/* * clamav-milter.c * .../clamav-milter/clamav-milter.c * * Copyright (C) 2003 Nigel Horne * * This program is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation; either version 2 of the License, or * (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. * * Install into /usr/local/sbin/clamav-milter * * See http://www.nmt.edu/~wcolburn/sendmail-8.12.5/libmilter/docs/sample.html * * For installation instructions see the file INSTALL that came with this file * * Change History: * $Log: clamav-milter.c,v $ * Revision 1.92 2004/06/03 13:14:08 nigelhorne * Up-issued * * Revision 1.91 2004/05/25 16:24:21 nigelhorne * X-Virus-Scanned wasn't being added in maxstreamlength was exceeded * * Revision 1.90 2004/05/24 17:05:18 nigelhorne * Include the hostname of the scanner in the headers * * Revision 1.89 2004/05/21 09:14:57 nigelhorne * Handle --from, print error message if write to quarantine fails * * Revision 1.88 2004/05/16 08:25:09 nigelhorne * Up issue * * Revision 1.87 2004/05/09 17:39:04 nigelhorne * Waiting threads weren't being woken up * * Revision 1.86 2004/05/06 11:25:20 nigelhorne * Some work on maxStreamLength * * Revision 1.85 2004/04/29 07:35:27 nigelhorne * Change from realloc to cli_realloc - keep assignment * * Revision 1.84 2004/04/28 14:28:29 nigelhorne * Various updates * * Revision 1.83 2004/04/25 12:56:35 nigelhorne * Added --pidfile * * Revision 1.82 2004/04/23 09:13:30 nigelhorne * Better quarantine email subject * * Revision 1.81 2004/04/22 16:47:04 nigelhorne * Various changes * * Revision 1.80 2004/04/21 15:27:02 nigelhorne * Various changes * * Revision 1.79 2004/04/20 14:15:01 nigelhorne * Sorted out X- headers and handle hostaddr == NULL * * Revision 1.78 2004/04/20 08:13:15 nigelhorne * Print better message if hostaddr is null * * Revision 1.77 2004/04/19 22:11:20 nigelhorne * Many changes * * Revision 1.76 2004/04/19 13:28:41 nigelhorne * Started coding e-mail template support * * Revision 1.75 2004/04/19 13:28:00 nigelhorne * Started coding e-mail template support * * Revision 1.74 2004/04/17 20:39:04 nigelhorne * Add the virus name into the 550 rejection if sent * * Revision 1.73 2004/04/15 09:53:25 nigelhorne * Handle systems without inet_ntop * * Revision 1.72 2004/04/09 08:36:53 nigelhorne * Handle clamd giving up on StreamMaxLength before clamav-milter * * Revision 1.71 2004/04/08 13:14:07 nigelhorne * Code tidy up * * Revision 1.70 2004/04/06 22:43:43 kojm * reverse strlcpy/strlcat patch * * Revision 1.69 2004/04/06 12:14:52 kojm * use strlcpy/strlcat * * Revision 1.68 2004/04/03 04:47:22 nigelhorne * Honour StreamMaxLength * * Revision 1.67 2004/04/01 15:34:00 nigelhorne * ThreadTimeout has been renamed ReadTimeout * * Revision 1.66 2004/03/31 20:48:03 nigelhorne * Config file has changed * * Revision 1.65 2004/03/27 21:44:21 nigelhorne * Attempt to handle clamd quick timeout for slow remote sites * * Revision 1.64 2004/03/26 11:10:27 nigelhorne * Added debug information * * Revision 1.63 2004/03/20 12:30:00 nigelhorne * strerror_r is confused on Linux * * Revision 1.62 2004/03/17 19:46:49 nigelhorne * Upissue to 0.70@ * * Revision 1.61 2004/03/15 19:54:12 kojm * 0.70-rc * * Revision 1.60 2004/03/10 11:31:03 nigelhorne * Use HAVE_STRERROR_R * * Revision 1.59 2004/03/07 15:11:15 nigelhorne * Added more information to headers flag * * Revision 1.58 2004/03/03 09:14:55 nigelhorne * Change way check for TCPwrappers on TCP/IP * * Revision 1.57 2004/02/27 15:27:11 nigelhorne * call checkClamd on start * * Revision 1.56 2004/02/27 09:23:56 nigelhorne * Don't use TCP wrappers when UNIX domain sockets are used * * Revision 1.55 2004/02/22 22:53:50 nigelhorne * Handle ERROR message from clamd * * Revision 1.54 2004/02/22 17:27:40 nigelhorne * Updated installation instructions now that privileges are dropped * * Revision 1.53 2004/02/21 11:03:23 nigelhorne * Error if quarantine-dir is publically accessable * * Revision 1.52 2004/02/20 17:07:24 nigelhorne * Added checkClamd * * Revision 1.51 2004/02/20 09:50:42 nigelhorne * Removed warnings added by new configuration script * * Revision 1.50 2004/02/19 10:00:26 nigelhorne * Rework TCPWrappers support * * Revision 1.49 2004/02/18 13:30:34 nigelhorne * Added dont-long-clean argument * * Revision 1.48 2004/02/18 10:06:51 nigelhorne * Fix FreeBSD * * Revision 1.47 2004/02/16 11:55:24 nigelhorne * Added clamfi_free which helps with the tidying up * * Revision 1.46 2004/02/16 09:39:22 nigelhorne * Upissued to 0.67 * * Revision 1.45 2004/02/14 17:20:38 nigelhorne * Add TCPwrappers support * * Revision 1.44 2004/02/09 11:05:33 nigelhorne * Added Hflag * * Revision 1.43 2004/02/07 12:16:20 nigelhorne * Added config.h * * Revision 1.42 2004/02/02 13:44:31 nigelhorne * Include the ID of the message when warnings are sent to the postmaster-only * * Revision 1.41 2004/01/29 12:52:35 nigelhorne * Added --noreject flag * * Revision 1.40 2004/01/28 15:55:59 nigelhorne * Fixed compilation error with --enable-debug * * Revision 1.39 2004/01/26 14:12:42 nigelhorne * Corrected endian problem (ntohs instead of htons) * * Revision 1.38 2004/01/25 14:23:51 nigelhorne * Support multiple clamd servers * * Revision 1.37 2004/01/24 18:09:39 nigelhorne * Allow clamd server name as well as IPaddress in -s option * * Revision 1.36 2004/01/12 15:30:53 nigelhorne * FixStaleSocket no longer complains on ENOENT * * Revision 1.35 2004/01/10 16:22:14 nigelhorne * Added OpenBSD instructions and --signature-file * * Revision 1.34 2003/12/31 14:46:35 nigelhorne * Include the sendmail queue ID in the log * * Revision 1.33 2003/12/27 17:28:56 nigelhorne * Moved --sign data to private area * * Revision 1.32 2003/12/22 14:05:31 nigelhorne * Added --sign option * * Revision 1.31 2003/12/13 16:43:21 nigelhorne * Upissue * * Revision 1.30 2003/12/12 13:42:47 nigelhorne * alls to clamfi_cleanup were missing * * Revision 1.29 2003/12/10 12:00:39 nigelhorne * Timeout on waiting for data from clamd * * Revision 1.28 2003/12/09 09:22:14 nigelhorne * Use the location of sendmail discovered by configure * * Revision 1.27 2003/12/05 19:14:07 nigelhorne * Set umask; handle unescaped From in mailboxes * * Revision 1.26 2003/12/02 06:37:26 nigelhorne * Use setsid if setpgrp not present * * Revision 1.25 2003/11/30 06:12:06 nigelhorne * Added --quarantine-dir option * * Revision 1.24 2003/11/29 11:51:19 nigelhorne * Fix problem of possible confused pointers if large number of recipients given * * Revision 1.23 2003/11/25 05:56:43 nigelhorne * Handle empty hostname or hostaddr * * Revision 1.22 2003/11/24 04:48:44 nigelhorne * Support AllowSupplementaryGroups * * Revision 1.21 2003/11/22 11:47:45 nigelhorne * Drop root priviliges and support quarantine * * Revision 1.20 2003/11/19 16:32:22 nigelhorne * Close cmdSocket earlier * * Revision 1.19 2003/11/17 04:48:30 nigelhorne * Up issue to version 0.65 * * Revision 1.18 2003/11/11 08:19:20 nigelhorne * Handle % characters in e-mail addresses * * Revision 1.17 2003/11/05 15:41:11 nigelhorne * Tidyup pthread_cond_timewait call * * Revision 1.16 2003/10/31 13:33:40 nigelhorne * Added dont scan on error flag * * Revision 1.15 2003/10/22 19:44:01 nigelhorne * more calls to pthread_cond_broadcast * * Revision 1.14 2003/10/12 08:37:21 nigelhorne * Uses VERSION command to get version information * * Revision 1.13 2003/10/11 15:42:15 nigelhorne * Don't call clamdscan * * Revision 1.12 2003/10/05 17:30:04 nigelhorne * Only fix old socket when FixStaleSocket is set * * Revision 1.11 2003/10/05 13:57:47 nigelhorne * Fixed handling of MaxThreads * * Revision 1.10 2003/10/03 11:54:53 nigelhorne * Added white list of recipients * * Revision 1.9 2003/09/30 11:53:55 nigelhorne * clamfi_envfrom was returning EX_TEMPFAIL in some places rather than SMFIS_TEMPFAIL * * Revision 1.8 2003/09/29 06:20:17 nigelhorne * max_children now overrides MaxThreads * * Revision 1.7 2003/09/29 06:07:49 nigelhorne * Ensure remoteIP is set before usage * * Revision 1.6 2003/09/28 16:37:23 nigelhorne * Added -f flag use MaxThreads if --max-children not set */ static char const rcsid[] = "$Id: clamav-milter.c,v 1.92 2004/06/03 13:14:08 nigelhorne Exp $"; #define CM_VERSION "0.72" /*#define CONFDIR "/usr/local/etc"*/ #if HAVE_CONFIG_H #include "clamav-config.h" #endif #include "defaults.h" #include "cfgparser.h" #include "../target.h" #include "str.h" #include "../libclamav/others.h" #include "clamav.h" #ifndef CL_DEBUG #define NDEBUG #endif #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #ifdef WITH_TCPWRAP #include int allow_severity = LOG_DEBUG; int deny_severity = LOG_NOTICE; #endif #if defined(CL_DEBUG) && defined(C_LINUX) #include #endif #define _GNU_SOURCE #include "getopt.h" #ifndef SENDMAIL_BIN #define SENDMAIL_BIN "/usr/lib/sendmail" #endif #ifndef HAVE_IN_PORT_T typedef unsigned short in_port_t; #endif /* * TODO: optional: xmessage on console when virus stopped (SNMP would be real nice!) * Having said that, with LogSysLog you can (on Linux) configure the system * to get messages on the system console, see syslog.conf(5), also you * can use wall(1) in the VirusEvent entry in clamav.conf * TODO: build with libclamav.so rather than libclamav.a * TODO: bounce message should optionally be read from a file * TODO: Support LogTime and Logfile from the conf file * TODO: Warn if TCPAddr doesn't allow connection from us * TODO: Decide action (bounce, discard, reject etc.) based on the virus * found. Those with faked addresses, such as SCO.A want discarding, * others could be bounced properly. * TODO: Encrypt mails sent to clamd to stop sniffers * TODO: Test with IPv6 */ struct header_node_t { char *header; struct header_node_t *next; }; struct header_list_struct { struct header_node_t *first; struct header_node_t *last; }; typedef struct header_list_struct *header_list_t; /* * Each thread has one of these */ struct privdata { char *from; /* Who sent the message */ char **to; /* Who is the message going to */ int numTo; /* Number of people the message is going to */ int cmdSocket; /* * Socket to send/get commands e.g. PORT for * dataSocket */ int dataSocket; /* Socket to send data to clamd */ char *filename; /* Where to store the message in quarantine */ u_char *body; /* body of the message if Sflag is set */ size_t bodyLen; /* number of bytes in body */ header_list_t headers; /* Message headers */ long numBytes; /* Number of bytes sent so far */ char *received; /* keep track of received from */ const char *rejectCode; /* 550 or 554? */ char *messageID; /* sendmailID */ int discard; /* * looks like the remote end is playing ping * pong with us */ int serverNumber; /* Index into serverIPs */ }; static int pingServer(int serverNumber); static int findServer(void); static sfsistat clamfi_connect(SMFICTX *ctx, char *hostname, _SOCK_ADDR *hostaddr); static sfsistat clamfi_envfrom(SMFICTX *ctx, char **argv); static sfsistat clamfi_envrcpt(SMFICTX *ctx, char **argv); static sfsistat clamfi_header(SMFICTX *ctx, char *headerf, char *headerv); static sfsistat clamfi_eoh(SMFICTX *ctx); static sfsistat clamfi_body(SMFICTX *ctx, u_char *bodyp, size_t len); static sfsistat clamfi_eom(SMFICTX *ctx); static sfsistat clamfi_abort(SMFICTX *ctx); static sfsistat clamfi_close(SMFICTX *ctx); static void clamfi_cleanup(SMFICTX *ctx); static void clamfi_free(struct privdata *privdata); static int clamfi_send(struct privdata *privdata, size_t len, const char *format, ...); static char *strrcpy(char *dest, const char *source); static int clamd_recv(int sock, char *buf, size_t len); static off_t updateSigFile(void); static header_list_t header_list_new(void); static void header_list_free(header_list_t list); static void header_list_add(header_list_t list, const char *headerf, const char *headerv); static void header_list_print(header_list_t list, FILE *fp); static int connect2clamd(struct privdata *privdata); static void checkClamd(void); static int sendtemplate(const char *filename, FILE *sendmail, const char *clamdMessage); static char clamav_version[128]; static int fflag = 0; /* force a scan, whatever */ static int oflag = 0; /* scan messages from our machine? */ static int lflag = 0; /* scan messages from our site? */ static int bflag = 0; /* * send a failure (bounce) message to the * sender. This probably isn't a good idea * since most reply addresses will be fake */ static int pflag = 0; /* * Send a warning to the postmaster only, * this means user's won't be told when someone * sent them a virus */ static int qflag = 0; /* * Send no warnings when a virus is found, * this means that the only log of viruses * found is the syslog, so it's best to * enable LogSyslog in clamav.conf */ static int Sflag = 0; /* * Add a signature to each message that * has been scanned */ static const char *sigFilename; /* * File where the scanned message signature * can be found */ static char *quarantine; /* * If a virus is found in an email redirect * it to this account */ static char *quarantine_dir; /* * Path to store messages before scanning. * Infected ones will be left there. */ static int nflag = 0; /* * Don't add X-Virus-Scanned to header. Patch * from Dirk Meyer */ static int rejectmail = 1; /* * Send a 550 rejection when a virus is * found */ static int hflag = 0; /* * Include original message headers in * report */ static int cl_error = SMFIS_TEMPFAIL; /* * If an error occurs, return * this status. Allows messages * to be passed through * unscanned in the event of * an error. Patch from * Joe Talbott */ static int readTimeout = CL_DEFAULT_SCANTIMEOUT; /* * number of seconds to wait for clamd to * respond, see ReadTimeout in clamav.conf */ static long streamMaxLength = -1; /* StreamMaxLength from clamav.conf */ static int logClean = 1; /* * Add clean items to the log file */ static char *signature = "-- \nScanned by ClamAv - http://www.clamav.net\n"; static time_t signatureStamp; static char *templatefile; /* e-mail to be sent when virus detected */ #ifdef CL_DEBUG static int debug_level = 0; #endif static pthread_mutex_t n_children_mutex = PTHREAD_MUTEX_INITIALIZER; static pthread_cond_t n_children_cond = PTHREAD_COND_INITIALIZER; static unsigned int n_children = 0; static unsigned int max_children = 0; short use_syslog = 0; static const char *pidFile; static int logVerbose = 0; static struct cfgstruct *copt; static const char *localSocket; /* milter->clamd comms */ static in_port_t tcpSocket; /* milter->clamd comms */ static char *port = NULL; /* sendmail->milter comms */ static const char *serverHostNames = "127.0.0.1"; static long *serverIPs; /* IPv4 only */ static int numServers; /* numer of elements in serverIPs */ static const char *postmaster = "postmaster"; static const char *from = "MAILER-DAEMON"; /* * NULL terminated whitelist of target ("to") addresses that we do NOT scan * TODO: read in from a file * TODO: add white list of target e-mail addresses that we do NOT scan * TODO: items in the list should be regular expressions */ static const char *ignoredEmailAddresses[] = { /*"Mailer-Daemon@bandsman.co.uk", "postmaster@bandsman.co.uk",*/ NULL }; static void help(void) { printf("\n\tclamav-milter version %s\n", CM_VERSION); puts("\tCopyright (C) 2004 Nigel Horne \n"); puts("\t--bounce\t\t-b\tSend a failure message to the sender."); puts("\t--config-file=FILE\t-c FILE\tRead configuration from FILE."); puts("\t--debug\t\t\t-D\tPrint debug messages."); puts("\t--dont-log-clean\t-C\tDon't add an entry to syslog that a mail is clean."); puts("\t--dont-scan-on-error\t-d\tPass e-mails through unscanned if a system error occurs."); puts("\t--from=EMAIL\t\t-a EMAIL\tError messages come from here."); puts("\t--force-scan\t\t-f\tForce scan all messages (overrides (-o and -l)."); puts("\t--help\t\t\t-h\tThis message."); puts("\t--headers\t\t-H\tInclude original message headers in the report."); puts("\t--local\t\t\t-l\tScan messages sent from machines on our LAN."); puts("\t--outgoing\t\t-o\tScan outgoing messages from this machine."); puts("\t--noreject\t\t-N\tDon't reject viruses, silently throw them away."); puts("\t--noxheader\t\t-n\tSuppress X-Virus-Scanned/X-Virus-Status headers."); puts("\t--pidfile=FILE\t\t-i FILE\tLocation of pidfile."); puts("\t--postmaster\t\t-p EMAIL\tPostmaster address [default=postmaster]."); puts("\t--postmaster-only\t-P\tSend warnings only to the postmaster."); puts("\t--quiet\t\t\t-q\tDon't send e-mail notifications of interceptions."); puts("\t--quarantine=USER\t-Q EMAIL\tQuanrantine e-mail account."); puts("\t--quarantine-dir=DIR\t-U DIR\tDirectory to store infected emails."); puts("\t--server=SERVER\t\t-s SERVER\tHostname/IP address of server(s) running clamd (when using TCPsocket)."); puts("\t--sign\t\t\t-S\tAdd a hard-coded signature to each scanned message."); puts("\t--signature-file=FILE\t-F FILE\tLocation of signature file."); puts("\t--template-file=FILE\t-t FILE\tLocation of e-mail template file."); puts("\t--version\t\t-V\tPrint the version number of this software."); #ifdef CL_DEBUG puts("\t--debug-level=n\t\t-x n\tSets the debug level to 'n'."); #endif } int main(int argc, char **argv) { extern char *optarg; const char *cfgfile = CL_DEFAULT_CFG; struct cfgstruct *cpt; struct passwd *user; const char *pidfile = NULL; struct smfiDesc smfilter = { "ClamAv", /* filter name */ SMFI_VERSION, /* version code -- leave untouched */ SMFIF_ADDHDRS, /* flags - we add headers */ clamfi_connect, /* connection callback */ NULL, /* HELO filter callback */ clamfi_envfrom, /* envelope sender filter callback */ clamfi_envrcpt, /* envelope recipient filter callback */ clamfi_header, /* header filter callback */ clamfi_eoh, /* end of header callback */ clamfi_body, /* body filter callback */ clamfi_eom, /* end of message callback */ clamfi_abort, /* message aborted callback */ clamfi_close, /* connection cleanup callback */ }; #if defined(CL_DEBUG) && defined(C_LINUX) struct rlimit rlim; rlim.rlim_cur = rlim.rlim_max = RLIM_INFINITY; if(setrlimit(RLIMIT_CORE, &rlim) < 0) perror("setrlimit"); #endif /* * Temporarily enter guessed value into clamav_version, will * be overwritten later by the value returned by clamd */ snprintf(clamav_version, sizeof(clamav_version), "ClamAV version %s, clamav-milter version %s", VERSION, CM_VERSION); for(;;) { int opt_index = 0; #ifdef CL_DEBUG const char *args = "abc:CDfF:lm:nNop:PqQ:dhHs:St:U:Vx:"; #else const char *args = "abc:CDfF:lm:nNop:PqQ:dhHs:St:U:V"; #endif static struct option long_options[] = { { "from", 0, NULL, 'a' }, { "bounce", 0, NULL, 'b' }, { "config-file", 1, NULL, 'c' }, { "dont-log-clean", 0, NULL, 'C' }, { "dont-scan-on-error", 0, NULL, 'd' }, { "debug", 0, NULL, 'D' }, { "force-scan", 0, NULL, 'f' }, { "headers", 0, NULL, 'H' }, { "help", 0, NULL, 'h' }, { "pidfile", 1, NULL, 'i' }, { "local", 0, NULL, 'l' }, { "noreject", 0, NULL, 'N' }, { "noxheader", 0, NULL, 'n' }, { "outgoing", 0, NULL, 'o' }, { "postmaster", 1, NULL, 'p' }, { "postmaster-only", 0, NULL, 'P', }, { "quiet", 0, NULL, 'q' }, { "quarantine", 1, NULL, 'Q', }, { "quarantine-dir", 1, NULL, 'U', }, { "max-children", 1, NULL, 'm' }, { "server", 1, NULL, 's' }, { "sign", 0, NULL, 'S' }, { "signature-file", 1, NULL, 'F' }, { "template-file", 1, NULL, 't' }, { "version", 0, NULL, 'V' }, #ifdef CL_DEBUG { "debug-level", 1, NULL, 'x' }, #endif { NULL, 0, NULL, '\0' } }; int ret = getopt_long(argc, argv, args, long_options, &opt_index); if(ret == -1) break; else if(ret == 0) ret = long_options[opt_index].val; switch(ret) { case 'a': /* e-mail errors from here */ from = optarg; break; case 'b': /* bounce worms/viruses */ bflag++; break; case 'c': /* where is clamav.conf? */ cfgfile = optarg; break; case 'C': /* dont log clean */ logClean = 0; break; case 'd': /* don't scan on error */ cl_error = SMFIS_ACCEPT; break; case 'D': /* enable debug messages */ cl_debug(); break; case 'f': /* force the scan */ fflag++; break; case 'h': help(); return EX_OK; case 'H': hflag++; break; case 'i': /* pidfile */ pidfile = optarg; break; case 'l': /* scan mail from the lan */ lflag++; break; case 'm': /* maximum number of children */ max_children = atoi(optarg); break; case 'n': /* don't add X-Virus-Scanned */ nflag++; smfilter.xxfi_flags &= ~SMFIF_ADDHDRS; break; case 'N': /* Do we reject mail or silently drop it */ rejectmail = 0; break; case 'o': /* scan outgoing mail */ oflag++; break; case 'p': /* postmaster e-mail address */ postmaster = optarg; break; case 'P': /* postmaster only */ pflag++; break; case 'q': /* send NO notification email */ qflag++; break; case 'Q': /* quarantine e-mail address */ quarantine = optarg; smfilter.xxfi_flags |= SMFIF_CHGHDRS|SMFIF_ADDRCPT|SMFIF_DELRCPT; break; case 's': /* server running clamd */ serverHostNames = optarg; break; case 'F': /* signature file */ sigFilename = optarg; signature = NULL; /* fall through */ case 'S': /* sign */ smfilter.xxfi_flags |= SMFIF_CHGBODY; Sflag++; break; case 't': /* e-mail template file */ templatefile = optarg; break; case 'U': /* quarantine path */ quarantine_dir = optarg; break; case 'V': puts(clamav_version); return EX_OK; #ifdef CL_DEBUG case 'x': debug_level = atoi(optarg); break; #endif default: #ifdef CL_DEBUG fprintf(stderr, "Usage: %s [-b] [-c FILE] [-F FILE] [--max-children=num] [-l] [-o] [-p address] [-P] [-q] [-Q USER] [-s SERVER] [-S] [-x#] [-U PATH] socket-addr\n", argv[0]); #else fprintf(stderr, "Usage: %s [-b] [-c FILE] [-F FILE] [--max-children=num] [-l] [-o] [-p address] [-P] [-q] [-Q USER] [-s SERVER] [-S] [-U PATH] socket-addr\n", argv[0]); #endif return EX_USAGE; } } if (optind == argc) { fprintf(stderr, "%s: No socket-addr given\n", argv[0]); return EX_USAGE; } port = argv[optind]; /* * Sanity checks on the clamav configuration file */ if((copt = parsecfg(cfgfile)) == NULL) { fprintf(stderr, "%s: Can't parse the config file %s\n", argv[0], cfgfile); return EX_CONFIG; } /* * Drop privileges */ if(getuid() == 0) { if((cpt = cfgopt(copt, "User")) != NULL) { if((user = getpwnam(cpt->strarg)) == NULL) { fprintf(stderr, "%s: Can't get information about user %s\n", argv[0], cpt->strarg); return EX_CONFIG; } if(cfgopt(copt, "AllowSupplementaryGroups")) initgroups(cpt->strarg, user->pw_gid); else setgroups(1, &user->pw_gid); setgid(user->pw_gid); if(setuid(user->pw_uid) < 0) perror(cpt->strarg); else cli_dbgmsg("Running as user %s (UID %d, GID %d)\n", cpt->strarg, user->pw_uid, user->pw_gid); } else fprintf(stderr, "%s: running as root is not recommended\n", argv[0]); } if(quarantine_dir) { struct stat statb; if(access(quarantine_dir, W_OK) < 0) { perror(quarantine_dir); return EX_CONFIG; } if(stat(quarantine_dir, &statb) < 0) { perror(quarantine_dir); return EX_CONFIG; } /* * Quit if the quarantine directory is publically readable * or writeable */ if(statb.st_mode & 077) { fprintf(stderr, "%s: unsafe quarantine directory %s\n", argv[0], quarantine_dir); return EX_CONFIG; } } if(sigFilename && !updateSigFile()) return EX_USAGE; if(templatefile && (access(templatefile, R_OK) < 0)) { perror(templatefile); return EX_CONFIG; } if(!cfgopt(copt, "StreamSaveToDisk")) { fprintf(stderr, "%s: StreamSavetoDisk not enabled in %s\n", argv[0], cfgfile); return EX_CONFIG; } if(!cfgopt(copt, "ScanMail")) { /* * In fact ScanMail isn't needed if this machine doesn't run * clamd. */ fprintf(stderr, "%s: ScanMail not enabled in %s\n", argv[0], cfgfile); return EX_CONFIG; } /* * patch from "Richard G. Roberto" * If the --max-children flag isn't set, see if MaxThreads * is set in the config file */ if((max_children == 0) && ((cpt = cfgopt(copt, "MaxThreads")) != NULL)) max_children = cpt->numarg; if((cpt = cfgopt(copt, "ReadTimeout")) != NULL) { readTimeout = cpt->numarg; if(readTimeout < 0) { fprintf(stderr, "%s: ReadTimeout must not be negative in %s\n", argv[0], cfgfile); return EX_CONFIG; } } if((cpt = cfgopt(copt, "StreamMaxLength")) != NULL) { if(cpt->numarg < 0) { fprintf(stderr, "%s: StreamMaxLength must not be negative in %s\n", argv[0], cfgfile); return EX_CONFIG; } streamMaxLength = (long)cpt->numarg; } /* * Get the outgoing socket details - the way to talk to clamd */ if((cpt = cfgopt(copt, "LocalSocket")) != NULL) { if(cfgopt(copt, "TCPSocket") != NULL) { fprintf(stderr, "%s: You can select one server type only (local/TCP) in %s\n", argv[0], cfgfile); return EX_CONFIG; } /* * TODO: check --server hasn't been set */ localSocket = cpt->strarg; if(!pingServer(-1)) { fprintf(stderr, "Can't talk to clamd server via %s\n", localSocket); fprintf(stderr, "Check your entry for LocalSocket in %s\n", cfgfile); return EX_CONFIG; } /*if(quarantine_dir == NULL) fprintf(stderr, "When using Localsocket in %s\nyou may improve performance if you use the --quarantine-dir option\n", cfgfile);*/ umask(077); serverIPs = (long *)cli_malloc(sizeof(long)); serverIPs[0] = inet_addr("127.0.0.1"); } else if((cpt = cfgopt(copt, "TCPSocket")) != NULL) { int i, activeServers; /* * TCPSocket is in fact a port number not a full socket */ if(quarantine_dir) { fprintf(stderr, "%s: --quarantine-dir not supported for remote scanning - use --quarantine\n", argv[0]); return EX_CONFIG; } tcpSocket = (in_port_t)cpt->numarg; /* * cli_strtok's fieldno counts from 0 */ for(;;) { char *hostname = cli_strtok(serverHostNames, numServers, ":"); if(hostname == NULL) break; numServers++; free(hostname); } cli_dbgmsg("numServers: %d\n", numServers); serverIPs = (long *)cli_malloc(numServers * sizeof(long)); activeServers = 0; for(i = 0; i < numServers; i++) { char *hostname = cli_strtok(serverHostNames, i, ":"); /* * Translate server's name to IP address */ serverIPs[i] = inet_addr(hostname); if(serverIPs[i] == -1L) { const struct hostent *h = gethostbyname(hostname); if(h == NULL) { fprintf(stderr, "%s: Unknown host %s\n", argv[0], hostname); return EX_USAGE; } memcpy((char *)&serverIPs[i], h->h_addr, sizeof(serverIPs[i])); } if(pingServer(i)) activeServers++; else { cli_warnmsg("Warning Can't talk to clamd server %s on port %d\n", hostname, tcpSocket); } free(hostname); } if(activeServers == 0) { cli_errmsg("Can't find any clamd servers\n"); cli_errmsg("Check your entry for TCPSocket in %s\n", cfgfile); return EX_CONFIG; } } else { fprintf(stderr, "%s: You must select server type (local/TCP) in %s\n", argv[0], cfgfile); return EX_CONFIG; } if(!cfgopt(copt, "Foreground")) { #ifdef CL_DEBUG printf("When debugging it is recommended that you use Foreground mode in %s\n", cfgfile); puts("So that you can see all of the messages"); #endif switch(fork()) { case -1: perror("fork"); return EX_TEMPFAIL; case 0: /* child */ break; default: /* parent */ return EX_OK; } close(0); open("/dev/null", O_RDONLY); #ifndef CL_DEBUG close(1); close(2); if((open("/dev/console", O_WRONLY) == 1) || (open("/dev/null", O_WRONLY) == 1)) dup(1); #endif #ifdef HAVE_SETPGRP #ifdef SETPGRP_VOID setpgrp(); #else setpgrp(0,0); #endif #else #ifdef HAVE_SETSID setsid(); #endif #endif } if((cpt = cfgopt(copt, "PidFile")) != NULL) pidFile = cpt->strarg; if(cfgopt(copt, "LogSyslog")) { if(cfgopt(copt, "LogVerbose")) logVerbose = 1; use_syslog = 1; openlog("clamav-milter", LOG_CONS|LOG_PID, LOG_MAIL); if(logVerbose) syslog(LOG_INFO, "Starting: %s", clamav_version); else syslog(LOG_INFO, clamav_version); #ifdef CL_DEBUG if(debug_level > 0) syslog(LOG_DEBUG, "Debugging is on"); #endif } else { if(qflag) fprintf(stderr, "%s: (-q && !LogSyslog): warning - all interception message methods are off\n", argv[0]); use_syslog = 0; } if(pidfile) { /* save the PID */ FILE *fd; const mode_t old_umask = umask(0006); if((fd = fopen(pidfile, "w")) == NULL) { if(use_syslog) syslog(LOG_WARNING, "Can't save PID in file %s", pidfile); cli_warnmsg("Can't save PID in file %s\n", pidfile); } else { fprintf(fd, "%d\n", (int)getpid()); fclose(fd); } umask(old_umask); } if(cfgopt(copt, "FixStaleSocket")) { /* * Get the incoming socket details - the way sendmail talks to * us * * TODO: There's a security problem here that'll need fixing if * the User entry of clamav.conf is not used */ if(strncasecmp(port, "unix:", 5) == 0) { if(unlink(&port[5]) < 0) if(errno != ENOENT) perror(&port[5]); } else if(strncasecmp(port, "local:", 6) == 0) { if(unlink(&port[6]) < 0) if(errno != ENOENT) perror(&port[6]); } } if(smfi_setconn(port) == MI_FAILURE) { fprintf(stderr, "%s: smfi_setconn failed\n", argv[0]); return EX_SOFTWARE; } if(smfi_register(smfilter) == MI_FAILURE) { cli_errmsg("smfi_register failure\n"); return EX_UNAVAILABLE; } signal(SIGPIPE, SIG_IGN); if(logVerbose) syslog(LOG_INFO, "Started: %s", clamav_version); return smfi_main(); } /* * Verify that the server is where we think it is * Returns true or false * * serverNumber counts from 0, but is only used for TCPSocket */ static int pingServer(int serverNumber) { char *ptr; int sock, nbytes; char buf[128]; if(localSocket) { struct sockaddr_un server; memset((char *)&server, 0, sizeof(struct sockaddr_un)); server.sun_family = AF_UNIX; strncpy(server.sun_path, localSocket, sizeof(server.sun_path)); if((sock = socket(AF_UNIX, SOCK_STREAM, 0)) < 0) { perror("socket"); return 0; } checkClamd(); if(connect(sock, (struct sockaddr *)&server, sizeof(struct sockaddr_un)) < 0) { perror(localSocket); close(sock); return 0; } } else { struct sockaddr_in server; memset((char *)&server, 0, sizeof(struct sockaddr_in)); server.sin_family = AF_INET; server.sin_port = (in_port_t)htons(tcpSocket); assert(serverIPs != NULL); assert(serverIPs[0] != -1L); server.sin_addr.s_addr = serverIPs[serverNumber]; if((sock = socket(AF_INET, SOCK_STREAM, 0)) < 0) { perror("socket"); return 0; } if(connect(sock, (struct sockaddr *)&server, sizeof(struct sockaddr_in)) < 0) { perror("connect"); close(sock); return 0; } } /* * It would be better to use PING, check for PONG then issue the * VERSION command, since that would better validate that we're * talking to clamd, however clamd closes the session after * sending PONG :-( * So this code does not really validate that we're talking to clamd * Needs a fix to clamd * Also version command is verbose: says "clamd / ClamAV version" * instead of "clamAV version" */ if(send(sock, "VERSION\n", 8, 0) < 8) { perror("send"); close(sock); return 0; } shutdown(sock, SHUT_WR); nbytes = clamd_recv(sock, buf, sizeof(buf)); close(sock); if(nbytes < 0) { perror("recv"); return 0; } if(nbytes == 0) return 0; buf[nbytes] = '\0'; /* Remove the trailing new line from the reply */ if((ptr = strchr(buf, '\n')) != NULL) *ptr = '\0'; /* * No real validation is done here * * TODO: When connecting to more than one server, give a warning * if they're running different versions, or if the virus DBs * are out of date */ snprintf(clamav_version, sizeof(clamav_version), "%s, clamav-milter version %s", buf, CM_VERSION); return 1; } /* * Find the best server to connect to. No intelligence to this. * It is best to weight the order of the servers from most wanted to least * wanted * * Return value is from 0 - index into serverIPs * * If the load balancing fails return the first server in the list, not * an error, to be on the safe side */ static int findServer(void) { struct sockaddr_in *servers, *server; int *socks, maxsock = 0, i; fd_set rfds; struct timeval tv; int retval; assert(tcpSocket != 0); assert(numServers > 0); if(numServers == 1) return 0; servers = (struct sockaddr_in *)cli_calloc(numServers, sizeof(struct sockaddr_in)); socks = (int *)cli_malloc(numServers * sizeof(int)); FD_ZERO(&rfds); for(i = 0, server = servers; i < numServers; i++, server++) { int sock; server->sin_family = AF_INET; server->sin_port = (in_port_t)htons(tcpSocket); server->sin_addr.s_addr = serverIPs[i]; sock = socks[i] = socket(AF_INET, SOCK_STREAM, 0); if(sock < 0) { perror("socket"); do if(socks[i] >= 0) close(socks[i]); while(--i >= 0); free(socks); free(servers); return 0; /* Use the first server on failure */ } if((connect(sock, (struct sockaddr *)server, sizeof(struct sockaddr)) < 0) || (send(sock, "PING\n", 5, 0) < 5)) { const char *hostname = cli_strtok(serverHostNames, i, ":"); cli_warnmsg("Check clamd server %s - it may be down\n", hostname); if(use_syslog) syslog(LOG_WARNING, "Check clamd server %s - it may be down", hostname); socks[i] = -1; close(sock); continue; } shutdown(sock, SHUT_WR); FD_SET(sock, &rfds); if(sock > maxsock) maxsock = sock; } free(servers); tv.tv_sec = readTimeout; tv.tv_usec = 0; retval = select(maxsock + 1, &rfds, NULL, NULL, &tv); if(retval < 0) perror("select"); for(i = 0; i < numServers; i++) if(socks[i] >= 0) close(socks[i]); if(retval == 0) { free(socks); cli_dbgmsg("findServer: No response from any server\n"); if(use_syslog) syslog(LOG_WARNING, "findServer: No response from any server"); return 0; } else if(retval < 0) { free(socks); if(use_syslog) syslog(LOG_ERR, "findServer: select failed"); return 0; } for(i = 0; i < numServers; i++) if(FD_ISSET(socks[i], &rfds)) { free(socks); cli_dbgmsg("findServer: using server %d\n", i); return i; } free(socks); cli_dbgmsg("findServer: No response from any server\n"); if(use_syslog) syslog(LOG_WARNING, "findServer: No response from any server"); return 0; } /* * Sendmail wants to establish a connection to us */ static sfsistat clamfi_connect(SMFICTX *ctx, char *hostname, _SOCK_ADDR *hostaddr) { #if defined(HAVE_INET_NTOP) || defined(WITH_TCPWRAP) char ip[INET_ADDRSTRLEN]; /* IPv4 only */ #endif char *remoteIP; if(hostname == NULL) { if(use_syslog) syslog(LOG_ERR, "clamfi_connect: hostname is null"); return cl_error; } if(hostaddr == NULL) /* * According to the sendmail API hostaddr is NULL if * "the type is not supported in the current version". What * the documentation doesn't say is the type of what? * * Possibly the input is not a TCP/IP socket e.g. stdin? */ remoteIP = "127.0.0.1"; else { #ifdef HAVE_INET_NTOP remoteIP = (char *)inet_ntop(AF_INET, &((struct sockaddr_in *)(hostaddr))->sin_addr, ip, sizeof(ip)); #else remoteIP = inet_ntoa(((struct sockaddr_in *)(hostaddr))->sin_addr); #endif if(remoteIP == NULL) { if(use_syslog) syslog(LOG_ERR, "clamfi_connect: remoteIP is null"); return cl_error; } } #ifdef CL_DEBUG if(debug_level >= 4) { if(use_syslog) syslog(LOG_NOTICE, "clamfi_connect: connection from %s [%s]", hostname, remoteIP); cli_dbgmsg("clamfi_connect: connection from %s [%s]\n", hostname, remoteIP); } #endif #ifdef WITH_TCPWRAP /* * Support /etc/hosts.allow and /etc/hosts.deny */ if(strncasecmp(port, "inet:", 5) == 0) { const char *hostmail; const struct hostent *hp = NULL; /* * Using TCP/IP for the sendmail->clamav-milter connection */ if((hostmail = smfi_getsymval(ctx, "{if_name}")) == NULL) { if(use_syslog) syslog(LOG_WARNING, "Can't get sendmail hostname"); hostmail = "unknown"; } if((hp = gethostbyname(hostmail)) == NULL) { if(use_syslog) syslog(LOG_WARNING, "Access Denied: Host Unknown (%s)", hostname); return cl_error; } #ifdef HAVE_INET_NTOP if(inet_ntop(AF_INET, (struct in_addr *)hp->h_addr, ip, sizeof(ip)) == NULL) { perror(hp->h_name); /*if(use_syslog) syslog(LOG_WARNING, "Can't get IP address for (%s)", hp->h_name); strcpy(ip, (char *)inet_ntoa(*(struct in_addr *)hp->h_addr));*/ if(use_syslog) syslog(LOG_WARNING, "Access Denied: Can't get IP address for (%s)", hp->h_name); return cl_error; } #else strncpy(ip, (char *)inet_ntoa(*(struct in_addr *)hp->h_addr), sizeof(ip) - 1); #endif /* * Ask is this is a allowed name or IP number */ if(!hosts_ctl("clamav-milter", hp->h_name, ip, STRING_UNKNOWN)) { if(use_syslog) syslog(LOG_WARNING, "Access Denied for %s[%s]", hp->h_name, ip); return SMFIS_TEMPFAIL; } } #endif if(fflag) /* * Patch from "Richard G. Roberto" * Always scan whereever the message is from */ return SMFIS_CONTINUE; if(!oflag) if(strcmp(remoteIP, "127.0.0.1") == 0) { #ifdef CL_DEBUG if(use_syslog) syslog(LOG_DEBUG, "clamfi_connect: not scanning outgoing messages"); cli_dbgmsg("clamfi_connect: not scanning outgoing messages\n"); #endif return SMFIS_ACCEPT; } if(!lflag) { /* * Decide what constitutes a local IP address. Emails from * local machines are not scanned. * * TODO: read these from clamav.conf */ static const char *localAddresses[] = { /*"^192\\.168\\.[0-9]+\\.[0-9]+$",*/ "^192\\.168\\.[0-9]*\\.[0-9]*$", "^10\\.0\\.0\\.[0-9]*$", "127.0.0.1", NULL }; const char **possible; for(possible = localAddresses; *possible; possible++) { int rc; regex_t reg; if(regcomp(®, *possible, 0) != 0) { if(use_syslog) syslog(LOG_ERR, "Couldn't parse local regexp"); return cl_error; } rc = (regexec(®, remoteIP, 0, NULL, 0) == REG_NOMATCH) ? 0 : 1; regfree(®); if(rc) { #ifdef CL_DEBUG if(use_syslog) syslog(LOG_DEBUG, "clamfi_connect: not scanning local messages"); cli_dbgmsg("clamfi_connect: not scanning outgoing messages\n"); #endif return SMFIS_ACCEPT; } } } return SMFIS_CONTINUE; } static sfsistat clamfi_envfrom(SMFICTX *ctx, char **argv) { struct privdata *privdata; if(logVerbose) syslog(LOG_DEBUG, "clamfi_envfrom: %s", argv[0]); cli_dbgmsg("clamfi_envfrom: %s\n", argv[0]); if(max_children > 0) { int rc = 0; pthread_mutex_lock(&n_children_mutex); /* * Not a while since sendmail doesn't like it if we * take too long replying. Effectively this means that * max_children is more of a hint than a rule */ if(n_children >= max_children) { struct timeval now; struct timespec timeout; struct timezone tz; if(use_syslog) syslog(LOG_NOTICE, "hit max-children limit (%u >= %u): waiting for some to exit", n_children, max_children); /* * Use pthread_cond_timedwait rather than * pthread_cond_wait since the sendmail which calls * us will have a timeout that we don't want to exceed * * Wait for a maximum of 1 minute. * * TODO: this timeout should be configurable * * It stops sendmail getting fidgety. * * Patch from Damian Menscher to * ensure it wakes up when a child goes away */ gettimeofday(&now, &tz); timeout.tv_sec = now.tv_sec + 60; timeout.tv_nsec = 0; do rc = pthread_cond_timedwait(&n_children_cond, &n_children_mutex, &timeout); while((n_children >= max_children) && (rc != ETIMEDOUT)); } n_children++; cli_dbgmsg(">n_children = %d\n", n_children); pthread_mutex_unlock(&n_children_mutex); if(rc == ETIMEDOUT) { #ifdef CL_DEBUG if(use_syslog) syslog(LOG_NOTICE, "Timeout waiting for a child to die"); #endif cli_dbgmsg("Timeout waiting for a child to die\n"); } } privdata = (struct privdata *)cli_calloc(1, sizeof(struct privdata)); if(privdata == NULL) return cl_error; privdata->dataSocket = -1; /* 0.4 */ privdata->cmdSocket = -1; /* 0.4 */ /* * Rejection is via 550 until DATA is received. We know that * DATA has been sent when either we get a header or the end of * header statement */ privdata->rejectCode = "550"; privdata->from = strdup(argv[0]); if(hflag) privdata->headers = header_list_new(); if(smfi_setpriv(ctx, privdata) == MI_SUCCESS) return SMFIS_CONTINUE; clamfi_free(privdata); return cl_error; } static sfsistat clamfi_envrcpt(SMFICTX *ctx, char **argv) { struct privdata *privdata = (struct privdata *)smfi_getpriv(ctx); if(logVerbose) syslog(LOG_DEBUG, "clamfi_envrcpt: %s", argv[0]); cli_dbgmsg("clamfi_envrcpt: %s\n", argv[0]); if(privdata->to == NULL) { privdata->to = cli_malloc(sizeof(char *) * 2); assert(privdata->numTo == 0); } else privdata->to = cli_realloc(privdata->to, sizeof(char *) * (privdata->numTo + 2)); if(privdata->to == NULL) return cl_error; privdata->to[privdata->numTo] = strdup(argv[0]); privdata->to[++privdata->numTo] = NULL; return SMFIS_CONTINUE; } static sfsistat clamfi_header(SMFICTX *ctx, char *headerf, char *headerv) { struct privdata *privdata = (struct privdata *)smfi_getpriv(ctx); if(logVerbose) syslog(LOG_DEBUG, "clamfi_header: %s: %s", headerf, headerv); #ifdef CL_DEBUG if(debug_level >= 9) cli_dbgmsg("clamfi_header: %s: %s\n", headerf, headerv); else cli_dbgmsg("clamfi_header\n"); #endif /* * The DATA instruction from SMTP (RFC2821) must have been sent */ privdata->rejectCode = "554"; if(privdata->dataSocket == -1) /* * First header - make connection with clamd */ if(!connect2clamd(privdata)) { clamfi_cleanup(ctx); return cl_error; } if(clamfi_send(privdata, 0, "%s: %s\n", headerf, headerv) <= 0) { clamfi_cleanup(ctx); return cl_error; } if(hflag) header_list_add(privdata->headers, headerf, headerv); else if((strcasecmp(headerf, "Received") == 0) && (strncasecmp(headerv, "from ", 5) == 0)) { if(privdata->received) free(privdata->received); privdata->received = strdup(headerv); } if((strcasecmp(headerf, "Message-ID") == 0) && (strncasecmp(headerv, "discard = 1; return SMFIS_CONTINUE; } /* * At this point DATA will have been received, so we really ought to * send 554 back not 550 */ static sfsistat clamfi_eoh(SMFICTX *ctx) { struct privdata *privdata = (struct privdata *)smfi_getpriv(ctx); char **to; if(logVerbose) syslog(LOG_DEBUG, "clamfi_eoh"); #ifdef CL_DEBUG if(debug_level >= 4) cli_dbgmsg("clamfi_eoh\n"); #endif /* * The DATA instruction from SMTP (RFC2821) must have been sent */ privdata->rejectCode = "554"; if(privdata->dataSocket == -1) /* * No headers - make connection with clamd */ if(!connect2clamd(privdata)) { clamfi_cleanup(ctx); return cl_error; } if(clamfi_send(privdata, 1, "\n") != 1) { clamfi_cleanup(ctx); return cl_error; } /* * See if the e-mail is only going to members of the list * of users we don't scan for. If it is, don't scan, otherwise * scan * * scan = false * FORALL recipients * IF receipient NOT MEMBER OF white address list * THEN * scan = true * FI * ENDFOR */ for(to = privdata->to; *to; to++) { const char **s; for(s = ignoredEmailAddresses; *s; s++) if(strcasecmp(*s, *to) == 0) /* * This recipient is on the whitelist */ break; if(*s == NULL) /* * This recipient is not on the whitelist, * no need to check any further */ return SMFIS_CONTINUE; } /* * Didn't find a recipient who is not on the white list, so all * must be on the white list, so just accept the e-mail */ if(use_syslog) syslog(LOG_NOTICE, "clamfi_eoh: ignoring whitelisted message"); #ifdef CL_DEBUG cli_dbgmsg("clamfi_eoh: not scanning outgoing messages\n"); #endif clamfi_cleanup(ctx); return SMFIS_ACCEPT; } static sfsistat clamfi_body(SMFICTX *ctx, u_char *bodyp, size_t len) { struct privdata *privdata = (struct privdata *)smfi_getpriv(ctx); int nbytes; if(logVerbose) syslog(LOG_DEBUG, "clamfi_envbody: %u bytes", len); #ifdef CL_DEBUG cli_dbgmsg("clamfi_envbody: %u bytes\n", len); #endif nbytes = clamfi_send(privdata, len, (char *)bodyp); if(streamMaxLength > 0L) { if(privdata->numBytes > streamMaxLength) { if(use_syslog) { const char *sendmailId = smfi_getsymval(ctx, "i"); if(sendmailId == NULL) sendmailId = "Unknown"; syslog(LOG_NOTICE, "%s: Message more than StreamMaxLength (%ld) bytes - not scanned", sendmailId, streamMaxLength); } if(!nflag) smfi_addheader(ctx, "X-Virus-Status", "Not Scanned - StreamMaxLength exceeded"); return SMFIS_ACCEPT; /* clamfi_close will be called */ } } if(nbytes < len) { clamfi_cleanup(ctx); /* not needed, but just to be safe */ return cl_error; } if(Sflag) { if(privdata->body) { assert(privdata->bodyLen > 0); privdata->body = cli_realloc(privdata->body, privdata->bodyLen + len); memcpy(&privdata->body[privdata->bodyLen], bodyp, len); privdata->bodyLen += len; } else { assert(privdata->bodyLen == 0); privdata->body = cli_malloc(len); memcpy(privdata->body, bodyp, len); privdata->bodyLen = len; } } return SMFIS_CONTINUE; } static sfsistat clamfi_eom(SMFICTX *ctx) { int rc = SMFIS_CONTINUE; char *ptr; const char *sendmailId; struct privdata *privdata = (struct privdata *)smfi_getpriv(ctx); char mess[128]; if(logVerbose) syslog(LOG_DEBUG, "clamfi_eom"); #ifdef CL_DEBUG cli_dbgmsg("clamfi_eom\n"); assert(privdata != NULL); assert((privdata->cmdSocket >= 0) || (privdata->filename != NULL)); assert(!((privdata->cmdSocket >= 0) && (privdata->filename != NULL))); assert(privdata->dataSocket >= 0); #endif close(privdata->dataSocket); privdata->dataSocket = -1; if(quarantine_dir != NULL) { char cmdbuf[1024]; /* * Create socket to talk to clamd. */ struct sockaddr_un server; int nbytes; assert(localSocket != NULL); memset((char *)&server, 0, sizeof(struct sockaddr_un)); server.sun_family = AF_UNIX; strncpy(server.sun_path, localSocket, sizeof(server.sun_path)); if((privdata->cmdSocket = socket(AF_UNIX, SOCK_STREAM, 0)) < 0) { perror("socket"); clamfi_cleanup(ctx); return cl_error; } if(connect(privdata->cmdSocket, (struct sockaddr *)&server, sizeof(struct sockaddr_un)) < 0) { perror(localSocket); clamfi_cleanup(ctx); return cl_error; } snprintf(cmdbuf, sizeof(cmdbuf) - 1, "SCAN %s", privdata->filename); nbytes = (int)strlen(cmdbuf); if(send(privdata->cmdSocket, cmdbuf, nbytes, 0) < nbytes) { perror("send"); clamfi_cleanup(ctx); if(use_syslog) syslog(LOG_ERR, "send failed to clamd"); return cl_error; } shutdown(privdata->cmdSocket, SHUT_WR); } if(clamd_recv(privdata->cmdSocket, mess, sizeof(mess)) > 0) { if((ptr = strchr(mess, '\n')) != NULL) *ptr = '\0'; if(logVerbose) syslog(LOG_DEBUG, "clamfi_eom: read %s", mess); cli_dbgmsg("clamfi_eom: read %s\n", mess); } else { clamfi_cleanup(ctx); syslog(LOG_NOTICE, "clamfi_eom: read nothing from clamd"); #ifdef CL_DEBUG cli_dbgmsg("clamfi_eom: read nothing from clamd\n"); #endif return cl_error; } close(privdata->cmdSocket); privdata->cmdSocket = -1; sendmailId = smfi_getsymval(ctx, "i"); if(sendmailId == NULL) sendmailId = "Unknown"; if(!nflag) { char buf[1024]; /* * Include the hostname where the scan took place: */ if(localSocket) snprintf(buf, sizeof(buf) - 1, "%s\n\ton %s", clamav_version, smfi_getsymval(ctx, "{j}")); else { char *hostname = cli_strtok(serverHostNames, privdata->serverNumber, ":"); if(hostname) { snprintf(buf, sizeof(buf) - 1, "%s\n\ton %s", clamav_version, hostname); free(hostname); } else /* sanity check failed - should issue warning */ strcpy(buf, "Error determining host"); } smfi_addheader(ctx, "X-Virus-Scanned", buf); } if(strstr(mess, "ERROR") != NULL) { if(strstr(mess, "Size exceeded") != NULL) { /* * Clamd has stopped on StreamMaxLength before us */ if(use_syslog) syslog(LOG_NOTICE, "%s: Message more than StreamMaxLength (%ld) bytes - not scanned", sendmailId, streamMaxLength); if(!nflag) smfi_addheader(ctx, "X-Virus-Status", "Not Scanned - StreamMaxLength exceeded"); clamfi_cleanup(ctx); /* not needed, but just to be safe */ return SMFIS_ACCEPT; } if(!nflag) smfi_addheader(ctx, "X-Virus-Status", "Not Scanned"); cli_warnmsg("%s: %s\n", sendmailId, mess); if(use_syslog) syslog(LOG_ERR, "%s: %s\n", sendmailId, mess); clamfi_cleanup(ctx); return cl_error; } if((ptr = strstr(mess, "FOUND")) == NULL) { if(!nflag) smfi_addheader(ctx, "X-Virus-Status", "Clean"); /* * TODO: if privdata->from is NULL it's probably SPAM, and * me might consider bouncing it... */ if(use_syslog && logClean) /* Include the sendmail queue ID in the log */ syslog(LOG_NOTICE, "%s: clean message from %s", sendmailId, (privdata->from) ? privdata->from : "an unknown sender"); if(privdata->body) { /* * Add a signature that all has been scanned OK */ off_t len = updateSigFile(); if(len) { assert(Sflag != 0); privdata->body = cli_realloc(privdata->body, privdata->bodyLen + len); if(privdata->body) { memcpy(&privdata->body[privdata->bodyLen], signature, len); smfi_replacebody(ctx, privdata->body, privdata->bodyLen + len); } } } } else { char reject[1024]; char **to, *virusname; *ptr = '\0'; /* Remove the "FOUND" word */ /* skip over 'stream/filename: ' at the start */ if((virusname = strchr(mess, ':')) != NULL) virusname = &virusname[2]; else virusname = mess; if(!nflag) smfi_addheader(ctx, "X-Virus-Status", "Infected"); if(use_syslog) { /* * Setup err as a list of recipients */ char *err = (char *)cli_malloc(1024); int i; if(err == NULL) { clamfi_cleanup(ctx); return cl_error; } /* * Use snprintf rather than printf since we don't know the * length of privdata->from and may get a buffer overrun */ snprintf(err, 1023, "Intercepted virus from %s to", privdata->from); ptr = strchr(err, '\0'); i = 1024; for(to = privdata->to; *to; to++) { /* * Re-alloc if we are about run out of buffer space */ if(&ptr[strlen(*to) + 2] >= &err[i]) { i += 1024; err = cli_realloc(err, i); if(err == NULL) { clamfi_cleanup(ctx); return cl_error; } ptr = strchr(err, '\0'); } ptr = strrcpy(ptr, " "); ptr = strrcpy(ptr, *to); } (void)strcpy(ptr, "\n"); /* Include the sendmail queue ID in the log */ syslog(LOG_NOTICE, "%s: %s%s", sendmailId, mess, err); #ifdef CL_DEBUG cli_dbgmsg("%s\n", err); #endif free(err); } if(!qflag) { char cmd[128]; FILE *sendmail; /* * If the oflag is given this sendmail command * will cause the mail being generated here to be * scanned. So if oflag is given we just put the * item in the queue so there's no scanning of two * messages at once. It'll still be scanned, but * not at the same time as the incoming message */ snprintf(cmd, sizeof(cmd) - 1, (oflag || fflag) ? "%s -t -odq" : "%s -t", SENDMAIL_BIN); sendmail = popen(cmd, "w"); if(sendmail) { const char *from; /* * Try to determine who sent the message. * In the days of faked from addresses this is * not easy! */ if(privdata->from) from = (strcmp(privdata->from, "<>") == 0) ? smfi_getsymval(ctx, "_") : privdata->from; else from = smfi_getsymval(ctx, "_"); /* * TODO: Make this e-mail message customisable * perhaps by means of a template */ fprintf(sendmail, "From: %s\n", from); if(bflag) { fprintf(sendmail, "To: %s\n", privdata->from); fprintf(sendmail, "Cc: %s\n", postmaster); } else fprintf(sendmail, "To: %s\n", postmaster); if(!pflag) for(to = privdata->to; *to; to++) fprintf(sendmail, "Cc: %s\n", *to); /* * Auto-submitted is still a draft, keep an * eye on its format */ fputs("Auto-Submitted: auto-submitted (antivirus notify)\n", sendmail); /* "Sergey Y. Afonin" */ if((ptr = smfi_getsymval(ctx, "{_}")) != NULL) fprintf(sendmail, "X-Infected-Received-From: %s\n", ptr); fputs("Subject: Virus intercepted\n\n", sendmail); if((templatefile == NULL) || (sendtemplate(templatefile, sendmail, mess) < 0)) { if(bflag) fputs("A message you sent to\n", sendmail); else if(pflag) /* * The message is only going to the * postmaster, so include some useful * information */ fprintf(sendmail, "The message %s sent from %s to\n", sendmailId, from); else fprintf(sendmail, "A message sent from %s to\n", from); for(to = privdata->to; *to; to++) fprintf(sendmail, "\t%s\n", *to); fprintf(sendmail, "contained %sand has not been delivered.\n", virusname); if(privdata->filename != NULL) fprintf(sendmail, "\nThe message in question has been quarantined as %s\n", privdata->filename); if(hflag) { fprintf(sendmail, "\nThe message was received by %s from %s via %s\n\n", smfi_getsymval(ctx, "j"), from, smfi_getsymval(ctx, "_")); fputs("For your information, the original message headers were:\n\n", sendmail); header_list_print(privdata->headers, sendmail); } else if(privdata->received) /* * TODO: parse this to find * real infected machine. * Need to decide how to find * if it's a dynamic IP from a * dial up account in which * case there may not be much * we can do if that DHCP has * set the hostname... */ fprintf(sendmail, "\nThe infected machine is likely to be here:\n%s\t\n", privdata->received); } pclose(sendmail); } } if(privdata->filename) { assert(quarantine_dir != NULL); if(use_syslog) syslog(LOG_NOTICE, "Quarantined infected mail as %s", privdata->filename); /* * Cleanup filename here otherwise clamfi_free() will * delete the file that we wish to keep because it * is infected */ free(privdata->filename); privdata->filename = NULL; } if(quarantine) { for(to = privdata->to; *to; to++) { smfi_delrcpt(ctx, *to); smfi_addheader(ctx, "X-Original-To", *to); free(*to); } free(privdata->to); privdata->to = NULL; /* * NOTE: on a closed relay this will not work * if the recipient is a remote address */ if(smfi_addrcpt(ctx, quarantine) == MI_FAILURE) { if(use_syslog) syslog(LOG_DEBUG, "Can't set quarantine user %s", quarantine); else cli_warnmsg("Can't set quarantine user %s\n", quarantine); } else { char subject[128]; /* * FIXME: doesn't work if there's no subject */ snprintf(subject, sizeof(subject) - 1, "[Virus] %s", virusname); smfi_chgheader(ctx, "Subject", 1, subject); } } else if(rejectmail) { if(privdata->discard) rc = SMFIS_DISCARD; else rc = SMFIS_REJECT; /* Delete the e-mail */ } else rc = SMFIS_DISCARD; snprintf(reject, sizeof(reject) - 1, "%sdetected by ClamAV - http://www.clamav.net", virusname); smfi_setreply(ctx, (char *)privdata->rejectCode, "5.7.1", reject); } clamfi_cleanup(ctx); return rc; } static sfsistat clamfi_abort(SMFICTX *ctx) { #ifdef CL_DEBUG if(use_syslog) syslog(LOG_DEBUG, "clamfi_abort"); cli_dbgmsg("clamfi_abort\n"); #endif /* * Unlock incase we're called during a cond_timedwait in envfrom * * TODO: There *must* be a tidier a safer way of doing this! */ if((max_children > 0) && (n_children >= max_children)) (void)pthread_mutex_unlock(&n_children_mutex); clamfi_cleanup(ctx); return cl_error; } static sfsistat clamfi_close(SMFICTX *ctx) { struct privdata *privdata = (struct privdata *)smfi_getpriv(ctx); cli_dbgmsg("clamfi_close\n"); if(privdata != NULL) clamfi_cleanup(ctx); if(logVerbose) syslog(LOG_DEBUG, "clamfi_close"); return SMFIS_CONTINUE; } static void clamfi_cleanup(SMFICTX *ctx) { struct privdata *privdata = (struct privdata *)smfi_getpriv(ctx); if(privdata) { clamfi_free(privdata); smfi_setpriv(ctx, NULL); } } static void clamfi_free(struct privdata *privdata) { if(privdata) { if(privdata->body) free(privdata->body); if(privdata->dataSocket >= 0) { close(privdata->dataSocket); privdata->dataSocket = -1; } if(privdata->filename != NULL) { if(unlink(privdata->filename) < 0) { perror(privdata->filename); if(use_syslog) syslog(LOG_ERR, "Can't remove clean file %s", privdata->filename); } free(privdata->filename); privdata->filename = NULL; } if(privdata->from) { #ifdef CL_DEBUG if(debug_level >= 9) cli_dbgmsg("Free privdata->from\n"); #endif free(privdata->from); privdata->from = NULL; } if(privdata->to) { char **to; for(to = privdata->to; *to; to++) { #ifdef CL_DEBUG if(debug_level >= 9) cli_dbgmsg("Free *privdata->to\n"); #endif free(*to); } #ifdef CL_DEBUG if(debug_level >= 9) cli_dbgmsg("Free privdata->to\n"); #endif free(privdata->to); privdata->to = NULL; } if(privdata->cmdSocket >= 0) { char buf[64]; /* * Flush the remote end so that clamd doesn't get a SIGPIPE */ while(clamd_recv(privdata->cmdSocket, buf, sizeof(buf)) > 0) ; close(privdata->cmdSocket); privdata->cmdSocket = -1; } if(privdata->headers) header_list_free(privdata->headers); #ifdef CL_DEBUG if(debug_level >= 9) cli_dbgmsg("Free privdata\n"); #endif if(privdata->received) free(privdata->received); free(privdata); } if(max_children > 0) { pthread_mutex_lock(&n_children_mutex); /* * Deliberately errs on the side of broadcasting too many times */ if(n_children > 0) --n_children; #ifdef CL_DEBUG cli_dbgmsg("pthread_cond_broadcast\n"); #endif pthread_cond_broadcast(&n_children_cond); #ifdef CL_DEBUG cli_dbgmsg(" 0) /* * It isn't a NUL terminated string. We have a set number of * bytes to output. */ ptr = format; else { va_list argp; va_start(argp, format); vsnprintf(output, sizeof(output) - 1, format, argp); va_end(argp); len = strlen(output); ptr = output; } #ifdef CL_DEBUG if(debug_level >= 9) { time_t t; const struct tm *tm; time(&t); tm = localtime(&t); cli_dbgmsg("%d:%d:%d clamfi_send: len=%u bufsiz=%u, fd=%d\n", tm->tm_hour, tm->tm_min, tm->tm_sec, len, sizeof(output), privdata->dataSocket); } #endif while(len > 0) { const int nbytes = (quarantine_dir) ? write(privdata->dataSocket, ptr, len) : send(privdata->dataSocket, ptr, len, 0); assert(privdata->dataSocket >= 0); if(nbytes == -1) { if(quarantine_dir) { perror(privdata->filename); if(use_syslog) { #ifdef HAVE_STRERROR_R char buf[32]; strerror_r(errno, buf, sizeof(buf)); syslog(LOG_ERR, "write failure (%u bytes) to %s: %s", len, privdata->filename, buf); #else syslog(LOG_ERR, "write failure (%u bytes) to %s: %s", len, privdata->filename, strerror(errno)); #endif } } else { if(errno == EINTR) continue; perror("send"); if(use_syslog) { #ifdef HAVE_STRERROR_R char buf[32]; strerror_r(errno, buf, sizeof(buf)); syslog(LOG_ERR, "write failure (%u bytes) to clamd: %s", len, buf); #else syslog(LOG_ERR, "write failure (%u bytes) to clamd: %s", len, strerror(errno)); #endif } checkClamd(); } return -1; } ret += nbytes; len -= nbytes; ptr = &ptr[nbytes]; if(streamMaxLength > 0L) { privdata->numBytes += nbytes; if(privdata->numBytes >= streamMaxLength) break; } } return ret; } /* * Like strcpy, but return the END of the destination, allowing a quicker * means of adding to the end of a string than strcat */ static char * strrcpy(char *dest, const char *source) { /* Pre assertions */ assert(dest != NULL); assert(source != NULL); assert(dest != source); while((*dest++ = *source++) != '\0') ; return(--dest); } /* * Read from clamav - timeout if necessary */ static int clamd_recv(int sock, char *buf, size_t len) { fd_set rfds; struct timeval tv; if(readTimeout == 0) return recv(sock, buf, len, 0); FD_ZERO(&rfds); FD_SET(sock, &rfds); tv.tv_sec = readTimeout; tv.tv_usec = 0; switch(select(sock + 1, &rfds, NULL, NULL, &tv)) { case -1: perror("select"); return -1; case 0: if(use_syslog) syslog(LOG_ERR, "No data received from clamd in %d seconds\n", readTimeout); return 0; } return recv(sock, buf, len, 0); } /* * Read in the signature file */ static off_t updateSigFile(void) { struct stat statb; int fd; if(sigFilename == NULL) /* nothing to read */ return 0; if(stat(sigFilename, &statb) < 0) { perror(sigFilename); if(use_syslog) syslog(LOG_ERR, "Can't stat %s", sigFilename); return 0; } if(statb.st_mtime <= signatureStamp) return statb.st_size; /* not changed */ fd = open(sigFilename, O_RDONLY); if(fd < 0) { perror(sigFilename); if(use_syslog) syslog(LOG_ERR, "Can't open %s", sigFilename); return 0; } signatureStamp = statb.st_mtime; signature = cli_realloc(signature, statb.st_size); read(fd, signature, statb.st_size); close(fd); return statb.st_size; } static header_list_t header_list_new(void) { header_list_t ret; ret = (header_list_t)cli_malloc(sizeof(struct header_list_struct)); if(ret) { ret->first = NULL; ret->last = NULL; } return ret; } static void header_list_free(header_list_t list) { struct header_node_t *iter; iter = list->first; while (iter) { struct header_node_t *iter2 = iter->next; free(iter->header); free(iter); iter = iter2; } free(list); } static void header_list_add(header_list_t list, const char *headerf, const char *headerv) { char *header; size_t len; struct header_node_t *new_node; len = (size_t)(strlen(headerf) + strlen(headerv) + 3); header = (char *)cli_malloc(len); if(header == NULL) return; sprintf(header, "%s: %s", headerf, headerv); new_node = (struct header_node_t *)cli_malloc(sizeof(struct header_node_t)); if(new_node == NULL) { free(header); return; } new_node->header = header; new_node->next = NULL; if(!list->first) list->first = new_node; if(list->last) list->last->next = new_node; list->last = new_node; } static void header_list_print(header_list_t list, FILE *fp) { const struct header_node_t *iter; for(iter = list->first; iter; iter = iter->next) { if(strncmp(iter->header, "From ", 5) == 0) putc('>', fp); fprintf(fp, "%s\n", iter->header); } } /* * Establish a connection to clamd * Returns success (1) or failure (0) */ static int connect2clamd(struct privdata *privdata) { char **to; assert(privdata != NULL); assert(privdata->dataSocket == -1); assert(privdata->from != NULL); assert(privdata->to != NULL); #ifdef CL_DEBUG if((debug_level > 0) && use_syslog) syslog(LOG_DEBUG, "connect2clamd"); if(debug_level >= 4) cli_dbgmsg("connect2clamd\n"); #endif if(quarantine_dir) { /* * quarantine_dir is specified * store message in a temporary file */ int ntries = 5; long t; int MM, YY, DD; const struct tm *tm; /* * Based on an idea by Christian Pelissier * . Store different days * in different directories to make them easier to manage */ t = time((long *)0); tm = localtime(&t); MM = tm->tm_mon + 1; YY = tm->tm_year - 100; DD = tm->tm_mday; privdata->filename = (char *)cli_malloc(strlen(quarantine_dir) + 19); sprintf(privdata->filename, "%s/%02d%02d%02d", quarantine_dir, YY, MM, DD); (void)mkdir(privdata->filename, 0700); do { sprintf(privdata->filename, "%s/%02d%02d%02d/msg.XXXXXX", quarantine_dir, YY, MM, DD); #if defined(C_LINUX) || defined(C_BSD) || defined(HAVE_MKSTEMP) || defined(C_SOLARIS) privdata->dataSocket = mkstemp(privdata->filename); #else if(mktemp(privdata->filename) == NULL) { if(use_syslog) syslog(LOG_ERR, "mktemp %s failed", privdata->filename); return 0; } privdata->dataSocket = open(privdata->filename, O_CREAT|O_EXCL|O_WRONLY|O_TRUNC, 0600); #endif } while((--ntries > 0) && (privdata->dataSocket < 0)); if(privdata->dataSocket < 0) { perror(privdata->filename); if(use_syslog) syslog(LOG_ERR, "Temporary quarantine file %s creation failed", privdata->filename); return 0; } privdata->serverNumber = -1; } else { int freeServer, nbytes; struct sockaddr_in reply; unsigned short port; char buf[64]; assert(privdata->cmdSocket == -1); /* * Create socket to talk to clamd. It will tell us the port to * use to send the data. That will require another socket. */ if(localSocket) { struct sockaddr_un server; memset((char *)&server, 0, sizeof(struct sockaddr_un)); server.sun_family = AF_UNIX; strncpy(server.sun_path, localSocket, sizeof(server.sun_path)); if((privdata->cmdSocket = socket(AF_UNIX, SOCK_STREAM, 0)) < 0) { perror("socket"); return 0; } if(connect(privdata->cmdSocket, (struct sockaddr *)&server, sizeof(struct sockaddr_un)) < 0) { perror(localSocket); return 0; } freeServer = 0; privdata->serverNumber = -1; } else { struct sockaddr_in server; memset((char *)&server, 0, sizeof(struct sockaddr_in)); server.sin_family = AF_INET; server.sin_port = (in_port_t)htons(tcpSocket); assert(serverIPs != NULL); freeServer = findServer(); if(freeServer < 0) return 0; server.sin_addr.s_addr = serverIPs[freeServer]; if((privdata->cmdSocket = socket(AF_INET, SOCK_STREAM, 0)) < 0) { perror("socket"); return 0; } if(connect(privdata->cmdSocket, (struct sockaddr *)&server, sizeof(struct sockaddr_in)) < 0) { perror("connect"); return 0; } privdata->serverNumber = freeServer; } /* * Create socket that we'll use to send the data to clamd */ if((privdata->dataSocket = socket(AF_INET, SOCK_STREAM, 0)) < 0) { perror("socket"); if(use_syslog) syslog(LOG_ERR, "failed to create socket"); return 0; } shutdown(privdata->dataSocket, SHUT_RD); if(send(privdata->cmdSocket, "STREAM\n", 7, 0) < 7) { perror("send"); if(use_syslog) syslog(LOG_ERR, "send failed to clamd"); return 0; } shutdown(privdata->cmdSocket, SHUT_WR); nbytes = clamd_recv(privdata->cmdSocket, buf, sizeof(buf)); if(nbytes < 0) { perror("recv"); if(use_syslog) syslog(LOG_ERR, "recv failed from clamd getting PORT"); return 0; } buf[nbytes] = '\0'; #ifdef CL_DEBUG if(debug_level >= 4) cli_dbgmsg("Received: %s", buf); #endif if(sscanf(buf, "PORT %hu\n", &port) != 1) { if(use_syslog) syslog(LOG_ERR, "Expected port information from clamd, got '%s'", buf); else cli_warnmsg("Expected port information from clamd, got '%s'\n", buf); return 0; } memset((char *)&reply, 0, sizeof(struct sockaddr_in)); reply.sin_family = AF_INET; reply.sin_port = (in_port_t)htons(port); assert(serverIPs != NULL); reply.sin_addr.s_addr = serverIPs[freeServer]; #ifdef CL_DEBUG if(debug_level >= 4) cli_dbgmsg("Connecting to local port %d\n", port); #endif if(connect(privdata->dataSocket, (struct sockaddr *)&reply, sizeof(struct sockaddr_in)) < 0) { perror("connect"); /* 0.4 - use better error message */ if(use_syslog) { #ifdef HAVE_STRERROR_R strerror_r(errno, buf, sizeof(buf)); syslog(LOG_ERR, "Failed to connect to port %d given by clamd: %s", port, buf); #else syslog(LOG_ERR, "Failed to connect to port %d given by clamd: %s", port, strerror(errno)); #endif } return 0; } } /* * TODO: * Put from and to data into a buffer and call clamfi_send once * to save bandwidth when using TCP/IP to connect with a remote clamd */ clamfi_send(privdata, 0, "Received: by clamav-milter\nFrom: %s\n", privdata->from); for(to = privdata->to; *to; to++) if(clamfi_send(privdata, 0, "To: %s\n", *to) <= 0) return 0; cli_dbgmsg("connect2clamd OK\n"); return 1; } /* * If possible, check if clamd has died, and report if it has */ static void checkClamd(void) { pid_t pid; int fd, nbytes; char buf[9]; if(!localSocket) return; /* communicating via TCP */ if(pidFile == NULL) return; /* PidFile directive missing from clamav.conf */ fd = open(pidFile, O_RDONLY); if(fd < 0) { perror(pidFile); if(use_syslog) syslog(LOG_ERR, "Can't open %s", pidFile); return; } nbytes = read(fd, buf, sizeof(buf) - 1); if(nbytes < 0) perror(pidFile); else buf[nbytes] = '\0'; close(fd); pid = atoi(buf); if((kill(pid, 0) < 0) && (errno == ESRCH)) { if(use_syslog) syslog(LOG_ERR, "Clamd (pid %d) seems to have died", pid); perror("clamd"); } } /* * Send a templated message about an intercepted message. Very basic for * now, just to prove it works, will enhance the flexability later, only * supports %v at present. And only one instance of %v at that * * TODO: more template features * TODO: allow filename to start with a '|' taken to mean the output of * a program */ static int sendtemplate(const char *filename, FILE *sendmail, const char *clamdMessage) { FILE *fin = fopen(filename, "r"); struct stat statb; char *buf, *ptr; int rc; if(fin == NULL) { perror(filename); if(use_syslog) syslog(LOG_ERR, "Can't open e-mail template file %s", filename); return -1; } if(fstat(fileno(fin), &statb) < 0) { /* File disappeared in race condition? */ perror(filename); if(use_syslog) syslog(LOG_ERR, "Can't stat e-mail template file %s", filename); fclose(fin); return -1; } buf = cli_malloc(statb.st_size + 1); if(buf == NULL) { if(use_syslog) syslog(LOG_ERR, "Out of memory"); fclose(fin); return -1; } fread(buf, sizeof(char), statb.st_size, fin); fclose(fin); buf[statb.st_size] = '\0'; if((ptr = strstr(buf, "%v")) != NULL) { *ptr = '\0'; ptr = &ptr[2]; fputs(buf, sendmail); /* Need to peel out the virus name and just send that */ fputs(clamdMessage, sendmail); rc = (fputs(ptr, sendmail) == EOF) ? -1 : 0; } else rc = (fputs(buf, sendmail) == EOF) ? -1 : 0; free(buf); return 0; }