c866bb
--- sendmail-8.14.4/cf/m4/proto.m4.orig	2011-01-11 20:02:14.000000000 -0700
c866bb
+++ sendmail-8.14.4/cf/m4/proto.m4	2011-01-11 20:02:14.000000000 -0700
c866bb
@@ -251,6 +251,9 @@ _OPTION(SevenBitInput, `confSEVEN_BIT_IN
c866bb
 # 8-bit data handling
c866bb
 _OPTION(EightBitMode, `confEIGHT_BIT_HANDLING', `pass8')
c866bb
 
c866bb
+# DSCP marking of traffic (IP_TOS)
c866bb
+_OPTION(InetQoS, `confINET_QOS', `none')
c866bb
+
c866bb
 # wait for alias file rebuild (default units: minutes)
c866bb
 _OPTION(AliasWait, `confALIAS_WAIT', `5m')
c866bb
 
c866bb
--- sendmail-8.14.4/cf/cf/submit.mc.orig	2011-01-11 20:02:14.000000000 -0700
c866bb
+++ sendmail-8.14.4/cf/cf/submit.mc	2011-01-11 20:02:14.000000000 -0700
c866bb
@@ -22,6 +22,8 @@ define(`__OSTYPE__',`')dnl dirty hack to
c866bb
 define(`_USE_DECNET_SYNTAX_', `1')dnl support DECnet
c866bb
 define(`confTIME_ZONE', `USE_TZ')dnl
c866bb
 define(`confDONT_INIT_GROUPS', `True')dnl
c866bb
+dnl # If you're operating in a DSCP/RFC-4594 environment with QoS
c866bb
+dnl define(`confINET_QOS', `AF11')dnl
c866bb
 define(`confPID_FILE', `/run/sm-client.pid')dnl
c866bb
 dnl define(`confDIRECT_SUBMISSION_MODIFIERS',`C')dnl
c866bb
 FEATURE(`use_ct_file')dnl
c866bb
--- sendmail-8.14.4/sendmail/sendmail.h.orig	2009-12-18 10:08:01.000000000 -0700
c866bb
+++ sendmail-8.14.4/sendmail/sendmail.h	2011-01-11 20:39:35.000000000 -0700
c866bb
@@ -2387,7 +2387,14 @@ EXTERN struct termescape	TermEscape;	/* 
c866bb
 EXTERN SOCKADDR	ConnectOnlyTo;	/* override connection address (for testing) */
c866bb
 EXTERN SOCKADDR RealHostAddr;	/* address of host we are talking to */
c866bb
 extern const SM_EXC_TYPE_T EtypeQuickAbort; /* type of a QuickAbort exception */
c866bb
-
c866bb
+#if _FFR_QOS
c866bb
+# if !defined(SOL_IP) && defined(IPPROTO_IP)
c866bb
+#  define SOL_IP IPPROTO_IP
c866bb
+# endif
c866bb
+# if defined(SOL_IP) && defined(IP_TOS)
c866bb
+EXTERN int	InetQoS;	/* QoS mapping */
c866bb
+# endif
c866bb
+#endif
c866bb
 
c866bb
 EXTERN int ConnectionRateWindowSize;
c866bb
 #if STARTTLS && USE_OPENSSL_ENGINE
c866bb
--- sendmail-8.14.4/sendmail/conf.c.orig	2011-01-11 20:02:14.000000000 -0700
c866bb
+++ sendmail-8.14.4/sendmail/conf.c	2011-01-11 20:24:29.000000000 -0700
c866bb
@@ -6298,6 +6298,10 @@ char	*FFRCompileOptions[] =
c866bb
 #if _FFR_QF_PARANOIA
c866bb
 	"_FFR_QF_PARANOIA",
c866bb
 #endif /* _FFR_QF_PARANOIA */
c866bb
+#if _FFR_QOS && defined(SOL_IP) && defined(IP_TOS)
c866bb
+	/* QoS */
c866bb
+	"_FFR_QOS",
c866bb
+#endif /* _FFR_QOS && defined(SOL_IP) && defined(IP_TOS) */
c866bb
 #if _FFR_QUEUEDELAY
c866bb
 	/* Exponential queue delay; disabled in 8.13 since it isn't used. */
c866bb
 	"_FFR_QUEUEDELAY",
c866bb
--- sendmail-8.14.4/sendmail/daemon.c.orig	2009-12-17 18:12:40.000000000 -0700
c866bb
+++ sendmail-8.14.4/sendmail/daemon.c	2011-01-11 20:46:37.000000000 -0700
c866bb
@@ -104,6 +104,10 @@ static int	NDaemons = 0;			/* actual num
c866bb
 
c866bb
 static time_t	NextDiskSpaceCheck = 0;
c866bb
 
c866bb
+#if _FFR_QOS && defined(SOL_IP) && defined(IP_TOS)
c866bb
+int		InetQoS = 0;			/* none by default */
c866bb
+#endif /* _FFR_QOS && defined(SOL_IP) && defined(IP_TOS) */
c866bb
+
c866bb
 /*
c866bb
 **  GETREQUESTS -- open mail IPC port and get requests.
c866bb
 **
c866bb
@@ -1131,6 +1135,16 @@ opendaemonsocket(d, firsttime)
c866bb
 			(void) setsockopt(d->d_socket, SOL_SOCKET,
c866bb
 					  SO_KEEPALIVE, (char *)&on, sizeof(on));
c866bb
 
c866bb
+#if _FFR_QOS && defined(SOL_IP) && defined(IP_TOS)
c866bb
+			if (InetQoS != 0x00
c866bb
+			 && (d->d_addr.sa.sa_family == AF_INET
c866bb
+			  || (d->d_addr.sin6.sin6_family == AF_INET6 && IN6_IS_ADDR_V4MAPPED(d->d_addr.sin6.sin6_addr.s6_addr32)))) {
c866bb
+				if (setsockopt(d->d_socket, SOL_IP,
c866bb
+						  IP_TOS, (char *)&InetQoS, sizeof(InetQoS)) < 0)
c866bb
+					syserr("opendaemonsock: daemon %s: setsockopt(IP_TOS)", d->d_name);
c866bb
+			}
c866bb
+#endif /* _FFR_QOS && defined(SOL_IP) && defined(IP_TOS) */
c866bb
+
c866bb
 #ifdef SO_RCVBUF
c866bb
 			if (d->d_tcprcvbufsize > 0)
c866bb
 			{
c866bb
@@ -2565,6 +2579,16 @@ gothostent:
c866bb
 			return EX_TEMPFAIL;
c866bb
 		}
c866bb
 
c866bb
+#if _FFR_QOS && defined(SOL_IP) && defined(IP_TOS)
c866bb
+		if (InetQoS != 0x00
c866bb
+		 && (family == AF_INET
c866bb
+		  || (family == AF_INET6 && IN6_IS_ADDR_V4MAPPED(addr.sin6.sin6_addr.s6_addr32))))
c866bb
+		{
c866bb
+			if (setsockopt(s, SOL_IP, IP_TOS,
c866bb
+					  (char *)&InetQoS, sizeof(InetQoS)) < 0)
c866bb
+				syserr("makeconnection: setsockopt(IP_TOS)");
c866bb
+		}
c866bb
+#endif /* _FFR_QOS && defined(SOL_IP) && defined(IP_TOS) */
c866bb
 #ifdef SO_SNDBUF
c866bb
 		if (ClientSettings[family].d_tcpsndbufsize > 0)
c866bb
 		{
c866bb
--- sendmail-8.14.7/sendmail/readcf.c.orig	2013-03-15 18:54:12.000000000 +0100
c866bb
+++ sendmail-8.14.7/sendmail/readcf.c	2013-04-21 17:58:19.000000000 +0200
c866bb
@@ -18,6 +18,7 @@
c866bb
 
c866bb
 #if NETINET || NETINET6
c866bb
 # include <arpa/inet.h>
c866bb
+# include <netinet/ip.h>
c866bb
 #endif /* NETINET || NETINET6 */
c866bb
 
c866bb
 
c866bb
@@ -2280,8 +2281,8 @@
c866bb
 # define O_RCPTTHROTDELAY	0xe6
c866bb
 	{ "BadRcptThrottleDelay",	O_RCPTTHROTDELAY,	OI_SAFE	},
c866bb
 #endif /* _FFR_RCPTTHROTDELAY */
c866bb
-#if 0 && _FFR_QOS && defined(SOL_IP) && defined(IP_TOS)
c866bb
-# define O_INETQOS	0xe7	/* reserved for FFR_QOS */
c866bb
+#if _FFR_QOS && defined(SOL_IP) && defined(IP_TOS)
c866bb
+# define O_INETQOS		0xe7
c866bb
 	{ "InetQoS",			O_INETQOS,	OI_NONE },
c866bb
 #endif
c866bb
 #if STARTTLS && _FFR_FIPSMODE
c866bb
@@ -2389,6 +2390,77 @@
c866bb
 };
c866bb
 #endif /* STARTTLS && _FFR_TLS_1 */
c866bb
 
c866bb
+#ifdef O_INETQOS
c866bb
+static struct qosmap
c866bb
+{
c866bb
+	char	*name;		/* name of the setting */
c866bb
+	int	value;		/* corresponding setsockopt() value */
c866bb
+} QoSMap[] = {
c866bb
+#ifdef IPTOS_CLASS_CS0
c866bb
+	{ "CS0",	IPTOS_CLASS_CS0 },
c866bb
+#endif
c866bb
+#ifdef IPTOS_CLASS_CS1
c866bb
+	{ "CS1",	IPTOS_CLASS_CS1 },
c866bb
+#endif
c866bb
+#ifdef IPTOS_DSCP_AF11
c866bb
+	{ "AF11",	IPTOS_DSCP_AF11 },
c866bb
+#endif
c866bb
+#ifdef IPTOS_DSCP_AF12
c866bb
+	{ "AF12",	IPTOS_DSCP_AF12 },
c866bb
+#endif
c866bb
+#ifdef IPTOS_DSCP_AF13
c866bb
+	{ "AF13",	IPTOS_DSCP_AF13 },
c866bb
+#endif
c866bb
+#ifdef IPTOS_CLASS_CS2
c866bb
+	{ "CS2",	IPTOS_CLASS_CS2 },
c866bb
+#endif
c866bb
+#ifdef IPTOS_DSCP_AF21
c866bb
+	{ "AF21",	IPTOS_DSCP_AF21 },
c866bb
+#endif
c866bb
+#ifdef IPTOS_DSCP_AF22
c866bb
+	{ "AF22",	IPTOS_DSCP_AF22 },
c866bb
+#endif
c866bb
+#ifdef IPTOS_DSCP_AF23
c866bb
+	{ "AF23",	IPTOS_DSCP_AF23 },
c866bb
+#endif
c866bb
+#ifdef IPTOS_CLASS_CS3
c866bb
+	{ "CS3",	IPTOS_CLASS_CS3 },
c866bb
+#endif
c866bb
+#ifdef IPTOS_DSCP_AF31
c866bb
+	{ "AF31",	IPTOS_DSCP_AF31 },
c866bb
+#endif
c866bb
+#ifdef IPTOS_DSCP_AF32
c866bb
+	{ "AF32",	IPTOS_DSCP_AF32 },
c866bb
+#endif
c866bb
+#ifdef IPTOS_DSCP_AF33
c866bb
+	{ "AF33",	IPTOS_DSCP_AF33 },
c866bb
+#endif
c866bb
+#ifdef IPTOS_CLASS_CS4
c866bb
+	{ "CS4",	IPTOS_CLASS_CS4 },
c866bb
+#endif
c866bb
+#ifdef IPTOS_DSCP_AF41
c866bb
+	{ "AF41",	IPTOS_DSCP_AF41 },
c866bb
+#endif
c866bb
+#ifdef IPTOS_DSCP_AF42
c866bb
+	{ "AF42",	IPTOS_DSCP_AF42 },
c866bb
+#endif
c866bb
+#ifdef IPTOS_DSCP_AF43
c866bb
+	{ "AF43",	IPTOS_DSCP_AF43 },
c866bb
+#endif
c866bb
+#ifdef IPTOS_CLASS_CS5
c866bb
+	{ "CS5",	IPTOS_CLASS_CS5 },
c866bb
+#endif
c866bb
+#ifdef IPTOS_CLASS_CS6
c866bb
+	{ "CS6",	IPTOS_CLASS_CS6 },
c866bb
+#endif
c866bb
+#ifdef IPTOS_CLASS_CS7
c866bb
+	{ "CS7",	IPTOS_CLASS_CS7 },
c866bb
+#endif
c866bb
+	{ "none",	0x00 },
c866bb
+	{ NULL,		0    }
c866bb
+};
c866bb
+#endif
c866bb
+
c866bb
 
c866bb
 # define CANONIFY(val)
c866bb
 
c866bb
@@ -4035,6 +4107,33 @@
c866bb
 		break;
c866bb
 #endif /* _FFR_REJECT_NUL_BYTE */
c866bb
 
c866bb
+#ifdef O_INETQOS
c866bb
+	  case O_INETQOS:
c866bb
+		{
c866bb
+			struct qosmap *qmp;
c866bb
+			InetQoS = -1;
c866bb
+
c866bb
+			for (qmp = QoSMap; qmp->name != NULL; ++qmp) {
c866bb
+				if (!strcmp(val, qmp->name)) {
c866bb
+					InetQoS = qmp->value;
c866bb
+					break;
c866bb
+				}
c866bb
+			}
c866bb
+
c866bb
+			/*
c866bb
+			** we could allow writing it as a hex value, but
c866bb
+ 			** we don't at this time.
c866bb
+ 			**/
c866bb
+			if (qmp->name == NULL) {
c866bb
+				(void) sm_io_fprintf(smioout, SM_TIME_DEFAULT,
c866bb
+						     "Warning: Option: %s unknown parameter '%s'\n",
c866bb
+						     OPTNAME, val);
c866bb
+				break;
c866bb
+			}
c866bb
+			break;
c866bb
+		}
c866bb
+#endif
c866bb
+
c866bb
 	  default:
c866bb
 		if (tTd(37, 1))
c866bb
 		{