151220Seric 251220Seric 357246Seric NEW SENDMAIL CONFIGURATION FILES 451220Seric 557246Seric Eric Allman <eric@CS.Berkeley.EDU> 651220Seric 7*64028Seric @(#)README 8.7 (Berkeley) 07/23/93 851220Seric 951220Seric 1057246SericThis document describes the sendmail configuration files being used 1163857Sericat Berkeley. These use features in the new (R8) sendmail, and although 1257246Sericthere is an ``OLDSENDMAIL'' mode, they haven't really been tested on 1357247Sericold versions of sendmail and cannot be expected to work well. 1451220Seric 1557246SericThese configuration files are probably not as general as previous 1657246Sericversions, and don't handle as many of the wierd cases automagically. 1757246SericI was able to simplify by them for two reasons. First, the network 1857246Serichas become more consistent -- for example, at this point, everyone 1957246Sericon the internet is supposed to be running a name server, so hacks to 2057246Serichandle NIC-registered hosts can go away. Second, I assumed that a 2157246Sericsubdomain would be running SMTP internally -- UUCP is presumed to be 2257246Serica long-haul protocol. I realize that this is not universal, but it 2357246Sericdoes describe the vast majority of sites with which I am familiar, 2457246Sericincluding those outside the US. 2551220Seric 2657246SericOf course, the downside of this is that if you do live in a wierd 2757246Sericworld, things are going to get wierder for you. I'm sorry about that, 2857246Sericbut at the time we at Berkeley had a problem, and it seemed like the 2957246Sericright thing to do. 3051220Seric 3157247SericThis package requires a post-V7 version of m4; if you are running the 3257247Seric4.2bsd, SysV.2, or 7th Edition version, I suggest finding a friend with 3357247Serica newer version. You can m4-expand on their system, then run locally. 3457247SericSunOS's /usr/5bin/m4 or BSD-Net/2's m4 both work. GNU m4 (which is a 3557247Sericlanguage unto itself) also works, but I don't intend to work so hard 3657247Sericto keep this up in the future. [Note to GNU folks: the construct 3757246Seric"define(`FOO')" should work without my having to add a null value.] 3851220Seric 3958284SericIF YOU DON'T HAVE A BERKELEY MAKE, don't despair! Just run 4058284Seric"m4 foo.mc > foo.cf" -- that should be all you need. 4158284Seric 4258284SericTo get started, you may want to look at tcpproto.mc (for TCP-only 4358284Sericsites) and uucpproto.m4 (for UUCP-only sites). Others are versions 4458284Sericthat we use at Berkeley, although not all are in current use. For 4558284Sericexample, ucbarpa has gone away, but I've left ucbarpa.mc in because 4658284Sericit demonstrates some interesting techniques. 4758284Seric 4857246SericI'm not pretending that this README describes everything that these 4957246Sericconfiguration files can do; clever people can probably tweak them 5057246Sericto great effect. But it should get you started. 5157246Seric 5258087Seric 5357246Seric+--------------------------+ 5457246Seric| INTRODUCTION AND EXAMPLE | 5557246Seric+--------------------------+ 5657246Seric 5757246SericConfiguration files are contained in the subdirectory "cf", with a 5857246Sericsuffix ".mc". They must be run through "m4" to produce a ".cf" file. 5957246Seric 6051220SericLet's examine a typical .mc file (cf/cs-exposed.mc): 6151220Seric 6251220Seric divert(-1) 6351220Seric # 6451220Seric # Copyright (c) 1983 Eric P. Allman 6551220Seric # Copyright (c) 1988 The Regents of the University of California. 6651220Seric # All rights reserved. 6751220Seric # 6851220Seric # Redistribution and use in source and binary forms are permitted 6951220Seric # provided that the above copyright notice and this paragraph are 7051220Seric # duplicated in all such forms and that any documentation, 7151220Seric # advertising materials, and other materials related to such 7251220Seric # distribution and use acknowledge that the software was developed 7351220Seric # by the University of California, Berkeley. The name of the 7451220Seric # University may not be used to endorse or promote products derived 7551220Seric # from this software without specific prior written permission. 7651220Seric # THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR 7751220Seric # IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED 7851220Seric # WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR A PARTICULAR PURPOSE. 7951220Seric # 8051220Seric 8157246SericThe divert(-1) will delete the crud in the resulting output file. 8257247SericThe copyright notice is what your lawyers require. Our lawyers require 8357246Sericthe one that I've included in my files. A copyleft is a copyright by 8457246Sericanother name. 8551220Seric 8657246SericThe next line MUST be 8757246Seric 8851220Seric include(`../m4/cf.m4') 8951220Seric 9057246SericThis will pull in the M4 macros you will need to make sense of 9157246Sericeverything else. As the saying goes, don't think about it, just 9257246Sericdo it. If you don't do it, don't bother reading the rest of this 9357246Sericfile. 9451220Seric 9556778Seric VERSIONID(`<SCCS or RCS version id>') 9651220Seric 9751220SericVERSIONID is a macro that stuffs the version information into the 9851220Sericresulting file. We use SCCS; you could use RCS, something else, or 9957246Sericomit it completely. This is not the same as the version id included 10057246Sericin SMTP greeting messages -- this is defined in m4/version.m4. 10151220Seric 10251268Seric DOMAIN(cs.exposed) 10351220Seric 10451220SericThis example exposes the host inside of the CS subdomain -- that is, 10551220Sericit doesn't try to hide the name of the workstation to the outside 10651220Sericworld. Changing this to DOMAIN(cs.hidden) would have made outgoing 10751220Sericmessages refer to "<username>@CS.Berkeley.EDU" instead of using the 10863857Sericlocal hostname. Internally this is effected by using 10957246Seric"MASQUERADE_AS(CS.Berkeley.EDU)". 11051220Seric 11151268Seric MAILER(smtp) 11251220Seric 11351309SericThese describe the mailers used at the default CS site site. The 11451309Sericlocal mailer is always included automatically. 11551220Seric 11658087Seric 11757246Seric+--------+ 11857246Seric| OSTYPE | 11957246Seric+--------+ 12057246Seric 12151220SericNote that cf/cs-exposed.mc omits an OSTYPE macro -- this assumes 12251220Sericdefault Computer Science Division environment. There are several 12357247Sericexplicit environments available: bsd4.3, bsd4.4, hpux, irix, osf1, 12457247Sericriscos4.5, sunos3.5, sunos4.1, and ultrix4.1. These change things 12557247Sericlike the location of the alias file and queue directory. Some of 12657247Sericthese files are identical to one another. 12751220Seric 12857246SericOperating system definitions are easy to write. They may define 12957246Sericthe following variables (everything defaults, so an ostype file 13057246Sericmay be empty). 13151220Seric 13257246SericALIAS_FILE [/etc/aliases] The location of the text version 13359761Seric of the alias file(s). It can be a comma-separated 13459761Seric list of names. 13557246SericHELP_FILE [/usr/lib/sendmail.hf] The name of the file 13657246Seric containing information printed in response to 13757246Seric the SMTP HELP command. 13857246SericQUEUE_DIR [/var/spool/mqueue] The directory containing 13957246Seric queue files. 14057246SericSTATUS_FILE [/etc/sendmail.st] The file containing status 14157246Seric information. 14258087SericLOCAL_MAILER_PATH [/bin/mail] The program used to deliver local mail. 14357246SericLOCAL_MAILER_FLAGS [rn] The flags used by the local mailer. The 14457246Seric flags lsDFMm are always included. 14563761SericLOCAL_MAILER_ARGS [mail -d $u] The arguments passed to deliver local 14663761Seric mail. 14758087SericLOCAL_SHELL_PATH [/bin/sh] The shell used to deliver piped email. 14863791SericLOCAL_SHELL_FLAGS [eu] The flags used by the shell mailer. The 14963791Seric flags lsDFM are always included. 15063791SericLOCAL_SHELL_ARGS [sh -c $u] The arguments passed to deliver "prog" 15163791Seric mail. 15258087SericUSENET_MAILER_PATH [/usr/lib/news/inews] The name of the program 15358087Seric used to submit news. 15458087SericUSENET_MAILER_FLAGS [rlsDFMmn] The mailer flags for the usenet mailer. 15558087SericUSENET_MAILER_ARGS [-m -h -n] The command line arguments for the 15658087Seric usenet mailer. 15763857SericSMTP_MAILER_FLAGS [undefined] Flags added to SMTP mailer. Default 15863857Seric flags are `mDFMUX' (and `a' for esmtp mailer). 15963857SericUUCP_MAILER_FLAGS [undefined] Flags added to UUCP mailer. Default 16063857Seric flags are `DFMhuU' (and `m' for suucp mailer, minus 16163857Seric `U' for uucp-dom mailer). 16263761SericUUCP_MAILER_ARGS [uux - -r -z -a$f -gC $h!rmail ($u)] The arguments 16363761Seric passed to the UUCP mailer. 16463791SericUUCP_MAX_SIZE [100000] The maximum size message accepted for 16563791Seric transmission by the UUCP mailers. 16657246SericHOSTMAP_SPEC [dbm -o /etc/hostmap] The value for the builtin 16757246Seric hostmap key definition. You can redefine this 16857246Seric to change the class, flags, and filename of 16957246Seric the hostmap. The default flag (-o) makes this 17057246Seric map optional. 17157246Seric 17257246SericIn addition, the following boolean flags may be defined -- the value 17357246Sericis ignored. 17457246Seric 17557246SericNEED_DOMAIN If set, the $j macro is defined as $w.$D. 17657246Seric If not set, $j is defined as $w. If this is 17757246Seric set, the domain must be defined using the line 17857246Seric DD<domainname> (probably in the domain file, 17957246Seric but possibly in the .mc file). You will only 18057246Seric need this if you define your system hostname 18157246Seric without a domain (type "hostname" -- if it 18258087Seric has no dots in the output, you qualify) AND 18358087Seric if you are not running the nameserver AND if 18458087Seric the first (canonical) name in /etc/hosts for 18558087Seric your machine has no domain -- OR if you are 18658087Seric running Ultrix or OSF/1 sendmail. Either of 18758087Seric these is probably a mistake. 18857246Seric 18957246Seric+---------+ 19057246Seric| DOMAINS | 19157246Seric+---------+ 19257246Seric 19357246SericYou will probably want to collect domain-dependent defines into one 19457246Sericfile, referenced by the DOMAIN macro. For example, our Berkeley 19557246Sericdomain file includes definitions for several internal distinguished 19657246Serichosts: 19757246Seric 19857246SericUUCP_RELAY The host that will forward UUCP-addressed email. 19957246Seric If not defined, all UUCP sites must be directly 200*64028Seric connected. 20157246SericBITNET_RELAY The host that will forward BITNET-addressed email. 20257246Seric If not defined, the .BITNET pseudo-domain won't work. 20357246SericCSNET_RELAY The host that will forward CSNET-addressed email. 20457246Seric If not defined, the .CSNET pseudo-domain won't work. 20557246SericLOCAL_RELAY The site that will handle unqualified names -- that 20657246Seric is, names with out an @domain extension. If not set, 20757246Seric they are assumed to belong on this machine. This 20857246Seric allows you to have a central site to store a 20957246Seric company- or department-wide alias database. This 21057246Seric only works at small sites, and there are better 211*64028Seric methods. 21257246Seric 213*64028SericEach of these can be either ``mailer:hostname'' (in which case the 214*64028Sericmailer is the internal mailer name, such as ``suucp'' and the hostname 215*64028Sericis the name of the host as appropriate for that mailer) or just a 216*64028Seric``hostname'', in which case a default mailer type (usually ``relay'', 217*64028Serica variant on SMTP) is used. 218*64028Seric 21957246SericThe domain file can also be used to define a domain name, if needed 22057982Seric(using "DD<domain>") and set certain site-wide features. If all hosts 22157982Sericat your site masquerade behind one email name, you could also use 22257982SericMASQUERADE_AS here. 22357246Seric 22458408SericYou do not have to define a domain -- in particular, if you are a 22558408Sericsingle machine sitting off somewhere, it is probably more work than 22658408Sericit's worth. This is just a mechanism for combining "domain dependent 22758408Sericknowledge" into one place. 22858408Seric 22957246Seric+---------+ 23057246Seric| MAILERS | 23157246Seric+---------+ 23257246Seric 23351220SericThere are fewer mailers supported in this version than the previous 23451220Sericversion, owing mostly to a simpler world. 23551220Seric 23651220Sericlocal The local and prog mailers. You will almost always 23751220Seric need these; the only exception is if you relay ALL 23857247Seric your mail to another site. This mailer is included 23957247Seric automatically. 24051220Seric 24151220Sericsmtp The Simple Mail Transport Protocol mailer. This does 24251220Seric not hide hosts behind a gateway or another other 24351220Seric such hack; it assumes a world where everyone is 24463761Seric running the name server. This file actually defines 24563761Seric three mailers: "smtp" for regular (old-style) SMTP to 24663761Seric other servers, "esmtp" for extended SMTP to other 24763761Seric servers, and "relay" for transmission to our 24863761Seric RELAY_HOST or MAILER_HUB. 24951220Seric 25051220Sericuucp The Unix-to-Unix Copy Program mailer. Actually, this 25151220Seric defines two mailers, "uucp" and "suucp". The latter 25251220Seric is for when you know that the UUCP mailer at the other 25351220Seric end can handle multiple recipients in one transfer. 25457246Seric When you invoke this, sendmail looks for all names in 25557246Seric the $=U class and sends them to the uucp mailer; all 25657246Seric names in the $=Y class are sent to suucp. Note that 25757246Seric this is a function of what version of rmail runs on 25857246Seric the receiving end, and hence may be out of your control. 25963857Seric If smtp is defined, it also defines a "uucp-dom" mailer 26063857Seric that uses domain-style rewriting. 26151220Seric 26258087Sericusenet Usenet (network news) delivery. If this is specified, 26358087Seric an extra rule is added to ruleset 0 that forwards all 26458087Seric local email for users named ``group.usenet'' to the 26558087Seric ``inews'' program. Note that this works for all groups, 26658087Seric and may be considered a security problem. 26758087Seric 26858363Sericfax Facsimile transmission. This is experimental and based 26958363Seric on Sam Leffler's FlexFAX software. For more information, 27058363Seric see below. 27158087Seric 27258363Seric 27357246Seric+----------+ 27457246Seric| FEATURES | 27557246Seric+----------+ 27651268Seric 27757246SericSpecial features can be requested using the "FEATURE" macro. For 27857246Sericexample, the .mc line: 27957246Seric 28057246Seric FEATURE(use_cw_file) 28157246Seric 28257246Serictells sendmail that you want to have it read an /etc/sendmail.cw 28358782Sericfile to get values for class $=w. The FEATURE may contain a single 28458782Sericoptional parameter -- for example: 28557246Seric 28658782Seric FEATURE(mailertable, dbm /usr/lib/mailertable) 28758782Seric 28858782SericAvailable features are: 28958782Seric 29057246Sericuse_cw_file Read the file /etc/sendmail.cw file to get alternate 29157246Seric names for this host. This might be used if you were 29257246Seric on a host that MXed for a dynamic set of other 29357246Seric hosts. If the set is static, just including the line 29457246Seric "Cw<name1> <name2> ..." is probably superior. 29558408Seric The actual filename can be overridden by redefining 29658408Seric confCW_FILE. 29758087Sericredirect Reject all mail addressed to "address.REDIRECT" with 29858087Seric a ``551 User not local; please try <address>'' message. 29958087Seric If this is set, you can alias people who have left 30058087Seric to their new address with ".REDIRECT" appended. 30158284Sericnouucp Don't do anything special with UUCP addresses at all. 30259080Sericnocanonify Don't pass addresses to $[ ... $] for canonification. 30359080Seric This would generally only be used by sites that only 30459080Seric act as mail gateways or which have user agents that do 305*64028Seric full canonification themselves. You may also want to 306*64028Seric use "define(`confBIND_OPTS',`-DNSRCH -DEFNAMES')" to 307*64028Seric turn off the usual resolver options that do a similar 308*64028Seric thing. 30958526Sericnotsticky By default, email sent to "user@local.host" are marked 31058526Seric as "sticky" -- that is, the local addresses aren't 31158526Seric matched against UDB and don't go through ruleset 5. 31258526Seric This features disables this treatment. It would 31358526Seric normally be used on network gateway machines. 31458782Sericmailertable Include a "mailer table" which can be used to override 31558782Seric routing for particular domains. The argument of the 31658782Seric FEATURE may be the key definition. If none is specified, 31758782Seric the definition used is: 31863761Seric hash /etc/mailertable -o 31963761Seric Keys in this database are fully qualified domain names 32063761Seric or partial domains preceded by a dot -- for example, 32163761Seric "vangogh.CS.Berkeley.EDU" or ".CS.Berkeley.EDU". 32263761Seric Values must be of the form: 32358782Seric mailer:domain 32463761Seric where "mailer" is the internal mailer name, and "domain" 32563761Seric is where to send the message. These maps are not 32663761Seric reflected into the message header. 32763761Sericdomaintable Include a "domain table" which can be used to provide 32863761Seric full domains on unqualified (single word) hosts. The 32963761Seric argument of the FEATURE may be the key definition. If 33063761Seric none is specified, the definition used is: 33163761Seric hash /etc/domaintable -o 33263761Seric The key in this table is the unqualified host name; the 33363761Seric value is the fully qualified domain. Anything in the 33463761Seric domaintable is reflected into headers; that is, this 33563761Seric is done in ruleset 3. 33659034Sericbitdomain Look up bitnet hosts in a table to try to turn them into 33759034Seric internet addresses. The table can be built using the 33859034Seric bitdomain program contributed by John Gardiner Meyers. 33959034Seric The argument of the FEATURE may be the key definition; if 34059034Seric none is specified, the definition used is: 34159034Seric hash /etc/bitdomain.db -o 34259034Seric Keys are the bitnet hostname; values are the corresponding 34359034Seric internet hostname. 34459037Sericuucpdomain Similar feature for UUCP hosts. The default map definition 34559037Seric is: 34659037Seric hash /etc/uudomain.db -o 34759037Seric At the moment there is no automagic tool to build this 34859037Seric database. 34960263Sericalways_add_domain 35060263Seric Include the local host domain even on locally delivered 35160263Seric mail. Normally it is not added unless it is already 35260263Seric present. 35363761Sericallmasquerade If masquerading is enabled (using MASQUERADE_AS), this 35463761Seric feature will cause recipient addresses to also masquerade 35563761Seric as being from the masquerade host. Normally they get 35663761Seric the local hostname. Although this may be right for 35763761Seric ordinary users, it can break local aliases. For example, 35863761Seric if you send to "localalias", the originating sendmail will 35963761Seric find that alias and send to all members, but send the 36063761Seric message with "To: localalias@masqueradehost". Since that 36163761Seric alias likely does not exist, replies will fail. Use this 36263761Seric feature ONLY if you can guarantee that the ENTIRE 36363761Seric namespace on your masquerade host supersets all the 36463761Seric local entries. 36557246Seric 36657246SericOther FEATUREs should be defined, but I was trying to keep these 36757246Sericconfig files fairly lean and mean. 36857246Seric 36958087Seric 37057246Seric+-------+ 37157246Seric| HACKS | 37257246Seric+-------+ 37357246Seric 37457246SericSome things just can't be called features. To make this clear, 37557247Sericthey go in the hack subdirectory and are referenced using the HACK 37657246Sericmacro. These will tend to be site-dependent. The release 37757246Sericincludes the Berkeley-dependent "cssubdomain" hack (that makes 37857246Sericsendmail accept local names in either Berkeley.EDU or CS.Berkeley.EDU; 37957246Sericthis is intended as a short-term aid while we move hosts into 38057246Sericsubdomains. 38157246Seric 38258087Seric 38357246Seric+--------------------+ 38457246Seric| SITE CONFIGURATION | 38557246Seric+--------------------+ 38657246Seric 38757246SericComplex sites will need more local configuration information, such as 38857246Sericlists of UUCP hosts they speak with directly. This can get a bit more 38957246Serictricky. For an example of a "complex" site, see cf/ucbvax.mc. 39057246Seric 39157246SericThe SITECONFIG macro allows you to indirectly reference site-dependent 39257246Sericconfiguration information stored in the siteconfig subdirectory. For 39357246Sericexample, the line 39457246Seric 39557246Seric SITECONFIG(uucp.ucbvax, ucbvax, U) 39657246Seric 39757246Sericreads the file uucp.ucbvax for local connection information. The 39857246Sericsecond parameter is the local name (in this case just "ucbvax" since 39957246Sericit is locally connected, and hence a UUCP hostname) and the name of 40057246Sericthe class in which to store the host information. Another SITECONFIG 40157246Sericline reads 40257246Seric 40357246Seric SITECONFIG(uucp.ucbarpa, ucbarpa.Berkeley.EDU, W) 40457246Seric 40557246SericThis says that the file uucp.ucbarpa contains the list of UUCP sites 40657246Sericconnected to ucbarpa.Berkeley.EDU. The $=W class will be used to 40757246Sericstore this list. [The machine ucbarpa is gone now, but I've left 40857246Sericthis out-of-date configuration file around to demonstrate how you 40957246Sericmight do this.] 41057246Seric 41157246SericThe siteconfig file (e.g., siteconfig/uucp.ucbvax.m4) contains nothing 41257246Sericmore than a sequence of SITE macros describing connectivity. For 41357246Sericexample: 41457246Seric 41557246Seric SITE(cnmat) 41657246Seric SITE(sgi olympus) 41757246Seric 41857246SericThe second example demonstrates that you can use two names on the 41957246Sericsame line; these are usually aliases for the same host (or are at 42057246Sericleast in the same company). 42157246Seric 42258087Seric 42357246Seric+-------------------+ 42457246Seric| TWEAKING RULESETS | 42557246Seric+-------------------+ 42657246Seric 42751268SericFor more complex configurations, you can define special rules. 42851268SericThe macro LOCAL_RULE_3 introduces rules that are used in canonicalizing 42951268Sericthe names. Any modifications made here are reflected in the header. 43051268Seric 43151268SericA common use is to convert old UUCP addreses to SMTP addresses using 43251268Sericthe UUCPSMTP macro. For example: 43351268Seric 43451268Seric LOCAL_RULE_3 43551268Seric UUCPSMTP(decvax, decvax.dec.com) 43651268Seric UUCPSMTP(research, research.att.com) 43751268Seric 43851268Sericwill cause addresses of the form "decvax!user" and "research!user" 43951268Sericto be converted to "user@decvax.dec.com" and "user@research.att.com" 44051268Sericrespectively. 44151268Seric 44257246SericThis could also be used to look hosts in a database map: 44357246Seric 44457246Seric LOCAL_RULE_3 44557246Seric R$* < @ $+ > $* $: $1 < @ $(hostmap $2 $) > $3 44657246Seric 44757246SericThis map would be defined in the LOCAL_CONFIG portion, as shown below. 44857246Seric 44951268SericSimilarly, LOCAL_RULE_0 can be used to introduce new parsing rules. 45051268SericFor example, new rules are needed to parse hostnames that you accept 45151309Sericvia MX records. For example, you might have: 45251268Seric 45351309Seric LOCAL_RULE_0 45451309Seric R$+ < @ cnmat.Berkeley.EDU > $#uucp $@ cnmat $: $1 45551309Seric 45651309SericYou would use this if you had installed an MX record for cnmat.Berkeley.EDU 45751309Sericpointing at this host; this rule catches the message and forwards it on 45851309Sericusing UUCP. 45951309Seric 46058681SericYou can also tweak rulesets 1 and 2 using LOCAL_RULE_1 and LOCAL_RULE_2. 46158681SericThese rulesets are normally empty. 46258681Seric 46357246SericA similar macro is LOCAL_CONFIG. This introduces lines added after the 46457246Sericboilerplate option setting but before rulesets, and can be used to 46557945Sericdeclare local database maps or whatever. For example: 46651268Seric 46757246Seric LOCAL_CONFIG 46857246Seric Khostmap hash /etc/hostmap.db 46957246Seric Kyplocal nis -m hosts.byname 47051220Seric 47158087Seric 47257246Seric+---------------------------+ 47357246Seric| MASQUERADING AND RELAYING | 47457246Seric+---------------------------+ 47557246Seric 47657246SericYou can have your host masquerade as another using 47757246Seric 47857246Seric MASQUERADE_AS(host.domain) 47957246Seric 48057246SericThis causes outgoing SMTP mail to be labelled as coming from the 48157246Sericindicated domain, rather than $j. One normally masquerades as one 48257246Sericof your own subdomains (for example, it's unlikely that I would 48357246Sericchoose to masquerade as an MIT site). 48457246Seric 48557246Sericthere are always users that need to be "exposed" -- that is, their 48657246Sericinternal site name should be displayed instead of the masquerade name. 48757246SericRoot is an example. You can add users to this list using 48857246Seric 48957246Seric EXPOSED_USER(usernames) 49057246Seric 49157246SericThis adds users to class E; you could also use something like 49257246Seric 49357246Seric FE/etc/sendmail.cE 49457246Seric 49557246SericYou can also arrange to relay all unqualified names (that is, names 49657246Sericwithout @host) to a relay host. For example, if you have a central 49757246Sericemail server, you might relay to that host so that users don't have 49857246Sericto have .forward files or aliases. You can do this using 49957246Seric 50058071Seric define(`LOCAL_RELAY', mailer:hostname) 50157246Seric 50258071SericThe ``mailer:'' can be omitted, in which case the mailer defaults to 50358071Seric"smtp". There are some user names that you don't want relayed, perhaps 50458071Sericbecause of local aliases. A common example is root, which may be 50558071Sericlocally aliased. You can add entries to this list using 50657246Seric 50757246Seric LOCAL_USER(usernames) 50857246Seric 50957246SericThis adds users to class L; you could also use something like 51057246Seric 51157246Seric FL/etc/sendmail.cL 51257246Seric 51357591SericIf you want all mail sent to a centralized hub, as for a shared 51457591Seric/var/spool/mail scheme, use 51557591Seric 51658071Seric define(`MAIL_HUB', mailer:hostname) 51757591Seric 51858071SericAgain, ``mailer:'' defaults to "smtp". If you define both LOCAL_RELAY 51958071Sericand MAIL_HUB, unqualified names and names in class L will be sent to 52058071Sericthe LOCAL_RELAY and other local names will be sent to MAIL_HUB. For 52158071Sericexample, if are on machine mastodon.CS.Berkeley.EDU, the following 52258071Sericcombinations of settings will have the indicated effects: 52357591Seric 52457591Sericemail sent to.... eric eric@mastodon.CS.Berkeley.EDU 52557591Seric 52657591SericLOCAL_RELAY set to mail.CS.Berkeley.EDU (delivered locally) 52757591Sericmail.CS.Berkeley.EDU 52857591Seric 52957591SericMAIL_HUB set to mammoth.CS.Berkeley.EDU mammoth.CS.Berkeley.EDU 53057591Sericmammoth.CS.Berkeley.EDU 53157591Seric 53257591SericBoth LOCAL_RELAY and mail.CS.Berkeley.EDU mammoth.CS.Berkeley.EDU 53357591SericMAIL_HUB set as above 53457591Seric 53558071Seric 53658071Seric+-------------------------------+ 53758071Seric| NON-SMTP BASED CONFIGURATIONS | 53858071Seric+-------------------------------+ 53958071Seric 54058071SericThese configuration files are designed primarily for use by SMTP-based 54158071Sericsites. I don't pretend that they are well tuned for UUCP-only or 54258071SericUUCP-primarily nodes (the latter is defined as a small local net 54358071Sericconnected to the rest of the world via UUCP). However, there is one 54458071Serichook to handle some special cases. 54558071Seric 54658071SericYou can define a ``smart host'' that understands a richer address syntax 54758071Sericusing: 54858071Seric 54958071Seric define(`SMART_HOST', mailer:hostname) 55058071Seric 551*64028SericIn this case, the ``mailer:'' defaults to "relay". Any messages that 55258071Sericcan't be handled using the usual UUCP rules are passed to this host. 55358071Seric 55458071SericIf you are on a local SMTP-based net that connects to the outside 55558071Sericworld via UUCP, you can use LOCAL_NET_CONFIG to add appropriate rules. 55658071SericFor example: 55758071Seric 55858071Seric define(`SMART_HOST', suucp:uunet) 55958071Seric LOCAL_NET_CONFIG 56063761Seric R$* < @ $* .$m. > $* $#smtp $@ $2.$m. $: $1 < @ $2.$m. > $3 56158071Seric 56258071SericThis will cause all names that end in your domain name ($m) via 56358071SericSMTP; anything else will be sent via suucp (smart UUCP) to uunet. 56463761SericIf you have FEATURE(nocanonify), you may need to omit the dots after 56563761Sericthe $m. If you are running a local DNS inside your domain which is 56663761Sericnot otherwise connected to the outside world, you probably want to 56763761Sericuse: 56858071Seric 56963761Seric define(`SMART_HOST', smtp:fire.wall.com) 57063761Seric LOCAL_NET_CONFIG 57163761Seric R$* < @ $* . > $* $#smtp $@ $2. $: $1 < @ $2. > $3 57258071Seric 57363761SericThat is, send directly only to things you found in your DNS lookup; 57463761Sericanything else goes through SMART_HOST. 57563761Seric 57663761Seric 577*64028Seric+--------------------+ 578*64028Seric| USING MAILERTABLES | 579*64028Seric+--------------------+ 580*64028Seric 581*64028SericTo use FEATURE(mailertable), you will have to create an external 582*64028Sericdatabase containing the routing information for various domains. 583*64028SericFor example, a mailertable file in text format might be: 584*64028Seric 585*64028Seric .my.domain xnet:%1.my.domain 586*64028Seric uuhost1.my.domain suucp:uuhost1 587*64028Seric .bitnet smtp:relay.bit.net 588*64028Seric 589*64028SericThis should normally be stored in /etc/mailertable. The actual 590*64028Sericdatabase version of the mailertable is built using: 591*64028Seric 592*64028Seric makemap hash /etc/mailertable.db < /etc/mailertable 593*64028Seric 594*64028SericThe semantics are simple. Any LHS entry that does not begin with 595*64028Serica dot matches the full host name indicated. LHS entries beginning 596*64028Sericwith a dot match anything ending with that domain name -- that is, 597*64028Sericthey can be thought of as having a leading "*" wildcard. Matching 598*64028Sericis done in order of most-to-least qualified -- for example, even 599*64028Sericthough ".my.domain" is listed first in the above example, an entry 600*64028Sericof "uuhost1.my.domain" will match the second entry since it is 601*64028Sericmore explicit. 602*64028Seric 603*64028SericThe RHS should always be a "mailer:host" pair. The mailer is the 604*64028Sericconfiguration name of a mailer (that is, an `M' line in the 605*64028Sericsendmail.cf file). The "host" will be the hostname passed to 606*64028Sericthat mailer. In domain-based matches (that is, those with leading 607*64028Sericdots) the "%1" may be used to interpolate the wildcarded part of 608*64028Sericthe host name. For example, the first line above sends everything 609*64028Sericaddressed to "anything.my.domain" to that same host name, but using 610*64028Sericthe (presumably experimental) xnet mailer. 611*64028Seric 612*64028Seric 61358363Seric+------------------+ 61458363Seric| FlexFAX SOFTWARE | 61558363Seric+------------------+ 61658363Seric 61758363SericSam Leffler's FlexFAX software is still in beta test -- but he expects a 61858363Sericpublic version out "later this week" [as of 3/1/93]. The following 61958363Sericblurb is direct from Sam: 62058363Seric 62158363Seric $Header: /usr/people/sam/fax/RCS/HOWTO,v 1.7 93/02/08 09:00:55 sam Exp $ 62258363Seric 62358363Seric How To Obtain This Software (in case all you get is this file) 62458363Seric 62558363Seric The source code is available for public ftp on 62658363Seric sgi.com sgi/fax/v2.1beta.tar.Z 62758363Seric (192.48.153.1) 62858363Seric 62958363Seric You can also obtain inst'able images for Silicon Graphics machines from 63058363Seric sgi.com sgi/fax/v2.1beta.inst.tar 63158363Seric (192.48.153.1) 63258363Seric 63358363Seric For example, 63458363Seric % ftp -n sgi.com 63558363Seric .... 63658363Seric ftp> user anonymous 63758363Seric ... <type in password> 63858363Seric ftp> cd sgi/fax 63958363Seric ftp> binary 64058363Seric ftp> get v2.1beta.tar.Z 64158363Seric 64258363Seric If you cannot use FTP at all, there is a service called "ftpmail" 64358363Seric available from gateekeeper.dec.com: you can send e-mail to this 64458363Seric machine and it will use FTP to retrieve files for you and send you the 64558363Seric files back again via e-mail. To find out more about the ftpmail 64658363Seric service, send a message to "ftpmail@gatekeeper.dec.com" whose body 64758363Seric consists of the single line "help". 64858363Seric 64958363Seric Internal to Silicon Graphics there are inst'able images on the host 65058363Seric flake.asd in the directory /d/dist. Thus you can do something like: 65158363Seric 65258363Seric % inst -f flake.asd.sgi.com:/d/dist/flexfax 65358363Seric 65458363Seric to install the software on your machine. 65558363Seric 65658363Seric The external distributions come in a compressed or uncompressed tar 65758363Seric file. To extract the source distribution: 65858363Seric 65958363Seric % zcat v2.1beta.tar.Z | tar xf - 66058363Seric 66158363Seric (uncompress and extract individual files in current directory). To 66258363Seric unpack and install the client portion of the inst'able distribution: 66358363Seric 66458363Seric % mkdir dist 66558363Seric % cd dist; tar xf ../v2.1beta.inst.tar; cd .. 66658363Seric % inst -f dist/flexfax 66758363Seric ... 66858363Seric inst> go 66958363Seric 67058363Seric (Note, the dist subdirectory is because some versions of inst fail if 67158363Seric the files are in the current directory.) Server binaries is also 67258363Seric included in the inst'able images as flexfax.server.*. It is not 67358363Seric installed by default, so to get it also you need to extract the do: 67458363Seric 67558363Seric % inst -f flexfax 67658363Seric ... 67758363Seric inst> install flexfax.server.* 67858363Seric inst> go 67958363Seric 68058363Seric The SGI binaries were built for Version 4.0.5 of the IRIX operating 68158363Seric system. They should work w/o problem on earlier versions of the 68258363Seric system, but I have not fully tested this. Also, note that to install a 68358363Seric server on an SGI machine, you need to have installed the Display 68458363Seric PostScript execution environment product (dps_eoe). Otherwise, the fax 68558363Seric server will not be able to convert PostScript to facsimile for 68658363Seric transmission. 68758363Seric 68858363Seric If you are working from the source distribution, look at the file README 68958363Seric in the top of the source tree. If you are working from the inst images, 69058363Seric you need to run faxaddmodem to setup and configure your fax modem. Do 69158363Seric man faxaddmodem for more information. 69258363Seric 69358363SericAlso from Sam: 69458363Seric 69558363Seric A mailing list for users of this software is located on sgi.com. 69658363Seric If you want to join this mailing list or have a list-related request 69758363Seric such as getting your name removed from it, send a request to 69858363Seric 69958363Seric flexfax-request@sgi.com 70058363Seric 70158363Seric Submissions (including bug reports) should be directed to: 70258363Seric 70358363Seric flexfax@sgi.com 70458363Seric 70558363Seric 70657945Seric+--------------------------------+ 70757945Seric| TWEAKING CONFIGURATION OPTIONS | 70857945Seric+--------------------------------+ 70957945Seric 71057945SericThere are a large number of configuration options that don't normally 71157945Sericneed to be changed. However, if you feel you need to tweak them, you 71257945Sericcan define the following M4 variables. This list is shown in four 71357945Sericcolumns: the name you define, the default value for that definition, 71457945Sericthe option or macro that is affected (either Ox for an option or Dx 71557945Sericfor a macro), and a brief description. Greater detail of the semantics 71657945Sericcan be found in the Installation and Operations Guide. 71757945Seric 71863582SericSome options are likely to be deprecated in future versions -- that is, 71963582Sericthe option is only included to provide back-compatibility. These are 72063582Sericmarked with "*". 72163582Seric 72257945SericM4 Variable Name Default Mac/Opt Description 72357945SericconfMAILER_NAME MAILER-DAEMON Dn The sender name used for 72457945Seric internally generated 72557945Seric outgoing messages. 72658681SericconfFROM_LINE From $g $d Dl The From_ line used when 72758681Seric sending to files or programs. 72857945SericconfFROM_HEADER $?x$x <$g>$|$g$. The format of an internally 72957945Seric Dq generated From: address. 73057945SericconfOPERATORS .:%@!^/[] Do Address operator characters. 73157945SericconfSTMP_LOGIN_MSG $j Sendmail $v/$Z ready at $b 73257945Seric De The initial (spontaneous) 73357945Seric SMTP greeting message. 73459743SericconfSEVEN_BIT_INPUT False O7 Force input to seven bits? 73557945SericconfALIAS_WAIT 10 Oa Wait (in minutes) for alias 73657945Seric file rebuild. 73758087SericconfMIN_FREE_BLOCKS 4 Ob Minimum number of free blocks 73858087Seric on queue filesystem to accept 73958087Seric SMTP mail. 74057945SericconfBLANK_SUB . OB Blank (space) substitution 74157945Seric character. 74257945SericconfCON_EXPENSIVE False Oc Connect immediately to 74357945Seric mailers marked expensive? 74457945SericconfCHECKPOINT_INTERVAL 10 OC Checkpoint queue files 74557945Seric every N recipients. 74657945SericconfDELIVERY_MODE background Od Default delivery mode. 74757945SericconfAUTO_REBUILD False OD Automatically rebuild 74857945Seric alias file if needed. 74957945SericconfERROR_MODE (undefined) Oe Error message mode. 75057945SericconfERROR_MESSAGE (undefined) OE Error message header/file. 75157945SericconfSAVE_FROM_LINES False Of Save extra leading 75257945Seric From_ lines. 75357945SericconfTEMP_FILE_MODE 0600 OF Temporary file mode. 75457945SericconfDEF_GROUP_ID 1 Og Default group id. 75557945SericconfMATCH_GECOS False OG Match GECOS field. 75657945SericconfMAX_HOP 17 Oh Maximum hop count. 75763582SericconfIGNORE_DOTS False Oi * Ignore dot as terminator 75857945Seric for incoming messages? 75957945SericconfBIND_OPTS (empty) OI Default options for BIND. 76063582SericconfMIME_FORMAT_ERRORS True Oj * Send error messages as MIME- 76159743Seric encapsulated messages per 76259743Seric RFC 1344. 76357945SericconfMCI_CACHE_SIZE 2 Ok Size of open connection cache. 76457945SericconfMCI_CACHE_TIMEOUT 5m OK Open connection cache timeout. 76563582SericconfUSE_ERRORS_TO False Ol * Use the Errors-To: header to 76663582Seric deliver error messages. This 76763582Seric should not be necessary because 76863582Seric of general acceptance of the 76963582Seric envelope/header distinction. 77057945SericconfLOG_LEVEL 9 OL Log level. 77157945SericconfME_TOO False Om Include sender in group 77257945Seric expansions. 77357945SericconfCHECK_ALIASES True On Check RHS of aliases when 77457945Seric running newaliases. 77563582SericconfOLD_STYLE_HEADERS True Oo * Assume that headers without 77657945Seric special chars are old style. 77758859SericconfDAEMON_OPTIONS (undefined) OO SMTP daemon options. 77858806SericconfPRIVACY_FLAGS authwarnings Op Privacy flags. 77957945SericconfCOPY_ERRORS_TO (undefined) OP Address for additional copies 78057945Seric of all error messages. 78157945SericconfQUEUE_FACTOR (undefined) Oq Slope of queue-only function 78258116SericconfREAD_TIMEOUT (undefined) Or SMTP read timeouts. 78363582SericconfSAFE_QUEUE True Os * Commit all messages to disk 78457945Seric before forking. 78558806SericconfMESSAGE_TIMEOUT 5d/4h OT Timeout for messages before 78658806Seric sending error/warning message. 78759317SericconfTIME_ZONE USE_SYSTEM Ot Time zone info -- can be 78857945Seric USE_SYSTEM to use the system's 78957945Seric idea, USE_TZ to use the user's 79057945Seric TZ envariable, or something 79157945Seric else to force that value. 79257945SericconfDEF_USER_ID 1 Ou Default user id. 79358718SericconfUSERDB_SPEC (undefined) OU User database specification. 79458859SericconfFALLBACK_MX (undefined) OV Fallback MX host. 79563857SericconfTRY_NULL_MX_LIST False Ow If we are the best MX for a 79663857Seric host and haven't made other 79763857Seric arrangements, try connecting 79863857Seric to the host directly; normally 79963857Seric this would be a config error. 80057945SericconfQUEUE_LA 8 Ox Load average at which queue-only 80157945Seric function kicks in. 80257945SericconfREFUSE_LA 12 OX Load average at which incoming 80357945Seric SMTP connections are refused. 80463582SericconfWORK_RECIPIENT_FACTOR 80563582Seric (undefined) Oy Cost of each recipient. 80663582SericconfSEPARATE_PROC False OY Run all deliveries in a 80757945Seric separate process. 80857945SericconfWORK_CLASS_FACTOR (undefined) Oz Priority multiplier for class. 80957945SericconfWORK_TIME_FACTOR (undefined) OZ Cost of each delivery attempt. 81058408SericconfCW_FILE /etc/sendmail.cw Name of file used to get the 81158408Seric Fw local additions to the $=w 81258408Seric class. 81363972SericconfSMTP_MAILER esmtp - The mailer name used when 81463972Seric SMTP connectivity is required. 81563972Seric Either "smtp" or "esmtp". 81663999SericconfLOCAL_MAILER local - The mailer name used when 81763999Seric local connectivity is required. 81863999Seric Almost always "local". 819*64028SericconfRELAY_MAILER relay - The default mailer name used 820*64028Seric for relaying any mail (e.g., 821*64028Seric to a BITNET_RELAY, a 822*64028Seric SMART_HOST, or whatever). 823*64028Seric This can reasonably be "suucp" 824*64028Seric if you are on a UUCP-connected 825*64028Seric site. 82657945Seric 82758087Seric 82857246Seric+-----------+ 82957246Seric| HIERARCHY | 83057246Seric+-----------+ 83157246Seric 83251220SericWithin this directory are several subdirectories, to wit: 83351220Seric 83451220Sericm4 General support routines. These are typically 83551220Seric very important and should not be changed without 83657247Seric very careful consideration. 83751220Seric 83851220Sericcf The configuration files themselves. They have 83951220Seric ".mc" suffixes, and must be run through m4 to 84051220Seric become complete. The resulting output should 84151220Seric have a ".cf" suffix. 84251220Seric 84351220Sericostype Definitions describing a particular operating 84451220Seric system type. These should always be referenced 84551220Seric using the OSTYPE macro in the .mc file. Examples 84651220Seric include "bsd4.3", "bsd4.4", "sunos3.5", and 84751220Seric "sunos4.1". 84851220Seric 84951220Sericdomain Definitions describing a particular domain, referenced 85051220Seric using the DOMAIN macro in the .mc file. These are 85151220Seric site dependent; for example, we contribute "cs.exposed.m4" 85251220Seric and "cs.hidden.m4" which both describe hosts in the 85351220Seric CS.Berkeley.EDU subdomain; the former displays the local 85451220Seric hostname (e.g., mammoth.CS.Berkeley.EDU), whereas the 85551220Seric latter does its best to hide the identity of the local 85651220Seric workstation inside the CS subdomain. 85751220Seric 85851220Sericmailer Descriptions of mailers. These are referenced using 85951220Seric the MAILER macro in the .mc file. 86051220Seric 86151220Sericsh Shell files used when building the .cf file from the 86251220Seric .mc file in the cf subdirectory. 86351220Seric 86451220Sericfeature These hold special orthogonal features that you might 86551220Seric want to include. They should be referenced using 86651220Seric the FEATURE macro. 86751220Seric 86851220Serichack Local hacks. These can be referenced using the HACK 86951220Seric macro. They shouldn't be of more than voyeuristic 87051220Seric interest outside the .Berkeley.EDU domain, but who knows? 87151220Seric We've all got our own peccadilloes. 87251220Seric 87351268Sericsiteconfig Site configuration -- e.g., tables of locally connected 87451268Seric UUCP sites. 87551220Seric 87651268Seric 87757246Seric+------------------------+ 87857246Seric| ADMINISTRATIVE DETAILS | 87957246Seric+------------------------+ 88051220Seric 88151220SericThe following sections detail usage of certain internal parts of the 88251220Sericsendmail.cf file. Read them carefully if you are trying to modify 88351220Sericthe current model. If you find the above descriptions adequate, these 88451220Sericshould be {boring, confusing, tedious, ridiculous} (pick one or more). 88551220Seric 88651220SericRULESETS (* means built in to sendmail) 88751220Seric 88851220Seric 0 * Parsing 88951220Seric 1 * Sender rewriting 89051220Seric 2 * Recipient rewriting 89151220Seric 3 * Canonicalization 89251220Seric 4 * Post cleanup 89354839Seric 5 * Local address rewrite (after aliasing) 89460539Seric 1x mailer rules (sender qualification) 89560539Seric 2x mailer rules (recipient qualification) 89660539Seric 90 Mailertable host stripping 89760892Seric 96 Bottom half of Ruleset 3 (ruleset 6 in old sendmail) 89860892Seric 97 Hook for recursive ruleset 0 call (ruleset 7 in old sendmail) 89963857Seric 98 Local part of ruleset 0 (ruleset 8 in old sendmail) 90051220Seric 90151220Seric 90251220SericMAILERS 90351220Seric 90451220Seric 0 local, prog local and program mailers 90551220Seric 1 smtp SMTP channel 90658087Seric 2 uucp UNIX-to-UNIX Copy Program 90758087Seric 3 netnews Network News delivery 90858363Seric 4 fax Sam Leffler's FlexFAX software 90951220Seric 91051220Seric 91151220SericMACROS 91251220Seric 91351220Seric A 91451220Seric B Bitnet Relay 91551220Seric C CSNET Relay 91654839Seric D The local domain -- usually not needed 91751220Seric E 91858363Seric F FAX Relay 91951220Seric G 92057591Seric H mail Hub (for mail clusters) 92151220Seric I 92251220Seric J 92351220Seric K 92451220Seric L 92551220Seric M Masquerade (who I claim to be) 92651220Seric N 92751220Seric O 92851220Seric P 92951220Seric Q 93051220Seric R Relay (for unqualified names) 93158071Seric S Smart Host 93251220Seric T 93351309Seric U my UUCP name (if I have a UUCP connection) 93451309Seric V UUCP Relay (class V hosts) 93551220Seric W UUCP Relay (class W hosts) 93651220Seric X UUCP Relay (class X hosts) 93751309Seric Y UUCP Relay (all other hosts) 93851220Seric Z Version number 93951220Seric 94051220Seric 94151220SericCLASSES 94251220Seric 94351220Seric A 94451220Seric B 94551220Seric C 94651220Seric D 94757246Seric E addresses that should not seem to come from $M 94854839Seric F hosts we forward for 94951220Seric G 95051220Seric H 95151220Seric I 95251220Seric J 95351220Seric K 95451220Seric L addresses that should not be forwarded to $R 95551220Seric M 95651220Seric N 95751220Seric O operators that indicate network operations (cannot be in local names) 95860211Seric P top level pseudo-domains: BITNET, FAX, UUCP, etc. 95951220Seric Q 96051220Seric R 96151220Seric S 96251220Seric T 96351220Seric U locally connected UUCP hosts 96451309Seric V UUCP hosts connected to relay $V 96551309Seric W UUCP hosts connected to relay $W 96651309Seric X UUCP hosts connected to relay $X 96751309Seric Y locally connected smart UUCP hosts 96851220Seric Z 96954839Seric . the class containing only a dot 97051220Seric 97151220Seric 97251220SericM4 DIVERSIONS 97351220Seric 97458071Seric 1 Local host detection and resolution 97558071Seric 2 Local Ruleset 3 additions 97658071Seric 3 Local Ruleset 0 additions 97751268Seric 4 UUCP Ruleset 0 additions 97851309Seric 5 locally interpreted names (overrides $R) 97954839Seric 6 local configuration (at top of file) 98051220Seric 7 mailer definitions 98154839Seric 8 special local name recognition (late in ruleset 3) 98258681Seric 9 special local rulesets (1 and 2) 983