Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

sendmail snapshot 8.18.0.9

72 views
Skip to first unread message

Claus Aßmann

unread,
Jan 25, 2024, 4:51:10 AMJan 25
to
sendmail snapshot 8.18.0.9 is available for testing. It offers new
srv_features options 'u2' and 'g2' which instruct the server to
replace offending bare CR or bare LF with a space. This allows mails
from broken clients instead of rejecting them, but without the risk
of enabling "SMTP smuggling".

SHA256 (sendmail.8.18.0.9.tar.gz) = 01a483f54479deef2ea8150ae8c10f126d639d1613bde73681fe0aafbe8e65d7
SHA256 (sendmail.8.18.0.9.tar.gz.sig) = b1f5b79b7b8757a72d10c49ae641062f7337a5f684dd82f26809f963fe0d7ac1

Available at:
https://ftp.sendmail.org/snapshots/sendmail.8.18.0.9.tar.gz
https://ftp.sendmail.org/snapshots/sendmail.8.18.0.9.tar.gz.sig

--
Note: please read the netiquette before posting. I will almost never
reply to top-postings which include a full copy of the previous
article(s) at the end because it's annoying, shows that the poster
is too lazy to trim his article, and it's wasting the time of all readers.

Andreas S. Kerber

unread,
Jan 27, 2024, 5:07:50 AMJan 27
to
Claus Aßmann <INVALID_NO_CC_REMOVE_IF_YOU_DO_NOT_POST_ml+sendmail(-no-copies-please)@esmtp.org> wrote:
> sendmail snapshot 8.18.0.9 is available for testing. It offers new
> srv_features options 'u2' and 'g2' which instruct the server to
> replace offending bare CR or bare LF with a space. This allows mails

That seems to fine, thanks!
The logging entry "collect: connection from localhost" seems a little confusing ("localhost"). Maybe a bug?


Jan 27 09:09:37 frontend6 sendmail[4131621]: 40R89a9f4131621: from=<nor...@ruv.de>, size=1541, class=0, nrcpts=1, msgid=<156ec9$4440f1@unknown domain>, proto=ESMTPS, daemon=MTA-v4, relay=mail101.ruv.de [91.235.236.17]
Jan 27 09:09:37 frontend6 sendmail[4131621]: 40R89a9f4131621: collect: connection from localhost, from=<nor...@ruv.de>, info=Bare linefeed (LF) not allowed, where=header, stat=replaced

Claus Aßmann

unread,
Jan 27, 2024, 11:39:45 AMJan 27
to
Andreas S. Kerber wrote:

> The logging entry "collect: connection from localhost" seems a little
> confusing ("localhost"). Maybe a bug?

Yes, thanks for reporting that.
Here's a patch:
------------------------------------------------------------
diff --git a/sendmail/collect.c b/sendmail/collect.c
--- a/sendmail/collect.c
+++ b/sendmail/collect.c
@@ -939,7 +939,7 @@ readdone:
else
problem = "read timeout";

-#define LOG_CLT ((NULL == RealHostName) ? RealHostName: "localhost")
+#define LOG_CLT ((NULL != RealHostName) ? RealHostName: "localhost")
#define CONN_ERR_TXT "collect: %s on connection from %s, from=%s%s%s%s%s"
#define CONN_ERR_CODE "421 4.4.1 "
#define CONN_LOG_FROM shortenstring(e->e_from.q_paddr, MAXSHORTSTR)

------------------------------------------------------------

and a patch for a regression introduced in 8.18.0.9:
------------------------------------------------------------
diff --git a/sendmail/srvrsmtp.c b/sendmail/srvrsmtp.c
--- a/sendmail/srvrsmtp.c
+++ b/sendmail/srvrsmtp.c
@@ -5674,7 +5674,7 @@ static struct
#endif
{ 'J', SRV_BARE_CR_SP , 0 },
/* { 'K', 0 , 0 }, */
-/* { 'L', 0 , 0 }, */
+ { 'L', SRV_REQ_AUTH , 0 },
#if PIPELINING && _FFR_NO_PIPE
{ 'N', SRV_NO_PIPE , 0 },
#endif
------------------------------------------------------------
0 new messages