151220Seric 251220Seric 357246Seric NEW SENDMAIL CONFIGURATION FILES 451220Seric 557246Seric Eric Allman <eric@CS.Berkeley.EDU> 651220Seric 7*68057Seric @(#)README 8.43 (Berkeley) 12/06/94 851220Seric 951220Seric 1057246SericThis document describes the sendmail configuration files being used 1167469Sericat Berkeley. These use features in the new (R8) sendmail; they will 1267469Sericnot work on other versions. 1351220Seric 1457246SericThese configuration files are probably not as general as previous 1565957Sericversions, and don't handle as many of the weird cases automagically. 1657246SericI was able to simplify by them for two reasons. First, the network 1757246Serichas become more consistent -- for example, at this point, everyone 1857246Sericon the internet is supposed to be running a name server, so hacks to 1957246Serichandle NIC-registered hosts can go away. Second, I assumed that a 2057246Sericsubdomain would be running SMTP internally -- UUCP is presumed to be 2157246Serica long-haul protocol. I realize that this is not universal, but it 2257246Sericdoes describe the vast majority of sites with which I am familiar, 2357246Sericincluding those outside the US. 2451220Seric 2565957SericOf course, the downside of this is that if you do live in a weird 2665957Sericworld, things are going to get weirder for you. I'm sorry about that, 2757246Sericbut at the time we at Berkeley had a problem, and it seemed like the 2857246Sericright thing to do. 2951220Seric 3057247SericThis package requires a post-V7 version of m4; if you are running the 3157247Seric4.2bsd, SysV.2, or 7th Edition version, I suggest finding a friend with 3257247Serica newer version. You can m4-expand on their system, then run locally. 3365002SericSunOS's /usr/5bin/m4 or BSD-Net/2's m4 both work. GNU m4 version 1.1 3465002Sericalso works. Unfortunately, I'm told that the M4 on BSDI 1.0 doesn't 3565002Sericwork -- you'll have to use a Net/2 or GNU version. 3651220Seric 3758284SericIF YOU DON'T HAVE A BERKELEY MAKE, don't despair! Just run 3864371Seric"m4 foo.mc > foo.cf" -- that should be all you need. There is also 3964371Serica fairly crude (but functional) Makefile.dist that works on the 4064371Sericold version of make. 4158284Seric 4258284SericTo get started, you may want to look at tcpproto.mc (for TCP-only 4364324Sericsites), uucpproto.mc (for UUCP-only sites), and clientproto.mc (for 4464324Sericclusters of clients using a single mail host). Others are versions 4558284Sericthat we use at Berkeley, although not all are in current use. For 4658284Sericexample, ucbarpa has gone away, but I've left ucbarpa.mc in because 4758284Sericit demonstrates some interesting techniques. 4858284Seric 4957246SericI'm not pretending that this README describes everything that these 5057246Sericconfiguration files can do; clever people can probably tweak them 5157246Sericto great effect. But it should get you started. 5257246Seric 5365509Seric******************************************************************* 5465509Seric*** BE SURE YOU CUSTOMIZE THESE FILES! They have some *** 5565509Seric*** Berkeley-specific assumptions built in, such as the name *** 5665509Seric*** of our UUCP-relay. You'll want to create your own domain *** 5765509Seric*** description, and use that in place of domain/Berkeley.m4. *** 5865509Seric******************************************************************* 5958087Seric 6065509Seric 6157246Seric+--------------------------+ 6257246Seric| INTRODUCTION AND EXAMPLE | 6357246Seric+--------------------------+ 6457246Seric 6557246SericConfiguration files are contained in the subdirectory "cf", with a 6657246Sericsuffix ".mc". They must be run through "m4" to produce a ".cf" file. 6757246Seric 6851220SericLet's examine a typical .mc file (cf/cs-exposed.mc): 6951220Seric 7051220Seric divert(-1) 7151220Seric # 7251220Seric # Copyright (c) 1983 Eric P. Allman 7351220Seric # Copyright (c) 1988 The Regents of the University of California. 7451220Seric # All rights reserved. 7551220Seric # 7651220Seric # Redistribution and use in source and binary forms are permitted 7751220Seric # provided that the above copyright notice and this paragraph are 7851220Seric # duplicated in all such forms and that any documentation, 7951220Seric # advertising materials, and other materials related to such 8051220Seric # distribution and use acknowledge that the software was developed 8151220Seric # by the University of California, Berkeley. The name of the 8251220Seric # University may not be used to endorse or promote products derived 8351220Seric # from this software without specific prior written permission. 8451220Seric # THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR 8551220Seric # IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED 8651220Seric # WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR A PARTICULAR PURPOSE. 8751220Seric # 8851220Seric 8957246SericThe divert(-1) will delete the crud in the resulting output file. 9057247SericThe copyright notice is what your lawyers require. Our lawyers require 9157246Sericthe one that I've included in my files. A copyleft is a copyright by 9257246Sericanother name. 9351220Seric 9457246SericThe next line MUST be 9557246Seric 9651220Seric include(`../m4/cf.m4') 9751220Seric 9857246SericThis will pull in the M4 macros you will need to make sense of 9957246Sericeverything else. As the saying goes, don't think about it, just 10057246Sericdo it. If you don't do it, don't bother reading the rest of this 10157246Sericfile. 10251220Seric 10356778Seric VERSIONID(`<SCCS or RCS version id>') 10451220Seric 10551220SericVERSIONID is a macro that stuffs the version information into the 10651220Sericresulting file. We use SCCS; you could use RCS, something else, or 10757246Sericomit it completely. This is not the same as the version id included 10857246Sericin SMTP greeting messages -- this is defined in m4/version.m4. 10951220Seric 11051268Seric DOMAIN(cs.exposed) 11151220Seric 11251220SericThis example exposes the host inside of the CS subdomain -- that is, 11351220Sericit doesn't try to hide the name of the workstation to the outside 11451220Sericworld. Changing this to DOMAIN(cs.hidden) would have made outgoing 11551220Sericmessages refer to "<username>@CS.Berkeley.EDU" instead of using the 11663857Sericlocal hostname. Internally this is effected by using 11757246Seric"MASQUERADE_AS(CS.Berkeley.EDU)". 11851220Seric 11951268Seric MAILER(smtp) 12051220Seric 12151309SericThese describe the mailers used at the default CS site site. The 12251309Sericlocal mailer is always included automatically. 12351220Seric 12458087Seric 12557246Seric+--------+ 12657246Seric| OSTYPE | 12757246Seric+--------+ 12857246Seric 12951220SericNote that cf/cs-exposed.mc omits an OSTYPE macro -- this assumes 13051220Sericdefault Computer Science Division environment. There are several 13157247Sericexplicit environments available: bsd4.3, bsd4.4, hpux, irix, osf1, 13257247Sericriscos4.5, sunos3.5, sunos4.1, and ultrix4.1. These change things 13357247Sericlike the location of the alias file and queue directory. Some of 13457247Sericthese files are identical to one another. 13551220Seric 13657246SericOperating system definitions are easy to write. They may define 13757246Sericthe following variables (everything defaults, so an ostype file 13857246Sericmay be empty). 13951220Seric 14057246SericALIAS_FILE [/etc/aliases] The location of the text version 14159761Seric of the alias file(s). It can be a comma-separated 14266790Seric list of names (but be sure you quote values with 14366790Seric comments in them -- for example, use 14466790Seric define(`ALIAS_FILE', `a,b') 14566790Seric to get "a" and "b" both listed as alias files; 14666790Seric otherwise the define() primitive only sees "a"). 14757246SericHELP_FILE [/usr/lib/sendmail.hf] The name of the file 14857246Seric containing information printed in response to 14957246Seric the SMTP HELP command. 15057246SericQUEUE_DIR [/var/spool/mqueue] The directory containing 15157246Seric queue files. 15257246SericSTATUS_FILE [/etc/sendmail.st] The file containing status 15357246Seric information. 15458087SericLOCAL_MAILER_PATH [/bin/mail] The program used to deliver local mail. 15564153SericLOCAL_MAILER_FLAGS [rmn] The flags used by the local mailer. The 15664153Seric flags lsDFM are always included. 15763761SericLOCAL_MAILER_ARGS [mail -d $u] The arguments passed to deliver local 15863761Seric mail. 15958087SericLOCAL_SHELL_PATH [/bin/sh] The shell used to deliver piped email. 16063791SericLOCAL_SHELL_FLAGS [eu] The flags used by the shell mailer. The 16163791Seric flags lsDFM are always included. 16263791SericLOCAL_SHELL_ARGS [sh -c $u] The arguments passed to deliver "prog" 16363791Seric mail. 16467989SericLOCAL_SHELL_DIR [$z:/] The directory search path in which the 16567989Seric shell should run. 16658087SericUSENET_MAILER_PATH [/usr/lib/news/inews] The name of the program 16758087Seric used to submit news. 16858087SericUSENET_MAILER_FLAGS [rlsDFMmn] The mailer flags for the usenet mailer. 16958087SericUSENET_MAILER_ARGS [-m -h -n] The command line arguments for the 17058087Seric usenet mailer. 17165911SericUSENET_MAILER_MAX [100000] The maximum size of messages that will 17265911Seric be accepted by the usenet mailer. 17363857SericSMTP_MAILER_FLAGS [undefined] Flags added to SMTP mailer. Default 17467915Seric flags are `mDFMUX' for all SMTP-based mailers; the 17567915Seric "esmtp" mailer adds `a' and "smtp8" adds `8'. 17665911SericSMTP_MAILER_MAX [undefined] The maximum size of messages that will 17767915Seric be transported using the smtp, smtp8, or esmtp 17867915Seric mailers. 17967915SericSMTP_MAILER_ARGS [IPC $h] The arguments passed to the smtp mailer. 18067915Seric About the only reason you would want to change this 18167915Seric would be to change the default port. 18267915SericESMTP_MAILER_ARGS [IPC $h] The arguments passed to the esmtp mailer. 18367915SericSMTP8_MAILER_ARGS [IPC $h] The arguments passed to the smtp8 mailer. 18467915SericRELAY_MAILER_ARGS [IPC $h] The arguments passed to the relay mailer. 18563857SericUUCP_MAILER_FLAGS [undefined] Flags added to UUCP mailer. Default 18663857Seric flags are `DFMhuU' (and `m' for suucp mailer, minus 18763857Seric `U' for uucp-dom mailer). 188*68057SericUUCP_MAILER_ARGS [uux - -r -z -a$g -gC $h!rmail ($u)] The arguments 18963761Seric passed to the UUCP mailer. 19063791SericUUCP_MAX_SIZE [100000] The maximum size message accepted for 19163791Seric transmission by the UUCP mailers. 19265911SericFAX_MAILER_PATH [/usr/local/lib/fax/mailfax] The program used to 19365911Seric submit FAX messages. 19465911SericFAX_MAILER_MAX [100000] The maximum size message accepted for 19565911Seric transmission by FAX. 19667934SericPOP_MAILER_PATH [/usr/lib/mh/spop] The pathname of the POP mailer. 19767934SericPOP_MAILER_FLAGS [Penu] Flags added to POP mailer. Flags "lsDFM" 19867934Seric are always added. 19967934SericPOP_MAILER_ARGS [pop $u] The arguments passed to the POP mailer. 20067942SericPROCMAIL_MAILER_FLAGS [Shu] Flags added to Procmail mailer. Flags 20167942Seric ``DFMmn'' are always set. 20267942SericPROCMAIL_MAILER_ARGS [procmail -m $h $f $u] The arguments passed to 20367942Seric the Procmail mailer. 20457246Seric 20557246Seric+---------+ 20657246Seric| DOMAINS | 20757246Seric+---------+ 20857246Seric 20957246SericYou will probably want to collect domain-dependent defines into one 21057246Sericfile, referenced by the DOMAIN macro. For example, our Berkeley 21157246Sericdomain file includes definitions for several internal distinguished 21257246Serichosts: 21357246Seric 21457246SericUUCP_RELAY The host that will forward UUCP-addressed email. 21557246Seric If not defined, all UUCP sites must be directly 21664028Seric connected. 21757246SericBITNET_RELAY The host that will forward BITNET-addressed email. 21857246Seric If not defined, the .BITNET pseudo-domain won't work. 21957246SericLOCAL_RELAY The site that will handle unqualified names -- that 22057246Seric is, names with out an @domain extension. If not set, 22157246Seric they are assumed to belong on this machine. This 22257246Seric allows you to have a central site to store a 22357246Seric company- or department-wide alias database. This 22457246Seric only works at small sites, and there are better 22564028Seric methods. 22667915SericLUSER_RELAY The site that will handle lusers -- that is, apparently 22767915Seric local names that aren't local accounts or aliases. 22857246Seric 22967915SericAny of these can be either ``mailer:hostname'' (in which case the 23064028Sericmailer is the internal mailer name, such as ``suucp'' and the hostname 23164028Sericis the name of the host as appropriate for that mailer) or just a 23264028Seric``hostname'', in which case a default mailer type (usually ``relay'', 23364153Serica variant on SMTP) is used. WARNING: if you have a wildcard MX 23464153Sericrecord matching your domain, you probably want to define these to 23564153Serichave a trailing dot so that you won't get the mail diverted back 23664153Sericto yourself. 23764028Seric 23857246SericThe domain file can also be used to define a domain name, if needed 23957982Seric(using "DD<domain>") and set certain site-wide features. If all hosts 24057982Sericat your site masquerade behind one email name, you could also use 24157982SericMASQUERADE_AS here. 24257246Seric 24358408SericYou do not have to define a domain -- in particular, if you are a 24458408Sericsingle machine sitting off somewhere, it is probably more work than 24558408Sericit's worth. This is just a mechanism for combining "domain dependent 24658408Sericknowledge" into one place. 24758408Seric 24857246Seric+---------+ 24957246Seric| MAILERS | 25057246Seric+---------+ 25157246Seric 25251220SericThere are fewer mailers supported in this version than the previous 25351220Sericversion, owing mostly to a simpler world. 25451220Seric 25551220Sericlocal The local and prog mailers. You will almost always 25651220Seric need these; the only exception is if you relay ALL 25757247Seric your mail to another site. This mailer is included 25857247Seric automatically. 25951220Seric 26051220Sericsmtp The Simple Mail Transport Protocol mailer. This does 26151220Seric not hide hosts behind a gateway or another other 26251220Seric such hack; it assumes a world where everyone is 26363761Seric running the name server. This file actually defines 26467915Seric four mailers: "smtp" for regular (old-style) SMTP to 26563761Seric other servers, "esmtp" for extended SMTP to other 26667915Seric servers, "smtp8" to do SMTP to other servers without 26767915Seric converting 8-bit data to MIME (essentially, this is 26867915Seric your statement that you know the other end is 8-bit 26967915Seric clean even if it doesn't say so), and "relay" for 27067915Seric transmission to our RELAY_HOST, LUSER_RELAY, or 27167915Seric MAILER_HUB. 27251220Seric 27351220Sericuucp The Unix-to-Unix Copy Program mailer. Actually, this 27467471Seric defines two mailers, "uucp-old" (a.k.a. "uucp") and 27567471Seric "uucp-new" (a.k.a. "suucp"). The latter is for when you 27667471Seric know that the UUCP mailer at the other end can handle 27767471Seric multiple recipients in one transfer. If the smtp mailer 27867471Seric is also included in your configuration, two other mailers 27967471Seric ("uucp-dom" and "uucp-uudom") are also defined. When you 28067471Seric include the uucp mailer, sendmail looks for all names in 28165218Seric the $=U class and sends them to the uucp-old mailer; all 28265218Seric names in the $=Y class are sent to uucp-new; and all 28365218Seric names in the $=Z class are sent to uucp-uudom. Note that 28457246Seric this is a function of what version of rmail runs on 28557246Seric the receiving end, and hence may be out of your control. 28665218Seric See the section below describing UUCP mailers in more 28765218Seric detail. 28851220Seric 28958087Sericusenet Usenet (network news) delivery. If this is specified, 29058087Seric an extra rule is added to ruleset 0 that forwards all 29158087Seric local email for users named ``group.usenet'' to the 29258087Seric ``inews'' program. Note that this works for all groups, 29358087Seric and may be considered a security problem. 29458087Seric 29558363Sericfax Facsimile transmission. This is experimental and based 29658363Seric on Sam Leffler's FlexFAX software. For more information, 29758363Seric see below. 29858087Seric 29965148Sericpop Post Office Protocol. 30058363Seric 30167942Sericprocmail An interface to procmail (does not come with sendmail). 30267942Seric This is designed to be used in mailertables. For example, 30367942Seric a common question is "how do I forward all mail for a given 30467942Seric domain to a single person?". If you have this mailer 30567942Seric defined, you could set up a mailertable reading: 30667942Seric 30767942Seric host.com procmail:/etc/procmailrcs/host.com 30867942Seric 30967942Seric with the file /etc/procmailrcs/host.com reading: 31067942Seric 31167942Seric :0 # forward mail for host.com 31267942Seric ! -oi -f $1 person@other.host 31367942Seric 31467942Seric This would arrange for (anything)@host.com to be sent 31567942Seric to person@other.host. Within the procmail script, $1 is 31667942Seric the name of the sender and $2 is the name of the recipient. 31767942Seric If you use this with FEATURE(local_procmail), the FEATURE 31867942Seric should be listed first. 31967942Seric 32067929SericThe local mailer accepts addresses of the form "user+detail", where 32167929Sericthe "+detail" is not used for mailbox matching but is available 32267942Sericto certain local mail programs (in particular, see FEATURE(local_procmail)). 32367929SericFor example, "eric", "eric+sendmail", and "eric+sww" all indicate 32467929Sericthe same user, but additional arguments <null>, "sendmail", and "sww" 32567929Sericmay be provided for use in sorting mail. 32665148Seric 32767929Seric 32857246Seric+----------+ 32957246Seric| FEATURES | 33057246Seric+----------+ 33151268Seric 33257246SericSpecial features can be requested using the "FEATURE" macro. For 33357246Sericexample, the .mc line: 33457246Seric 33557246Seric FEATURE(use_cw_file) 33657246Seric 33757246Serictells sendmail that you want to have it read an /etc/sendmail.cw 33858782Sericfile to get values for class $=w. The FEATURE may contain a single 33958782Sericoptional parameter -- for example: 34057246Seric 34158782Seric FEATURE(mailertable, dbm /usr/lib/mailertable) 34258782Seric 34358782SericAvailable features are: 34458782Seric 34557246Sericuse_cw_file Read the file /etc/sendmail.cw file to get alternate 34657246Seric names for this host. This might be used if you were 34757246Seric on a host that MXed for a dynamic set of other 34857246Seric hosts. If the set is static, just including the line 34957246Seric "Cw<name1> <name2> ..." is probably superior. 35058408Seric The actual filename can be overridden by redefining 35158408Seric confCW_FILE. 35264324Seric 35358087Sericredirect Reject all mail addressed to "address.REDIRECT" with 35458087Seric a ``551 User not local; please try <address>'' message. 35558087Seric If this is set, you can alias people who have left 35658087Seric to their new address with ".REDIRECT" appended. 35764324Seric 35858284Sericnouucp Don't do anything special with UUCP addresses at all. 35964324Seric 36059080Sericnocanonify Don't pass addresses to $[ ... $] for canonification. 36159080Seric This would generally only be used by sites that only 36259080Seric act as mail gateways or which have user agents that do 36364028Seric full canonification themselves. You may also want to 36464028Seric use "define(`confBIND_OPTS',`-DNSRCH -DEFNAMES')" to 36564028Seric turn off the usual resolver options that do a similar 36664028Seric thing. 36764324Seric 36867917Sericstickyhost If set, email sent to "user@local.host" are marked 36958526Seric as "sticky" -- that is, the local addresses aren't 37058526Seric matched against UDB and don't go through ruleset 5. 37167915Seric This is used if you want a set up where "user" is 37267915Seric not necessarily the same as "user@local.host", e.g., 37367915Seric to make a distinct domain-wide namespace. Prior to 37467915Seric 8.7 this was the default, and notsticky was used to 37567915Seric turn this off. 37664324Seric 37758782Sericmailertable Include a "mailer table" which can be used to override 37858782Seric routing for particular domains. The argument of the 37958782Seric FEATURE may be the key definition. If none is specified, 38058782Seric the definition used is: 38164164Seric hash -o /etc/mailertable 38263761Seric Keys in this database are fully qualified domain names 38363761Seric or partial domains preceded by a dot -- for example, 38463761Seric "vangogh.CS.Berkeley.EDU" or ".CS.Berkeley.EDU". 38563761Seric Values must be of the form: 38658782Seric mailer:domain 38763761Seric where "mailer" is the internal mailer name, and "domain" 38863761Seric is where to send the message. These maps are not 38963761Seric reflected into the message header. 39064324Seric 39163761Sericdomaintable Include a "domain table" which can be used to provide 39267451Seric domain name mapping. Use of this should really be 39367451Seric limited to your own domains. It may be useful if you 39467451Seric change names (e.g., your company changes names from 39567451Seric oldname.com to newname.com). The argument of the 39667451Seric FEATURE may be the key definition. If none is specified, 39767451Seric the definition used is: 39864164Seric hash -o /etc/domaintable 39967451Seric The key in this table is the domain name; the value is 40067451Seric the new (fully qualified) domain. Anything in the 40163761Seric domaintable is reflected into headers; that is, this 40263761Seric is done in ruleset 3. 40364324Seric 40459034Sericbitdomain Look up bitnet hosts in a table to try to turn them into 40559034Seric internet addresses. The table can be built using the 40664153Seric bitdomain program contributed by John Gardiner Myers. 40759034Seric The argument of the FEATURE may be the key definition; if 40859034Seric none is specified, the definition used is: 40964164Seric hash -o /etc/bitdomain.db 41059034Seric Keys are the bitnet hostname; values are the corresponding 41159034Seric internet hostname. 41264324Seric 41359037Sericuucpdomain Similar feature for UUCP hosts. The default map definition 41459037Seric is: 41564164Seric hash -o /etc/uudomain.db 41659037Seric At the moment there is no automagic tool to build this 41759037Seric database. 41864324Seric 41960263Sericalways_add_domain 42060263Seric Include the local host domain even on locally delivered 42160263Seric mail. Normally it is not added unless it is already 42260263Seric present. 42364324Seric 42463761Sericallmasquerade If masquerading is enabled (using MASQUERADE_AS), this 42563761Seric feature will cause recipient addresses to also masquerade 42663761Seric as being from the masquerade host. Normally they get 42763761Seric the local hostname. Although this may be right for 42863761Seric ordinary users, it can break local aliases. For example, 42963761Seric if you send to "localalias", the originating sendmail will 43063761Seric find that alias and send to all members, but send the 43163761Seric message with "To: localalias@masqueradehost". Since that 43263761Seric alias likely does not exist, replies will fail. Use this 43363761Seric feature ONLY if you can guarantee that the ENTIRE 43463761Seric namespace on your masquerade host supersets all the 43563761Seric local entries. 43664324Seric 43764153Sericnodns We aren't running DNS at our site (for example, 43864153Seric we are UUCP-only connected). It's hard to consider 43964153Seric this a "feature", but hey, it had to go somewhere. 44057246Seric 44164324Sericnullclient This is a special case -- it creates a stripped down 44264324Seric configuration file containing nothing but support for 44364394Seric forwarding all mail to a central hub via a local 44464394Seric SMTP-based network. The argument is the name of that 44564394Seric hub. 44664394Seric 44764394Seric The only other feature that should be used in conjunction 44864394Seric with this one is "nocanonify" (this causes addresses to 44964394Seric be sent unqualified via the SMTP connection; normally 45064394Seric they are qualifed with the masquerade name, which 45164394Seric defaults to the name of the hub machine). No mailers 45264394Seric should be defined. No aliasing or forwarding is done. 45357246Seric 45467942Sericlocal_procmail Use procmail as the local mailer. This mailer can 45567929Seric make use of the "user+indicator@local.host" syntax; 45667929Seric normally the +indicator is just tossed, but by default 45767929Seric it is passed as the -a argument to procmail. The 45867929Seric argument to this feature is the pathname of procmail, 45967929Seric which defaults to /usr/local/bin/procmail. 46064324Seric 46167929Seric 46257246Seric+-------+ 46357246Seric| HACKS | 46457246Seric+-------+ 46557246Seric 46657246SericSome things just can't be called features. To make this clear, 46757247Sericthey go in the hack subdirectory and are referenced using the HACK 46857246Sericmacro. These will tend to be site-dependent. The release 46957246Sericincludes the Berkeley-dependent "cssubdomain" hack (that makes 47057246Sericsendmail accept local names in either Berkeley.EDU or CS.Berkeley.EDU; 47157246Sericthis is intended as a short-term aid while we move hosts into 47257246Sericsubdomains. 47357246Seric 47458087Seric 47557246Seric+--------------------+ 47657246Seric| SITE CONFIGURATION | 47757246Seric+--------------------+ 47857246Seric 479*68057Seric ***************************************************** 480*68057Seric * This section is really obsolete, and is preserved * 481*68057Seric * only for back compatibility. You should plan on * 482*68057Seric * using mailertables for new installations. In * 483*68057Seric * particular, it doesn't work for the newer forms * 484*68057Seric * of UUCP mailers, such as uucp-uudom. * 485*68057Seric ***************************************************** 486*68057Seric 48757246SericComplex sites will need more local configuration information, such as 48857246Sericlists of UUCP hosts they speak with directly. This can get a bit more 48957246Serictricky. For an example of a "complex" site, see cf/ucbvax.mc. 49057246Seric 49166336SericIf your host is known by several different names, you need to augment 49266336Sericthe $=w class. This is a list of names by which you are known, and 49366336Sericanything sent to an address using a host name in this list will be 49466336Serictreated as local mail. You can do this in two ways: either create 49566336Sericthe file /etc/sendmail.cw containing a list of your aliases (one per 49666336Sericline), and use ``FEATURE(use_cw_file)'' in the .mc file, or add the 49766336Sericline: 49866336Seric 49966336Seric Cw alias.host.name 50066336Seric 50166336Sericat the end of that file. See the ``vangogh.mc'' file for an example. 50266336SericBe sure you use the fully-qualified name of the host, rather than a 50366336Sericshort name. 50466336Seric 50557246SericThe SITECONFIG macro allows you to indirectly reference site-dependent 50657246Sericconfiguration information stored in the siteconfig subdirectory. For 50757246Sericexample, the line 50857246Seric 50957246Seric SITECONFIG(uucp.ucbvax, ucbvax, U) 51057246Seric 51157246Sericreads the file uucp.ucbvax for local connection information. The 51257246Sericsecond parameter is the local name (in this case just "ucbvax" since 51366336Sericit is locally connected, and hence a UUCP hostname). The third 51466336Sericparameter is the name of both a macro to store the local name (in 51566336Sericthis case, $U) and the name of the class (e.g., $=U) in which to store 51666336Sericthe host information read from the file. Another SITECONFIG line reads 51757246Seric 51857246Seric SITECONFIG(uucp.ucbarpa, ucbarpa.Berkeley.EDU, W) 51957246Seric 52057246SericThis says that the file uucp.ucbarpa contains the list of UUCP sites 52157246Sericconnected to ucbarpa.Berkeley.EDU. The $=W class will be used to 52266336Sericstore this list, and $W is defined to be ucbarpa.Berkeley.EDU, that 52366336Sericis, the name of the relay to which the hosts listed in uucp.ucbarpa 52466336Sericare connected. [The machine ucbarpa is gone now, but I've left 52557246Sericthis out-of-date configuration file around to demonstrate how you 52657246Sericmight do this.] 52757246Seric 52866336SericNote that the case of SITECONFIG with a third parameter of ``U'' is 52966336Sericspecial; the second parameter is assumed to be the UUCP name of the 53066336Sericlocal site, rather than the name of a remote site, and the UUCP name 53166336Sericis entered into $=w (the list of local hostnames) as $U.UUCP. 53266336Seric 53357246SericThe siteconfig file (e.g., siteconfig/uucp.ucbvax.m4) contains nothing 53457246Sericmore than a sequence of SITE macros describing connectivity. For 53557246Sericexample: 53657246Seric 53757246Seric SITE(cnmat) 53857246Seric SITE(sgi olympus) 53957246Seric 54057246SericThe second example demonstrates that you can use two names on the 54157246Sericsame line; these are usually aliases for the same host (or are at 54257246Sericleast in the same company). 54357246Seric 54458087Seric 54565218Seric+--------------------+ 54665218Seric| USING UUCP MAILERS | 54765218Seric+--------------------+ 54865218Seric 54965218SericIt's hard to get UUCP mailers right because of the extremely ad hoc 55065218Sericnature of UUCP addressing. These config files are really designed 55165218Sericfor domain-based addressing, even for UUCP sites. 55265218Seric 55365218SericThere are four UUCP mailers available. The choice of which one to 55465218Sericuse is partly a matter of local preferences and what is running at 55565218Sericthe other end of your UUCP connection. Unlike good protocols that 55665218Sericdefine what will go over the wire, UUCP uses the policy that you 55765218Sericshould do what is right for the other end; if they change, you have 55865218Sericto change. This makes it hard to do the right thing, and discourages 55965218Sericpeople from updating their software. In general, if you can avoid 56065218SericUUCP, please do. 56165218Seric 56265218SericThe major choice is whether to go for a domainized scheme or a 56365218Sericnon-domainized scheme. This depends entirely on what the other 56465218Sericend will recognize. If at all possible, you should encourage the 56565218Sericother end to go to a domain-based system -- non-domainized addresses 56665218Sericdon't work entirely properly. 56765218Seric 56865218SericThe four mailers are: 56965218Seric 57065218Seric uucp-old (obsolete name: "uucp") 57165218Seric This is the oldest, the worst (but the closest to UUCP) way of 57265218Seric sending messages accros UUCP connections. It does bangify 57365218Seric everything and prepends $U (your UUCP name) to the sender's 57465218Seric address (which can already be a bang path itself). It can 57565218Seric only send to one address at a time, so it spends a lot of 57665218Seric time copying duplicates of messages. Avoid this if at all 57765218Seric possible. 57865218Seric 57965218Seric uucp-new (obsolete name: "suucp") 58065218Seric The same as above, except that it assumes that in one rmail 58165218Seric command you can specify several recipients. It still has a 58265218Seric lot of other problems. 58365218Seric 58465218Seric uucp-dom 58565218Seric This UUCP mailer keeps everything as domain addresses. 58667471Seric Basically, it uses the SMTP mailer rewriting rules. This mailer 58767471Seric is only included if MAILER(smtp) is also specified. 58865218Seric 58965218Seric Unfortunately, a lot of UUCP mailer transport agents require 59065218Seric bangified addresses in the envelope, although you can use 59165218Seric domain-based addresses in the message header. (The envelope 59265218Seric shows up as the From_ line on UNIX mail.) So.... 59365218Seric 59465218Seric uucp-uudom 59565218Seric This is a cross between uucp-new (for the envelope addresses) 59665218Seric and uucp-dom (for the header addresses). It bangifies the 59765218Seric envelope sender (From_ line in messages) without adding the 59865218Seric local hostname, unless there is no host name on the address 59965218Seric at all (e.g., "wolf") or the host component is a UUCP host name 60065218Seric instead of a domain name ("somehost!wolf" instead of 60167471Seric "some.dom.ain!wolf"). This is also included only if MAILER(smtp) 60267471Seric is also specified. 60365218Seric 60465218SericExamples: 60565218Seric 60665218SericWe are on host grasp.insa-lyon.fr (UUCP host name "grasp"). The 60765218Sericfollowing summarizes the sender rewriting for various mailers. 60865218Seric 60965218SericMailer sender rewriting in the envelope 61065218Seric------ ------ ------------------------- 61165218Sericuucp-{old,new} wolf grasp!wolf 61265218Sericuucp-dom wolf wolf@grasp.insa-lyon.fr 61365218Sericuucp-uudom wolf grasp.insa-lyon.fr!wolf 61465218Seric 61565218Sericuucp-{old,new} wolf@fr.net grasp!fr.net!wolf 61665218Sericuucp-dom wolf@fr.net wolf@fr.net 61765218Sericuucp-uudom wolf@fr.net fr.net!wolf 61865218Seric 61965218Sericuucp-{old,new} somehost!wolf grasp!somehost!wolf 62065218Sericuucp-dom somehost!wolf somehost!wolf@grasp.insa-lyon.fr 62165218Sericuucp-uudom somehost!wolf grasp.insa-lyon.fr!somehost!wolf 62265218Seric 62365218SericIf you are using one of the domainized UUCP mailers, you really want 62465218Sericto convert all UUCP addresses to domain format -- otherwise, it will 62565218Sericdo it for you (and probably not the way you expected). For example, 62665218Sericif you have the address foo!bar!baz (and you are not sending to foo), 62765218Sericthe heuristics will add the @uucp.relay.name or @local.host.name to 62865218Sericthis address. However, if you map foo to foo.host.name first, it 62965218Sericwill not add the local hostname. You can do this using the uucpdomain 63065218Sericfeature. 63165218Seric 63265218Seric 63357246Seric+-------------------+ 63457246Seric| TWEAKING RULESETS | 63557246Seric+-------------------+ 63657246Seric 63751268SericFor more complex configurations, you can define special rules. 63851268SericThe macro LOCAL_RULE_3 introduces rules that are used in canonicalizing 63951268Sericthe names. Any modifications made here are reflected in the header. 64051268Seric 64151268SericA common use is to convert old UUCP addreses to SMTP addresses using 64251268Sericthe UUCPSMTP macro. For example: 64351268Seric 64451268Seric LOCAL_RULE_3 64551268Seric UUCPSMTP(decvax, decvax.dec.com) 64651268Seric UUCPSMTP(research, research.att.com) 64751268Seric 64851268Sericwill cause addresses of the form "decvax!user" and "research!user" 64951268Sericto be converted to "user@decvax.dec.com" and "user@research.att.com" 65051268Sericrespectively. 65151268Seric 65265957SericThis could also be used to look up hosts in a database map: 65357246Seric 65457246Seric LOCAL_RULE_3 65557246Seric R$* < @ $+ > $* $: $1 < @ $(hostmap $2 $) > $3 65657246Seric 65757246SericThis map would be defined in the LOCAL_CONFIG portion, as shown below. 65857246Seric 65951268SericSimilarly, LOCAL_RULE_0 can be used to introduce new parsing rules. 66051268SericFor example, new rules are needed to parse hostnames that you accept 66151309Sericvia MX records. For example, you might have: 66251268Seric 66351309Seric LOCAL_RULE_0 66465986Seric R$+ <@ host.dom.ain.> $#uucp $@ cnmat $: $1 < @ host.dom.ain.> 66551309Seric 66651309SericYou would use this if you had installed an MX record for cnmat.Berkeley.EDU 66751309Sericpointing at this host; this rule catches the message and forwards it on 66851309Sericusing UUCP. 66951309Seric 67058681SericYou can also tweak rulesets 1 and 2 using LOCAL_RULE_1 and LOCAL_RULE_2. 67158681SericThese rulesets are normally empty. 67258681Seric 67357246SericA similar macro is LOCAL_CONFIG. This introduces lines added after the 67457246Sericboilerplate option setting but before rulesets, and can be used to 67557945Sericdeclare local database maps or whatever. For example: 67651268Seric 67757246Seric LOCAL_CONFIG 67857246Seric Khostmap hash /etc/hostmap.db 67957246Seric Kyplocal nis -m hosts.byname 68051220Seric 68158087Seric 68257246Seric+---------------------------+ 68357246Seric| MASQUERADING AND RELAYING | 68457246Seric+---------------------------+ 68557246Seric 68657246SericYou can have your host masquerade as another using 68757246Seric 68857246Seric MASQUERADE_AS(host.domain) 68957246Seric 69065957SericThis causes outgoing SMTP mail to be labeled as coming from the 69157246Sericindicated domain, rather than $j. One normally masquerades as one 69265957Sericof one's own subdomains (for example, it's unlikely that I would 69357246Sericchoose to masquerade as an MIT site). 69457246Seric 69564153SericThe masquerade name is not normally canonified, so it is important 69664153Sericthat it be your One True Name, that is, fully qualified and not a 69764153SericCNAME. 69864153Seric 69957246Sericthere are always users that need to be "exposed" -- that is, their 70057246Sericinternal site name should be displayed instead of the masquerade name. 70157246SericRoot is an example. You can add users to this list using 70257246Seric 70357246Seric EXPOSED_USER(usernames) 70457246Seric 70557246SericThis adds users to class E; you could also use something like 70657246Seric 70757246Seric FE/etc/sendmail.cE 70857246Seric 70957246SericYou can also arrange to relay all unqualified names (that is, names 71057246Sericwithout @host) to a relay host. For example, if you have a central 71157246Sericemail server, you might relay to that host so that users don't have 71257246Sericto have .forward files or aliases. You can do this using 71357246Seric 71458071Seric define(`LOCAL_RELAY', mailer:hostname) 71557246Seric 71658071SericThe ``mailer:'' can be omitted, in which case the mailer defaults to 71758071Seric"smtp". There are some user names that you don't want relayed, perhaps 71858071Sericbecause of local aliases. A common example is root, which may be 71958071Sericlocally aliased. You can add entries to this list using 72057246Seric 72157246Seric LOCAL_USER(usernames) 72257246Seric 72357246SericThis adds users to class L; you could also use something like 72457246Seric 72557246Seric FL/etc/sendmail.cL 72657246Seric 72764153SericIf you want all incoming mail sent to a centralized hub, as for a 72864153Sericshared /var/spool/mail scheme, use 72957591Seric 73058071Seric define(`MAIL_HUB', mailer:hostname) 73157591Seric 73258071SericAgain, ``mailer:'' defaults to "smtp". If you define both LOCAL_RELAY 73366047Sericand MAIL_HUB, unqualified names will be sent to the LOCAL_RELAY and 73466047Sericother local names will be sent to MAIL_HUB. Names in $=L will be 73566047Sericdelivered locally, so you MUST have aliases or .forward files for them. 73666047Seric 73766047SericFor example, if are on machine mastodon.CS.Berkeley.EDU, the following 73858071Sericcombinations of settings will have the indicated effects: 73957591Seric 74057591Sericemail sent to.... eric eric@mastodon.CS.Berkeley.EDU 74157591Seric 74257591SericLOCAL_RELAY set to mail.CS.Berkeley.EDU (delivered locally) 74357591Sericmail.CS.Berkeley.EDU 74457591Seric 74557591SericMAIL_HUB set to mammoth.CS.Berkeley.EDU mammoth.CS.Berkeley.EDU 74657591Sericmammoth.CS.Berkeley.EDU 74757591Seric 74857591SericBoth LOCAL_RELAY and mail.CS.Berkeley.EDU mammoth.CS.Berkeley.EDU 74957591SericMAIL_HUB set as above 75057591Seric 75164153SericIf you want all outgoing mail to go to a central relay site, define 75264153SericSMART_HOST as well. Briefly: 75358071Seric 75464153Seric LOCAL_RELAY applies to unqualifed names (e.g., "eric"). 75564153Seric MAIL_HUB applies to names qualified with the name of the 75664153Seric local host (e.g., "eric@mastodon.CS.Berkeley.EDU"). 75764153Seric SMART_HOST applies to names qualified with other hosts. 75864153Seric 75964153SericHowever, beware that other relays (e.g., UUCP_RELAY, BITNET_RELAY, and 76064153SericFAX_RELAY) take precedence over SMART_HOST, so if you really want 76164153Sericabsolutely everything to go to a single central site you will need to 76264153Sericunset all the other relays -- or better yet, find or build a minimal 76364153Sericconfig file that does this. 76464153Seric 76564153Seric 76658071Seric+-------------------------------+ 76758071Seric| NON-SMTP BASED CONFIGURATIONS | 76858071Seric+-------------------------------+ 76958071Seric 77058071SericThese configuration files are designed primarily for use by SMTP-based 77158071Sericsites. I don't pretend that they are well tuned for UUCP-only or 77258071SericUUCP-primarily nodes (the latter is defined as a small local net 77358071Sericconnected to the rest of the world via UUCP). However, there is one 77458071Serichook to handle some special cases. 77558071Seric 77658071SericYou can define a ``smart host'' that understands a richer address syntax 77758071Sericusing: 77858071Seric 77958071Seric define(`SMART_HOST', mailer:hostname) 78058071Seric 78164028SericIn this case, the ``mailer:'' defaults to "relay". Any messages that 78258071Sericcan't be handled using the usual UUCP rules are passed to this host. 78358071Seric 78458071SericIf you are on a local SMTP-based net that connects to the outside 78558071Sericworld via UUCP, you can use LOCAL_NET_CONFIG to add appropriate rules. 78658071SericFor example: 78758071Seric 78858071Seric define(`SMART_HOST', suucp:uunet) 78958071Seric LOCAL_NET_CONFIG 79063761Seric R$* < @ $* .$m. > $* $#smtp $@ $2.$m. $: $1 < @ $2.$m. > $3 79158071Seric 79258071SericThis will cause all names that end in your domain name ($m) via 79358071SericSMTP; anything else will be sent via suucp (smart UUCP) to uunet. 79463761SericIf you have FEATURE(nocanonify), you may need to omit the dots after 79563761Sericthe $m. If you are running a local DNS inside your domain which is 79663761Sericnot otherwise connected to the outside world, you probably want to 79763761Sericuse: 79858071Seric 79963761Seric define(`SMART_HOST', smtp:fire.wall.com) 80063761Seric LOCAL_NET_CONFIG 80163761Seric R$* < @ $* . > $* $#smtp $@ $2. $: $1 < @ $2. > $3 80258071Seric 80363761SericThat is, send directly only to things you found in your DNS lookup; 80463761Sericanything else goes through SMART_HOST. 80563761Seric 80664153SericIf you are not running DNS at all, it is important to use 80764153SericFEATURE(nodns) to avoid having sendmail queue everything waiting 80864153Sericfor the name server to come up. 80963761Seric 81064153Seric 81164259Seric+-----------+ 81264259Seric| WHO AM I? | 81364259Seric+-----------+ 81464259Seric 81564259SericNormally, the $j macro is automatically defined to be your fully 81664259Sericqualified domain name (FQDN). Sendmail does this by getting your 81764259Serichost name using gethostname and then calling gethostbyname on the 81864259Sericresult. For example, in some environments gethostname returns 81964259Sericonly the root of the host name (such as "foo"); gethostbyname is 82064259Sericsupposed to return the FQDN ("foo.bar.com"). In some (fairly rare) 82164259Sericcases, gethostbyname may fail to return the FQDN. In this case 82264259Sericyou MUST define confDOMAIN_NAME to be your fully qualified domain 82364259Sericname. This is usually done using: 82464259Seric 82564259Seric Dmbar.com 82664259Seric define(`confDOMAIN_NAME', `$w.$m')dnl 82764259Seric 82864259Seric 82964028Seric+--------------------+ 83064028Seric| USING MAILERTABLES | 83164028Seric+--------------------+ 83264028Seric 83364028SericTo use FEATURE(mailertable), you will have to create an external 83464028Sericdatabase containing the routing information for various domains. 83564028SericFor example, a mailertable file in text format might be: 83664028Seric 83764028Seric .my.domain xnet:%1.my.domain 83864028Seric uuhost1.my.domain suucp:uuhost1 83964028Seric .bitnet smtp:relay.bit.net 84064028Seric 84164028SericThis should normally be stored in /etc/mailertable. The actual 84264028Sericdatabase version of the mailertable is built using: 84364028Seric 84464028Seric makemap hash /etc/mailertable.db < /etc/mailertable 84564028Seric 84664028SericThe semantics are simple. Any LHS entry that does not begin with 84764028Serica dot matches the full host name indicated. LHS entries beginning 84864028Sericwith a dot match anything ending with that domain name -- that is, 84964028Sericthey can be thought of as having a leading "*" wildcard. Matching 85064028Sericis done in order of most-to-least qualified -- for example, even 85164028Sericthough ".my.domain" is listed first in the above example, an entry 85264028Sericof "uuhost1.my.domain" will match the second entry since it is 85364028Sericmore explicit. 85464028Seric 85564028SericThe RHS should always be a "mailer:host" pair. The mailer is the 85664028Sericconfiguration name of a mailer (that is, an `M' line in the 85764028Sericsendmail.cf file). The "host" will be the hostname passed to 85864028Sericthat mailer. In domain-based matches (that is, those with leading 85964028Sericdots) the "%1" may be used to interpolate the wildcarded part of 86064028Sericthe host name. For example, the first line above sends everything 86164028Sericaddressed to "anything.my.domain" to that same host name, but using 86264028Sericthe (presumably experimental) xnet mailer. 86364028Seric 86467915SericIn some cases you may want to temporarily turn off MX records, 86567915Sericparticularly on gateways. For example, you may want to MX 86667915Sericeverything in a domain to one machine that then forwards it 86767915Sericdirectly. To do this, you might use the DNS configuration: 86864028Seric 86967915Seric *.domain. IN MX 0 relay.machine 87067915Seric 87167915Sericand on relay.machine use the mailertable: 87267915Seric 87367915Seric .domain smtp:[gateway.domain] 87467915Seric 87567915SericThe [square brackets] turn off MX records for this host only. 87667915SericIf you didn't do this, the mailertable would use the MX record 87767915Sericagain, which would give you an MX loop. 87867915Seric 87967915Seric 88064153Seric+--------------------------------+ 88164153Seric| USING USERDB TO MAP FULL NAMES | 88264153Seric+--------------------------------+ 88364153Seric 88464153SericThe user database was not originally intended for mapping full names 88564153Sericto login names (e.g., Eric.Allman => eric), but some people are using 88664153Sericit that way. (I would recommend that you set up aliases for this 88764153Sericpurpose instead -- since you can specify multiple alias files, this 88864153Sericis fairly easy.) The intent was to locate the default maildrop at 88964153Serica site, but allow you to override this by sending to a specific host. 89064153Seric 89164153SericIf you decide to set up the user database in this fashion, it is 89267917Sericimperative that you not use FEATURE(stickyhost) -- otherwise, 89364153Serice-mail sent to Full.Name@local.host.name will be rejected. 89464153Seric 89567917SericTo build the internal form of the user database, use: 89664153Seric 89764259Seric makemap btree /usr/data/base.db < /usr/data/base.txt 89864259Seric 89964259Seric 90067539Seric+--------------------------------+ 90167539Seric| MISCELLANEOUS SPECIAL FEATURES | 90267539Seric+--------------------------------+ 90367539Seric 90467539SericDOTTED_USER(name) 90567539Seric Sometimes it is convenient to merge configuration on a 90667539Seric centralized mail machine, for example, to forward all 90767539Seric root mail to a mail server. In this case it might be 90867539Seric useful to be able to treat the root addresses as a class 90967539Seric of addresses with subtle differences. You can do this 91067539Seric using dotted users. For example, a client might include 91167539Seric the alias: 91267539Seric 91367539Seric root: root.client1@server 91467539Seric 91567539Seric On the server, the mail configuration would include: 91667539Seric 91767539Seric DOTTED_USER(root) 91867539Seric 91967539Seric Aliases on the server that would match this address would 92067539Seric be "root.client", "root.*", and "root", tried in that 92167539Seric order. You can specify multiple addresses either by 92267539Seric joining them in one DOTTTED_USER macro or by having 92367539Seric multiple macros: 92467539Seric 92567539Seric DOTTED_USER(root) 92667539Seric DOTTED_USER(postmaster mailer-daemon) 92767539Seric 92867539Seric defines three dotted users. 92967539Seric 93067539Seric 93167960Seric+----------------+ 93267960Seric| SECURITY NOTES | 93367960Seric+----------------+ 93467960Seric 93567960SericA lot of sendmail security comes down to you. Sendmail 8 is much 93667960Sericmore careful about checking for security problems than previous 93767960Sericversions, but there are some things that you still need to watch 93867960Sericfor. In particular: 93967960Seric 94067960Seric* Make sure the aliases file isn't writable except by trusted 94167960Seric system personnel. This includes both the text and database 94267960Seric version. 94367960Seric 94467960Seric* Make sure that other files that sendmail reads, such as the 94567960Seric mailertable, is only writable by trusted system personnel. 94667960Seric 94767960Seric* The queue directory should not be world writable PARTICULARLY 94867960Seric if your system allows "file giveaways" (that is, if a non-root 94967960Seric user can chown any file they own to any other user). 95067960Seric 95167960Seric* If your system allows file giveaways, DO NOT create a publically 95267960Seric writable directory for forward files. This will allow anyone 95367960Seric to steal anyone else's e-mail. Instead, create a script that 95467960Seric copies the .forward file from users' home directories once a 95567960Seric night (if you want the non-NFS-mounted forward directory). 95667960Seric 95767960Seric* If your system allows file giveaways, you'll find that 95867960Seric sendmail is much less trusting of :include: files -- in 95967960Seric particular, you'll have to have /SENDMAIL/ANY/SHELL/ in 96067960Seric /etc/shells before they will be trusted (that is, before 96167960Seric files and programs listed in them will be honored). 96267960Seric 96367960SericIn general, file giveaways are a mistake -- if you can turn them 96467960Sericoff I recommend you do so. 96567960Seric 96667960Seric 96758363Seric+------------------+ 96858363Seric| FlexFAX SOFTWARE | 96958363Seric+------------------+ 97058363Seric 97158363SericSam Leffler's FlexFAX software is still in beta test -- but he expects a 97258363Sericpublic version out "later this week" [as of 3/1/93]. The following 97358363Sericblurb is direct from Sam: 97458363Seric 97564498Seric $Header: /usr/people/sam/fax/RCS/HOWTO,v 1.14 93/05/24 11:42:16 sam Exp $ 97658363Seric 97758363Seric How To Obtain This Software (in case all you get is this file) 97864498Seric -------------------------------------------------------------- 97958363Seric The source code is available for public ftp on 98064498Seric sgi.com sgi/fax/v2.1.src.tar.Z 98158363Seric (192.48.153.1) 98258363Seric 98358363Seric You can also obtain inst'able images for Silicon Graphics machines from 98464498Seric sgi.com sgi/fax/v2.1.inst.tar 98558363Seric (192.48.153.1) 98658363Seric 98758363Seric For example, 98858363Seric % ftp -n sgi.com 98958363Seric .... 99058363Seric ftp> user anonymous 99158363Seric ... <type in password> 99258363Seric ftp> cd sgi/fax 99358363Seric ftp> binary 99464498Seric ftp> get v2.1.src.tar.Z 99558363Seric 99664498Seric In general, the latest version of the 2.1 release of the software is 99764498Seric always available as "v2.1.src.tar.Z" or "v2.1.inst.tar" in the ftp 99864498Seric directory. This file is a link to the appropriate released version (so 99964498Seric don't waste your time retrieving the linked file as well!) Any files of 100064498Seric the form v2.1.*.patch are shell scripts that can be used to patch older 100164498Seric versions of the source code. For example, the file v2.1.0.patch would 100264498Seric contain patches to update v2.1.0.tar.Z. (Note to beta testers: this is 100364498Seric different than the naming conventions used during beta testing.) Patch 100464498Seric files only work to go between consecutive versions, so if you are 100564498Seric multiple versions behind the latest release, you will need to apply 100664498Seric each patch file between your current version and the latest. 100764498Seric 100864498Seric 100964498Seric Obtaining the Software by Electronic Mail 101064498Seric ----------------------------------------- 101164498Seric Do not send me requests for the software; they will be ignored (without 101264498Seric response). If you cannot use FTP at all, there is a service called 101364498Seric "ftpmail" available from gatekeeper.dec.com: you can send e-mail to 101464498Seric this machine and it will use FTP to retrieve files for you and send you 101564498Seric the files back again via e-mail. To find out more about the ftpmail 101658363Seric service, send a message to "ftpmail@gatekeeper.dec.com" whose body 101758363Seric consists of the single line "help". 101858363Seric 101964498Seric 102064498Seric Obtaining the Software Within Silicon Graphics 102164498Seric ---------------------------------------------- 102258363Seric Internal to Silicon Graphics there are inst'able images on the host 102364498Seric flake.asd in the directory /usr/dist. Thus you can do something like: 102458363Seric 102564498Seric % inst -f flake.asd.sgi.com:/usr/dist/flexfax 102658363Seric 102764498Seric to install the latest version of the software on your machine. 102858363Seric 102964498Seric 103064498Seric What to do Once You've Retrieved Stuff 103164498Seric -------------------------------------- 103258363Seric The external distributions come in a compressed or uncompressed tar 103358363Seric file. To extract the source distribution: 103458363Seric 103564498Seric % zcat v2.1.src.tar.Z | tar xf - 103658363Seric 103758363Seric (uncompress and extract individual files in current directory). To 103858363Seric unpack and install the client portion of the inst'able distribution: 103958363Seric 104058363Seric % mkdir dist 104164498Seric % cd dist; tar xf ../v2.1.inst.tar; cd .. 104258363Seric % inst -f dist/flexfax 104358363Seric ... 104458363Seric inst> go 104558363Seric 104658363Seric (Note, the dist subdirectory is because some versions of inst fail if 104764498Seric the files are in the current directory.) Server binaries are also 104864498Seric included in the inst'able images as flexfax.server.*. They are not 104964498Seric installed by default, so to get them also you need to do: 105058363Seric 105158363Seric % inst -f flexfax 105258363Seric ... 105358363Seric inst> install flexfax.server.* 105458363Seric inst> go 105558363Seric 105664498Seric The SGI binaries were built for Version 4.0.5H of the IRIX operating 105758363Seric system. They should work w/o problem on earlier versions of the 105858363Seric system, but I have not fully tested this. Also, note that to install a 105958363Seric server on an SGI machine, you need to have installed the Display 106058363Seric PostScript execution environment product (dps_eoe). Otherwise, the fax 106158363Seric server will not be able to convert PostScript to facsimile for 106258363Seric transmission. 106358363Seric 106464498Seric If you are working from the source distribution, look at the file 106564498Seric README in the top of the source tree. If you are working from the inst 106664498Seric images, the subsystem flexfax.man.readme contains the README file and 106764498Seric other useful pieces of information--the installed files are placed in 106864498Seric the directory /usr/local/doc/flexfax). Basically you will need to run 106964498Seric the faxaddmodem script to setup and configure your fax modem. Consult 107064498Seric the README file and the manual page for faxaddmodem for information. 107158363Seric 107258363Seric 107364498Seric FlexFAX Mail List 107464498Seric ----------------- 107558363Seric A mailing list for users of this software is located on sgi.com. 107658363Seric If you want to join this mailing list or have a list-related request 107758363Seric such as getting your name removed from it, send a request to 107858363Seric 107964498Seric majordomo@whizzer.wpd.sgi.com 108058363Seric 108164498Seric For example, to subscribe, send the line "subscribe flexfax" in 108264498Seric the body of your message. The line "help" will return a list of 108364498Seric the commands understood by the mailing list management software. 108464498Seric 108558363Seric Submissions (including bug reports) should be directed to: 108658363Seric 108758363Seric flexfax@sgi.com 108858363Seric 108964498Seric When corresponding about this software please always specify what 109064498Seric version you have, what system you're running on, and, if the problem is 109164498Seric specific to your modem, identify the modem and firmware revision. 109258363Seric 109364498Seric 109457945Seric+--------------------------------+ 109557945Seric| TWEAKING CONFIGURATION OPTIONS | 109657945Seric+--------------------------------+ 109757945Seric 109857945SericThere are a large number of configuration options that don't normally 109957945Sericneed to be changed. However, if you feel you need to tweak them, you 110057945Sericcan define the following M4 variables. This list is shown in four 110157945Sericcolumns: the name you define, the default value for that definition, 110257945Sericthe option or macro that is affected (either Ox for an option or Dx 110357945Sericfor a macro), and a brief description. Greater detail of the semantics 110457945Sericcan be found in the Installation and Operations Guide. 110557945Seric 110663582SericSome options are likely to be deprecated in future versions -- that is, 110763582Sericthe option is only included to provide back-compatibility. These are 110863582Sericmarked with "*". 110963582Seric 111065002SericRemember that these options are M4 variables, and hence may need to 111165002Sericbe quoted. In particular, arguments with commas will usually have to 111265002Sericbe ``double quoted, like this phrase'' to avoid having the comma 111365002Sericconfuse things. This is common for alias file definitions and for 111465002Sericthe read timeout. 111565002Seric 111657945SericM4 Variable Name Default Mac/Opt Description 111765002Seric================ ======= ======= =========== 111857945SericconfMAILER_NAME MAILER-DAEMON Dn The sender name used for 111957945Seric internally generated 112057945Seric outgoing messages. 112158681SericconfFROM_LINE From $g $d Dl The From_ line used when 112258681Seric sending to files or programs. 112357945SericconfFROM_HEADER $?x$x <$g>$|$g$. The format of an internally 112457945Seric Dq generated From: address. 112567929SericconfOPERATORS .:%@!^/[]+ Do Address operator characters. 112664153SericconfSMTP_LOGIN_MSG $j Sendmail $v/$Z ready at $b 112757945Seric De The initial (spontaneous) 112857945Seric SMTP greeting message. 112967820SericconfRECEIVED_HEADER $?sfrom $s $.$?_($?s$|from $.$_) $.by $j ($v/$Z)$?r with $r$. id $i$?u for $u$.; $b 113067820Seric HReceived 113167820Seric The format of the Received: 113267820Seric header in messages passed 113367820Seric through this host. It is 113467820Seric unwise to try to change this. 113559743SericconfSEVEN_BIT_INPUT False O7 Force input to seven bits? 113667551SericconfEIGHT_BIT_HANDLING pass8 O8 8-bit data handling 113757945SericconfALIAS_WAIT 10 Oa Wait (in minutes) for alias 113857945Seric file rebuild. 113958087SericconfMIN_FREE_BLOCKS 4 Ob Minimum number of free blocks 114058087Seric on queue filesystem to accept 114158087Seric SMTP mail. 114257945SericconfBLANK_SUB . OB Blank (space) substitution 114357945Seric character. 114465619SericconfCON_EXPENSIVE False Oc Avoid connecting immediately 114565619Seric to mailers marked expensive? 114657945SericconfCHECKPOINT_INTERVAL 10 OC Checkpoint queue files 114757945Seric every N recipients. 114857945SericconfDELIVERY_MODE background Od Default delivery mode. 114957945SericconfAUTO_REBUILD False OD Automatically rebuild 115057945Seric alias file if needed. 115157945SericconfERROR_MODE (undefined) Oe Error message mode. 115257945SericconfERROR_MESSAGE (undefined) OE Error message header/file. 115357945SericconfSAVE_FROM_LINES False Of Save extra leading 115457945Seric From_ lines. 115557945SericconfTEMP_FILE_MODE 0600 OF Temporary file mode. 115657945SericconfDEF_GROUP_ID 1 Og Default group id. 115757945SericconfMATCH_GECOS False OG Match GECOS field. 115857945SericconfMAX_HOP 17 Oh Maximum hop count. 115963582SericconfIGNORE_DOTS False Oi * Ignore dot as terminator 116057945Seric for incoming messages? 116157945SericconfBIND_OPTS (empty) OI Default options for BIND. 116263582SericconfMIME_FORMAT_ERRORS True Oj * Send error messages as MIME- 116359743Seric encapsulated messages per 116459743Seric RFC 1344. 116564153SericconfFORWARD_PATH (undefined) OJ The colon-separated list of 116664153Seric places to search for .forward 116767960Seric files. N.B.: see the Security 116867960Seric Notes section. 116957945SericconfMCI_CACHE_SIZE 2 Ok Size of open connection cache. 117057945SericconfMCI_CACHE_TIMEOUT 5m OK Open connection cache timeout. 117163582SericconfUSE_ERRORS_TO False Ol * Use the Errors-To: header to 117263582Seric deliver error messages. This 117363582Seric should not be necessary because 117463582Seric of general acceptance of the 117563582Seric envelope/header distinction. 117657945SericconfLOG_LEVEL 9 OL Log level. 117757945SericconfME_TOO False Om Include sender in group 117857945Seric expansions. 117957945SericconfCHECK_ALIASES True On Check RHS of aliases when 118057945Seric running newaliases. 118163582SericconfOLD_STYLE_HEADERS True Oo * Assume that headers without 118257945Seric special chars are old style. 118358859SericconfDAEMON_OPTIONS (undefined) OO SMTP daemon options. 118458806SericconfPRIVACY_FLAGS authwarnings Op Privacy flags. 118557945SericconfCOPY_ERRORS_TO (undefined) OP Address for additional copies 118657945Seric of all error messages. 118757945SericconfQUEUE_FACTOR (undefined) Oq Slope of queue-only function 118858116SericconfREAD_TIMEOUT (undefined) Or SMTP read timeouts. 118967811SericconfDONT_PRUNE_ROUTES False OR Don't prune down route-addr 119067811Seric syntax addresses to the 119167811Seric minimum possible. 119263582SericconfSAFE_QUEUE True Os * Commit all messages to disk 119357945Seric before forking. 119458806SericconfMESSAGE_TIMEOUT 5d/4h OT Timeout for messages before 119558806Seric sending error/warning message. 119659317SericconfTIME_ZONE USE_SYSTEM Ot Time zone info -- can be 119757945Seric USE_SYSTEM to use the system's 119857945Seric idea, USE_TZ to use the user's 119957945Seric TZ envariable, or something 120057945Seric else to force that value. 120157945SericconfDEF_USER_ID 1 Ou Default user id. 120258718SericconfUSERDB_SPEC (undefined) OU User database specification. 120358859SericconfFALLBACK_MX (undefined) OV Fallback MX host. 120463857SericconfTRY_NULL_MX_LIST False Ow If we are the best MX for a 120563857Seric host and haven't made other 120663857Seric arrangements, try connecting 120763857Seric to the host directly; normally 120863857Seric this would be a config error. 120957945SericconfQUEUE_LA 8 Ox Load average at which queue-only 121057945Seric function kicks in. 121157945SericconfREFUSE_LA 12 OX Load average at which incoming 121257945Seric SMTP connections are refused. 121363582SericconfWORK_RECIPIENT_FACTOR 121463582Seric (undefined) Oy Cost of each recipient. 121563582SericconfSEPARATE_PROC False OY Run all deliveries in a 121657945Seric separate process. 121757945SericconfWORK_CLASS_FACTOR (undefined) Oz Priority multiplier for class. 121857945SericconfWORK_TIME_FACTOR (undefined) OZ Cost of each delivery attempt. 121958408SericconfCW_FILE /etc/sendmail.cw Name of file used to get the 122058408Seric Fw local additions to the $=w 122158408Seric class. 122264153SericconfSMTP_MAILER smtp - The mailer name used when 122363972Seric SMTP connectivity is required. 122467915Seric One of "smtp", "smtp8", or 122567915Seric "esmtp". 122663999SericconfLOCAL_MAILER local - The mailer name used when 122763999Seric local connectivity is required. 122863999Seric Almost always "local". 122964028SericconfRELAY_MAILER relay - The default mailer name used 123064028Seric for relaying any mail (e.g., 123164028Seric to a BITNET_RELAY, a 123264028Seric SMART_HOST, or whatever). 123364028Seric This can reasonably be "suucp" 123464028Seric if you are on a UUCP-connected 123564028Seric site. 123664259SericconfDOMAIN_NAME (undefined) Dj If defined, sets $j. 123757945Seric 123858087Seric 123957246Seric+-----------+ 124057246Seric| HIERARCHY | 124157246Seric+-----------+ 124257246Seric 124351220SericWithin this directory are several subdirectories, to wit: 124451220Seric 124551220Sericm4 General support routines. These are typically 124651220Seric very important and should not be changed without 124757247Seric very careful consideration. 124851220Seric 124951220Sericcf The configuration files themselves. They have 125051220Seric ".mc" suffixes, and must be run through m4 to 125151220Seric become complete. The resulting output should 125251220Seric have a ".cf" suffix. 125351220Seric 125451220Sericostype Definitions describing a particular operating 125551220Seric system type. These should always be referenced 125651220Seric using the OSTYPE macro in the .mc file. Examples 125751220Seric include "bsd4.3", "bsd4.4", "sunos3.5", and 125851220Seric "sunos4.1". 125951220Seric 126051220Sericdomain Definitions describing a particular domain, referenced 126151220Seric using the DOMAIN macro in the .mc file. These are 126251220Seric site dependent; for example, we contribute "cs.exposed.m4" 126351220Seric and "cs.hidden.m4" which both describe hosts in the 126451220Seric CS.Berkeley.EDU subdomain; the former displays the local 126551220Seric hostname (e.g., mammoth.CS.Berkeley.EDU), whereas the 126651220Seric latter does its best to hide the identity of the local 126751220Seric workstation inside the CS subdomain. 126851220Seric 126951220Sericmailer Descriptions of mailers. These are referenced using 127051220Seric the MAILER macro in the .mc file. 127151220Seric 127251220Sericsh Shell files used when building the .cf file from the 127351220Seric .mc file in the cf subdirectory. 127451220Seric 127551220Sericfeature These hold special orthogonal features that you might 127651220Seric want to include. They should be referenced using 127751220Seric the FEATURE macro. 127851220Seric 127951220Serichack Local hacks. These can be referenced using the HACK 128051220Seric macro. They shouldn't be of more than voyeuristic 128151220Seric interest outside the .Berkeley.EDU domain, but who knows? 128265957Seric We've all got our own peccadillos. 128351220Seric 128451268Sericsiteconfig Site configuration -- e.g., tables of locally connected 128551268Seric UUCP sites. 128651220Seric 128751268Seric 128857246Seric+------------------------+ 128957246Seric| ADMINISTRATIVE DETAILS | 129057246Seric+------------------------+ 129151220Seric 129251220SericThe following sections detail usage of certain internal parts of the 129351220Sericsendmail.cf file. Read them carefully if you are trying to modify 129451220Sericthe current model. If you find the above descriptions adequate, these 129551220Sericshould be {boring, confusing, tedious, ridiculous} (pick one or more). 129651220Seric 129751220SericRULESETS (* means built in to sendmail) 129851220Seric 129951220Seric 0 * Parsing 130051220Seric 1 * Sender rewriting 130151220Seric 2 * Recipient rewriting 130251220Seric 3 * Canonicalization 130351220Seric 4 * Post cleanup 130454839Seric 5 * Local address rewrite (after aliasing) 130560539Seric 1x mailer rules (sender qualification) 130660539Seric 2x mailer rules (recipient qualification) 130764801Seric 3x mailer rules (sender header qualification) 130864801Seric 4x mailer rules (recipient header qualification) 130964801Seric 5x mailer subroutines (general) 131064801Seric 6x mailer subroutines (general) 131164801Seric 7x mailer subroutines (general) 131264801Seric 8x reserved 131360539Seric 90 Mailertable host stripping 131460892Seric 96 Bottom half of Ruleset 3 (ruleset 6 in old sendmail) 131560892Seric 97 Hook for recursive ruleset 0 call (ruleset 7 in old sendmail) 131663857Seric 98 Local part of ruleset 0 (ruleset 8 in old sendmail) 131751220Seric 131851220Seric 131951220SericMAILERS 132051220Seric 132151220Seric 0 local, prog local and program mailers 132265218Seric 1 [e]smtp, relay SMTP channel 132365218Seric 2 uucp-* UNIX-to-UNIX Copy Program 132458087Seric 3 netnews Network News delivery 132558363Seric 4 fax Sam Leffler's FlexFAX software 132651220Seric 132751220Seric 132851220SericMACROS 132951220Seric 133051220Seric A 133151220Seric B Bitnet Relay 133265182Seric C 133354839Seric D The local domain -- usually not needed 133451220Seric E 133558363Seric F FAX Relay 133651220Seric G 133757591Seric H mail Hub (for mail clusters) 133851220Seric I 133951220Seric J 134051220Seric K 134167915Seric L Luser Relay 134251220Seric M Masquerade (who I claim to be) 134351220Seric N 134451220Seric O 134551220Seric P 134651220Seric Q 134751220Seric R Relay (for unqualified names) 134858071Seric S Smart Host 134951220Seric T 135051309Seric U my UUCP name (if I have a UUCP connection) 135151309Seric V UUCP Relay (class V hosts) 135251220Seric W UUCP Relay (class W hosts) 135351220Seric X UUCP Relay (class X hosts) 135451309Seric Y UUCP Relay (all other hosts) 135551220Seric Z Version number 135651220Seric 135751220Seric 135851220SericCLASSES 135951220Seric 136051220Seric A 136151220Seric B 136251220Seric C 136367539Seric D "dotted" users 136457246Seric E addresses that should not seem to come from $M 136554839Seric F hosts we forward for 136651220Seric G 136751220Seric H 136851220Seric I 136951220Seric J 137051220Seric K 137151220Seric L addresses that should not be forwarded to $R 137251220Seric M 137351220Seric N 137451220Seric O operators that indicate network operations (cannot be in local names) 137560211Seric P top level pseudo-domains: BITNET, FAX, UUCP, etc. 137651220Seric Q 137751220Seric R 137851220Seric S 137951220Seric T 138051220Seric U locally connected UUCP hosts 138151309Seric V UUCP hosts connected to relay $V 138251309Seric W UUCP hosts connected to relay $W 138351309Seric X UUCP hosts connected to relay $X 138451309Seric Y locally connected smart UUCP hosts 138564153Seric Z locally connected domain-ized UUCP hosts 138654839Seric . the class containing only a dot 138751220Seric 138851220Seric 138951220SericM4 DIVERSIONS 139051220Seric 139158071Seric 1 Local host detection and resolution 139258071Seric 2 Local Ruleset 3 additions 139358071Seric 3 Local Ruleset 0 additions 139451268Seric 4 UUCP Ruleset 0 additions 139551309Seric 5 locally interpreted names (overrides $R) 139654839Seric 6 local configuration (at top of file) 139751220Seric 7 mailer definitions 139866099Seric 8 139958681Seric 9 special local rulesets (1 and 2) 1400