OpenSMTPD is a FREE implementation of the server-side SMTP protocol as
defined by RFC 5321, with some additional standard extensions. It
allows ordinary machines to exchange e-mails with other systems
speaking the SMTP protocol.
===> The following configuration options are available for opensmtpd-7.8.0,1:
MAILERCONF=off: Activate OpenSMTPD in mailer.conf(5)
PAM=on: Pluggable authentication module support
TABLE_DB=on: Build table-db plugin (aliases)
===> Use 'make config' to modify these settings
Remove WWW entries moved into port Makefiles
Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.
This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.
Approved by: portmgr (tcberner)
Add WWW entries to port Makefiles
It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.
Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.
There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.
(Only the first 15 lines of the commit message are shown above )
mail: remove 'Created by' lines
A big Thank You to the original contributors of these ports:
* <ashish@FreeBSD.org>
* Aaron Dalton <aaron@FreeBSD.org>
* Adam David <adam@FreeBSD.org>
* Adam McDougall <mcdouga9@egr.msu.edu>
* Adam Weinberger <adamw@FreeBSD.org>
* Ade Lovett <ade@FreeBSD.org>
* Akinori MUSHA aka knu <knu@idaemons.org>
* Alex Deiter <tiamat@komi.mts.ru>
* Alex Dupre <ale@FreeBSD.org>
* Alex Dupre <sysadmin@alexdupre.com>
* Alex Perel <veers@disturbed.net>
(Only the first 15 lines of the commit message are shown above )
*/*: Remove redundant '-[0-9]*' from CONFLICTS_INSTALL
The conflict checks compare the patterns first against the package
names without version (as reported by "pkg query "%n"), then - if
there was no match - agsinst the full package names including the
version (as reported by "pkg query "%n-%v").
Approved by: portmgr (blanket)
mail/opensmtpd: update to 6.7.1p1 portable release
- fixes a packaging issue causing asr.h to be installed in target system
- fixes a possible crash in the MTA when establishing IPv6 connections
mail/opensmtpd: update to 6.7.0p1 portable release
Changes in this release:
========================
New Features:
- Allowed use of the smtpd(8) session username in built-in filters when
available.
- Introduced a bypass keyword to smtpd(8) so that built-in filters can bypass
processing when a condition is met.
- Allowed use of 'auth' as an origin in smtpd.conf(5).
- Allowed use of mail-from and rctp-to as for and from parameters in
smtpd.conf(5).
Bug fixes:
- Ensured legacy ssl(8) session ID is persistent during a client TLS session,
fixing an issue using TLSv1.3 with smtp.mail.yahoo.com.
- Fixed security vulnerabilities in smtpd(8). Corrected an out-of-bounds read in
smtpd allowing an attacker to inject arbitrary commands into the envelope file
to be executed as root, and ensured privilege revocation in smtpctl(8) to
prevent arbitrary commands from being run with the _smtpq group.
- Allowed mail.local(8) to be run as non-root, opening a pipe to lockspool(1)
for file locking.
- Fixed a security vulnerability in smtpd(8) which could lead to a privilege
escalation on mbox deliveries and unprivileged code execution on lmtp
deliveries.
- Added support for CIDR in a: spf atoms in smtpd(8).
- Fixed a possible crash in smtpd(8) when combining "from rdns" with nested
virtual aliases under a particular configuration.
mail/opensmtpd: honor hier(1) for mbox homedir
By default, OpenSMTPd rely on OpenBSD defaults, /var/spool/mail, instead of
/var/mail
Point it on /var/mail on all supported platforms != OpenBSD
Reported by: Denis Fortin via private mail
MFH: 2020Q1
mail/opensmtpd: update to 6.6.4p1 security releaase
SECURITY RELEASE
An out of bounds read in smtpd allows an attacker to inject arbitrary commands
into the envelope file which are then executed as root. Separately, missing
privilege revocation in smtpctl allows arbitrary commands to be run with the
_smtpq group.
MFH: 2020Q1
mail/opensmtpd: update to 6.6.3p1 release
- switch default configuration to maildir
- allow mbox to deliver to users without requiring privileges in the daemon
- allow lmtp to receive sender/recipient in environment
MFH: 2020Q1
mil/opensmtpd: update to 6.6.2p1 relase
This update addressed LPE and RCE vulnerabilities in OpenSMTPD (CVE-2020-7247)
https://www.openwall.com/lists/oss-security/2020/01/28/3
This vulnerability is exploitable since May 2018 (commit a8e222352f, "switch
smtpd to new grammar") and allows an attacker to execute arbitrary shell
commands, as root:
- either locally, in OpenSMTPD's default configuration (which listens on
the loopback interface and only accepts mail from localhost);
- or locally and remotely, in OpenSMTPD's "uncommented" default
configuration (which listens on all interfaces and accepts external
mail).
PR: 243686
Reported by: authors via irc
MFH: 2020Q1
Relnotes: https://www.mail-archive.com/misc@opensmtpd.org/msg04850.html
- Update OpenSMTPd to 6.6.0 portable release
This release builds with LibreSSL > 3.0.2 or OpenSSL > 1.1.0.
FreeBSD 11.x users should update to 12.x/13.x or switch system-wide
default ssl library to openssl111/libressl
- Update -extras to 6.4.0 release
Filters still missing, corresponded ports temporary markes
as IGNORED
PR: 213442,228937
MFH: 2019Q4
- While major 6.4 update still cooking (authors dropped openssl support at all
in favor of libressl), mark OpenSMTPd as BROKEN with openssl 1.1.x api
- Use https in pkg-descr url
MFH: 2018Q4
- Prevent OpenSMTPD session hangs and retain a descriptor forever on empty body
(i.e. when the dot appears on the line directly after the headers).
This could be used by an attacker to exhaust resources.
PR: 227899
Submitted by: grembo
Obtained from: OpenSMTPD git repo (backported)
MFH: 2018Q2
- Drop OPENSSL_PORT redefine, it was used for OSVERSION<103000 [1];
follow system-wide DEFAULT_VERSIONS+= ssl=<openssl variant>
- Sort plist
- @sample config
PR: 225067 [1]
Reported by: Charlie Li [1]
Assign ports to fluffy@, who is actively tracking OpenSMTPD
development, and has kindly agreed to take the maintainership
of following ports:
- dns/libasr
- dns/libasr-devel
- mail/opensmtpd
- mail/opensmtpd-devel
Thank you!
- Add SSL_PORT option to specify if OpenSSL from ports is to be used[1]
- Make option descriptions generic[1]
- Cleanup OPTIONS[1]
- Enforce SSL_PORT for 9.x[1]
- Mark as broken with LIBASRDEVEL option, due to incompatibility
PR: 206523[1]
Submitted by: Andrey Fesenko <andrey at bsdnir dot info>[1]
mail/opensmtpd: update to 5.7.3p2
Details at https://github.com/OpenSMTPD/OpenSMTPD/issues/650
While at it, remove a stale patch that isn't applicable anymore. Upstream
implements this logic already, and the patch doesn't actually patch anything.
PR: 206816
Submitted by: sa.inbox@gmail.com
Approved by: portmgr@
It seems some people keep adding $FreeBSD$ to patch files.
Patches must not be changed by the vcs, this includes the
svn:keyword expansion. Set fbsd:nokeywords to a couple of patches.
With hat: portmgr
Sponsored by: Absolight
- Add a patch to handle long usernames during SMTP authentication,
e.g. often username exceeds the limit when it contains @host.name
part.
Reported by: gahr (via private email)
Obtained from: Philipp Takacs <philipp@bureaucracy.de> (via IRC)
- Update to 5.4.5p1
- Remove OPTIONS for the features unsupported upstream: SQLITE, MYSQL,
LDAP, PGSQL, and REDIS
- Add workaround to prevent unnecessary dependency on autotools, due
to problem with tarball
- Add note to UPDATING about the removal of OPTIONS
- Add OPTION to only update mailer.conf(5) on demand
- Update COMMENT so it complies with guidelines in Porter's
Handbook
PR: 198375
Submitted by: adamw
- Update rc.d script to add a configtest command to test configuration
before starting/restarting service.
PR: 197587
Submitted by: elbarto at megadrive.org
OpenSMTPD port updates
mail/opensmtpd:
- Update to 5.4.4p1
- Add LIBASRDEVEL option to depend on dns/libasr-devel
- Use OpenSSL from ports, should help with migration to LibreSSL
- Explicitly provide path to OpenSSL[1]
mail/opensmtpd-devel:
- Update to 201502012312
- Add LIBASR option to depend on dns/libasr
- Remove MYSQL, PGSQL, LDAP, and REDIS options as they're removed
upstream
- Add a note for above to UPDATING
- Explicitly provide path to OpenSSL[1]
- Add a diff to fix build failure on FreeBSD[2]
Reported by: TJ <tj at mrsk.me> (via private email)
Submitted by: Herbert J. Skuhra <herbert at oslo.ath.cx> (via list)
- Fix rc.d script so it can distinguish between smtpd processes
running between host and jail
Submitted by: Creaky <whatexercise at gmail.com> (via private email)
Only use libevent2
Remove libevent as libevent2 is providing a good compatibility interface as well
as providing better performances.
Remove custom patches from libevent2 and install libevent2 the regular way
Mark ports abusing private fields of the libevent1 API as broken
Import a patch from fedora to have honeyd working with libevent2
Remove most of the patches necessary to find the custom installation we used to
have for libevent2
With hat: portmgr
Bump more ports that depend on libsqlite3.so:
- ports that set USE_SQLITE with the *_USE option helper
- ports that depend on libsqlite3 indirectly as reported by pkg rquery
Approved by: portmgr (implicit)
- Update to 5.4.1p1
- Update LICENSE information
- Add OPTIONS for SQLITE, MYSQL, PGSQL, and LDAP
- Add STAGE support
- Add a note to UPDATING about change in configuration
Changes: http://article.gmane.org/gmane.mail.opensmtpd.general/1146
- Add opensmtpd-devel package to CONFLICTS_INSTALL
- Update LICENSE information to point to the actual LICENSE file[1]
Submitted by: Alexander Milanov <a at amilanov.com>[1] (private mail)
- Update to 5.3p1
- Bump PORTEPOCH
- Add additional USERS for privilege separation
- Add instructions for fixing permissions in pkg-message
- Add a note about privilege separation to UPDATING file
Changes: http://article.gmane.org/gmane.mail.opensmtpd.general/446
- Update to latest snapshot 201212222206
- Add dependency on databases/sqlite3
- Remove ABI version from LIB_DEPENDS
- Document the configuration change in UPDATING
