Commit graph

94 commits

Author SHA1 Message Date
Sheldon Hearn
89d12ec2e8 Import my exiscan-acl clamd virus scanner integration notes.
I can't say enough good things about clamd.
2003-08-25 06:57:40 +00:00
Sheldon Hearn
e8cef8d56e This file should have gone away when the second update to 4.21 occurred. 2003-08-19 07:45:20 +00:00
Sheldon Hearn
397db8d46b Update to exim-4.22:
* IPv6 bug fix incorporated.
* Catch up with changes in makefiles.
* Make portlint happier with respect to DOCSDIR, INFO and spaces.
* Use the new INFO macro.
* Use PATCHFILES instead of patching by hand, now that we don't support
  the non-ACL exiscan patch.

This release fixes a few last minute release mistakes from 4.21.

PR:		ports/55701
Submitted by:	Oliver Eikemeier <eikemeier@fillmore-labs.com>
2003-08-18 17:19:58 +00:00
Sheldon Hearn
0cc81f2419 Remove a wishlist patch incorporated into 4.21.
Reported by:	Oliver Eikemeier <eikemeier@fillmore-labs.com>
2003-08-16 10:09:10 +00:00
Sheldon Hearn
fc0f425d13 Roll forward over the last revision's backout.
This reinstates exim-4.21, but with PORTREVISION bumped so that folks
unlucky enough to get the bum version can easily upgrade.

Include a patch to fix the reported IPv6 bug.
2003-08-14 15:46:27 +00:00
Sheldon Hearn
873e93e1de Revert previous delta, which updated to exim-4.21.
The update causes segfaults during remote delivery for at least one
IPv6 user, and I don't have an IPv6 testbed to work with yet.

Requested by:	Suresh Ramasubramanian <suresh@outblaze.com>
2003-08-14 12:06:41 +00:00
Sheldon Hearn
944ed68cfa Update to exim-4.21:
* This is a mostly maintenance release, although some new features have
  been added (including Sieve support).

!!!WARNING!!!

The non-ACL exiscan patch is no longer supported.  The exiscan-acl patch
is now used by default, unless WITHOUT_EXISCAN is given.

This means that existing installations that rely on non-ACL exiscan
CAN NOT be upgraded without changes to the configure file.
2003-08-14 10:25:15 +00:00
Sheldon Hearn
c74a19fa6f Mention daily_clean_hoststat_enable.
Reported by:	Joe Altman <fj@panix.com>
2003-07-17 19:06:43 +00:00
Sheldon Hearn
7032872fa3 Recognize named lists in hosts_treat_as_local.
Reported by:	Oliver Eikemeier <eikemeier@fillmore-labs.com>
Obtained from:	author
2003-06-30 11:46:43 +00:00
Sheldon Hearn
9e94087155 Instrument a facility for including wishlist patches if WITH_WISHLIST
is defined.

Kick off with Exim 4 wish list item #163, which allows suppression of
the Received header if received_header_text is empty.

PR:		ports/53432
Submitted by:	Oliver Eikemeier <eikemeier@fillmore-labs.com>
2003-06-18 03:26:24 +00:00
Sheldon Hearn
70b4918cf0 1) Update exiscan-acl patch to -09:
Improved clamd support.
   New FAQ/example documentation.

2) Enable wildlsearch lookups by default and add new
   WITHOUT_WILDLSEARCH knob for disabling them.

3) Issue a fat warning if 127.0.0.1 is found in the relay_from_hosts
   hostlist of an existing configure file on upgrade.  This is important
   for IPv6 users and doesn't hurt IPv4-only users.

4) Attempt local deliveries as the owner of the mailbox (still group
   mail) and don't fail if the existing mailbox permissions are narrower
   than those with which we would have created it.  This works around
   pw(8) creating mailboxes with 0600 permission (instead of 0660).

Don't advertise Exim's configuration syntax as simple any more.  This
implies that you could leverage Exim's power with just a little reading,
which is not the case.

Bump PORTREVISION accordingly.

Submitted by:	Oliver Eikemeier <eikemeier@fillmore-labs.com> (1)
PR:		ports/52952 (2)
Submitted by:	Tim Bishop <tim@bishnet.net> (2)
Reported by:	Yann Golanski <yann@kierun.org> (3)
Reported by:	"Simon L. Nielsen" <simon@nitro.dk> (4)
2003-06-13 13:20:56 +00:00
Sheldon Hearn
baaf9ffd06 * Update to exiscan-acl patch 08, which fixes wrong defaults for sophie
antivirus and adds clamd support.

* Use the bz2 patch for exiscan-acl.

* Add a CVS Id tag to exim.sh
  Add a reload command to exim.sh.

Bump PORTREVISION accordingly.

Submitted by:	Oliver Eikemeier <eikemeier@fillmore-labs.com>
2003-06-02 13:17:43 +00:00
Sheldon Hearn
4d42a2e4fb * Update to exim-4.20, featuring host of minor bugfixes and some feature
enhancements.  Non-critical upgrade.
* Distribution site fixes and cleanups (somehow ommitted in prev delta).
* Put distribution files in a subdirectory.
* Optional support for exiscan-acl; exiscan is still the default.

I think the submitter is doing a great job.

PR:		ports/52228
Submitted by:	Oliver Eikemeier <eikemeier@fillmore-labs.com>
2003-05-15 15:18:05 +00:00
Sheldon Hearn
b37e1c6632 * Distribution site fixes and cleanups.
* Add support for db41.
* Fix bug in check_dir_size.
* Fix obscure bug in address rewriting.
* Rename patch-src::auths::plantext.c to ...::plaintext.c, without a
  repo-copy.
* Fix for unqualified redirection addresses prefixed with '\'.

Bump PORTREVISION accordingly.

PR:		ports/50984, ports/51279, ports/51300
Submitted by:	Oliver Eikemeier <eikemeier@fillmore-labs.com>
2003-05-12 09:44:02 +00:00
Sheldon Hearn
29399f79c9 1) Fix reproducible plaintext authentication crash.
2) In the sample configuration file, allow relaying from the IPv6 and
   IPv4 localhost addresses.

   This fixes relaying problems for folks using things like IPv6-enabled
   mailman.

Bump PORTREVISION accordingly.

Reported by:	Alexander Sabourenkov <lxnt@caravan.ru> (1)
		Mark Edwards <mark@antsclimbtree.com> (2)
2003-04-09 18:44:05 +00:00
Sheldon Hearn
5f0e3b5298 * Update exim-4.12 -> exim-4.14:
This is a maintenance release, but there are a few edge cases where
  backward compatibikity in the configure file was broken.

  While upgrading is recommended, administrators are encouraged to
  Update exim-4.12 -> exim-4.14:

  This is a maintenance release, but there are a few edge cases where
  backward compatibikity in the configure file was broken.

  While upgrading is recommended, administrators are encouraged to
  examine the README.UPDATING file in the distribution.

* Catch up to changes in the ports tree with respect to available
  OpenLDAP releases.  While backward compatibility is preserved,
  administrators may use WITH_OPENLDAP1, WITH_OPENLDAP20 and
  WITH_OPENLDAP21 for more fine-grained control of the OpenLDAP
  release on which to depend.

Submitted by:	Oliver Eikemeier <eikemeier@fillmore-labs.com>
2003-03-31 09:27:08 +00:00
Sheldon Hearn
d7c7b36274 Fix the DB_LIB_VERSION=4 case.
Reported by:	Andrew Filonov <aef@antar.bryansk.ru>
Approved by:	portmgr
2003-03-07 09:39:52 +00:00
Sheldon Hearn
65dd0504c4 Warn folks who actually turn Exiscan on about its tendency to not
preserve backward compatibility across upgrades.
2003-02-05 11:57:04 +00:00
Sheldon Hearn
c537abc9b1 1) Update to exiscan-4.12-22, which closes a number of buffer overflows
and incorporates a lot of fixes.

   WARNING, this version of exiscan is not entirely backward-compatible
   with the previous one:

   *	The following configuration options have been replaced with
	compile-time definitions and thus must be removed from your
	Exim configure file if specified there:

	exiscan_spamd_buffer_max_chunks
	exiscan_spamd_buffer_init_chunk
	exiscan_av_buffer_max_chunks
	exiscan_av_buffer_init_chunk

   *	Because of changes in the way MIME handling is implemented,
	the following should be added to the Exim configure file to
	maintain the original behaviour (which was to unpack MIME
	messages):

	exiscan_demime_condition = 1

2) Fix handling of SIGCHLD in redirection processes, which resulted
   in redirection processes vanishing.

3) Bump PORTREVISION accordingly.
2003-02-04 14:07:08 +00:00
Sheldon Hearn
ac224686f9 Do not create missing DB hints files for read-only operations on them;
simply fail the lookup.

This prevents Exim from creating hints files that it can't use when
its DBM method is DB 1.85 (the default).

Obtained from:	author
2003-01-21 10:23:37 +00:00
Sheldon Hearn
d9b85a2948 Update 4.10 -> 4.12:
For Exim, this includes an enormous number of fixes.  Most of these are
for esoteric configurations, although if you're bitten by them, you're
bitten hard.

The fixes also include closing up a buffer overflow that is not believed
to be exploitable, and a format string vulnerability that was only
exploitable by an Exim admin user, but then provided root access.

For Eximon, this just rationalizes a patch we carried locally for ages.
2003-01-08 13:33:30 +00:00
Sheldon Hearn
3cb4389a77 Mention mail/p5-Mail-SpamAssassin and security/vscan.
Requested by:	Tony Finch <dot@dotat.at>
2002-09-19 15:31:03 +00:00
Sheldon Hearn
fbf344f4b7 Enable exiscan content scanning unless the new knob WITHOUT_EXISCAN
is defined.

Bump PORTREVISION accordingly.
2002-09-19 12:14:28 +00:00
Sheldon Hearn
42a82d8004 Enable IPV6 unless WITHOUT_IPV6 is defined. 2002-09-16 09:35:40 +00:00
Sheldon Hearn
2aef9eacfa Fix LDAP lookup type selection.
Reported by:	Adam Doligalski <adam.doligalski@atm.com.pl>
2002-09-16 09:26:17 +00:00
Sheldon Hearn
71de2357c8 I agree with the Exim community that the exim-4.xx has reached production
quality.

Move exim to exim-old for folks who need exim-3.xx, because the
configuration file for exim-4.xx is not backward compatible.  Move
exim-devel to exim, removing NO_LATEST_LINK:

        repo-copy       exim            -> exim-old
        copy over       exim-devel      -> exim
        retire          exim-devel

Slave ports are intended for use with the exim port, as before, so they
now build and install for exim-4.xx.
2002-09-12 10:09:02 +00:00
Sheldon Hearn
f14203f336 Revert rev 1.109 of Makefile. Given the likelihood of future changes
in the configuration affecting the base system's MTA, the management
of multiple POST-INSTALL-NOTES files could easily become a nightmare.

Instead, use a single POST-INSTALL-NOTES file that includes instructions
that, at worst, suggest unnecessary but harmless changes.

While here, use bullets instead of a numbered list for the notes, so
that future deltas are easier to read.

Also, mention the 'daily_status_include_submit_mailq' periodic.conf(5)
knob, as reported in PR ports/38925.

PR:		ports/38925
Submitted by:	Pat Lashley <patl+freebsd@phoenix.volant.org>
2002-06-18 09:43:05 +00:00
Sheldon Hearn
478dd1d8f4 Update to exim-3.36:
* Incorporates some patches.

* Fix pretty obscure queue handling bug.

* Update exim-4 spool file format forward-compatibility.
2002-04-18 12:20:20 +00:00
Sheldon Hearn
c0c117ad27 Gracefully handle NULLs in the message body as exposed to filters,
by replacing them with spaces.

This is a vendor-sanctioned patch, obtained from the exim-users
mailing list.
2002-04-03 16:11:21 +00:00
Sheldon Hearn
9f1ab5925c Cope with -CURRENT's new tri-state sendmail_enable rc.conf(5) variable
by using an rc.d script to launch Exim, as was done before I took over
this port.

This seems to be the most popular approach, and is arguably the
simplest.  Folks like me who attach some aesthetic value to using rc(8)
and mailer.conf(8) to launch Exim at startup time should know enough to
blow away the rc.d script and do things any way they please.

For now, use two versions of the POST-INSTALL-NOTES, the only
difference being that the one given to -CURRENT users suggests setting
sendmail_enable to 'NONE', while the one for -STABLE users suggests
'NO'.
2002-04-03 15:52:32 +00:00
Sheldon Hearn
4a765861a7 Fix the build in the WITH_PGSQL=yes case.
When the databases/postgresql7 port was updated from postgresql-7.1.x to
postgresql-7.2, libpq-fe.h moved from PREFIX/include/pgsql to
PREFIX/include for reasons I can't figure out.

This applies a band-aid until I can get clarification from the postgresql
port maintainer <girgen@partitur.se>, but I think the port might be
"broken" in its placement of some header files.

Reported by:	kris
2002-04-02 11:40:49 +00:00
Sheldon Hearn
aec0f27d5c Include my preferred work-around, which is to add the library paths
of problem packages to ldconfig_paths in rc.conf(5).
2002-02-25 12:58:20 +00:00
Sheldon Hearn
2515226235 Cope with the fact that at least one 3rd-party package against which
Exim may be linked (MySQL) uses a startup script to add its library
path to the linker hints.

Explain the problem in POST-INSTALL-NOTES and provide a sample
startup script.

I think such packages should do away with the script and provide
POST-INSTALL-NOTES that encourage the operator to add the library
path to ldconfig_paths in /etc/rc.conf, but provide this work-around
anyway.

Reported by:	Oliver Brandmueller <ob@e-Gitt.NET>
2002-02-25 12:51:33 +00:00
Sheldon Hearn
1fc4705744 Expand on the existing documentation regarding TLS and certificates,
adding information important to operators of SMTP services used
by a number of Windows (and probably Unix) MUA packages.

This text has been approved by the author and will be included in
the next release of exim-4.  Another release of exim-3.3x is not
expected.

This change is based on an explanation of SSL certificates attributed
below, but was not a direct submission.  Errors are my own, etc.

Submitted by:	terry
Message-Id:	<3C3F3A93.C1ECF9B0@mindspring.com>
2002-01-15 15:58:59 +00:00
Sheldon Hearn
f42b7494ff Update to exim-3.34:
* Mostly incorporates patches already carried by the port.

* Fixes a vulnerability in pipe handling, which was not exposed
  by the default configuration, but which could have been exposed
  if the configuration were altered appropriately.
2002-01-07 12:06:08 +00:00
Sheldon Hearn
08ec4ac52d Build Exim with compile-time defaults for exim_user and exim_group.
Use the newly added mailnull user, and the now well-established group
mail.

The use of compile-time defaults for these values is not required for
many sites, but are important for more exotic applications.

This ensures that the packages are useful to the widest audience
possible.
2001-12-14 11:47:28 +00:00
Sheldon Hearn
06b84adc7d Build Exim with compile-time defaults for exim_user and exim_group.
Use the newly added mailnull user, and the now well-established group
mail.

The use of compile-time defaults for these values is not required for
many sites, but are important for more exotic applications.

This ensures that the packages are useful to the widest audience
possible.
2001-12-11 12:34:54 +00:00
Sheldon Hearn
a2c2418b51 Stop people complaining about the absence of plain text versions of
the documentation by installing them.

Update the post-install notes to reflect the presence of the new
exim-doc-* ports for alternative documentation formats.

Bump PORTREVISION.
2001-11-30 14:31:11 +00:00
Sheldon Hearn
983ef9b69a Add the author's patch to fix bad handling of a disk space shortage
on pipeline input.

Bump PORTREVISION to reflect the change.

Obtained from: exim-users@exim.org

Message-Id: <Pine.SOL.4.33.0111131315260.9828-100000@virgo.cus.cam.ac.uk>
2001-11-14 11:25:42 +00:00
Sheldon Hearn
34323bd7e0 Add the author's patch to fix a failure to reap children on BSD systems,
where SIG_IGN as the signal handler for SIGCHLD is bad.  This is only
an issue when a significant number of messages is received via pipe
(e.g. with -bS) at a faster rate than they can be dealt with by parallel
delivery agents (e.g. -odqs).

Bump PORTREVISION to reflect the change.

Obtained from: exim-users@exim.org
Message-Id: Pine.SOL.4.33.0111021349170.19636-100000@virgo.cus.cam.ac.uk
2001-11-02 17:11:14 +00:00
Sheldon Hearn
312a1adc00 Add the author's patch to fix broken handling of queue_list_requires_admin
and the -bpc flag.

Bump PORTREVISION to reflect the change.

Obtained from: exim-users@exim.org
Message-Id: Pine.SOL.4.33.0110301326040.24148-100000@virgo.cus.cam.ac.uk
2001-11-02 10:24:52 +00:00
Sheldon Hearn
27a23416c4 Fix the message_body_size filter variable bug reported by Phil Chambers
to the exim-users mailing list on 2001-09-19 using the patch posted to
the list by the author on 2001-09-24.

Bump PORTREVISION accordingly.
2001-09-26 16:31:19 +00:00
Sheldon Hearn
e19aceb0b2 * Drop deprecated USE_PERL5.
* Move the contents of pkg-message into POST-INSTALL-NOTES, which
  gets installed in the !NOPORTDOCS case for future reference.

* Refer to POST-INSTALL-NOTES from pkg-message in the !NOPORTDOCS
  case.  In the NOPORTDOCS case, use POST-INSTALL-NOTES as the
  pkg-message.
2001-09-11 11:06:54 +00:00
Sheldon Hearn
d52469e050 * Break eximon into its own port. The goal is to allow administrators
to install and use Exim from the packages without having to install
  XFree86.

* Remove a stale SEDLIST entry for BINOWN handling.

* Use LOCALBASE instead of PREFIX when referring to already installed
  software.

* Use more strict pattern matching in SEDLIST.

Folks who want eximon (the Exim monitor) must now either build exim
or one of its slave ports with WITH_EXIMON defined or install the
standalone exim-monitor package.
2001-08-27 13:23:52 +00:00
Sheldon Hearn
cc0d7abdce Update to exim-3.32:
Incorporates the fixes for non-mapped IPv6 listening sockets.

Fixes unclosed MySQL connection bug in delivery subprocesses.

Better RFC compliance with respect to Resent-Subject and
Resent-Reply-To.

Fix handling of unset hostname for OpenLDAP2.

Drop an unclosed connection if more than 5 uncrecognized commands are
received.

Handle \t in fail messages properly.
2001-07-30 10:03:31 +00:00
Sheldon Hearn
d53990a96f Apply the author's fix for socket binding in the case where
net.inet6.ip6.v6only is set.  This sysctl disables AF_INET6 wildcard
listeners from accepting IPv4 traffic.
2001-07-16 09:12:55 +00:00
Sheldon Hearn
30e56f6fb6 Too many people have complained about my choice of MTA user (sendmail).
Bite the bullet _now_ and use MTA user exim instead.  This means that
only early adopters of Exim-3.31 are affected, rather than lots more
folks further down the line.

I still think mailnull is better, but nobody in the Exim community
agrees with me. :-)

Bump PORTREVISION as appropriate.
2001-07-11 11:22:32 +00:00
Sheldon Hearn
3b52a48f9e Fix the IPv6 bind() call properly. The author didn't spot the flaw
in my patch when I initially submitted it.  This is his fully tested
version.
2001-07-11 11:04:01 +00:00
Sheldon Hearn
e1d536bdb8 Make the purpose of WITHOUT_X11 clearer, based on feedback from several
users.

Fix the call to bind() in daemon.c so that the correct addrlen is
passed for a IPv4 or IPv6 struct sockaddr.  This fixes the problem
where an exim binary compiled for IPv6 support won't bind() to any IPv4
addresses.  The author approves of this patch.

Now that exim+ipv6 works for non-ipv6 FreeBSD hosts, make IPv6 support
default and provide a WITHOUT_IPV6 knob for folks who don't want it.

Turn on WITHOUT_IPV6 for pre-KAME systems, to give RELENG_3 folks a
fighting chance.
2001-07-10 10:47:29 +00:00
Sheldon Hearn
1734dc1d1b Update to exim-3.31:
* Incorporates two patches previously supplied with the port.

* Fixes obscure bug affecting return_path transport option under certain
  conditions.
2001-07-02 14:48:10 +00:00