Rajesh,
Do you want to go through the patch procedure our simply use the RPM
I've provided at the below link? It would be a simple matter of doing a
'yum --enablerepo=qmt-testing update' if you have the QMT repos set up
for YUM. I've already installed this on my CentOS 6 box.
You could also download the SRPM
<ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/6/testing/SRPMS/qmail-1.03-1.qt.src.rpm>
and build it on your own machine. Commands are as follows provided you
have a build environment:
# cd ~/rpmbuild/SRPMS
# wget
ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/6/testing/SRPMS/qmail-1.03-1.qt.src.rpm
# rpmbuild --rebuild --define "dist .qt.el6" qmail-1.03-1.qt.src.rpm
# rpm -Uvh ~/rpmbuild/RPMS/x86_64/qmail-1.03-1.qt.el6.x86_64.rpm
Eric
On 4/20/2017 10:16 PM, Rajesh M wrote:
eric
thanks a lot
yes i am running qmailtoaster on centos6
now the next question is how do i patch ?
would need detailed steps please so that i don't go wrong anywhere
regds
rajesh
----- Original Message -----
From: Eric Broch [mailto:[email protected]]
To: [email protected]
Sent: Thu, 20 Apr 2017 09:27:25 -0600
Subject:
Hi Rajesh,
I think you're still running QMT/CentOS 6, correct?
If so, I've uploaded a qmail update
<ftp://ftp.qmailtoaster.com/pub/repo/qmt/CentOS/6/testing/x86_64/qmail-1.03-1.qt.el6.x86_64.rpm>
to the QMT/CentOS 6 repository that incorporates the DNS patch you
referenced (any-to-cname.patch) and the starttls flush io patch
<http://www.kb.cert.org/vuls/id/555316> which I've been derelict in
implementing.
It has not been tested. If you do install it and something goes wrong,
it most likely won't, you can always downgrade which I've been doing
regularly with success (of late) on CentOS 7 with qmail while testing
other patches. Be mindful that I haven't downgraded on CentOS 6
The patch (below) has relatively minor, yet very helpful, coding changes.
Eric
<patch>
diff -uNr qmtqmail-1.03/dns.c qmtqmail-1.03-new/dns.c
--- qmtqmail-1.03/dns.c 2017-04-20 08:54:53.142832827 -0600
+++ qmtqmail-1.03-new/dns.c 2017-04-20 08:59:46.309633810 -0600
@@ -256,7 +256,7 @@
if (!sa->len) return loop;
if (sa->s[sa->len - 1] == ']') return loop;
if (sa->s[sa->len - 1] == '.') { --sa->len; continue; }
- switch(resolve(sa,T_ANY))
+ switch(resolve(sa,T_CNAME))
{
case DNS_MEM: return DNS_MEM;
case DNS_SOFT: return DNS_SOFT;
diff -uNr qmtqmail-1.03/qmail-smtpd.c qmtqmail-1.03-new/qmail-smtpd.c
--- qmtqmail-1.03/qmail-smtpd.c 2017-04-20 08:54:52.848840048 -0600
+++ qmtqmail-1.03-new/qmail-smtpd.c 2017-04-20 08:58:23.299671749 -0600
@@ -723,7 +723,9 @@
char ssinbuf[1024];
substdio ssin = SUBSTDIO_FDBUF(saferead,0,ssinbuf,sizeof ssinbuf);
-
+#ifdef TLS
+void flush_io() { ssin.p = 0; flush(); }
+#endif
stralloc line = {0};
stralloc base64types = {0};
@@ -1398,7 +1400,7 @@
, { "rset", smtp_rset, 0 }
, { "help", smtp_help, flush }
#ifdef TLS
-, { "starttls", smtp_tls, flush }
+, { "starttls", smtp_tls, flush_io }
#endif
, { "noop", err_noop, flush }
, { "vrfy", err_vrfy, flush }
</patch>
On 4/20/2017 1:12 AM, Rajesh M wrote:
hi eric
we are receiving a lot of cname lookup failed.
this happens on a random basis on all our qmailtoaster servers.
our resolv.conf contains
127.0.0.1
8.8.8.8
8.8.4.4
we use bind locally within the mail server and google's dns which is also set
as cache records and allow lookups from local ips only.
Had a quick question
there are supposedly two different patches.
https://www.mail-archive.com/[email protected]/msg35981.html
is qmailtoaster on whitehorse patched with both these two patches related to
dns.?
DNS-related Patches by Jonathan de Boyne Pollard
http://www.memoryhole.net/qmail/any-to-cname.patch
thanks
rajesh
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
--
Eric Broch, IMSO, DAM, NGOO, DITH, URTS
White Horse Technical Consulting (WHTC)
