From sacadmin Mon May 5 09:10:35 2008 Received: from opal.eng.sun.com (opal.SFBay.Sun.COM [129.146.228.54]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m45GAZ5d017085; Mon, 5 May 2008 09:10:35 -0700 (PDT) Received: from opal.eng.sun.com (localhost [127.0.0.1]) by opal.eng.sun.com (8.14.3.Gamma0+Sun/8.14.3) with ESMTP id m45GAZXS503345 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Mon, 5 May 2008 09:10:35 -0700 (PDT) Received: (from jbeck@localhost) by opal.eng.sun.com (8.14.3.Gamma0+Sun/8.14.3.Gamma0/Submit) id m45GAZO6503341; Mon, 5 May 2008 09:10:35 -0700 (PDT) Date: Mon, 5 May 2008 09:10:35 -0700 (PDT) Message-Id: <200805051610.m45GAZO6503341@opal.eng.sun.com> From: jbeck@eng.sun.com (John Beck) To: PSARC-record@sac.sfbay.sun.com Cc: John.Beck@Sun.Com Subject: sendmail local daemon mode [PSARC/2008/298 Self Review] Status: RO Content-Length: 555 Template Version: @(#)sac_nextcase 1.66 04/17/08 SMI This information is Copyright 2008 Sun Microsystems 1. Introduction 1.1. Project/Component Working Name: sendmail local daemon mode 1.2. Name of Document Author/Supplier: Author: John Beck 1.3 Date of This Document: 05 May, 2008 4. Technical Description See the case directory for more detail 6. Resources and Schedule 6.4. Steering Committee requested information 6.4.1. Consolidation C-team Name: ON 6.5. ARC review type: Automatic 6.6. ARC Exposure: open From jbeck@eng.sun.com Mon May 5 09:16:55 2008 Received: from opal.eng.sun.com (opal.SFBay.Sun.COM [129.146.228.54]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m45GGtEX017616 for ; Mon, 5 May 2008 09:16:55 -0700 (PDT) Received: from opal (localhost [127.0.0.1]) by opal.eng.sun.com (8.14.3.Gamma0+Sun/8.14.3) with ESMTP id m45GGt2H503408; Mon, 5 May 2008 09:16:55 -0700 (PDT) Message-Id: <200805051616.m45GGt2H503408@opal.eng.sun.com> X-Mailer: exmh version 2.7.2 2005-Jan-07 with nmh-1.0.3 To: psarc-ext@sac.sfbay.sun.com Cc: John Beck Subject: sendmail local daemon mode (PSARC 2008/298) X-Image-URL: http://playground.sun.com/~jbeck/gif/Misc/john-face.jpg Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Mon, 05 May 2008 09:16:55 -0700 From: John Beck Status: RO Content-Length: 2645 Relevant earlier cases: * PSARC 2004/368 Secure By Default * PSARC 2008/042 automated building of sendmail configuration files I am self-sponsoring this case, which I am marking closed approved automatic, as the change is coming from upstream (sendmail.org in this case) and hence is beyond Sun's control. The interface is Committed and, since the change is compatible, the release binding is Patch (and note that a back-port is planned). Version 8.14.3 of sendmail introduces a new feature: local daemon mode, indicated by the -bl command line argument. This mode is like the previous daemon mode, indicated by -bd, except that incoming connections are restricted to localhost. A diff'd man page is in the materials directory of the case, and for ease of review, the context diffs are repeated below. Note that sendmail.org has a different release taxonomy than we do, hence the code for this is inside #if _FFR_LOCAL_DAEMON ... #endif blocks (FFR == For Future Release) until version 8.15 comes along; Solaris Makefiles will define this macro, but an "out of the box" build would not have the feature enabled. The use of this new argument will replace the earlier use of "-C /etc/mail/local.cf" introduced by PSARC 2004/368, which added unneeded complexity. Now we can go back to having a single config file for incoming connections, rather than the overly complex "use local.cf if config/local_only is in effect; use sendmail.cf otherwise" paradigm. As a result of this simplification, PSARC 2008/042 is hereby amended: path_to_local_mc is removed as an interface. Note that 2008/042 has not yet been integrated, so there are no compatibility issues introduced by removing this interface at this time. As for the local.cf stuff from PSARC 2004/368, that was an implementation detail that did not rise to the level of being an interface. -- John --- sendmail.1m.old Fri Apr 18 08:15:34 2008 +++ sendmail.1m.new Fri Apr 18 08:15:25 2008 @@ -9,8 +9,8 @@ sendmail - send mail over the internet SYNOPSIS - /usr/lib/sendmail [-Ac] [-Am] [-ba] [-bD] [-bd] [-bi] [-bm] - [-bp] [-bP] [-bs] [-bt] [-bv] [-B type] [-C file] + /usr/lib/sendmail [-Ac] [-Am] [-ba] [-bD] [-bd] [-bi] [-bl] + [-bm] [-bp] [-bP] [-bs] [-bt] [-bv] [-B type] [-C file] [-D logfile] [-d X] [-F fullname] [-f name] [-G] [-h N] [-L tag] [-M xvalue] [-N notifications] [-n] [-Ooption =value] [-o xvalue] [-p protocol] @@ -294,6 +294,12 @@ option. + -bl + + Runs as a daemon (like -bd) but only accepts loopback + SMTP connections. + + -bm Delivers mail in the usual way (default). -- John http://blogs.sun.com/jbeck From ceri@submonkey.net Mon May 5 12:04:25 2008 Received: from dm-sfbay-02.sfbay.sun.com (dm-sfbay-02.SFBay.Sun.COM [129.146.11.31]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m45J4OL5024183 for ; Mon, 5 May 2008 12:04:25 -0700 (PDT) Received: from brmea-mail-4.sun.com (brmea-mail-4.Sun.COM [192.18.98.36]) by dm-sfbay-02.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m45J4OKO027735 for ; Mon, 5 May 2008 12:04:24 -0700 (PDT) Received: from relay13i.sun.com (ip123.net129179-4.block1.us.syntegra.com [129.179.4.123]) by brmea-mail-4.sun.com (8.13.6+Sun/8.12.9) with ESMTP id m45J0i6d018737 for ; Mon, 5 May 2008 19:04:24 GMT Received: from mmp11es.sun.com ([160.41.209.21] [160.41.209.21]) by relay13i.sun.com with ESMTP id BT-MMP-75204; Mon, 5 May 2008 19:04:24 Z Received: from relay18i.sun.com (relay18i.sun.com [129.179.4.128]) by mmp11es.sun.com with ESMTP id BT-MMP-8428310; Mon, 5 May 2008 19:04:23 Z Received: from shrike.submonkey.net ([82.15.31.38] [82.15.31.38]) by relay1i.sun.com with ESMTP id BT-MMP-2346518; Mon, 5 May 2008 19:04:23 Z Received: from ceri by shrike.submonkey.net with local (Exim 4.69 (FreeBSD)) (envelope-from ) id 1Jt5z3-0009nj-HT; Mon, 05 May 2008 20:04:21 +0100 Date: Mon, 5 May 2008 20:04:21 +0100 From: Ceri Davies To: John Beck Cc: psarc-ext@sac.sfbay.sun.com Subject: Re: sendmail local daemon mode (PSARC 2008/298) Message-ID: <20080505190421.GC19707@submonkey.net> References: <200805051616.m45GGt2H503408@opal.eng.sun.com> In-Reply-To: <200805051616.m45GGt2H503408@opal.eng.sun.com> X-Brightmail-Tracker: AAAAAA== X-PGP: finger ceri@FreeBSD.org User-Agent: Mutt/1.5.17 (2007-11-01) Sender: Ceri Davies X-Antispam: No, score=-2.6/5.0, scanned in 0.263sec at (localhost [127.0.0.1]) by smf-spamd v1.3.1 - http://smfs.sf.net/ MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="yEPQxsgoJgBvi8ip" Content-Disposition: inline Status: RO Content-Length: 1526 --yEPQxsgoJgBvi8ip Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, May 05, 2008 at 09:16:55AM -0700, John Beck wrote: > The use of this new argument will replace the earlier use of "-C > /etc/mail/local.cf" introduced by PSARC 2004/368, which added unneeded > complexity. Now we can go back to having a single config file for > incoming connections, rather than the overly complex "use local.cf if > config/local_only is in effect; use sendmail.cf otherwise" paradigm. > As a result of this simplification, PSARC 2008/042 is hereby amended: > path_to_local_mc is removed as an interface. Note that 2008/042 has not > yet been integrated, so there are no compatibility issues introduced by > removing this interface at this time. As for the local.cf stuff from > PSARC 2004/368, that was an implementation detail that did not rise to > the level of being an interface. It did require admins to be aware of it though; how will the change be communicated? Will existing local.cf files get removed by a patch or similar? Ceri --=20 That must be wonderful! I don't understand it at all. -- Moliere --yEPQxsgoJgBvi8ip Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (FreeBSD) iD8DBQFIH1o1ocfcwTS3JF8RAiu0AJ9idMeN/Gx2QxhHSOnyIsyXMlgyPgCfZm1s A64E5P87fj4IDaiQJE1MiQs= =TdRZ -----END PGP SIGNATURE----- --yEPQxsgoJgBvi8ip-- From jbeck@eng.sun.com Mon May 5 12:11:56 2008 Received: from opal.eng.sun.com (opal.SFBay.Sun.COM [129.146.228.54]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m45JBuTr024409 for ; Mon, 5 May 2008 12:11:56 -0700 (PDT) Received: from opal (localhost [127.0.0.1]) by opal.eng.sun.com (8.14.3+Sun/8.14.3) with ESMTP id m45JBlFG102159; Mon, 5 May 2008 12:11:47 -0700 (PDT) Message-Id: <200805051911.m45JBlFG102159@opal.eng.sun.com> X-Mailer: exmh version 2.7.2 2005-Jan-07 with nmh-1.0.3 To: Ceri Davies cc: John Beck , psarc-ext@sac.sfbay.sun.com Subject: Re: sendmail local daemon mode (PSARC 2008/298) X-Image-URL: http://playground.sun.com/~jbeck/gif/Misc/john-face.jpg In-reply-to: Your message of "Mon, 05 May 2008 20:04:21 BST." <20080505190421.GC19707@submonkey.net> References: <200805051616.m45GGt2H503408@opal.eng.sun.com> <20080505190421.GC19707@submonkey.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Mon, 05 May 2008 12:11:47 -0700 From: John Beck Status: RO Content-Length: 703 Ceri> It did require admins to be aware of it though; how will the change Ceri> be communicated? For Nevada and its kin: probably a release note, plus the heads-up that I will send when I do the putback. For S10: I'll have to work that out with whoever does the back-port; we will use whatever the appropriate mechanisms are. Ceri> Will existing local.cf files get removed by a patch or similar? On an upgrade: Yes. On a patchadd: I'm not sure. Essentially there will be a one-time hit to migrate from manually dealing with these things to using the new automated method, and I will get the word out via the various mechanisms that we have in place for that. -- John http://blogs.sun.com/jbeck From ceri@submonkey.net Mon May 5 12:18:54 2008 Received: from dm-sfbay-01.sfbay.sun.com (dm-sfbay-01.SFBay.Sun.COM [129.145.155.118]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m45JIoi3024660 for ; Mon, 5 May 2008 12:18:54 -0700 (PDT) Received: from sca-ea-mail-2.sun.com (sca-ea-mail-2.Sun.COM [192.18.43.25]) by dm-sfbay-01.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m45JIiaX023530 for ; Mon, 5 May 2008 12:18:44 -0700 (PDT) Received: from relay23.sun.com (relay23.sun.com [192.12.251.54] (may be forged)) by sca-ea-mail-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id m45JFCLt017454 for ; Mon, 5 May 2008 19:18:44 GMT Received: from mms22es.sun.com ([150.143.232.34] [150.143.232.34]) by relay23i.sun.com with ESMTP id BT-MMP-680988; Mon, 5 May 2008 19:18:44 Z Received: from relay21.sun.com (relay21.sun.com [192.12.251.24]) by mms22es.sun.com with ESMTP id BT-MMP-29636926; Mon, 5 May 2008 19:18:43 Z Received: from shrike.submonkey.net ([82.15.31.38] [82.15.31.38]) by relay21i.sun.com with ESMTP id BT-MMP-13609756; Mon, 5 May 2008 19:18:43 Z Received: from ceri by shrike.submonkey.net with local (Exim 4.69 (FreeBSD)) (envelope-from ) id 1Jt6Cw-00097j-Tf; Mon, 05 May 2008 20:18:42 +0100 Date: Mon, 5 May 2008 20:18:42 +0100 From: Ceri Davies To: John Beck Cc: psarc-ext@sac.sfbay.sun.com Subject: Re: sendmail local daemon mode (PSARC 2008/298) Message-ID: <20080505191842.GF19707@submonkey.net> References: <200805051616.m45GGt2H503408@opal.eng.sun.com> <20080505190421.GC19707@submonkey.net> <200805051911.m45JBlFG102159@opal.eng.sun.com> In-Reply-To: <200805051911.m45JBlFG102159@opal.eng.sun.com> X-Brightmail-Tracker: AAAAAA== X-PGP: finger ceri@FreeBSD.org User-Agent: Mutt/1.5.17 (2007-11-01) Sender: Ceri Davies X-Antispam: No, score=-2.6/5.0, scanned in 0.065sec at (localhost [127.0.0.1]) by smf-spamd v1.3.1 - http://smfs.sf.net/ MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="5xSkJheCpeK0RUEJ" Content-Disposition: inline Status: RO Content-Length: 1357 --5xSkJheCpeK0RUEJ Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, May 05, 2008 at 12:11:47PM -0700, John Beck wrote: > Ceri> It did require admins to be aware of it though; how will the change > Ceri> be communicated? >=20 > For Nevada and its kin: probably a release note, plus the heads-up that I > will send when I do the putback. For S10: I'll have to work that out with > whoever does the back-port; we will use whatever the appropriate mechanis= ms > are. >=20 >=20 > Ceri> Will existing local.cf files get removed by a patch or similar? >=20 > On an upgrade: Yes. On a patchadd: I'm not sure. Essentially there will > be a one-time hit to migrate from manually dealing with these things to > using the new automated method, and I will get the word out via the vario= us > mechanisms that we have in place for that. OK, thanks for clarifying. Ceri --=20 That must be wonderful! I don't understand it at all. -- Moliere --5xSkJheCpeK0RUEJ Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (FreeBSD) iD8DBQFIH12SocfcwTS3JF8RAmCfAJ9ngKz7Lrh0K7t6eURgFc5bgF9jxgCgjibo F/Abt/X7hTLLHSjQ2nFpk64= =TXKP -----END PGP SIGNATURE----- --5xSkJheCpeK0RUEJ-- From Darren.Moffat@Sun.COM Tue May 6 04:23:48 2008 Received: from dm-sfbay-01.sfbay.sun.com (dm-sfbay-01.SFBay.Sun.COM [129.145.155.118]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m46BNmEL017626 for ; Tue, 6 May 2008 04:23:48 -0700 (PDT) Received: from gmp-eb-inf-1.sun.com (gmp-eb-inf-1.EU.Sun.COM [192.18.6.21]) by dm-sfbay-01.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m46BNlKR004604 for ; Tue, 6 May 2008 04:23:47 -0700 (PDT) Received: from fe-emea-10.sun.com (gmp-eb-lb-2-fe1.eu.sun.com [192.18.6.10]) by gmp-eb-inf-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id m46BNfae027036 for ; Tue, 6 May 2008 11:23:41 GMT Received: from conversion-daemon.fe-emea-10.sun.com by fe-emea-10.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0K0G00A010YLSL00@fe-emea-10.sun.com> (original mail from Darren.Moffat@Sun.COM) for psarc-ext@sac.sfbay.sun.com; Tue, 06 May 2008 12:23:41 +0100 (BST) Received: from [129.156.173.199] by fe-emea-10.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0K0G00EC82BFXI10@fe-emea-10.sun.com>; Tue, 06 May 2008 12:23:39 +0100 (BST) Date: Tue, 06 May 2008 12:23:39 +0100 From: Darren J Moffat Subject: Re: sendmail local daemon mode (PSARC 2008/298) In-reply-to: <200805051616.m45GGt2H503408@opal.eng.sun.com> Sender: Darren.Moffat@Sun.COM To: John Beck Cc: psarc-ext@sac.sfbay.sun.com Message-id: <48203FBB.6020401@Sun.COM> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT References: <200805051616.m45GGt2H503408@opal.eng.sun.com> User-Agent: Thunderbird 2.0.0.12 (X11/20080408) Status: RO Content-Length: 160 John Beck wrote: > + Runs as a daemon (like -bd) but only accepts loopback > + SMTP connections. How is this check actually performed ? -- Darren J Moffat From jbeck@eng.sun.com Tue May 6 07:53:32 2008 Received: from opal.eng.sun.com (opal.SFBay.Sun.COM [129.146.228.54]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m46ErWLc022217 for ; Tue, 6 May 2008 07:53:32 -0700 (PDT) Received: from opal (localhost [127.0.0.1]) by opal.eng.sun.com (8.14.3+Sun/8.14.3) with ESMTP id m46ErW3k123836; Tue, 6 May 2008 07:53:32 -0700 (PDT) Message-Id: <200805061453.m46ErW3k123836@opal.eng.sun.com> X-Mailer: exmh version 2.7.2 2005-Jan-07 with nmh-1.0.3 To: Darren J Moffat cc: John Beck , psarc-ext@sac.sfbay.sun.com Subject: Re: sendmail local daemon mode (PSARC 2008/298) X-Image-URL: http://playground.sun.com/~jbeck/gif/Misc/john-face.jpg In-reply-to: Your message of "Tue, 06 May 2008 12:23:39 BST." <48203FBB.6020401@Sun.COM> References: <200805051616.m45GGt2H503408@opal.eng.sun.com> <48203FBB.6020401@Sun.COM> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Tue, 06 May 2008 07:53:32 -0700 From: John Beck Status: RO Content-Length: 304 JBeck> Runs as a daemon (like -bd) but only accepts loopback SMTP connections. Darren> How is this check actually performed ? With the INADDR_LOOPBACK and in6addr_loopback macros in the C code: nothing external (like, say, TCP Wrappers :-) is relied upon for this. -- John http://blogs.sun.com/jbeck From scott.rotondo@sun.com Tue May 6 13:55:40 2008 Received: from jurassic-x4600.sfbay.sun.com (cretaceous.SFBay.Sun.COM [129.146.17.63]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m46Ktd5U006628 for ; Tue, 6 May 2008 13:55:40 -0700 (PDT) Received: from [129.146.108.62] (vinifera.SFBay.Sun.COM [129.146.108.62]) by jurassic-x4600.sfbay.sun.com (8.14.2+Sun/8.14.2) with ESMTP id m46KtdQ2171576; Tue, 6 May 2008 13:55:39 -0700 (PDT) Message-ID: <4820C5CB.9020108@sun.com> Date: Tue, 06 May 2008 13:55:39 -0700 From: Scott Rotondo User-Agent: Thunderbird 2.0.0.6 (X11/20071119) MIME-Version: 1.0 To: John Beck CC: Darren J Moffat , psarc-ext@sac.sfbay.sun.com Subject: Re: sendmail local daemon mode (PSARC 2008/298) References: <200805051616.m45GGt2H503408@opal.eng.sun.com> <48203FBB.6020401@Sun.COM> <200805061453.m46ErW3k123836@opal.eng.sun.com> In-Reply-To: <200805061453.m46ErW3k123836@opal.eng.sun.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Status: RO Content-Length: 414 John Beck wrote: > JBeck> Runs as a daemon (like -bd) but only accepts loopback SMTP connections. > > Darren> How is this check actually performed ? > > With the INADDR_LOOPBACK and in6addr_loopback macros in the C code: nothing > external (like, say, TCP Wrappers :-) is relied upon for this. > That's the same approach I used to make lpd respond to local requests only as part of Secure by Default. Scott