xref: /csrg-svn/usr.sbin/sendmail/cf/README (revision 68206)
151220Seric
251220Seric
357246Seric		NEW SENDMAIL CONFIGURATION FILES
451220Seric
557246Seric		Eric Allman <eric@CS.Berkeley.EDU>
651220Seric
7*68206Seric		@(#)README	8.45 (Berkeley) 01/26/95
851220Seric
951220Seric
1057246SericThis document describes the sendmail configuration files being used
1167469Sericat Berkeley.  These use features in the new (R8) sendmail; they will
1267469Sericnot work on other versions.
1351220Seric
1457246SericThese configuration files are probably not as general as previous
1565957Sericversions, and don't handle as many of the weird cases automagically.
1657246SericI was able to simplify by them for two reasons.  First, the network
1757246Serichas become more consistent -- for example, at this point, everyone
1857246Sericon the internet is supposed to be running a name server, so hacks to
1957246Serichandle NIC-registered hosts can go away.  Second, I assumed that a
2057246Sericsubdomain would be running SMTP internally -- UUCP is presumed to be
2157246Serica long-haul protocol.  I realize that this is not universal, but it
2257246Sericdoes describe the vast majority of sites with which I am familiar,
2357246Sericincluding those outside the US.
2451220Seric
2565957SericOf course, the downside of this is that if you do live in a weird
2665957Sericworld, things are going to get weirder for you.  I'm sorry about that,
2757246Sericbut at the time we at Berkeley had a problem, and it seemed like the
2857246Sericright thing to do.
2951220Seric
3057247SericThis package requires a post-V7 version of m4; if you are running the
3157247Seric4.2bsd, SysV.2, or 7th Edition version, I suggest finding a friend with
3257247Serica newer version.  You can m4-expand on their system, then run locally.
3365002SericSunOS's /usr/5bin/m4 or BSD-Net/2's m4 both work.  GNU m4 version 1.1
3465002Sericalso works.  Unfortunately, I'm told that the M4 on BSDI 1.0 doesn't
3565002Sericwork -- you'll have to use a Net/2 or GNU version.
3651220Seric
3758284SericIF YOU DON'T HAVE A BERKELEY MAKE, don't despair!  Just run
3864371Seric"m4 foo.mc > foo.cf" -- that should be all you need.  There is also
3964371Serica fairly crude (but functional) Makefile.dist that works on the
4064371Sericold version of make.
4158284Seric
4258284SericTo get started, you may want to look at tcpproto.mc (for TCP-only
4364324Sericsites), uucpproto.mc (for UUCP-only sites), and clientproto.mc (for
4464324Sericclusters of clients using a single mail host).  Others are versions
4558284Sericthat we use at Berkeley, although not all are in current use.  For
4658284Sericexample, ucbarpa has gone away, but I've left ucbarpa.mc in because
4758284Sericit demonstrates some interesting techniques.
4858284Seric
4957246SericI'm not pretending that this README describes everything that these
5057246Sericconfiguration files can do; clever people can probably tweak them
5157246Sericto great effect.  But it should get you started.
5257246Seric
5365509Seric*******************************************************************
5465509Seric***  BE SURE YOU CUSTOMIZE THESE FILES!  They have some		***
5565509Seric***  Berkeley-specific assumptions built in, such as the name	***
5665509Seric***  of our UUCP-relay.  You'll want to create your own domain	***
5765509Seric***  description, and use that in place of domain/Berkeley.m4.	***
5865509Seric*******************************************************************
5958087Seric
6065509Seric
6157246Seric+--------------------------+
6257246Seric| INTRODUCTION AND EXAMPLE |
6357246Seric+--------------------------+
6457246Seric
6557246SericConfiguration files are contained in the subdirectory "cf", with a
6657246Sericsuffix ".mc".  They must be run through "m4" to produce a ".cf" file.
6757246Seric
6851220SericLet's examine a typical .mc file (cf/cs-exposed.mc):
6951220Seric
7051220Seric	divert(-1)
7151220Seric	#
7251220Seric	# Copyright (c) 1983 Eric P. Allman
7351220Seric	# Copyright (c) 1988 The Regents of the University of California.
7451220Seric	# All rights reserved.
7551220Seric	#
7651220Seric	# Redistribution and use in source and binary forms are permitted
7751220Seric	# provided that the above copyright notice and this paragraph are
7851220Seric	# duplicated in all such forms and that any documentation,
7951220Seric	# advertising materials, and other materials related to such
8051220Seric	# distribution and use acknowledge that the software was developed
8151220Seric	# by the University of California, Berkeley.  The name of the
8251220Seric	# University may not be used to endorse or promote products derived
8351220Seric	# from this software without specific prior written permission.
8451220Seric	# THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR
8551220Seric	# IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED
8651220Seric	# WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR A PARTICULAR PURPOSE.
8751220Seric	#
8851220Seric
8957246SericThe divert(-1) will delete the crud in the resulting output file.
9057247SericThe copyright notice is what your lawyers require.  Our lawyers require
9157246Sericthe one that I've included in my files. A copyleft is a copyright by
9257246Sericanother name.
9351220Seric
9457246SericThe next line MUST be
9557246Seric
9651220Seric	include(`../m4/cf.m4')
9751220Seric
9857246SericThis will pull in the M4 macros you will need to make sense of
9957246Sericeverything else.  As the saying goes, don't think about it, just
10057246Sericdo it.  If you don't do it, don't bother reading the rest of this
10157246Sericfile.
10251220Seric
10356778Seric	VERSIONID(`<SCCS or RCS version id>')
10451220Seric
10551220SericVERSIONID is a macro that stuffs the version information into the
10651220Sericresulting file.  We use SCCS; you could use RCS, something else, or
10757246Sericomit it completely.  This is not the same as the version id included
10857246Sericin SMTP greeting messages -- this is defined in m4/version.m4.
10951220Seric
11051268Seric	DOMAIN(cs.exposed)
11151220Seric
11251220SericThis example exposes the host inside of the CS subdomain -- that is,
11351220Sericit doesn't try to hide the name of the workstation to the outside
11451220Sericworld.  Changing this to DOMAIN(cs.hidden) would have made outgoing
11551220Sericmessages refer to "<username>@CS.Berkeley.EDU" instead of using the
11663857Sericlocal hostname.  Internally this is effected by using
11757246Seric"MASQUERADE_AS(CS.Berkeley.EDU)".
11851220Seric
11951268Seric	MAILER(smtp)
12051220Seric
12151309SericThese describe the mailers used at the default CS site site.  The
12251309Sericlocal mailer is always included automatically.
12351220Seric
12458087Seric
12557246Seric+--------+
12657246Seric| OSTYPE |
12757246Seric+--------+
12857246Seric
12951220SericNote that cf/cs-exposed.mc omits an OSTYPE macro -- this assumes
13051220Sericdefault Computer Science Division environment.  There are several
13157247Sericexplicit environments available: bsd4.3, bsd4.4, hpux, irix, osf1,
13257247Sericriscos4.5, sunos3.5, sunos4.1, and ultrix4.1.  These change things
13357247Sericlike the location of the alias file and queue directory.  Some of
13457247Sericthese files are identical to one another.
13551220Seric
13657246SericOperating system definitions are easy to write.  They may define
13757246Sericthe following variables (everything defaults, so an ostype file
13857246Sericmay be empty).
13951220Seric
14057246SericALIAS_FILE		[/etc/aliases] The location of the text version
14159761Seric			of the alias file(s).  It can be a comma-separated
14266790Seric			list of names (but be sure you quote values with
14366790Seric			comments in them -- for example, use
14466790Seric				define(`ALIAS_FILE', `a,b')
14566790Seric			to get "a" and "b" both listed as alias files;
14666790Seric			otherwise the define() primitive only sees "a").
14757246SericHELP_FILE		[/usr/lib/sendmail.hf] The name of the file
14857246Seric			containing information printed in response to
14957246Seric			the SMTP HELP command.
15057246SericQUEUE_DIR		[/var/spool/mqueue] The directory containing
15157246Seric			queue files.
15257246SericSTATUS_FILE		[/etc/sendmail.st] The file containing status
15357246Seric			information.
15458087SericLOCAL_MAILER_PATH	[/bin/mail] The program used to deliver local mail.
15564153SericLOCAL_MAILER_FLAGS	[rmn] The flags used by the local mailer.  The
15664153Seric			flags lsDFM are always included.
15763761SericLOCAL_MAILER_ARGS	[mail -d $u] The arguments passed to deliver local
15863761Seric			mail.
15958087SericLOCAL_SHELL_PATH	[/bin/sh] The shell used to deliver piped email.
16063791SericLOCAL_SHELL_FLAGS	[eu] The flags used by the shell mailer.  The
16163791Seric			flags lsDFM are always included.
16263791SericLOCAL_SHELL_ARGS	[sh -c $u] The arguments passed to deliver "prog"
16363791Seric			mail.
16467989SericLOCAL_SHELL_DIR		[$z:/] The directory search path in which the
16567989Seric			shell should run.
16658087SericUSENET_MAILER_PATH	[/usr/lib/news/inews] The name of the program
16758087Seric			used to submit news.
16858087SericUSENET_MAILER_FLAGS	[rlsDFMmn] The mailer flags for the usenet mailer.
16958087SericUSENET_MAILER_ARGS	[-m -h -n] The command line arguments for the
17058087Seric			usenet mailer.
17165911SericUSENET_MAILER_MAX	[100000] The maximum size of messages that will
17265911Seric			be accepted by the usenet mailer.
17363857SericSMTP_MAILER_FLAGS	[undefined] Flags added to SMTP mailer.  Default
17467915Seric			flags are `mDFMUX' for all SMTP-based mailers; the
17567915Seric			"esmtp" mailer adds `a' and "smtp8" adds `8'.
17665911SericSMTP_MAILER_MAX		[undefined] The maximum size of messages that will
17767915Seric			be transported using the smtp, smtp8, or esmtp
17867915Seric			mailers.
17967915SericSMTP_MAILER_ARGS	[IPC $h] The arguments passed to the smtp mailer.
18067915Seric			About the only reason you would want to change this
18167915Seric			would be to change the default port.
18267915SericESMTP_MAILER_ARGS	[IPC $h] The arguments passed to the esmtp mailer.
18367915SericSMTP8_MAILER_ARGS	[IPC $h] The arguments passed to the smtp8 mailer.
18467915SericRELAY_MAILER_ARGS	[IPC $h] The arguments passed to the relay mailer.
18563857SericUUCP_MAILER_FLAGS	[undefined] Flags added to UUCP mailer.  Default
18663857Seric			flags are `DFMhuU' (and `m' for suucp mailer, minus
18763857Seric			`U' for uucp-dom mailer).
18868057SericUUCP_MAILER_ARGS	[uux - -r -z -a$g -gC $h!rmail ($u)] The arguments
18963761Seric			passed to the UUCP mailer.
19063791SericUUCP_MAX_SIZE		[100000] The maximum size message accepted for
19163791Seric			transmission by the UUCP mailers.
19265911SericFAX_MAILER_PATH		[/usr/local/lib/fax/mailfax] The program used to
19365911Seric			submit FAX messages.
19465911SericFAX_MAILER_MAX		[100000] The maximum size message accepted for
19565911Seric			transmission by FAX.
19667934SericPOP_MAILER_PATH		[/usr/lib/mh/spop] The pathname of the POP mailer.
19767934SericPOP_MAILER_FLAGS	[Penu] Flags added to POP mailer.  Flags "lsDFM"
19867934Seric			are always added.
19967934SericPOP_MAILER_ARGS		[pop $u] The arguments passed to the POP mailer.
20067942SericPROCMAIL_MAILER_FLAGS	[Shu] Flags added to Procmail mailer.  Flags
20167942Seric			``DFMmn'' are always set.
20267942SericPROCMAIL_MAILER_ARGS	[procmail -m $h $f $u] The arguments passed to
20367942Seric			the Procmail mailer.
20457246Seric
20557246Seric+---------+
20657246Seric| DOMAINS |
20757246Seric+---------+
20857246Seric
20957246SericYou will probably want to collect domain-dependent defines into one
21057246Sericfile, referenced by the DOMAIN macro.  For example, our Berkeley
21157246Sericdomain file includes definitions for several internal distinguished
21257246Serichosts:
21357246Seric
21457246SericUUCP_RELAY	The host that will forward UUCP-addressed email.
21557246Seric		If not defined, all UUCP sites must be directly
21664028Seric		connected.
21757246SericBITNET_RELAY	The host that will forward BITNET-addressed email.
21857246Seric		If not defined, the .BITNET pseudo-domain won't work.
21957246SericLOCAL_RELAY	The site that will handle unqualified names -- that
22057246Seric		is, names with out an @domain extension.  If not set,
22157246Seric		they are assumed to belong on this machine.  This
22257246Seric		allows you to have a central site to store a
22357246Seric		company- or department-wide alias database.  This
22457246Seric		only works at small sites, and there are better
22564028Seric		methods.
22667915SericLUSER_RELAY	The site that will handle lusers -- that is, apparently
22767915Seric		local names that aren't local accounts or aliases.
22857246Seric
22967915SericAny of these can be either ``mailer:hostname'' (in which case the
23064028Sericmailer is the internal mailer name, such as ``suucp'' and the hostname
23164028Sericis the name of the host as appropriate for that mailer) or just a
23264028Seric``hostname'', in which case a default mailer type (usually ``relay'',
23364153Serica variant on SMTP) is used.  WARNING: if you have a wildcard MX
23464153Sericrecord matching your domain, you probably want to define these to
23564153Serichave a trailing dot so that you won't get the mail diverted back
23664153Sericto yourself.
23764028Seric
23857246SericThe domain file can also be used to define a domain name, if needed
23957982Seric(using "DD<domain>") and set certain site-wide features.  If all hosts
24057982Sericat your site masquerade behind one email name, you could also use
24157982SericMASQUERADE_AS here.
24257246Seric
24358408SericYou do not have to define a domain -- in particular, if you are a
24458408Sericsingle machine sitting off somewhere, it is probably more work than
24558408Sericit's worth.  This is just a mechanism for combining "domain dependent
24658408Sericknowledge" into one place.
24758408Seric
24857246Seric+---------+
24957246Seric| MAILERS |
25057246Seric+---------+
25157246Seric
25251220SericThere are fewer mailers supported in this version than the previous
25351220Sericversion, owing mostly to a simpler world.
25451220Seric
25551220Sericlocal		The local and prog mailers.  You will almost always
25651220Seric		need these; the only exception is if you relay ALL
25757247Seric		your mail to another site.  This mailer is included
25857247Seric		automatically.
25951220Seric
26051220Sericsmtp		The Simple Mail Transport Protocol mailer.  This does
26151220Seric		not hide hosts behind a gateway or another other
26251220Seric		such hack; it assumes a world where everyone is
26363761Seric		running the name server.  This file actually defines
26467915Seric		four mailers: "smtp" for regular (old-style) SMTP to
26563761Seric		other servers, "esmtp" for extended SMTP to other
26667915Seric		servers, "smtp8" to do SMTP to other servers without
26767915Seric		converting 8-bit data to MIME (essentially, this is
26867915Seric		your statement that you know the other end is 8-bit
26967915Seric		clean even if it doesn't say so), and "relay" for
27067915Seric		transmission to our RELAY_HOST, LUSER_RELAY, or
27167915Seric		MAILER_HUB.
27251220Seric
27351220Sericuucp		The Unix-to-Unix Copy Program mailer.  Actually, this
27467471Seric		defines two mailers, "uucp-old" (a.k.a. "uucp") and
27567471Seric		"uucp-new" (a.k.a. "suucp").  The latter is for when you
27667471Seric		know that the UUCP mailer at the other end can handle
27767471Seric		multiple recipients in one transfer.  If the smtp mailer
27867471Seric		is also included in your configuration, two other mailers
27967471Seric		("uucp-dom" and "uucp-uudom") are also defined.  When you
28067471Seric		include the uucp mailer, sendmail looks for all names in
28165218Seric		the $=U class and sends them to the uucp-old mailer; all
28265218Seric		names in the $=Y class are sent to uucp-new; and all
28365218Seric		names in the $=Z class are sent to uucp-uudom.  Note that
28457246Seric		this is a function of what version of rmail runs on
28557246Seric		the receiving end, and hence may be out of your control.
28665218Seric		See the section below describing UUCP mailers in more
28765218Seric		detail.
28851220Seric
28958087Sericusenet		Usenet (network news) delivery.  If this is specified,
29058087Seric		an extra rule is added to ruleset 0 that forwards all
29158087Seric		local email for users named ``group.usenet'' to the
29258087Seric		``inews'' program.  Note that this works for all groups,
29358087Seric		and may be considered a security problem.
29458087Seric
29558363Sericfax		Facsimile transmission.  This is experimental and based
29658363Seric		on Sam Leffler's FlexFAX software.  For more information,
29758363Seric		see below.
29858087Seric
29965148Sericpop		Post Office Protocol.
30058363Seric
30167942Sericprocmail	An interface to procmail (does not come with sendmail).
30267942Seric		This is designed to be used in mailertables.  For example,
30367942Seric		a common question is "how do I forward all mail for a given
30467942Seric		domain to a single person?".  If you have this mailer
30567942Seric		defined, you could set up a mailertable reading:
30667942Seric
30767942Seric			host.com	procmail:/etc/procmailrcs/host.com
30867942Seric
30967942Seric		with the file /etc/procmailrcs/host.com reading:
31067942Seric
31167942Seric			:0	# forward mail for host.com
31267942Seric			! -oi -f $1 person@other.host
31367942Seric
31467942Seric		This would arrange for (anything)@host.com to be sent
31567942Seric		to person@other.host.  Within the procmail script, $1 is
31667942Seric		the name of the sender and $2 is the name of the recipient.
31767942Seric		If you use this with FEATURE(local_procmail), the FEATURE
31867942Seric		should be listed first.
31967942Seric
32067929SericThe local mailer accepts addresses of the form "user+detail", where
32167929Sericthe "+detail" is not used for mailbox matching but is available
32267942Sericto certain local mail programs (in particular, see FEATURE(local_procmail)).
32367929SericFor example, "eric", "eric+sendmail", and "eric+sww" all indicate
32467929Sericthe same user, but additional arguments <null>, "sendmail", and "sww"
32567929Sericmay be provided for use in sorting mail.
32665148Seric
32767929Seric
32857246Seric+----------+
32957246Seric| FEATURES |
33057246Seric+----------+
33151268Seric
33257246SericSpecial features can be requested using the "FEATURE" macro.  For
33357246Sericexample, the .mc line:
33457246Seric
33557246Seric	FEATURE(use_cw_file)
33657246Seric
33757246Serictells sendmail that you want to have it read an /etc/sendmail.cw
33858782Sericfile to get values for class $=w.  The FEATURE may contain a single
33958782Sericoptional parameter -- for example:
34057246Seric
34158782Seric	FEATURE(mailertable, dbm /usr/lib/mailertable)
34258782Seric
34358782SericAvailable features are:
34458782Seric
34557246Sericuse_cw_file	Read the file /etc/sendmail.cw file to get alternate
34657246Seric		names for this host.  This might be used if you were
34757246Seric		on a host that MXed for a dynamic set of other
34857246Seric		hosts.  If the set is static, just including the line
34957246Seric		"Cw<name1> <name2> ..." is probably superior.
35058408Seric		The actual filename can be overridden by redefining
35158408Seric		confCW_FILE.
35264324Seric
35358087Sericredirect	Reject all mail addressed to "address.REDIRECT" with
35458087Seric		a ``551 User not local; please try <address>'' message.
35558087Seric		If this is set, you can alias people who have left
35658087Seric		to their new address with ".REDIRECT" appended.
35764324Seric
35858284Sericnouucp		Don't do anything special with UUCP addresses at all.
35964324Seric
36059080Sericnocanonify	Don't pass addresses to $[ ... $] for canonification.
36159080Seric		This would generally only be used by sites that only
36259080Seric		act as mail gateways or which have user agents that do
36364028Seric		full canonification themselves.  You may also want to
36464028Seric		use "define(`confBIND_OPTS',`-DNSRCH -DEFNAMES')" to
36564028Seric		turn off the usual resolver options that do a similar
36664028Seric		thing.
36764324Seric
36867917Sericstickyhost	If set, email sent to "user@local.host" are marked
36958526Seric		as "sticky" -- that is, the local addresses aren't
37058526Seric		matched against UDB and don't go through ruleset 5.
37167915Seric		This is used if you want a set up where "user" is
37267915Seric		not necessarily the same as "user@local.host", e.g.,
37367915Seric		to make a distinct domain-wide namespace.  Prior to
37467915Seric		8.7 this was the default, and notsticky was used to
37567915Seric		turn this off.
37664324Seric
37758782Sericmailertable	Include a "mailer table" which can be used to override
37858782Seric		routing for particular domains.  The argument of the
37958782Seric		FEATURE may be the key definition.  If none is specified,
38058782Seric		the definition used is:
38164164Seric			hash -o /etc/mailertable
38263761Seric		Keys in this database are fully qualified domain names
38363761Seric		or partial domains preceded by a dot -- for example,
38463761Seric		"vangogh.CS.Berkeley.EDU" or ".CS.Berkeley.EDU".
38563761Seric		Values must be of the form:
38658782Seric			mailer:domain
38763761Seric		where "mailer" is the internal mailer name, and "domain"
38863761Seric		is where to send the message.  These maps are not
38963761Seric		reflected into the message header.
39064324Seric
39163761Sericdomaintable	Include a "domain table" which can be used to provide
39267451Seric		domain name mapping.  Use of this should really be
39367451Seric		limited to your own domains.  It may be useful if you
39467451Seric		change names (e.g., your company changes names from
39567451Seric		oldname.com to newname.com).  The argument of the
39667451Seric		FEATURE may be the key definition.  If none is specified,
39767451Seric		the definition used is:
39864164Seric			hash -o /etc/domaintable
39967451Seric		The key in this table is the domain name; the value is
40067451Seric		the new (fully qualified) domain.  Anything in the
40163761Seric		domaintable is reflected into headers; that is, this
40263761Seric		is done in ruleset 3.
40364324Seric
40459034Sericbitdomain	Look up bitnet hosts in a table to try to turn them into
40559034Seric		internet addresses.  The table can be built using the
40664153Seric		bitdomain program contributed by John Gardiner Myers.
40759034Seric		The argument of the FEATURE may be the key definition; if
40859034Seric		none is specified, the definition used is:
40964164Seric			hash -o /etc/bitdomain.db
41059034Seric		Keys are the bitnet hostname; values are the corresponding
41159034Seric		internet hostname.
41264324Seric
41359037Sericuucpdomain	Similar feature for UUCP hosts.  The default map definition
41459037Seric		is:
41564164Seric			hash -o /etc/uudomain.db
41659037Seric		At the moment there is no automagic tool to build this
41759037Seric		database.
41864324Seric
41960263Sericalways_add_domain
42060263Seric		Include the local host domain even on locally delivered
42160263Seric		mail.  Normally it is not added unless it is already
42260263Seric		present.
42364324Seric
42463761Sericallmasquerade	If masquerading is enabled (using MASQUERADE_AS), this
42563761Seric		feature will cause recipient addresses to also masquerade
42663761Seric		as being from the masquerade host.  Normally they get
42763761Seric		the local hostname.  Although this may be right for
42863761Seric		ordinary users, it can break local aliases.  For example,
42963761Seric		if you send to "localalias", the originating sendmail will
43063761Seric		find that alias and send to all members, but send the
43163761Seric		message with "To: localalias@masqueradehost".  Since that
43263761Seric		alias likely does not exist, replies will fail.  Use this
43363761Seric		feature ONLY if you can guarantee that the ENTIRE
43463761Seric		namespace on your masquerade host supersets all the
43563761Seric		local entries.
43664324Seric
43764153Sericnodns		We aren't running DNS at our site (for example,
43864153Seric		we are UUCP-only connected).  It's hard to consider
43964153Seric		this a "feature", but hey, it had to go somewhere.
44057246Seric
44164324Sericnullclient	This is a special case -- it creates a stripped down
44264324Seric		configuration file containing nothing but support for
44364394Seric		forwarding all mail to a central hub via a local
44464394Seric		SMTP-based network.  The argument is the name of that
44564394Seric		hub.
44664394Seric
44764394Seric		The only other feature that should be used in conjunction
44864394Seric		with this one is "nocanonify" (this causes addresses to
44964394Seric		be sent unqualified via the SMTP connection; normally
45064394Seric		they are qualifed with the masquerade name, which
45164394Seric		defaults to the name of the hub machine).  No mailers
45264394Seric		should be defined.  No aliasing or forwarding is done.
45357246Seric
45467942Sericlocal_procmail	Use procmail as the local mailer.  This mailer can
45567929Seric		make use of the "user+indicator@local.host" syntax;
45667929Seric		normally the +indicator is just tossed, but by default
45767929Seric		it is passed as the -a argument to procmail.  The
45867929Seric		argument to this feature is the pathname of procmail,
45967929Seric		which defaults to /usr/local/bin/procmail.
46064324Seric
461*68206Sericbestmx_is_local	Accept mail as though locally addressed for any host that
462*68206Seric		lists us as the best possible MX record.  This generates
463*68206Seric		additional DNS traffic, but should be OK for low to
464*68206Seric		medium traffic hosts.
46567929Seric
466*68206Seric
46757246Seric+-------+
46857246Seric| HACKS |
46957246Seric+-------+
47057246Seric
47157246SericSome things just can't be called features.  To make this clear,
47257247Sericthey go in the hack subdirectory and are referenced using the HACK
47357246Sericmacro.  These will tend to be site-dependent.  The release
47457246Sericincludes the Berkeley-dependent "cssubdomain" hack (that makes
47557246Sericsendmail accept local names in either Berkeley.EDU or CS.Berkeley.EDU;
47657246Sericthis is intended as a short-term aid while we move hosts into
47757246Sericsubdomains.
47857246Seric
47958087Seric
48057246Seric+--------------------+
48157246Seric| SITE CONFIGURATION |
48257246Seric+--------------------+
48357246Seric
48468057Seric    *****************************************************
48568057Seric    * This section is really obsolete, and is preserved	*
48668057Seric    * only for back compatibility.  You should plan on	*
48768057Seric    * using mailertables for new installations.	  In	*
48868057Seric    * particular, it doesn't work for the newer forms	*
48968057Seric    * of UUCP mailers, such as uucp-uudom.		*
49068057Seric    *****************************************************
49168057Seric
49257246SericComplex sites will need more local configuration information, such as
49357246Sericlists of UUCP hosts they speak with directly.  This can get a bit more
49457246Serictricky.  For an example of a "complex" site, see cf/ucbvax.mc.
49557246Seric
49666336SericIf your host is known by several different names, you need to augment
49766336Sericthe $=w class.  This is a list of names by which you are known, and
49866336Sericanything sent to an address using a host name in this list will be
49966336Serictreated as local mail.  You can do this in two ways: either create
50066336Sericthe file /etc/sendmail.cw containing a list of your aliases (one per
50166336Sericline), and use ``FEATURE(use_cw_file)'' in the .mc file, or add the
50266336Sericline:
50366336Seric
50466336Seric	Cw alias.host.name
50566336Seric
50666336Sericat the end of that file.  See the ``vangogh.mc'' file for an example.
50766336SericBe sure you use the fully-qualified name of the host, rather than a
50866336Sericshort name.
50966336Seric
51057246SericThe SITECONFIG macro allows you to indirectly reference site-dependent
51157246Sericconfiguration information stored in the siteconfig subdirectory.  For
51257246Sericexample, the line
51357246Seric
51457246Seric	SITECONFIG(uucp.ucbvax, ucbvax, U)
51557246Seric
51657246Sericreads the file uucp.ucbvax for local connection information.  The
51757246Sericsecond parameter is the local name (in this case just "ucbvax" since
51866336Sericit is locally connected, and hence a UUCP hostname).  The third
51966336Sericparameter is the name of both a macro to store the local name (in
52066336Sericthis case, $U) and the name of the class (e.g., $=U) in which to store
52166336Sericthe host information read from the file.  Another SITECONFIG line reads
52257246Seric
52357246Seric	SITECONFIG(uucp.ucbarpa, ucbarpa.Berkeley.EDU, W)
52457246Seric
52557246SericThis says that the file uucp.ucbarpa contains the list of UUCP sites
52657246Sericconnected to ucbarpa.Berkeley.EDU.  The $=W class will be used to
52766336Sericstore this list, and $W is defined to be ucbarpa.Berkeley.EDU, that
52866336Sericis, the name of the relay to which the hosts listed in uucp.ucbarpa
52966336Sericare connected.  [The machine ucbarpa is gone now, but I've left
53057246Sericthis out-of-date configuration file around to demonstrate how you
53157246Sericmight do this.]
53257246Seric
53366336SericNote that the case of SITECONFIG with a third parameter of ``U'' is
53466336Sericspecial; the second parameter is assumed to be the UUCP name of the
53566336Sericlocal site, rather than the name of a remote site, and the UUCP name
53666336Sericis entered into $=w (the list of local hostnames) as $U.UUCP.
53766336Seric
53857246SericThe siteconfig file (e.g., siteconfig/uucp.ucbvax.m4) contains nothing
53957246Sericmore than a sequence of SITE macros describing connectivity.  For
54057246Sericexample:
54157246Seric
54257246Seric	SITE(cnmat)
54357246Seric	SITE(sgi olympus)
54457246Seric
54557246SericThe second example demonstrates that you can use two names on the
54657246Sericsame line; these are usually aliases for the same host (or are at
54757246Sericleast in the same company).
54857246Seric
54958087Seric
55065218Seric+--------------------+
55165218Seric| USING UUCP MAILERS |
55265218Seric+--------------------+
55365218Seric
55465218SericIt's hard to get UUCP mailers right because of the extremely ad hoc
55565218Sericnature of UUCP addressing.  These config files are really designed
55665218Sericfor domain-based addressing, even for UUCP sites.
55765218Seric
55865218SericThere are four UUCP mailers available.  The choice of which one to
55965218Sericuse is partly a matter of local preferences and what is running at
56065218Sericthe other end of your UUCP connection.  Unlike good protocols that
56165218Sericdefine what will go over the wire, UUCP uses the policy that you
56265218Sericshould do what is right for the other end; if they change, you have
56365218Sericto change.  This makes it hard to do the right thing, and discourages
56465218Sericpeople from updating their software.  In general, if you can avoid
56565218SericUUCP, please do.
56665218Seric
56765218SericThe major choice is whether to go for a domainized scheme or a
56865218Sericnon-domainized scheme.  This depends entirely on what the other
56965218Sericend will recognize.  If at all possible, you should encourage the
57065218Sericother end to go to a domain-based system -- non-domainized addresses
57165218Sericdon't work entirely properly.
57265218Seric
57365218SericThe four mailers are:
57465218Seric
57565218Seric    uucp-old (obsolete name: "uucp")
57665218Seric	This is the oldest, the worst (but the closest to UUCP) way of
57765218Seric	sending messages accros UUCP connections.  It does bangify
57865218Seric	everything and prepends $U (your UUCP name) to the sender's
57965218Seric	address (which can already be a bang path itself).  It can
58065218Seric	only send to one address at a time, so it spends a lot of
58165218Seric	time copying duplicates of messages.  Avoid this if at all
58265218Seric	possible.
58365218Seric
58465218Seric    uucp-new (obsolete name: "suucp")
58565218Seric	The same as above, except that it assumes that in one rmail
58665218Seric	command you can specify several recipients.  It still has a
58765218Seric	lot of other problems.
58865218Seric
58965218Seric    uucp-dom
59065218Seric	This UUCP mailer keeps everything as domain addresses.
59167471Seric	Basically, it uses the SMTP mailer rewriting rules.  This mailer
59267471Seric	is only included if MAILER(smtp) is also specified.
59365218Seric
59465218Seric	Unfortunately, a lot of UUCP mailer transport agents require
59565218Seric	bangified addresses in the envelope, although you can use
59665218Seric	domain-based addresses in the message header.  (The envelope
59765218Seric	shows up as the From_ line on UNIX mail.)  So....
59865218Seric
59965218Seric    uucp-uudom
60065218Seric	This is a cross between uucp-new (for the envelope addresses)
60165218Seric	and uucp-dom (for the header addresses).  It bangifies the
60265218Seric	envelope sender (From_ line in messages) without adding the
60365218Seric	local hostname, unless there is no host name on the address
60465218Seric	at all (e.g., "wolf") or the host component is a UUCP host name
60565218Seric	instead of a domain name ("somehost!wolf" instead of
60667471Seric	"some.dom.ain!wolf").  This is also included only if MAILER(smtp)
60767471Seric	is also specified.
60865218Seric
60965218SericExamples:
61065218Seric
61165218SericWe are on host grasp.insa-lyon.fr (UUCP host name "grasp").  The
61265218Sericfollowing summarizes the sender rewriting for various mailers.
61365218Seric
61465218SericMailer          sender		rewriting in the envelope
61565218Seric------		------		-------------------------
61665218Sericuucp-{old,new}	wolf		grasp!wolf
61765218Sericuucp-dom	wolf		wolf@grasp.insa-lyon.fr
61865218Sericuucp-uudom	wolf		grasp.insa-lyon.fr!wolf
61965218Seric
62065218Sericuucp-{old,new}	wolf@fr.net	grasp!fr.net!wolf
62165218Sericuucp-dom	wolf@fr.net	wolf@fr.net
62265218Sericuucp-uudom	wolf@fr.net	fr.net!wolf
62365218Seric
62465218Sericuucp-{old,new}	somehost!wolf	grasp!somehost!wolf
62565218Sericuucp-dom	somehost!wolf	somehost!wolf@grasp.insa-lyon.fr
62665218Sericuucp-uudom	somehost!wolf	grasp.insa-lyon.fr!somehost!wolf
62765218Seric
62865218SericIf you are using one of the domainized UUCP mailers, you really want
62965218Sericto convert all UUCP addresses to domain format -- otherwise, it will
63065218Sericdo it for you (and probably not the way you expected).  For example,
63165218Sericif you have the address foo!bar!baz (and you are not sending to foo),
63265218Sericthe heuristics will add the @uucp.relay.name or @local.host.name to
63365218Sericthis address.  However, if you map foo to foo.host.name first, it
63465218Sericwill not add the local hostname.  You can do this using the uucpdomain
63565218Sericfeature.
63665218Seric
63765218Seric
63857246Seric+-------------------+
63957246Seric| TWEAKING RULESETS |
64057246Seric+-------------------+
64157246Seric
64251268SericFor more complex configurations, you can define special rules.
64351268SericThe macro LOCAL_RULE_3 introduces rules that are used in canonicalizing
64451268Sericthe names.  Any modifications made here are reflected in the header.
64551268Seric
64651268SericA common use is to convert old UUCP addreses to SMTP addresses using
64751268Sericthe UUCPSMTP macro.  For example:
64851268Seric
64951268Seric	LOCAL_RULE_3
65051268Seric	UUCPSMTP(decvax,	decvax.dec.com)
65151268Seric	UUCPSMTP(research,	research.att.com)
65251268Seric
65351268Sericwill cause addresses of the form "decvax!user" and "research!user"
65451268Sericto be converted to "user@decvax.dec.com" and "user@research.att.com"
65551268Sericrespectively.
65651268Seric
65765957SericThis could also be used to look up hosts in a database map:
65857246Seric
65957246Seric	LOCAL_RULE_3
66057246Seric	R$* < @ $+ > $*		$: $1 < @ $(hostmap $2 $) > $3
66157246Seric
66257246SericThis map would be defined in the LOCAL_CONFIG portion, as shown below.
66357246Seric
66451268SericSimilarly, LOCAL_RULE_0 can be used to introduce new parsing rules.
66551268SericFor example, new rules are needed to parse hostnames that you accept
66651309Sericvia MX records.  For example, you might have:
66751268Seric
66851309Seric	LOCAL_RULE_0
66965986Seric	R$+ <@ host.dom.ain.>	$#uucp $@ cnmat $: $1 < @ host.dom.ain.>
67051309Seric
67151309SericYou would use this if you had installed an MX record for cnmat.Berkeley.EDU
67251309Sericpointing at this host; this rule catches the message and forwards it on
67351309Sericusing UUCP.
67451309Seric
67558681SericYou can also tweak rulesets 1 and 2 using LOCAL_RULE_1 and LOCAL_RULE_2.
67658681SericThese rulesets are normally empty.
67758681Seric
67857246SericA similar macro is LOCAL_CONFIG.  This introduces lines added after the
67957246Sericboilerplate option setting but before rulesets, and can be used to
68057945Sericdeclare local database maps or whatever.  For example:
68151268Seric
68257246Seric	LOCAL_CONFIG
68357246Seric	Khostmap hash /etc/hostmap.db
68457246Seric	Kyplocal nis -m hosts.byname
68551220Seric
68658087Seric
68757246Seric+---------------------------+
68857246Seric| MASQUERADING AND RELAYING |
68957246Seric+---------------------------+
69057246Seric
69157246SericYou can have your host masquerade as another using
69257246Seric
69357246Seric	MASQUERADE_AS(host.domain)
69457246Seric
69565957SericThis causes outgoing SMTP mail to be labeled as coming from the
69657246Sericindicated domain, rather than $j.  One normally masquerades as one
69765957Sericof one's own subdomains (for example, it's unlikely that I would
69857246Sericchoose to masquerade as an MIT site).
69957246Seric
70064153SericThe masquerade name is not normally canonified, so it is important
70164153Sericthat it be your One True Name, that is, fully qualified and not a
70264153SericCNAME.
70364153Seric
70457246Sericthere are always users that need to be "exposed" -- that is, their
70557246Sericinternal site name should be displayed instead of the masquerade name.
70657246SericRoot is an example.  You can add users to this list using
70757246Seric
70857246Seric	EXPOSED_USER(usernames)
70957246Seric
71057246SericThis adds users to class E; you could also use something like
71157246Seric
71257246Seric	FE/etc/sendmail.cE
71357246Seric
71457246SericYou can also arrange to relay all unqualified names (that is, names
71557246Sericwithout @host) to a relay host.  For example, if you have a central
71657246Sericemail server, you might relay to that host so that users don't have
71757246Sericto have .forward files or aliases.  You can do this using
71857246Seric
71958071Seric	define(`LOCAL_RELAY', mailer:hostname)
72057246Seric
72158071SericThe ``mailer:'' can be omitted, in which case the mailer defaults to
72258071Seric"smtp".  There are some user names that you don't want relayed, perhaps
72358071Sericbecause of local aliases.  A common example is root, which may be
72458071Sericlocally aliased.  You can add entries to this list using
72557246Seric
72657246Seric	LOCAL_USER(usernames)
72757246Seric
72857246SericThis adds users to class L; you could also use something like
72957246Seric
73057246Seric	FL/etc/sendmail.cL
73157246Seric
73264153SericIf you want all incoming mail sent to a centralized hub, as for a
73364153Sericshared /var/spool/mail scheme, use
73457591Seric
73558071Seric	define(`MAIL_HUB', mailer:hostname)
73657591Seric
73758071SericAgain, ``mailer:'' defaults to "smtp".  If you define both LOCAL_RELAY
73866047Sericand MAIL_HUB, unqualified names will be sent to the LOCAL_RELAY and
73966047Sericother local names will be sent to MAIL_HUB.  Names in $=L will be
74066047Sericdelivered locally, so you MUST have aliases or .forward files for them.
74166047Seric
74266047SericFor example, if are on machine mastodon.CS.Berkeley.EDU, the following
74358071Sericcombinations of settings will have the indicated effects:
74457591Seric
74557591Sericemail sent to....	eric			  eric@mastodon.CS.Berkeley.EDU
74657591Seric
74757591SericLOCAL_RELAY set to	mail.CS.Berkeley.EDU	  (delivered locally)
74857591Sericmail.CS.Berkeley.EDU
74957591Seric
75057591SericMAIL_HUB set to		mammoth.CS.Berkeley.EDU	  mammoth.CS.Berkeley.EDU
75157591Sericmammoth.CS.Berkeley.EDU
75257591Seric
75357591SericBoth LOCAL_RELAY and	mail.CS.Berkeley.EDU	  mammoth.CS.Berkeley.EDU
75457591SericMAIL_HUB set as above
75557591Seric
75664153SericIf you want all outgoing mail to go to a central relay site, define
75764153SericSMART_HOST as well.  Briefly:
75858071Seric
75964153Seric	LOCAL_RELAY applies to unqualifed names (e.g., "eric").
76064153Seric	MAIL_HUB applies to names qualified with the name of the
76164153Seric		local host (e.g., "eric@mastodon.CS.Berkeley.EDU").
76264153Seric	SMART_HOST applies to names qualified with other hosts.
76364153Seric
76464153SericHowever, beware that other relays (e.g., UUCP_RELAY, BITNET_RELAY, and
76564153SericFAX_RELAY) take precedence over SMART_HOST, so if you really want
76664153Sericabsolutely everything to go to a single central site you will need to
76764153Sericunset all the other relays -- or better yet, find or build a minimal
76864153Sericconfig file that does this.
76964153Seric
77064153Seric
77158071Seric+-------------------------------+
77258071Seric| NON-SMTP BASED CONFIGURATIONS |
77358071Seric+-------------------------------+
77458071Seric
77558071SericThese configuration files are designed primarily for use by SMTP-based
77658071Sericsites.  I don't pretend that they are well tuned for UUCP-only or
77758071SericUUCP-primarily nodes (the latter is defined as a small local net
77858071Sericconnected to the rest of the world via UUCP).  However, there is one
77958071Serichook to handle some special cases.
78058071Seric
78158071SericYou can define a ``smart host'' that understands a richer address syntax
78258071Sericusing:
78358071Seric
78458071Seric	define(`SMART_HOST', mailer:hostname)
78558071Seric
78664028SericIn this case, the ``mailer:'' defaults to "relay".  Any messages that
78758071Sericcan't be handled using the usual UUCP rules are passed to this host.
78858071Seric
78958071SericIf you are on a local SMTP-based net that connects to the outside
79058071Sericworld via UUCP, you can use LOCAL_NET_CONFIG to add appropriate rules.
79158071SericFor example:
79258071Seric
79358071Seric	define(`SMART_HOST', suucp:uunet)
79458071Seric	LOCAL_NET_CONFIG
79563761Seric	R$* < @ $* .$m. > $*	$#smtp $@ $2.$m. $: $1 < @ $2.$m. > $3
79658071Seric
79758071SericThis will cause all names that end in your domain name ($m) via
79858071SericSMTP; anything else will be sent via suucp (smart UUCP) to uunet.
79963761SericIf you have FEATURE(nocanonify), you may need to omit the dots after
80063761Sericthe $m.  If you are running a local DNS inside your domain which is
80163761Sericnot otherwise connected to the outside world, you probably want to
80263761Sericuse:
80358071Seric
80463761Seric	define(`SMART_HOST', smtp:fire.wall.com)
80563761Seric	LOCAL_NET_CONFIG
80663761Seric	R$* < @ $* . > $*	$#smtp $@ $2. $: $1 < @ $2. > $3
80758071Seric
80863761SericThat is, send directly only to things you found in your DNS lookup;
80963761Sericanything else goes through SMART_HOST.
81063761Seric
81164153SericIf you are not running DNS at all, it is important to use
81264153SericFEATURE(nodns) to avoid having sendmail queue everything waiting
81364153Sericfor the name server to come up.
81463761Seric
81564153Seric
81664259Seric+-----------+
81764259Seric| WHO AM I? |
81864259Seric+-----------+
81964259Seric
82064259SericNormally, the $j macro is automatically defined to be your fully
82164259Sericqualified domain name (FQDN).  Sendmail does this by getting your
82264259Serichost name using gethostname and then calling gethostbyname on the
82364259Sericresult.  For example, in some environments gethostname returns
82464259Sericonly the root of the host name (such as "foo"); gethostbyname is
82564259Sericsupposed to return the FQDN ("foo.bar.com").  In some (fairly rare)
82664259Sericcases, gethostbyname may fail to return the FQDN.  In this case
82764259Sericyou MUST define confDOMAIN_NAME to be your fully qualified domain
82864259Sericname.  This is usually done using:
82964259Seric
83064259Seric	Dmbar.com
83164259Seric	define(`confDOMAIN_NAME', `$w.$m')dnl
83264259Seric
83364259Seric
83464028Seric+--------------------+
83564028Seric| USING MAILERTABLES |
83664028Seric+--------------------+
83764028Seric
83864028SericTo use FEATURE(mailertable), you will have to create an external
83964028Sericdatabase containing the routing information for various domains.
84064028SericFor example, a mailertable file in text format might be:
84164028Seric
84264028Seric	.my.domain		xnet:%1.my.domain
84364028Seric	uuhost1.my.domain	suucp:uuhost1
84464028Seric	.bitnet			smtp:relay.bit.net
84564028Seric
84664028SericThis should normally be stored in /etc/mailertable.  The actual
84764028Sericdatabase version of the mailertable is built using:
84864028Seric
84964028Seric	makemap hash /etc/mailertable.db < /etc/mailertable
85064028Seric
85164028SericThe semantics are simple.  Any LHS entry that does not begin with
85264028Serica dot matches the full host name indicated.  LHS entries beginning
85364028Sericwith a dot match anything ending with that domain name -- that is,
85464028Sericthey can be thought of as having a leading "*" wildcard.  Matching
85564028Sericis done in order of most-to-least qualified -- for example, even
85664028Sericthough ".my.domain" is listed first in the above example, an entry
85764028Sericof "uuhost1.my.domain" will match the second entry since it is
85864028Sericmore explicit.
85964028Seric
86064028SericThe RHS should always be a "mailer:host" pair.  The mailer is the
86164028Sericconfiguration name of a mailer (that is, an `M' line in the
86264028Sericsendmail.cf file).  The "host" will be the hostname passed to
86364028Sericthat mailer.  In domain-based matches (that is, those with leading
86464028Sericdots) the "%1" may be used to interpolate the wildcarded part of
86564028Sericthe host name.  For example, the first line above sends everything
86664028Sericaddressed to "anything.my.domain" to that same host name, but using
86764028Sericthe (presumably experimental) xnet mailer.
86864028Seric
86967915SericIn some cases you may want to temporarily turn off MX records,
87067915Sericparticularly on gateways.  For example, you may want to MX
87167915Sericeverything in a domain to one machine that then forwards it
87267915Sericdirectly.  To do this, you might use the DNS configuration:
87364028Seric
87467915Seric	*.domain.	IN	MX	0	relay.machine
87567915Seric
87667915Sericand on relay.machine use the mailertable:
87767915Seric
87867915Seric	.domain		smtp:[gateway.domain]
87967915Seric
88067915SericThe [square brackets] turn off MX records for this host only.
88167915SericIf you didn't do this, the mailertable would use the MX record
88267915Sericagain, which would give you an MX loop.
88367915Seric
88467915Seric
88564153Seric+--------------------------------+
88664153Seric| USING USERDB TO MAP FULL NAMES |
88764153Seric+--------------------------------+
88864153Seric
88964153SericThe user database was not originally intended for mapping full names
89064153Sericto login names (e.g., Eric.Allman => eric), but some people are using
89164153Sericit that way.  (I would recommend that you set up aliases for this
89264153Sericpurpose instead -- since you can specify multiple alias files, this
89364153Sericis fairly easy.)  The intent was to locate the default maildrop at
89464153Serica site, but allow you to override this by sending to a specific host.
89564153Seric
89664153SericIf you decide to set up the user database in this fashion, it is
89767917Sericimperative that you not use FEATURE(stickyhost) -- otherwise,
89864153Serice-mail sent to Full.Name@local.host.name will be rejected.
89964153Seric
90067917SericTo build the internal form of the user database, use:
90164153Seric
90264259Seric	makemap btree /usr/data/base.db < /usr/data/base.txt
90364259Seric
90464259Seric
90567539Seric+--------------------------------+
90667539Seric| MISCELLANEOUS SPECIAL FEATURES |
90767539Seric+--------------------------------+
90867539Seric
90967539SericDOTTED_USER(name)
91067539Seric	Sometimes it is convenient to merge configuration on a
91167539Seric	centralized mail machine, for example, to forward all
91267539Seric	root mail to a mail server.  In this case it might be
91367539Seric	useful to be able to treat the root addresses as a class
91467539Seric	of addresses with subtle differences.  You can do this
91567539Seric	using dotted users.  For example, a client might include
91667539Seric	the alias:
91767539Seric
91867539Seric		root:  root.client1@server
91967539Seric
92067539Seric	On the server, the mail configuration would include:
92167539Seric
92267539Seric		DOTTED_USER(root)
92367539Seric
92467539Seric	Aliases on the server that would match this address would
92567539Seric	be "root.client", "root.*", and "root", tried in that
92667539Seric	order.  You can specify multiple addresses either by
92767539Seric	joining them in one DOTTTED_USER macro or by having
92867539Seric	multiple macros:
92967539Seric
93067539Seric		DOTTED_USER(root)
93167539Seric		DOTTED_USER(postmaster mailer-daemon)
93267539Seric
93367539Seric	defines three dotted users.
93467539Seric
93567539Seric
93667960Seric+----------------+
93767960Seric| SECURITY NOTES |
93867960Seric+----------------+
93967960Seric
94067960SericA lot of sendmail security comes down to you.  Sendmail 8 is much
94167960Sericmore careful about checking for security problems than previous
94267960Sericversions, but there are some things that you still need to watch
94367960Sericfor.  In particular:
94467960Seric
94567960Seric* Make sure the aliases file isn't writable except by trusted
94667960Seric  system personnel.  This includes both the text and database
94767960Seric  version.
94867960Seric
94967960Seric* Make sure that other files that sendmail reads, such as the
95067960Seric  mailertable, is only writable by trusted system personnel.
95167960Seric
95267960Seric* The queue directory should not be world writable PARTICULARLY
95367960Seric  if your system allows "file giveaways" (that is, if a non-root
95467960Seric  user can chown any file they own to any other user).
95567960Seric
95667960Seric* If your system allows file giveaways, DO NOT create a publically
95767960Seric  writable directory for forward files.  This will allow anyone
95867960Seric  to steal anyone else's e-mail.  Instead, create a script that
95967960Seric  copies the .forward file from users' home directories once a
96067960Seric  night (if you want the non-NFS-mounted forward directory).
96167960Seric
96267960Seric* If your system allows file giveaways, you'll find that
96367960Seric  sendmail is much less trusting of :include: files -- in
96467960Seric  particular, you'll have to have /SENDMAIL/ANY/SHELL/ in
96567960Seric  /etc/shells before they will be trusted (that is, before
96667960Seric  files and programs listed in them will be honored).
96767960Seric
96867960SericIn general, file giveaways are a mistake -- if you can turn them
96967960Sericoff I recommend you do so.
97067960Seric
97167960Seric
97258363Seric+------------------+
97358363Seric| FlexFAX SOFTWARE |
97458363Seric+------------------+
97558363Seric
97658363SericSam Leffler's FlexFAX software is still in beta test -- but he expects a
97758363Sericpublic version out "later this week" [as of 3/1/93].  The following
97858363Sericblurb is direct from Sam:
97958363Seric
98064498Seric	$Header: /usr/people/sam/fax/RCS/HOWTO,v 1.14 93/05/24 11:42:16 sam Exp $
98158363Seric
98258363Seric	How To Obtain This Software (in case all you get is this file)
98364498Seric	--------------------------------------------------------------
98458363Seric	The source code is available for public ftp on
98564498Seric	    sgi.com			sgi/fax/v2.1.src.tar.Z
98658363Seric		(192.48.153.1)
98758363Seric
98858363Seric	You can also obtain inst'able images for Silicon Graphics machines from
98964498Seric	    sgi.com			sgi/fax/v2.1.inst.tar
99058363Seric		(192.48.153.1)
99158363Seric
99258363Seric	For example,
99358363Seric	    % ftp -n sgi.com
99458363Seric	    ....
99558363Seric	    ftp> user anonymous
99658363Seric	    ... <type in password>
99758363Seric	    ftp> cd sgi/fax
99858363Seric	    ftp> binary
99964498Seric	    ftp> get v2.1.src.tar.Z
100058363Seric
100164498Seric	In general, the latest version of the 2.1 release of the software is
100264498Seric	always available as "v2.1.src.tar.Z" or "v2.1.inst.tar" in the ftp
100364498Seric	directory.  This file is a link to the appropriate released version (so
100464498Seric	don't waste your time retrieving the linked file as well!) Any files of
100564498Seric	the form v2.1.*.patch are shell scripts that can be used to patch older
100664498Seric	versions of the source code.  For example, the file v2.1.0.patch would
100764498Seric	contain patches to update v2.1.0.tar.Z.  (Note to beta testers: this is
100864498Seric	different than the naming conventions used during beta testing.) Patch
100964498Seric	files only work to go between consecutive versions, so if you are
101064498Seric	multiple versions behind the latest release, you will need to apply
101164498Seric	each patch file between your current version and the latest.
101264498Seric
101364498Seric
101464498Seric	Obtaining the Software by Electronic Mail
101564498Seric	-----------------------------------------
101664498Seric	Do not send me requests for the software; they will be ignored (without
101764498Seric	response).  If you cannot use FTP at all, there is a service called
101864498Seric	"ftpmail" available from gatekeeper.dec.com:  you can send e-mail to
101964498Seric	this machine and it will use FTP to retrieve files for you and send you
102064498Seric	the files back again via e-mail.  To find out more about the ftpmail
102158363Seric	service, send a message to "ftpmail@gatekeeper.dec.com" whose body
102258363Seric	consists of the single line "help".
102358363Seric
102464498Seric
102564498Seric	Obtaining the Software Within Silicon Graphics
102664498Seric	----------------------------------------------
102758363Seric	Internal to Silicon Graphics there are inst'able images on the host
102864498Seric	flake.asd in the directory /usr/dist.  Thus you can do something like:
102958363Seric
103064498Seric	    % inst -f flake.asd.sgi.com:/usr/dist/flexfax
103158363Seric
103264498Seric	to install the latest version of the software on your machine.
103358363Seric
103464498Seric
103564498Seric	What to do Once You've Retrieved Stuff
103664498Seric	--------------------------------------
103758363Seric	The external distributions come in a compressed or uncompressed tar
103858363Seric	file.  To extract the source distribution:
103958363Seric
104064498Seric	    % zcat v2.1.src.tar.Z | tar xf -
104158363Seric
104258363Seric	(uncompress and extract individual files in current directory).  To
104358363Seric	unpack and install the client portion of the inst'able distribution:
104458363Seric
104558363Seric	    % mkdir dist
104664498Seric	    % cd dist; tar xf ../v2.1.inst.tar; cd ..
104758363Seric	    % inst -f dist/flexfax
104858363Seric	    ...
104958363Seric	    inst> go
105058363Seric
105158363Seric	(Note, the dist subdirectory is because some versions of inst fail if
105264498Seric	the files are in the current directory.) Server binaries are also
105364498Seric	included in the inst'able images as flexfax.server.*.  They are not
105464498Seric	installed by default, so to get them also you need to do:
105558363Seric
105658363Seric	    % inst -f flexfax
105758363Seric	    ...
105858363Seric	    inst> install flexfax.server.*
105958363Seric	    inst> go
106058363Seric
106164498Seric	The SGI binaries were built for Version 4.0.5H of the IRIX operating
106258363Seric	system.  They should work w/o problem on earlier versions of the
106358363Seric	system, but I have not fully tested this.  Also, note that to install a
106458363Seric	server on an SGI machine, you need to have installed the Display
106558363Seric	PostScript execution environment product (dps_eoe).  Otherwise, the fax
106658363Seric	server will not be able to convert PostScript to facsimile for
106758363Seric	transmission.
106858363Seric
106964498Seric	If you are working from the source distribution, look at the file
107064498Seric	README in the top of the source tree.  If you are working from the inst
107164498Seric	images, the subsystem flexfax.man.readme contains the README file and
107264498Seric	other useful pieces of information--the installed files are placed in
107364498Seric	the directory /usr/local/doc/flexfax).  Basically you will need to run
107464498Seric	the faxaddmodem script to setup and configure your fax modem.  Consult
107564498Seric	the README file and the manual page for faxaddmodem for information.
107658363Seric
107758363Seric
107864498Seric	FlexFAX Mail List
107964498Seric	-----------------
108058363Seric	A mailing list for users of this software is located on sgi.com.
108158363Seric	If you want to join this mailing list or have a list-related request
108258363Seric	such as getting your name removed from it, send a request to
108358363Seric
108464498Seric	    majordomo@whizzer.wpd.sgi.com
108558363Seric
108664498Seric	For example, to subscribe, send the line "subscribe flexfax" in
108764498Seric	the body of your message.  The line "help" will return a list of
108864498Seric	the commands understood by the mailing list management software.
108964498Seric
109058363Seric	Submissions (including bug reports) should be directed to:
109158363Seric
109258363Seric	    flexfax@sgi.com
109358363Seric
109464498Seric	When corresponding about this software please always specify what
109564498Seric	version you have, what system you're running on, and, if the problem is
109664498Seric	specific to your modem, identify the modem and firmware revision.
109758363Seric
109864498Seric
109957945Seric+--------------------------------+
110057945Seric| TWEAKING CONFIGURATION OPTIONS |
110157945Seric+--------------------------------+
110257945Seric
110357945SericThere are a large number of configuration options that don't normally
110457945Sericneed to be changed.  However, if you feel you need to tweak them, you
110557945Sericcan define the following M4 variables.  This list is shown in four
110657945Sericcolumns:  the name you define, the default value for that definition,
110757945Sericthe option or macro that is affected (either Ox for an option or Dx
110857945Sericfor a macro), and a brief description.  Greater detail of the semantics
110957945Sericcan be found in the Installation and Operations Guide.
111057945Seric
111163582SericSome options are likely to be deprecated in future versions -- that is,
111263582Sericthe option is only included to provide back-compatibility.  These are
111363582Sericmarked with "*".
111463582Seric
111565002SericRemember that these options are M4 variables, and hence may need to
111665002Sericbe quoted.  In particular, arguments with commas will usually have to
111765002Sericbe ``double quoted, like this phrase'' to avoid having the comma
111865002Sericconfuse things.  This is common for alias file definitions and for
111965002Sericthe read timeout.
112065002Seric
112157945SericM4 Variable Name	Default		Mac/Opt	Description
112265002Seric================	=======		=======	===========
112357945SericconfMAILER_NAME		MAILER-DAEMON	Dn	The sender name used for
112457945Seric						internally generated
112557945Seric						outgoing messages.
112658681SericconfFROM_LINE		From $g  $d	Dl	The From_ line used when
112758681Seric						sending to files or programs.
112857945SericconfFROM_HEADER		$?x$x <$g>$|$g$.	The format of an internally
112957945Seric					Dq	generated From: address.
113067929SericconfOPERATORS		.:%@!^/[]+	Do	Address operator characters.
113164153SericconfSMTP_LOGIN_MSG	$j Sendmail $v/$Z ready at $b
113257945Seric					De	The initial (spontaneous)
113357945Seric						SMTP greeting message.
113467820SericconfRECEIVED_HEADER	$?sfrom $s $.$?_($?s$|from $.$_) $.by $j ($v/$Z)$?r with $r$. id $i$?u for $u$.; $b
113567820Seric					HReceived
113667820Seric						The format of the Received:
113767820Seric						header in messages passed
113867820Seric						through this host.  It is
113967820Seric						unwise to try to change this.
114059743SericconfSEVEN_BIT_INPUT	False		O7	Force input to seven bits?
114167551SericconfEIGHT_BIT_HANDLING	pass8		O8	8-bit data handling
114257945SericconfALIAS_WAIT		10		Oa	Wait (in minutes) for alias
114357945Seric						file rebuild.
114458087SericconfMIN_FREE_BLOCKS	4		Ob	Minimum number of free blocks
114558087Seric						on queue filesystem to accept
114658087Seric						SMTP mail.
114757945SericconfBLANK_SUB		.		OB	Blank (space) substitution
114857945Seric						character.
114965619SericconfCON_EXPENSIVE	False		Oc	Avoid connecting immediately
115065619Seric						to mailers marked expensive?
115157945SericconfCHECKPOINT_INTERVAL	10		OC	Checkpoint queue files
115257945Seric						every N recipients.
115357945SericconfDELIVERY_MODE	background	Od	Default delivery mode.
115457945SericconfAUTO_REBUILD	False		OD	Automatically rebuild
115557945Seric						alias file if needed.
115657945SericconfERROR_MODE		(undefined)	Oe	Error message mode.
115757945SericconfERROR_MESSAGE	(undefined)	OE	Error message header/file.
115857945SericconfSAVE_FROM_LINES	False		Of	Save extra leading
115957945Seric						From_ lines.
116057945SericconfTEMP_FILE_MODE	0600		OF	Temporary file mode.
116157945SericconfDEF_GROUP_ID	1		Og	Default group id.
116257945SericconfMATCH_GECOS		False		OG	Match GECOS field.
116357945SericconfMAX_HOP		17		Oh	Maximum hop count.
116463582SericconfIGNORE_DOTS		False		Oi *	Ignore dot as terminator
116557945Seric						for incoming messages?
116657945SericconfBIND_OPTS		(empty)		OI	Default options for BIND.
116763582SericconfMIME_FORMAT_ERRORS	True		Oj *	Send error messages as MIME-
116859743Seric						encapsulated messages per
116959743Seric						RFC 1344.
117064153SericconfFORWARD_PATH	(undefined)	OJ	The colon-separated list of
117164153Seric						places to search for .forward
117267960Seric						files.  N.B.: see the Security
117367960Seric						Notes section.
117457945SericconfMCI_CACHE_SIZE	2		Ok	Size of open connection cache.
117557945SericconfMCI_CACHE_TIMEOUT	5m		OK	Open connection cache timeout.
117663582SericconfUSE_ERRORS_TO	False		Ol *	Use the Errors-To: header to
117763582Seric						deliver error messages.  This
117863582Seric						should not be necessary because
117963582Seric						of general acceptance of the
118063582Seric						envelope/header distinction.
118157945SericconfLOG_LEVEL		9		OL	Log level.
118257945SericconfME_TOO		False		Om	Include sender in group
118357945Seric						expansions.
118457945SericconfCHECK_ALIASES	True		On	Check RHS of aliases when
118557945Seric						running newaliases.
118663582SericconfOLD_STYLE_HEADERS	True		Oo *	Assume that headers without
118757945Seric						special chars are old style.
118858859SericconfDAEMON_OPTIONS	(undefined)	OO	SMTP daemon options.
118958806SericconfPRIVACY_FLAGS	authwarnings	Op	Privacy flags.
119057945SericconfCOPY_ERRORS_TO	(undefined)	OP	Address for additional copies
119157945Seric						of all error messages.
119257945SericconfQUEUE_FACTOR	(undefined)	Oq	Slope of queue-only function
119358116SericconfREAD_TIMEOUT	(undefined)	Or	SMTP read timeouts.
119467811SericconfDONT_PRUNE_ROUTES	False		OR	Don't prune down route-addr
119567811Seric						syntax addresses to the
119667811Seric						minimum possible.
119763582SericconfSAFE_QUEUE		True		Os *	Commit all messages to disk
119857945Seric						before forking.
119958806SericconfMESSAGE_TIMEOUT	5d/4h		OT	Timeout for messages before
120058806Seric						sending error/warning message.
120159317SericconfTIME_ZONE		USE_SYSTEM	Ot	Time zone info -- can be
120257945Seric						USE_SYSTEM to use the system's
120357945Seric						idea, USE_TZ to use the user's
120457945Seric						TZ envariable, or something
120557945Seric						else to force that value.
120657945SericconfDEF_USER_ID		1		Ou	Default user id.
120758718SericconfUSERDB_SPEC		(undefined)	OU	User database specification.
120858859SericconfFALLBACK_MX		(undefined)	OV	Fallback MX host.
120963857SericconfTRY_NULL_MX_LIST	False		Ow	If we are the best MX for a
121063857Seric						host and haven't made other
121163857Seric						arrangements, try connecting
121263857Seric						to the host directly; normally
121363857Seric						this would be a config error.
121457945SericconfQUEUE_LA		8		Ox	Load average at which queue-only
121557945Seric						function kicks in.
121657945SericconfREFUSE_LA		12		OX	Load average at which incoming
121757945Seric						SMTP connections are refused.
121863582SericconfWORK_RECIPIENT_FACTOR
121963582Seric			(undefined)	Oy	Cost of each recipient.
122063582SericconfSEPARATE_PROC	False		OY	Run all deliveries in a
122157945Seric						separate process.
122257945SericconfWORK_CLASS_FACTOR	(undefined)	Oz	Priority multiplier for class.
122357945SericconfWORK_TIME_FACTOR	(undefined)	OZ	Cost of each delivery attempt.
122468184SericconfQUEUE_SORT_ORDER	Priority	O QueueSortOrder
122568184Seric						Queue sort algorithm:
122668184Seric						Priority or Host.
122758408SericconfCW_FILE		/etc/sendmail.cw	Name of file used to get the
122858408Seric					Fw	local additions to the $=w
122958408Seric						class.
123064153SericconfSMTP_MAILER		smtp		-	The mailer name used when
123163972Seric						SMTP connectivity is required.
123267915Seric						One of "smtp", "smtp8", or
123367915Seric						"esmtp".
123463999SericconfLOCAL_MAILER	local		-	The mailer name used when
123563999Seric						local connectivity is required.
123663999Seric						Almost always "local".
123764028SericconfRELAY_MAILER	relay		-	The default mailer name used
123864028Seric						for relaying any mail (e.g.,
123964028Seric						to a BITNET_RELAY, a
124064028Seric						SMART_HOST, or whatever).
124164028Seric						This can reasonably be "suucp"
124264028Seric						if you are on a UUCP-connected
124364028Seric						site.
124464259SericconfDOMAIN_NAME		(undefined)	Dj	If defined, sets $j.
124557945Seric
124658087Seric
124757246Seric+-----------+
124857246Seric| HIERARCHY |
124957246Seric+-----------+
125057246Seric
125151220SericWithin this directory are several subdirectories, to wit:
125251220Seric
125351220Sericm4		General support routines.  These are typically
125451220Seric		very important and should not be changed without
125557247Seric		very careful consideration.
125651220Seric
125751220Sericcf		The configuration files themselves.  They have
125851220Seric		".mc" suffixes, and must be run through m4 to
125951220Seric		become complete.  The resulting output should
126051220Seric		have a ".cf" suffix.
126151220Seric
126251220Sericostype		Definitions describing a particular operating
126351220Seric		system type.  These should always be referenced
126451220Seric		using the OSTYPE macro in the .mc file.  Examples
126551220Seric		include "bsd4.3", "bsd4.4", "sunos3.5", and
126651220Seric		"sunos4.1".
126751220Seric
126851220Sericdomain		Definitions describing a particular domain, referenced
126951220Seric		using the DOMAIN macro in the .mc file.  These are
127051220Seric		site dependent; for example, we contribute "cs.exposed.m4"
127151220Seric		and "cs.hidden.m4" which both describe hosts in the
127251220Seric		CS.Berkeley.EDU subdomain; the former displays the local
127351220Seric		hostname (e.g., mammoth.CS.Berkeley.EDU), whereas the
127451220Seric		latter does its best to hide the identity of the local
127551220Seric		workstation inside the CS subdomain.
127651220Seric
127751220Sericmailer		Descriptions of mailers.   These are referenced using
127851220Seric		the MAILER macro in the .mc file.
127951220Seric
128051220Sericsh		Shell files used when building the .cf file from the
128151220Seric		.mc file in the cf subdirectory.
128251220Seric
128351220Sericfeature		These hold special orthogonal features that you might
128451220Seric		want to include.  They should be referenced using
128551220Seric		the FEATURE macro.
128651220Seric
128751220Serichack		Local hacks.  These can be referenced using the HACK
128851220Seric		macro.  They shouldn't be of more than voyeuristic
128951220Seric		interest outside the .Berkeley.EDU domain, but who knows?
129065957Seric		We've all got our own peccadillos.
129151220Seric
129251268Sericsiteconfig	Site configuration -- e.g., tables of locally connected
129351268Seric		UUCP sites.
129451220Seric
129551268Seric
129657246Seric+------------------------+
129757246Seric| ADMINISTRATIVE DETAILS |
129857246Seric+------------------------+
129951220Seric
130051220SericThe following sections detail usage of certain internal parts of the
130151220Sericsendmail.cf file.  Read them carefully if you are trying to modify
130251220Sericthe current model.  If you find the above descriptions adequate, these
130351220Sericshould be {boring, confusing, tedious, ridiculous} (pick one or more).
130451220Seric
130551220SericRULESETS (* means built in to sendmail)
130651220Seric
130751220Seric   0 *	Parsing
130851220Seric   1 *	Sender rewriting
130951220Seric   2 *	Recipient rewriting
131051220Seric   3 *	Canonicalization
131151220Seric   4 *	Post cleanup
131254839Seric   5 *	Local address rewrite (after aliasing)
131360539Seric  1x	mailer rules (sender qualification)
131460539Seric  2x	mailer rules (recipient qualification)
131564801Seric  3x	mailer rules (sender header qualification)
131664801Seric  4x	mailer rules (recipient header qualification)
131764801Seric  5x	mailer subroutines (general)
131864801Seric  6x	mailer subroutines (general)
131964801Seric  7x	mailer subroutines (general)
132064801Seric  8x	reserved
132160539Seric  90	Mailertable host stripping
132260892Seric  96	Bottom half of Ruleset 3 (ruleset 6 in old sendmail)
132360892Seric  97	Hook for recursive ruleset 0 call (ruleset 7 in old sendmail)
132463857Seric  98	Local part of ruleset 0 (ruleset 8 in old sendmail)
132551220Seric
132651220Seric
132751220SericMAILERS
132851220Seric
132951220Seric   0	local, prog	local and program mailers
133065218Seric   1	[e]smtp, relay	SMTP channel
133165218Seric   2	uucp-*		UNIX-to-UNIX Copy Program
133258087Seric   3	netnews		Network News delivery
133358363Seric   4	fax		Sam Leffler's FlexFAX software
133451220Seric
133551220Seric
133651220SericMACROS
133751220Seric
133851220Seric   A
133951220Seric   B	Bitnet Relay
134065182Seric   C
134154839Seric   D	The local domain -- usually not needed
134251220Seric   E
134358363Seric   F	FAX Relay
134451220Seric   G
134557591Seric   H	mail Hub (for mail clusters)
134651220Seric   I
134751220Seric   J
134851220Seric   K
134967915Seric   L	Luser Relay
135051220Seric   M	Masquerade (who I claim to be)
135151220Seric   N
135251220Seric   O
135351220Seric   P
135451220Seric   Q
135551220Seric   R	Relay (for unqualified names)
135658071Seric   S	Smart Host
135751220Seric   T
135851309Seric   U	my UUCP name (if I have a UUCP connection)
135951309Seric   V	UUCP Relay (class V hosts)
136051220Seric   W	UUCP Relay (class W hosts)
136151220Seric   X	UUCP Relay (class X hosts)
136251309Seric   Y	UUCP Relay (all other hosts)
136351220Seric   Z	Version number
136451220Seric
136551220Seric
136651220SericCLASSES
136751220Seric
136851220Seric   A
136951220Seric   B
137051220Seric   C
137167539Seric   D	"dotted" users
137257246Seric   E	addresses that should not seem to come from $M
137354839Seric   F	hosts we forward for
137451220Seric   G
137551220Seric   H
137651220Seric   I
137751220Seric   J
137851220Seric   K
137951220Seric   L	addresses that should not be forwarded to $R
138051220Seric   M
138151220Seric   N
138251220Seric   O	operators that indicate network operations (cannot be in local names)
138360211Seric   P	top level pseudo-domains: BITNET, FAX, UUCP, etc.
138451220Seric   Q
138551220Seric   R
138651220Seric   S
138751220Seric   T
138851220Seric   U	locally connected UUCP hosts
138951309Seric   V	UUCP hosts connected to relay $V
139051309Seric   W	UUCP hosts connected to relay $W
139151309Seric   X	UUCP hosts connected to relay $X
139251309Seric   Y	locally connected smart UUCP hosts
139364153Seric   Z	locally connected domain-ized UUCP hosts
139454839Seric   .	the class containing only a dot
139551220Seric
139651220Seric
139751220SericM4 DIVERSIONS
139851220Seric
139958071Seric   1	Local host detection and resolution
140058071Seric   2	Local Ruleset 3 additions
140158071Seric   3	Local Ruleset 0 additions
140251268Seric   4	UUCP Ruleset 0 additions
140351309Seric   5	locally interpreted names (overrides $R)
140454839Seric   6	local configuration (at top of file)
140551220Seric   7	mailer definitions
140666099Seric   8
140758681Seric   9	special local rulesets (1 and 2)
1408