qpsmtpd/sme10/qpsmtpd.spec

# $Id: qpsmtpd.spec,v 1.16 2016/05/08 08:19:33 vip-ire Exp $

Name: qpsmtpd
Version: 0.96
Release: 10%{?dist}
Summary: qpsmtpd + qpsmtpd-apache
License: MIT
Group: System Environment/Daemons
URL: http://smtpd.develooper.com/
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root
BuildRequires: perl >= 0:5.00503
BuildRequires: perl(ExtUtils::MakeMaker)
BuildArch: noarch
Requires: perl(Mail::Header), perl(Net::DNS) perl(Net::IP)
Requires: perl(IO::Socket::SSL) >= 1.70
Requires(pre): coreutils, shadow-utils, perl

Source0: %{name}-%{version}.tar.gz
Source1: qpsmtpd-forkserver.rc
Source2: qpsmtpd-forkserver.sysconfig
Source3: qpsmtpd-xinetd
Source4: in.qpsmtpd
Source5: qpsmtpd.conf
Source6: README.selinux

Patch1: qpsmtpd-0.95-spamassassin_size_limit.patch
Patch2: qpsmtpd-0.95-qpsmtpd_forserver_keepalive.patch
Patch3: qpsmtpd-0.95-notls_conf.patch
Patch4: qpsmtpd-0.95-allow_tls_proto_from_conf.patch
Patch5: qpsmtpd-0.96-set_hooks.patch
Patch6: qpsmtpd-0.96-warn_implicit_split.patch
Patch7: qpsmtpd-0.96-dont_log_credentials_except_in_debug.patch
Patch8: qpsmtpd-0.96-uribl_data_post.patch
Patch9: qpsmtpd-0.96-karma_strikes.patch
Patch10: qpsmtpd-0.96-more_badrcptto.patch
Patch11: qpsmtpd-0.96-karma_tlds_conf.patch
Patch12: qpsmtpd-0.96-store_original_plugin_name.patch
Patch13: qpsmtpd-0.96-fix_karma_tool_dir_path.patch
Patch14: qpsmtpd-0.96-dkim_no_sign_for_others_on_symlinks.patch
Patch15: qpsmtpd-0.96-fix_dmarc_reject.patch
Patch16: qpsmtpd-0.96-add_dmarc_result_notes.patch
Patch17: qpsmtpd-0.96-spf_on_no_dmarc_policy.patch

%description
qpsmtpd is a flexible smtpd daemon written in Perl. Apart from the core
SMTP features, all functionality is implemented in small "extension
plugins" using the easy to use object oriented plugin API.

qpsmtpd was originally written as a drop-in qmail-smtpd replacement, but
now it also includes a smtp forward and a postfix "backend".

%package apache
Requires: perl(mod_perl2)
Summary: mod_perl-2 connection handler for qpsmtpd
Group: System Environment/Daemons

%description apache

This module implements a mod_perl/apache 2.0 connection handler
that turns Apache into an SMTP server using Qpsmtpd.


%prep
%setup -q
%patch1 -p1
%patch2 -p1
%patch3 -p1
%patch4 -p1
%patch5 -p1
%patch6 -p1
%patch7 -p1
%patch8 -p1
%patch9 -p1
%patch10 -p1
%patch11 -p1
%patch12 -p1
%patch13 -p1
%patch14 -p1
%patch15 -p1
%patch16 -p1
%patch17 -p1

%build
CFLAGS="$RPM_OPT_FLAGS" perl Makefile.PL INSTALLDIRS="vendor" PREFIX="%{buildroot}%{_prefix}"
make

%clean
rm -rf $RPM_BUILD_ROOT
%install

rm -rf $RPM_BUILD_ROOT
find blib/lib -name '*.pm.*' -exec rm -f {} \;
make pure_install

mkdir -p %{buildroot}%{_datadir}/%{name}
rm -f %{buildroot}%{_datadir}/%{name}/plugins/*.*
cp -r plugins %{buildroot}%{_datadir}/%{name}/plugins
mkdir -p %{buildroot}%{_sysconfdir}/%{name}
rm -f %{buildroot}%{_sysconfdir}/%{name}/*.*
cp -r config.sample/* %{buildroot}%{_sysconfdir}/%{name}/
echo %{_datadir}/%{name}/plugins > %{buildroot}%{_sysconfdir}/%{name}/plugin_dirs
echo %{_localstatedir}/spool/qpsmtpd > %{buildroot}%{_sysconfdir}/%{name}/spool_dir
echo logging/file_connection loglevel LOGINFO %{_localstatedir}/log/qpsmtpd/%Y-%m-%d > %{buildroot}%{_sysconfdir}/%{name}/logging
mkdir -p %{buildroot}%{_initrddir}
cp %{SOURCE1} %{buildroot}%{_initrddir}/qpsmtpd-forkserver
mkdir -p %{buildroot}%{_sysconfdir}/sysconfig
cp %{SOURCE2} %{buildroot}%{_sysconfdir}/sysconfig/qpsmtpd-forkserver
mkdir -p %{buildroot}%{_localstatedir}/spool/qpsmtpd
mkdir -p %{buildroot}%{_localstatedir}/log/qpsmtpd
mkdir -p %{buildroot}%{_sysconfdir}/xinetd.d
cp %{SOURCE3} %{buildroot}%{_sysconfdir}/xinetd.d/smtp
mkdir -p %{buildroot}%{_sbindir}
cp %{SOURCE4} %{buildroot}%{_sbindir}/in.smtp
mkdir -p %{buildroot}%{_sysconfdir}/httpd/conf.d
cp %{SOURCE5} %{buildroot}%{_sysconfdir}/httpd/conf.d
mkdir -p %{buildroot}%{_docdir}/%{name}-apache-%{version}
cp %{SOURCE6} %{buildroot}%{_docdir}/%{name}-apache-%{version}

[ -x /usr/lib/rpm/brp-compress ] && /usr/lib/rpm/brp-compress

find %{buildroot}%{_prefix} \( -name perllocal.pod -o -name .packlist \) -exec rm {} \;
find %{buildroot}%{_prefix} -type f -print | \
        sed "s@^%{buildroot}@@g"        | \
        grep -v [Aa]sync                | \
        grep -v packaging               | \
        grep -v README.selinux          | \
        grep -v /Apache                 | \
        grep -v /Danga                  | \
        grep -v Qpsmtpd/PollServer.pm   > %{name}-%{version}-%{release}-filelist
if [ "$(cat %{name}-%{version}-%{release}-filelist)X" = "X" ] ; then
    echo "ERROR: EMPTY FILE LIST"
    exit -1
fi

%files -f %{name}-%{version}-%{release}-filelist
%defattr(-,root,root)
%doc CREDITS Changes LICENSE README.md README.plugins.md STATUS
%{_initrddir}/qpsmtpd-forkserver
%config(noreplace) %{_sysconfdir}/qpsmtpd/*
%config(noreplace) %{_sysconfdir}/xinetd.d/smtp
%config(noreplace) %{_sysconfdir}/sysconfig/qpsmtpd-forkserver

%files apache
%defattr(-,root,root)
%{_prefix}/share/perl5/vendor_perl/Apache/Qpsmtpd.pm
%{_mandir}/man3/Apache::Qpsmtpd.3pm.gz
%config(noreplace) %{_sysconfdir}/httpd/conf.d/*
%doc %{_docdir}/%{name}-apache-%{version}/README.selinux

%pre


%changelog
* Sun May 8 2016 Daniel Berteaud <daniel@firewall-services.com> 0.96-10.sme
- Remove previous patch, it was already applied [SME: 9462]

* Sun May 8 2016 Daniel Berteaud <daniel@firewall-services.com> 0.96-9.sme
- Backport a fix for karma_tool so it can find its database [SME: 9462]

* Fri May 6 2016 Daniel Berteaud <daniel@firewall-services.com> 0.96-8.sme
- Support dkim signing with symlinks [SME: 9496]
- Fix DMARC rejects not working [SME: 9202]
- Add DMARC results notes so further plugin can check it [SME: 9202]
- Add possibility to reject solely on SPF result if no DMARC policy is published
  [SME: 9479]

* Fri May 6 2016 Daniel Berteaud <daniel@firewall-services.com> 0.96-7.sme
- Backport some minor patches from git head [SME: 9460]

* Fri Apr 22 2016 Daniel Berteaud <daniel@firewall-services.com> 0.96-6.sme
- badrcptto can now read another file container bad addresses [SME: 9460]
  [SME: 4597]

* Thu Apr 21 2016 Daniel Berteaud <daniel@firewall-services.com> 0.96-5.sme
- Fix a typo in previous patch [SME: 9462]

* Thu Apr 21 2016 Daniel Berteaud <daniel@firewall-services.com> 0.96-4.sme
- Backport the karma strikes param patch [SME: 9462]

* Mon Apr 18 2016 Daniel Berteaud <daniel@firewall-services.com> 0.96-3.sme
- hook uribl in data_post so it has access to the body [SME: 9467]

* Sun Apr 17 2016 Daniel Berteaud <daniel@firewall-services.com> 0.96-2.sme
- Don't log user credentials except when using the higher log level
  [SME: 9466]

* Sat Apr 16 2016 Daniel Berteaud <daniel@firewall-services.com> 0.96-1.sme
- Update to 0.96 [SME: 9460]

* Fri Mar 25 2016 Charlie Brady <charlieb@charliebrady.org> 0.84-20.sme
- Fix startup warnings due to Socket6 symbol import. [SME: 9386]

* Sun Feb 7 2016 stephane de labrusse <stephdl@de-labrusse.fr> 0.84-19.sme
- Build new rpm for sme10

* Thu Jan 7 2016 Daniel Berteaud <daniel@firewall-services.com> 0.84-18.sme
- Allow reading SSL_version from the tls_protocols config file (and turn
  TLSv1 back on by default) [SME: 9162]

* Wed Jan 6 2016 Daniel Berteaud <daniel@firewall-services.com> 0.84-17.sme
- Correctly log login attempts with nulls in login name [SME: 9167]

* Wed Jan 6 2016 Daniel Berteaud <daniel@firewall-services.com> 0.84-16.sme
- Disable TLSv1 [SME: 9162]

* Fri Sep 11 2015 stephane de Labrusse <stephdl@de-labrusse.fr> 0.84-15.sme
- Modify whitelist_soft transaction to interact with dnsbl filter [SME: 8747]
- by John Crisp <jcrisp@safeandsoundit.co.uk>
- Added qpsmtpd-0.84-make-dnsbl-more-whitelist_soft-aware.patch

* Tue May 19 2015 Daniel Berteaud <daniel@firewall-services.com> 0.84-14.sme
- Disable SSLv3 [SME: 8926]

* Fri May 15 2015 Daniel Berteaud <daniel@firewall-services.com> 0.84-13.sme
- New notls conf to set hosts you dont want to advertize STARTTLS to [SME: 8863]

* Sun Feb 15 2015 Daniel Berteaud <daniel@firewall-services.com> 0.84-12.sme
- Revert forcing TLSv1 patch as it breaks some inbound delivery [SME: 8851]
- Revert whitelist_soft dnsbl as it hasn't been verified yet and we need to
  push the fix for TLSv1 [SME: 8747]

* Fri Dec 26 2014 stephane de Labrusse <stephdl@de-labrusse.fr> 0.84-11.sme
- Modify whitelist_soft transaction to interact with dnsbl filter [SME: 8747]
- by John Crisp <jcrisp@safeandsoundit.co.uk>

* Mon Dec 22 2014 Daniel Berteaud <daniel@firewall-services.com> 0.84-10.sme
- Force usage of TLSv1 [SME: 8726]

* Thu Mar 13 2014 Daniel Berteaud <daniel@firewall-services.com> 0.84-9.sme
- Remove DENYSOFT on SPF softfail [SME: 8273]

* Mon Dec 9 2013 Daniel Berteaud <daniel@firewall-services.com> 0.84-8.sme
- Fix handling of messages with no body and no trailing \n after headers (eq was
  used in attempted assignment). [SME: 8051, see SME: 7754]

* Fri Jul 5 2013 Ian Wells <esmith@wellsi.com> 0.84-7.sme
- Accept messages with no body and no trailing \n after headers [SME: 7754]

* Thu Apr 25 2013 chris burnat <devlist@burnat.com> 0.84-6.sme
- Fix Net::DNS update breaks qpsmtpd, codes suggested by Ian [SME: 7561]

* Wed Apr 24 2013 Daniel Berteaud <daniel@firewall-services.com> 0.84-5.sme
- allows the spamassassin plugin to read the size limit from its
  arguments [SME: 7559]

* Fri Feb 1 2013 Shad L. Lords <slords@mail.com> 0.84-4.sme
- Update spec so building on rhel6 works [SME: 7263]

* Fri May 04 2012 Charlie Brady <charlie_brady@mitel.com> 0.84-3.sme
- Set SO_KEEPALIVE option on client socket - to detect dead
  connections. [SME: 6924]

* Sun Nov 14 2010 <slords@mail.com> 0.84-2.sme
- Sync with upstream git repo.
- Fix require_resolvable_fromhost doesn't work [SME: 6369]
- Fix TLS security defaults [SME: 6241]
- Fix fatal errors when mail has no headers [SME: 6345]

* Wed Apr 14 2010 <slords@mail.com> 0.84-0.1.sme
- Update to 0.84
- add sme specific patches
- Perl module rpms moved to /usr/share/perl5/vendor_perl [SME: 7223]

* Wed Mar 3 2010 <filippo.carletti@gmail.com> 0.83-0.7.sme
- Remove spool and log dir from package (in smeserver-qpsmtpd)
- Don't create smtpd user (unused in sme) [SME: 5815]

* Thu Nov 5 2009 <smeserver-contribs@snetram.nl> 0.83-0.6.sme
- Apply qpsmtpd git changesets to implement custom SPAM
  subject prefix [SME: 5031]

* Tue Nov 3 2009 <slords@mail.com> 0.83-0.5.sme
- Update pre requires so scripts don't fail on install [SME: 5558]

* Sat Oct 31 2009 <slords@mail.com> 0.83-0.4.sme
- Rebase bad_rcptto patch to remove orig file [SME: 5548]
- Change logging in tls init to prevent warnings [SME: 5551]

* Thu Oct 29 2009 <slords@mail.com> 0.83-0.3.sme
- Only run/initialize plugins once [SME: 5533]

* Mon Oct 26 2009 <filippo.carletti@gmail.com> 0.83-0.2.sme
- Change spool dir permissions and owner to qpsmtpd:clamav
- Change log dir permissions and owner to smelog:smelog

* Tue Sep 22 2009 <filippo.carletti@gmail.com> 0.83-0.1.sme
- add sme specific patches

* Fri Sep 18 2009 <rpmbuild@robinbowes.com> 0.83-0.1
- Update to 0.83

* Sun Jul 12 2009 <rpmbuild@robinbowes.com> 0.82-0.1
- Update to latest release
- don't add qpsmtpd to start-up by default
- add apache config file to qpsmtpd-apache package
- remove all patches
- use rpm macros for dirs
- use a filelist for main package instead of a long list of files

* Tue Jul 15 2008 <rpmbuild@robinbowes.com> 0.43-0.7
- Removed SelectServer.pm from .spec file

* Tue Mar 18 2008 <rpmbuild@robinbowes.com> 0.43-0.6
- moved config files back to /etc/qpsmtpd following some changes
  to the qpsmtpd src

* Tue Mar 18 2008 <rpmbuild@robinbowes.com> 0.43-0.5
- moved config files to /etc/qpsmtpd/config

* Tue Mar 18 2008 <rpmbuild@robinbowes.com> 0.43-0.4
- Moved qpsmtpd-async to /usr/bin
- Added qpsmtpd-async man page to async package
- Added async smtproute plugin to async package
  
* Wed Mar 12 2008 <rpmbuild@robinbowes.com> 0.43-0.3
- Makefile.PL now updated in svn, so remove hack

* Wed Mar 12 2008 <rpmbuild@robinbowes.com> 0.43-0.2
- Added qpsmtpd-prefork to qpsmtpd RPM, inc. hack to work round
  deficiency in Makefile.PL

* Mon Mar 10 2008 <rpmbuild@robinbowes.com> 0.43-0.1
- Updated to work with Makefile to build from svn

* Wed Sep 12 2007 <rpmbuild@robinbowes.com> 0.40-2.0
- Updated to build trunk-r790

* Tue Jun 12 2007 <hjp@hjp.at> 0.40-1.0
- updated to 0.40 - no code change.

* Thu Jun 07 2007 <hjp@hjp.at> 0.40-0.2
- unset environment variables which are normally tainted in perl.
- updated to 0.40rc1
- added dependency on Net::IP (needed by some plugins)

* Sat May 05 2007 <hjp@hjp.at> 0.33-0.5
- moved environment cleanup into start() function, otherwise
  LANG just gets reinitialized.

* Sat May 05 2007 <hjp@hjp.at> 0.33-0.4
- split qpsmtpd-async into a separate package to avoid dependency
  on ParaDNS.

* Sat May 05 2007 <hjp@hjp.at> 0.33-0.3
- also unset LANG, LC_ALL and LC_TIME in startup script to prevent
  locale specific Received headers (bug reported by Dominik Meyer)

* Sun Feb 25 2007 <hjp@hjp.at> 0.33-0.2
- 0.3x branch has been merged back to trunk. 
  Got current snapshot (r715) from trunk.

* Sun Feb 25 2007 <hjp@hjp.at> 0.33-0.1
- Start forkserver via "daemon" (Gavin Carr)
- Fixed 'service qpsmtpd-forkserver status' (Gavin Carr)
- Changed policy for config files to noreplace (Gavin Carr)

* Sun Nov 05 2006 <hjp@hjp.at> 0.33-0.0
- Upgraded to current snapshot from 0.3x branch (which should become
  0.33 soon-ish)
- included xinetd-support again.

* Sat Mar 18 2006 <hjp@hjp.at> 0.32-2
- fix dnsbl to check whether answer fits query.
- randomize Net::DNS ids for qpsmtpd-forkserver child processes.

* Wed Mar 08 2006 <hjp@hjp.at> 0.32-1
- New upstream 0.32
- rc-file unsets PERL_UNICODE (bug #38397)

* Sat Jan 28 2006 <hjp@hjp.at> 0.31.1-3
- Use ${SOURCE*} macros to refer to source files
- Avoid invoking rpm and other cleanup in %pre section
- Invoke chkconfig in %post.
- (Thanks to Josko Plazonic for the reporting these problems and
  suggesting fixes)

* Tue Nov 30 2005 <hjp@hjp.at> 0.31.1-2
- Revision 170 of plugins/loggin/file_connection:
  Return DECLINED from open_log.
  Open log in write_log if it isn't already open.

* Tue Nov 29 2005 <hjp@hjp.at> 0.31.1-1
- Commented out queue plugins from sample config
- Added dependencies
- Create smtpd user if it doesn't exist
- Added /var/log/qpsmtpd and /var/spool/qpsmtpd

* Sat Nov 26 2005 <hjp@hjp.at>
- Added file_connection plugin
- Startup file for qpsmtpd-forkserver now uses --detach and assumes that
  a suitable logging module is configured (file_connection by default)

* Wed Nov 23 2005 <hjp@hjp.at>
- Forkserver drops privileges before loading plugins now.

* Sun Nov 20 2005 <hjp@hjp.at>
- New upstream 0.31.1

* Mon Nov 14 2005 <hjp@hjp.at> 0.31-8
- New upstream 0.31rc3.
- pre-connection patch slightly simplified since upstream fixed one of
  the bugs.

* Tue Aug 23 2005 <hjp@hjp.at>
- forced INSTALLSITELIB=/usr/lib/perl5/site_perl as suggested by 
  Charlie Brady.

* Sat Aug 20 2005 <hjp@hjp.at> 0.31-7
- RC2 from upstream.
- Removed patches which aren't applied from spec file.

* Fri Jul 22 2005 <hjp@hjp.at> 0.31-6
- New upstream snapshot from 0.31 branch: svn revision 509.

* Sun Jul 17 2005 <hjp@hjp.at> 0.31-5
- include only /etc/init.d/qpsmtpd-forkserver, not /etc/init.d
  it conflicts with old initscripts packages.

* Sun Jul 17 2005 <hjp@hjp.at> 0.31-4
- removed tabs from forkserver 

* Sun Jul 17 2005 <hjp@hjp.at> 0.31-3
- added startup script for forkserver
- changed BuildArchitectures to noarch.

* Sat Jul 16 2005 <hjp@hjp.at> 0.31-2
- pre-connection hook is now actually called, not just defined.

* Fri Jul 15 2005 <hjp@hjp.at> 0.31-1
- merged with 0.31. Most of my patches are now in the official release.
- merged Gavin's per-user-config patch with my dirs patch, since the
  latter needs a way to turn off logging.
- added /etc/qpsmtpd/plugin_dir to package.

* Mon Jun 13 2005 <hjp@hjp.at> 0.29-6
- fixed removal of patch backup files
- fixed option --pid-file

* Sun Jun 12 2005 <hjp@hjp.at>
- avoid installing patch backup files
- split Apache::Qpsmtpd into separate package to avoid dependency hell.
- fixed URL
- changed group to Daemons.
- Fixed installation for newer versions of ExtUtils::MakeMaker

* Wed Jun  1 2005 <hjp@hjp.at> 0.29-5
- Really don't reap children in signal handler.

* Tue May 31 2005 <hjp@hjp.at> 0.29-4
- Return 421 for DENYSOFT_DISCONNECT
- Don't reap children in signal handler.

* Thu May 19 2005 <hjp@hjp.at> 0.29-3
- removed code to accept paths without <>.

* Thu May 19 2005 <hjp@hjp.at> 0.29-2
- added QPSMTPD_CONFIG env variable and plugin_dir config.
- added supplemental groups and support for pid file
- added shared_connect hook
- changed log level for SMTP dialog from DEBUG to INFO

* Thu Apr 21 2005 hjp@hjp.at
- added plugins, /etc and docs.

* Mon Apr 18 2005 hjp@hjp.at
- Specfile autogenerated

1	vip-ire	1.17	# $Id: qpsmtpd.spec,v 1.16 2016/05/08 08:19:33 vip-ire Exp $
2	stephdl	1.1
3			Name: qpsmtpd
4	vip-ire	1.4	Version: 0.96
5	vip-ire	1.17	Release: 10%{?dist}
6	vip-ire	1.4	Summary: qpsmtpd + qpsmtpd-apache
7	stephdl	1.1	License: MIT
8			Group: System Environment/Daemons
9			URL: http://smtpd.develooper.com/
10			BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root
11			BuildRequires: perl >= 0:5.00503
12			BuildRequires: perl(ExtUtils::MakeMaker)
13			BuildArch: noarch
14			Requires: perl(Mail::Header), perl(Net::DNS) perl(Net::IP)
15	vip-ire	1.5	Requires: perl(IO::Socket::SSL) >= 1.70
16	stephdl	1.1	Requires(pre): coreutils, shadow-utils, perl
17
18			Source0: %{name}-%{version}.tar.gz
19			Source1: qpsmtpd-forkserver.rc
20			Source2: qpsmtpd-forkserver.sysconfig
21	vip-ire	1.4	Source3: qpsmtpd-xinetd
22			Source4: in.qpsmtpd
23			Source5: qpsmtpd.conf
24			Source6: README.selinux
25
26			Patch1: qpsmtpd-0.95-spamassassin_size_limit.patch
27			Patch2: qpsmtpd-0.95-qpsmtpd_forserver_keepalive.patch
28			Patch3: qpsmtpd-0.95-notls_conf.patch
29			Patch4: qpsmtpd-0.95-allow_tls_proto_from_conf.patch
30			Patch5: qpsmtpd-0.96-set_hooks.patch
31			Patch6: qpsmtpd-0.96-warn_implicit_split.patch
32	vip-ire	1.6	Patch7: qpsmtpd-0.96-dont_log_credentials_except_in_debug.patch
33	vip-ire	1.7	Patch8: qpsmtpd-0.96-uribl_data_post.patch
34	vip-ire	1.9	Patch9: qpsmtpd-0.96-karma_strikes.patch
35	vip-ire	1.12	Patch10: qpsmtpd-0.96-more_badrcptto.patch
36	vip-ire	1.13	Patch11: qpsmtpd-0.96-karma_tlds_conf.patch
37			Patch12: qpsmtpd-0.96-store_original_plugin_name.patch
38			Patch13: qpsmtpd-0.96-fix_karma_tool_dir_path.patch
39	vip-ire	1.14	Patch14: qpsmtpd-0.96-dkim_no_sign_for_others_on_symlinks.patch
40			Patch15: qpsmtpd-0.96-fix_dmarc_reject.patch
41			Patch16: qpsmtpd-0.96-add_dmarc_result_notes.patch
42			Patch17: qpsmtpd-0.96-spf_on_no_dmarc_policy.patch
43	stephdl	1.1
44			%description
45			qpsmtpd is a flexible smtpd daemon written in Perl. Apart from the core
46			SMTP features, all functionality is implemented in small "extension
47			plugins" using the easy to use object oriented plugin API.
48
49			qpsmtpd was originally written as a drop-in qmail-smtpd replacement, but
50			now it also includes a smtp forward and a postfix "backend".
51
52			%package apache
53			Requires: perl(mod_perl2)
54			Summary: mod_perl-2 connection handler for qpsmtpd
55			Group: System Environment/Daemons
56
57			%description apache
58
59			This module implements a mod_perl/apache 2.0 connection handler
60			that turns Apache into an SMTP server using Qpsmtpd.
61
62
63			%prep
64			%setup -q
65			%patch1 -p1
66			%patch2 -p1
67			%patch3 -p1
68			%patch4 -p1
69			%patch5 -p1
70			%patch6 -p1
71	vip-ire	1.6	%patch7 -p1
72	vip-ire	1.7	%patch8 -p1
73	vip-ire	1.9	%patch9 -p1
74	vip-ire	1.12	%patch10 -p1
75	vip-ire	1.13	%patch11 -p1
76			%patch12 -p1
77			%patch13 -p1
78	vip-ire	1.14	%patch14 -p1
79			%patch15 -p1
80			%patch16 -p1
81			%patch17 -p1
82	stephdl	1.1
83			%build
84			CFLAGS="$RPM_OPT_FLAGS" perl Makefile.PL INSTALLDIRS="vendor" PREFIX="%{buildroot}%{_prefix}"
85			make
86
87			%clean
88			rm -rf $RPM_BUILD_ROOT
89			%install
90
91			rm -rf $RPM_BUILD_ROOT
92			find blib/lib -name '.pm.' -exec rm -f {} \;
93			make pure_install
94
95			mkdir -p %{buildroot}%{_datadir}/%{name}
96			rm -f %{buildroot}%{_datadir}/%{name}/plugins/.
97			cp -r plugins %{buildroot}%{_datadir}/%{name}/plugins
98			mkdir -p %{buildroot}%{_sysconfdir}/%{name}
99			rm -f %{buildroot}%{_sysconfdir}/%{name}/.
100			cp -r config.sample/* %{buildroot}%{_sysconfdir}/%{name}/
101			echo %{_datadir}/%{name}/plugins > %{buildroot}%{_sysconfdir}/%{name}/plugin_dirs
102			echo %{_localstatedir}/spool/qpsmtpd > %{buildroot}%{_sysconfdir}/%{name}/spool_dir
103			echo logging/file_connection loglevel LOGINFO %{_localstatedir}/log/qpsmtpd/%Y-%m-%d > %{buildroot}%{_sysconfdir}/%{name}/logging
104			mkdir -p %{buildroot}%{_initrddir}
105			cp %{SOURCE1} %{buildroot}%{_initrddir}/qpsmtpd-forkserver
106			mkdir -p %{buildroot}%{_sysconfdir}/sysconfig
107			cp %{SOURCE2} %{buildroot}%{_sysconfdir}/sysconfig/qpsmtpd-forkserver
108			mkdir -p %{buildroot}%{_localstatedir}/spool/qpsmtpd
109			mkdir -p %{buildroot}%{_localstatedir}/log/qpsmtpd
110			mkdir -p %{buildroot}%{_sysconfdir}/xinetd.d
111	vip-ire	1.4	cp %{SOURCE3} %{buildroot}%{_sysconfdir}/xinetd.d/smtp
112	stephdl	1.1	mkdir -p %{buildroot}%{_sbindir}
113	vip-ire	1.4	cp %{SOURCE4} %{buildroot}%{_sbindir}/in.smtp
114	stephdl	1.1	mkdir -p %{buildroot}%{_sysconfdir}/httpd/conf.d
115	vip-ire	1.4	cp %{SOURCE5} %{buildroot}%{_sysconfdir}/httpd/conf.d
116	stephdl	1.1	mkdir -p %{buildroot}%{_docdir}/%{name}-apache-%{version}
117	vip-ire	1.4	cp %{SOURCE6} %{buildroot}%{_docdir}/%{name}-apache-%{version}
118	stephdl	1.1
119			[ -x /usr/lib/rpm/brp-compress ] && /usr/lib/rpm/brp-compress
120
121			find %{buildroot}%{_prefix} \( -name perllocal.pod -o -name .packlist \) -exec rm {} \;
122			find %{buildroot}%{_prefix} -type f -print \| \
123			sed "s@^%{buildroot}@@g" \| \
124			grep -v [Aa]sync \| \
125			grep -v packaging \| \
126			grep -v README.selinux \| \
127			grep -v /Apache \| \
128			grep -v /Danga \| \
129			grep -v Qpsmtpd/PollServer.pm > %{name}-%{version}-%{release}-filelist
130			if [ "$(cat %{name}-%{version}-%{release}-filelist)X" = "X" ] ; then
131			echo "ERROR: EMPTY FILE LIST"
132			exit -1
133			fi
134
135			%files -f %{name}-%{version}-%{release}-filelist
136			%defattr(-,root,root)
137	vip-ire	1.4	%doc CREDITS Changes LICENSE README.md README.plugins.md STATUS
138	stephdl	1.1	%{_initrddir}/qpsmtpd-forkserver
139			%config(noreplace) %{_sysconfdir}/qpsmtpd/*
140			%config(noreplace) %{_sysconfdir}/xinetd.d/smtp
141			%config(noreplace) %{_sysconfdir}/sysconfig/qpsmtpd-forkserver
142
143			%files apache
144			%defattr(-,root,root)
145			%{_prefix}/share/perl5/vendor_perl/Apache/Qpsmtpd.pm
146			%{_mandir}/man3/Apache::Qpsmtpd.3pm.gz
147			%config(noreplace) %{_sysconfdir}/httpd/conf.d/*
148			%doc %{_docdir}/%{name}-apache-%{version}/README.selinux
149
150			%pre
151	vip-ire	1.5
152	stephdl	1.1
153			%changelog
154	vip-ire	1.17	* Sun May 8 2016 Daniel Berteaud <daniel@firewall-services.com> 0.96-10.sme
155			- Remove previous patch, it was already applied [SME: 9462]
156
157	vip-ire	1.16	* Sun May 8 2016 Daniel Berteaud <daniel@firewall-services.com> 0.96-9.sme
158			- Backport a fix for karma_tool so it can find its database [SME: 9462]
159
160	vip-ire	1.14	* Fri May 6 2016 Daniel Berteaud <daniel@firewall-services.com> 0.96-8.sme
161			- Support dkim signing with symlinks [SME: 9496]
162			- Fix DMARC rejects not working [SME: 9202]
163			- Add DMARC results notes so further plugin can check it [SME: 9202]
164			- Add possibility to reject solely on SPF result if no DMARC policy is published
165			[SME: 9479]
166
167	vip-ire	1.13	* Fri May 6 2016 Daniel Berteaud <daniel@firewall-services.com> 0.96-7.sme
168			- Backport some minor patches from git head [SME: 9460]
169
170	vip-ire	1.12	* Fri Apr 22 2016 Daniel Berteaud <daniel@firewall-services.com> 0.96-6.sme
171			- badrcptto can now read another file container bad addresses [SME: 9460]
172			[SME: 4597]
173
174	vip-ire	1.10	* Thu Apr 21 2016 Daniel Berteaud <daniel@firewall-services.com> 0.96-5.sme
175	vip-ire	1.11	- Fix a typo in previous patch [SME: 9462]
176	vip-ire	1.10
177	vip-ire	1.9	* Thu Apr 21 2016 Daniel Berteaud <daniel@firewall-services.com> 0.96-4.sme
178			- Backport the karma strikes param patch [SME: 9462]
179
180	vip-ire	1.7	* Mon Apr 18 2016 Daniel Berteaud <daniel@firewall-services.com> 0.96-3.sme
181	vip-ire	1.8	- hook uribl in data_post so it has access to the body [SME: 9467]
182	vip-ire	1.7
183	vip-ire	1.6	* Sun Apr 17 2016 Daniel Berteaud <daniel@firewall-services.com> 0.96-2.sme
184			- Don't log user credentials except when using the higher log level
185			[SME: 9466]
186
187	vip-ire	1.4	* Sat Apr 16 2016 Daniel Berteaud <daniel@firewall-services.com> 0.96-1.sme
188			- Update to 0.96 [SME: 9460]
189
190	charliebrady	1.3	* Fri Mar 25 2016 Charlie Brady <charlieb@charliebrady.org> 0.84-20.sme
191			- Fix startup warnings due to Socket6 symbol import. [SME: 9386]
192
193	stephdl	1.2	* Sun Feb 7 2016 stephane de labrusse <stephdl@de-labrusse.fr> 0.84-19.sme
194	stephdl	1.1	- Build new rpm for sme10
195
196			* Thu Jan 7 2016 Daniel Berteaud <daniel@firewall-services.com> 0.84-18.sme
197			- Allow reading SSL_version from the tls_protocols config file (and turn
198			TLSv1 back on by default) [SME: 9162]
199
200			* Wed Jan 6 2016 Daniel Berteaud <daniel@firewall-services.com> 0.84-17.sme
201			- Correctly log login attempts with nulls in login name [SME: 9167]
202
203			* Wed Jan 6 2016 Daniel Berteaud <daniel@firewall-services.com> 0.84-16.sme
204			- Disable TLSv1 [SME: 9162]
205
206			* Fri Sep 11 2015 stephane de Labrusse <stephdl@de-labrusse.fr> 0.84-15.sme
207			- Modify whitelist_soft transaction to interact with dnsbl filter [SME: 8747]
208			- by John Crisp <jcrisp@safeandsoundit.co.uk>
209			- Added qpsmtpd-0.84-make-dnsbl-more-whitelist_soft-aware.patch
210
211			* Tue May 19 2015 Daniel Berteaud <daniel@firewall-services.com> 0.84-14.sme
212			- Disable SSLv3 [SME: 8926]
213
214			* Fri May 15 2015 Daniel Berteaud <daniel@firewall-services.com> 0.84-13.sme
215			- New notls conf to set hosts you dont want to advertize STARTTLS to [SME: 8863]
216
217			* Sun Feb 15 2015 Daniel Berteaud <daniel@firewall-services.com> 0.84-12.sme
218			- Revert forcing TLSv1 patch as it breaks some inbound delivery [SME: 8851]
219			- Revert whitelist_soft dnsbl as it hasn't been verified yet and we need to
220			push the fix for TLSv1 [SME: 8747]
221
222			* Fri Dec 26 2014 stephane de Labrusse <stephdl@de-labrusse.fr> 0.84-11.sme
223			- Modify whitelist_soft transaction to interact with dnsbl filter [SME: 8747]
224			- by John Crisp <jcrisp@safeandsoundit.co.uk>
225
226			* Mon Dec 22 2014 Daniel Berteaud <daniel@firewall-services.com> 0.84-10.sme
227			- Force usage of TLSv1 [SME: 8726]
228
229			* Thu Mar 13 2014 Daniel Berteaud <daniel@firewall-services.com> 0.84-9.sme
230			- Remove DENYSOFT on SPF softfail [SME: 8273]
231
232			* Mon Dec 9 2013 Daniel Berteaud <daniel@firewall-services.com> 0.84-8.sme
233			- Fix handling of messages with no body and no trailing \n after headers (eq was
234			used in attempted assignment). [SME: 8051, see SME: 7754]
235
236			* Fri Jul 5 2013 Ian Wells <esmith@wellsi.com> 0.84-7.sme
237			- Accept messages with no body and no trailing \n after headers [SME: 7754]
238
239			* Thu Apr 25 2013 chris burnat <devlist@burnat.com> 0.84-6.sme
240			- Fix Net::DNS update breaks qpsmtpd, codes suggested by Ian [SME: 7561]
241
242			* Wed Apr 24 2013 Daniel Berteaud <daniel@firewall-services.com> 0.84-5.sme
243			- allows the spamassassin plugin to read the size limit from its
244			arguments [SME: 7559]
245
246			* Fri Feb 1 2013 Shad L. Lords <slords@mail.com> 0.84-4.sme
247			- Update spec so building on rhel6 works [SME: 7263]
248
249			* Fri May 04 2012 Charlie Brady <charlie_brady@mitel.com> 0.84-3.sme
250			- Set SO_KEEPALIVE option on client socket - to detect dead
251			connections. [SME: 6924]
252
253			* Sun Nov 14 2010 <slords@mail.com> 0.84-2.sme
254			- Sync with upstream git repo.
255			- Fix require_resolvable_fromhost doesn't work [SME: 6369]
256			- Fix TLS security defaults [SME: 6241]
257			- Fix fatal errors when mail has no headers [SME: 6345]
258
259			* Wed Apr 14 2010 <slords@mail.com> 0.84-0.1.sme
260			- Update to 0.84
261			- add sme specific patches
262			- Perl module rpms moved to /usr/share/perl5/vendor_perl [SME: 7223]
263
264			* Wed Mar 3 2010 <filippo.carletti@gmail.com> 0.83-0.7.sme
265			- Remove spool and log dir from package (in smeserver-qpsmtpd)
266			- Don't create smtpd user (unused in sme) [SME: 5815]
267
268			* Thu Nov 5 2009 <smeserver-contribs@snetram.nl> 0.83-0.6.sme
269			- Apply qpsmtpd git changesets to implement custom SPAM
270			subject prefix [SME: 5031]
271
272			* Tue Nov 3 2009 <slords@mail.com> 0.83-0.5.sme
273			- Update pre requires so scripts don't fail on install [SME: 5558]
274
275			* Sat Oct 31 2009 <slords@mail.com> 0.83-0.4.sme
276			- Rebase bad_rcptto patch to remove orig file [SME: 5548]
277			- Change logging in tls init to prevent warnings [SME: 5551]
278
279			* Thu Oct 29 2009 <slords@mail.com> 0.83-0.3.sme
280			- Only run/initialize plugins once [SME: 5533]
281
282			* Mon Oct 26 2009 <filippo.carletti@gmail.com> 0.83-0.2.sme
283			- Change spool dir permissions and owner to qpsmtpd:clamav
284			- Change log dir permissions and owner to smelog:smelog
285
286			* Tue Sep 22 2009 <filippo.carletti@gmail.com> 0.83-0.1.sme
287			- add sme specific patches
288
289			* Fri Sep 18 2009 <rpmbuild@robinbowes.com> 0.83-0.1
290			- Update to 0.83
291
292			* Sun Jul 12 2009 <rpmbuild@robinbowes.com> 0.82-0.1
293			- Update to latest release
294			- don't add qpsmtpd to start-up by default
295			- add apache config file to qpsmtpd-apache package
296			- remove all patches
297			- use rpm macros for dirs
298			- use a filelist for main package instead of a long list of files
299
300			* Tue Jul 15 2008 <rpmbuild@robinbowes.com> 0.43-0.7
301			- Removed SelectServer.pm from .spec file
302
303			* Tue Mar 18 2008 <rpmbuild@robinbowes.com> 0.43-0.6
304			- moved config files back to /etc/qpsmtpd following some changes
305			to the qpsmtpd src
306
307			* Tue Mar 18 2008 <rpmbuild@robinbowes.com> 0.43-0.5
308			- moved config files to /etc/qpsmtpd/config
309
310			* Tue Mar 18 2008 <rpmbuild@robinbowes.com> 0.43-0.4
311			- Moved qpsmtpd-async to /usr/bin
312			- Added qpsmtpd-async man page to async package
313			- Added async smtproute plugin to async package
314
315			* Wed Mar 12 2008 <rpmbuild@robinbowes.com> 0.43-0.3
316			- Makefile.PL now updated in svn, so remove hack
317
318			* Wed Mar 12 2008 <rpmbuild@robinbowes.com> 0.43-0.2
319			- Added qpsmtpd-prefork to qpsmtpd RPM, inc. hack to work round
320			deficiency in Makefile.PL
321
322			* Mon Mar 10 2008 <rpmbuild@robinbowes.com> 0.43-0.1
323			- Updated to work with Makefile to build from svn
324
325			* Wed Sep 12 2007 <rpmbuild@robinbowes.com> 0.40-2.0
326			- Updated to build trunk-r790
327
328			* Tue Jun 12 2007 <hjp@hjp.at> 0.40-1.0
329			- updated to 0.40 - no code change.
330
331			* Thu Jun 07 2007 <hjp@hjp.at> 0.40-0.2
332			- unset environment variables which are normally tainted in perl.
333			- updated to 0.40rc1
334			- added dependency on Net::IP (needed by some plugins)
335
336			* Sat May 05 2007 <hjp@hjp.at> 0.33-0.5
337			- moved environment cleanup into start() function, otherwise
338			LANG just gets reinitialized.
339
340			* Sat May 05 2007 <hjp@hjp.at> 0.33-0.4
341			- split qpsmtpd-async into a separate package to avoid dependency
342			on ParaDNS.
343
344			* Sat May 05 2007 <hjp@hjp.at> 0.33-0.3
345			- also unset LANG, LC_ALL and LC_TIME in startup script to prevent
346			locale specific Received headers (bug reported by Dominik Meyer)
347
348			* Sun Feb 25 2007 <hjp@hjp.at> 0.33-0.2
349			- 0.3x branch has been merged back to trunk.
350			Got current snapshot (r715) from trunk.
351
352			* Sun Feb 25 2007 <hjp@hjp.at> 0.33-0.1
353			- Start forkserver via "daemon" (Gavin Carr)
354			- Fixed 'service qpsmtpd-forkserver status' (Gavin Carr)
355			- Changed policy for config files to noreplace (Gavin Carr)
356
357			* Sun Nov 05 2006 <hjp@hjp.at> 0.33-0.0
358			- Upgraded to current snapshot from 0.3x branch (which should become
359			0.33 soon-ish)
360			- included xinetd-support again.
361
362			* Sat Mar 18 2006 <hjp@hjp.at> 0.32-2
363			- fix dnsbl to check whether answer fits query.
364			- randomize Net::DNS ids for qpsmtpd-forkserver child processes.
365
366			* Wed Mar 08 2006 <hjp@hjp.at> 0.32-1
367			- New upstream 0.32
368			- rc-file unsets PERL_UNICODE (bug #38397)
369
370			* Sat Jan 28 2006 <hjp@hjp.at> 0.31.1-3
371			- Use ${SOURCE*} macros to refer to source files
372			- Avoid invoking rpm and other cleanup in %pre section
373			- Invoke chkconfig in %post.
374			- (Thanks to Josko Plazonic for the reporting these problems and
375			suggesting fixes)
376
377			* Tue Nov 30 2005 <hjp@hjp.at> 0.31.1-2
378			- Revision 170 of plugins/loggin/file_connection:
379			Return DECLINED from open_log.
380			Open log in write_log if it isn't already open.
381
382			* Tue Nov 29 2005 <hjp@hjp.at> 0.31.1-1
383			- Commented out queue plugins from sample config
384			- Added dependencies
385			- Create smtpd user if it doesn't exist
386			- Added /var/log/qpsmtpd and /var/spool/qpsmtpd
387
388			* Sat Nov 26 2005 <hjp@hjp.at>
389			- Added file_connection plugin
390			- Startup file for qpsmtpd-forkserver now uses --detach and assumes that
391			a suitable logging module is configured (file_connection by default)
392
393			* Wed Nov 23 2005 <hjp@hjp.at>
394			- Forkserver drops privileges before loading plugins now.
395
396			* Sun Nov 20 2005 <hjp@hjp.at>
397			- New upstream 0.31.1
398
399			* Mon Nov 14 2005 <hjp@hjp.at> 0.31-8
400			- New upstream 0.31rc3.
401			- pre-connection patch slightly simplified since upstream fixed one of
402			the bugs.
403
404			* Tue Aug 23 2005 <hjp@hjp.at>
405			- forced INSTALLSITELIB=/usr/lib/perl5/site_perl as suggested by
406			Charlie Brady.
407
408			* Sat Aug 20 2005 <hjp@hjp.at> 0.31-7
409			- RC2 from upstream.
410			- Removed patches which aren't applied from spec file.
411
412			* Fri Jul 22 2005 <hjp@hjp.at> 0.31-6
413			- New upstream snapshot from 0.31 branch: svn revision 509.
414
415			* Sun Jul 17 2005 <hjp@hjp.at> 0.31-5
416			- include only /etc/init.d/qpsmtpd-forkserver, not /etc/init.d
417			it conflicts with old initscripts packages.
418
419			* Sun Jul 17 2005 <hjp@hjp.at> 0.31-4
420			- removed tabs from forkserver
421
422			* Sun Jul 17 2005 <hjp@hjp.at> 0.31-3
423			- added startup script for forkserver
424			- changed BuildArchitectures to noarch.
425
426			* Sat Jul 16 2005 <hjp@hjp.at> 0.31-2
427			- pre-connection hook is now actually called, not just defined.
428
429			* Fri Jul 15 2005 <hjp@hjp.at> 0.31-1
430			- merged with 0.31. Most of my patches are now in the official release.
431			- merged Gavin's per-user-config patch with my dirs patch, since the
432			latter needs a way to turn off logging.
433			- added /etc/qpsmtpd/plugin_dir to package.
434
435			* Mon Jun 13 2005 <hjp@hjp.at> 0.29-6
436			- fixed removal of patch backup files
437			- fixed option --pid-file
438
439			* Sun Jun 12 2005 <hjp@hjp.at>
440			- avoid installing patch backup files
441			- split Apache::Qpsmtpd into separate package to avoid dependency hell.
442			- fixed URL
443			- changed group to Daemons.
444			- Fixed installation for newer versions of ExtUtils::MakeMaker
445
446			* Wed Jun 1 2005 <hjp@hjp.at> 0.29-5
447			- Really don't reap children in signal handler.
448
449			* Tue May 31 2005 <hjp@hjp.at> 0.29-4
450			- Return 421 for DENYSOFT_DISCONNECT
451			- Don't reap children in signal handler.
452
453			* Thu May 19 2005 <hjp@hjp.at> 0.29-3
454			- removed code to accept paths without <>.
455
456			* Thu May 19 2005 <hjp@hjp.at> 0.29-2
457			- added QPSMTPD_CONFIG env variable and plugin_dir config.
458			- added supplemental groups and support for pid file
459			- added shared_connect hook
460			- changed log level for SMTP dialog from DEBUG to INFO
461
462			* Thu Apr 21 2005 hjp@hjp.at
463			- added plugins, /etc and docs.
464
465			* Mon Apr 18 2005 hjp@hjp.at
466			- Specfile autogenerated
467