Fix SMTP sender validation and bounded DATA handling #21

Merged

ober merged 4 commits from astra-smtp-cleanup into main

2026-09-23 18:04:14 -04:00

ober commented

2026-09-23 17:49:53 -04:00

Owner

Summary

Fix SMTP sender-state validation and bounded DATA handling from the Astra security findings. SPF is reevaluated per MAIL FROM, folded and duplicate From headers are validated, unauthenticated local-domain spoofing is rejected, startup fails closed on chroot/chdir errors, auth and limiter state expires, and plaintext DATA is kept in bounded memory without predictable temp spools. The production message-limit test now matches the configured 35 MiB default.

Verification

FreeBSD amd64 (ssh biggus) gmake CC=cc test
gmake CC=cc binary-smoke
individual data, DKIM, DMARC, DNS, protocol, queue, SPF, delivery, server, and session suites
security, audit, and verify checks

## Summary Fix SMTP sender-state validation and bounded DATA handling from the Astra security findings. SPF is reevaluated per MAIL FROM, folded and duplicate From headers are validated, unauthenticated local-domain spoofing is rejected, startup fails closed on chroot/chdir errors, auth and limiter state expires, and plaintext DATA is kept in bounded memory without predictable temp spools. The production message-limit test now matches the configured 35 MiB default. ## Verification - FreeBSD amd64 (`ssh biggus`) `gmake CC=cc test` - `gmake CC=cc binary-smoke` - individual data, DKIM, DMARC, DNS, protocol, queue, SPF, delivery, server, and session suites - security, audit, and verify checks

ober added 3 commits

2026-09-23 17:49:53 -04:00