Fix catchall resolution.

It has to be performed last, to give a chance to be accepted as a
regular mailbox.

We introduce a new, dedicated, smtpd daemon whose only purpose is to
resolve catch-alls.

8 files changed, 17 insertions, 58 deletions

diff --git a/roles/MX/files/etc/postfix/virtual/alias_catchall_maps.cf b/roles/MX/files/etc/postfix/virtual/alias_catchall_maps.cf
deleted file mode 100644
index f8324f6..0000000
--- a/roles/MX/files/etc/postfix/virtual/alias_catchall_maps.cf
+++ /dev/null
@@ -1,7 +0,0 @@
-server_host      = ldapi://%2Fprivate%2Fldapi/
-version          = 3
-search_base      = fvd=%d,ou=virtual,o=mailHosting,dc=fripost,dc=org
-scope            = base
-bind             = none
-query_filter     = (&(objectClass=FripostVirtualDomain)(fvd=%d)(fripostOptionalMaildrop=*))
-result_attribute = fripostOptionalMaildrop
diff --git a/roles/MX/files/etc/postfix/virtual/alias_maps.cf b/roles/MX/files/etc/postfix/virtual/alias_maps.cf
deleted file mode 100644
index 8e3a778..0000000
--- a/roles/MX/files/etc/postfix/virtual/alias_maps.cf
+++ /dev/null
@@ -1,6 +0,0 @@
-server_host      = ldapi://%2Fprivate%2Fldapi/
-version          = 3
-search_base      = fvl=%u,fvd=%d,ou=virtual,o=mailHosting,dc=fripost,dc=org
-scope            = base
-query_filter     = (&(objectClass=FripostVirtualAlias)(fvl=%u))
-result_attribute = fripostMaildrop
diff --git a/roles/MX/files/etc/postfix/virtual/mailbox_domains.cf b/roles/MX/files/etc/postfix/virtual/mailbox_domains.cf
deleted file mode 100644
index 74304a4..0000000
--- a/roles/MX/files/etc/postfix/virtual/mailbox_domains.cf
+++ /dev/null
@@ -1,8 +0,0 @@
-server_host      = ldapi://%2Fprivate%2Fldapi/
-version          = 3
-search_base      = fvd=%s,ou=virtual,o=mailHosting,dc=fripost,dc=org
-scope            = base
-bind             = none
-query_filter     = (&(objectClass=FripostVirtualDomain)(fvd=%s))
-result_attribute = fvd
-result_format    = OK
diff --git a/roles/MX/files/etc/postfix/virtual/mailbox_maps.cf b/roles/MX/files/etc/postfix/virtual/mailbox_maps.cf
deleted file mode 100644
index da1b2cf..0000000
--- a/roles/MX/files/etc/postfix/virtual/mailbox_maps.cf
+++ /dev/null
@@ -1,8 +0,0 @@
-server_host      = ldapi://%2Fprivate%2Fldapi/
-version          = 3
-search_base      = fvl=%u,fvd=%d,ou=virtual,o=mailHosting,dc=fripost,dc=org
-scope            = base
-bind             = none
-query_filter     = (&(objectClass=FripostVirtualUser)(fvl=%u))
-result_attribute = fvl
-result_format    = OK
diff --git a/roles/MX/files/etc/postfix/virtual/reserved_maps.pcre b/roles/MX/files/etc/postfix/virtual/reserved_maps.pcre
deleted file mode 100644
index 58572d1..0000000
--- a/roles/MX/files/etc/postfix/virtual/reserved_maps.pcre
+++ /dev/null
@@ -1,5 +0,0 @@
-# These reserved aliases will always be redirected to us and the domain
-# owner.
-# TODO: check 'postmaster+test@fripost.org'
-/^(?:postmaster|abuse)(?:\+.*)?@fripost\.org$/ admin@fripost.org
-/^((?:postmaster|abuse)(?:\+.*)?)@/            $1
diff --git a/roles/MX/files/etc/postfix/virtual/reserved_transport_maps b/roles/MX/files/etc/postfix/virtual/reserved_transport_maps
deleted file mode 100644
index dce8710..0000000
--- a/roles/MX/files/etc/postfix/virtual/reserved_transport_maps
+++ /dev/null
@@ -1,2 +0,0 @@
-abuse           reserved-alias:
-postmaster      reserved-alias:
diff --git a/roles/MX/files/etc/postfix/virtual/transport_lists_maps.cf b/roles/MX/files/etc/postfix/virtual/transport_lists_maps.cf
deleted file mode 100644
index 27c93d1..0000000
--- a/roles/MX/files/etc/postfix/virtual/transport_lists_maps.cf
+++ /dev/null
@@ -1,11 +0,0 @@
-server_host      = ldapi://%2Fprivate%2Fldapi/
-version          = 3
-search_base      = fvl=%u,fvd=%d,ou=virtual,o=mailHosting,dc=fripost,dc=org
-scope            = base
-bind             = none
-query_filter     = (&(|(objectClass=FripostVirtualList)(objectClass=FripostVirtualListCommand))(fvl=%u))
-result_attribute = fvl
-# We use these maps for both virtual mailboxes and transport (in the
-# former case the result is ignored, only the existence of a match
-# matters.)
-result_format    = smtp:[127.0.0.1]:2345
diff --git a/roles/MX/files/usr/local/sbin/reserved-alias.pl b/roles/MX/files/usr/local/sbin/reserved-alias.pl
index c122c6d..2c86020 100755
--- a/roles/MX/files/usr/local/sbin/reserved-alias.pl
+++ b/roles/MX/files/usr/local/sbin/reserved-alias.pl
@@ -20,10 +20,11 @@ use strict;
 use Net::LDAPI;
 use Net::LDAP::Util qw/escape_filter_value ldap_explode_dn escape_dn_value/;
 use Authen::SASL;
+use Net::SMTP;
 
 if (!@ARGV or grep { $_ eq '-h' or $_ eq '--help' } @ARGV) {
     # Help
-    print STDERR "Usage: $0 [original recipient] [additional recipient ...]\n";
+    print STDERR "Usage: $0 {original sender} {original recipient} [additional recipient ...]\n";
     print STDERR "\n";
     print STDERR "The message read from the standard input is redirected to 'additional recipient',\n";
     print STDERR "and also forwarded to the domain owner if any. If the 'additional recipient' begins\n";
@@ -35,10 +36,13 @@ if (!@ARGV or grep { $_ eq '-h' or $_ eq '--help' } @ARGV) {
     exit;
 }
 
+# The original sender
+my $sender = shift;
+
 # The original recipient
 my $orig = shift;
 $orig =~ /^([^@]+)\@(.+)$/
-    or warn "Non fully qualified: $orig";
+    or warn "Warning: Non fully qualified: $orig";
 my ($local,$domain) = ($1,$2);
 
 # The new recipient (typically, the admin site)
@@ -60,13 +64,11 @@ my @recipients = grep { $_ and $orig ne $_ }
 die "Error: Aborted delivery to '$orig' in attempt to break an alias expansion loop.\n"
     unless @recipients;
 
-my @sendmail = ('/usr/sbin/sendmail', '-i', '-bm');
-
 if (defined $domain) {
-    # Look for the domain owner/postmaster
+    # Look for the domain owner or postmaster
     my $ldap = Net::LDAPI->new();
     $ldap->bind( sasl => Authen::SASL->new(mechanism => 'EXTERNAL') )
-        or die "Couldn't bind";
+        or die "Error: Couldn't bind";
 
     my @attrs = ( 'fripostPostmaster', 'fripostOwner' );
     my $mesg = $ldap->search( base => 'fvd='.escape_dn_value($domain).','
@@ -79,16 +81,16 @@ if (defined $domain) {
                             , attrs => \@attrs
                             );
     if ($mesg->code) {
-        warn $mesg->error;
+        warn "Warning: ".$mesg->error;
     }
     elsif ($mesg->count != 1) {
         # Note: this may happen for "$mydestination", but these mails
         # are unlikely. We'll get a harmless warning at worst.
-        warn "Something weird happened when looking up domain '".$domain.
+        warn "Warning: Something weird happened when looking up domain '".$domain.
              "'. Check your ACL.";
     }
     else {
-        my $entry = $mesg->pop_entry() // die "Cannot pop entry.";
+        my $entry = $mesg->pop_entry() // die "Error: Cannot pop entry.";
         foreach (@attrs) {
             my $v = $entry->get_value($_, asref => 1) or next;
             foreach my $dn (@$v) {
@@ -99,7 +101,7 @@ if (defined $domain) {
                     push @recipients, $l.'@'.$d;
                 }
                 else {
-                    warn "Invalid DN: $dn"
+                    warn "Warning: Invalid DN: $dn"
                 }
             }
         }
@@ -107,4 +109,8 @@ if (defined $domain) {
     $ldap->unbind;
 }
 
-exec (@sendmail, @recipients);
+my $smtp = Net::SMTP->new( 'localhost:25', Timeout => 1200 );
+$smtp->mail($sender);
+$smtp->to(@recipients, { Notify => ['FAILURE','DELAY'], SkipBad => 1 });
+$smtp->data(<STDIN>);
+$smtp->quit;