Re: The qmail security guarantee

[thomas . erskine-dated-c692b88d2b28e337]

On 24 Dec 1998, D. J. Bernstein wrote:

> Scott Schwartz writes:
> > I've already explained what I want, if you'll recall.
> 
> Sorry, I don't recall. What exactly do you want to see in the log?

OK.  I'll give my answer simply: errors.

To be more explicit:
- whenever qmail-smtpd has a problem:
        die_ipme: "421 unable to figure out my IP addresses"
        die_control: "421 unable to read controls"
        die_nomem: "421 out of memory"
        die_alarm: "451 timeout"
        die_read: don't know what the error message should be
        err_bmf: "553 sorry, your envelope sender is in my..."
        err_nogateway: "553 sorry, that domain isn't in my ..."
        err_unimpl: "502 unimplemented"
        err_syntax: "555 syntax error"
        err_qqt: "451 qqt failure"
        smtp_data: "554 too many hops, this message ..."
        smtp_data: "552 sorry, that message size exceeds..."

[ This info really needs to get logged locally, so that we can see, 
  quickly, where we've mis-configured or are have a resource problem. ]

- the connection info, say taken from received(): 
        remoteip, remotehost, remoteinfo

[ I think that this should probably be logged by tcpserver...  
  Well, whaddya know?  It is logged by tcpserver with -v.  I take back this 
  request. :-)  Thank-you Dan for asking the question; -v looks useful. ]

I can code it if you want.  I'm sure that there will be lots of volunteers
to do it if you suggest that you'd like to see someone else's version. :-)

> I have asked you this question far too many times now, Scott, without
> seeing you answer it. This is your last chance.
> 
> (Other people are of course free to send me their answers too---I've
> already received a few suggestions.)
> 
> ---Dan
> 

-- 
"Life is much too important to be taken seriously."
Thomas Erskine        <[EMAIL PROTECTED]>        (613) 998-2836