At 16.15 15/06/2006, you wrote:
tonix (Antonio Nati) wrote:
Cut away all these lines:


....

and put the following code:


/* start chkuser
code */
  switch (chkuser_realrcpt (&mailfrom, &addr)) {
    case CHKUSER_KO:
      return;
      break;
    case CHKUSER_RELAYING:
      --addr.len;
      if (!stralloc_cats(&addr,relayclient))
die_nomem();
      if (!stralloc_0(&addr)) die_nomem();
      break;
}
/* end chkuser code */

Ciao,

Tonino


Thanks, Tonino.
But isn't that snippet needed for the TLS-support?

If you are using specific certificates on client side you probably need it, otherwise it is completely unuseful.


I must admit that I'm not familiar with the code here - according to a .spec-file, this is a qmail that is patched with:
errno.h fix
qmail-0.0.0.0 patch
qmail local patch
qmail-smtpd-auth-close3 patch
big concurrency patch
qregex patch
qmail-queue patch
mfcheck patch
tarpit patch
oversize dns patch
maildir quota patch
smtp-auth patch
tls patch
qmail smtpd viruscan patch

Probably you can save a lot of work if you use Shupp's toaster, that includes the most of those patch (more chkuser), and after you can add what you lack.

Also, the current qmail-smtpd seems to be linked to libssl, too.
(And the spec-file also says:
%define         ccflags %{optflags} -DTLS -I/usr/kerberos/include)

Do you think there is a problem?

No problem.

Ciao,

Tonino





Best Regards,
Rainer

Reply via email to