data_block)) = FALSE;
1777 freesptr = FALSE;
1778 break;
1779 }
1780 }
1781
1782 /* Handle freestanding gid */
1783
1784 case opt_gid:
1785 if (!route_findgroup(sptr, &gid))
1786 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "group %s was not found", sptr);
1787 if (data_block == NULL)
1788 *((gid_t *)(ol->value)) = gid;
1789 else
1790 *((gid_t *)((uschar *)data_block + (long int)(ol->value))) = gid;
1791 *(get_set_flag(name, oltop, last, data_block)) = TRUE;
1792 break;
1793
1794 /* If it was a uid list, look up each individual entry, and build
1795 a vector of uids, with a count in the first element. Put the vector
1796 in malloc store so we can free the string. (We are reading into
1797 permanent store already.) */
1798
1799 case opt_uidlist:
1800 {
1801 int count = 1;
1802 uid_t *list;
1803 int ptr = 0;
1804 const uschar *p;
1805 const uschar *op = expand_string (sptr);
1806
1807 if (op == NULL)
1808 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "failed to expand %s: %s",
1809 name, expand_string_message);
1810
1811 p = op;
1812 if (*p != 0) count++;
1813 while (*p != 0) if (*p++ == ':' && *p != 0) count++;
1814 list = store_malloc(count*sizeof(uid_t));
1815 list[ptr++] = (uid_t)(count - 1);
1816
1817 if (data_block == NULL)
1818 *((uid_t **)(ol->value)) = list;
1819 else
1820 *((uid_t **)((uschar *)data_block + (long int)(ol->value))) = list;
1821
1822 p = op;
1823 while (count-- > 1)
1824 {
1825 int sep = 0;
1826 (void)string_nextinlist(&p, &sep, big_buffer, BIG_BUFFER_SIZE);
1827 if (!route_finduser(big_buffer, NULL, &uid))
1828 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "user %s was not found",
1829 big_buffer);
1830 list[ptr++] = uid;
1831 }
1832 }
1833 break;
1834
1835 /* If it was a gid list, look up each individual entry, and build
1836 a vector of gids, with a count in the first element. Put the vector
1837 in malloc store so we can free the string. (We are reading into permanent
1838 store already.) */
1839
1840 case opt_gidlist:
1841 {
1842 int count = 1;
1843 gid_t *list;
1844 int ptr = 0;
1845 const uschar *p;
1846 const uschar *op = expand_string (sptr);
1847
1848 if (op == NULL)
1849 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "failed to expand %s: %s",
1850 name, expand_string_message);
1851
1852 p = op;
1853 if (*p != 0) count++;
1854 while (*p != 0) if (*p++ == ':' && *p != 0) count++;
1855 list = store_malloc(count*sizeof(gid_t));
1856 list[ptr++] = (gid_t)(count - 1);
1857
1858 if (data_block == NULL)
1859 *((gid_t **)(ol->value)) = list;
1860 else
1861 *((gid_t **)((uschar *)data_block + (long int)(ol->value))) = list;
1862
1863 p = op;
1864 while (count-- > 1)
1865 {
1866 int sep = 0;
1867 (void)string_nextinlist(&p, &sep, big_buffer, BIG_BUFFER_SIZE);
1868 if (!route_findgroup(big_buffer, &gid))
1869 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "group %s was not found",
1870 big_buffer);
1871 list[ptr++] = gid;
1872 }
1873 }
1874 break;
1875 }
1876
1877 /* Release store if the value of the string doesn't need to be kept. */
1878
1879 if (freesptr) store_reset(reset_point);
1880 break;
1881
1882 /* Expanded boolean: if no characters follow, or if there are no dollar
1883 characters, this is a fixed-valued boolean, and we fall through. Otherwise,
1884 save the string for later expansion in the alternate place. */
1885
1886 case opt_expand_bool:
1887 if (*s != 0 && Ustrchr(s, '$') != 0)
1888 {
1889 sprintf(CS name2, "*expand_%.50s", name);
1890 ol2 = find_option(name2, oltop, last);
1891 if (ol2 != NULL)
1892 {
1893 reset_point = sptr = read_string(s, name);
1894 if (data_block == NULL)
1895 *((uschar **)(ol2->value)) = sptr;
1896 else
1897 *((uschar **)((uschar *)data_block + (long int)(ol2->value))) = sptr;
1898 freesptr = FALSE;
1899 break;
1900 }
1901 }
1902 /* Fall through */
1903
1904 /* Boolean: if no characters follow, the value is boolvalue. Otherwise
1905 look for yes/not/true/false. Some booleans are stored in a single bit in
1906 a single int. There's a special fudge for verify settings; without a suffix
1907 they set both xx_sender and xx_recipient. The table points to the sender
1908 value; search subsequently for the recipient. There's another special case:
1909 opt_bool_set also notes when a boolean has been set. */
1910
1911 case opt_bool:
1912 case opt_bit:
1913 case opt_bool_verify:
1914 case opt_bool_set:
1915 if (*s != 0)
1916 {
1917 s = readconf_readname(name2, 64, s);
1918 if (strcmpic(name2, US"true") == 0 || strcmpic(name2, US"yes") == 0)
1919 boolvalue = TRUE;
1920 else if (strcmpic(name2, US"false") == 0 || strcmpic(name2, US"no") == 0)
1921 boolvalue = FALSE;
1922 else log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
1923 "\"%s\" is not a valid value for the \"%s\" option", name2, name);
1924 if (*s != 0) extra_chars_error(s, string_sprintf("\"%s\" ", name2),
1925 US"for boolean option ", name);
1926 }
1927
1928 /* Handle single-bit type. */
1929
1930 if (type == opt_bit)
1931 {
1932 int bit = 1 << ((ol->type >> 16) & 31);
1933 int *ptr = (data_block == NULL)?
1934 (int *)(ol->value) :
1935 (int *)((uschar *)data_block + (long int)ol->value);
1936 if (boolvalue) *ptr |= bit; else *ptr &= ~bit;
1937 break;
1938 }
1939
1940 /* Handle full BOOL types */
1941
1942 if (data_block == NULL)
1943 *((BOOL *)(ol->value)) = boolvalue;
1944 else
1945 *((BOOL *)((uschar *)data_block + (long int)(ol->value))) = boolvalue;
1946
1947 /* Verify fudge */
1948
1949 if (type == opt_bool_verify)
1950 {
1951 sprintf(CS name2, "%.50s_recipient", name + offset);
1952 ol2 = find_option(name2, oltop, last);
1953 if (ol2 != NULL)
1954 {
1955 if (data_block == NULL)
1956 *((BOOL *)(ol2->value)) = boolvalue;
1957 else
1958 *((BOOL *)((uschar *)data_block + (long int)(ol2->value))) = boolvalue;
1959 }
1960 }
1961
1962 /* Note that opt_bool_set type is set, if there is somewhere to do so */
1963
1964 else if (type == opt_bool_set)
1965 {
1966 sprintf(CS name2, "*set_%.50s", name + offset);
1967 ol2 = find_option(name2, oltop, last);
1968 if (ol2 != NULL)
1969 {
1970 if (data_block == NULL)
1971 *((BOOL *)(ol2->value)) = TRUE;
1972 else
1973 *((BOOL *)((uschar *)data_block + (long int)(ol2->value))) = TRUE;
1974 }
1975 }
1976 break;
1977
1978 /* Octal integer */
1979
1980 case opt_octint:
1981 intbase = 8;
1982 inttype = US"octal ";
1983
1984 /* Integer: a simple(ish) case; allow octal and hex formats, and
1985 suffixes K and M. The different types affect output, not input. */
1986
1987 case opt_mkint:
1988 case opt_int:
1989 {
1990 uschar *endptr;
1991 long int lvalue;
1992
1993 errno = 0;
1994 lvalue = strtol(CS s, CSS &endptr, intbase);
1995
1996 if (endptr == s)
1997 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "%sinteger expected for %s",
1998 inttype, name);
1999
2000 if (errno != ERANGE)
2001 {
2002 if (tolower(*endptr) == 'k')
2003 {
2004 if (lvalue > INT_MAX/1024 || lvalue < INT_MIN/1024) errno = ERANGE;
2005 else lvalue *= 1024;
2006 endptr++;
2007 }
2008 else if (tolower(*endptr) == 'm')
2009 {
2010 if (lvalue > INT_MAX/(1024*1024) || lvalue < INT_MIN/(1024*1024))
2011 errno = ERANGE;
2012 else lvalue *= 1024*1024;
2013 endptr++;
2014 }
2015 }
2016
2017 if (errno == ERANGE || lvalue > INT_MAX || lvalue < INT_MIN)
2018 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
2019 "absolute value of integer \"%s\" is too large (overflow)", s);
2020
2021 while (isspace(*endptr)) endptr++;
2022 if (*endptr != 0)
2023 extra_chars_error(endptr, inttype, US"integer value for ", name);
2024
2025 value = (int)lvalue;
2026 }
2027
2028 if (data_block == NULL)
2029 *((int *)(ol->value)) = value;
2030 else
2031 *((int *)((uschar *)data_block + (long int)(ol->value))) = value;
2032 break;
2033
2034 /* Integer held in K: again, allow octal and hex formats, and suffixes K and
2035 M. */
2036
2037 case opt_Kint:
2038 {
2039 uschar *endptr;
2040 errno = 0;
2041 value = strtol(CS s, CSS &endptr, intbase);
2042
2043 if (endptr == s)
2044 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "%sinteger expected for %s",
2045 inttype, name);
2046
2047 if (errno != ERANGE)
2048 {
2049 if (tolower(*endptr) == 'm')
2050 {
2051 if (value > INT_MAX/1024 || value < INT_MIN/1024) errno = ERANGE;
2052 else value *= 1024;
2053 endptr++;
2054 }
2055 else if (tolower(*endptr) == 'k')
2056 {
2057 endptr++;
2058 }
2059 else
2060 {
2061 value = (value + 512)/1024;
2062 }
2063 }
2064
2065 if (errno == ERANGE) log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
2066 "absolute value of integer \"%s\" is too large (overflow)", s);
2067
2068 while (isspace(*endptr)) endptr++;
2069 if (*endptr != 0)
2070 extra_chars_error(endptr, inttype, US"integer value for ", name);
2071 }
2072
2073 if (data_block == NULL)
2074 *((int *)(ol->value)) = value;
2075 else
2076 *((int *)((uschar *)data_block + (long int)(ol->value))) = value;
2077 break;
2078
2079 /* Fixed-point number: held to 3 decimal places. */
2080
2081 case opt_fixed:
2082 if (sscanf(CS s, "%d%n", &value, &count) != 1)
2083 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
2084 "fixed-point number expected for %s", name);
2085
2086 if (value < 0) log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
2087 "integer \"%s\" is too large (overflow)", s);
2088
2089 value *= 1000;
2090
2091 if (value < 0) log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
2092 "integer \"%s\" is too large (overflow)", s);
2093
2094 if (s[count] == '.')
2095 {
2096 int d = 100;
2097 while (isdigit(s[++count]))
2098 {
2099 value += (s[count] - '0') * d;
2100 d /= 10;
2101 }
2102 }
2103
2104 while (isspace(s[count])) count++;
2105
2106 if (s[count] != 0)
2107 extra_chars_error(s+count, US"fixed-point value for ", name, US"");
2108
2109 if (data_block == NULL)
2110 *((int *)(ol->value)) = value;
2111 else
2112 *((int *)((uschar *)data_block + (long int)(ol->value))) = value;
2113 break;
2114
2115 /* There's a special routine to read time values. */
2116
2117 case opt_time:
2118 value = readconf_readtime(s, 0, FALSE);
2119 if (value < 0)
2120 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "invalid time value for %s",
2121 name);
2122 if (data_block == NULL)
2123 *((int *)(ol->value)) = value;
2124 else
2125 *((int *)((uschar *)data_block + (long int)(ol->value))) = value;
2126 break;
2127
2128 /* A time list is a list of colon-separated times, with the first
2129 element holding the size of the list and the second the number of
2130 entries used. */
2131
2132 case opt_timelist:
2133 {
2134 int count = 0;
2135 int *list = (data_block == NULL)?
2136 (int *)(ol->value) :
2137 (int *)((uschar *)data_block + (long int)(ol->value));
2138
2139 if (*s != 0) for (count = 1; count <= list[0] - 2; count++)
2140 {
2141 int terminator = 0;
2142 uschar *snext = Ustrchr(s, ':');
2143 if (snext != NULL)
2144 {
2145 uschar *ss = snext;
2146 while (ss > s && isspace(ss[-1])) ss--;
2147 terminator = *ss;
2148 }
2149 value = readconf_readtime(s, terminator, FALSE);
2150 if (value < 0)
2151 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "invalid time value for %s",
2152 name);
2153 if (count > 1 && value <= list[count])
2154 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
2155 "time value out of order for %s", name);
2156 list[count+1] = value;
2157 if (snext == NULL) break;
2158 s = snext + 1;
2159 while (isspace(*s)) s++;
2160 }
2161
2162 if (count > list[0] - 2)
2163 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "too many time values for %s",
2164 name);
2165 if (count > 0 && list[2] == 0) count = 0;
2166 list[1] = count;
2167 break;
2168 }
2169
2170 case opt_func:
2171 {
2172 void (*fn)() = ol->value;
2173 fn(name, s);
2174 break;
2175 }
2176 }
2177
2178 return TRUE;
2179 }
2180
2181
2182
2183 /*************************************************
2184 * Print a time value *
2185 *************************************************/
2186
2187 /*
2188 Argument: a time value in seconds
2189 Returns: pointer to a fixed buffer containing the time as a string,
2190 in readconf_readtime() format
2191 */
2192
2193 uschar *
2194 readconf_printtime(int t)
2195 {
2196 int s, m, h, d, w;
2197 uschar *p = time_buffer;
2198
2199 if (t < 0)
2200 {
2201 *p++ = '-';
2202 t = -t;
2203 }
2204
2205 s = t % 60;
2206 t /= 60;
2207 m = t % 60;
2208 t /= 60;
2209 h = t % 24;
2210 t /= 24;
2211 d = t % 7;
2212 w = t/7;
2213
2214 if (w > 0) { sprintf(CS p, "%dw", w); while (*p) p++; }
2215 if (d > 0) { sprintf(CS p, "%dd", d); while (*p) p++; }
2216 if (h > 0) { sprintf(CS p, "%dh", h); while (*p) p++; }
2217 if (m > 0) { sprintf(CS p, "%dm", m); while (*p) p++; }
2218 if (s > 0 || p == time_buffer) sprintf(CS p, "%ds", s);
2219
2220 return time_buffer;
2221 }
2222
2223
2224
2225 /*************************************************
2226 * Print an individual option value *
2227 *************************************************/
2228
2229 /* This is used by the -bP option, so prints to the standard output.
2230 The entire options list is passed in as an argument, because some options come
2231 in pairs - typically uid/gid settings, which can either be explicit numerical
2232 values, or strings to be expanded later. If the numerical value is unset,
2233 search for "*expand_<name>" to see if there is a string equivalent.
2234
2235 Arguments:
2236 ol option entry, or NULL for an unknown option
2237 name option name
2238 options_block NULL for main configuration options; otherwise points to
2239 a driver block; if the option doesn't have opt_public
2240 set, then options_block->options_block is where the item
2241 resides.
2242 oltop points to the option list in which ol exists
2243 last one more than the offset of the last entry in optop
2244 no_labels do not show "foo = " at the start.
2245
2246 Returns: nothing
2247 */
2248
2249 static void
2250 print_ol(optionlist *ol, uschar *name, void *options_block,
2251 optionlist *oltop, int last, BOOL no_labels)
2252 {
2253 struct passwd *pw;
2254 struct group *gr;
2255 optionlist *ol2;
2256 void *value;
2257 uid_t *uidlist;
2258 gid_t *gidlist;
2259 uschar *s;
2260 uschar name2[64];
2261
2262 if (ol == NULL)
2263 {
2264 printf("%s is not a known option\n", name);
2265 return;
2266 }
2267
2268 /* Non-admin callers cannot see options that have been flagged secure by the
2269 "hide" prefix. */
2270
2271 if (!admin_user && (ol->type & opt_secure) != 0)
2272 {
2273 if (no_labels)
2274 printf("%s\n", hidden);
2275 else
2276 printf("%s = %s\n", name, hidden);
2277 return;
2278 }
2279
2280 /* Else show the value of the option */
2281
2282 value = ol->value;
2283 if (options_block != NULL)
2284 {
2285 if ((ol->type & opt_public) == 0)
2286 options_block = (void *)(((driver_instance *)options_block)->options_block);
2287 value = (void *)((uschar *)options_block + (long int)value);
2288 }
2289
2290 switch(ol->type & opt_mask)
2291 {
2292 case opt_stringptr:
2293 case opt_rewrite: /* Show the text value */
2294 s = *((uschar **)value);
2295 if (!no_labels) printf("%s = ", name);
2296 printf("%s\n", (s == NULL)? US"" : string_printing2(s, FALSE));
2297 break;
2298
2299 case opt_int:
2300 if (!no_labels) printf("%s = ", name);
2301 printf("%d\n", *((int *)value));
2302 break;
2303
2304 case opt_mkint:
2305 {
2306 int x = *((int *)value);
2307 if (x != 0 && (x & 1023) == 0)
2308 {
2309 int c = 'K';
2310 x >>= 10;
2311 if ((x & 1023) == 0)
2312 {
2313 c = 'M';
2314 x >>= 10;
2315 }
2316 if (!no_labels) printf("%s = ", name);
2317 printf("%d%c\n", x, c);
2318 }
2319 else
2320 {
2321 if (!no_labels) printf("%s = ", name);
2322 printf("%d\n", x);
2323 }
2324 }
2325 break;
2326
2327 case opt_Kint:
2328 {
2329 int x = *((int *)value);
2330 if (!no_labels) printf("%s = ", name);
2331 if (x == 0) printf("0\n");
2332 else if ((x & 1023) == 0) printf("%dM\n", x >> 10);
2333 else printf("%dK\n", x);
2334 }
2335 break;
2336
2337 case opt_octint:
2338 if (!no_labels) printf("%s = ", name);
2339 printf("%#o\n", *((int *)value));
2340 break;
2341
2342 /* Can be negative only when "unset", in which case integer */
2343
2344 case opt_fixed:
2345 {
2346 int x = *((int *)value);
2347 int f = x % 1000;
2348 int d = 100;
2349 if (x < 0) printf("%s =\n", name); else
2350 {
2351 if (!no_labels) printf("%s = ", name);
2352 printf("%d.", x/1000);
2353 do
2354 {
2355 printf("%d", f/d);
2356 f %= d;
2357 d /= 10;
2358 }
2359 while (f != 0);
2360 printf("\n");
2361 }
2362 }
2363 break;
2364
2365 /* If the numerical value is unset, try for the string value */
2366
2367 case opt_expand_uid:
2368 if (! *get_set_flag(name, oltop, last, options_block))
2369 {
2370 sprintf(CS name2, "*expand_%.50s", name);
2371 ol2 = find_option(name2, oltop, last);
2372 if (ol2 != NULL)
2373 {
2374 void *value2 = ol2->value;
2375 if (options_block != NULL)
2376 value2 = (void *)((uschar *)options_block + (long int)value2);
2377 s = *((uschar **)value2);
2378 if (!no_labels) printf("%s = ", name);
2379 printf("%s\n", (s == NULL)? US"" : string_printing(s));
2380 break;
2381 }
2382 }
2383
2384 /* Else fall through */
2385
2386 case opt_uid:
2387 if (!no_labels) printf("%s = ", name);
2388 if (! *get_set_flag(name, oltop, last, options_block))
2389 printf("\n");
2390 else
2391 {
2392 pw = getpwuid(*((uid_t *)value));
2393 if (pw == NULL)
2394 printf("%ld\n", (long int)(*((uid_t *)value)));
2395 else printf("%s\n", pw->pw_name);
2396 }
2397 break;
2398
2399 /* If the numerical value is unset, try for the string value */
2400
2401 case opt_expand_gid:
2402 if (! *get_set_flag(name, oltop, last, options_block))
2403 {
2404 sprintf(CS name2, "*expand_%.50s", name);
2405 ol2 = find_option(name2, oltop, last);
2406 if (ol2 != NULL && (ol2->type & opt_mask) == opt_stringptr)
2407 {
2408 void *value2 = ol2->value;
2409 if (options_block != NULL)
2410 value2 = (void *)((uschar *)options_block + (long int)value2);
2411 s = *((uschar **)value2);
2412 if (!no_labels) printf("%s = ", name);
2413 printf("%s\n", (s == NULL)? US"" : string_printing(s));
2414 break;
2415 }
2416 }
2417
2418 /* Else fall through */
2419
2420 case opt_gid:
2421 if (!no_labels) printf("%s = ", name);
2422 if (! *get_set_flag(name, oltop, last, options_block))
2423 printf("\n");
2424 else
2425 {
2426 gr = getgrgid(*((int *)value));
2427 if (gr == NULL)
2428 printf("%ld\n", (long int)(*((int *)value)));
2429 else printf("%s\n", gr->gr_name);
2430 }
2431 break;
2432
2433 case opt_uidlist:
2434 uidlist = *((uid_t **)value);
2435 if (!no_labels) printf("%s =", name);
2436 if (uidlist != NULL)
2437 {
2438 int i;
2439 uschar sep = ' ';
2440 if (no_labels) sep = '\0';
2441 for (i = 1; i <= (int)(uidlist[0]); i++)
2442 {
2443 uschar *name = NULL;
2444 pw = getpwuid(uidlist[i]);
2445 if (pw != NULL) name = US pw->pw_name;
2446 if (sep != '\0') printf("%c", sep);
2447 if (name != NULL) printf("%s", name);
2448 else printf("%ld", (long int)(uidlist[i]));
2449 sep = ':';
2450 }
2451 }
2452 printf("\n");
2453 break;
2454
2455 case opt_gidlist:
2456 gidlist = *((gid_t **)value);
2457 if (!no_labels) printf("%s =", name);
2458 if (gidlist != NULL)
2459 {
2460 int i;
2461 uschar sep = ' ';
2462 if (no_labels) sep = '\0';
2463 for (i = 1; i <= (int)(gidlist[0]); i++)
2464 {
2465 uschar *name = NULL;
2466 gr = getgrgid(gidlist[i]);
2467 if (gr != NULL) name = US gr->gr_name;
2468 if (sep != '\0') printf("%c", sep);
2469 if (name != NULL) printf("%s", name);
2470 else printf("%ld", (long int)(gidlist[i]));
2471 sep = ':';
2472 }
2473 }
2474 printf("\n");
2475 break;
2476
2477 case opt_time:
2478 if (!no_labels) printf("%s = ", name);
2479 printf("%s\n", readconf_printtime(*((int *)value)));
2480 break;
2481
2482 case opt_timelist:
2483 {
2484 int i;
2485 int *list = (int *)value;
2486 if (!no_labels) printf("%s = ", name);
2487 for (i = 0; i < list[1]; i++)
2488 printf("%s%s", (i == 0)? "" : ":", readconf_printtime(list[i+2]));
2489 printf("\n");
2490 }
2491 break;
2492
2493 case opt_bit:
2494 printf("%s%s\n", ((*((int *)value)) & (1 << ((ol->type >> 16) & 31)))?
2495 "" : "no_", name);
2496 break;
2497
2498 case opt_expand_bool:
2499 sprintf(CS name2, "*expand_%.50s", name);
2500 ol2 = find_option(name2, oltop, last);
2501 if (ol2 != NULL && ol2->value != NULL)
2502 {
2503 void *value2 = ol2->value;
2504 if (options_block != NULL)
2505 value2 = (void *)((uschar *)options_block + (long int)value2);
2506 s = *((uschar **)value2);
2507 if (s != NULL)
2508 {
2509 if (!no_labels) printf("%s = ", name);
2510 printf("%s\n", string_printing(s));
2511 break;
2512 }
2513 /* s == NULL => string not set; fall through */
2514 }
2515
2516 /* Fall through */
2517
2518 case opt_bool:
2519 case opt_bool_verify:
2520 case opt_bool_set:
2521 printf("%s%s\n", (*((BOOL *)value))? "" : "no_", name);
2522 break;
2523 }
2524 }
2525
2526
2527
2528 /*************************************************
2529 * Print value from main configuration *
2530 *************************************************/
2531
2532 /* This function, called as a result of encountering the -bP option,
2533 causes the value of any main configuration variable to be output if the
2534 second argument is NULL. There are some special values:
2535
2536 all print all main configuration options
2537 config_file print the name of the configuration file
2538 (configure_file will still work, for backward
2539 compatibility)
2540 routers print the routers' configurations
2541 transports print the transports' configuration
2542 authenticators print the authenticators' configuration
2543 macros print the macros' configuration
2544 router_list print a list of router names
2545 transport_list print a list of transport names
2546 authenticator_list print a list of authentication mechanism names
2547 macro_list print a list of macro names
2548 +name print a named list item
2549 local_scan print the local_scan options
2550 config print the configuration as it is parsed
2551
2552 If the second argument is not NULL, it must be one of "router", "transport",
2553 "authenticator" or "macro" in which case the first argument identifies the
2554 driver whose options are to be printed.
2555
2556 Arguments:
2557 name option name if type == NULL; else driver name
2558 type NULL or driver type name, as described above
2559 no_labels avoid the "foo = " at the start of an item
2560
2561 Returns: nothing
2562 */
2563
2564 void
2565 readconf_print(uschar *name, uschar *type, BOOL no_labels)
2566 {
2567 BOOL names_only = FALSE;
2568 optionlist *ol;
2569 optionlist *ol2 = NULL;
2570 driver_instance *d = NULL;
2571 macro_item *m;
2572 int size = 0;
2573
2574 if (type == NULL)
2575 {
2576 if (*name == '+')
2577 {
2578 int i;
2579 tree_node *t;
2580 BOOL found = FALSE;
2581 static uschar *types[] = { US"address", US"domain", US"host",
2582 US"localpart" };
2583 static tree_node **anchors[] = { &addresslist_anchor, &domainlist_anchor,
2584 &hostlist_anchor, &localpartlist_anchor };
2585
2586 for (i = 0; i < 4; i++)
2587 {
2588 t = tree_search(*(anchors[i]), name+1);
2589 if (t != NULL)
2590 {
2591 found = TRUE;
2592 if (no_labels)
2593 printf("%s\n", ((namedlist_block *)(t->data.ptr))->string);
2594 else
2595 printf("%slist %s = %s\n", types[i], name+1,
2596 ((namedlist_block *)(t->data.ptr))->string);
2597 }
2598 }
2599
2600 if (!found)
2601 printf("no address, domain, host, or local part list called \"%s\" "
2602 "exists\n", name+1);
2603
2604 return;
2605 }
2606
2607 if ( Ustrcmp(name, "configure_file") == 0
2608 ||Ustrcmp(name, "config_file") == 0)
2609 {
2610 printf("%s\n", CS config_main_filename);
2611 return;
2612 }
2613
2614 if (Ustrcmp(name, "all") == 0)
2615 {
2616 for (ol = optionlist_config;
2617 ol < optionlist_config + optionlist_config_size; ol++)
2618 {
2619 if ((ol->type & opt_hidden) == 0)
2620 print_ol(ol, US ol->name, NULL,
2621 optionlist_config, optionlist_config_size,
2622 no_labels);
2623 }
2624 return;
2625 }
2626
2627 if (Ustrcmp(name, "local_scan") == 0)
2628 {
2629 #ifndef LOCAL_SCAN_HAS_OPTIONS
2630 printf("local_scan() options are not supported\n");
2631 #else
2632 for (ol = local_scan_options;
2633 ol < local_scan_options + local_scan_options_count; ol++)
2634 {
2635 print_ol(ol, US ol->name, NULL, local_scan_options,
2636 local_scan_options_count, no_labels);
2637 }
2638 #endif
2639 return;
2640 }
2641
2642 if (Ustrcmp(name, "config") == 0)
2643 {
2644 print_config(admin_user);
2645 return;
2646 }
2647
2648 if (Ustrcmp(name, "routers") == 0)
2649 {
2650 type = US"router";
2651 name = NULL;
2652 }
2653 else if (Ustrcmp(name, "transports") == 0)
2654 {
2655 type = US"transport";
2656 name = NULL;
2657 }
2658
2659 else if (Ustrcmp(name, "authenticators") == 0)
2660 {
2661 type = US"authenticator";
2662 name = NULL;
2663 }
2664
2665 else if (Ustrcmp(name, "macros") == 0)
2666 {
2667 type = US"macro";
2668 name = NULL;
2669 }
2670
2671 else if (Ustrcmp(name, "router_list") == 0)
2672 {
2673 type = US"router";
2674 name = NULL;
2675 names_only = TRUE;
2676 }
2677
2678 else if (Ustrcmp(name, "transport_list") == 0)
2679 {
2680 type = US"transport";
2681 name = NULL;
2682 names_only = TRUE;
2683 }
2684
2685 else if (Ustrcmp(name, "authenticator_list") == 0)
2686 {
2687 type = US"authenticator";
2688 name = NULL;
2689 names_only = TRUE;
2690 }
2691
2692 else if (Ustrcmp(name, "macro_list") == 0)
2693 {
2694 type = US"macro";
2695 name = NULL;
2696 names_only = TRUE;
2697 }
2698
2699 else
2700 {
2701 print_ol(find_option(name, optionlist_config, optionlist_config_size),
2702 name, NULL, optionlist_config, optionlist_config_size, no_labels);
2703 return;
2704 }
2705 }
2706
2707 /* Handle the options for a router or transport. Skip options that are flagged
2708 as hidden. Some of these are options with names starting with '*', used for
2709 internal alternative representations of other options (which the printing
2710 function will sort out). Others are synonyms kept for backward compatibility.
2711 */
2712
2713 if (Ustrcmp(type, "router") == 0)
2714 {
2715 d = (driver_instance *)routers;
2716 ol2 = optionlist_routers;
2717 size = optionlist_routers_size;
2718 }
2719 else if (Ustrcmp(type, "transport") == 0)
2720 {
2721 d = (driver_instance *)transports;
2722 ol2 = optionlist_transports;
2723 size = optionlist_transports_size;
2724 }
2725 else if (Ustrcmp(type, "authenticator") == 0)
2726 {
2727 d = (driver_instance *)auths;
2728 ol2 = optionlist_auths;
2729 size = optionlist_auths_size;
2730 }
2731
2732 else if (Ustrcmp(type, "macro") == 0)
2733 {
2734 /* People store passwords in macros and they were previously not available
2735 for printing. So we have an admin_users restriction. */
2736 if (!admin_user)
2737 {
2738 fprintf(stderr, "exim: permission denied\n");
2739 exit(EXIT_FAILURE);
2740 }
2741 for (m = macros; m != NULL; m = m->next)
2742 {
2743 if (name == NULL || Ustrcmp(name, m->name) == 0)
2744 {
2745 if (names_only)
2746 printf("%s\n", CS m->name);
2747 else
2748 printf("%s=%s\n", CS m->name, CS m->replacement);
2749 if (name != NULL)
2750 return;
2751 }
2752 }
2753 if (name != NULL)
2754 printf("%s %s not found\n", type, name);
2755 return;
2756 }
2757
2758 if (names_only)
2759 {
2760 for (; d != NULL; d = d->next) printf("%s\n", CS d->name);
2761 return;
2762 }
2763
2764 /* Either search for a given driver, or print all of them */
2765
2766 for (; d != NULL; d = d->next)
2767 {
2768 if (name == NULL)
2769 printf("\n%s %s:\n", d->name, type);
2770 else if (Ustrcmp(d->name, name) != 0) continue;
2771
2772 for (ol = ol2; ol < ol2 + size; ol++)
2773 {
2774 if ((ol->type & opt_hidden) == 0)
2775 print_ol(ol, US ol->name, d, ol2, size, no_labels);
2776 }
2777
2778 for (ol = d->info->options;
2779 ol < d->info->options + *(d->info->options_count); ol++)
2780 {
2781 if ((ol->type & opt_hidden) == 0)
2782 print_ol(ol, US ol->name, d, d->info->options, *(d->info->options_count), no_labels);
2783 }
2784 if (name != NULL) return;
2785 }
2786 if (name != NULL) printf("%s %s not found\n", type, name);
2787 }
2788
2789
2790
2791 /*************************************************
2792 * Read a named list item *
2793 *************************************************/
2794
2795 /* This function reads a name and a list (i.e. string). The name is used to
2796 save the list in a tree, sorted by its name. Each entry also has a number,
2797 which can be used for caching tests, but if the string contains any expansion
2798 items other than $key, the number is set negative to inhibit caching. This
2799 mechanism is used for domain, host, and address lists that are referenced by
2800 the "+name" syntax.
2801
2802 Arguments:
2803 anchorp points to the tree anchor
2804 numberp points to the current number for this tree
2805 max the maximum number permitted
2806 s the text of the option line, starting immediately after the name
2807 of the list type
2808 tname the name of the list type, for messages
2809
2810 Returns: nothing
2811 */
2812
2813 static void
2814 read_named_list(tree_node **anchorp, int *numberp, int max, uschar *s,
2815 uschar *tname)
2816 {
2817 BOOL forcecache = FALSE;
2818 uschar *ss;
2819 tree_node *t;
2820 namedlist_block *nb = store_get(sizeof(namedlist_block));
2821
2822 if (Ustrncmp(s, "_cache", 6) == 0)
2823 {
2824 forcecache = TRUE;
2825 s += 6;
2826 }
2827
2828 if (!isspace(*s))
2829 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "unrecognized configuration line");
2830
2831 if (*numberp >= max)
2832 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "too many named %ss (max is %d)\n",
2833 tname, max);
2834
2835 while (isspace(*s)) s++;
2836 ss = s;
2837 while (isalnum(*s) || *s == '_') s++;
2838 t = store_get(sizeof(tree_node) + s-ss);
2839 Ustrncpy(t->name, ss, s-ss);
2840 t->name[s-ss] = 0;
2841 while (isspace(*s)) s++;
2842
2843 if (!tree_insertnode(anchorp, t))
2844 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
2845 "duplicate name \"%s\" for a named %s", t->name, tname);
2846
2847 t->data.ptr = nb;
2848 nb->number = *numberp;
2849 *numberp += 1;
2850
2851 if (*s++ != '=') log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
2852 "missing '=' after \"%s\"", t->name);
2853 while (isspace(*s)) s++;
2854 nb->string = read_string(s, t->name);
2855 nb->cache_data = NULL;
2856
2857 /* Check the string for any expansions; if any are found, mark this list
2858 uncacheable unless the user has explicited forced caching. */
2859
2860 if (!forcecache && Ustrchr(nb->string, '$') != NULL) nb->number = -1;
2861 }
2862
2863
2864
2865
2866 /*************************************************
2867 * Unpick data for a rate limit *
2868 *************************************************/
2869
2870 /* This function is called to unpick smtp_ratelimit_{mail,rcpt} into four
2871 separate values.
2872
2873 Arguments:
2874 s string, in the form t,b,f,l
2875 where t is the threshold (integer)
2876 b is the initial delay (time)
2877 f is the multiplicative factor (fixed point)
2878 k is the maximum time (time)
2879 threshold where to store threshold
2880 base where to store base in milliseconds
2881 factor where to store factor in milliseconds
2882 limit where to store limit
2883
2884 Returns: nothing (panics on error)
2885 */
2886
2887 static void
2888 unpick_ratelimit(uschar *s, int *threshold, int *base, double *factor,
2889 int *limit)
2890 {
2891 uschar bstring[16], lstring[16];
2892
2893 if (sscanf(CS s, "%d, %15[0123456789smhdw.], %lf, %15s", threshold, bstring,
2894 factor, lstring) == 4)
2895 {
2896 *base = readconf_readtime(bstring, 0, TRUE);
2897 *limit = readconf_readtime(lstring, 0, TRUE);
2898 if (*base >= 0 && *limit >= 0) return;
2899 }
2900 log_write(0, LOG_MAIN|LOG_PANIC_DIE, "malformed ratelimit data: %s", s);
2901 }
2902
2903
2904
2905
2906 /*************************************************
2907 * Drop privs for checking TLS config *
2908 *************************************************/
2909
2910 /* We want to validate TLS options during readconf, but do not want to be
2911 root when we call into the TLS library, in case of library linkage errors
2912 which cause segfaults; before this check, those were always done as the Exim
2913 runtime user and it makes sense to continue with that.
2914
2915 Assumes: tls_require_ciphers has been set, if it will be
2916 exim_user has been set, if it will be
2917 exim_group has been set, if it will be
2918
2919 Returns: bool for "okay"; false will cause caller to immediately exit.
2920 */
2921
2922 #ifdef SUPPORT_TLS
2923 static BOOL
2924 tls_dropprivs_validate_require_cipher(void)
2925 {
2926 const uschar *errmsg;
2927 pid_t pid;
2928 int rc, status;
2929 void (*oldsignal)(int);
2930
2931 /* If TLS will never be used, no point checking ciphers */
2932
2933 if ( !tls_advertise_hosts
2934 || !*tls_advertise_hosts
2935 || Ustrcmp(tls_advertise_hosts, ":") == 0
2936 )
2937 return TRUE;
2938 else if (!tls_certificate)
2939 log_write(0, LOG_MAIN|LOG_PANIC,
2940 "Warning: No server certificate defined; TLS connections will fail.\n"
2941 " Suggested action: either install a certificate or change tls_advertise_hosts option");
2942
2943 oldsignal = signal(SIGCHLD, SIG_DFL);
2944
2945 fflush(NULL);
2946 if ((pid = fork()) < 0)
2947 log_write(0, LOG_MAIN|LOG_PANIC_DIE, "fork failed for TLS check");
2948
2949 if (pid == 0)
2950 {
2951 /* in some modes, will have dropped privilege already */
2952 if (!geteuid())
2953 exim_setugid(exim_uid, exim_gid, FALSE,
2954 US"calling tls_validate_require_cipher");
2955
2956 errmsg = tls_validate_require_cipher();
2957 if (errmsg)
2958 {
2959 log_write(0, LOG_PANIC_DIE|LOG_CONFIG,
2960 "tls_require_ciphers invalid: %s", errmsg);
2961 }
2962 fflush(NULL);
2963 _exit(0);
2964 }
2965
2966 do {
2967 rc = waitpid(pid, &status, 0);
2968 } while (rc < 0 && errno == EINTR);
2969
2970 DEBUG(D_tls)
2971 debug_printf("tls_validate_require_cipher child %d ended: status=0x%x\n",
2972 (int)pid, status);
2973
2974 signal(SIGCHLD, oldsignal);
2975
2976 return status == 0;
2977 }
2978 #endif /* SUPPORT_TLS */
2979
2980
2981
2982
2983 /*************************************************
2984 * Read main configuration options *
2985 *************************************************/
2986
2987 /* This function is the first to be called for configuration reading. It
2988 opens the configuration file and reads general configuration settings until
2989 it reaches the end of the configuration section. The file is then left open so
2990 that the remaining configuration data can subsequently be read if needed for
2991 this run of Exim.
2992
2993 The configuration file must be owned either by root or exim, and be writeable
2994 only by root or uid/gid exim. The values for Exim's uid and gid can be changed
2995 in the config file, so the test is done on the compiled in values. A slight
2996 anomaly, to be carefully documented.
2997
2998 The name of the configuration file is taken from a list that is included in the
2999 binary of Exim. It can be altered from the command line, but if that is done,
3000 root privilege is immediately withdrawn unless the caller is root or exim.
3001 The first file on the list that exists is used.
3002
3003 For use on multiple systems that share file systems, first look for a
3004 configuration file whose name has the current node name on the end. If that is
3005 not found, try the generic name. For really contorted configurations, that run
3006 multiple Exims with different uid settings, first try adding the effective uid
3007 before the node name. These complications are going to waste resources on most
3008 systems. Therefore they are available only when requested by compile-time
3009 options. */
3010
3011 void
3012 readconf_main(void)
3013 {
3014 int sep = 0;
3015 struct stat statbuf;
3016 uschar *s, *filename;
3017 const uschar *list = config_main_filelist;
3018
3019 /* Loop through the possible file names */
3020
3021 while((filename = string_nextinlist(&list, &sep, big_buffer, big_buffer_size))
3022 != NULL)
3023 {
3024 /* Cut out all the fancy processing unless specifically wanted */
3025
3026 #if defined(CONFIGURE_FILE_USE_NODE) || defined(CONFIGURE_FILE_USE_EUID)
3027 uschar *suffix = filename + Ustrlen(filename);
3028
3029 /* Try for the node-specific file if a node name exists */
3030
3031 #ifdef CONFIGURE_FILE_USE_NODE
3032 struct utsname uts;
3033 if (uname(&uts) >= 0)
3034 {
3035 #ifdef CONFIGURE_FILE_USE_EUID
3036 sprintf(CS suffix, ".%ld.%.256s", (long int)original_euid, uts.nodename);
3037 config_file = Ufopen(filename, "rb");
3038 if (config_file == NULL)
3039 #endif /* CONFIGURE_FILE_USE_EUID */
3040 {
3041 sprintf(CS suffix, ".%.256s", uts.nodename);
3042 config_file = Ufopen(filename, "rb");
3043 }
3044 }
3045 #endif /* CONFIGURE_FILE_USE_NODE */
3046
3047 /* Otherwise, try the generic name, possibly with the euid added */
3048
3049 #ifdef CONFIGURE_FILE_USE_EUID
3050 if (config_file == NULL)
3051 {
3052 sprintf(CS suffix, ".%ld", (long int)original_euid);
3053 config_file = Ufopen(filename, "rb");
3054 }
3055 #endif /* CONFIGURE_FILE_USE_EUID */
3056
3057 /* Finally, try the unadorned name */
3058
3059 if (config_file == NULL)
3060 {
3061 *suffix = 0;
3062 config_file = Ufopen(filename, "rb");
3063 }
3064 #else /* if neither defined */
3065
3066 /* This is the common case when the fancy processing is not included. */
3067
3068 config_file = Ufopen(filename, "rb");
3069 #endif
3070
3071 /* If the file does not exist, continue to try any others. For any other
3072 error, break out (and die). */
3073
3074 if (config_file != NULL || errno != ENOENT) break;
3075 }
3076
3077 /* On success, save the name for verification; config_filename is used when
3078 logging configuration errors (it changes for .included files) whereas
3079 config_main_filename is the name shown by -bP. Failure to open a configuration
3080 file is a serious disaster. */
3081
3082 if (config_file != NULL)
3083 {
3084 uschar *p;
3085 config_filename = config_main_filename = string_copy(filename);
3086
3087 p = Ustrrchr(filename, '/');
3088 config_main_directory = p ? string_copyn(filename, p - filename)
3089 : string_copy(US".");
3090 }
3091 else
3092 {
3093 if (filename == NULL)
3094 log_write(0, LOG_MAIN|LOG_PANIC_DIE, "non-existent configuration file(s): "
3095 "%s", config_main_filelist);
3096 else
3097 log_write(0, LOG_MAIN|LOG_PANIC_DIE, "%s", string_open_failed(errno,
3098 "configuration file %s", filename));
3099 }
3100
3101 /* Check the status of the file we have opened, if we have retained root
3102 privileges and the file isn't /dev/null (which *should* be 0666). */
3103
3104 if (trusted_config && Ustrcmp(filename, US"/dev/null"))
3105 {
3106 if (fstat(fileno(config_file), &statbuf) != 0)
3107 log_write(0, LOG_MAIN|LOG_PANIC_DIE, "failed to stat configuration file %s",
3108 big_buffer);
3109
3110 if ((statbuf.st_uid != root_uid /* owner not root */
3111 #ifdef CONFIGURE_OWNER
3112 && statbuf.st_uid != config_uid /* owner not the special one */
3113 #endif
3114 ) || /* or */
3115 (statbuf.st_gid != root_gid /* group not root & */
3116 #ifdef CONFIGURE_GROUP
3117 && statbuf.st_gid != config_gid /* group not the special one */
3118 #endif
3119 && (statbuf.st_mode & 020) != 0) || /* group writeable */
3120 /* or */
3121 ((statbuf.st_mode & 2) != 0)) /* world writeable */
3122
3123 log_write(0, LOG_MAIN|LOG_PANIC_DIE, "Exim configuration file %s has the "
3124 "wrong owner, group, or mode", big_buffer);
3125 }
3126
3127 /* Process the main configuration settings. They all begin with a lower case
3128 letter. If we see something starting with an upper case letter, it is taken as
3129 a macro definition. */
3130
3131 while ((s = get_config_line()) != NULL)
3132 {
3133 if (isupper(s[0])) read_macro_assignment(s);
3134
3135 else if (Ustrncmp(s, "domainlist", 10) == 0)
3136 read_named_list(&domainlist_anchor, &domainlist_count,
3137 MAX_NAMED_LIST, s+10, US"domain list");
3138
3139 else if (Ustrncmp(s, "hostlist", 8) == 0)
3140 read_named_list(&hostlist_anchor, &hostlist_count,
3141 MAX_NAMED_LIST, s+8, US"host list");
3142
3143 else if (Ustrncmp(s, US"addresslist", 11) == 0)
3144 read_named_list(&addresslist_anchor, &addresslist_count,
3145 MAX_NAMED_LIST, s+11, US"address list");
3146
3147 else if (Ustrncmp(s, US"localpartlist", 13) == 0)
3148 read_named_list(&localpartlist_anchor, &localpartlist_count,
3149 MAX_NAMED_LIST, s+13, US"local part list");
3150
3151 else
3152 (void) readconf_handle_option(s, optionlist_config, optionlist_config_size,
3153 NULL, US"main option \"%s\" unknown");
3154 }
3155
3156
3157 /* If local_sender_retain is set, local_from_check must be unset. */
3158
3159 if (local_sender_retain && local_from_check)
3160 log_write(0, LOG_MAIN|LOG_PANIC_DIE, "both local_from_check and "
3161 "local_sender_retain are set; this combination is not allowed");
3162
3163 /* If the timezone string is empty, set it to NULL, implying no TZ variable
3164 wanted. */
3165
3166 if (timezone_string != NULL && *timezone_string == 0) timezone_string = NULL;
3167
3168 /* The max retry interval must not be greater than 24 hours. */
3169
3170 if (retry_interval_max > 24*60*60) retry_interval_max = 24*60*60;
3171
3172 /* remote_max_parallel must be > 0 */
3173
3174 if (remote_max_parallel <= 0) remote_max_parallel = 1;
3175
3176 /* Save the configured setting of freeze_tell, so we can re-instate it at the
3177 start of a new SMTP message. */
3178
3179 freeze_tell_config = freeze_tell;
3180
3181 /* The primary host name may be required for expansion of spool_directory
3182 and log_file_path, so make sure it is set asap. It is obtained from uname(),
3183 but if that yields an unqualified value, make a FQDN by using gethostbyname to
3184 canonize it. Some people like upper case letters in their host names, so we
3185 don't force the case. */
3186
3187 if (primary_hostname == NULL)
3188 {
3189 const uschar *hostname;
3190 struct utsname uts;
3191 if (uname(&uts) < 0)
3192 log_write(0, LOG_MAIN|LOG_PANIC_DIE, "uname() failed to yield host name");
3193 hostname = US uts.nodename;
3194
3195 if (Ustrchr(hostname, '.') == NULL)
3196 {
3197 int af = AF_INET;
3198 struct hostent *hostdata;
3199
3200 #if HAVE_IPV6
3201 if (!disable_ipv6 && (dns_ipv4_lookup == NULL ||
3202 match_isinlist(hostname, CUSS &dns_ipv4_lookup, 0, NULL, NULL,
3203 MCL_DOMAIN, TRUE, NULL) != OK))
3204 af = AF_INET6;
3205 #else
3206 af = AF_INET;
3207 #endif
3208
3209 for (;;)
3210 {
3211 #if HAVE_IPV6
3212 #if HAVE_GETIPNODEBYNAME
3213 int error_num;
3214 hostdata = getipnodebyname(CS hostname, af, 0, &error_num);
3215 #else
3216 hostdata = gethostbyname2(CS hostname, af);
3217 #endif
3218 #else
3219 hostdata = gethostbyname(CS hostname);
3220 #endif
3221
3222 if (hostdata != NULL)
3223 {
3224 hostname = US hostdata->h_name;
3225 break;
3226 }
3227
3228 if (af == AF_INET) break;
3229 af = AF_INET;
3230 }
3231 }
3232
3233 primary_hostname = string_copy(hostname);
3234 }
3235
3236 /* Set up default value for smtp_active_hostname */
3237
3238 smtp_active_hostname = primary_hostname;
3239
3240 /* If spool_directory wasn't set in the build-time configuration, it must have
3241 got set above. Of course, writing to the log may not work if log_file_path is
3242 not set, but it will at least get to syslog or somewhere, with any luck. */
3243
3244 if (*spool_directory == 0)
3245 log_write(0, LOG_MAIN|LOG_PANIC_DIE, "spool_directory undefined: cannot "
3246 "proceed");
3247
3248 /* Expand the spool directory name; it may, for example, contain the primary
3249 host name. Same comment about failure. */
3250
3251 s = expand_string(spool_directory);
3252 if (s == NULL)
3253 log_write(0, LOG_MAIN|LOG_PANIC_DIE, "failed to expand spool_directory "
3254 "\"%s\": %s", spool_directory, expand_string_message);
3255 spool_directory = s;
3256
3257 /* Expand log_file_path, which must contain "%s" in any component that isn't
3258 the null string or "syslog". It is also allowed to contain one instance of %D
3259 or %M. However, it must NOT contain % followed by anything else. */
3260
3261 if (*log_file_path != 0)
3262 {
3263 const uschar *ss, *sss;
3264 int sep = ':'; /* Fixed for log file path */
3265 s = expand_string(log_file_path);
3266 if (s == NULL)
3267 log_write(0, LOG_MAIN|LOG_PANIC_DIE, "failed to expand log_file_path "
3268 "\"%s\": %s", log_file_path, expand_string_message);
3269
3270 ss = s;
3271 while ((sss = string_nextinlist(&ss,&sep,big_buffer,big_buffer_size)) != NULL)
3272 {
3273 uschar *t;
3274 if (sss[0] == 0 || Ustrcmp(sss, "syslog") == 0) continue;
3275 t = Ustrstr(sss, "%s");
3276 if (t == NULL)
3277 log_write(0, LOG_MAIN|LOG_PANIC_DIE, "log_file_path \"%s\" does not "
3278 "contain \"%%s\"", sss);
3279 *t = 'X';
3280 t = Ustrchr(sss, '%');
3281 if (t != NULL)
3282 {
3283 if ((t[1] != 'D' && t[1] != 'M') || Ustrchr(t+2, '%') != NULL)
3284 log_write(0, LOG_MAIN|LOG_PANIC_DIE, "log_file_path \"%s\" contains "
3285 "unexpected \"%%\" character", s);
3286 }
3287 }
3288
3289 log_file_path = s;
3290 }
3291
3292 /* Interpret syslog_facility into an integer argument for 'ident' param to
3293 openlog(). Default is LOG_MAIL set in globals.c. Allow the user to omit the
3294 leading "log_". */
3295
3296 if (syslog_facility_str != NULL)
3297 {
3298 int i;
3299 uschar *s = syslog_facility_str;
3300
3301 if ((Ustrlen(syslog_facility_str) >= 4) &&
3302 (strncmpic(syslog_facility_str, US"log_", 4) == 0))
3303 s += 4;
3304
3305 for (i = 0; i < syslog_list_size; i++)
3306 {
3307 if (strcmpic(s, syslog_list[i].name) == 0)
3308 {
3309 syslog_facility = syslog_list[i].value;
3310 break;
3311 }
3312 }
3313
3314 if (i >= syslog_list_size)
3315 {
3316 log_write(0, LOG_PANIC_DIE|LOG_CONFIG,
3317 "failed to interpret syslog_facility \"%s\"", syslog_facility_str);
3318 }
3319 }
3320
3321 /* Expand pid_file_path */
3322
3323 if (*pid_file_path != 0)
3324 {
3325 s = expand_string(pid_file_path);
3326 if (s == NULL)
3327 log_write(0, LOG_MAIN|LOG_PANIC_DIE, "failed to expand pid_file_path "
3328 "\"%s\": %s", pid_file_path, expand_string_message);
3329 pid_file_path = s;
3330 }
3331
3332 /* Set default value of process_log_path */
3333
3334 if (process_log_path == NULL || *process_log_path =='\0')
3335 process_log_path = string_sprintf("%s/exim-process.info", spool_directory);
3336
3337 /* Compile the regex for matching a UUCP-style "From_" line in an incoming
3338 message. */
3339
3340 regex_From = regex_must_compile(uucp_from_pattern, FALSE, TRUE);
3341
3342 /* Unpick the SMTP rate limiting options, if set */
3343
3344 if (smtp_ratelimit_mail != NULL)
3345 {
3346 unpick_ratelimit(smtp_ratelimit_mail, &smtp_rlm_threshold,
3347 &smtp_rlm_base, &smtp_rlm_factor, &smtp_rlm_limit);
3348 }
3349
3350 if (smtp_ratelimit_rcpt != NULL)
3351 {
3352 unpick_ratelimit(smtp_ratelimit_rcpt, &smtp_rlr_threshold,
3353 &smtp_rlr_base, &smtp_rlr_factor, &smtp_rlr_limit);
3354 }
3355
3356 /* The qualify domains default to the primary host name */
3357
3358 if (qualify_domain_sender == NULL)
3359 qualify_domain_sender = primary_hostname;
3360 if (qualify_domain_recipient == NULL)
3361 qualify_domain_recipient = qualify_domain_sender;
3362
3363 /* Setting system_filter_user in the configuration sets the gid as well if a
3364 name is given, but a numerical value does not. */
3365
3366 if (system_filter_uid_set && !system_filter_gid_set)
3367 {
3368 struct passwd *pw = getpwuid(system_filter_uid);
3369 if (pw == NULL)
3370 log_write(0, LOG_MAIN|LOG_PANIC_DIE, "Failed to look up uid %ld",
3371 (long int)system_filter_uid);
3372 system_filter_gid = pw->pw_gid;
3373 system_filter_gid_set = TRUE;
3374 }
3375
3376 /* If the errors_reply_to field is set, check that it is syntactically valid
3377 and ensure it contains a domain. */
3378
3379 if (errors_reply_to != NULL)
3380 {
3381 uschar *errmess;
3382 int start, end, domain;
3383 uschar *recipient = parse_extract_address(errors_reply_to, &errmess,
3384 &start, &end, &domain, FALSE);
3385
3386 if (recipient == NULL)
3387 log_write(0, LOG_PANIC_DIE|LOG_CONFIG,
3388 "error in errors_reply_to (%s): %s", errors_reply_to, errmess);
3389
3390 if (domain == 0)
3391 log_write(0, LOG_PANIC_DIE|LOG_CONFIG,
3392 "errors_reply_to (%s) does not contain a domain", errors_reply_to);
3393 }
3394
3395 /* If smtp_accept_queue or smtp_accept_max_per_host is set, then
3396 smtp_accept_max must also be set. */
3397
3398 if (smtp_accept_max == 0 &&
3399 (smtp_accept_queue > 0 || smtp_accept_max_per_host != NULL))
3400 log_write(0, LOG_PANIC_DIE|LOG_CONFIG,
3401 "smtp_accept_max must be set if smtp_accept_queue or "
3402 "smtp_accept_max_per_host is set");
3403
3404 /* Set up the host number if anything is specified. It is an expanded string
3405 so that it can be computed from the host name, for example. We do this last
3406 so as to ensure that everything else is set up before the expansion. */
3407
3408 if (host_number_string != NULL)
3409 {
3410 long int n;
3411 uschar *end;
3412 uschar *s = expand_string(host_number_string);
3413 if (s == NULL)
3414 log_write(0, LOG_MAIN|LOG_PANIC_DIE,
3415 "failed to expand localhost_number \"%s\": %s",
3416 host_number_string, expand_string_message);
3417 n = Ustrtol(s, &end, 0);
3418 while (isspace(*end)) end++;
3419 if (*end != 0)
3420 log_write(0, LOG_PANIC_DIE|LOG_CONFIG,
3421 "localhost_number value is not a number: %s", s);
3422 if (n > LOCALHOST_MAX)
3423 log_write(0, LOG_PANIC_DIE|LOG_CONFIG,
3424 "localhost_number is greater than the maximum allowed value (%d)",
3425 LOCALHOST_MAX);
3426 host_number = n;
3427 }
3428
3429 #ifdef SUPPORT_TLS
3430 /* If tls_verify_hosts is set, tls_verify_certificates must also be set */
3431
3432 if ((tls_verify_hosts != NULL || tls_try_verify_hosts != NULL) &&
3433 tls_verify_certificates == NULL)
3434 log_write(0, LOG_PANIC_DIE|LOG_CONFIG,
3435 "tls_%sverify_hosts is set, but tls_verify_certificates is not set",
3436 (tls_verify_hosts != NULL)? "" : "try_");
3437
3438 /* This also checks that the library linkage is working and we can call
3439 routines in it, so call even if tls_require_ciphers is unset */
3440 if (!tls_dropprivs_validate_require_cipher())
3441 exit(1);
3442
3443 /* Magic number: at time of writing, 1024 has been the long-standing value
3444 used by so many clients, and what Exim used to use always, that it makes
3445 sense to just min-clamp this max-clamp at that. */
3446 if (tls_dh_max_bits < 1024)
3447 log_write(0, LOG_PANIC_DIE|LOG_CONFIG,
3448 "tls_dh_max_bits is too small, must be at least 1024 for interop");
3449
3450 /* If openssl_options is set, validate it */
3451 if (openssl_options != NULL)
3452 {
3453 # ifdef USE_GNUTLS
3454 log_write(0, LOG_PANIC_DIE|LOG_CONFIG,
3455 "openssl_options is set but we're using GnuTLS");
3456 # else
3457 long dummy;
3458 if (!(tls_openssl_options_parse(openssl_options, &dummy)))
3459 log_write(0, LOG_PANIC_DIE|LOG_CONFIG,
3460 "openssl_options parse error: %s", openssl_options);
3461 # endif
3462 }
3463
3464 if (gnutls_require_kx || gnutls_require_mac || gnutls_require_proto)
3465 log_write(0, LOG_MAIN, "WARNING: main options"
3466 " gnutls_require_kx, gnutls_require_mac and gnutls_require_protocols"
3467 " are obsolete\n");
3468 #endif /*SUPPORT_TLS*/
3469 }
3470
3471
3472
3473 /*************************************************
3474 * Initialize one driver *
3475 *************************************************/
3476
3477 /* This is called once the driver's generic options, if any, have been read.
3478 We can now find the driver, set up defaults for the private options, and
3479 unset any "set" bits in the private options table (which might have been
3480 set by another incarnation of the same driver).
3481
3482 Arguments:
3483 d pointer to driver instance block, with generic
3484 options filled in
3485 drivers_available vector of available drivers
3486 size_of_info size of each block in drivers_available
3487 class class of driver, for error message
3488
3489 Returns: pointer to the driver info block
3490 */
3491
3492 static driver_info *
3493 init_driver(driver_instance *d, driver_info *drivers_available,
3494 int size_of_info, uschar *class)
3495 {
3496 driver_info *dd;
3497
3498 for (dd = drivers_available; dd->driver_name[0] != 0;
3499 dd = (driver_info *)(((uschar *)dd) + size_of_info))
3500 {
3501 if (Ustrcmp(d->driver_name, dd->driver_name) == 0)
3502 {
3503 int i;
3504 int len = dd->options_len;
3505 d->info = dd;
3506 d->options_block = store_get(len);
3507 memcpy(d->options_block, dd->options_block, len);
3508 for (i = 0; i < *(dd->options_count); i++)
3509 dd->options[i].type &= ~opt_set;
3510 return dd;
3511 }
3512 }
3513
3514 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
3515 "%s %s: cannot find %s driver \"%s\"", class, d->name, class, d->driver_name);
3516
3517 return NULL; /* never obeyed */
3518 }
3519
3520
3521
3522
3523 /*************************************************
3524 * Initialize driver list *
3525 *************************************************/
3526
3527 /* This function is called for routers, transports, and authentication
3528 mechanisms. It reads the data from the current point in the configuration file
3529 up to the end of the section, and sets up a chain of instance blocks according
3530 to the file's contents. The file will already have been opened by a call to
3531 readconf_main, and must be left open for subsequent reading of further data.
3532
3533 Any errors cause a panic crash. Note that the blocks with names driver_info and
3534 driver_instance must map the first portions of all the _info and _instance
3535 blocks for this shared code to work.
3536
3537 Arguments:
3538 class "router", "transport", or "authenticator"
3539 anchor &routers, &transports, &auths
3540 drivers_available available drivers
3541 size_of_info size of each info block
3542 instance_default points to default data for an instance
3543 instance_size size of instance block
3544 driver_optionlist generic option list
3545 driver_optionlist_count count of generic option list
3546
3547 Returns: nothing
3548 */
3549
3550 void
3551 readconf_driver_init(
3552 uschar *class,
3553 driver_instance **anchor,
3554 driver_info *drivers_available,
3555 int size_of_info,
3556 void *instance_default,
3557 int instance_size,
3558 optionlist *driver_optionlist,
3559 int driver_optionlist_count)
3560 {
3561 driver_instance **p = anchor;
3562 driver_instance *d = NULL;
3563 uschar *buffer;
3564
3565 while ((buffer = get_config_line()) != NULL)
3566 {
3567 uschar name[64];
3568 uschar *s;
3569
3570 /* Read the first name on the line and test for the start of a new driver. A
3571 macro definition indicates the end of the previous driver. If this isn't the
3572 start of a new driver, the line will be re-read. */
3573
3574 s = readconf_readname(name, sizeof(name), buffer);
3575
3576 /* Handle macro definition, first finishing off the initialization of the
3577 previous driver, if any. */
3578
3579 if (isupper(*name) && *s == '=')
3580 {
3581 if (d != NULL)
3582 {
3583 if (d->driver_name == NULL)
3584 log_write(0, LOG_PANIC_DIE|LOG_CONFIG,
3585 "no driver defined for %s \"%s\"", class, d->name);
3586 (d->info->init)(d);
3587 d = NULL;
3588 }
3589 read_macro_assignment(buffer);
3590 continue;
3591 }
3592
3593 /* If the line starts with a name terminated by a colon, we are at the
3594 start of the definition of a new driver. The rest of the line must be
3595 blank. */
3596
3597 if (*s++ == ':')
3598 {
3599 int i;
3600
3601 /* Finish off initializing the previous driver. */
3602
3603 if (d != NULL)
3604 {
3605 if (d->driver_name == NULL)
3606 log_write(0, LOG_PANIC_DIE|LOG_CONFIG,
3607 "no driver defined for %s \"%s\"", class, d->name);
3608 (d->info->init)(d);
3609 }
3610
3611 /* Check that we haven't already got a driver of this name */
3612
3613 for (d = *anchor; d != NULL; d = d->next)
3614 if (Ustrcmp(name, d->name) == 0)
3615 log_write(0, LOG_PANIC_DIE|LOG_CONFIG,
3616 "there are two %ss called \"%s\"", class, name);
3617
3618 /* Set up a new driver instance data block on the chain, with
3619 its default values installed. */
3620
3621 d = store_get(instance_size);
3622 memcpy(d, instance_default, instance_size);
3623 *p = d;
3624 p = &(d->next);
3625 d->name = string_copy(name);
3626
3627 /* Clear out the "set" bits in the generic options */
3628
3629 for (i = 0; i < driver_optionlist_count; i++)
3630 driver_optionlist[i].type &= ~opt_set;
3631
3632 /* Check nothing more on this line, then do the next loop iteration. */
3633
3634 while (isspace(*s)) s++;
3635 if (*s != 0) extra_chars_error(s, US"driver name ", name, US"");
3636 continue;
3637 }
3638
3639 /* Not the start of a new driver. Give an error if we have not set up a
3640 current driver yet. */
3641
3642 if (d == NULL) log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
3643 "%s name missing", class);
3644
3645 /* First look to see if this is a generic option; if it is "driver",
3646 initialize the driver. If is it not a generic option, we can look for a
3647 private option provided that the driver has been previously set up. */
3648
3649 if (readconf_handle_option(buffer, driver_optionlist,
3650 driver_optionlist_count, d, NULL))
3651 {
3652 if (d->info == NULL && d->driver_name != NULL)
3653 init_driver(d, drivers_available, size_of_info, class);
3654 }
3655
3656 /* Handle private options - pass the generic block because some may
3657 live therein. A flag with each option indicates if it is in the public
3658 block. */
3659
3660 else if (d->info != NULL)
3661 {
3662 readconf_handle_option(buffer, d->info->options,
3663 *(d->info->options_count), d, US"option \"%s\" unknown");
3664 }
3665
3666 /* The option is not generic and the driver name has not yet been given. */
3667
3668 else log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "option \"%s\" unknown "
3669 "(\"driver\" must be specified before any private options)", name);
3670 }
3671
3672 /* Run the initialization function for the final driver. */
3673
3674 if (d != NULL)
3675 {
3676 if (d->driver_name == NULL)
3677 log_write(0, LOG_PANIC_DIE|LOG_CONFIG,
3678 "no driver defined for %s \"%s\"", class, d->name);
3679 (d->info->init)(d);
3680 }
3681 }
3682
3683
3684
3685 /*************************************************
3686 * Check driver dependency *
3687 *************************************************/
3688
3689 /* This function is passed a driver instance and a string. It checks whether
3690 any of the string options for the driver contains the given string as an
3691 expansion variable.
3692
3693 Arguments:
3694 d points to a driver instance block
3695 s the string to search for
3696
3697 Returns: TRUE if a dependency is found
3698 */
3699
3700 BOOL
3701 readconf_depends(driver_instance *d, uschar *s)
3702 {
3703 int count = *(d->info->options_count);
3704 optionlist *ol;
3705 uschar *ss;
3706
3707 for (ol = d->info->options; ol < d->info->options + count; ol++)
3708 {
3709 void *options_block;
3710 uschar *value;
3711 int type = ol->type & opt_mask;
3712 if (type != opt_stringptr) continue;
3713 options_block = ((ol->type & opt_public) == 0)? d->options_block : (void *)d;
3714 value = *(uschar **)((uschar *)options_block + (long int)(ol->value));
3715 if (value != NULL && (ss = Ustrstr(value, s)) != NULL)
3716 {
3717 if (ss <= value || (ss[-1] != '$' && ss[-1] != '{') ||
3718 isalnum(ss[Ustrlen(s)])) continue;
3719 DEBUG(D_transport) debug_printf("driver %s: \"%s\" option depends on %s\n",
3720 d->name, ol->name, s);
3721 return TRUE;
3722 }
3723 }
3724
3725 DEBUG(D_transport) debug_printf("driver %s does not depend on %s\n", d->name, s);
3726 return FALSE;
3727 }
3728
3729
3730
3731
3732 /*************************************************
3733 * Decode an error type for retries *
3734 *************************************************/
3735
3736 /* This function is global because it is also called from the main
3737 program when testing retry information. It decodes strings such as "quota_7d"
3738 into numerical error codes.
3739
3740 Arguments:
3741 pp points to start of text
3742 p points past end of text
3743 basic_errno points to an int to receive the main error number
3744 more_errno points to an int to receive the secondary error data
3745
3746 Returns: NULL if decoded correctly; else points to error text
3747 */
3748
3749 uschar *
3750 readconf_retry_error(const uschar *pp, const uschar *p,
3751 int *basic_errno, int *more_errno)
3752 {
3753 int len;
3754 const uschar *q = pp;
3755 while (q < p && *q != '_') q++;
3756 len = q - pp;
3757
3758 if (len == 5 && strncmpic(pp, US"quota", len) == 0)
3759 {
3760 *basic_errno = ERRNO_EXIMQUOTA;
3761 if (q != p && (*more_errno = readconf_readtime(q+1, *p, FALSE)) < 0)
3762 return US"bad time value";
3763 }
3764
3765 else if (len == 7 && strncmpic(pp, US"refused", len) == 0)
3766 {
3767 *basic_errno = ECONNREFUSED;
3768 if (q != p)
3769 {
3770 if (strncmpic(q+1, US"MX", p-q-1) == 0) *more_errno = 'M';
3771 else if (strncmpic(q+1, US"A", p-q-1) == 0) *more_errno = 'A';
3772 else return US"A or MX expected after \"refused\"";
3773 }
3774 }
3775
3776 else if (len == 7 && strncmpic(pp, US"timeout", len) == 0)
3777 {
3778 *basic_errno = ETIMEDOUT;
3779 if (q != p)
3780 {
3781 int i;
3782 int xlen = p - q - 1;
3783 const uschar *x = q + 1;
3784
3785 static uschar *extras[] =
3786 { US"A", US"MX", US"connect", US"connect_A", US"connect_MX" };
3787 static int values[] =
3788 { 'A', 'M', RTEF_CTOUT, RTEF_CTOUT|'A', RTEF_CTOUT|'M' };
3789
3790 for (i = 0; i < sizeof(extras)/sizeof(uschar *); i++)
3791 if (strncmpic(x, extras[i], xlen) == 0)
3792 {
3793 *more_errno = values[i];
3794 break;
3795 }
3796
3797 if (i >= sizeof(extras)/sizeof(uschar *))
3798 if (strncmpic(x, US"DNS", xlen) == 0)
3799 log_write(0, LOG_MAIN|LOG_PANIC, "\"timeout_dns\" is no longer "
3800 "available in retry rules (it has never worked) - treated as "
3801 "\"timeout\"");
3802 else
3803 return US"\"A\", \"MX\", or \"connect\" expected after \"timeout\"";
3804 }
3805 }
3806
3807 else if (strncmpic(pp, US"mail_4", 6) == 0 ||
3808 strncmpic(pp, US"rcpt_4", 6) == 0 ||
3809 strncmpic(pp, US"data_4", 6) == 0)
3810 {
3811 BOOL bad = FALSE;
3812 int x = 255; /* means "any 4xx code" */
3813 if (p != pp + 8) bad = TRUE; else
3814 {
3815 int a = pp[6], b = pp[7];
3816 if (isdigit(a))
3817 {
3818 x = (a - '0') * 10;
3819 if (isdigit(b)) x += b - '0';
3820 else if (b == 'x') x += 100;
3821 else bad = TRUE;
3822 }
3823 else if (a != 'x' || b != 'x') bad = TRUE;
3824 }
3825
3826 if (bad)
3827 return string_sprintf("%.4s_4 must be followed by xx, dx, or dd, where "
3828 "x is literal and d is any digit", pp);
3829
3830 *basic_errno = *pp == 'm' ? ERRNO_MAIL4XX :
3831 *pp == 'r' ? ERRNO_RCPT4XX : ERRNO_DATA4XX;
3832 *more_errno = x << 8;
3833 }
3834
3835 else if (len == 4 && strncmpic(pp, US"auth", len) == 0 &&
3836 strncmpic(q+1, US"failed", p-q-1) == 0)
3837 *basic_errno = ERRNO_AUTHFAIL;
3838
3839 else if (strncmpic(pp, US"lost_connection", p - pp) == 0)
3840 *basic_errno = ERRNO_SMTPCLOSED;
3841
3842 else if (strncmpic(pp, US"tls_required", p - pp) == 0)
3843 *basic_errno = ERRNO_TLSREQUIRED;
3844
3845 else if (strncmpic(pp, US"lookup", p - pp) == 0)
3846 *basic_errno = ERRNO_UNKNOWNHOST;
3847
3848 else if (len != 1 || Ustrncmp(pp, "*", 1) != 0)
3849 return string_sprintf("unknown or malformed retry error \"%.*s\"", (int) (p-pp), pp);
3850
3851 return NULL;
3852 }
3853
3854
3855
3856
3857 /*************************************************
3858 * Read retry information *
3859 *************************************************/
3860
3861 /* Each line of retry information contains:
3862
3863 . A domain name pattern or an address pattern;
3864
3865 . An error name, possibly with additional data, or *;
3866
3867 . An optional sequence of retry items, each consisting of an identifying
3868 letter, a cutoff time, and optional parameters.
3869
3870 All this is decoded and placed into a control block. */
3871
3872
3873 /* Subroutine to read an argument, preceded by a comma and terminated
3874 by comma, semicolon, whitespace, or newline. The types are: 0 = time value,
3875 1 = fixed point number (returned *1000).
3876
3877 Arguments:
3878 paddr pointer to pointer to current character; updated
3879 type 0 => read a time; 1 => read a fixed point number
3880
3881 Returns: time in seconds or fixed point number * 1000
3882 */
3883
3884 static int
3885 retry_arg(const uschar **paddr, int type)
3886 {
3887 const uschar *p = *paddr;
3888 const uschar *pp;
3889
3890 if (*p++ != ',') log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "comma expected");
3891
3892 while (isspace(*p)) p++;
3893 pp = p;
3894 while (isalnum(*p) || (type == 1 && *p == '.')) p++;
3895
3896 if (*p != 0 && !isspace(*p) && *p != ',' && *p != ';')
3897 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "comma or semicolon expected");
3898
3899 *paddr = p;
3900 switch (type)
3901 {
3902 case 0: return readconf_readtime(pp, *p, FALSE);
3903 case 1: return readconf_readfixed(pp, *p);
3904 }
3905 return 0; /* Keep picky compilers happy */
3906 }
3907
3908 /* The function proper */
3909
3910 void
3911 readconf_retries(void)
3912 {
3913 retry_config **chain = &retries;
3914 retry_config *next;
3915 const uschar *p;
3916
3917 while ((p = get_config_line()))
3918 {
3919 retry_rule **rchain;
3920 const uschar *pp;
3921 uschar *error;
3922
3923 next = store_get(sizeof(retry_config));
3924 next->next = NULL;
3925 *chain = next;
3926 chain = &(next->next);
3927 next->basic_errno = next->more_errno = 0;
3928 next->senders = NULL;
3929 next->rules = NULL;
3930 rchain = &(next->rules);
3931
3932 next->pattern = string_dequote(&p);
3933 while (isspace(*p)) p++;
3934 pp = p;
3935 while (mac_isgraph(*p)) p++;
3936 if (p - pp <= 0) log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
3937 "missing error type in retry rule");
3938
3939 /* Test error names for things we understand. */
3940
3941 if ((error = readconf_retry_error(pp, p, &next->basic_errno,
3942 &next->more_errno)))
3943 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "%s", error);
3944
3945 /* There may be an optional address list of senders to be used as another
3946 constraint on the rule. This was added later, so the syntax is a bit of a
3947 fudge. Anything that is not a retry rule starting "F," or "G," is treated as
3948 an address list. */
3949
3950 while (isspace(*p)) p++;
3951 if (Ustrncmp(p, "senders", 7) == 0)
3952 {
3953 p += 7;
3954 while (isspace(*p)) p++;
3955 if (*p++ != '=') log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
3956 "\"=\" expected after \"senders\" in retry rule");
3957 while (isspace(*p)) p++;
3958 next->senders = string_dequote(&p);
3959 }
3960
3961 /* Now the retry rules. Keep the maximum timeout encountered. */
3962
3963 while (isspace(*p)) p++;
3964
3965 while (*p != 0)
3966 {
3967 retry_rule *rule = store_get(sizeof(retry_rule));
3968 *rchain = rule;
3969 rchain = &(rule->next);
3970 rule->next = NULL;
3971 rule->rule = toupper(*p++);
3972 rule->timeout = retry_arg(&p, 0);
3973 if (rule->timeout > retry_maximum_timeout)
3974 retry_maximum_timeout = rule->timeout;
3975
3976 switch (rule->rule)
3977 {
3978 case 'F': /* Fixed interval */
3979 rule->p1 = retry_arg(&p, 0);
3980 break;
3981
3982 case 'G': /* Geometrically increasing intervals */
3983 case 'H': /* Ditto, but with randomness */
3984 rule->p1 = retry_arg(&p, 0);
3985 rule->p2 = retry_arg(&p, 1);
3986 break;
3987
3988 default:
3989 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "unknown retry rule letter");
3990 break;
3991 }
3992
3993 if (rule->timeout <= 0 || rule->p1 <= 0 ||
3994 (rule->rule != 'F' && rule->p2 < 1000))
3995 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
3996 "bad parameters for retry rule");
3997
3998 while (isspace(*p)) p++;
3999 if (*p == ';')
4000 {
4001 p++;
4002 while (isspace(*p)) p++;
4003 }
4004 else if (*p != 0)
4005 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "semicolon expected");
4006 }
4007 }
4008 }
4009
4010
4011
4012 /*************************************************
4013 * Initialize authenticators *
4014 *************************************************/
4015
4016 /* Read the authenticators section of the configuration file.
4017
4018 Arguments: none
4019 Returns: nothing
4020 */
4021
4022 static void
4023 auths_init(void)
4024 {
4025 auth_instance *au, *bu;
4026 readconf_driver_init(US"authenticator",
4027 (driver_instance **)(&auths), /* chain anchor */
4028 (driver_info *)auths_available, /* available drivers */
4029 sizeof(auth_info), /* size of info block */
4030 &auth_defaults, /* default values for generic options */
4031 sizeof(auth_instance), /* size of instance block */
4032 optionlist_auths, /* generic options */
4033 optionlist_auths_size);
4034
4035 for (au = auths; au != NULL; au = au->next)
4036 {
4037 if (au->public_name == NULL)
4038 log_write(0, LOG_PANIC_DIE|LOG_CONFIG, "no public name specified for "
4039 "the %s authenticator", au->name);
4040 for (bu = au->next; bu != NULL; bu = bu->next)
4041 {
4042 if (strcmpic(au->public_name, bu->public_name) == 0)
4043 {
4044 if ((au->client && bu->client) || (au->server && bu->server))
4045 log_write(0, LOG_PANIC_DIE|LOG_CONFIG, "two %s authenticators "
4046 "(%s and %s) have the same public name (%s)",
4047 (au->client)? US"client" : US"server", au->name, bu->name,
4048 au->public_name);
4049 }
4050 }
4051 }
4052 }
4053
4054
4055
4056
4057 /*************************************************
4058 * Read ACL information *
4059 *************************************************/
4060
4061 /* If this run of Exim is not doing something that involves receiving a
4062 message, we can just skip over the ACL information. No need to parse it.
4063
4064 First, we have a function for acl_read() to call back to get the next line. We
4065 need to remember the line we passed, because at the end it will contain the
4066 name of the next ACL. */
4067
4068 static uschar *acl_line;
4069
4070 static uschar *
4071 acl_callback(void)
4072 {
4073 acl_line = get_config_line();
4074 return acl_line;
4075 }
4076
4077
4078 /* Now the main function:
4079
4080 Arguments: none
4081 Returns: nothing
4082 */
4083
4084 static void
4085 readconf_acl(void)
4086 {
4087 uschar *p;
4088
4089 /* Read each ACL and add it into the tree. Macro (re)definitions are allowed
4090 between ACLs. */
4091
4092 acl_line = get_config_line();
4093
4094 while(acl_line != NULL)
4095 {
4096 uschar name[64];
4097 tree_node *node;
4098 uschar *error;
4099
4100 p = readconf_readname(name, sizeof(name), acl_line);
4101 if (isupper(*name) && *p == '=')
4102 {
4103 read_macro_assignment(acl_line);
4104 acl_line = get_config_line();
4105 continue;
4106 }
4107
4108 if (*p != ':' || name[0] == 0)
4109 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "missing or malformed ACL name");
4110
4111 node = store_get(sizeof(tree_node) + Ustrlen(name));
4112 Ustrcpy(node->name, name);
4113 if (!tree_insertnode(&acl_anchor, node))
4114 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
4115 "there are two ACLs called \"%s\"", name);
4116
4117 node->data.ptr = acl_read(acl_callback, &error);
4118
4119 if (node->data.ptr == NULL && error != NULL)
4120 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "error in ACL: %s", error);
4121 }
4122 }
4123
4124
4125
4126 /*************************************************
4127 * Read configuration for local_scan() *
4128 *************************************************/
4129
4130 /* This function is called after "begin local_scan" is encountered in the
4131 configuration file. If the local_scan() function allows for configuration
4132 options, we can process them. Otherwise, we expire in a panic.
4133
4134 Arguments: none
4135 Returns: nothing
4136 */
4137
4138 static void
4139 local_scan_init(void)
4140 {
4141 #ifndef LOCAL_SCAN_HAS_OPTIONS
4142 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN, "local_scan() options not supported: "
4143 "(LOCAL_SCAN_HAS_OPTIONS not defined in Local/Makefile)");
4144 #else
4145
4146 uschar *p;
4147 while ((p = get_config_line()) != NULL)
4148 {
4149 (void) readconf_handle_option(p, local_scan_options, local_scan_options_count,
4150 NULL, US"local_scan option \"%s\" unknown");
4151 }
4152 #endif
4153 }
4154
4155
4156
4157 /*************************************************
4158 * Read rest of configuration (after main) *
4159 *************************************************/
4160
4161 /* This function reads the rest of the runtime configuration, after the main
4162 configuration. It is called only when actually needed. Each subsequent section
4163 of the configuration starts with a line of the form
4164
4165 begin name
4166
4167 where the name is "routers", "transports", etc. A section is terminated by
4168 hitting the next "begin" line, and the next name is left in next_section.
4169 Because it may confuse people as to whether the names are singular or plural,
4170 we add "s" if it's missing. There is always enough room in next_section for
4171 this. This function is basically just a switch.
4172
4173 Arguments: none
4174 Returns: nothing
4175 */
4176
4177 static uschar *section_list[] = {
4178 US"acls",
4179 US"authenticators",
4180 US"local_scans",
4181 US"retrys",
4182 US"rewrites",
4183 US"routers",
4184 US"transports"};
4185
4186 void
4187 readconf_rest(void)
4188 {
4189 int had = 0;
4190
4191 while(next_section[0] != 0)
4192 {
4193 int bit;
4194 int first = 0;
4195 int last = sizeof(section_list) / sizeof(uschar *);
4196 int mid = last/2;
4197 int n = Ustrlen(next_section);
4198
4199 if (tolower(next_section[n-1]) != 's') Ustrcpy(next_section+n, "s");
4200
4201 for (;;)
4202 {
4203 int c = strcmpic(next_section, section_list[mid]);
4204 if (c == 0) break;
4205 if (c > 0) first = mid + 1; else last = mid;
4206 if (first >= last)
4207 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
4208 "\"%.*s\" is not a known configuration section name", n, next_section);
4209 mid = (last + first)/2;
4210 }
4211
4212 bit = 1 << mid;
4213 if (((had ^= bit) & bit) == 0)
4214 log_write(0, LOG_PANIC_DIE|LOG_CONFIG_IN,
4215 "\"%.*s\" section is repeated in the configuration file", n,
4216 next_section);
4217
4218 switch(mid)
4219 {
4220 case 0: readconf_acl(); break;
4221 case 1: auths_init(); break;
4222 case 2: local_scan_init(); break;
4223 case 3: readconf_retries(); break;
4224 case 4: readconf_rewrites(); break;
4225 case 5: route_init(); break;
4226 case 6: transport_init(); break;
4227 }
4228 }
4229
4230 (void)fclose(config_file);
4231 }
4232
4233 /* Init the storage for the pre-parsed config lines */
4234 void
4235 readconf_save_config(const uschar *s)
4236 {
4237 save_config_line(string_sprintf("# Exim Configuration (%s)",
4238 running_in_test_harness ? US"X" : s));
4239 }
4240
4241 static void
4242 save_config_position(const uschar *file, int line)
4243 {
4244 save_config_line(string_sprintf("# %d \"%s\"", line, file));
4245 }
4246
4247 /* Append a pre-parsed logical line to the config lines store,
4248 this operates on a global (static) list that holds all the pre-parsed
4249 config lines, we do no further processing here, output formatting and
4250 honouring of <hide> or macros will be done during output */
4251 static void
4252 save_config_line(const uschar* line)
4253 {
4254 static config_line_item *current;
4255 config_line_item *next;
4256
4257 next = (config_line_item*) store_get(sizeof(config_line_item));
4258 next->line = string_copy(line);
4259 next->next = NULL;
4260
4261 if (!config_lines) config_lines = next;
4262 else current->next = next;
4263
4264 current = next;
4265 }
4266
4267 /* List the parsed config lines, care about nice formatting and
4268 hide the <hide> values unless we're the admin user */
4269 void
4270 print_config(BOOL admin)
4271 {
4272 config_line_item *i;
4273 const int TS = 2;
4274 int indent = 0;
4275
4276 for (i = config_lines; i; i = i->next)
4277 {
4278 uschar *current;
4279 uschar *p;
4280
4281 /* skip over to the first non-space */
4282 for (current = i->line; *current && isspace(*current); ++current)
4283 ;
4284
4285 if (*current == '\0')
4286 continue;
4287
4288 /* Collapse runs of spaces. We stop this if we encounter one of the
4289 * following characters: "'$, as this may indicate careful formatting */
4290 for (p = current; *p; ++p)
4291 {
4292 uschar *next;
4293 if (!isspace(*p)) continue;
4294 if (*p != ' ') *p = ' ';
4295
4296 for (next = p; isspace(*next); ++next)
4297 ;
4298
4299 if (next - p > 1)
4300 memmove(p+1, next, strlen(next)+1);
4301
4302 if (*next == '"' || *next == '\'' || *next == '$')
4303 break;
4304 }
4305
4306 /* # lines */
4307 if (current[0] == '#')
4308 puts(CCS current);
4309
4310 /* begin lines are left aligned */
4311 else if (Ustrncmp(current, "begin", 5) == 0 && isspace(current[5]))
4312 {
4313 puts("");
4314 puts(CCS current);
4315 indent = TS;
4316 }
4317
4318 /* router/acl/transport block names */
4319 else if (current[Ustrlen(current)-1] == ':' && !Ustrchr(current, '='))
4320 {
4321 printf("\n%*s%s\n", TS, "", current);
4322 indent = 2 * TS;
4323 }
4324
4325 /* hidden lines (all MACROS or lines prefixed with "hide") */
4326 else if ( !admin
4327 && ( isupper(*current)
4328 || Ustrncmp(current, "hide", 4) == 0 && isspace(current[4])
4329 )
4330 )
4331 {
4332 if ((p = Ustrchr(current, '=')))
4333 {
4334 *p = '\0';
4335 printf("%*s%s= %s\n", indent, "", current, hidden);
4336 }
4337 /* e.g.: hide split_spool_directory */
4338 else
4339 printf("%*s\n", indent, hidden);
4340 }
4341
4342 else
4343 /* rest is public */
4344 printf("%*s%s\n", indent, "", current);
4345 }
4346 }
4347
4348 /* vi: aw ai sw=2
4349 */
4350 /* End of readconf.c */