#include "sig.h"
#include "readwrite.h"
#include "stralloc.h"
#include "substdio.h"
#include "alloc.h"
#include "auto_qmail.h"
#include "control.h"
#include "received.h"
#include "constmap.h"
#include "error.h"
#include "ipme.h"
#include "ip.h"
#include "qmail.h"
#include "str.h"
#include "fmt.h"
#include "scan.h"
#include "byte.h"
#include "case.h"
#include "env.h"
#include "now.h"
#include "exit.h"
#include "rcpthosts.h"
#ifndef TLS
#include "timeoutread.h"
#include "timeoutwrite.h"
#endif
#include "commands.h"
#include "dns.h"
#ifdef TLS
#include <openssl/ssl.h>
SSL *ssl = NULL;

stralloc clientcert = {0};
stralloc tlsserverciphers = {0};
#endif

#define MAXHOPS 100
unsigned int databytes = 0;
int timeout = 1200;

/* SpaceNet - maex */
char strnum[FMT_ULONG];
char sserrbuf[512];
substdio sserr = SUBSTDIO_FDBUF(write,2,sserrbuf,sizeof(sserrbuf));
void logerr(s) char *s; { if(substdio_puts(&sserr,s) == -1) _exit(1); }
void logerrf(s) char *s; { if(substdio_puts(&sserr,s) == -1) _exit(1); if(substdio_flush(&sserr) == -1) _exit(1); }
void logerrpid() { strnum[fmt_ulong(strnum,getpid())] = 0; logerr("pid "); logerr(strnum); logerr(" from "); }

#ifdef TLS
int flagtimedout = 0;
void sigalrm()
{
 flagtimedout = 1;
}
int ssl_timeoutread(timeout,fd,buf,n) int timeout; int fd; char *buf; int n;
{
 int r; int saveerrno;
 if (flagtimedout) { errno = error_timeout; return -1; }
 alarm(timeout);
 if (ssl) {
   while(((r = SSL_read(ssl,buf,n)) <= 0)
         && (SSL_get_error(ssl, r) == SSL_ERROR_WANT_READ));
 }else r = read(fd,buf,n);
 saveerrno = errno;
 alarm(0);
 if (flagtimedout) { errno = error_timeout; return -1; }
 errno = saveerrno;
 return r;
}
int ssl_timeoutwrite(timeout,fd,buf,n) int timeout; int fd; char *buf; int n;
{
 int r; int saveerrno;
 if (flagtimedout) { errno = error_timeout; return -1; }
 alarm(timeout);
 if (ssl) {
   while(((r = SSL_write(ssl,buf,n)) <= 0)
         && (SSL_get_error(ssl, r) == SSL_ERROR_WANT_WRITE));
 }else r = write(fd,buf,n);
 saveerrno = errno;
 alarm(0);
 if (flagtimedout) { errno = error_timeout; return -1; }
 errno = saveerrno;
 return r;
}
#endif


int safewrite(fd,buf,len) int fd; char *buf; int len;
{
  int r;
#ifdef TLS
  r = ssl_timeoutwrite(timeout,fd,buf,len);
#else
  r = timeoutwrite(timeout,fd,buf,len);
#endif
  if (r <= 0) _exit(1);
  return r;
}

char ssoutbuf[512];
substdio ssout = SUBSTDIO_FDBUF(safewrite,1,ssoutbuf,sizeof ssoutbuf);

void flush() { substdio_flush(&ssout); }
void out(s) char *s; { substdio_puts(&ssout,s); }

void die_read() { _exit(1); }
void die_alarm() { out("451 timeout (#4.4.2)\r\n"); flush(); _exit(1); }
void die_nomem() { out("421 out of memory (#4.3.0)\r\n"); flush(); _exit(1); }
void die_control() { out("421 unable to read controls (#4.3.0)\r\n"); flush(); _exit(1); }
void die_ipme() { out("421 unable to figure out my IP addresses (#4.3.0)\r\n"); flush(); _exit(1); }
void straynewline() { out("451 See http://pobox.com/~djb/docs/smtplf.html.\r\n"); flush(); _exit(1); }
void err_smf() { out("451 DNS temporary failure (#4.3.0)\r\n"); }
void err_size() { out("552 sorry, that message size exceeds my databytes limit (#5.3.4)\r\n"); }
void err_hmf(arg1,arg2) char *arg1,*arg2; {
  logerr("qmail-smtpd: "); logerrpid(); logerr(arg1); logerr(" Non-existing DNS_MX: ");
  logerr("MAIL "); logerr(arg2); logerrf("\n");  
  out("552 sorry, your envelope sender domain must exist (#5.7.1)\r\n"); }
void err_nogateway(arg1,arg2,arg3) char *arg1,*arg2,*arg3; {
  logerr("qmail-smtpd: "); logerrpid(); logerr(arg1); logerr(" Invalid RELAY client: "); 
  logerr("MAIL from: <"); logerr(arg2); logerr (">, RCPT "); logerr(arg3); logerrf("\n");  
  out("553 sorry, that domain isn't allowed to be relayed thru this MTA (#5.7.1)\r\n"); }
void err_bmf(arg1,arg2,arg3) char *arg1,*arg2,*arg3; {
  logerr("qmail-smtpd: "); logerrpid(); logerr(arg1); logerr(" Invalid SENDER address: "); 
  logerr("MAIL from: <"); logerr(arg2); logerr (">, RCPT "); logerr(arg3); logerrf("\n");  
  out("554 sorry, your envelope sender is in my badmailfrom list (#5.7.1)\r\n"); 
  flush(); _exit(1); }
void err_rcp(arg1,arg2,arg3) char *arg1,*arg2,*arg3; { 
  logerr("qmail-smtpd: "); logerrpid(); logerr(arg1); logerr(" Invalid RECIPIENT address: "); 
  logerr("MAIL from: <"); logerr(arg2); logerr (">, RCPT "); logerr(arg3); logerrf("\n");  
  out("555 sorry, your envelope recipient is in my badrcptto list (#5.7.1)\r\n"); 
  flush(); _exit(1); }
#ifdef TLS
void err_nogwcert() { out("553 no valid cert for gatewaying (#5.7.1)\r\n"); }
#endif
void err_unimpl() { out("502 unimplemented (#5.5.1)\r\n"); }
void err_syntax() { out("555 syntax error (#5.5.4)\r\n"); }
void err_wantmail() { out("503 MAIL first (#5.5.1)\r\n"); }
void err_wantrcpt() { out("503 RCPT first (#5.5.1)\r\n"); }
void err_noop() { out("250 ok\r\n"); }
void err_vrfy() { out("252 send some mail, i'll try my best\r\n"); }
void err_qqt() { out("451 qqt failure (#4.3.0)\r\n"); }


stralloc greeting = {0};

void smtp_greet(code) char *code;
{
  substdio_puts(&ssout,code);
  substdio_put(&ssout,greeting.s,greeting.len);
}
void smtp_help()
{
  out("214 qmail home page: http://pobox.com/~djb/qmail.html\r\n");
}
void smtp_quit()
{
  smtp_greet("221 "); out("\r\n"); flush(); _exit(0);
}

char *remoteip;
char *remotehost;
char *remoteinfo;
char *local;
char *relayclient;
char *relayok;
char *nodnscheck;
char *msgsize;
#ifdef TLS
char *tlsciphers;
#endif

stralloc helohost = {0};
char *fakehelo; /* pointer into helohost, or 0 */

void dohelo(arg) char *arg; {
  if (!stralloc_copys(&helohost,arg)) die_nomem(); 
  if (!stralloc_0(&helohost)) die_nomem(); 
  fakehelo = case_diffs(remotehost,helohost.s) ? helohost.s : 0;
}

int liphostok = 0;
stralloc liphost = {0};
int bmfok = 0;
stralloc bmf = {0};
struct constmap mapbmf;

/* Wildmat Variables */
int bmpok = 0;
stralloc bmp = {0};
struct constmap mapbmp;
/* Wildmat Patch  END */

/* RECIPIENT Check Variables */
int rcpok = 0;
stralloc rcp = {0};
struct constmap maprcp;
int brpok = 0;
stralloc brp = {0};
struct constmap mapbrp;

/* RELAYCLIENT Check Variables */
int relayclientsok = 0;
stralloc relayclients = {0};
struct constmap maprelayclients;
int relaydomainsok = 0;
stralloc relaydomains = {0};
struct constmap maprelaydomains;

/* RELAYMAILFROM Check Variables */
int rmfok = 0;
stralloc rmf = {0};
struct constmap maprmf;

/* TARPIT Check Variables */
int tarpitcount = 0;
int tarpitdelay = 5;

/* NODNSCHECK Check Variables */
int nodnschecksok = 0;
stralloc nodnschecks = {0};
struct constmap mapnodnschecks;

void setup()
{
  char *x;
  unsigned long u;
  unsigned int i;
  unsigned len;
#ifdef TLS
  char *tlsciphers;
#endif
 
  if (control_init() == -1) die_control();
  if (control_rldef(&greeting,"control/smtpgreeting",1,(char *) 0) != 1)
    die_control();
  liphostok = control_rldef(&liphost,"control/localiphost",1,(char *) 0);
  if (liphostok == -1) die_control();
  if (control_readint(&timeout,"control/timeoutsmtpd") == -1) die_control();
  if (timeout <= 0) timeout = 1;

/* TARPIT Patch - include Control Files */
 
  if (control_readint(&tarpitcount,"control/tarpitcount") == -1) die_control();
  if (tarpitcount < 0) tarpitcount = 0;
  x = env_get("TARPITCOUNT");
  if (x) { scan_ulong(x,&u); tarpitcount = u; };
  if (control_readint(&tarpitdelay,"control/tarpitdelay") == -1) die_control();
  if (tarpitdelay < 0) tarpitdelay = 0;
  x = env_get("TARPITDELAY");
  if (x) { scan_ulong(x,&u); tarpitdelay = u; };

  if (rcpthosts_init() == -1) die_control();

  bmfok = control_readfile(&bmf,"control/badmailfrom",0);
  if (bmfok == -1) die_control();
  if (bmfok)
    if (!constmap_init(&mapbmf,bmf.s,bmf.len,0)) die_nomem();

/* RELAYMAILFROM Patch - include Control File */

  rmfok = control_readfile(&rmf,"control/relaymailfrom",0);
  if (rmfok == -1) die_control();
  if (rmfok)
    if (!constmap_init(&maprmf,rmf.s,rmf.len,0)) die_nomem();

/* Wildmat Patch - include Control file */ 
 
  bmpok = control_readfile(&bmp,"control/badmailpatterns",0);
  if (bmpok == -1) die_control();
  if (bmpok)
    if (!constmap_init(&mapbmp,bmp.s,bmp.len,0)) die_nomem();
 
/* RECIPIENT Patch - include Control file */

  rcpok = control_readfile(&rcp,"control/badrcptto",0);
  if (rcpok == -1) die_control();
  if (rcpok)
    if (!constmap_init(&maprcp,rcp.s,rcp.len,0)) die_nomem();
  
  brpok = control_readfile(&brp,"control/badrcptpatterns",0);
  if (brpok == -1) die_control();
  if (brpok)
    if (!constmap_init(&mapbrp,brp.s,brp.len,0)) die_nomem();

  if (control_readint(&databytes,"control/databytes") == -1) die_control();
  x = env_get("DATABYTES");
  if (x) { scan_ulong(x,&u); databytes = u; }
  if (!(databytes + 1)) --databytes;
 
  remoteip = env_get("TCPREMOTEIP");
  if (!remoteip) remoteip = "unknown";
  local = env_get("TCPLOCALHOST");
  if (!local) local = env_get("TCPLOCALIP");
  if (!local) local = "unknown";
  remotehost = env_get("TCPREMOTEHOST");
  if (!remotehost) remotehost = "unknown";
  remoteinfo = env_get("TCPREMOTEINFO");
  relayok = relayclient = env_get("RELAYCLIENT");

/* DNSCHECK Patch - include Control file */

  nodnscheck = env_get("NODNSCHECK");

  if (! nodnscheck) 
    {
      /* Look up "MAIL from:" addresses to skip for DNS check in control/nodnscheck. */
      nodnschecksok = control_readfile(&nodnschecks,"control/nodnscheck",0);
      if (nodnschecksok == -1) die_control();
      if (nodnschecksok)
	  if (!constmap_init (&mapnodnschecks, nodnschecks.s, nodnschecks.len, 0)) die_nomem();
    }

  if (! relayclient)
    {
      /* Attempt to look up the IP number in control/relayclients. */
      relayclientsok = control_readfile(&relayclients,"control/relayclients",0);
      if (relayclientsok == -1) die_control();
      if (relayclientsok) {
        if (!constmap_init (&maprelayclients, relayclients.s, relayclients.len, 1)) die_nomem();

        for (i = len = str_len (remoteip); i > 0; i --)
	  if ((i == len) || (remoteip[i - 1] == '.')) {
	    if ((relayclient = constmap (&maprelayclients, remoteip, i)))
      	      break;
	  }
       }
    }

  if (! relayclient)
    {
      /* Attempt to look up the host name in control/relaydomains. */
      relaydomainsok = control_readfile(&relaydomains,"control/relaydomains",0);
      if (relaydomainsok == -1) die_control();
      if (relaydomainsok) {
        if (!constmap_init (&maprelaydomains, relaydomains.s, relaydomains.len, 1)) die_nomem();

      	for (i = 0, len = str_len (remotehost); i <= len; i ++)
      	  if ((i == 0) || (i == len) || (remotehost[i] == '.'))
      	    if ((relayclient = constmap (&maprelaydomains, remotehost + i, len - i)))
      	      break;
      }
    }

#ifdef TLS
  if (tlsciphers = env_get("TLSCIPHERS")){
    if (!stralloc_copys(&tlsserverciphers,tlsciphers)) die_nomem();
  }
  else {
    if (control_rldef(&tlsserverciphers,"control/tlsserverciphers",0,"DEFAULT") != 1)
      die_control();
  }
  if (!stralloc_0(&tlsserverciphers)) die_nomem();
#endif

  dohelo(remotehost);
}


stralloc addr = {0}; /* will be 0-terminated, if addrparse returns 1 */

int addrparse(arg)
char *arg;
{
  int i;
  char ch;
  char terminator;
  struct ip_address ip;
  int flagesc;
  int flagquoted;
 
  terminator = '>';
  i = str_chr(arg,'<');
  if (arg[i])
    arg += i + 1;
  else { /* partner should go read rfc 821 */
    terminator = ' ';
    arg += str_chr(arg,':');
    if (*arg == ':') ++arg;
    while (*arg == ' ') ++arg;
  }

  /* strip source route */
  if (*arg == '@') while (*arg) if (*arg++ == ':') break;

  if (!stralloc_copys(&addr,"")) die_nomem();
  flagesc = 0;
  flagquoted = 0;
  for (i = 0;ch = arg[i];++i) { /* copy arg to addr, stripping quotes */
    if (flagesc) {
      if (!stralloc_append(&addr,&ch)) die_nomem();
      flagesc = 0;
    }
    else {
      if (!flagquoted && (ch == terminator)) break;
      switch(ch) {
        case '\\': flagesc = 1; break;
        case '"': flagquoted = !flagquoted; break;
        default: if (!stralloc_append(&addr,&ch)) die_nomem();
      }
    }
  }
  /* could check for termination failure here, but why bother? */
  if (!stralloc_append(&addr,"")) die_nomem();

  if (liphostok) {
    i = byte_rchr(addr.s,addr.len,'@');
    if (i < addr.len) /* if not, partner should go read rfc 821 */
      if (addr.s[i + 1] == '[')
        if (!addr.s[i + 1 + ip_scanbracket(addr.s + i + 1,&ip)])
          if (ipme_is(&ip)) {
            addr.len = i + 1;
            if (!stralloc_cat(&addr,&liphost)) die_nomem();
            if (!stralloc_0(&addr)) die_nomem();
          }
  }

  if (addr.len > 900) return 0;
  return 1;
}

/* SIZELIMIT Function by Chris Harris */

int sizelimit(arg)
 char *arg;
 {
   int i;
   long r;
   unsigned long sizebytes = 0; 
 
   i = str_chr(arg,'<');
   if (arg[i])
     arg += i + 1;
   else {
     arg += str_chr(arg,':');
     if (*arg == ':') ++arg;
     while (*arg == ' ') ++arg;
   }
 
   arg += str_chr(arg,' ');
   if (*arg == ' ') while (*arg == ' ') ++arg;
   else return 1;
 
   i = str_chr(arg,'=');
   arg[i] = 0;
   if (case_equals(arg,"SIZE")) {
     arg += i;
     while (*++arg && *arg > 47 && *arg < 58) {
       sizebytes *= 10;
       sizebytes += *arg - 48;
     }
     r = databytes - sizebytes;
     if (r < 0) return 0;
   }
   return 1;
 }

int bmfcheck()
{
  int i;
  int j;
  int k = 0;
  char subvalue;
  case_lowerb(addr.s,addr.len); /* convert into lower case */

  if (bmfok) {
  if (constmap(&mapbmf,addr.s,addr.len - 1)) return 1;
  j = byte_rchr(addr.s,addr.len,'@');
  if (j < addr.len)
    if (constmap(&mapbmf,addr.s + j,addr.len - j - 1)) return 1;
  }

/* Include control file control/badmailpatterns and evaluate with Wildmat check */
     
  if (bmpok) {
  i = 0;
  for (j = 0;j < bmp.len;++j)
   if (!bmp.s[j]) {
    subvalue = bmp.s[i] != '!';
    if (!subvalue) i++;
    if ((k != subvalue) && wildmat(addr.s, bmp.s + i)) k = subvalue;
    i = j + 1;
    }
   return k;
  }
  return 0;
}

int rmfcheck()
{
  int j;
  if (!rmfok) return 0;
  if (constmap(&maprmf,addr.s,addr.len - 1)) return 1;
  j = byte_rchr(addr.s,addr.len,'@');
  if (j < addr.len)
    if (constmap(&maprmf,addr.s + j,addr.len - j - 1)) return 1;
  return 0;
}

int rcpcheck()
{
  int i;
  int j;
  int k = 0;
  char subvalue;
  case_lowerb(addr.s,addr.len); /* convert into lower case */

/* Include control file control/badrcptto */

  if (rcpok) {
  if (constmap(&maprcp,addr.s,addr.len - 1)) return 1;

  j = byte_rchr(addr.s,addr.len,'@');
  if (j < addr.len)
    if (constmap(&maprcp,addr.s + j,addr.len - j - 1)) return 1;
  }

/* Include control file control/badrcptpatterns and evaluate with Wildmat check */

  if (brpok) {
  i = 0;
  for (j = 0;j < brp.len;++j)
   if (!brp.s[j]) {
    subvalue = brp.s[i] != '!';
    if (!subvalue) i++;
    if ((k != subvalue) && wildmat(addr.s, brp.s + i)) k = subvalue;
    i = j + 1;
    }
   return k;
  }
  return 0;
}

int dnscheck()
{
  stralloc sa = {0};
  ipalloc ia = {0};
  unsigned int random;
  int j;

  if (nodnschecksok) {
  if (constmap(&mapnodnschecks,addr.s,addr.len - 1)) return 0;
  j = byte_rchr(addr.s,addr.len,'@');
  if (j < addr.len)
    if (constmap(&mapnodnschecks,addr.s + j,addr.len - j - 1)) return 0;
  }

  random = now() + (getpid() << 16);
  j = byte_rchr(addr.s,addr.len,'@') + 1;
  if (j < addr.len) {
    stralloc_copys(&sa, addr.s + j);
    dns_init(0);
    j = dns_mxip(&ia,&sa,random);
    if (j < 0) return j;
  }
  return 0;
}

int addrallowed()
{
  int r;
  r = rcpthosts(addr.s,str_len(addr.s));
  if (r == -1) die_control();
  return r;
}


int seenmail = 0;
int flagbarf; /* defined if seenmail */
int flagrcpt; /* recipient filter   */
stralloc mailfrom = {0};
stralloc rcptto = {0};
int rcptcount;
char size_buf[FMT_ULONG]; /* needed for SIZE CMD */  

void smtp_helo(arg) char *arg;
{
    smtp_greet("250 "); out("\r\n");
    seenmail = 0; dohelo(arg);
}
void smtp_size()
{
   size_buf[fmt_ulong(size_buf,(unsigned long) databytes)] = 0;
   out("250 SIZE "); out(size_buf); out("\r\n");
}
void smtp_ehlo(arg) char *arg;
{
// MiB  smtp_greet("250-"); out("\r\n250-PIPELINING\r\n250-8BITMIME\r\n");
smtp_greet("250-");
#ifdef TLS
  if (ssl) out("\r\n250-PIPELINING\r\n250-8BITMIME\r\n");
  else out("\r\n250-PIPELINING\r\n250-STARTTLS\r\n250-8BITMIME\r\n");
#else
  out("\r\n250-PIPELINING\r\n250-8BITMIME\r\n");
#endif
// /MiB
  smtp_size();
  seenmail = 0; dohelo(arg);
}
void smtp_rset()
{
  seenmail = 0;
  out("250 flushed\r\n");
}
void smtp_mail(arg) char *arg;
{
  if (!addrparse(arg)) { err_syntax(); return; }
/* Return error if incoming SMTP msg exceeds DATABYTES */
  if (databytes && !sizelimit(arg)) { err_size(); return; }
  flagbarf = bmfcheck();
  relayok = relayclient;
  if (!relayok) if (rmfcheck()) relayclient = ""; else relayclient = 0; /* this code is not beautiful */
  if (!nodnscheck) {
    switch(dnscheck()) {
      case DNS_HARD: err_hmf(remoteip,arg); return;
      case DNS_SOFT: err_smf(); return;
      case DNS_MEM: die_nomem(); }
  }
  seenmail = 1;
  if (!stralloc_copys(&rcptto,"")) die_nomem();
  if (!stralloc_copys(&mailfrom,addr.s)) die_nomem();
  if (!stralloc_0(&mailfrom)) die_nomem();
  rcptcount = 0;
  out("250 ok\r\n");
}
#ifdef TLS
static int verify_cb(int ok, X509_STORE_CTX * ctx)
{
  return (1);
}
#endif
void smtp_rcpt(arg) char *arg; 
{
  if (!seenmail) { err_wantmail(); return; }
  if (!addrparse(arg)) { err_syntax(); return; }
  flagrcpt = rcpcheck();
  if (flagbarf) { err_bmf(remoteip,mailfrom.s,arg); return; }
  if (relayclient) {
    --addr.len;
    if (!stralloc_cats(&addr,relayclient)) die_nomem();
    if (!stralloc_0(&addr)) die_nomem();
  }
  else
#ifndef TLS
    if (!addrallowed()) { err_nogateway(remoteip,mailfrom.s,arg); return; } 
#else
    if (!addrallowed())
     {
      if (ssl)
      { STACK_OF(X509_NAME) *sk;
        X509 *peercert;
        stralloc tlsclients = {0};
        struct constmap maptlsclients;
        int r;
        SSL_set_verify(ssl,
                       SSL_VERIFY_PEER|SSL_VERIFY_CLIENT_ONCE,
                       verify_cb);
        if ((sk = SSL_load_client_CA_file("control/clientca.pem")) == NULL)
// MiB
         { err_nogateway(remoteip,mailfrom.s,arg); return; }
        SSL_set_client_CA_list(ssl, sk);
        if((control_readfile(&tlsclients,"control/tlsclients",0) != 1) ||
           !constmap_init(&maptlsclients,tlsclients.s,tlsclients.len,0))
// MiB
          { err_nogateway(remoteip,mailfrom.s,arg); return; }
        SSL_renegotiate(ssl);
        SSL_do_handshake(ssl);
        ssl->state = SSL_ST_ACCEPT;
        SSL_do_handshake(ssl);
        if ((r = SSL_get_verify_result(ssl)) != X509_V_OK)
         {out("553 no valid cert for gatewaying: ");
          out(X509_verify_cert_error_string(r));
          out(" (#5.7.1)\r\n");
          return;
         }
        if (peercert = SSL_get_peer_certificate(ssl))
         {char emailAddress[256];
          X509_NAME_get_text_by_NID(X509_get_subject_name(
                                     SSL_get_peer_certificate(ssl)),
                                     NID_pkcs9_emailAddress, emailAddress, 256);
          if (!stralloc_copys(&clientcert, emailAddress)) die_nomem();
          if (!constmap(&maptlsclients,clientcert.s,clientcert.len))
            { err_nogwcert(); return; }
          relayclient = "";
         }
          else { err_nogwcert(); return; }
       }
// MiB
      else { err_nogateway(remoteip,mailfrom.s,arg); return; }
     }
#endif
  if (!stralloc_cats(&rcptto,"T")) die_nomem();
  if (!stralloc_cats(&rcptto,addr.s)) die_nomem();
  if (!stralloc_0(&rcptto)) die_nomem();
  if (flagrcpt) { err_rcp(remoteip,mailfrom.s,arg); return; } /* RECIPIENT BAD* check */
  if (tarpitcount && ++rcptcount >= tarpitcount) while (sleep(tarpitdelay)); /* TARPIT Delay */
  out("250 ok\r\n");
}


int saferead(fd,buf,len) int fd; char *buf; int len;
{
  int r;
  flush();
#ifdef TLS
  r = ssl_timeoutread(timeout,fd,buf,len);
#else
  r = timeoutread(timeout,fd,buf,len);
#endif
  if (r == -1) if (errno == error_timeout) die_alarm();
  if (r <= 0) die_read();
  return r;
}

char ssinbuf[1024];
substdio ssin = SUBSTDIO_FDBUF(saferead,0,ssinbuf,sizeof ssinbuf);

struct qmail qqt;
unsigned int bytestooverflow = 0;

void put(ch)
char *ch;
{
  if (bytestooverflow)
    if (!--bytestooverflow)
      qmail_fail(&qqt);
  qmail_put(&qqt,ch,1);
}

void blast(hops)
int *hops;
{
  char ch;
  int state;
  int flaginheader;
  int pos; /* number of bytes since most recent \n, if fih */
  int flagmaybex; /* 1 if this line might match RECEIVED, if fih */
  int flagmaybey; /* 1 if this line might match \r\n, if fih */
  int flagmaybez; /* 1 if this line might match DELIVERED, if fih */
  int seencr;
 
  state = 1;
  *hops = 0;
  flaginheader = 1;
  pos = 0; flagmaybex = flagmaybey = flagmaybez = 1; seencr = 0; /* qmail-smtpd-newline patch */
   for (;;) {
    substdio_get(&ssin,&ch,1);
// MiB Apply newline patch only on non-SSL connections
#ifdef TLS
    if (!ssl)
     {
#endif
      if (ch == '\n')
       {
        if (seencr == 0)
         {
          substdio_seek(ssin,-1);
          ch = '\r';
         }
       }
      if (ch == '\r') seencr = 1; else seencr = 0;
#ifdef TLS
     }
#endif
// /MiB
    if (flaginheader) {
      if (pos < 9) {
        if (ch != "delivered"[pos]) if (ch != "DELIVERED"[pos]) flagmaybez = 0;
        if (flagmaybez) if (pos == 8) ++*hops;
        if (pos < 8)
          if (ch != "received"[pos]) if (ch != "RECEIVED"[pos]) flagmaybex = 0;
        if (flagmaybex) if (pos == 7) ++*hops;
        if (pos < 2) if (ch != "\r\n"[pos]) flagmaybey = 0;
        if (flagmaybey) if (pos == 1) flaginheader = 0;
      }
      ++pos;
      if (ch == '\n') { pos = 0; flagmaybex = flagmaybey = flagmaybez = 1; }
    }
    switch(state) {
      case 0:
        if (ch == '\n') straynewline();
        if (ch == '\r') { state = 4; continue; }
        break;
      case 1: /* \r\n */
        if (ch == '\n') straynewline();
        if (ch == '.') { state = 2; continue; }
        if (ch == '\r') { state = 4; continue; }
        state = 0;
        break;
      case 2: /* \r\n + . */
        if (ch == '\n') straynewline();
        if (ch == '\r') { state = 3; continue; }
        state = 0;
        break;
      case 3: /* \r\n + .\r */
        if (ch == '\n') return;
        put(".");
        put("\r");
        if (ch == '\r') { state = 4; continue; }
        state = 0;
        break;
      case 4: /* + \r */
        if (ch == '\n') { state = 1; break; }
        if (ch != '\r') { put("\r"); state = 0; }
    }
    put(&ch);
  }
}

char accept_buf[FMT_ULONG];
void acceptmessage(qp) unsigned long qp;
{
  datetime_sec when;
  when = now();
  out("250 ok ");
  accept_buf[fmt_ulong(accept_buf,(unsigned long) when)] = 0;
  out(accept_buf);
  out(" qp ");
  accept_buf[fmt_ulong(accept_buf,qp)] = 0;
  out(accept_buf);
  out("\r\n");
}

void smtp_data() {
  int hops;
  unsigned long qp;
  char *qqx;
#ifdef TLS
  stralloc protocolinfo = {0};
#endif
 
  if (!seenmail) { err_wantmail(); return; }
  if (!rcptto.len) { err_wantrcpt(); return; }
  seenmail = 0;
  if (databytes) bytestooverflow = databytes + 1;
  if (qmail_open(&qqt) == -1) { err_qqt(); return; }
  qp = qmail_qp(&qqt);
  out("354 go ahead\r\n");
#ifdef TLS
  if(ssl){
   if (!stralloc_copys(&protocolinfo, SSL_CIPHER_get_name(SSL_get_current_cipher(ssl)))) die_nomem();
   if (!stralloc_catb(&protocolinfo, " encrypted SMTP", 15)) die_nomem();
   if (clientcert.len){
     if (!stralloc_catb(&protocolinfo," cert ", 6)) die_nomem();
     if (!stralloc_catb(&protocolinfo,clientcert.s, clientcert.len)) die_nomem();
   }
   if (!stralloc_0(&protocolinfo)) die_nomem();
  } else if (!stralloc_copyb(&protocolinfo,"SMTP",5)) die_nomem();
  received(&qqt,protocolinfo.s,local,remoteip,remotehost,remoteinfo,case_diffs(remotehost,helohost.s) ? helohost.s : 0);
#else
  received(&qqt,"SMTP",local,remoteip,remotehost,remoteinfo,fakehelo);
#endif
  blast(&hops);
  hops = (hops >= MAXHOPS);
  if (hops) qmail_fail(&qqt);
  qmail_from(&qqt,mailfrom.s);
  qmail_put(&qqt,rcptto.s,rcptto.len);
 
  qqx = qmail_close(&qqt);
  if (!*qqx) { acceptmessage(qp); return; }
  if (hops) { out("554 too many hops, this message is looping (#5.4.6)\r\n"); return; }
  if (databytes) if (!bytestooverflow) { err_size(); return; } 
  if (*qqx == 'D') out("554 "); else out("451 ");
  out(qqx + 1);
  out("\r\n");
}

#ifdef TLS
static RSA *tmp_rsa_cb(ssl,export,keylength) SSL *ssl; int export; int keylength; 
{
  RSA* rsa;
  BIO* in;

  if (!export || keylength == 512)
   if (in=BIO_new(BIO_s_file_internal()))
    if (BIO_read_filename(in,"control/rsa512.pem") > 0)
     if (rsa=PEM_read_bio_RSAPrivateKey(in,NULL,NULL,NULL))
      return rsa;
  return (RSA_generate_key(export?keylength:512,RSA_F4,NULL,NULL));
}

void smtp_tls(arg) char *arg; 
{
  SSL_CTX *ctx;

  if (*arg)
   {out("501 Syntax error (no parameters allowed) (#5.5.4)\r\n");
    return;}

  SSL_library_init();
  if(!(ctx=SSL_CTX_new(SSLv23_server_method())))
   {out("454 TLS not available: unable to initialize ctx (#4.3.0)\r\n"); 
    return;}
  if(!SSL_CTX_use_RSAPrivateKey_file(ctx, "control/servercert.pem", SSL_FILETYPE_PEM))
   {out("454 TLS not available: missing RSA private key (#4.3.0)\r\n"); 
    return;}
  if(!SSL_CTX_use_certificate_chain_file(ctx, "control/servercert.pem"))
   {out("454 TLS not available: missing certificate (#4.3.0)\r\n"); 
    return;}
  SSL_CTX_set_tmp_rsa_callback(ctx, tmp_rsa_cb);
  SSL_CTX_set_cipher_list(ctx,tlsserverciphers.s);
  SSL_CTX_load_verify_locations(ctx, "control/clientca.pem",NULL);
  SSL_CTX_set_verify(ctx, SSL_VERIFY_NONE, verify_cb);
 
  out("220 ready for tls\r\n"); flush();

  if(!(ssl=SSL_new(ctx))) die_read();
  SSL_set_fd(ssl,0);
  if(SSL_accept(ssl)<=0) die_read();
  substdio_fdbuf(&ssout,SSL_write,ssl,ssoutbuf,sizeof(ssoutbuf));

  remotehost = env_get("TCPREMOTEHOST");
  if (!remotehost) remotehost = "unknown";
  dohelo(remotehost);
}
#endif

struct commands smtpcommands[] = {
  { "rcpt", smtp_rcpt, 0 }
, { "mail", smtp_mail, 0 }
, { "data", smtp_data, flush }
, { "quit", smtp_quit, flush }
, { "helo", smtp_helo, flush }
, { "ehlo", smtp_ehlo, flush }
, { "rset", smtp_rset, 0 }
, { "help", smtp_help, flush }
#ifdef TLS
, { "starttls", smtp_tls, flush }
#endif
, { "noop", err_noop, flush }
, { "vrfy", err_vrfy, flush }
, { 0, err_unimpl, flush }
} ;

void main()
{
#ifdef TLS
  sig_alarmcatch(sigalrm);
#endif
  sig_pipeignore();
  if (chdir(auto_qmail) == -1) die_control();
  setup();
  if (ipme_init() != 1) die_ipme();
  smtp_greet("220 ");
  out(" ESMTP\r\n");
  if (commands(&ssin,&smtpcommands) == 0) die_read();
  die_nomem();
}