1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
|
#!/bin/sh
#
# Copyright (C) 2005 Messiah College.
# Copyright (C) 2008 Thomas Goirand <thomas@goirand.fr>
### BEGIN INIT INFO
# Provides: dkimproxy
# Required-Start: $local_fs $remote_fs
# Required-Stop: $local_fs $remote_fs
# Default-Start: 2 3 4 5
# Default-Stop: 0 1 6
# Short-Description: Domain key filter init script
# Description: dkimproxy is an SMTP-proxy designed for Postfix. It
# implements DKIM message signing and verification.
# It comprises two separate filters, an "outbound" filter
# for signing outgoing email, and an "inbound" filter for
# verifying signatures of incoming email. The filters can
# operate as either Before-Queue or After-Queue Postfix
# content filters.
### END INIT INFO
. /lib/lsb/init-functions
if [ -e /etc/default/dkimproxy ] ; then
. /etc/default/dkimproxy
fi
### START OF CONFIGURATION READINGS FROM /etc/default/dkimproxy ###
# Check if dkimproxy in or out has been disabled
RUN_DKOUT=1
RUN_DKIN=1
if [ -n "${RUN_DKIMPROXY_OUT}" ] ; then
if ! [ ${RUN_DKIMPROXY_OUT} -eq 1 ] ; then
RUN_DKOUT=0
fi
fi
if [ -n "${RUN_DKIMPROXY_IN}" ] ; then
if ! [ "${RUN_DKIMPROXY_IN}" -eq 1 ] ; then
RUN_DKIN=0
fi
fi
# Check if the path to dkimproxy in or out has been overwritten
DKIN_CONF=/etc/dkimproxy/dkimproxy_in.conf
DKOUT_CONF=/etc/dkimproxy/dkimproxy_out.conf
if [ -n "${DKIMRPOXY_IN_CONF}" ] ; then
DKIN_CONF=${DKIMRPOXY_IN_CONF}
fi
if [ -n "${DKIMRPOXY_OUT_CONF}" ] ; then
DKOUT_CONF=${DKIMRPOXY_OUT_CONF}
fi
# Check if the path to the private key has been overwritten
# In fact, if no value, then set the default...
if [ -z "${DKIMPROXY_OUT_PRIVKEY}" ] ; then
DKIMPROXY_OUT_PRIVKEY="/var/lib/dkimproxy/private.key"
fi
# Set the default number of process to prefork.
if [ -z "${DKIMPROXY_IN_MIN_SERVERS}" ] ; then
DKIMPROXY_IN_MIN_SERVERS=5
fi
if [ -z "${DKIMPROXY_OUT_MIN_SERVERS}" ] ; then
DKIMPROXY_OUT_MIN_SERVERS=5
fi
# Check if the path to the hostname has been overwritten
# In fact, if no value, then set the default...
if [ -z "${DKIM_HOSTNAME}" ] ; then
DKIM_HOSTNAME=`hostname -d`
fi
# Get the host domains dynamically. You can change this to the location where
# you have your virtual table here, or best: ehance this script to support more
# situations with packages others than DTC
HOST_DOMAIN=${DKIM_HOSTNAME}
if [ -z "${DOMAIN}" ] ; then
if [ -f /var/lib/dtc/etc/local_domains ] ; then
DTC_DOMAIN=`cat /var/lib/dtc/etc/local_domains | grep -v ^${HOST_DOMAIN} | tr \\\r\\\n ,,`
else
DTC_DOMAIN=""
fi
fi
DOMAIN=${DTC_DOMAIN}${HOST_DOMAIN}
# Configure usernames to run under
if [ -z "${DKIMPROXYUSER}" ] ; then
DKIMPROXYUSER=dkimproxy
fi
if [ -z "${DKIMPROXYGROUP}" ] ; then
DKIMPROXYGROUP=dkimproxy
fi
### END OF CONFIGURATION READINGS FROM /etc/default/dkimproxy ###
DKIMPROXY_IN_BIN="/usr/sbin/dkimproxy.in"
DKIMPROXY_OUT_BIN="/usr/sbin/dkimproxy.out"
PIDDKIMPROXY_IN="/var/run/dkimproxy.in"
PIDDKIMPROXY_OUT="/var/run/dkimproxy.out"
COMMON_ARGS="--user=${DKIMPROXYUSER} --group=${DKIMPROXYGROUP} --daemonize"
DKIMPROXY_IN_ARGS="--hostname=${DKIM_HOSTNAME} --conf_file ${DKIN_CONF} ${COMMON_ARGS} --pidfile=${PIDDKIMPROXY_IN} --min_servers=${DKIMPROXY_IN_MIN_SERVERS}"
DKIMPROXY_OUT_ARGS="--domain=${DOMAIN} --method=simple --conf_file ${DKOUT_CONF} --keyfile=${DKIMPROXY_OUT_PRIVKEY} ${COMMON_ARGS} --pidfile=${PIDDKIMPROXY_OUT} --signature=dkim --signature=domainkeys --min_servers=${DKIMPROXY_OUT_MIN_SERVERS}"
if [ -x /sbin/start-stop-daemon ] ; then
STRT_STP_DMN=/sbin/start-stop-daemon
else
STRT_STP_DMN=`which start-stop-daemon`
fi
if [ -z "${STRT_STP_DMN}" ] ; then
echo "Can't find the start-stop-daemon binary"
fi
case "$1" in
start)
START_ERROR=0
RETVAL=0
if [ "${RUN_DKIN}" -eq 1 ] ; then
log_daemon_msg "Starting inbound DomainKeys-filter" "dkimproxy.in"
#echo "${DKIMPROXY_IN_BIN} ${DKIMPROXY_IN_ARGS}"
${DKIMPROXY_IN_BIN} ${DKIMPROXY_IN_ARGS}
RETVAL=$?
START_ERROR=${RETVAL}
log_end_msg ${RETVAL}
if ! [ "${RETVAL}" -eq 0 ] ; then
exit ${RETVAL}
fi
else
echo "DomainKeys-filter dkimproxy.in disabled in /etc/default/dkimproxy"
fi
if [ "${RUN_DKOUT}" -eq 1 ] ; then
log_daemon_msg "Starting outbound DomainKeys-signing" "dkimproxy.out"
#echo ${DKIMPROXY_OUT_BIN} ${DKIMPROXY_OUT_ARGS}
${DKIMPROXY_OUT_BIN} ${DKIMPROXY_OUT_ARGS}
#${STRT_STP_DMN} --background --make-pidfile --start -p ${PIDDKIMPROXY_OUT} -u ${DKIMPROXYUSER} -g ${DKIMPROXYGROUP} -x ${DKIMPROXY_OUT_BIN} -- ${DKIMPROXY_OUT_ARGS}
RETVAL=$?
log_end_msg ${RETVAL}
else
echo "DomainKeys-signing dkimproxy.out disabled in /etc/default/dkimproxy"
fi
if ! [ "${RETVAL}" -eq 0 -a "${START_ERROR}" -eq 0 ] ; then
if ! [ ${START_ERROR} -eq 0 ] ; then
echo "Error ${START_ERROR} when starting ${DKIMPROXY_IN_BIN}"
fi
if ! [ "${RETVAL}" -eq 0 ] ; then
echo "Error ${RETVAL} when starting ${DKIMPROXY_OUT_BIN}"
fi
fi
;;
stop)
RETVALIN=0
RETVALOUT=0
if [ "${RUN_DKIN}" -eq 1 ] ; then
log_daemon_msg "Shutting down inbound DomainKeys-filter" "dkimproxy.in"
if [ -f "${PIDDKIMPROXY_IN}" ] ; then
kill `cat ${PIDDKIMPROXY_IN}`
RETVALIN=$?
else
echo -n " ${PIDDKIMPROXY_IN} not found "
RETVALIN=1
fi
log_end_msg ${RETVALIN}
else
echo "DomainKeys-filter dkimproxy.in disabled in /etc/default/dkimproxy"
fi
if [ "${RUN_DKOUT}" -eq 1 ] ; then
log_daemon_msg "Shutting down outbound DomainKeys-filter" "dkimproxy.out"
if [ -f "${PIDDKIMPROXY_OUT}" ] ; then
kill `cat ${PIDDKIMPROXY_OUT}`
RETVALOUT=$?
else
echo -n " ${PIDDKIMPROXY_OUT} not found "
RETVALOUT=1
fi
log_end_msg ${RETVALOUT}
else
echo "DomainKeys-signing dkimproxy.out disabled in /etc/default/dkimproxy"
fi
rm -f "${PIDDKIMPROXY_IN}" "${PIDDKIMPROXY_OUT}"
if ! [ ${RETVALIN} -eq 0 -a ${RETVALOUT} -eq 0 ]; then
if ! [ ${RETVALIN} -eq 0 ] ; then
echo "Error ${RETVALIN} when shutting down ${PIDDKIMPROXY_IN}"
fi
if ! [ "${RETVALOUT}" -eq 0 ] ; then
echo "Error ${RETVALOUT} when shutting down ${PIDDKIMPROXY_OUT}"
fi
fi
;;
force-reload)
$0 stop
sleep 1
$0 start
;;
reload)
$0 stop
sleep 1
$0 start
;;
restart)
$0 stop
sleep 1
$0 start
;;
*)
echo "Usage: $0 {start|stop|restart|reload|force-reload}"
exit 1
;;
esac
exit 0
|
