• sendmail snapshot 8.18.0.9

    From Claus =?iso-8859-1?Q?A=DFmann?= @21:1/5 to All on Thu Jan 25 04:51:07 2024
    sendmail snapshot 8.18.0.9 is available for testing. It offers new srv_features options 'u2' and 'g2' which instruct the server to
    replace offending bare CR or bare LF with a space. This allows mails
    from broken clients instead of rejecting them, but without the risk
    of enabling "SMTP smuggling".

    SHA256 (sendmail.8.18.0.9.tar.gz) = 01a483f54479deef2ea8150ae8c10f126d639d1613bde73681fe0aafbe8e65d7
    SHA256 (sendmail.8.18.0.9.tar.gz.sig) = b1f5b79b7b8757a72d10c49ae641062f7337a5f684dd82f26809f963fe0d7ac1

    Available at:
    https://ftp.sendmail.org/snapshots/sendmail.8.18.0.9.tar.gz https://ftp.sendmail.org/snapshots/sendmail.8.18.0.9.tar.gz.sig

    --
    Note: please read the netiquette before posting. I will almost never
    reply to top-postings which include a full copy of the previous
    article(s) at the end because it's annoying, shows that the poster
    is too lazy to trim his article, and it's wasting the time of all readers.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andreas S. Kerber@21:1/5 to @esmtp.org on Sat Jan 27 10:07:47 2024
    Claus Aßmann <INVALID_NO_CC_REMOVE_IF_YOU_DO_NOT_POST_ml+sendmail(-no-copies-please)@esmtp.org> wrote:
    sendmail snapshot 8.18.0.9 is available for testing. It offers new srv_features options 'u2' and 'g2' which instruct the server to
    replace offending bare CR or bare LF with a space. This allows mails

    That seems to fine, thanks!
    The logging entry "collect: connection from localhost" seems a little confusing ("localhost"). Maybe a bug?


    Jan 27 09:09:37 frontend6 sendmail[4131621]: 40R89a9f4131621: from=<noreply@ruv.de>, size=1541, class=0, nrcpts=1, msgid=<156ec9$4440f1@unknown domain>, proto=ESMTPS, daemon=MTA-v4, relay=mail101.ruv.de [91.235.236.17]
    Jan 27 09:09:37 frontend6 sendmail[4131621]: 40R89a9f4131621: collect: connection from localhost, from=<noreply@ruv.de>, info=Bare linefeed (LF) not allowed, where=header, stat=replaced

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Claus =?iso-8859-1?Q?A=DFmann?= @21:1/5 to Andreas S. Kerber on Sat Jan 27 11:39:41 2024
    Andreas S. Kerber wrote:

    The logging entry "collect: connection from localhost" seems a little confusing ("localhost"). Maybe a bug?

    Yes, thanks for reporting that.
    Here's a patch:
    ------------------------------------------------------------
    diff --git a/sendmail/collect.c b/sendmail/collect.c
    --- a/sendmail/collect.c
    +++ b/sendmail/collect.c
    @@ -939,7 +939,7 @@ readdone:
    else
    problem = "read timeout";

    -#define LOG_CLT ((NULL == RealHostName) ? RealHostName: "localhost")
    +#define LOG_CLT ((NULL != RealHostName) ? RealHostName: "localhost")
    #define CONN_ERR_TXT "collect: %s on connection from %s, from=%s%s%s%s%s"
    #define CONN_ERR_CODE "421 4.4.1 "
    #define CONN_LOG_FROM shortenstring(e->e_from.q_paddr, MAXSHORTSTR)

    ------------------------------------------------------------

    and a patch for a regression introduced in 8.18.0.9: ------------------------------------------------------------
    diff --git a/sendmail/srvrsmtp.c b/sendmail/srvrsmtp.c
    --- a/sendmail/srvrsmtp.c
    +++ b/sendmail/srvrsmtp.c
    @@ -5674,7 +5674,7 @@ static struct
    #endif
    { 'J', SRV_BARE_CR_SP , 0 },
    /* { 'K', 0 , 0 }, */
    -/* { 'L', 0 , 0 }, */
    + { 'L', SRV_REQ_AUTH , 0 },
    #if PIPELINING && _FFR_NO_PIPE
    { 'N', SRV_NO_PIPE , 0 },
    #endif
    -------------------------------------------------------