1 /*************************************************
2 * Exim - an Internet mail transport agent *
3 *************************************************/
5 /* Copyright (c) University of Cambridge 1995 - 2018 */
6 /* Copyright (c) The Exim Maintainers 2020 */
7 /* See the file NOTICE for conditions of use and distribution. */
9 /* Almost all the global variables are defined together in this one header, so
10 that they are easy to find. However, those that are visible during the
11 compilation of the local_scan() function are defined separately in the
12 local_scan.h header file. */
14 /* First put any specials that are required for some operating systems. */
20 /* We need to be careful about width of int and atomicity in signal handlers,
21 especially with the rise of 64-bit systems breaking older assumptions. But
22 sig_atomic_t comes from signal.h so can't go into mytypes.h without including
23 signal support in local_scan, which seems precipitous. */
24 typedef volatile sig_atomic_t SIGNAL_BOOL;
26 /* Now things that are present only when configured. */
29 extern uschar *opt_perl_startup; /* Startup code for Perl interpreter */
30 extern BOOL opt_perl_at_start; /* Start Perl interpreter at start */
31 extern BOOL opt_perl_started; /* Set once interpreter started */
32 extern BOOL opt_perl_taintmode; /* Enable taint mode in Perl */
36 extern tree_node *dlobj_anchor; /* Tree of dynamically-loaded objects */
40 extern uschar *ibase_servers;
44 extern uschar *eldap_ca_cert_dir; /* Directory with CA certificates */
45 extern uschar *eldap_ca_cert_file; /* CA certificate file */
46 extern uschar *eldap_cert_file; /* Certificate file */
47 extern uschar *eldap_cert_key; /* Certificate key file */
48 extern uschar *eldap_cipher_suite; /* Allowed cipher suite */
49 extern uschar *eldap_default_servers; /* List of default servers */
50 extern uschar *eldap_require_cert; /* Peer certificate checking strategy */
51 extern BOOL eldap_start_tls; /* Use STARTTLS */
52 extern int eldap_version; /* LDAP version */
56 extern uschar *mysql_servers; /* List of servers and connect info */
60 extern uschar *oracle_servers; /* List of servers and connect info */
64 extern uschar *pgsql_servers; /* List of servers and connect info */
68 extern uschar *redis_servers; /* List of servers and connect info */
72 extern uschar *sqlite_dbfile; /* Filname for database */
73 extern int sqlite_lock_timeout; /* Internal lock waiting timeout */
76 #ifdef SUPPORT_MOVE_FROZEN_MESSAGES
77 extern BOOL move_frozen_messages; /* Get them out of the normal directory */
80 /* These variables are outside the #ifdef because it keeps the code less
81 cluttered in several places (e.g. during logging) if we can always refer to
82 them. Also, the tls_ variables are now always visible. */
85 client_conn_ctx active; /* fd/socket when in a TLS session, and ptr to TLS context */
86 int bits; /* bits used in TLS session */
87 BOOL certificate_verified; /* Client certificate verified */
89 BOOL dane_verified; /* ... via DANE */
90 int tlsa_usage; /* TLSA record(s) usage */
92 uschar *cipher; /* Cipher used */
93 const uschar *cipher_stdname; /* Cipher used, RFC version */
94 const uschar *ver; /* TLS version */
96 BOOL on_connect; /* For older MTAs that don't STARTTLS */
97 uschar *on_connect_ports; /* Ports always tls-on-connect */
98 void *ourcert; /* Certificate we presented, binary */
99 void *peercert; /* Certificate of peer, binary */
100 uschar *peerdn; /* DN from peer */
101 uschar *sni; /* Server Name Indication */
102 uschar *channelbinding; /* b64'd data identifying channel, for authenticators */
104 OCSP_NOT_REQ=0, /* not requested */
105 OCSP_NOT_RESP, /* no response to request */
106 OCSP_VFY_NOT_TRIED, /* response not verified */
107 OCSP_FAILED, /* verify failed */
108 OCSP_VFIED /* verified */
109 } ocsp; /* Stapled OCSP status */
110 #ifndef DISABLE_TLS_RESUME
111 unsigned resumption; /* Session resumption */
112 BOOL host_resumable:1;
113 BOOL ticket_received:1;
115 BOOL verify_override:1; /* certificate_verified only due to tls_try_verify_hosts */
116 BOOL ext_master_secret:1; /* extended-master-secret was used */
118 extern tls_support tls_in;
119 extern tls_support tls_out;
122 extern BOOL gnutls_compat_mode; /* Less security, more compatibility */
123 extern BOOL gnutls_allow_auto_pkcs11; /* Let GnuTLS autoload PKCS11 modules */
124 extern uschar *openssl_options; /* OpenSSL compatibility options */
125 extern const pcre *regex_STARTTLS; /* For recognizing STARTTLS settings */
126 extern uschar *tls_certificate; /* Certificate file */
127 extern uschar *tls_crl; /* CRL File */
128 extern int tls_dh_max_bits; /* don't accept higher lib suggestions */
129 extern uschar *tls_dhparam; /* DH param file */
130 extern uschar *tls_eccurve; /* EC curve */
131 # ifndef DISABLE_OCSP
132 extern uschar *tls_ocsp_file; /* OCSP stapling proof file */
134 extern uschar *tls_privatekey; /* Private key file */
135 extern BOOL tls_remember_esmtp; /* For YAEB */
136 extern uschar *tls_require_ciphers; /* So some can be avoided */
137 # ifndef DISABLE_TLS_RESUME
138 extern uschar *tls_resumption_hosts; /* TLS session resumption */
140 extern uschar *tls_try_verify_hosts; /* Optional client verification */
141 extern uschar *tls_verify_certificates;/* Path for certificates to check */
142 extern uschar *tls_verify_hosts; /* Mandatory client verification */
143 extern int tls_watch_fd; /* for inotify of creds files */
144 extern time_t tls_watch_trigger_time; /* non-0: triggered */
146 extern uschar *tls_advertise_hosts; /* host for which TLS is advertised */
148 extern uschar *dsn_envid; /* DSN envid string */
149 extern int dsn_ret; /* DSN ret type*/
150 extern const pcre *regex_DSN; /* For recognizing DSN settings */
151 extern uschar *dsn_advertise_hosts; /* host for which TLS is advertised */
153 /* Input-reading functions for messages, so we can use special ones for
156 extern int (*lwr_receive_getc)(unsigned);
157 extern uschar * (*lwr_receive_getbuf)(unsigned *);
158 extern int (*lwr_receive_ungetc)(int);
159 extern int (*receive_getc)(unsigned);
160 extern uschar * (*receive_getbuf)(unsigned *);
161 extern void (*receive_get_cache)(void);
162 extern int (*receive_ungetc)(int);
163 extern int (*receive_feof)(void);
164 extern int (*receive_ferror)(void);
165 extern BOOL (*receive_smtp_buffered)(void);
168 /* For clearing, saving, restoring address expansion variables. We have to have
169 the size of this vector set explicitly, because it is referenced from more than
172 extern const uschar **address_expansions[ADDRESS_EXPANSIONS_COUNT];
174 /* Flags for which we don't need an address ever so can use a bitfield */
176 extern struct global_flags {
177 BOOL acl_temp_details :1; /* TRUE to give details for 4xx error */
178 BOOL active_local_from_check :1; /* For adding Sender: (switchable) */
179 BOOL active_local_sender_retain :1; /* For keeping Sender: (switchable) */
180 BOOL address_test_mode :1; /* True for -bt */
181 BOOL admin_user :1; /* True if caller can do admin */
182 BOOL allow_auth_unadvertised :1; /* As it says */
183 BOOL allow_unqualified_recipient :1; /* For local messages */ /* As it says */
184 BOOL allow_unqualified_sender :1; /* Reset for SMTP */ /* Ditto */
185 BOOL authentication_local :1; /* TRUE if non-smtp (implicit authentication) */
187 BOOL background_daemon :1; /* Set FALSE to keep in foreground */
188 BOOL bdat_readers_wanted :1; /* BDAT-handling to be pushed on readfunc stack */
190 BOOL chunking_offered :1;
191 BOOL config_changed :1; /* True if -C used */
192 BOOL continue_more :1; /* Flag more addresses waiting */
194 BOOL daemon_listen :1; /* True if listening required */
195 BOOL debug_daemon :1; /* Debug the daemon process only */
196 BOOL deliver_firsttime :1; /* True for first delivery attempt */
197 BOOL deliver_force :1; /* TRUE if delivery was forced */
198 BOOL deliver_freeze :1; /* TRUE if delivery is frozen */
199 BOOL deliver_force_thaw :1; /* TRUE to force thaw in queue run */
200 BOOL deliver_manual_thaw :1; /* TRUE if manually thawed */
201 BOOL deliver_selectstring_regex :1; /* String is regex */
202 BOOL deliver_selectstring_sender_regex :1; /* String is regex */
203 BOOL disable_callout_flush :1; /* Don't flush before callouts */
204 BOOL disable_delay_flush :1; /* Don't flush before "delay" in ACL */
205 BOOL disable_logging :1; /* Disables log writing when TRUE */
207 BOOL dkim_disable_verify :1; /* Set via ACL control statement. When set, DKIM verification is disabled for the current message */
208 BOOL dkim_init_done :1; /* lazy-init status */
211 BOOL dmarc_has_been_checked :1; /* Global variable to check if test has been called yet */
212 BOOL dmarc_disable_verify :1; /* Set via ACL control statement. When set, DMARC verification is disabled for the current message */
213 BOOL dmarc_enable_forensic :1; /* Set via ACL control statement. When set, DMARC forensic reports are enabled for the current message */
215 BOOL dont_deliver :1; /* TRUE for -N option */
216 BOOL dot_ends :1; /* TRUE if "." ends non-SMTP input */
218 BOOL enable_dollar_recipients :1; /* Make $recipients available */
219 BOOL expand_string_forcedfail :1; /* TRUE if failure was "expected" */
221 BOOL filter_running :1; /* TRUE while running a filter */
223 BOOL header_rewritten :1; /* TRUE if header changed by router */
224 BOOL helo_verified :1; /* True if HELO verified */
225 BOOL helo_verify_failed :1; /* True if attempt failed */
226 BOOL host_checking_callout :1; /* TRUE if real callout wanted */
227 BOOL host_find_failed_syntax :1; /* DNS syntax check failure */
229 BOOL inetd_wait_mode :1; /* Whether running in inetd wait mode */
230 BOOL is_inetd :1; /* True for inetd calls */
232 BOOL local_error_message :1; /* True if handling one of these */
233 BOOL log_testing_mode :1; /* TRUE in various testing modes */
235 #ifdef WITH_CONTENT_SCAN
236 BOOL no_mbox_unspool :1; /* don't unlink files in /scan directory */
238 BOOL no_multiline_responses :1; /* For broken clients */
240 BOOL parse_allow_group :1; /* Allow group syntax */
241 BOOL parse_found_group :1; /* In the middle of a group */
242 BOOL pipelining_enable :1; /* As it says */
243 #if defined(SUPPORT_PROXY) || defined(SUPPORT_SOCKS)
244 BOOL proxy_session_failed :1; /* TRUE if required proxy negotiation failed */
247 BOOL queue_2stage :1; /* Run queue in 2-stage manner */
248 BOOL queue_only_policy :1; /* ACL or local_scan wants queue_only */
249 BOOL queue_run_first_delivery :1; /* If TRUE, first deliveries only */
250 BOOL queue_run_force :1; /* TRUE to force during queue run */
251 BOOL queue_run_local :1; /* Local deliveries only in queue run */
252 BOOL queue_running :1; /* TRUE for queue running process and */
253 BOOL queue_smtp :1; /* Disable all immediate SMTP (-odqs)*/
255 BOOL really_exim :1; /* FALSE in utilities */
256 BOOL receive_call_bombout :1; /* Flag for crashing log */
257 BOOL recipients_discarded :1; /* By an ACL */
258 BOOL running_in_test_harness :1; /*TRUE when running_status is patched */
260 BOOL search_find_defer :1; /* Set TRUE if lookup deferred */
261 BOOL sender_address_forced :1; /* Set by -f */
262 BOOL sender_host_notsocket :1; /* Set for -bs and -bS */
263 BOOL sender_host_unknown :1; /* TRUE for -bs and -bS except inetd */
264 BOOL sender_local :1; /* TRUE for local senders */
265 BOOL sender_name_forced :1; /* Set by -F */
266 BOOL sender_set_untrusted :1; /* Sender set by untrusted caller */
267 BOOL smtp_authenticated :1; /* Sending client has authenticated */
268 #ifndef DISABLE_PIPE_CONNECT
269 BOOL smtp_in_early_pipe_advertised :1; /* server advertised PIPE_CONNECT */
270 BOOL smtp_in_early_pipe_no_auth :1; /* too many authenticator names */
271 BOOL smtp_in_early_pipe_used :1; /* client did send early data */
273 BOOL smtp_in_pipelining_advertised :1; /* server advertised PIPELINING */
274 BOOL smtp_in_pipelining_used :1; /* server noted client using PIPELINING */
275 BOOL smtp_in_quit :1; /* server noted QUIT command */
276 BOOL spool_file_wireformat :1; /* current -D file has CRLF rather than NL */
277 BOOL submission_mode :1; /* Can be forced from ACL */
278 BOOL suppress_local_fixups :1; /* Can be forced from ACL */
279 BOOL suppress_local_fixups_default :1; /* former is reset to this; override with -G */
280 BOOL synchronous_delivery :1; /* TRUE if -odi is set */
281 BOOL system_filtering :1; /* TRUE when running system filter */
283 BOOL taint_check_slow :1; /* malloc/mmap are not returning distinct ranges */
284 BOOL testsuite_delays :1; /* interprocess sequencing delays, under testsuite */
285 BOOL tcp_fastopen_ok :1; /* appears to be supported by kernel */
286 BOOL tcp_in_fastopen :1; /* conn usefully used fastopen */
287 BOOL tcp_in_fastopen_data :1; /* fastopen carried data */
288 BOOL tcp_in_fastopen_logged :1; /* one-time logging */
289 BOOL tcp_out_fastopen_logged :1; /* one-time logging */
290 BOOL timestamps_utc :1; /* Use UTC for all times */
291 BOOL transport_filter_timed_out :1; /* True if it did */
292 BOOL trusted_caller :1; /* Caller is trusted */
293 BOOL trusted_config :1; /* Configuration file is trusted */
297 /* General global variables */
299 extern BOOL accept_8bitmime; /* Allow *BITMIME incoming */
300 extern uschar *add_environment; /* List of environment variables to add */
301 extern header_line *acl_added_headers; /* Headers added by an ACL */
302 extern tree_node *acl_anchor; /* Tree of named ACLs */
303 extern uschar *acl_arg[9]; /* Argument to ACL call */
304 extern int acl_narg; /* Number of arguments to ACL call */
305 extern int acl_level; /* Nesting depth and debug indent */
306 extern uschar *acl_not_smtp; /* ACL run for non-SMTP messages */
307 #ifdef WITH_CONTENT_SCAN
308 extern uschar *acl_not_smtp_mime; /* For MIME parts of ditto */
310 extern uschar *acl_not_smtp_start; /* ACL run at the beginning of a non-SMTP session */
311 extern uschar *acl_removed_headers; /* Headers deleted by an ACL */
312 extern uschar *acl_smtp_auth; /* ACL run for AUTH */
313 extern uschar *acl_smtp_connect; /* ACL run on SMTP connection */
314 extern uschar *acl_smtp_data; /* ACL run after DATA received */
316 extern uschar *acl_smtp_data_prdr; /* ACL run after DATA received if in PRDR mode*/
317 const extern pcre *regex_PRDR; /* For recognizing PRDR settings */
320 extern uschar *acl_smtp_dkim; /* ACL run for DKIM signatures / domains */
322 extern uschar *acl_smtp_etrn; /* ACL run for ETRN */
323 extern uschar *acl_smtp_expn; /* ACL run for EXPN */
324 extern uschar *acl_smtp_helo; /* ACL run for HELO/EHLO */
325 extern uschar *acl_smtp_mail; /* ACL run for MAIL */
326 extern uschar *acl_smtp_mailauth; /* ACL run for MAIL AUTH */
327 #ifdef WITH_CONTENT_SCAN
328 extern uschar *acl_smtp_mime; /* ACL run after DATA, before acl_smtp_data, for each MIME part */
330 extern uschar *acl_smtp_notquit; /* ACL run for disconnects */
331 extern uschar *acl_smtp_predata; /* ACL run for DATA command */
332 extern uschar *acl_smtp_quit; /* ACL run for QUIT */
333 extern uschar *acl_smtp_rcpt; /* ACL run for RCPT */
334 extern uschar *acl_smtp_starttls; /* ACL run for STARTTLS */
335 extern uschar *acl_smtp_vrfy; /* ACL run for VRFY */
336 extern tree_node *acl_var_c; /* ACL connection variables */
337 extern tree_node *acl_var_m; /* ACL message variables */
338 extern uschar *acl_verify_message; /* User message for verify failure */
339 extern string_item *acl_warn_logged; /* Logged lines */
340 extern uschar *acl_wherecodes[]; /* Response codes for ACL fails */
341 extern uschar *acl_wherenames[]; /* Names for messages */
342 extern address_item *addr_duplicate; /* Duplicate address list */
343 extern address_item address_defaults; /* Default data for address item */
344 extern uschar *address_file; /* Name of file when delivering to one */
345 extern uschar *address_pipe; /* Pipe command when delivering to one */
346 extern tree_node *addresslist_anchor; /* Tree of defined address lists */
347 extern int addresslist_count; /* Number defined */
348 extern gid_t *admin_groups; /* List of admin groups */
349 extern BOOL allow_domain_literals; /* As it says */
350 extern BOOL allow_mx_to_ip; /* Allow MX records to -> ip address */
351 #ifdef EXPERIMENTAL_ARC
352 extern struct arc_set *arc_received; /* highest ARC instance evaluation struct */
353 extern int arc_received_instance; /* highest ARC instance number in headers */
354 extern int arc_oldest_pass; /* lowest passing instance number in headers */
355 extern const uschar *arc_state; /* verification state */
356 extern const uschar *arc_state_reason;
358 extern BOOL allow_utf8_domains; /* For experimenting */
359 extern uschar *authenticated_fail_id; /* ID that failed authentication */
360 extern uschar *authenticated_id; /* ID that was authenticated */
361 extern uschar *authenticated_sender; /* From AUTH on MAIL */
362 extern BOOL authentication_failed; /* TRUE if AUTH was tried and failed */
363 extern uschar *auth_advertise_hosts; /* Only advertise to these */
364 extern auth_info auths_available[]; /* Vector of available auth mechanisms */
365 extern auth_instance *auths; /* Chain of instantiated auths */
366 extern auth_instance auth_defaults; /* Default values */
367 extern uschar *auth_defer_msg; /* Error message for log */
368 extern uschar *auth_defer_user_msg; /* Error message for user */
369 extern uschar *auth_vars[]; /* $authn variables */
370 extern int auto_thaw; /* Auto-thaw interval */
371 #ifdef WITH_CONTENT_SCAN
372 extern int av_failed; /* TRUE if the AV process failed */
373 extern uschar *av_scanner; /* AntiVirus scanner to use for the malware condition */
376 extern uschar *base62_chars; /* Table of base-62 characters */
377 extern uschar *bi_command; /* Command for -bi option */
378 extern uschar *big_buffer; /* Used for various temp things */
379 extern int big_buffer_size; /* Current size (can expand) */
380 #ifdef EXPERIMENTAL_BRIGHTMAIL
381 extern uschar *bmi_alt_location; /* expansion variable that contains the alternate location for the rcpt (available during routing) */
382 extern uschar *bmi_base64_tracker_verdict; /* expansion variable with base-64 encoded OLD verdict string (available during routing) */
383 extern uschar *bmi_base64_verdict; /* expansion variable with base-64 encoded verdict string (available during routing) */
384 extern uschar *bmi_config_file; /* Brightmail config file */
385 extern int bmi_deliver; /* Flag that determines if the message should be delivered to the rcpt (available during routing) */
386 extern int bmi_run; /* Flag that determines if message should be run through Brightmail server */
387 extern uschar *bmi_verdicts; /* BASE64-encoded verdicts with recipient lists */
389 extern int bsmtp_transaction_linecount; /* Start of last transaction */
390 extern int body_8bitmime; /* sender declared BODY= ; 7=7BIT, 8=8BITMIME */
391 extern uschar *bounce_message_file; /* Template file */
392 extern uschar *bounce_message_text; /* One-liner */
393 extern uschar *bounce_recipient; /* When writing an errmsg */
394 extern BOOL bounce_return_body; /* Include body in returned message */
395 extern int bounce_return_linesize_limit; /* Max line length in return */
396 extern BOOL bounce_return_message; /* Include message in bounce */
397 extern int bounce_return_size_limit; /* Max amount to return */
398 extern uschar *bounce_sender_authentication; /* AUTH address for bounces */
400 extern uschar *callout_address; /* Address used for a malware/spamd/verify etc. callout */
401 extern int callout_cache_domain_positive_expire; /* Time for positive domain callout cache records to expire */
402 extern int callout_cache_domain_negative_expire; /* Time for negative domain callout cache records to expire */
403 extern int callout_cache_positive_expire; /* Time for positive callout cache records to expire */
404 extern int callout_cache_negative_expire; /* Time for negative callout cache records to expire */
405 extern uschar *callout_random_local_part; /* Local part to be used to check if server called will accept any local part */
406 extern uschar *check_dns_names_pattern;/* Regex for syntax check */
407 extern int check_log_inodes; /* Minimum for message acceptance */
408 extern int_eximarith_t check_log_space; /* Minimum for message acceptance */
409 extern BOOL check_rfc2047_length; /* Check RFC 2047 encoded string length */
410 extern int check_spool_inodes; /* Minimum for message acceptance */
411 extern int_eximarith_t check_spool_space; /* Minimum for message acceptance */
412 extern uschar *chunking_advertise_hosts; /* RFC 3030 CHUNKING */
413 extern unsigned chunking_datasize;
414 extern unsigned chunking_data_left;
415 extern chunking_state_t chunking_state;
416 extern uschar *client_authenticator; /* Authenticator name used for smtp delivery */
417 extern uschar *client_authenticated_id; /* "login" name used for SMTP AUTH */
418 extern uschar *client_authenticated_sender; /* AUTH option to SMTP MAIL FROM (not yet used) */
419 extern int clmacro_count; /* Number of command line macros */
420 extern uschar *clmacros[]; /* Copy of them, for re-exec */
421 extern BOOL commandline_checks_require_admin; /* belt and braces for insecure setups */
422 extern int connection_max_messages;/* Max down one SMTP connection */
423 extern FILE *config_file; /* Configuration file */
424 extern const uschar *config_filename; /* Configuration file name */
425 extern gid_t config_gid; /* Additional group owner */
426 extern int config_lineno; /* Line number */
427 extern uschar *config_main_filelist; /* List of possible config files */
428 extern uschar *config_main_filename; /* File name actually used */
429 extern uschar *config_main_directory; /* Directory where the main config file was found */
430 extern uid_t config_uid; /* Additional owner */
431 extern uschar *continue_proxy_cipher; /* TLS cipher for proxied continued delivery */
432 extern BOOL continue_proxy_dane; /* proxied conn is DANE */
433 extern uschar *continue_proxy_sni; /* proxied conn SNI */
434 extern uschar *continue_hostname; /* Host for continued delivery */
435 extern uschar *continue_host_address; /* IP address for ditto */
436 extern int continue_sequence; /* Sequence num for continued delivery */
437 extern uschar *continue_transport; /* Transport for continued delivery */
438 #ifdef EXPERIMENTAL_ESMTP_LIMITS
439 extern unsigned continue_limit_mail; /* Peer advertised limit */
440 extern unsigned continue_limit_rcpt;
441 extern unsigned continue_limit_rcptdom;
445 extern uschar *csa_status; /* Client SMTP Authorization result */
448 unsigned callout_hold_only:1; /* Conn is only for verify callout */
449 unsigned delivery:1; /* When to attempt */
450 unsigned defer_pass:1; /* Pass 4xx to caller rather than spooling */
451 unsigned is_tls:1; /* Conn has TLS active */
452 client_conn_ctx cctx; /* Open connection */
453 int nrcpt; /* Count of addresses */
454 uschar * transport; /* Name of transport */
455 uschar * interface; /* (address of) */
456 uschar * snd_ip; /* sending_ip_address */
457 int snd_port; /* sending_port */
458 unsigned peer_options; /* smtp_peer_options */
459 host_item host; /* Host used */
460 address_item addr; /* (Chain of) addresses */
462 extern cut_t cutthrough; /* Deliver-concurrently */
464 extern int daemon_notifier_fd; /* Unix socket for notifications */
465 extern uschar *daemon_smtp_port; /* Can be a list of ports */
466 extern int daemon_startup_retries; /* Number of times to retry */
467 extern int daemon_startup_sleep; /* Sleep between retries */
469 #ifdef EXPERIMENTAL_DCC
470 extern BOOL dcc_direct_add_header; /* directly add header */
471 extern uschar *dcc_header; /* dcc header */
472 extern uschar *dcc_result; /* dcc result */
473 extern uschar *dccifd_address; /* address of the dccifd daemon */
474 extern uschar *dccifd_options; /* options for the dccifd daemon */
477 extern int debug_fd; /* The fd for debug_file */
478 extern FILE *debug_file; /* Where to write debugging info */
479 extern int debug_notall[]; /* Debug options excluded from +all */
480 extern bit_table debug_options[]; /* Table of debug options */
481 extern int debug_options_count; /* Size of table */
482 extern BOOL debug_store; /* Do extra checks on store_reset */
483 extern int delay_warning[]; /* Times between warnings */
484 extern uschar *delay_warning_condition; /* Condition string for warnings */
485 extern BOOL delivery_date_remove; /* Remove delivery-date headers */
487 extern uschar *deliver_address_data; /* Arbitrary data for an address */
488 extern int deliver_datafile; /* FD for data part of message */
489 extern const uschar *deliver_domain; /* The local domain for delivery */
490 extern uschar *deliver_domain_data; /* From domain lookup */
491 extern const uschar *deliver_domain_orig; /* The original local domain for delivery */
492 extern const uschar *deliver_domain_parent; /* The parent domain for delivery */
493 extern BOOL deliver_drop_privilege; /* TRUE for unprivileged delivery */
494 extern time_t deliver_frozen_at; /* Time of freezing */
495 extern uschar *deliver_home; /* Home directory for pipes */
496 extern const uschar *deliver_host; /* (First) host for routed local deliveries */
497 /* Remote host for filter */
498 extern const uschar *deliver_host_address; /* Address for remote delivery filter */
499 extern int deliver_host_port; /* Address for remote delivery filter */
500 extern uschar *deliver_in_buffer; /* Buffer for copying file */
501 extern ino_t deliver_inode; /* Inode for appendfile */
502 extern uschar *deliver_localpart; /* The local part for delivery */
503 extern uschar *deliver_localpart_data; /* From local part lookup (de-tainted) */
504 extern uschar *deliver_localpart_orig; /* The original local part for delivery */
505 extern uschar *deliver_localpart_parent; /* The parent local part for delivery */
506 extern uschar *deliver_localpart_prefix; /* The stripped prefix, if any */
507 extern uschar *deliver_localpart_prefix_v; /* The stripped-prefix variable portion, if any */
508 extern uschar *deliver_localpart_suffix; /* The stripped suffix, if any */
509 extern uschar *deliver_localpart_suffix_v; /* The stripped-suffix variable portion, if any */
510 extern uschar *deliver_out_buffer; /* Buffer for copying file */
511 extern int deliver_queue_load_max; /* Different value for queue running */
512 extern address_item *deliver_recipients; /* Current set of addresses */
513 extern uschar *deliver_selectstring; /* For selecting by recipient */
514 extern uschar *deliver_selectstring_sender; /* For selecting by sender */
515 #ifdef ENABLE_DISABLE_FSYNC
516 extern BOOL disable_fsync; /* Not for normal use */
518 extern BOOL disable_ipv6; /* Don't do any IPv6 things */
521 extern unsigned dkim_collect_input; /* Runtime count of dkim signtures; tracks whether SMTP input is fed to DKIM validation */
522 extern uschar *dkim_cur_signer; /* Expansion variable, holds the current "signer" domain or identity during a acl_smtp_dkim run */
523 extern int dkim_key_length; /* Expansion variable, length of signing key in bits */
524 extern void *dkim_signatures; /* Actually a (pdkim_signature *) but most files do not need to know */
525 extern uschar *dkim_signers; /* Expansion variable, holds colon-separated list of domains and identities that have signed a message */
526 extern uschar *dkim_signing_domain; /* Expansion variable, domain used for signing a message. */
527 extern uschar *dkim_signing_selector; /* Expansion variable, selector used for signing a message. */
528 extern uschar *dkim_verify_hashes; /* Preference order for signatures */
529 extern uschar *dkim_verify_keytypes; /* Preference order for signatures */
530 extern uschar *dkim_verify_min_keysizes; /* list of minimum key sizes, keyed by algo */
531 extern BOOL dkim_verify_minimal; /* Shortcircuit signture verification */
532 extern uschar *dkim_verify_overall; /* First successful domain verified, or null */
533 extern uschar *dkim_verify_signers; /* Colon-separated list of domains for each of which we call the DKIM ACL */
534 extern uschar *dkim_verify_status; /* result for this signature */
535 extern uschar *dkim_verify_reason; /* result for this signature */
538 extern uschar *dmarc_domain_policy; /* Expansion for declared policy of used domain */
539 extern uschar *dmarc_forensic_sender; /* Set sender address for forensic reports */
540 extern uschar *dmarc_history_file; /* Expansion variable, file to store dmarc results */
541 extern uschar *dmarc_status; /* Expansion variable, one word value */
542 extern uschar *dmarc_status_text; /* Expansion variable, human readable value */
543 extern uschar *dmarc_tld_file; /* Mozilla TLDs text file */
544 extern uschar *dmarc_used_domain; /* Expansion variable, domain libopendmarc chose for DMARC policy lookup */
547 extern uschar *dns_again_means_nonexist; /* Domains that are badly set up */
548 extern int dns_csa_search_limit; /* How deep to search for CSA SRV records */
549 extern BOOL dns_csa_use_reverse; /* Check CSA in reverse DNS? (non-standard) */
550 extern int dns_cname_loops; /* Follow CNAMEs returned by resolver to this depth */
551 extern uschar *dns_ipv4_lookup; /* For these domains, don't look for AAAA (or A6) */
553 extern int dns_dane_ok; /* Ok to use DANE when checking TLS authenticity */
555 extern int dns_retrans; /* Retransmission time setting */
556 extern int dns_retry; /* Number of retries */
557 extern int dns_dnssec_ok; /* When constructing DNS query, set DO flag */
558 extern const uschar * dns_rc_names[]; /* Mostly for debug output */
559 extern uschar *dns_trust_aa; /* DNSSEC trust AA as AD */
560 extern int dns_use_edns0; /* Coerce EDNS0 support on/off in resolver. */
561 extern uschar *dnslist_domain; /* DNS (black) list domain */
562 extern uschar *dnslist_matched; /* DNS (black) list matched key */
563 extern uschar *dnslist_text; /* DNS (black) list text message */
564 extern uschar *dnslist_value; /* DNS (black) list IP address */
565 extern tree_node *domainlist_anchor; /* Tree of defined domain lists */
566 extern int domainlist_count; /* Number defined */
568 /* This option is now a no-opt, retained for compatibility */
569 extern BOOL drop_cr; /* For broken local MUAs */
571 extern uschar *dsn_from; /* From: string for DSNs */
573 extern BOOL envelope_to_remove; /* Remove envelope_to_headers */
574 extern int errno_quota; /* Quota errno in this OS */
575 extern int error_handling; /* Error handling style */
576 extern uschar *errors_copy; /* For taking copies of errors */
577 extern uschar *errors_reply_to; /* Reply-to for error messages */
578 extern int errors_sender_rc; /* Return after message to sender*/
580 #ifndef DISABLE_EVENT
581 extern uschar *event_action; /* expansion for delivery events */
582 extern uschar *event_data; /* event data */
583 extern int event_defer_errno; /* error number set when a remote delivery is deferred with a host error */
584 extern const uschar *event_name; /* event classification */
587 extern gid_t exim_gid; /* To be used with exim_uid */
588 extern BOOL exim_gid_set; /* TRUE if exim_gid set */
589 extern uschar *exim_path; /* Path to exec exim */
590 extern const uschar *exim_sieve_extension_list[]; /* list of sieve extensions */
591 extern uid_t exim_uid; /* Non-root uid for exim */
592 extern BOOL exim_uid_set; /* TRUE if exim_uid set */
593 extern int expand_level; /* Nesting depth; indent for debug */
594 extern int expand_forbid; /* RDO flags for forbidding things */
595 extern int expand_nlength[]; /* Lengths of numbered strings */
596 extern int expand_nmax; /* Max numerical value */
597 extern uschar *expand_nstring[]; /* Numbered strings */
598 extern BOOL extract_addresses_remove_arguments; /* Controls -t behaviour */
599 extern uschar *extra_local_interfaces; /* Local, non-listen interfaces */
601 extern int fake_response; /* Fake FAIL or DEFER response to data */
602 extern uschar *fake_response_text; /* User defined message for the above. Default is in globals.c. */
603 extern int filter_n[FILTER_VARIABLE_COUNT]; /* filter variables */
604 extern int filter_sn[FILTER_VARIABLE_COUNT]; /* variables set by system filter */
605 extern int filter_test; /* Filter test type */
606 extern uschar *filter_test_sfile; /* System filter test file */
607 extern uschar *filter_test_ufile; /* User filter test file */
608 extern uschar *filter_thisaddress; /* For address looping */
609 extern int finduser_retries; /* Retry count for getpwnam() */
610 extern uid_t fixed_never_users[]; /* Can't be overridden */
611 extern uschar *freeze_tell; /* Message on (some) freezings */
612 extern uschar *freeze_tell_config; /* The configured setting */
613 extern uschar *fudged_queue_times; /* For use in test harness */
615 extern uschar *gecos_name; /* To be expanded when pattern matches */
616 extern uschar *gecos_pattern; /* Pattern to match */
617 extern rewrite_rule *global_rewrite_rules; /* Chain of rewriting rules */
619 extern volatile sig_atomic_t had_command_timeout; /* Alarm sighandler called */
620 extern volatile sig_atomic_t had_command_sigterm; /* TERM sighandler called */
621 extern volatile sig_atomic_t had_data_timeout; /* Alarm sighandler called */
622 extern volatile sig_atomic_t had_data_sigint; /* TERM/INT sighandler called */
623 extern int header_insert_maxlen; /* Max for inserting headers */
624 extern int header_maxsize; /* Max total length for header */
625 extern int header_line_maxsize; /* Max for an individual line */
626 extern header_name header_names[]; /* Table of header names */
627 extern int header_names_size; /* Number of entries */
628 extern uschar *helo_accept_junk_hosts; /* Allowed to use junk arg */
629 extern uschar *helo_allow_chars; /* Rogue chars to allow in HELO/EHLO */
630 extern uschar *helo_lookup_domains; /* If these given, lookup host name */
631 extern uschar *helo_try_verify_hosts; /* Soft check HELO argument for these */
632 extern uschar *helo_verify_hosts; /* Hard check HELO argument for these */
633 extern const uschar *hex_digits; /* Used in several places */
634 extern uschar *hold_domains; /* Hold up deliveries to these */
635 extern uschar *host_data; /* Obtained from lookup in ACL */
636 extern uschar *host_lookup; /* For which IP addresses are always looked up */
637 extern BOOL host_lookup_deferred; /* TRUE if lookup deferred */
638 extern BOOL host_lookup_failed; /* TRUE if lookup failed */
639 extern uschar *host_lookup_order; /* Order of host lookup types */
640 extern uschar *host_lookup_msg; /* Text for why it failed */
641 extern int host_number; /* For sharing spools */
642 extern uschar *host_number_string; /* For expanding */
643 extern uschar *hosts_require_helo; /* check for HELO/EHLO before MAIL */
644 extern uschar *host_reject_connection; /* Reject these hosts */
645 extern tree_node *hostlist_anchor; /* Tree of defined host lists */
646 extern int hostlist_count; /* Number defined */
647 extern uschar *hosts_connection_nolog; /* Limits the logging option */
648 extern uschar *hosts_treat_as_local; /* For routing */
650 extern int ignore_bounce_errors_after; /* Keep them for this time. */
651 extern BOOL ignore_fromline_local; /* Local SMTP ignore fromline */
652 extern uschar *ignore_fromline_hosts; /* Hosts permitted to send "From " */
653 extern int inetd_wait_timeout; /* Timeout for inetd wait mode */
654 extern uschar *initial_cwd; /* The directory we where in at startup */
655 extern uschar *iterate_item; /* Item from iterate list */
657 extern int journal_fd; /* Fd for journal file */
659 extern uschar *keep_environment; /* Whitelist for environment variables */
660 extern int keep_malformed; /* Time to keep malformed messages */
662 extern uschar *eldap_dn; /* Where LDAP DNs are left */
663 #ifdef EXPERIMENTAL_ESMTP_LIMITS
664 extern uschar *limits_advertise_hosts; /* for banner/EHLO pipelining */
666 extern int load_average; /* Most recently read load average */
667 extern BOOL local_from_check; /* For adding Sender: (global value) */
668 extern uschar *local_from_prefix; /* Permitted prefixes */
669 extern uschar *local_from_suffix; /* Permitted suffixes */
670 extern uschar *local_interfaces; /* For forcing specific interfaces */
671 #ifdef HAVE_LOCAL_SCAN
672 extern uschar *local_scan_data; /* Text returned by local_scan() */
673 extern optionlist local_scan_options[];/* Option list for local_scan() */
674 extern int local_scan_options_count; /* Size of the list */
675 extern int local_scan_timeout; /* Timeout for local_scan() */
677 extern BOOL local_sender_retain; /* Retain Sender: (with no From: check) */
678 extern gid_t local_user_gid; /* As it says; may be set in routers */
679 extern uid_t local_user_uid; /* As it says; may be set in routers */
680 extern tree_node *localpartlist_anchor;/* Tree of defined localpart lists */
681 extern int localpartlist_count; /* Number defined */
682 extern uschar *log_buffer; /* For constructing log entries */
683 extern int log_default[]; /* Initialization list for log_selector */
684 extern uschar *log_file_path; /* If unset, use default */
685 extern int log_notall[]; /* Log options excluded from +all */
686 extern bit_table log_options[]; /* Table of options */
687 extern int log_options_count; /* Size of table */
688 extern int log_reject_target; /* Target log for ACL rejections */
689 extern unsigned int log_selector[]; /* Bit map of logging options */
690 extern uschar *log_selector_string; /* As supplied in the config */
691 extern FILE *log_stderr; /* Copy of stderr for log use, or NULL */
692 extern BOOL log_timezone; /* TRUE to include the timezone in log lines */
693 extern uschar *login_sender_address; /* The actual sender address */
694 extern lookup_info **lookup_list; /* Array of pointers to available lookups */
695 extern int lookup_list_count; /* Number of entries in the list */
696 extern uschar *lookup_dnssec_authenticated; /* AD status of dns lookup */
697 extern int lookup_open_max; /* Max lookup files to cache */
698 extern uschar *lookup_value; /* Value looked up from file */
700 extern macro_item *macros; /* Configuration macros */
701 extern macro_item *macros_user; /* Non-builtin configuration macros */
702 extern macro_item *mlast; /* Last item in macro list */
703 extern uschar *mailstore_basename; /* For mailstore deliveries */
704 #ifdef WITH_CONTENT_SCAN
705 extern uschar *malware_name; /* Name of virus or malware ("W32/Klez-H") */
707 extern int max_received_linelength;/* What it says */
708 extern int max_username_length; /* For systems with broken getpwnam() */
709 extern int message_age; /* In seconds */
710 extern uschar *message_body; /* Start of message body for filter */
711 extern uschar *message_body_end; /* End of message body for filter */
712 extern BOOL message_body_newlines; /* FALSE => remove newlines */
713 extern int message_body_size; /* Sic */
714 extern int message_body_visible; /* Amount visible in message_body */
715 extern int message_ended; /* State of message reading and how ended */
716 extern uschar *message_headers; /* When built */
717 extern uschar message_id_option[]; /* -E<message-id> for use as option */
718 extern uschar *message_id_external; /* External form of following */
719 extern uschar *message_id_domain; /* Expanded to form domain-part of message_id */
720 extern uschar *message_id_text; /* Expanded to form message_id */
721 extern struct timeval message_id_tv; /* Time used to create last message_id */
722 extern int message_linecount; /* As it says */
723 extern BOOL message_logs; /* TRUE to write message logs */
724 extern int message_size; /* Size of message */
725 extern uschar *message_size_limit; /* As it says */
727 extern BOOL message_smtputf8; /* Internationalized mail handling */
728 extern int message_utf8_downconvert; /* convert from utf8 */
729 const extern pcre *regex_UTF8; /* For recognizing SMTPUTF8 settings */
731 extern uschar message_subdir[]; /* Subdirectory for messages */
732 extern uschar *message_reference; /* Reference for error messages */
734 /* MIME ACL expandables */
735 #ifdef WITH_CONTENT_SCAN
736 extern int mime_anomaly_level;
737 extern const uschar *mime_anomaly_text;
738 extern uschar *mime_boundary;
739 extern uschar *mime_charset;
740 extern uschar *mime_content_description;
741 extern uschar *mime_content_disposition;
742 extern uschar *mime_content_id;
743 extern unsigned int mime_content_size;
744 extern uschar *mime_content_transfer_encoding;
745 extern uschar *mime_content_type;
746 extern uschar *mime_decoded_filename;
747 extern uschar *mime_filename;
748 extern int mime_is_multipart;
749 extern int mime_is_coverletter;
750 extern int mime_is_rfc822;
751 extern int mime_part_count;
754 extern BOOL mua_wrapper; /* TRUE when Exim is wrapping an MUA */
756 extern uid_t *never_users; /* List of uids never to be used */
757 extern uschar *notifier_socket; /* Name for daemon notifier unix-socket */
759 extern const int on; /* For setsockopt */
760 extern const int off;
762 extern optionlist optionlist_auths[]; /* These option lists are made */
763 extern int optionlist_auths_size; /* global so that readconf can */
764 extern optionlist optionlist_routers[]; /* see them for printing out */
765 extern int optionlist_routers_size; /* the options. */
766 extern optionlist optionlist_transports[];
767 extern int optionlist_transports_size;
769 extern uid_t original_euid; /* Original effective uid */
770 extern gid_t originator_gid; /* Gid of whoever wrote spool file */
771 extern uschar *originator_login; /* Login of same */
772 extern uschar *originator_name; /* Full name of same */
773 extern uid_t originator_uid; /* Uid of ditto */
774 extern uschar *override_local_interfaces; /* Value of -oX argument */
775 extern uschar *override_pid_file_path; /* Value of -oP argument */
777 extern uschar *percent_hack_domains; /* Local domains for which '% operates */
778 extern uschar *pid_file_path; /* For writing daemon pids */
779 #ifndef DISABLE_PIPE_CONNECT
780 extern uschar *pipe_connect_advertise_hosts; /* for banner/EHLO pipelining */
782 extern uschar *pipelining_advertise_hosts; /* As it says */
784 extern BOOL prdr_enable; /* As it says */
785 extern BOOL prdr_requested; /* Connecting mail server wants PRDR */
787 extern BOOL preserve_message_logs; /* Save msglog files */
788 extern uschar *primary_hostname; /* Primary name of this computer */
789 extern BOOL print_topbitchars; /* Topbit chars are printing chars */
790 extern uschar *process_info; /* For SIGUSR1 output */
791 extern int process_info_len;
792 extern uschar *process_log_path; /* Alternate path */
793 extern const uschar *process_purpose; /* for debug output */
794 extern BOOL prod_requires_admin; /* TRUE if prodding requires admin */
796 #if defined(SUPPORT_PROXY) || defined(SUPPORT_SOCKS)
797 extern uschar *hosts_proxy; /* Hostlist which (require) use proxy protocol */
798 extern uschar *proxy_external_address; /* IP of remote interface of proxy */
799 extern int proxy_external_port; /* Port on remote interface of proxy */
800 extern uschar *proxy_local_address; /* IP of local interface of proxy */
801 extern int proxy_local_port; /* Port on local interface of proxy */
802 extern int proxy_protocol_timeout; /* Timeout for proxy negotiation */
803 extern BOOL proxy_session; /* TRUE if receiving mail from valid proxy */
806 extern uschar *prvscheck_address; /* Set during prvscheck expansion item */
807 extern uschar *prvscheck_keynum; /* Set during prvscheck expansion item */
808 extern uschar *prvscheck_result; /* Set during prvscheck expansion item */
810 extern const uschar *qualify_domain_recipient; /* Domain to qualify recipients with */
811 extern uschar *qualify_domain_sender; /* Domain to qualify senders with */
812 extern uschar *queue_domains; /* Queue these domains */
813 #ifndef DISABLE_QUEUE_RAMP
814 extern BOOL queue_fast_ramp; /* 2-phase queue-run overlap */
816 extern BOOL queue_list_requires_admin; /* TRUE if -bp requires admin */
817 /* immediate children */
818 extern pid_t queue_run_pid; /* PID of the queue running process or 0 */
819 extern int queue_run_pipe; /* Pipe for synchronizing */
820 extern int queue_interval; /* Queue running interval */
821 extern uschar *queue_name; /* Name of queue, if nondefault spooling */
822 extern uschar *queue_name_dest; /* Destination queue, for moving messages */
823 extern BOOL queue_only; /* TRUE to disable immediate delivery */
824 extern int queue_only_load; /* Max load before auto-queue */
825 extern BOOL queue_only_load_latch; /* Latch queue_only_load TRUE */
826 extern uschar *queue_only_file; /* Queue if file exists/not-exists */
827 extern BOOL queue_only_override; /* Allow override from command line */
828 extern BOOL queue_run_in_order; /* As opposed to random */
829 extern uschar *queue_run_max; /* Max queue runners */
830 extern unsigned queue_size; /* items in queue */
831 extern time_t queue_size_next; /* next time to evaluate queue_size */
832 extern uschar *queue_smtp_domains; /* Ditto, for these domains */
834 extern unsigned int random_seed; /* Seed for random numbers */
835 extern tree_node *ratelimiters_cmd; /* Results of command ratelimit checks */
836 extern tree_node *ratelimiters_conn; /* Results of connection ratelimit checks */
837 extern tree_node *ratelimiters_mail; /* Results of per-mail ratelimit checks */
838 extern uschar *raw_active_hostname; /* Pre-expansion */
839 extern uschar *raw_sender; /* Before rewriting */
840 extern uschar **raw_recipients; /* Before rewriting */
841 extern int raw_recipients_count;
842 extern const uschar * rc_names[]; /* Mostly for debug output */
843 extern int rcpt_count; /* Count of RCPT commands in a message */
844 extern int rcpt_fail_count; /* Those that got 5xx */
845 extern int rcpt_defer_count; /* Those that got 4xx */
846 extern gid_t real_gid; /* Real gid */
847 extern uid_t real_uid; /* Real user running program */
848 extern int receive_linecount; /* Mainly for BSMTP errors */
849 extern int receive_messagecount; /* Mainly for BSMTP errors */
850 extern int receive_timeout; /* For non-SMTP acceptance */
851 extern int received_count; /* Count of Received: headers */
852 extern uschar *received_for; /* For "for" field */
853 extern uschar *received_header_text; /* Definition of Received: header */
854 extern int received_headers_max; /* Max count of Received: headers */
855 extern struct timeval received_time; /* Time the message started to be received */
856 extern struct timeval received_time_complete; /* Time the message completed reception */
857 extern uschar *recipient_data; /* lookup data for recipients */
858 extern uschar *recipient_unqualified_hosts; /* Permitted unqualified recipients */
859 extern uschar *recipient_verify_failure; /* What went wrong */
860 extern int recipients_list_max; /* Maximum number fitting in list */
861 extern int recipients_max; /* Max permitted */
862 extern BOOL recipients_max_reject; /* If TRUE, reject whole message */
863 extern const pcre *regex_AUTH; /* For recognizing AUTH settings */
864 extern const pcre *regex_check_dns_names; /* For DNS name checking */
865 extern const pcre *regex_From; /* For recognizing "From_" lines */
866 extern const pcre *regex_CHUNKING; /* For recognizing CHUNKING (RFC 3030) */
867 extern const pcre *regex_IGNOREQUOTA; /* For recognizing IGNOREQUOTA (LMTP) */
868 #ifdef EXPERIMENTAL_ESMTP_LIMITS
869 extern const pcre *regex_LIMITS; /* For recognizing LIMITS */
871 extern const pcre *regex_PIPELINING; /* For recognizing PIPELINING */
872 extern const pcre *regex_SIZE; /* For recognizing SIZE settings */
873 #ifndef DISABLE_PIPE_CONNECT
874 extern const pcre *regex_EARLY_PIPE; /* For recognizing PIPE_CONNCT */
876 extern const pcre *regex_ismsgid; /* Compiled r.e. for message it */
877 extern const pcre *regex_smtp_code; /* For recognizing SMTP codes */
878 extern uschar *regex_vars[]; /* $regexN variables */
879 #ifdef WHITELIST_D_MACROS
880 extern const pcre *regex_whitelisted_macro; /* For -D macro values */
882 #ifdef WITH_CONTENT_SCAN
883 extern uschar *regex_match_string; /* regex that matched a line (regex ACL condition) */
885 extern int remote_delivery_count; /* Number of remote addresses */
886 extern int remote_max_parallel; /* Maximum parallel delivery */
887 extern uschar *remote_sort_domains; /* Remote domain sorting order */
888 extern retry_config *retries; /* Chain of retry config information */
889 extern int retry_data_expire; /* When to expire retry data */
890 extern int retry_interval_max; /* Absolute maximum */
891 extern int retry_maximum_timeout; /* The maximum timeout */
892 extern uschar *return_path; /* Return path for a message */
893 extern BOOL return_path_remove; /* Remove return-path headers */
894 extern int rewrite_existflags; /* Indicate which headers have rewrites */
895 extern uschar *rfc1413_hosts; /* RFC hosts */
896 extern int rfc1413_query_timeout; /* Timeout on RFC 1413 calls */
897 /* extern BOOL rfc821_domains; */ /* If set, syntax is 821, not 822 => being abolished */
898 extern uid_t root_gid; /* The gid for root */
899 extern uid_t root_uid; /* The uid for root */
900 extern router_info routers_available[];/* Vector of available routers */
901 extern router_instance *routers; /* Chain of instantiated routers */
902 extern router_instance router_defaults;/* Default values */
903 extern uschar *router_name; /* Name of router last started */
904 extern tree_node *router_var; /* Variables set by router */
905 extern ip_address_item *running_interfaces; /* Host's running interfaces */
906 extern uschar *running_status; /* Flag string for testing */
907 extern int runrc; /* rc from ${run} */
909 extern uschar *search_error_message; /* Details of lookup problem */
910 extern uschar *self_hostname; /* Self host after routing->directors */
911 extern unsigned int sender_address_cache[(MAX_NAMED_LIST * 2)/32]; /* Cache bits for sender */
912 extern uschar *sender_address_data; /* address_data from sender verify */
913 extern uschar *sender_address_unrewritten; /* Set if rewritten by verify */
914 extern uschar *sender_data; /* lookup result for senders */
915 extern unsigned int sender_domain_cache[(MAX_NAMED_LIST * 2)/32]; /* Cache bits for sender domain */
916 extern uschar *sender_fullhost; /* Sender host name + address */
917 extern BOOL sender_helo_dnssec; /* True if HELO verify used DNS and was DNSSEC */
918 extern uschar *sender_helo_name; /* Host name from HELO/EHLO */
919 extern uschar **sender_host_aliases; /* Points to list of alias names */
920 extern uschar *sender_host_auth_pubname; /* Public-name of authentication method */
921 extern unsigned int sender_host_cache[(MAX_NAMED_LIST * 2)/32]; /* Cache bits for incoming host */
922 extern BOOL sender_host_dnssec; /* true if sender_host_name verified in DNSSEC */
923 extern uschar *sender_ident; /* Sender identity via RFC 1413 */
924 extern uschar *sender_rate; /* Sender rate computed by ACL */
925 extern uschar *sender_rate_limit; /* Configured rate limit */
926 extern uschar *sender_rate_period; /* Configured smoothing period */
927 extern uschar *sender_rcvhost; /* Host data for Received: */
928 extern uschar *sender_unqualified_hosts; /* Permitted unqualified senders */
929 extern uschar *sender_verify_failure; /* What went wrong */
930 extern address_item *sender_verified_list; /* Saved chain of sender verifies */
931 extern address_item *sender_verified_failed; /* The one that caused denial */
932 extern uschar *sending_ip_address; /* Address of outgoing (SMTP) interface */
933 extern int sending_port; /* Port of outgoing interface */
934 extern SIGNAL_BOOL sigalrm_seen; /* Flag for sigalrm_handler */
935 extern const uschar *sigalarm_setter; /* For debug, set to callpoint of alarm() */
936 extern uschar **sighup_argv; /* Args for re-execing after SIGHUP */
937 extern int slow_lookup_log; /* Log DNS lookups taking longer than N millisecs */
938 extern int smtp_accept_count; /* Count of connections */
939 extern BOOL smtp_accept_keepalive; /* Set keepalive on incoming */
940 extern int smtp_accept_max; /* Max SMTP connections */
941 extern int smtp_accept_max_nonmail;/* Max non-mail commands in one con */
942 extern uschar *smtp_accept_max_nonmail_hosts; /* Limit non-mail cmds from these hosts */
943 extern uschar *smtp_accept_max_per_connection; /* Max msgs per connection */
944 extern uschar *smtp_accept_max_per_host; /* Max SMTP cons from one IP addr */
945 extern int smtp_accept_queue; /* Queue after so many connections */
946 extern int smtp_accept_queue_per_connection; /* Queue after so many msgs */
947 extern int smtp_accept_reserve; /* Reserve these SMTP connections */
948 extern uschar *smtp_active_hostname; /* Hostname for this message */
949 extern int smtp_backlog_monitor; /* listen backlog level to log */
950 extern uschar *smtp_banner; /* Banner string (to be expanded) */
951 extern BOOL smtp_check_spool_space; /* TRUE to check SMTP SIZE value */
952 extern int smtp_ch_index; /* Index in smtp_connection_had */
953 extern uschar *smtp_cmd_argument; /* For all SMTP commands */
954 extern uschar *smtp_cmd_buffer; /* SMTP command buffer */
955 extern struct timeval smtp_connection_start; /* Start time of SMTP connection */
956 extern uschar smtp_connection_had[]; /* Recent SMTP commands */
957 extern int smtp_connect_backlog; /* Max backlog permitted */
958 extern double smtp_delay_mail; /* Current MAIL delay */
959 extern double smtp_delay_rcpt; /* Current RCPT delay */
960 extern BOOL smtp_enforce_sync; /* Enforce sync rules */
961 extern uschar *smtp_etrn_command; /* Command to run */
962 extern BOOL smtp_etrn_serialize; /* Only one at once */
963 extern FILE *smtp_in; /* Incoming SMTP input file */
964 extern int smtp_listen_backlog; /* Current listener socket backlog, if monitored */
965 extern int smtp_load_reserve; /* Only from reserved if load > this */
966 extern int smtp_mailcmd_count; /* Count of MAIL commands */
967 extern int smtp_mailcmd_max; /* Limit for MAIL commands */
968 extern int smtp_max_synprot_errors;/* Max syntax/protocol errors */
969 extern int smtp_max_unknown_commands; /* As it says */
970 extern uschar *smtp_names[]; /* decode for command codes */
971 extern uschar *smtp_notquit_reason; /* Global for disconnect reason */
972 extern FILE *smtp_out; /* Incoming SMTP output file */
973 extern uschar *smtp_ratelimit_hosts; /* Rate limit these hosts */
974 extern uschar *smtp_ratelimit_mail; /* Parameters for MAIL limiting */
975 extern uschar *smtp_ratelimit_rcpt; /* Parameters for RCPT limiting */
976 extern uschar *smtp_read_error; /* Message for SMTP input error */
977 extern int smtp_receive_timeout; /* Applies to each received line */
978 extern uschar *smtp_receive_timeout_s; /* ... expandable version */
979 extern uschar *smtp_reserve_hosts; /* Hosts for reserved slots */
980 extern BOOL smtp_return_error_details; /* TRUE to return full info */
981 extern int smtp_rlm_base; /* Base interval for MAIL rate limit */
982 extern double smtp_rlm_factor; /* Factor for MAIL rate limit */
983 extern int smtp_rlm_limit; /* Max delay */
984 extern int smtp_rlm_threshold; /* Threshold for RCPT rate limit */
985 extern int smtp_rlr_base; /* Base interval for RCPT rate limit */
986 extern double smtp_rlr_factor; /* Factor for RCPT rate limit */
987 extern int smtp_rlr_limit; /* Max delay */
988 extern int smtp_rlr_threshold; /* Threshold for RCPT rate limit */
989 extern unsigned smtp_peer_options; /* Global flags for passed connections */
990 extern unsigned smtp_peer_options_wrap; /* stacked version hidden by TLS */
992 extern uschar *smtputf8_advertise_hosts; /* ingress control */
995 #ifdef WITH_CONTENT_SCAN
996 extern uschar *spamd_address; /* address for the spamassassin daemon */
997 extern uschar *spam_bar; /* the spam "bar" (textual representation of spam_score) */
998 extern uschar *spam_report; /* the spamd report (multiline) */
999 extern uschar *spam_action; /* the spamd recommended-action */
1000 extern uschar *spam_score; /* the spam score (float) */
1001 extern uschar *spam_score_int; /* spam_score * 10 (int) */
1004 extern uschar *spf_guess; /* spf best-guess record */
1005 extern uschar *spf_header_comment; /* spf header comment */
1006 extern uschar *spf_received; /* Received-SPF: header */
1007 extern uschar *spf_result; /* spf result in string form */
1008 extern BOOL spf_result_guessed; /* spf result is of best-guess operation */
1009 extern uschar *spf_smtp_comment; /* spf comment to include in SMTP reply */
1010 extern uschar *spf_smtp_comment_template;
1011 /* template to construct the spf comment by libspf2 */
1013 extern BOOL split_spool_directory; /* TRUE to use multiple subdirs */
1014 extern FILE *spool_data_file; /* handle for -D file */
1015 extern uschar *spool_directory; /* Name of spool directory */
1016 extern BOOL spool_wireformat; /* can write wireformat -D files */
1017 #ifdef EXPERIMENTAL_SRS_ALT
1018 extern uschar *srs_config; /* SRS config secret:max age:hash length:use timestamp:use hash */
1019 extern uschar *srs_db_address; /* SRS db address */
1020 extern uschar *srs_db_key; /* SRS db key */
1021 extern int srs_hashlength; /* SRS hash length */
1022 extern int srs_hashmin; /* SRS minimum hash length */
1023 extern int srs_maxage; /* SRS max age */
1024 extern uschar *srs_orig_sender; /* SRS original sender */
1025 extern uschar *srs_orig_recipient; /* SRS original recipient */
1026 extern uschar *srs_recipient; /* SRS recipient */
1027 extern uschar *srs_secrets; /* SRS secrets list */
1028 extern uschar *srs_status; /* SRS staus */
1029 extern BOOL srs_usehash; /* SRS use hash flag */
1030 extern BOOL srs_usetimestamp; /* SRS use timestamp flag */
1033 extern uschar *srs_recipient; /* SRS recipient */
1035 extern BOOL strict_acl_vars; /* ACL variables have to be set before being used */
1036 extern int string_datestamp_offset;/* After insertion by string_format */
1037 extern int string_datestamp_length;/* After insertion by string_format */
1038 extern int string_datestamp_type; /* After insertion by string_format */
1039 extern BOOL strip_excess_angle_brackets; /* Surrounding route-addrs */
1040 extern BOOL strip_trailing_dot; /* Remove dots at ends of domains */
1041 extern const uschar *submission_domain;/* Domain for submission mode */
1042 extern const uschar *submission_name; /* User name set from ACL */
1043 extern BOOL syslog_duplication; /* FALSE => no duplicate logging */
1044 extern int syslog_facility; /* As defined by Syslog.h */
1045 extern BOOL syslog_pid; /* TRUE if PID on syslogs */
1046 extern uschar *syslog_processname; /* 'ident' param to openlog() */
1047 extern BOOL syslog_timestamp; /* TRUE if time on syslogs */
1048 extern uschar *system_filter; /* Name of system filter file */
1050 extern uschar *system_filter_directory_transport; /* Transports for the */
1051 extern uschar *system_filter_file_transport; /* system filter */
1052 extern uschar *system_filter_pipe_transport;
1053 extern uschar *system_filter_reply_transport;
1055 extern gid_t system_filter_gid; /* Gid for running system filter */
1056 extern BOOL system_filter_gid_set; /* TRUE if gid set */
1057 extern uid_t system_filter_uid; /* Uid for running system filter */
1058 extern BOOL system_filter_uid_set; /* TRUE if uid set */
1060 extern blob tcp_fastopen_nodata; /* for zero-data TFO connect requests */
1061 extern BOOL tcp_nodelay; /* Controls TCP_NODELAY on daemon */
1062 extern tfo_state_t tcp_out_fastopen; /* TCP fast open */
1063 #ifdef USE_TCP_WRAPPERS
1064 extern uschar *tcp_wrappers_daemon_name; /* tcpwrappers daemon lookup name */
1066 extern int test_harness_load_avg; /* For use when testing */
1067 extern int thismessage_size_limit; /* Limit for this message */
1068 extern int timeout_frozen_after; /* Max time to keep frozen messages */
1069 #ifdef MEASURE_TIMING
1070 extern struct timeval timestamp_startup; /* For development measurements */
1073 extern uschar *transport_name; /* Name of transport last started */
1074 extern int transport_count; /* Count of bytes transported */
1075 extern int transport_newlines; /* Accurate count of number of newline chars transported */
1076 extern const uschar **transport_filter_argv; /* For on-the-fly filtering */
1077 extern int transport_filter_timeout; /* Timeout for same */
1079 extern transport_info transports_available[]; /* Vector of available transports */
1080 extern transport_instance *transports; /* Chain of instantiated transports */
1081 extern transport_instance transport_defaults; /* Default values */
1083 extern int transport_write_timeout;/* Set to time out individual writes */
1085 extern tree_node *tree_dns_fails; /* Tree of DNS lookup failures */
1086 extern tree_node *tree_duplicates; /* Tree of duplicate addresses */
1087 extern tree_node *tree_nonrecipients; /* Tree of nonrecipient addresses */
1088 extern tree_node *tree_unusable; /* Tree of unusable addresses */
1090 extern gid_t *trusted_groups; /* List of trusted groups */
1091 extern uid_t *trusted_users; /* List of trusted users */
1092 extern uschar *timezone_string; /* Required timezone setting */
1094 extern uschar *unknown_login; /* To use when login id unknown */
1095 extern uschar *unknown_username; /* Ditto */
1096 extern uschar *untrusted_set_sender; /* Let untrusted users set these senders */
1097 extern uschar *uucp_from_pattern; /* For recognizing "From " lines */
1098 extern uschar *uucp_from_sender; /* For building the sender */
1100 extern uschar *warn_message_file; /* Template for warning messages */
1101 extern uschar *warnmsg_delay; /* String form of delay time */
1102 extern uschar *warnmsg_recipients; /* Recipients of warning message */
1103 extern BOOL write_rejectlog; /* Control of reject logging */
1105 extern uschar *verify_mode; /* Running a router in verify mode */
1106 extern uschar *version_copyright; /* Copyright notice */
1107 extern uschar *version_date; /* Date of compilation */
1108 extern uschar *version_cnumber; /* Compile number */
1109 extern uschar *version_string; /* Version string */
1111 extern int warning_count; /* Delay warnings sent for this msg */
1113 /* End of globals.h */