void
spf_fini(void)
{
SPF_server_free(spf_server);
return;
}
CAMLprim value
caml_spf_server_free(value server_val)
{
CAMLparam1(server_val);
SPF_server_t *server = (SPF_server_t *)server_val;
SPF_server_free(server);
CAMLreturn(Val_unit);
}
/* the cleanup routine */
int
cleanup_spfc(void *state)
{
SPF_server_t *spf_server;
spf_server = (SPF_server_t *) state;
if (spf_server)
SPF_server_free(spf_server);
return 0;
}
static VALUE
t_query (VALUE self, VALUE map)
{
int retcode = SPF_RESULT_PASS;
SPF_server_t *spf_server = NULL;
SPF_request_t *spf_request = NULL;
SPF_response_t *spf_response = NULL;
SPF_response_t *spf_response_2mx = NULL;
char * ip = STR2CSTR (rb_hash_aref (map,rb_str_new2 ("client_address")));
char * helo = STR2CSTR (rb_hash_aref (map,rb_str_new2 ("helo_name")));
char * sender = STR2CSTR (rb_hash_aref (map,rb_str_new2 ("sender")));
char * recipient = STR2CSTR (rb_hash_aref (map,rb_str_new2 ("recipient")));
spf_server = SPF_server_new (SPF_DNS_CACHE, 0);
if (spf_server == NULL) rb_raise (rb_eRuntimeError, "can't initialize SPF library");
spf_request = SPF_request_new (spf_server);
if (SPF_request_set_ipv4_str (spf_request, ip)) rb_raise (rb_eTypeError, "error, invalid IP address");
if (SPF_request_set_helo_dom (spf_request, helo)) rb_raise (rb_eTypeError, "error, invalid helo domain");
if (SPF_request_set_env_from (spf_request, sender)) rb_raise (rb_eTypeError, "error, invalid envelope from address");
SPF_request_query_mailfrom (spf_request, &spf_response);
if (SPF_response_result (spf_response) != SPF_RESULT_PASS)
{
SPF_request_query_rcptto (spf_request, &spf_response_2mx, recipient);
if (SPF_response_result (spf_response_2mx) == SPF_RESULT_PASS)
{
return INT2NUM(SPF_RESULT_PASS);
}
retcode = SPF_response_result (spf_response);
}
SPF_server_free(spf_server);
return INT2NUM(retcode);
}
int main()
{
int spf;
char *me, *remote, *helo, *sender, *spf_env;
const char *header;
SPF_server_t *spf_server;
SPF_request_t *spf_request;
SPF_response_t *spf_response;
/**
* env variables
**/
if (getenv("RELAYCLIENT") || /* known user */
!(spf_env = getenv("SPF"))) return 0; /* plugin disabled */
spf = atoi(spf_env);
if (spf < 1 || spf > 6) {
if (spf > 6)
fprintf(stderr, "spf: ERROR: invalid value (%d) of SPF variable\n", spf);
return 0;
}
remote = getenv("TCPREMOTEIP");
me = getenv("TCPLOCALHOST");
if (!me) me = getenv("TCPLOCALIP");
if (!remote || !me) { /* should never happen */
fprintf(stderr, "spf: ERROR: can't get tcpserver variables\n");
if(!remote) fprintf(stderr, "spf: can't read TCPREMOTEIP\n");
else fprintf(stderr, "spf: can't read TCPLOCALHOST nor TCPLOCALIP\n");
return 0;
}
sender = getenv("SMTPMAILFROM");
if (!sender) { /* should never happen */
fprintf(stderr, "spf: ERROR: can't get envelope sender address\n");
fprintf(stderr, "spf: can't read SMTPMAILFROM\n");
return 0;
}
if (!*sender) return 0; /* null sender mail */
helo = getenv("SMTPHELOHOST");
/**
* SPF
**/
spf_server = SPF_server_new(SPF_DNS_CACHE, 0);
if (!spf_server) {
fprintf(stderr, "spf: ERROR: can't initialize libspf2\n");
return 0;
}
spf_request = SPF_request_new(spf_server);
if (!spf_request) {
fprintf(stderr, "spf: ERROR: can't initialize libspf2\n");
return 0;
}
if (SPF_request_set_ipv4_str(spf_request, remote)) {
fprintf(stderr, "spf: can't parse TCPREMOTEIP\n");
return 0;
}
SPF_server_set_rec_dom(spf_server, me);
if (helo) SPF_request_set_helo_dom(spf_request, helo);
SPF_request_set_env_from(spf_request, sender);
/* Perform actual lookup */
SPF_request_query_mailfrom(spf_request, &spf_response);
/* check whether mail needn`t to be blocked */
switch (SPF_response_result(spf_response)) {
case SPF_RESULT_PASS: break;
case SPF_RESULT_FAIL: if (spf > 0) { block(spf_response); return 0; } break;
case SPF_RESULT_SOFTFAIL: if (spf > 1) { block(spf_response); return 0; } break;
case SPF_RESULT_NEUTRAL: if (spf > 2) { block(spf_response); return 0; } break;
case SPF_RESULT_NONE: if (spf > 3) { block(spf_response); return 0; } break;
case SPF_RESULT_TEMPERROR:
case SPF_RESULT_PERMERROR: if (spf > 4) { block(spf_response); return 0; } break;
#if 0
case SPF_RESULT_UNKNOWN: if (spf > 5) { block(spf_response); return 0; } break;
case SPF_RESULT_UNMECH: break;
#else
// FIXME: UNKNOWN and UNMECH above map how?
// INVALID should not ever occur, it indicates a bug.
case SPF_RESULT_INVALID: if (spf > 5) { block(spf_response); return 0; } break;
#endif
}
/* add header */
header = SPF_response_get_received_spf(spf_response);
if (header)
printf("H%s\n", header);
else {
fprintf(stderr, "spf: libspf2 library failed to produce Received-SPF header\n",
SPF_strerror(SPF_response_errcode(spf_response)));
/* Example taken from libspf2: */
/*
fprintf ( stderr, "spf: diag: result = %s (%d)\n",
SPF_strresult(SPF_response_result(spf_response)),
SPF_response_result(spf_response));
fprintf ( stderr, "spf: diag: err = %s (%d)\n",
SPF_strerror(SPF_response_errcode(spf_response)),
SPF_response_errcode(spf_response));
for (i = 0; i < SPF_response_messages(spf_response); i++) {
SPF_error_t *err = SPF_response_message(spf_response, i);
fprintf ( stderr, "spf: diag: %s_msg = (%d) %s\n",
(SPF_error_errorp(err) ? "warn" : "err"),
SPF_error_code(err),
SPF_error_message(err));
}
*/
}
SPF_response_free(spf_response);
SPF_request_free(spf_request);
SPF_server_free(spf_server);
return 0;
}
int main(int argc, char* argv[])
{
const char* configfile = DEFAULT_CONFIG;
const char* pidfile = NULL;
int dbg_level = -1;
int ch = 0;
int r;
char* t;
#ifndef HAVE___ARGV
__argv = argv;
#endif
/* Setup some defaults */
sp_init("light_email_filter");
/*
* We still accept our old arguments for compatibility reasons.
* We fill them into the spstate structure directly
*/
/* Parse the arguments nicely */
while((ch = getopt(argc, argv, "d:f:p:v")) != -1)
{
switch(ch)
{
/* Don't daemonize */
case 'd':
dbg_level = strtol(optarg, &t, 10);
if(*t) /* parse error */
errx(1, "invalid debug log level");
dbg_level += LOG_ERR;
break;
/* The configuration file */
case 'f':
configfile = optarg;
break;
/* Write out a pid file */
case 'p':
pidfile = optarg;
break;
/* Print version number */
case 'v':
printf("light_email_filter (version %s)\n", VERSION);
printf(" (config: %s)\n", DEFAULT_CONFIG);
exit(0);
break;
/* Usage information */
case '?':
default:
usage();
break;
}
}
argc -= optind;
argv += optind;
if(argc > 0)
usage();
r = sp_run(configfile, pidfile, dbg_level);
sp_done();
if(spf_server != NULL)
SPF_server_free(spf_server);
return r;
}
