kevin
3f28ec20f4
- 会话 cookie 增加 Secure 标志；新增 [web].cookie_secure 配置 （默认 true，仅本地 HTTP 调试关闭；缺失字段按安全默认处理） - SMTP/IMAP/POP3 认证接入封禁体系（store.RecordAuthFailure 与 Web 共用 ban_entries）：失败计数达 ban.max_fail_attempts 即封禁 IP， 已封禁 IP 拒绝认证，堵住协议层暴力破解 - 附件存储路径遍历防护重写：FullPath 白名单校验（UUID 文件名格式） + baseDir 前缀兜底，非法路径返回错误；Save 扩展名白名单化 - 初始管理员不再使用 admin/admin：密码取 MAILGO_ADMIN_PASSWORD 或 随机生成并打印一次；新增 MustChangePassword 首登强制改密 （管理员重置密码同样触发） - 外发中继默认验证 TLS 证书（保护 AUTH 凭据，防 MITM），直投 MX 保持机会式 TLS；新增 outbound.relay_tls_insecure 开关（默认 false） - 新增安全响应头中间件：HSTS、X-Frame-Options DENY、nosniff、 Referrer-Policy、基础 CSP（frame-ancestors 'none' 防点击劫持， connect-src/form-action 'self' 防数据外泄） - LDAP/OAuth 登录错误统一为通用文案，原始错误只写日志， 不再回显邮箱/内部细节（防用户枚举与信息泄露） - 新增 25 个回归测试：cookie 标志、封禁阈值、路径遍历用例、 中继 TLS 验证（自签证书 STARTTLS 集成）、安全头、OAuth 文案 部署注意：升级后所有会话失效需重新登录；若直接以 HTTP 提供 服务需显式配置 cookie_secure = false。
530 lines
14 KiB
Go
530 lines
14 KiB
Go
package pop3_server
|
||
|
||
import (
|
||
"bufio"
|
||
"crypto/tls"
|
||
"fmt"
|
||
"log"
|
||
"net"
|
||
"strconv"
|
||
"strings"
|
||
"sync"
|
||
"time"
|
||
|
||
"mail_go/config"
|
||
"mail_go/internal/db"
|
||
"mail_go/internal/store"
|
||
"mail_go/internal/tlsutil"
|
||
)
|
||
|
||
// POP3Server implements a simple POP3 mail server over TCP.
|
||
type POP3Server struct {
|
||
listener net.Listener
|
||
stores *store.Stores
|
||
cfg config.POP3Config
|
||
banCfg config.BanConfig
|
||
tlsLoader *tlsutil.Loader
|
||
wg sync.WaitGroup
|
||
}
|
||
|
||
// NewPOP3Server creates a new POP3 server instance. tlsLoader may be nil
|
||
// when TLS is not configured.
|
||
func NewPOP3Server(cfg config.POP3Config, stores *store.Stores, tlsLoader *tlsutil.Loader, banCfg config.BanConfig) *POP3Server {
|
||
return &POP3Server{stores: stores, cfg: cfg, banCfg: banCfg, tlsLoader: tlsLoader}
|
||
}
|
||
|
||
func (s *POP3Server) tlsConfig() (*tls.Config, error) {
|
||
if s.tlsLoader == nil {
|
||
return nil, fmt.Errorf("POP3 TLS certificate or key not configured")
|
||
}
|
||
// GetCertificate 每次握手按需重载证书，证书更新后无需重启服务
|
||
return &tls.Config{GetCertificate: s.tlsLoader.GetCertificate}, nil
|
||
}
|
||
|
||
// Start starts the POP3 server on the configured plain-text port.
|
||
func (s *POP3Server) Start() error {
|
||
var err error
|
||
s.listener, err = net.Listen("tcp", s.cfg.Addr)
|
||
if err != nil {
|
||
return fmt.Errorf("POP3 listen failed: %w", err)
|
||
}
|
||
|
||
log.Printf("POP3 server listening on %s", s.cfg.Addr)
|
||
|
||
s.wg.Add(1)
|
||
go func() {
|
||
defer s.wg.Done()
|
||
for {
|
||
conn, err := s.listener.Accept()
|
||
if err != nil {
|
||
return
|
||
}
|
||
s.wg.Add(1)
|
||
go func() {
|
||
defer s.wg.Done()
|
||
s.handleConn(conn)
|
||
}()
|
||
}
|
||
}()
|
||
|
||
return nil
|
||
}
|
||
|
||
// StartTLS starts the POP3 server on the configured TLS port.
|
||
func (s *POP3Server) StartTLS() error {
|
||
tlsConfig, err := s.tlsConfig()
|
||
if err != nil {
|
||
return err
|
||
}
|
||
|
||
listener, err := tls.Listen("tcp", s.cfg.TLSAddr, tlsConfig)
|
||
if err != nil {
|
||
return fmt.Errorf("POP3 TLS listen failed: %w", err)
|
||
}
|
||
|
||
log.Printf("POP3 TLS server listening on %s", s.cfg.TLSAddr)
|
||
|
||
s.wg.Add(1)
|
||
go func() {
|
||
defer s.wg.Done()
|
||
for {
|
||
conn, err := listener.Accept()
|
||
if err != nil {
|
||
return
|
||
}
|
||
s.wg.Add(1)
|
||
go func() {
|
||
defer s.wg.Done()
|
||
s.handleConn(conn)
|
||
}()
|
||
}
|
||
}()
|
||
|
||
return nil
|
||
}
|
||
|
||
// handleConn handles a single POP3 client connection.
|
||
func (s *POP3Server) handleConn(conn net.Conn) {
|
||
defer conn.Close()
|
||
conn.SetDeadline(time.Now().Add(10 * time.Minute))
|
||
|
||
clientIP := store.ClientIPFromAddr(conn.RemoteAddr())
|
||
|
||
// 已封禁 IP 直接拒绝（防协议层暴力破解）
|
||
if banned, _ := s.stores.Bans.IsBanned(clientIP); banned {
|
||
sendResponse(conn, "-ERR access denied")
|
||
return
|
||
}
|
||
|
||
reader := bufio.NewReader(conn)
|
||
var user *db.User
|
||
var messages []pop3Message
|
||
var deleted map[int]bool
|
||
tlsActive := false
|
||
|
||
sendResponse(conn, "+OK MailGo POP3 server ready")
|
||
|
||
for {
|
||
line, err := reader.ReadString('\n')
|
||
if err != nil {
|
||
return
|
||
}
|
||
|
||
line = strings.TrimSpace(line)
|
||
if line == "" {
|
||
continue
|
||
}
|
||
|
||
parts := strings.SplitN(line, " ", 2)
|
||
cmd := strings.ToUpper(parts[0])
|
||
arg := ""
|
||
if len(parts) > 1 {
|
||
arg = strings.TrimSpace(parts[1])
|
||
}
|
||
|
||
authenticated := user != nil && user.ID != 0
|
||
if !authenticated && requiresAuth(cmd) {
|
||
sendResponse(conn, "-ERR authentication required")
|
||
continue
|
||
}
|
||
|
||
switch cmd {
|
||
case "USER":
|
||
user, messages, deleted = s.handleUSER(conn, arg, user)
|
||
case "PASS":
|
||
user, messages, deleted = s.handlePASS(conn, arg, user)
|
||
case "STAT":
|
||
s.handleSTAT(conn, messages, deleted)
|
||
case "LIST":
|
||
s.handleLIST(conn, arg, messages, deleted)
|
||
case "RETR":
|
||
s.handleRETR(conn, arg, messages, deleted)
|
||
case "DELE":
|
||
s.handleDELE(conn, arg, messages, deleted)
|
||
case "NOOP":
|
||
sendResponse(conn, "+OK")
|
||
case "RSET":
|
||
deleted = make(map[int]bool)
|
||
sendResponse(conn, "+OK")
|
||
case "QUIT":
|
||
s.expungeDeleted(messages, deleted, user)
|
||
sendResponse(conn, "+OK MailGo POP3 server signing off")
|
||
return
|
||
case "CAPA":
|
||
s.handleCAPA(conn, tlsActive)
|
||
case "STLS":
|
||
if authenticated {
|
||
sendResponse(conn, "-ERR STLS not allowed after authentication")
|
||
continue
|
||
}
|
||
if tlsActive {
|
||
sendResponse(conn, "-ERR TLS already active")
|
||
continue
|
||
}
|
||
tlsConfig, err := s.tlsConfig()
|
||
if err != nil {
|
||
sendResponse(conn, "-ERR TLS not available")
|
||
continue
|
||
}
|
||
sendResponse(conn, "+OK Begin TLS negotiation")
|
||
tlsConn := tls.Server(conn, tlsConfig)
|
||
if err := tlsConn.Handshake(); err != nil {
|
||
return
|
||
}
|
||
conn = tlsConn
|
||
reader = bufio.NewReader(conn)
|
||
tlsActive = true
|
||
case "TOP":
|
||
s.handleTOP(conn, arg, messages, deleted)
|
||
case "UIDL":
|
||
s.handleUIDL(conn, arg, messages, deleted)
|
||
default:
|
||
sendResponse(conn, "-ERR unknown command")
|
||
}
|
||
}
|
||
}
|
||
|
||
func requiresAuth(cmd string) bool {
|
||
switch cmd {
|
||
case "STAT", "LIST", "RETR", "DELE", "RSET", "TOP", "UIDL":
|
||
return true
|
||
default:
|
||
return false
|
||
}
|
||
}
|
||
|
||
func (s *POP3Server) handleCAPA(conn net.Conn, tlsActive bool) {
|
||
sendResponse(conn, "+OK Capability list follows")
|
||
sendResponse(conn, "USER")
|
||
sendResponse(conn, "TOP")
|
||
sendResponse(conn, "UIDL")
|
||
sendResponse(conn, "RESP-CODES")
|
||
if !tlsActive && s.cfg.TLSCert != "" && s.cfg.TLSKey != "" {
|
||
sendResponse(conn, "STLS")
|
||
}
|
||
sendResponse(conn, ".")
|
||
}
|
||
|
||
// pop3Message holds a message and its computed size for POP3.
|
||
type pop3Message struct {
|
||
id uint
|
||
raw string
|
||
size int
|
||
message *db.Message
|
||
}
|
||
|
||
// loadMessages loads all INBOX messages for a user.
|
||
func (s *POP3Server) loadMessages(user *db.User) []pop3Message {
|
||
if user == nil {
|
||
return nil
|
||
}
|
||
|
||
dbMsgs, err := s.stores.Mails.ListAllByUserAndFolder(user.ID, "INBOX")
|
||
if err != nil {
|
||
return nil
|
||
}
|
||
|
||
msgs := make([]pop3Message, 0, len(dbMsgs))
|
||
for i := range dbMsgs {
|
||
raw := string(buildRawMessage(&dbMsgs[i]))
|
||
msgs = append(msgs, pop3Message{
|
||
id: dbMsgs[i].ID,
|
||
raw: raw,
|
||
size: len(normalizePOP3Data(raw)),
|
||
message: &dbMsgs[i],
|
||
})
|
||
}
|
||
return msgs
|
||
}
|
||
|
||
// handleUSER processes the USER command.
|
||
func (s *POP3Server) handleUSER(conn net.Conn, username string, currentUser *db.User) (*db.User, []pop3Message, map[int]bool) {
|
||
if username == "" {
|
||
sendResponse(conn, "-ERR missing username")
|
||
return currentUser, nil, nil
|
||
}
|
||
|
||
user, err := s.stores.Users.GetByEmail(username)
|
||
if err != nil {
|
||
sendResponse(conn, "+OK")
|
||
return &db.User{Username: username}, nil, nil
|
||
}
|
||
|
||
sendResponse(conn, "+OK")
|
||
return user, nil, nil
|
||
}
|
||
|
||
// handlePASS processes the PASS command.
|
||
func (s *POP3Server) handlePASS(conn net.Conn, password string, user *db.User) (*db.User, []pop3Message, map[int]bool) {
|
||
if user == nil {
|
||
sendResponse(conn, "-ERR no username given")
|
||
return nil, nil, nil
|
||
}
|
||
|
||
clientIP := store.ClientIPFromAddr(conn.RemoteAddr())
|
||
|
||
authUser, err := s.stores.Users.Authenticate(user.Username, password)
|
||
if err != nil {
|
||
// 认证失败计数，达到阈值封禁（与 Web 登录共用 ban_entries）
|
||
s.stores.RecordAuthFailure(clientIP, s.banCfg.MaxFailAttempts, s.banCfg.BanDurationMin)
|
||
sendResponse(conn, "-ERR authentication failed")
|
||
return nil, nil, nil
|
||
}
|
||
|
||
messages := s.loadMessages(authUser)
|
||
deleted := make(map[int]bool)
|
||
sendResponse(conn, fmt.Sprintf("+OK authenticated, %d messages", len(messages)))
|
||
return authUser, messages, deleted
|
||
}
|
||
|
||
// handleSTAT processes the STAT command.
|
||
func (s *POP3Server) handleSTAT(conn net.Conn, messages []pop3Message, deleted map[int]bool) {
|
||
count := 0
|
||
totalSize := 0
|
||
for i, msg := range messages {
|
||
if !deleted[i+1] {
|
||
count++
|
||
totalSize += msg.size
|
||
}
|
||
}
|
||
sendResponse(conn, fmt.Sprintf("+OK %d %d", count, totalSize))
|
||
}
|
||
|
||
// handleLIST processes the LIST command (with optional message number).
|
||
func (s *POP3Server) handleLIST(conn net.Conn, arg string, messages []pop3Message, deleted map[int]bool) {
|
||
if arg == "" {
|
||
sendResponse(conn, "+OK message list follows")
|
||
for i, msg := range messages {
|
||
if !deleted[i+1] {
|
||
sendResponse(conn, fmt.Sprintf("%d %d", i+1, msg.size))
|
||
}
|
||
}
|
||
sendResponse(conn, ".")
|
||
return
|
||
}
|
||
|
||
num, err := strconv.Atoi(arg)
|
||
if err != nil || num < 1 || num > len(messages) {
|
||
sendResponse(conn, "-ERR no such message")
|
||
return
|
||
}
|
||
if deleted[num] {
|
||
sendResponse(conn, "-ERR message deleted")
|
||
return
|
||
}
|
||
sendResponse(conn, fmt.Sprintf("+OK %d %d", num, messages[num-1].size))
|
||
}
|
||
|
||
// handleRETR processes the RETR command.
|
||
func (s *POP3Server) handleRETR(conn net.Conn, arg string, messages []pop3Message, deleted map[int]bool) {
|
||
num, err := strconv.Atoi(arg)
|
||
if err != nil || num < 1 || num > len(messages) {
|
||
sendResponse(conn, "-ERR no such message")
|
||
return
|
||
}
|
||
if deleted[num] {
|
||
sendResponse(conn, "-ERR message deleted")
|
||
return
|
||
}
|
||
|
||
msg := messages[num-1]
|
||
sendResponse(conn, fmt.Sprintf("+OK %d octets", msg.size))
|
||
writeDotStuffed(conn, msg.raw, nil)
|
||
conn.Write([]byte(".\r\n"))
|
||
}
|
||
|
||
// handleDELE processes the DELE command.
|
||
func (s *POP3Server) handleDELE(conn net.Conn, arg string, messages []pop3Message, deleted map[int]bool) {
|
||
num, err := strconv.Atoi(arg)
|
||
if err != nil || num < 1 || num > len(messages) {
|
||
sendResponse(conn, "-ERR no such message")
|
||
return
|
||
}
|
||
if deleted[num] {
|
||
sendResponse(conn, "-ERR message already deleted")
|
||
return
|
||
}
|
||
deleted[num] = true
|
||
sendResponse(conn, "+OK message marked for deletion")
|
||
}
|
||
|
||
// handleTOP processes the TOP command (headers + first N lines of body).
|
||
func (s *POP3Server) handleTOP(conn net.Conn, arg string, messages []pop3Message, deleted map[int]bool) {
|
||
parts := strings.Fields(arg)
|
||
if len(parts) < 1 {
|
||
sendResponse(conn, "-ERR syntax error")
|
||
return
|
||
}
|
||
|
||
num, err := strconv.Atoi(parts[0])
|
||
if err != nil || num < 1 || num > len(messages) {
|
||
sendResponse(conn, "-ERR no such message")
|
||
return
|
||
}
|
||
if deleted[num] {
|
||
sendResponse(conn, "-ERR message deleted")
|
||
return
|
||
}
|
||
|
||
nLines := 0
|
||
if len(parts) > 1 {
|
||
nLines, _ = strconv.Atoi(parts[1])
|
||
}
|
||
|
||
msg := messages[num-1]
|
||
header, body := splitHeaderBody(msg.raw)
|
||
sendResponse(conn, "+OK top of message follows")
|
||
writeDotStuffed(conn, header, nil)
|
||
conn.Write([]byte("\r\n"))
|
||
writeDotStuffed(conn, body, &nLines)
|
||
conn.Write([]byte(".\r\n"))
|
||
}
|
||
|
||
// handleUIDL processes the UIDL command.
|
||
func (s *POP3Server) handleUIDL(conn net.Conn, arg string, messages []pop3Message, deleted map[int]bool) {
|
||
if arg == "" {
|
||
sendResponse(conn, "+OK UIDL list follows")
|
||
for i, msg := range messages {
|
||
if !deleted[i+1] {
|
||
sendResponse(conn, fmt.Sprintf("%d %d", i+1, msg.id))
|
||
}
|
||
}
|
||
sendResponse(conn, ".")
|
||
return
|
||
}
|
||
|
||
num, err := strconv.Atoi(arg)
|
||
if err != nil || num < 1 || num > len(messages) {
|
||
sendResponse(conn, "-ERR no such message")
|
||
return
|
||
}
|
||
if deleted[num] {
|
||
sendResponse(conn, "-ERR message deleted")
|
||
return
|
||
}
|
||
sendResponse(conn, fmt.Sprintf("+OK %d %d", num, messages[num-1].id))
|
||
}
|
||
|
||
// expungeDeleted actually deletes messages that were marked for deletion.
|
||
func (s *POP3Server) expungeDeleted(messages []pop3Message, deleted map[int]bool, user *db.User) {
|
||
if deleted == nil || user == nil || user.ID == 0 {
|
||
return
|
||
}
|
||
for seqNum, msgDeleted := range deleted {
|
||
if msgDeleted && seqNum >= 1 && seqNum <= len(messages) {
|
||
if err := s.stores.Mails.Delete(messages[seqNum-1].id); err != nil {
|
||
log.Printf("POP3: failed to delete message %d: %v", messages[seqNum-1].id, err)
|
||
}
|
||
}
|
||
}
|
||
}
|
||
|
||
// sendResponse writes a POP3 response line to the connection.
|
||
func sendResponse(conn net.Conn, line string) {
|
||
conn.Write([]byte(line + "\r\n"))
|
||
}
|
||
|
||
func normalizePOP3Data(raw string) string {
|
||
var b strings.Builder
|
||
writeDotStuffed(&b, raw, nil)
|
||
return b.String()
|
||
}
|
||
|
||
type stringWriter interface {
|
||
Write([]byte) (int, error)
|
||
}
|
||
|
||
func writeDotStuffed(w stringWriter, raw string, maxLines *int) {
|
||
raw = strings.ReplaceAll(raw, "\r\n", "\n")
|
||
raw = strings.ReplaceAll(raw, "\r", "\n")
|
||
lines := strings.Split(raw, "\n")
|
||
written := 0
|
||
for i, line := range lines {
|
||
if maxLines != nil && written >= *maxLines {
|
||
break
|
||
}
|
||
if i == len(lines)-1 && line == "" {
|
||
break
|
||
}
|
||
if strings.HasPrefix(line, ".") {
|
||
w.Write([]byte("."))
|
||
}
|
||
w.Write([]byte(line + "\r\n"))
|
||
written++
|
||
}
|
||
}
|
||
|
||
func splitHeaderBody(raw string) (string, string) {
|
||
if idx := strings.Index(raw, "\r\n\r\n"); idx >= 0 {
|
||
return raw[:idx], raw[idx+4:]
|
||
}
|
||
if idx := strings.Index(raw, "\n\n"); idx >= 0 {
|
||
return raw[:idx], raw[idx+2:]
|
||
}
|
||
return raw, ""
|
||
}
|
||
|
||
// buildRawMessage reconstructs a raw RFC822 message from a db.Message.
|
||
func buildRawMessage(msg *db.Message) []byte {
|
||
if msg.RawData != "" {
|
||
return []byte(msg.RawData)
|
||
}
|
||
|
||
var buf strings.Builder
|
||
buf.WriteString(fmt.Sprintf("From: %s\r\n", msg.FromAddr))
|
||
buf.WriteString(fmt.Sprintf("To: %s\r\n", msg.ToAddr))
|
||
if msg.CcAddr != "" {
|
||
buf.WriteString(fmt.Sprintf("Cc: %s\r\n", msg.CcAddr))
|
||
}
|
||
buf.WriteString(fmt.Sprintf("Subject: %s\r\n", msg.Subject))
|
||
buf.WriteString(fmt.Sprintf("Date: %s\r\n", msg.Date.Format("Mon, 02 Jan 2006 15:04:05 -0700")))
|
||
if msg.MessageID != "" {
|
||
buf.WriteString(fmt.Sprintf("Message-ID: %s\r\n", msg.MessageID))
|
||
}
|
||
buf.WriteString("MIME-Version: 1.0\r\n")
|
||
|
||
if msg.HtmlBody != "" && msg.TextBody != "" {
|
||
boundary := fmt.Sprintf("mailgo_%d", msg.ID)
|
||
buf.WriteString(fmt.Sprintf("Content-Type: multipart/alternative; boundary=\"%s\"\r\n", boundary))
|
||
buf.WriteString("\r\n")
|
||
buf.WriteString(fmt.Sprintf("--%s\r\n", boundary))
|
||
buf.WriteString("Content-Type: text/plain; charset=utf-8\r\n\r\n")
|
||
buf.WriteString(msg.TextBody)
|
||
buf.WriteString("\r\n")
|
||
buf.WriteString(fmt.Sprintf("--%s\r\n", boundary))
|
||
buf.WriteString("Content-Type: text/html; charset=utf-8\r\n\r\n")
|
||
buf.WriteString(msg.HtmlBody)
|
||
buf.WriteString("\r\n")
|
||
buf.WriteString(fmt.Sprintf("--%s--\r\n", boundary))
|
||
} else if msg.TextBody != "" {
|
||
buf.WriteString("Content-Type: text/plain; charset=utf-8\r\n\r\n")
|
||
buf.WriteString(msg.TextBody)
|
||
} else if msg.HtmlBody != "" {
|
||
buf.WriteString("Content-Type: text/html; charset=utf-8\r\n\r\n")
|
||
buf.WriteString(msg.HtmlBody)
|
||
} else {
|
||
buf.WriteString("Content-Type: text/plain; charset=utf-8\r\n\r\n")
|
||
}
|
||
return []byte(buf.String())
|
||
}
|