xref: /csrg-svn/usr.sbin/sendmail/cf/README (revision 63857)
151220Seric
251220Seric
357246Seric		NEW SENDMAIL CONFIGURATION FILES
451220Seric
557246Seric		Eric Allman <eric@CS.Berkeley.EDU>
651220Seric
7*63857Seric		@(#)README	8.4 (Berkeley) 07/18/93
851220Seric
951220Seric
1057246SericThis document describes the sendmail configuration files being used
11*63857Sericat Berkeley.  These use features in the new (R8) sendmail, and although
1257246Sericthere is an ``OLDSENDMAIL'' mode, they haven't really been tested on
1357247Sericold versions of sendmail and cannot be expected to work well.
1451220Seric
1557246SericThese configuration files are probably not as general as previous
1657246Sericversions, and don't handle as many of the wierd cases automagically.
1757246SericI was able to simplify by them for two reasons.  First, the network
1857246Serichas become more consistent -- for example, at this point, everyone
1957246Sericon the internet is supposed to be running a name server, so hacks to
2057246Serichandle NIC-registered hosts can go away.  Second, I assumed that a
2157246Sericsubdomain would be running SMTP internally -- UUCP is presumed to be
2257246Serica long-haul protocol.  I realize that this is not universal, but it
2357246Sericdoes describe the vast majority of sites with which I am familiar,
2457246Sericincluding those outside the US.
2551220Seric
2657246SericOf course, the downside of this is that if you do live in a wierd
2757246Sericworld, things are going to get wierder for you.  I'm sorry about that,
2857246Sericbut at the time we at Berkeley had a problem, and it seemed like the
2957246Sericright thing to do.
3051220Seric
3157247SericThis package requires a post-V7 version of m4; if you are running the
3257247Seric4.2bsd, SysV.2, or 7th Edition version, I suggest finding a friend with
3357247Serica newer version.  You can m4-expand on their system, then run locally.
3457247SericSunOS's /usr/5bin/m4 or BSD-Net/2's m4 both work.  GNU m4 (which is a
3557247Sericlanguage unto itself) also works, but I don't intend to work so hard
3657247Sericto keep this up in the future.  [Note to GNU folks:  the construct
3757246Seric"define(`FOO')" should work without my having to add a null value.]
3851220Seric
3958284SericIF YOU DON'T HAVE A BERKELEY MAKE, don't despair!  Just run
4058284Seric"m4 foo.mc > foo.cf" -- that should be all you need.
4158284Seric
4258284SericTo get started, you may want to look at tcpproto.mc (for TCP-only
4358284Sericsites) and uucpproto.m4 (for UUCP-only sites).  Others are versions
4458284Sericthat we use at Berkeley, although not all are in current use.  For
4558284Sericexample, ucbarpa has gone away, but I've left ucbarpa.mc in because
4658284Sericit demonstrates some interesting techniques.
4758284Seric
4857246SericI'm not pretending that this README describes everything that these
4957246Sericconfiguration files can do; clever people can probably tweak them
5057246Sericto great effect.  But it should get you started.
5157246Seric
5258087Seric
5357246Seric+--------------------------+
5457246Seric| INTRODUCTION AND EXAMPLE |
5557246Seric+--------------------------+
5657246Seric
5757246SericConfiguration files are contained in the subdirectory "cf", with a
5857246Sericsuffix ".mc".  They must be run through "m4" to produce a ".cf" file.
5957246Seric
6051220SericLet's examine a typical .mc file (cf/cs-exposed.mc):
6151220Seric
6251220Seric	divert(-1)
6351220Seric	#
6451220Seric	# Copyright (c) 1983 Eric P. Allman
6551220Seric	# Copyright (c) 1988 The Regents of the University of California.
6651220Seric	# All rights reserved.
6751220Seric	#
6851220Seric	# Redistribution and use in source and binary forms are permitted
6951220Seric	# provided that the above copyright notice and this paragraph are
7051220Seric	# duplicated in all such forms and that any documentation,
7151220Seric	# advertising materials, and other materials related to such
7251220Seric	# distribution and use acknowledge that the software was developed
7351220Seric	# by the University of California, Berkeley.  The name of the
7451220Seric	# University may not be used to endorse or promote products derived
7551220Seric	# from this software without specific prior written permission.
7651220Seric	# THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR
7751220Seric	# IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED
7851220Seric	# WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR A PARTICULAR PURPOSE.
7951220Seric	#
8051220Seric
8157246SericThe divert(-1) will delete the crud in the resulting output file.
8257247SericThe copyright notice is what your lawyers require.  Our lawyers require
8357246Sericthe one that I've included in my files. A copyleft is a copyright by
8457246Sericanother name.
8551220Seric
8657246SericThe next line MUST be
8757246Seric
8851220Seric	include(`../m4/cf.m4')
8951220Seric
9057246SericThis will pull in the M4 macros you will need to make sense of
9157246Sericeverything else.  As the saying goes, don't think about it, just
9257246Sericdo it.  If you don't do it, don't bother reading the rest of this
9357246Sericfile.
9451220Seric
9556778Seric	VERSIONID(`<SCCS or RCS version id>')
9651220Seric
9751220SericVERSIONID is a macro that stuffs the version information into the
9851220Sericresulting file.  We use SCCS; you could use RCS, something else, or
9957246Sericomit it completely.  This is not the same as the version id included
10057246Sericin SMTP greeting messages -- this is defined in m4/version.m4.
10151220Seric
10251268Seric	DOMAIN(cs.exposed)
10351220Seric
10451220SericThis example exposes the host inside of the CS subdomain -- that is,
10551220Sericit doesn't try to hide the name of the workstation to the outside
10651220Sericworld.  Changing this to DOMAIN(cs.hidden) would have made outgoing
10751220Sericmessages refer to "<username>@CS.Berkeley.EDU" instead of using the
108*63857Sericlocal hostname.  Internally this is effected by using
10957246Seric"MASQUERADE_AS(CS.Berkeley.EDU)".
11051220Seric
11151268Seric	MAILER(smtp)
11251220Seric
11351309SericThese describe the mailers used at the default CS site site.  The
11451309Sericlocal mailer is always included automatically.
11551220Seric
11658087Seric
11757246Seric+--------+
11857246Seric| OSTYPE |
11957246Seric+--------+
12057246Seric
12151220SericNote that cf/cs-exposed.mc omits an OSTYPE macro -- this assumes
12251220Sericdefault Computer Science Division environment.  There are several
12357247Sericexplicit environments available: bsd4.3, bsd4.4, hpux, irix, osf1,
12457247Sericriscos4.5, sunos3.5, sunos4.1, and ultrix4.1.  These change things
12557247Sericlike the location of the alias file and queue directory.  Some of
12657247Sericthese files are identical to one another.
12751220Seric
12857246SericOperating system definitions are easy to write.  They may define
12957246Sericthe following variables (everything defaults, so an ostype file
13057246Sericmay be empty).
13151220Seric
13257246SericALIAS_FILE		[/etc/aliases] The location of the text version
13359761Seric			of the alias file(s).  It can be a comma-separated
13459761Seric			list of names.
13557246SericHELP_FILE		[/usr/lib/sendmail.hf] The name of the file
13657246Seric			containing information printed in response to
13757246Seric			the SMTP HELP command.
13857246SericQUEUE_DIR		[/var/spool/mqueue] The directory containing
13957246Seric			queue files.
14057246SericSTATUS_FILE		[/etc/sendmail.st] The file containing status
14157246Seric			information.
14258087SericLOCAL_MAILER_PATH	[/bin/mail] The program used to deliver local mail.
14357246SericLOCAL_MAILER_FLAGS	[rn] The flags used by the local mailer.  The
14457246Seric			flags lsDFMm are always included.
14563761SericLOCAL_MAILER_ARGS	[mail -d $u] The arguments passed to deliver local
14663761Seric			mail.
14758087SericLOCAL_SHELL_PATH	[/bin/sh] The shell used to deliver piped email.
14863791SericLOCAL_SHELL_FLAGS	[eu] The flags used by the shell mailer.  The
14963791Seric			flags lsDFM are always included.
15063791SericLOCAL_SHELL_ARGS	[sh -c $u] The arguments passed to deliver "prog"
15163791Seric			mail.
15258087SericUSENET_MAILER_PATH	[/usr/lib/news/inews] The name of the program
15358087Seric			used to submit news.
15458087SericUSENET_MAILER_FLAGS	[rlsDFMmn] The mailer flags for the usenet mailer.
15558087SericUSENET_MAILER_ARGS	[-m -h -n] The command line arguments for the
15658087Seric			usenet mailer.
157*63857SericSMTP_MAILER_FLAGS	[undefined] Flags added to SMTP mailer.  Default
158*63857Seric			flags are `mDFMUX' (and `a' for esmtp mailer).
159*63857SericUUCP_MAILER_FLAGS	[undefined] Flags added to UUCP mailer.  Default
160*63857Seric			flags are `DFMhuU' (and `m' for suucp mailer, minus
161*63857Seric			`U' for uucp-dom mailer).
16263761SericUUCP_MAILER_ARGS	[uux - -r -z -a$f -gC $h!rmail ($u)] The arguments
16363761Seric			passed to the UUCP mailer.
16463791SericUUCP_MAX_SIZE		[100000] The maximum size message accepted for
16563791Seric			transmission by the UUCP mailers.
16657246SericHOSTMAP_SPEC		[dbm -o /etc/hostmap] The value for the builtin
16757246Seric			hostmap key definition.  You can redefine this
16857246Seric			to change the class, flags, and filename of
16957246Seric			the hostmap.  The default flag (-o) makes this
17057246Seric			map optional.
17157246Seric
17257246SericIn addition, the following boolean flags may be defined -- the value
17357246Sericis ignored.
17457246Seric
17557246SericNEED_DOMAIN		If set, the $j macro is defined as $w.$D.
17657246Seric			If not set, $j is defined as $w.  If this is
17757246Seric			set, the domain must be defined using the line
17857246Seric			DD<domainname> (probably in the domain file,
17957246Seric			but possibly in the .mc file).  You will only
18057246Seric			need this if you define your system hostname
18157246Seric			without a domain (type "hostname" -- if it
18258087Seric			has no dots in the output, you qualify) AND
18358087Seric			if you are not running the nameserver AND if
18458087Seric			the first (canonical) name in /etc/hosts for
18558087Seric			your machine has no domain -- OR if you are
18658087Seric			running Ultrix or OSF/1 sendmail.  Either of
18758087Seric			these is probably a mistake.
18857246Seric
18957246Seric+---------+
19057246Seric| DOMAINS |
19157246Seric+---------+
19257246Seric
19357246SericYou will probably want to collect domain-dependent defines into one
19457246Sericfile, referenced by the DOMAIN macro.  For example, our Berkeley
19557246Sericdomain file includes definitions for several internal distinguished
19657246Serichosts:
19757246Seric
19857246SericUUCP_RELAY	The host that will forward UUCP-addressed email.
19957246Seric		If not defined, all UUCP sites must be directly
200*63857Seric		connected.  This can be an SMTP hostname or a
201*63857Seric		mailer:hostname.
20257246SericBITNET_RELAY	The host that will forward BITNET-addressed email.
20357246Seric		If not defined, the .BITNET pseudo-domain won't work.
204*63857Seric		Can be an SMTP hostname or a mailer:hostname.
20557246SericCSNET_RELAY	The host that will forward CSNET-addressed email.
20657246Seric		If not defined, the .CSNET pseudo-domain won't work.
207*63857Seric		Can be an SMTP hostname or a mailer:hostname.
20857246SericLOCAL_RELAY	The site that will handle unqualified names -- that
20957246Seric		is, names with out an @domain extension.  If not set,
21057246Seric		they are assumed to belong on this machine.  This
21157246Seric		allows you to have a central site to store a
21257246Seric		company- or department-wide alias database.  This
21357246Seric		only works at small sites, and there are better
214*63857Seric		methods.  Can be an SMTP hostname or a mailer:hostname.
21557246Seric
21657246SericThe domain file can also be used to define a domain name, if needed
21757982Seric(using "DD<domain>") and set certain site-wide features.  If all hosts
21857982Sericat your site masquerade behind one email name, you could also use
21957982SericMASQUERADE_AS here.
22057246Seric
22158408SericYou do not have to define a domain -- in particular, if you are a
22258408Sericsingle machine sitting off somewhere, it is probably more work than
22358408Sericit's worth.  This is just a mechanism for combining "domain dependent
22458408Sericknowledge" into one place.
22558408Seric
22657246Seric+---------+
22757246Seric| MAILERS |
22857246Seric+---------+
22957246Seric
23051220SericThere are fewer mailers supported in this version than the previous
23151220Sericversion, owing mostly to a simpler world.
23251220Seric
23351220Sericlocal		The local and prog mailers.  You will almost always
23451220Seric		need these; the only exception is if you relay ALL
23557247Seric		your mail to another site.  This mailer is included
23657247Seric		automatically.
23751220Seric
23851220Sericsmtp		The Simple Mail Transport Protocol mailer.  This does
23951220Seric		not hide hosts behind a gateway or another other
24051220Seric		such hack; it assumes a world where everyone is
24163761Seric		running the name server.  This file actually defines
24263761Seric		three mailers: "smtp" for regular (old-style) SMTP to
24363761Seric		other servers, "esmtp" for extended SMTP to other
24463761Seric		servers, and "relay" for transmission to our
24563761Seric		RELAY_HOST or MAILER_HUB.
24651220Seric
24751220Sericuucp		The Unix-to-Unix Copy Program mailer.  Actually, this
24851220Seric		defines two mailers, "uucp" and "suucp".  The latter
24951220Seric		is for when you know that the UUCP mailer at the other
25051220Seric		end can handle multiple recipients in one transfer.
25157246Seric		When you invoke this, sendmail looks for all names in
25257246Seric		the $=U class and sends them to the uucp mailer; all
25357246Seric		names in the $=Y class are sent to suucp.  Note that
25457246Seric		this is a function of what version of rmail runs on
25557246Seric		the receiving end, and hence may be out of your control.
256*63857Seric		If smtp is defined, it also defines a "uucp-dom" mailer
257*63857Seric		that uses domain-style rewriting.
25851220Seric
25958087Sericusenet		Usenet (network news) delivery.  If this is specified,
26058087Seric		an extra rule is added to ruleset 0 that forwards all
26158087Seric		local email for users named ``group.usenet'' to the
26258087Seric		``inews'' program.  Note that this works for all groups,
26358087Seric		and may be considered a security problem.
26458087Seric
26558363Sericfax		Facsimile transmission.  This is experimental and based
26658363Seric		on Sam Leffler's FlexFAX software.  For more information,
26758363Seric		see below.
26858087Seric
26958363Seric
27057246Seric+----------+
27157246Seric| FEATURES |
27257246Seric+----------+
27351268Seric
27457246SericSpecial features can be requested using the "FEATURE" macro.  For
27557246Sericexample, the .mc line:
27657246Seric
27757246Seric	FEATURE(use_cw_file)
27857246Seric
27957246Serictells sendmail that you want to have it read an /etc/sendmail.cw
28058782Sericfile to get values for class $=w.  The FEATURE may contain a single
28158782Sericoptional parameter -- for example:
28257246Seric
28358782Seric	FEATURE(mailertable, dbm /usr/lib/mailertable)
28458782Seric
28558782SericAvailable features are:
28658782Seric
28757246Sericuse_cw_file	Read the file /etc/sendmail.cw file to get alternate
28857246Seric		names for this host.  This might be used if you were
28957246Seric		on a host that MXed for a dynamic set of other
29057246Seric		hosts.  If the set is static, just including the line
29157246Seric		"Cw<name1> <name2> ..." is probably superior.
29258408Seric		The actual filename can be overridden by redefining
29358408Seric		confCW_FILE.
29458087Sericredirect	Reject all mail addressed to "address.REDIRECT" with
29558087Seric		a ``551 User not local; please try <address>'' message.
29658087Seric		If this is set, you can alias people who have left
29758087Seric		to their new address with ".REDIRECT" appended.
29858284Sericnouucp		Don't do anything special with UUCP addresses at all.
29959080Sericnocanonify	Don't pass addresses to $[ ... $] for canonification.
30059080Seric		This would generally only be used by sites that only
30159080Seric		act as mail gateways or which have user agents that do
30259080Seric		full canonification themselves.
30358526Sericnotsticky	By default, email sent to "user@local.host" are marked
30458526Seric		as "sticky" -- that is, the local addresses aren't
30558526Seric		matched against UDB and don't go through ruleset 5.
30658526Seric		This features disables this treatment.  It would
30758526Seric		normally be used on network gateway machines.
30858782Sericmailertable	Include a "mailer table" which can be used to override
30958782Seric		routing for particular domains.  The argument of the
31058782Seric		FEATURE may be the key definition.  If none is specified,
31158782Seric		the definition used is:
31263761Seric			hash /etc/mailertable -o
31363761Seric		Keys in this database are fully qualified domain names
31463761Seric		or partial domains preceded by a dot -- for example,
31563761Seric		"vangogh.CS.Berkeley.EDU" or ".CS.Berkeley.EDU".
31663761Seric		Values must be of the form:
31758782Seric			mailer:domain
31863761Seric		where "mailer" is the internal mailer name, and "domain"
31963761Seric		is where to send the message.  These maps are not
32063761Seric		reflected into the message header.
32163761Sericdomaintable	Include a "domain table" which can be used to provide
32263761Seric		full domains on unqualified (single word) hosts.  The
32363761Seric		argument of the FEATURE may be the key definition.  If
32463761Seric		none is specified, the definition used is:
32563761Seric			hash /etc/domaintable -o
32663761Seric		The key in this table is the unqualified host name; the
32763761Seric		value is the fully qualified domain.  Anything in the
32863761Seric		domaintable is reflected into headers; that is, this
32963761Seric		is done in ruleset 3.
33059034Sericbitdomain	Look up bitnet hosts in a table to try to turn them into
33159034Seric		internet addresses.  The table can be built using the
33259034Seric		bitdomain program contributed by John Gardiner Meyers.
33359034Seric		The argument of the FEATURE may be the key definition; if
33459034Seric		none is specified, the definition used is:
33559034Seric			hash /etc/bitdomain.db -o
33659034Seric		Keys are the bitnet hostname; values are the corresponding
33759034Seric		internet hostname.
33859037Sericuucpdomain	Similar feature for UUCP hosts.  The default map definition
33959037Seric		is:
34059037Seric			hash /etc/uudomain.db -o
34159037Seric		At the moment there is no automagic tool to build this
34259037Seric		database.
34360263Sericalways_add_domain
34460263Seric		Include the local host domain even on locally delivered
34560263Seric		mail.  Normally it is not added unless it is already
34660263Seric		present.
34763761Sericallmasquerade	If masquerading is enabled (using MASQUERADE_AS), this
34863761Seric		feature will cause recipient addresses to also masquerade
34963761Seric		as being from the masquerade host.  Normally they get
35063761Seric		the local hostname.  Although this may be right for
35163761Seric		ordinary users, it can break local aliases.  For example,
35263761Seric		if you send to "localalias", the originating sendmail will
35363761Seric		find that alias and send to all members, but send the
35463761Seric		message with "To: localalias@masqueradehost".  Since that
35563761Seric		alias likely does not exist, replies will fail.  Use this
35663761Seric		feature ONLY if you can guarantee that the ENTIRE
35763761Seric		namespace on your masquerade host supersets all the
35863761Seric		local entries.
35957246Seric
36057246SericOther FEATUREs should be defined, but I was trying to keep these
36157246Sericconfig files fairly lean and mean.
36257246Seric
36358087Seric
36457246Seric+-------+
36557246Seric| HACKS |
36657246Seric+-------+
36757246Seric
36857246SericSome things just can't be called features.  To make this clear,
36957247Sericthey go in the hack subdirectory and are referenced using the HACK
37057246Sericmacro.  These will tend to be site-dependent.  The release
37157246Sericincludes the Berkeley-dependent "cssubdomain" hack (that makes
37257246Sericsendmail accept local names in either Berkeley.EDU or CS.Berkeley.EDU;
37357246Sericthis is intended as a short-term aid while we move hosts into
37457246Sericsubdomains.
37557246Seric
37658087Seric
37757246Seric+--------------------+
37857246Seric| SITE CONFIGURATION |
37957246Seric+--------------------+
38057246Seric
38157246SericComplex sites will need more local configuration information, such as
38257246Sericlists of UUCP hosts they speak with directly.  This can get a bit more
38357246Serictricky.  For an example of a "complex" site, see cf/ucbvax.mc.
38457246Seric
38557246SericThe SITECONFIG macro allows you to indirectly reference site-dependent
38657246Sericconfiguration information stored in the siteconfig subdirectory.  For
38757246Sericexample, the line
38857246Seric
38957246Seric	SITECONFIG(uucp.ucbvax, ucbvax, U)
39057246Seric
39157246Sericreads the file uucp.ucbvax for local connection information.  The
39257246Sericsecond parameter is the local name (in this case just "ucbvax" since
39357246Sericit is locally connected, and hence a UUCP hostname) and the name of
39457246Sericthe class in which to store the host information.  Another SITECONFIG
39557246Sericline reads
39657246Seric
39757246Seric	SITECONFIG(uucp.ucbarpa, ucbarpa.Berkeley.EDU, W)
39857246Seric
39957246SericThis says that the file uucp.ucbarpa contains the list of UUCP sites
40057246Sericconnected to ucbarpa.Berkeley.EDU.  The $=W class will be used to
40157246Sericstore this list.  [The machine ucbarpa is gone now, but I've left
40257246Sericthis out-of-date configuration file around to demonstrate how you
40357246Sericmight do this.]
40457246Seric
40557246SericThe siteconfig file (e.g., siteconfig/uucp.ucbvax.m4) contains nothing
40657246Sericmore than a sequence of SITE macros describing connectivity.  For
40757246Sericexample:
40857246Seric
40957246Seric	SITE(cnmat)
41057246Seric	SITE(sgi olympus)
41157246Seric
41257246SericThe second example demonstrates that you can use two names on the
41357246Sericsame line; these are usually aliases for the same host (or are at
41457246Sericleast in the same company).
41557246Seric
41658087Seric
41757246Seric+-------------------+
41857246Seric| TWEAKING RULESETS |
41957246Seric+-------------------+
42057246Seric
42151268SericFor more complex configurations, you can define special rules.
42251268SericThe macro LOCAL_RULE_3 introduces rules that are used in canonicalizing
42351268Sericthe names.  Any modifications made here are reflected in the header.
42451268Seric
42551268SericA common use is to convert old UUCP addreses to SMTP addresses using
42651268Sericthe UUCPSMTP macro.  For example:
42751268Seric
42851268Seric	LOCAL_RULE_3
42951268Seric	UUCPSMTP(decvax,	decvax.dec.com)
43051268Seric	UUCPSMTP(research,	research.att.com)
43151268Seric
43251268Sericwill cause addresses of the form "decvax!user" and "research!user"
43351268Sericto be converted to "user@decvax.dec.com" and "user@research.att.com"
43451268Sericrespectively.
43551268Seric
43657246SericThis could also be used to look hosts in a database map:
43757246Seric
43857246Seric	LOCAL_RULE_3
43957246Seric	R$* < @ $+ > $*		$: $1 < @ $(hostmap $2 $) > $3
44057246Seric
44157246SericThis map would be defined in the LOCAL_CONFIG portion, as shown below.
44257246Seric
44351268SericSimilarly, LOCAL_RULE_0 can be used to introduce new parsing rules.
44451268SericFor example, new rules are needed to parse hostnames that you accept
44551309Sericvia MX records.  For example, you might have:
44651268Seric
44751309Seric	LOCAL_RULE_0
44851309Seric	R$+ < @ cnmat.Berkeley.EDU >	$#uucp $@ cnmat $: $1
44951309Seric
45051309SericYou would use this if you had installed an MX record for cnmat.Berkeley.EDU
45151309Sericpointing at this host; this rule catches the message and forwards it on
45251309Sericusing UUCP.
45351309Seric
45458681SericYou can also tweak rulesets 1 and 2 using LOCAL_RULE_1 and LOCAL_RULE_2.
45558681SericThese rulesets are normally empty.
45658681Seric
45757246SericA similar macro is LOCAL_CONFIG.  This introduces lines added after the
45857246Sericboilerplate option setting but before rulesets, and can be used to
45957945Sericdeclare local database maps or whatever.  For example:
46051268Seric
46157246Seric	LOCAL_CONFIG
46257246Seric	Khostmap hash /etc/hostmap.db
46357246Seric	Kyplocal nis -m hosts.byname
46451220Seric
46558087Seric
46657246Seric+---------------------------+
46757246Seric| MASQUERADING AND RELAYING |
46857246Seric+---------------------------+
46957246Seric
47057246SericYou can have your host masquerade as another using
47157246Seric
47257246Seric	MASQUERADE_AS(host.domain)
47357246Seric
47457246SericThis causes outgoing SMTP mail to be labelled as coming from the
47557246Sericindicated domain, rather than $j.  One normally masquerades as one
47657246Sericof your own subdomains (for example, it's unlikely that I would
47757246Sericchoose to masquerade as an MIT site).
47857246Seric
47957246Sericthere are always users that need to be "exposed" -- that is, their
48057246Sericinternal site name should be displayed instead of the masquerade name.
48157246SericRoot is an example.  You can add users to this list using
48257246Seric
48357246Seric	EXPOSED_USER(usernames)
48457246Seric
48557246SericThis adds users to class E; you could also use something like
48657246Seric
48757246Seric	FE/etc/sendmail.cE
48857246Seric
48957246SericYou can also arrange to relay all unqualified names (that is, names
49057246Sericwithout @host) to a relay host.  For example, if you have a central
49157246Sericemail server, you might relay to that host so that users don't have
49257246Sericto have .forward files or aliases.  You can do this using
49357246Seric
49458071Seric	define(`LOCAL_RELAY', mailer:hostname)
49557246Seric
49658071SericThe ``mailer:'' can be omitted, in which case the mailer defaults to
49758071Seric"smtp".  There are some user names that you don't want relayed, perhaps
49858071Sericbecause of local aliases.  A common example is root, which may be
49958071Sericlocally aliased.  You can add entries to this list using
50057246Seric
50157246Seric	LOCAL_USER(usernames)
50257246Seric
50357246SericThis adds users to class L; you could also use something like
50457246Seric
50557246Seric	FL/etc/sendmail.cL
50657246Seric
50757591SericIf you want all mail sent to a centralized hub, as for a shared
50857591Seric/var/spool/mail scheme, use
50957591Seric
51058071Seric	define(`MAIL_HUB', mailer:hostname)
51157591Seric
51258071SericAgain, ``mailer:'' defaults to "smtp".  If you define both LOCAL_RELAY
51358071Sericand MAIL_HUB, unqualified names and names in class L will be sent to
51458071Sericthe LOCAL_RELAY and other local names will be sent to MAIL_HUB.  For
51558071Sericexample, if are on machine mastodon.CS.Berkeley.EDU, the following
51658071Sericcombinations of settings will have the indicated effects:
51757591Seric
51857591Sericemail sent to....	eric			  eric@mastodon.CS.Berkeley.EDU
51957591Seric
52057591SericLOCAL_RELAY set to	mail.CS.Berkeley.EDU	  (delivered locally)
52157591Sericmail.CS.Berkeley.EDU
52257591Seric
52357591SericMAIL_HUB set to		mammoth.CS.Berkeley.EDU	  mammoth.CS.Berkeley.EDU
52457591Sericmammoth.CS.Berkeley.EDU
52557591Seric
52657591SericBoth LOCAL_RELAY and	mail.CS.Berkeley.EDU	  mammoth.CS.Berkeley.EDU
52757591SericMAIL_HUB set as above
52857591Seric
52958071Seric
53058071Seric+-------------------------------+
53158071Seric| NON-SMTP BASED CONFIGURATIONS |
53258071Seric+-------------------------------+
53358071Seric
53458071SericThese configuration files are designed primarily for use by SMTP-based
53558071Sericsites.  I don't pretend that they are well tuned for UUCP-only or
53658071SericUUCP-primarily nodes (the latter is defined as a small local net
53758071Sericconnected to the rest of the world via UUCP).  However, there is one
53858071Serichook to handle some special cases.
53958071Seric
54058071SericYou can define a ``smart host'' that understands a richer address syntax
54158071Sericusing:
54258071Seric
54358071Seric	define(`SMART_HOST', mailer:hostname)
54458071Seric
54558071SericIn this case, the ``mailer:'' defaults to "suucp".  Any messages that
54658071Sericcan't be handled using the usual UUCP rules are passed to this host.
54758071Seric
54858071SericIf you are on a local SMTP-based net that connects to the outside
54958071Sericworld via UUCP, you can use LOCAL_NET_CONFIG to add appropriate rules.
55058071SericFor example:
55158071Seric
55258071Seric	define(`SMART_HOST', suucp:uunet)
55358071Seric	LOCAL_NET_CONFIG
55463761Seric	R$* < @ $* .$m. > $*	$#smtp $@ $2.$m. $: $1 < @ $2.$m. > $3
55558071Seric
55658071SericThis will cause all names that end in your domain name ($m) via
55758071SericSMTP; anything else will be sent via suucp (smart UUCP) to uunet.
55863761SericIf you have FEATURE(nocanonify), you may need to omit the dots after
55963761Sericthe $m.  If you are running a local DNS inside your domain which is
56063761Sericnot otherwise connected to the outside world, you probably want to
56163761Sericuse:
56258071Seric
56363761Seric	define(`SMART_HOST', smtp:fire.wall.com)
56463761Seric	LOCAL_NET_CONFIG
56563761Seric	R$* < @ $* . > $*	$#smtp $@ $2. $: $1 < @ $2. > $3
56658071Seric
56763761SericThat is, send directly only to things you found in your DNS lookup;
56863761Sericanything else goes through SMART_HOST.
56963761Seric
57063761Seric
57158363Seric+------------------+
57258363Seric| FlexFAX SOFTWARE |
57358363Seric+------------------+
57458363Seric
57558363SericSam Leffler's FlexFAX software is still in beta test -- but he expects a
57658363Sericpublic version out "later this week" [as of 3/1/93].  The following
57758363Sericblurb is direct from Sam:
57858363Seric
57958363Seric	$Header: /usr/people/sam/fax/RCS/HOWTO,v 1.7 93/02/08 09:00:55 sam Exp $
58058363Seric
58158363Seric	How To Obtain This Software (in case all you get is this file)
58258363Seric
58358363Seric	The source code is available for public ftp on
58458363Seric	    sgi.com			sgi/fax/v2.1beta.tar.Z
58558363Seric		(192.48.153.1)
58658363Seric
58758363Seric	You can also obtain inst'able images for Silicon Graphics machines from
58858363Seric	    sgi.com			sgi/fax/v2.1beta.inst.tar
58958363Seric		(192.48.153.1)
59058363Seric
59158363Seric	For example,
59258363Seric	    % ftp -n sgi.com
59358363Seric	    ....
59458363Seric	    ftp> user anonymous
59558363Seric	    ... <type in password>
59658363Seric	    ftp> cd sgi/fax
59758363Seric	    ftp> binary
59858363Seric	    ftp> get v2.1beta.tar.Z
59958363Seric
60058363Seric	If you cannot use FTP at all, there is a service called "ftpmail"
60158363Seric	available from gateekeeper.dec.com:  you can send e-mail to this
60258363Seric	machine and it will use FTP to retrieve files for you and send you the
60358363Seric	files back again via e-mail.  To find out more about the ftpmail
60458363Seric	service, send a message to "ftpmail@gatekeeper.dec.com" whose body
60558363Seric	consists of the single line "help".
60658363Seric
60758363Seric	Internal to Silicon Graphics there are inst'able images on the host
60858363Seric	flake.asd in the directory /d/dist.  Thus you can do something like:
60958363Seric
61058363Seric	    % inst -f flake.asd.sgi.com:/d/dist/flexfax
61158363Seric
61258363Seric	to install the software on your machine.
61358363Seric
61458363Seric	The external distributions come in a compressed or uncompressed tar
61558363Seric	file.  To extract the source distribution:
61658363Seric
61758363Seric	    % zcat v2.1beta.tar.Z | tar xf -
61858363Seric
61958363Seric	(uncompress and extract individual files in current directory).  To
62058363Seric	unpack and install the client portion of the inst'able distribution:
62158363Seric
62258363Seric	    % mkdir dist
62358363Seric	    % cd dist; tar xf ../v2.1beta.inst.tar; cd ..
62458363Seric	    % inst -f dist/flexfax
62558363Seric	    ...
62658363Seric	    inst> go
62758363Seric
62858363Seric	(Note, the dist subdirectory is because some versions of inst fail if
62958363Seric	the files are in the current directory.) Server binaries is also
63058363Seric	included in the inst'able images as flexfax.server.*.  It is not
63158363Seric	installed by default, so to get it also you need to extract the do:
63258363Seric
63358363Seric	    % inst -f flexfax
63458363Seric	    ...
63558363Seric	    inst> install flexfax.server.*
63658363Seric	    inst> go
63758363Seric
63858363Seric	The SGI binaries were built for Version 4.0.5 of the IRIX operating
63958363Seric	system.  They should work w/o problem on earlier versions of the
64058363Seric	system, but I have not fully tested this.  Also, note that to install a
64158363Seric	server on an SGI machine, you need to have installed the Display
64258363Seric	PostScript execution environment product (dps_eoe).  Otherwise, the fax
64358363Seric	server will not be able to convert PostScript to facsimile for
64458363Seric	transmission.
64558363Seric
64658363Seric	If you are working from the source distribution, look at the file README
64758363Seric	in the top of the source tree.  If you are working from the inst images,
64858363Seric	you need to run faxaddmodem to setup and configure your fax modem.  Do
64958363Seric	man faxaddmodem for more information.
65058363Seric
65158363SericAlso from Sam:
65258363Seric
65358363Seric	A mailing list for users of this software is located on sgi.com.
65458363Seric	If you want to join this mailing list or have a list-related request
65558363Seric	such as getting your name removed from it, send a request to
65658363Seric
65758363Seric	    flexfax-request@sgi.com
65858363Seric
65958363Seric	Submissions (including bug reports) should be directed to:
66058363Seric
66158363Seric	    flexfax@sgi.com
66258363Seric
66358363Seric
66457945Seric+--------------------------------+
66557945Seric| TWEAKING CONFIGURATION OPTIONS |
66657945Seric+--------------------------------+
66757945Seric
66857945SericThere are a large number of configuration options that don't normally
66957945Sericneed to be changed.  However, if you feel you need to tweak them, you
67057945Sericcan define the following M4 variables.  This list is shown in four
67157945Sericcolumns:  the name you define, the default value for that definition,
67257945Sericthe option or macro that is affected (either Ox for an option or Dx
67357945Sericfor a macro), and a brief description.  Greater detail of the semantics
67457945Sericcan be found in the Installation and Operations Guide.
67557945Seric
67663582SericSome options are likely to be deprecated in future versions -- that is,
67763582Sericthe option is only included to provide back-compatibility.  These are
67863582Sericmarked with "*".
67963582Seric
68057945SericM4 Variable Name	Default		Mac/Opt	Description
68157945SericconfMAILER_NAME		MAILER-DAEMON	Dn	The sender name used for
68257945Seric						internally generated
68357945Seric						outgoing messages.
68458681SericconfFROM_LINE		From $g  $d	Dl	The From_ line used when
68558681Seric						sending to files or programs.
68657945SericconfFROM_HEADER		$?x$x <$g>$|$g$.	The format of an internally
68757945Seric					Dq	generated From: address.
68857945SericconfOPERATORS		.:%@!^/[]	Do	Address operator characters.
68957945SericconfSTMP_LOGIN_MSG	$j Sendmail $v/$Z ready at $b
69057945Seric					De	The initial (spontaneous)
69157945Seric						SMTP greeting message.
69259743SericconfSEVEN_BIT_INPUT	False		O7	Force input to seven bits?
69357945SericconfALIAS_WAIT		10		Oa	Wait (in minutes) for alias
69457945Seric						file rebuild.
69558087SericconfMIN_FREE_BLOCKS	4		Ob	Minimum number of free blocks
69658087Seric						on queue filesystem to accept
69758087Seric						SMTP mail.
69857945SericconfBLANK_SUB		.		OB	Blank (space) substitution
69957945Seric						character.
70057945SericconfCON_EXPENSIVE	False		Oc	Connect immediately to
70157945Seric						mailers marked expensive?
70257945SericconfCHECKPOINT_INTERVAL	10		OC	Checkpoint queue files
70357945Seric						every N recipients.
70457945SericconfDELIVERY_MODE	background	Od	Default delivery mode.
70557945SericconfAUTO_REBUILD	False		OD	Automatically rebuild
70657945Seric						alias file if needed.
70757945SericconfERROR_MODE		(undefined)	Oe	Error message mode.
70857945SericconfERROR_MESSAGE	(undefined)	OE	Error message header/file.
70957945SericconfSAVE_FROM_LINES	False		Of	Save extra leading
71057945Seric						From_ lines.
71157945SericconfTEMP_FILE_MODE	0600		OF	Temporary file mode.
71257945SericconfDEF_GROUP_ID	1		Og	Default group id.
71357945SericconfMATCH_GECOS		False		OG	Match GECOS field.
71457945SericconfMAX_HOP		17		Oh	Maximum hop count.
71563582SericconfIGNORE_DOTS		False		Oi *	Ignore dot as terminator
71657945Seric						for incoming messages?
71757945SericconfBIND_OPTS		(empty)		OI	Default options for BIND.
71863582SericconfMIME_FORMAT_ERRORS	True		Oj *	Send error messages as MIME-
71959743Seric						encapsulated messages per
72059743Seric						RFC 1344.
72157945SericconfMCI_CACHE_SIZE	2		Ok	Size of open connection cache.
72257945SericconfMCI_CACHE_TIMEOUT	5m		OK	Open connection cache timeout.
72363582SericconfUSE_ERRORS_TO	False		Ol *	Use the Errors-To: header to
72463582Seric						deliver error messages.  This
72563582Seric						should not be necessary because
72663582Seric						of general acceptance of the
72763582Seric						envelope/header distinction.
72857945SericconfLOG_LEVEL		9		OL	Log level.
72957945SericconfME_TOO		False		Om	Include sender in group
73057945Seric						expansions.
73157945SericconfCHECK_ALIASES	True		On	Check RHS of aliases when
73257945Seric						running newaliases.
73363582SericconfOLD_STYLE_HEADERS	True		Oo *	Assume that headers without
73457945Seric						special chars are old style.
73558859SericconfDAEMON_OPTIONS	(undefined)	OO	SMTP daemon options.
73658806SericconfPRIVACY_FLAGS	authwarnings	Op	Privacy flags.
73757945SericconfCOPY_ERRORS_TO	(undefined)	OP	Address for additional copies
73857945Seric						of all error messages.
73957945SericconfQUEUE_FACTOR	(undefined)	Oq	Slope of queue-only function
74058116SericconfREAD_TIMEOUT	(undefined)	Or	SMTP read timeouts.
74163582SericconfSAFE_QUEUE		True		Os *	Commit all messages to disk
74257945Seric						before forking.
74358806SericconfMESSAGE_TIMEOUT	5d/4h		OT	Timeout for messages before
74458806Seric						sending error/warning message.
74559317SericconfTIME_ZONE		USE_SYSTEM	Ot	Time zone info -- can be
74657945Seric						USE_SYSTEM to use the system's
74757945Seric						idea, USE_TZ to use the user's
74857945Seric						TZ envariable, or something
74957945Seric						else to force that value.
75057945SericconfDEF_USER_ID		1		Ou	Default user id.
75158718SericconfUSERDB_SPEC		(undefined)	OU	User database specification.
75258859SericconfFALLBACK_MX		(undefined)	OV	Fallback MX host.
753*63857SericconfTRY_NULL_MX_LIST	False		Ow	If we are the best MX for a
754*63857Seric						host and haven't made other
755*63857Seric						arrangements, try connecting
756*63857Seric						to the host directly; normally
757*63857Seric						this would be a config error.
75857945SericconfQUEUE_LA		8		Ox	Load average at which queue-only
75957945Seric						function kicks in.
76057945SericconfREFUSE_LA		12		OX	Load average at which incoming
76157945Seric						SMTP connections are refused.
76263582SericconfWORK_RECIPIENT_FACTOR
76363582Seric			(undefined)	Oy	Cost of each recipient.
76463582SericconfSEPARATE_PROC	False		OY	Run all deliveries in a
76557945Seric						separate process.
76657945SericconfWORK_CLASS_FACTOR	(undefined)	Oz	Priority multiplier for class.
76757945SericconfWORK_TIME_FACTOR	(undefined)	OZ	Cost of each delivery attempt.
76858408SericconfCW_FILE		/etc/sendmail.cw	Name of file used to get the
76958408Seric					Fw	local additions to the $=w
77058408Seric						class.
77157945Seric
77258087Seric
77357246Seric+-----------+
77457246Seric| HIERARCHY |
77557246Seric+-----------+
77657246Seric
77751220SericWithin this directory are several subdirectories, to wit:
77851220Seric
77951220Sericm4		General support routines.  These are typically
78051220Seric		very important and should not be changed without
78157247Seric		very careful consideration.
78251220Seric
78351220Sericcf		The configuration files themselves.  They have
78451220Seric		".mc" suffixes, and must be run through m4 to
78551220Seric		become complete.  The resulting output should
78651220Seric		have a ".cf" suffix.
78751220Seric
78851220Sericostype		Definitions describing a particular operating
78951220Seric		system type.  These should always be referenced
79051220Seric		using the OSTYPE macro in the .mc file.  Examples
79151220Seric		include "bsd4.3", "bsd4.4", "sunos3.5", and
79251220Seric		"sunos4.1".
79351220Seric
79451220Sericdomain		Definitions describing a particular domain, referenced
79551220Seric		using the DOMAIN macro in the .mc file.  These are
79651220Seric		site dependent; for example, we contribute "cs.exposed.m4"
79751220Seric		and "cs.hidden.m4" which both describe hosts in the
79851220Seric		CS.Berkeley.EDU subdomain; the former displays the local
79951220Seric		hostname (e.g., mammoth.CS.Berkeley.EDU), whereas the
80051220Seric		latter does its best to hide the identity of the local
80151220Seric		workstation inside the CS subdomain.
80251220Seric
80351220Sericmailer		Descriptions of mailers.   These are referenced using
80451220Seric		the MAILER macro in the .mc file.
80551220Seric
80651220Sericsh		Shell files used when building the .cf file from the
80751220Seric		.mc file in the cf subdirectory.
80851220Seric
80951220Sericfeature		These hold special orthogonal features that you might
81051220Seric		want to include.  They should be referenced using
81151220Seric		the FEATURE macro.
81251220Seric
81351220Serichack		Local hacks.  These can be referenced using the HACK
81451220Seric		macro.  They shouldn't be of more than voyeuristic
81551220Seric		interest outside the .Berkeley.EDU domain, but who knows?
81651220Seric		We've all got our own peccadilloes.
81751220Seric
81851268Sericsiteconfig	Site configuration -- e.g., tables of locally connected
81951268Seric		UUCP sites.
82051220Seric
82151268Seric
82257246Seric+------------------------+
82357246Seric| ADMINISTRATIVE DETAILS |
82457246Seric+------------------------+
82551220Seric
82651220SericThe following sections detail usage of certain internal parts of the
82751220Sericsendmail.cf file.  Read them carefully if you are trying to modify
82851220Sericthe current model.  If you find the above descriptions adequate, these
82951220Sericshould be {boring, confusing, tedious, ridiculous} (pick one or more).
83051220Seric
83151220SericRULESETS (* means built in to sendmail)
83251220Seric
83351220Seric   0 *	Parsing
83451220Seric   1 *	Sender rewriting
83551220Seric   2 *	Recipient rewriting
83651220Seric   3 *	Canonicalization
83751220Seric   4 *	Post cleanup
83854839Seric   5 *	Local address rewrite (after aliasing)
83960539Seric  1x	mailer rules (sender qualification)
84060539Seric  2x	mailer rules (recipient qualification)
84160539Seric  90	Mailertable host stripping
84260892Seric  96	Bottom half of Ruleset 3 (ruleset 6 in old sendmail)
84360892Seric  97	Hook for recursive ruleset 0 call (ruleset 7 in old sendmail)
844*63857Seric  98	Local part of ruleset 0 (ruleset 8 in old sendmail)
84551220Seric
84651220Seric
84751220SericMAILERS
84851220Seric
84951220Seric   0	local, prog	local and program mailers
85051220Seric   1	smtp		SMTP channel
85158087Seric   2	uucp		UNIX-to-UNIX Copy Program
85258087Seric   3	netnews		Network News delivery
85358363Seric   4	fax		Sam Leffler's FlexFAX software
85451220Seric
85551220Seric
85651220SericMACROS
85751220Seric
85851220Seric   A
85951220Seric   B	Bitnet Relay
86051220Seric   C	CSNET Relay
86154839Seric   D	The local domain -- usually not needed
86251220Seric   E
86358363Seric   F	FAX Relay
86451220Seric   G
86557591Seric   H	mail Hub (for mail clusters)
86651220Seric   I
86751220Seric   J
86851220Seric   K
86951220Seric   L
87051220Seric   M	Masquerade (who I claim to be)
87151220Seric   N
87251220Seric   O
87351220Seric   P
87451220Seric   Q
87551220Seric   R	Relay (for unqualified names)
87658071Seric   S	Smart Host
87751220Seric   T
87851309Seric   U	my UUCP name (if I have a UUCP connection)
87951309Seric   V	UUCP Relay (class V hosts)
88051220Seric   W	UUCP Relay (class W hosts)
88151220Seric   X	UUCP Relay (class X hosts)
88251309Seric   Y	UUCP Relay (all other hosts)
88351220Seric   Z	Version number
88451220Seric
88551220Seric
88651220SericCLASSES
88751220Seric
88851220Seric   A
88951220Seric   B
89051220Seric   C
89151220Seric   D
89257246Seric   E	addresses that should not seem to come from $M
89354839Seric   F	hosts we forward for
89451220Seric   G
89551220Seric   H
89651220Seric   I
89751220Seric   J
89851220Seric   K
89951220Seric   L	addresses that should not be forwarded to $R
90051220Seric   M
90151220Seric   N
90251220Seric   O	operators that indicate network operations (cannot be in local names)
90360211Seric   P	top level pseudo-domains: BITNET, FAX, UUCP, etc.
90451220Seric   Q
90551220Seric   R
90651220Seric   S
90751220Seric   T
90851220Seric   U	locally connected UUCP hosts
90951309Seric   V	UUCP hosts connected to relay $V
91051309Seric   W	UUCP hosts connected to relay $W
91151309Seric   X	UUCP hosts connected to relay $X
91251309Seric   Y	locally connected smart UUCP hosts
91351220Seric   Z
91454839Seric   .	the class containing only a dot
91551220Seric
91651220Seric
91751220SericM4 DIVERSIONS
91851220Seric
91958071Seric   1	Local host detection and resolution
92058071Seric   2	Local Ruleset 3 additions
92158071Seric   3	Local Ruleset 0 additions
92251268Seric   4	UUCP Ruleset 0 additions
92351309Seric   5	locally interpreted names (overrides $R)
92454839Seric   6	local configuration (at top of file)
92551220Seric   7	mailer definitions
92654839Seric   8	special local name recognition (late in ruleset 3)
92758681Seric   9	special local rulesets (1 and 2)
928