portable build failure

[Luis]

Hi,

I've cloned the opensmtpd git repository and after checking out the
portable branch, I've got a build error (Debian system):

../../openbsd-compat/err.h:25:19: note: in definition of macro b
   fprintf(stderr, format \n, ## args)
   ^
../../openbsd-compat/err.h:16:3: note: in expansion of macro b
   errx(exitcode, format : %s, ## args, strerror(errno))
   ^
../../smtpd/delivery_lmtp.c:207:8: note: in expansion of macro b
err(1, NULL);
^
../../openbsd-compat/err.h:16:25: warning: null argument where non-null 
required (argument 2) [-Wnonnull]
   errx(exitcode, format : %s, ## args, strerror(errno))
 ^
../../openbsd-compat/err.h:25:19: note: in definition of macro b
   fprintf(stderr, format \n, ## args)
   ^
../../openbsd-compat/err.h:16:3: note: in expansion of macro b
   errx(exitcode, format : %s, ## args, strerror(errno))
   ^
../../smtpd/delivery_lmtp.c:207:8: note: in expansion of macro b
err(1, NULL);
^


If i revert the following commits I am able to build again:

5401ab7332ae include err.h if there's no err.h on the system
178e3f54f58d add openbsd-compat/err.h from 
https://raw.githubusercontent.com/libressl-portable/portable/master/include/err.h

Are these commits really necessary?

Cheers,
--
Luis

-- 
You received this mail because you are subscribed to misc@opensmtpd.org
To unsubscribe, send a mail to: misc+unsubscr...@opensmtpd.org

Invalid recipient

[Luis Mendes]

Hi list,

 

This is the first time I try to set up an in-house email solution, so there are many concepts that are not clear to me, at least yet.  I need some help with this configuration.  DKIM and anti-spam measures are not yet considered, just the basics.

 

What I need:

- The MTA to send emails from 'myhost' domain to the world, using TLS with authentication  (it's working)

- Being able to receive email for some accounts:  comerc...@myhost.pt, ad...@myhost.pt, others later  (not working)

- systems mails to be delivered to mbox as usual in unix like systems.

 

The OS is a FreeBSD 10.2 and OpenSMTPD version 5.7.3p1.  OpenSMTPD is running in a jail with IP 192.168.0.8.

 

The error message I get everytime I try to send an email for one of the above mentioned emails:

 >>> 550 Invalid recipient
smtp-in: session 99934343 received invalid command: "RCPT TO:"

(the complete log is below)

 



My configuration:

Files used:

# ls
creds   mailname    recipients  smtpd.conf  vdomains    vusers

 

# cat smtpd.conf | grep -v '^#' | grep -v '^ *$'
pki myhost.pt certificate "/usr/local/etc/ssl/myhost_wosign_apache.crt"
pki myhost.pt key "/usr/local/etc/ssl/private/myhost_wosign_apache.key"
table aliases file:/etc/mail/aliases
table vusers file:/usr/local/etc/mail/vusers
table vdomains file:/usr/local/etc/mail/vdomains
table creds file:/usr/local/etc/mail/creds
table recipients file:/usr/local/etc/mail/recipients
listen on 192.168.0.8 port smtp tls pki myhost.pt auth-optional
listen on 192.168.0.8 port submission tls-require pki myhost.pt auth 
accept for local alias  deliver to mbox
accept for domain  deliver to maildir
accept from local for any relay

 

The /etc/mail/aliases is unchanged.

 

# cat vusers
comerc...@myhost.pt comerc...@myhost.pt

 

# cat vdomains
myhost.pt
*.myhost.pt

 

# cat creds

comerc...@myhost.pt    $6$Gp2XcD

 

# cat recipients
ad...@myhost.pt
comerc...@myhost.pt



What is wrong with this?

 

About the line "listen on 192.168.0.8 port smtp tls pki myhost.pt auth-optional" 

Does this mean that other servers can relay an email to my MTA through port 25 with no auth required?  And that if I want to use port 25 to send emails, I'll have to authenticate and use tls?

Is both incoming and outgoing configuration specified in the same line?   Seems a bit confusing to me.

 

=

The complete log of the transaction when an email is sent to comerc...@myhost.pt:

 # cat log.txt
debug: smtp: new client on listener: 0x8028e4000
smtp: 0x802947000: connected to listener 0x8028e4000 [hostname=myhost.pt, port=25, tag=]
smtp: 0x802947000: STATE_NEW -> STATE_CONNECTED
smtp-in: session 922ed1201668f9c2: connection from host mail-ig0-f178.google.com [209.85.213.178] established
smtp: 0x802947000: >>> 220 myhost.pt ESMTP OpenSMTPD
smtp: 0x802947000: <<< EHLO mail-ig0-f178.google.com
smtp: 0x802947000: STATE_CONNECTED -> STATE_HELO
smtp: 0x802947000: >>> 250-myhost.pt Hello mail-ig0-f178.google.com [209.85.213.178], pleased to meet you
smtp: 0x802947000: >>> 250-8BITMIME
smtp: 0x802947000: >>> 250-ENHANCEDSTATUSCODES
smtp: 0x802947000: >>> 250-SIZE 36700160
smtp: 0x802947000: >>> 250-DSN
smtp: 0x802947000: >>> 250-STARTTLS
smtp: 0x802947000: >>> 250 HELP
smtp: 0x802947000: <<< STARTTLS
smtp: 0x802947000: >>> 220 2.0.0: Ready to start TLS
smtp: 0x802947000: STATE_HELO -> STATE_TLS
debug: lka: looking up pki "myhost.pt"
debug: session_start_ssl: switching to SSL


debug: pony: rsae_priv_enc   [4/1812]
debug: pony: rsae_init
debug: pony: rsae_init
debug: pony: rsae_pub_dec
debug: pony: rsae_bn_mod_exp
debug: pony: rsae_init
debug: pony: rsae_pub_dec
debug: pony: rsae_bn_mod_exp
debug: pony: rsae_pub_dec
debug: pony: rsae_bn_mod_exp
smtp-in: session 922ed1201668f9c2: TLS started version=TLSv1/SSLv3 (TLSv1.2), cipher=ECDHE-RSA-AES128-GCM-SHA256, bits=128
debug: certificate 0: len=1156
debug: certificate chain len: 2
debug: certificate 1: len=1012
debug: certificate 2: len=897
smtp-in: session 922ed1201668f9c2: client certificate verification succeeded
smtp: 0x802947000: STATE_TLS -> STATE_HELO
smtp: 0x802947000: <<< EHLO mail-ig0-f178.google.com
smtp: 0x802947000: STATE_HELO -> STATE_HELO
smtp: 0x802947000: >>> 250-myhost.pt Hello mail-ig0-f178.google.com [209.85.213.178], pleased to meet you
smtp: 0x802947000: >>> 250-8BITMIME
smtp: 0x802947000: >>> 250-ENHANCEDSTATUSCODES
smtp: 0x802947000: >>> 250-SIZE 36700160
smtp: 0x802947000: >>> 250-DSN
smtp: 0x802947000: >>> 250-AUTH PLAIN LOGIN
smtp: 0x802947000: >>> 250 HELP
smtp: 0x802947000: <<< MAIL FROM: SIZE=2323
debug: smtp: SIZE in MAIL FROM command
smtp: 0x802947000: >>> 250 2.0.0: Ok
smtp: 0x802947000: <<< RCPT TO:
smtp: 0x802947000: >>> 550 Invalid recipient
smtp-in: