xref: /csrg-svn/usr.sbin/sendmail/cf/README (revision 68340)
151220Seric
251220Seric
357246Seric		NEW SENDMAIL CONFIGURATION FILES
451220Seric
557246Seric		Eric Allman <eric@CS.Berkeley.EDU>
651220Seric
7*68340Seric		@(#)README	8.47 (Berkeley) 02/15/95
851220Seric
951220Seric
1057246SericThis document describes the sendmail configuration files being used
1167469Sericat Berkeley.  These use features in the new (R8) sendmail; they will
1267469Sericnot work on other versions.
1351220Seric
1457246SericThese configuration files are probably not as general as previous
1565957Sericversions, and don't handle as many of the weird cases automagically.
1657246SericI was able to simplify by them for two reasons.  First, the network
1757246Serichas become more consistent -- for example, at this point, everyone
1857246Sericon the internet is supposed to be running a name server, so hacks to
1957246Serichandle NIC-registered hosts can go away.  Second, I assumed that a
2057246Sericsubdomain would be running SMTP internally -- UUCP is presumed to be
2157246Serica long-haul protocol.  I realize that this is not universal, but it
2257246Sericdoes describe the vast majority of sites with which I am familiar,
2357246Sericincluding those outside the US.
2451220Seric
2565957SericOf course, the downside of this is that if you do live in a weird
2665957Sericworld, things are going to get weirder for you.  I'm sorry about that,
2757246Sericbut at the time we at Berkeley had a problem, and it seemed like the
2857246Sericright thing to do.
2951220Seric
3057247SericThis package requires a post-V7 version of m4; if you are running the
3157247Seric4.2bsd, SysV.2, or 7th Edition version, I suggest finding a friend with
3257247Serica newer version.  You can m4-expand on their system, then run locally.
3365002SericSunOS's /usr/5bin/m4 or BSD-Net/2's m4 both work.  GNU m4 version 1.1
3465002Sericalso works.  Unfortunately, I'm told that the M4 on BSDI 1.0 doesn't
3565002Sericwork -- you'll have to use a Net/2 or GNU version.
3651220Seric
3758284SericIF YOU DON'T HAVE A BERKELEY MAKE, don't despair!  Just run
3864371Seric"m4 foo.mc > foo.cf" -- that should be all you need.  There is also
3964371Serica fairly crude (but functional) Makefile.dist that works on the
4064371Sericold version of make.
4158284Seric
4258284SericTo get started, you may want to look at tcpproto.mc (for TCP-only
4364324Sericsites), uucpproto.mc (for UUCP-only sites), and clientproto.mc (for
4464324Sericclusters of clients using a single mail host).  Others are versions
4558284Sericthat we use at Berkeley, although not all are in current use.  For
4658284Sericexample, ucbarpa has gone away, but I've left ucbarpa.mc in because
4758284Sericit demonstrates some interesting techniques.
4858284Seric
4957246SericI'm not pretending that this README describes everything that these
5057246Sericconfiguration files can do; clever people can probably tweak them
5157246Sericto great effect.  But it should get you started.
5257246Seric
5365509Seric*******************************************************************
5465509Seric***  BE SURE YOU CUSTOMIZE THESE FILES!  They have some		***
5565509Seric***  Berkeley-specific assumptions built in, such as the name	***
5665509Seric***  of our UUCP-relay.  You'll want to create your own domain	***
5765509Seric***  description, and use that in place of domain/Berkeley.m4.	***
5865509Seric*******************************************************************
5958087Seric
6065509Seric
6157246Seric+--------------------------+
6257246Seric| INTRODUCTION AND EXAMPLE |
6357246Seric+--------------------------+
6457246Seric
6557246SericConfiguration files are contained in the subdirectory "cf", with a
6657246Sericsuffix ".mc".  They must be run through "m4" to produce a ".cf" file.
6757246Seric
6851220SericLet's examine a typical .mc file (cf/cs-exposed.mc):
6951220Seric
7051220Seric	divert(-1)
7151220Seric	#
7251220Seric	# Copyright (c) 1983 Eric P. Allman
7351220Seric	# Copyright (c) 1988 The Regents of the University of California.
7451220Seric	# All rights reserved.
7551220Seric	#
7651220Seric	# Redistribution and use in source and binary forms are permitted
7751220Seric	# provided that the above copyright notice and this paragraph are
7851220Seric	# duplicated in all such forms and that any documentation,
7951220Seric	# advertising materials, and other materials related to such
8051220Seric	# distribution and use acknowledge that the software was developed
8151220Seric	# by the University of California, Berkeley.  The name of the
8251220Seric	# University may not be used to endorse or promote products derived
8351220Seric	# from this software without specific prior written permission.
8451220Seric	# THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR
8551220Seric	# IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED
8651220Seric	# WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR A PARTICULAR PURPOSE.
8751220Seric	#
8851220Seric
8957246SericThe divert(-1) will delete the crud in the resulting output file.
9057247SericThe copyright notice is what your lawyers require.  Our lawyers require
9157246Sericthe one that I've included in my files. A copyleft is a copyright by
9257246Sericanother name.
9351220Seric
9457246SericThe next line MUST be
9557246Seric
9651220Seric	include(`../m4/cf.m4')
9751220Seric
9857246SericThis will pull in the M4 macros you will need to make sense of
9957246Sericeverything else.  As the saying goes, don't think about it, just
10057246Sericdo it.  If you don't do it, don't bother reading the rest of this
10157246Sericfile.
10251220Seric
10356778Seric	VERSIONID(`<SCCS or RCS version id>')
10451220Seric
10551220SericVERSIONID is a macro that stuffs the version information into the
10651220Sericresulting file.  We use SCCS; you could use RCS, something else, or
10757246Sericomit it completely.  This is not the same as the version id included
10857246Sericin SMTP greeting messages -- this is defined in m4/version.m4.
10951220Seric
11051268Seric	DOMAIN(cs.exposed)
11151220Seric
11251220SericThis example exposes the host inside of the CS subdomain -- that is,
11351220Sericit doesn't try to hide the name of the workstation to the outside
11451220Sericworld.  Changing this to DOMAIN(cs.hidden) would have made outgoing
11551220Sericmessages refer to "<username>@CS.Berkeley.EDU" instead of using the
11663857Sericlocal hostname.  Internally this is effected by using
11757246Seric"MASQUERADE_AS(CS.Berkeley.EDU)".
11851220Seric
11951268Seric	MAILER(smtp)
12051220Seric
12151309SericThese describe the mailers used at the default CS site site.  The
12251309Sericlocal mailer is always included automatically.
12351220Seric
12458087Seric
12557246Seric+--------+
12657246Seric| OSTYPE |
12757246Seric+--------+
12857246Seric
12951220SericNote that cf/cs-exposed.mc omits an OSTYPE macro -- this assumes
13051220Sericdefault Computer Science Division environment.  There are several
13157247Sericexplicit environments available: bsd4.3, bsd4.4, hpux, irix, osf1,
13257247Sericriscos4.5, sunos3.5, sunos4.1, and ultrix4.1.  These change things
13357247Sericlike the location of the alias file and queue directory.  Some of
13457247Sericthese files are identical to one another.
13551220Seric
13657246SericOperating system definitions are easy to write.  They may define
13757246Sericthe following variables (everything defaults, so an ostype file
13857246Sericmay be empty).
13951220Seric
14057246SericALIAS_FILE		[/etc/aliases] The location of the text version
14159761Seric			of the alias file(s).  It can be a comma-separated
14266790Seric			list of names (but be sure you quote values with
14366790Seric			comments in them -- for example, use
14466790Seric				define(`ALIAS_FILE', `a,b')
14566790Seric			to get "a" and "b" both listed as alias files;
14666790Seric			otherwise the define() primitive only sees "a").
14757246SericHELP_FILE		[/usr/lib/sendmail.hf] The name of the file
14857246Seric			containing information printed in response to
14957246Seric			the SMTP HELP command.
15057246SericQUEUE_DIR		[/var/spool/mqueue] The directory containing
15157246Seric			queue files.
15257246SericSTATUS_FILE		[/etc/sendmail.st] The file containing status
15357246Seric			information.
15458087SericLOCAL_MAILER_PATH	[/bin/mail] The program used to deliver local mail.
15564153SericLOCAL_MAILER_FLAGS	[rmn] The flags used by the local mailer.  The
15664153Seric			flags lsDFM are always included.
15763761SericLOCAL_MAILER_ARGS	[mail -d $u] The arguments passed to deliver local
15863761Seric			mail.
159*68340SericLOCAL_MAILER_MAX	[undefined] If defined, the maximum size of local
160*68340Seric			mail that you are willing to accept.
16158087SericLOCAL_SHELL_PATH	[/bin/sh] The shell used to deliver piped email.
16263791SericLOCAL_SHELL_FLAGS	[eu] The flags used by the shell mailer.  The
16363791Seric			flags lsDFM are always included.
16463791SericLOCAL_SHELL_ARGS	[sh -c $u] The arguments passed to deliver "prog"
16563791Seric			mail.
16667989SericLOCAL_SHELL_DIR		[$z:/] The directory search path in which the
16767989Seric			shell should run.
16858087SericUSENET_MAILER_PATH	[/usr/lib/news/inews] The name of the program
16958087Seric			used to submit news.
17058087SericUSENET_MAILER_FLAGS	[rlsDFMmn] The mailer flags for the usenet mailer.
17158087SericUSENET_MAILER_ARGS	[-m -h -n] The command line arguments for the
17258087Seric			usenet mailer.
17365911SericUSENET_MAILER_MAX	[100000] The maximum size of messages that will
17465911Seric			be accepted by the usenet mailer.
17563857SericSMTP_MAILER_FLAGS	[undefined] Flags added to SMTP mailer.  Default
17667915Seric			flags are `mDFMUX' for all SMTP-based mailers; the
17767915Seric			"esmtp" mailer adds `a' and "smtp8" adds `8'.
17865911SericSMTP_MAILER_MAX		[undefined] The maximum size of messages that will
17967915Seric			be transported using the smtp, smtp8, or esmtp
18067915Seric			mailers.
18167915SericSMTP_MAILER_ARGS	[IPC $h] The arguments passed to the smtp mailer.
18267915Seric			About the only reason you would want to change this
18367915Seric			would be to change the default port.
18467915SericESMTP_MAILER_ARGS	[IPC $h] The arguments passed to the esmtp mailer.
18567915SericSMTP8_MAILER_ARGS	[IPC $h] The arguments passed to the smtp8 mailer.
18667915SericRELAY_MAILER_ARGS	[IPC $h] The arguments passed to the relay mailer.
18763857SericUUCP_MAILER_FLAGS	[undefined] Flags added to UUCP mailer.  Default
18863857Seric			flags are `DFMhuU' (and `m' for suucp mailer, minus
18963857Seric			`U' for uucp-dom mailer).
19068057SericUUCP_MAILER_ARGS	[uux - -r -z -a$g -gC $h!rmail ($u)] The arguments
19163761Seric			passed to the UUCP mailer.
19263791SericUUCP_MAX_SIZE		[100000] The maximum size message accepted for
19363791Seric			transmission by the UUCP mailers.
19465911SericFAX_MAILER_PATH		[/usr/local/lib/fax/mailfax] The program used to
19565911Seric			submit FAX messages.
19665911SericFAX_MAILER_MAX		[100000] The maximum size message accepted for
19765911Seric			transmission by FAX.
19867934SericPOP_MAILER_PATH		[/usr/lib/mh/spop] The pathname of the POP mailer.
19967934SericPOP_MAILER_FLAGS	[Penu] Flags added to POP mailer.  Flags "lsDFM"
20067934Seric			are always added.
20167934SericPOP_MAILER_ARGS		[pop $u] The arguments passed to the POP mailer.
20267942SericPROCMAIL_MAILER_FLAGS	[Shu] Flags added to Procmail mailer.  Flags
20367942Seric			``DFMmn'' are always set.
20467942SericPROCMAIL_MAILER_ARGS	[procmail -m $h $f $u] The arguments passed to
20567942Seric			the Procmail mailer.
206*68340SericPROCMAIL_MAILER_MAX	[undefined] If set, the maximum size message that
207*68340Seric			will be accepted by the procmail mailer.
20857246Seric
20957246Seric+---------+
21057246Seric| DOMAINS |
21157246Seric+---------+
21257246Seric
21357246SericYou will probably want to collect domain-dependent defines into one
21457246Sericfile, referenced by the DOMAIN macro.  For example, our Berkeley
21557246Sericdomain file includes definitions for several internal distinguished
21657246Serichosts:
21757246Seric
21857246SericUUCP_RELAY	The host that will forward UUCP-addressed email.
21957246Seric		If not defined, all UUCP sites must be directly
22064028Seric		connected.
22157246SericBITNET_RELAY	The host that will forward BITNET-addressed email.
22257246Seric		If not defined, the .BITNET pseudo-domain won't work.
22357246SericLOCAL_RELAY	The site that will handle unqualified names -- that
22457246Seric		is, names with out an @domain extension.  If not set,
22557246Seric		they are assumed to belong on this machine.  This
22657246Seric		allows you to have a central site to store a
22757246Seric		company- or department-wide alias database.  This
22857246Seric		only works at small sites, and there are better
22964028Seric		methods.
23067915SericLUSER_RELAY	The site that will handle lusers -- that is, apparently
23167915Seric		local names that aren't local accounts or aliases.
23257246Seric
23367915SericAny of these can be either ``mailer:hostname'' (in which case the
23464028Sericmailer is the internal mailer name, such as ``suucp'' and the hostname
23564028Sericis the name of the host as appropriate for that mailer) or just a
23664028Seric``hostname'', in which case a default mailer type (usually ``relay'',
23764153Serica variant on SMTP) is used.  WARNING: if you have a wildcard MX
23864153Sericrecord matching your domain, you probably want to define these to
23964153Serichave a trailing dot so that you won't get the mail diverted back
24064153Sericto yourself.
24164028Seric
24257246SericThe domain file can also be used to define a domain name, if needed
24357982Seric(using "DD<domain>") and set certain site-wide features.  If all hosts
24457982Sericat your site masquerade behind one email name, you could also use
24557982SericMASQUERADE_AS here.
24657246Seric
24758408SericYou do not have to define a domain -- in particular, if you are a
24858408Sericsingle machine sitting off somewhere, it is probably more work than
24958408Sericit's worth.  This is just a mechanism for combining "domain dependent
25058408Sericknowledge" into one place.
25158408Seric
25257246Seric+---------+
25357246Seric| MAILERS |
25457246Seric+---------+
25557246Seric
25651220SericThere are fewer mailers supported in this version than the previous
25751220Sericversion, owing mostly to a simpler world.
25851220Seric
25951220Sericlocal		The local and prog mailers.  You will almost always
26051220Seric		need these; the only exception is if you relay ALL
26157247Seric		your mail to another site.  This mailer is included
26257247Seric		automatically.
26351220Seric
26451220Sericsmtp		The Simple Mail Transport Protocol mailer.  This does
26551220Seric		not hide hosts behind a gateway or another other
26651220Seric		such hack; it assumes a world where everyone is
26763761Seric		running the name server.  This file actually defines
26867915Seric		four mailers: "smtp" for regular (old-style) SMTP to
26963761Seric		other servers, "esmtp" for extended SMTP to other
27067915Seric		servers, "smtp8" to do SMTP to other servers without
27167915Seric		converting 8-bit data to MIME (essentially, this is
27267915Seric		your statement that you know the other end is 8-bit
27367915Seric		clean even if it doesn't say so), and "relay" for
27467915Seric		transmission to our RELAY_HOST, LUSER_RELAY, or
27567915Seric		MAILER_HUB.
27651220Seric
27751220Sericuucp		The Unix-to-Unix Copy Program mailer.  Actually, this
27867471Seric		defines two mailers, "uucp-old" (a.k.a. "uucp") and
27967471Seric		"uucp-new" (a.k.a. "suucp").  The latter is for when you
28067471Seric		know that the UUCP mailer at the other end can handle
28167471Seric		multiple recipients in one transfer.  If the smtp mailer
28267471Seric		is also included in your configuration, two other mailers
28367471Seric		("uucp-dom" and "uucp-uudom") are also defined.  When you
28467471Seric		include the uucp mailer, sendmail looks for all names in
28565218Seric		the $=U class and sends them to the uucp-old mailer; all
28665218Seric		names in the $=Y class are sent to uucp-new; and all
28765218Seric		names in the $=Z class are sent to uucp-uudom.  Note that
28857246Seric		this is a function of what version of rmail runs on
28957246Seric		the receiving end, and hence may be out of your control.
29065218Seric		See the section below describing UUCP mailers in more
29165218Seric		detail.
29251220Seric
29358087Sericusenet		Usenet (network news) delivery.  If this is specified,
29458087Seric		an extra rule is added to ruleset 0 that forwards all
29558087Seric		local email for users named ``group.usenet'' to the
29658087Seric		``inews'' program.  Note that this works for all groups,
29758087Seric		and may be considered a security problem.
29858087Seric
29958363Sericfax		Facsimile transmission.  This is experimental and based
30058363Seric		on Sam Leffler's FlexFAX software.  For more information,
30158363Seric		see below.
30258087Seric
30365148Sericpop		Post Office Protocol.
30458363Seric
30567942Sericprocmail	An interface to procmail (does not come with sendmail).
30667942Seric		This is designed to be used in mailertables.  For example,
30767942Seric		a common question is "how do I forward all mail for a given
30867942Seric		domain to a single person?".  If you have this mailer
30967942Seric		defined, you could set up a mailertable reading:
31067942Seric
31167942Seric			host.com	procmail:/etc/procmailrcs/host.com
31267942Seric
31367942Seric		with the file /etc/procmailrcs/host.com reading:
31467942Seric
31567942Seric			:0	# forward mail for host.com
31667942Seric			! -oi -f $1 person@other.host
31767942Seric
31867942Seric		This would arrange for (anything)@host.com to be sent
31967942Seric		to person@other.host.  Within the procmail script, $1 is
32067942Seric		the name of the sender and $2 is the name of the recipient.
32167942Seric		If you use this with FEATURE(local_procmail), the FEATURE
32267942Seric		should be listed first.
32367942Seric
32467929SericThe local mailer accepts addresses of the form "user+detail", where
32567929Sericthe "+detail" is not used for mailbox matching but is available
32667942Sericto certain local mail programs (in particular, see FEATURE(local_procmail)).
32767929SericFor example, "eric", "eric+sendmail", and "eric+sww" all indicate
32867929Sericthe same user, but additional arguments <null>, "sendmail", and "sww"
32967929Sericmay be provided for use in sorting mail.
33065148Seric
33167929Seric
33257246Seric+----------+
33357246Seric| FEATURES |
33457246Seric+----------+
33551268Seric
33657246SericSpecial features can be requested using the "FEATURE" macro.  For
33757246Sericexample, the .mc line:
33857246Seric
33957246Seric	FEATURE(use_cw_file)
34057246Seric
34157246Serictells sendmail that you want to have it read an /etc/sendmail.cw
34258782Sericfile to get values for class $=w.  The FEATURE may contain a single
34358782Sericoptional parameter -- for example:
34457246Seric
34558782Seric	FEATURE(mailertable, dbm /usr/lib/mailertable)
34658782Seric
34758782SericAvailable features are:
34858782Seric
34957246Sericuse_cw_file	Read the file /etc/sendmail.cw file to get alternate
35057246Seric		names for this host.  This might be used if you were
35157246Seric		on a host that MXed for a dynamic set of other
35257246Seric		hosts.  If the set is static, just including the line
35357246Seric		"Cw<name1> <name2> ..." is probably superior.
35458408Seric		The actual filename can be overridden by redefining
35558408Seric		confCW_FILE.
35664324Seric
35758087Sericredirect	Reject all mail addressed to "address.REDIRECT" with
35858087Seric		a ``551 User not local; please try <address>'' message.
35958087Seric		If this is set, you can alias people who have left
36058087Seric		to their new address with ".REDIRECT" appended.
36164324Seric
36258284Sericnouucp		Don't do anything special with UUCP addresses at all.
36364324Seric
36459080Sericnocanonify	Don't pass addresses to $[ ... $] for canonification.
36559080Seric		This would generally only be used by sites that only
36659080Seric		act as mail gateways or which have user agents that do
36764028Seric		full canonification themselves.  You may also want to
36864028Seric		use "define(`confBIND_OPTS',`-DNSRCH -DEFNAMES')" to
36964028Seric		turn off the usual resolver options that do a similar
37064028Seric		thing.
37164324Seric
37267917Sericstickyhost	If set, email sent to "user@local.host" are marked
37358526Seric		as "sticky" -- that is, the local addresses aren't
37458526Seric		matched against UDB and don't go through ruleset 5.
37567915Seric		This is used if you want a set up where "user" is
37667915Seric		not necessarily the same as "user@local.host", e.g.,
37767915Seric		to make a distinct domain-wide namespace.  Prior to
37867915Seric		8.7 this was the default, and notsticky was used to
37967915Seric		turn this off.
38064324Seric
38158782Sericmailertable	Include a "mailer table" which can be used to override
38258782Seric		routing for particular domains.  The argument of the
38358782Seric		FEATURE may be the key definition.  If none is specified,
38458782Seric		the definition used is:
38564164Seric			hash -o /etc/mailertable
38663761Seric		Keys in this database are fully qualified domain names
38763761Seric		or partial domains preceded by a dot -- for example,
38863761Seric		"vangogh.CS.Berkeley.EDU" or ".CS.Berkeley.EDU".
38963761Seric		Values must be of the form:
39058782Seric			mailer:domain
39163761Seric		where "mailer" is the internal mailer name, and "domain"
39263761Seric		is where to send the message.  These maps are not
39363761Seric		reflected into the message header.
39464324Seric
39563761Sericdomaintable	Include a "domain table" which can be used to provide
39667451Seric		domain name mapping.  Use of this should really be
39767451Seric		limited to your own domains.  It may be useful if you
39867451Seric		change names (e.g., your company changes names from
39967451Seric		oldname.com to newname.com).  The argument of the
40067451Seric		FEATURE may be the key definition.  If none is specified,
40167451Seric		the definition used is:
40264164Seric			hash -o /etc/domaintable
40367451Seric		The key in this table is the domain name; the value is
40467451Seric		the new (fully qualified) domain.  Anything in the
40563761Seric		domaintable is reflected into headers; that is, this
40663761Seric		is done in ruleset 3.
40764324Seric
40859034Sericbitdomain	Look up bitnet hosts in a table to try to turn them into
40959034Seric		internet addresses.  The table can be built using the
41064153Seric		bitdomain program contributed by John Gardiner Myers.
41159034Seric		The argument of the FEATURE may be the key definition; if
41259034Seric		none is specified, the definition used is:
41364164Seric			hash -o /etc/bitdomain.db
41459034Seric		Keys are the bitnet hostname; values are the corresponding
41559034Seric		internet hostname.
41664324Seric
41759037Sericuucpdomain	Similar feature for UUCP hosts.  The default map definition
41859037Seric		is:
41964164Seric			hash -o /etc/uudomain.db
42059037Seric		At the moment there is no automagic tool to build this
42159037Seric		database.
42264324Seric
42360263Sericalways_add_domain
42460263Seric		Include the local host domain even on locally delivered
42560263Seric		mail.  Normally it is not added unless it is already
42660263Seric		present.
42764324Seric
42863761Sericallmasquerade	If masquerading is enabled (using MASQUERADE_AS), this
42963761Seric		feature will cause recipient addresses to also masquerade
43063761Seric		as being from the masquerade host.  Normally they get
43163761Seric		the local hostname.  Although this may be right for
43263761Seric		ordinary users, it can break local aliases.  For example,
43363761Seric		if you send to "localalias", the originating sendmail will
43463761Seric		find that alias and send to all members, but send the
43563761Seric		message with "To: localalias@masqueradehost".  Since that
43663761Seric		alias likely does not exist, replies will fail.  Use this
43763761Seric		feature ONLY if you can guarantee that the ENTIRE
43863761Seric		namespace on your masquerade host supersets all the
43963761Seric		local entries.
44064324Seric
44164153Sericnodns		We aren't running DNS at our site (for example,
44264153Seric		we are UUCP-only connected).  It's hard to consider
44364153Seric		this a "feature", but hey, it had to go somewhere.
44457246Seric
44564324Sericnullclient	This is a special case -- it creates a stripped down
44664324Seric		configuration file containing nothing but support for
44764394Seric		forwarding all mail to a central hub via a local
44864394Seric		SMTP-based network.  The argument is the name of that
44964394Seric		hub.
45064394Seric
45164394Seric		The only other feature that should be used in conjunction
45264394Seric		with this one is "nocanonify" (this causes addresses to
45364394Seric		be sent unqualified via the SMTP connection; normally
45464394Seric		they are qualifed with the masquerade name, which
45564394Seric		defaults to the name of the hub machine).  No mailers
45664394Seric		should be defined.  No aliasing or forwarding is done.
45757246Seric
45867942Sericlocal_procmail	Use procmail as the local mailer.  This mailer can
45967929Seric		make use of the "user+indicator@local.host" syntax;
46067929Seric		normally the +indicator is just tossed, but by default
46167929Seric		it is passed as the -a argument to procmail.  The
46267929Seric		argument to this feature is the pathname of procmail,
46367929Seric		which defaults to /usr/local/bin/procmail.
46464324Seric
46568206Sericbestmx_is_local	Accept mail as though locally addressed for any host that
46668206Seric		lists us as the best possible MX record.  This generates
46768206Seric		additional DNS traffic, but should be OK for low to
46868206Seric		medium traffic hosts.
46967929Seric
47068216Sericsmrsh		Use the SendMail Restricted SHell (smrsh) provided
47168216Seric		with the distribution instead of /bin/sh for mailing
47268216Seric		to programs.  This improves the ability of the local
47368216Seric		system administrator to control what gets run via
47468216Seric		e-mail.  If an argument is provided it is used as the
47568216Seric		pathname to smrsh; otherwise, /usr/local/etc/smrsh is
47668216Seric		assumed.
47768206Seric
47868216Seric
47957246Seric+-------+
48057246Seric| HACKS |
48157246Seric+-------+
48257246Seric
48357246SericSome things just can't be called features.  To make this clear,
48457247Sericthey go in the hack subdirectory and are referenced using the HACK
48557246Sericmacro.  These will tend to be site-dependent.  The release
48657246Sericincludes the Berkeley-dependent "cssubdomain" hack (that makes
48757246Sericsendmail accept local names in either Berkeley.EDU or CS.Berkeley.EDU;
48857246Sericthis is intended as a short-term aid while we move hosts into
48957246Sericsubdomains.
49057246Seric
49158087Seric
49257246Seric+--------------------+
49357246Seric| SITE CONFIGURATION |
49457246Seric+--------------------+
49557246Seric
49668057Seric    *****************************************************
49768057Seric    * This section is really obsolete, and is preserved	*
49868057Seric    * only for back compatibility.  You should plan on	*
49968057Seric    * using mailertables for new installations.	  In	*
50068057Seric    * particular, it doesn't work for the newer forms	*
50168057Seric    * of UUCP mailers, such as uucp-uudom.		*
50268057Seric    *****************************************************
50368057Seric
50457246SericComplex sites will need more local configuration information, such as
50557246Sericlists of UUCP hosts they speak with directly.  This can get a bit more
50657246Serictricky.  For an example of a "complex" site, see cf/ucbvax.mc.
50757246Seric
50866336SericIf your host is known by several different names, you need to augment
50966336Sericthe $=w class.  This is a list of names by which you are known, and
51066336Sericanything sent to an address using a host name in this list will be
51166336Serictreated as local mail.  You can do this in two ways: either create
51266336Sericthe file /etc/sendmail.cw containing a list of your aliases (one per
51366336Sericline), and use ``FEATURE(use_cw_file)'' in the .mc file, or add the
51466336Sericline:
51566336Seric
51666336Seric	Cw alias.host.name
51766336Seric
51866336Sericat the end of that file.  See the ``vangogh.mc'' file for an example.
51966336SericBe sure you use the fully-qualified name of the host, rather than a
52066336Sericshort name.
52166336Seric
52257246SericThe SITECONFIG macro allows you to indirectly reference site-dependent
52357246Sericconfiguration information stored in the siteconfig subdirectory.  For
52457246Sericexample, the line
52557246Seric
52657246Seric	SITECONFIG(uucp.ucbvax, ucbvax, U)
52757246Seric
52857246Sericreads the file uucp.ucbvax for local connection information.  The
52957246Sericsecond parameter is the local name (in this case just "ucbvax" since
53066336Sericit is locally connected, and hence a UUCP hostname).  The third
53166336Sericparameter is the name of both a macro to store the local name (in
53266336Sericthis case, $U) and the name of the class (e.g., $=U) in which to store
53366336Sericthe host information read from the file.  Another SITECONFIG line reads
53457246Seric
53557246Seric	SITECONFIG(uucp.ucbarpa, ucbarpa.Berkeley.EDU, W)
53657246Seric
53757246SericThis says that the file uucp.ucbarpa contains the list of UUCP sites
53857246Sericconnected to ucbarpa.Berkeley.EDU.  The $=W class will be used to
53966336Sericstore this list, and $W is defined to be ucbarpa.Berkeley.EDU, that
54066336Sericis, the name of the relay to which the hosts listed in uucp.ucbarpa
54166336Sericare connected.  [The machine ucbarpa is gone now, but I've left
54257246Sericthis out-of-date configuration file around to demonstrate how you
54357246Sericmight do this.]
54457246Seric
54566336SericNote that the case of SITECONFIG with a third parameter of ``U'' is
54666336Sericspecial; the second parameter is assumed to be the UUCP name of the
54766336Sericlocal site, rather than the name of a remote site, and the UUCP name
54866336Sericis entered into $=w (the list of local hostnames) as $U.UUCP.
54966336Seric
55057246SericThe siteconfig file (e.g., siteconfig/uucp.ucbvax.m4) contains nothing
55157246Sericmore than a sequence of SITE macros describing connectivity.  For
55257246Sericexample:
55357246Seric
55457246Seric	SITE(cnmat)
55557246Seric	SITE(sgi olympus)
55657246Seric
55757246SericThe second example demonstrates that you can use two names on the
55857246Sericsame line; these are usually aliases for the same host (or are at
55957246Sericleast in the same company).
56057246Seric
56158087Seric
56265218Seric+--------------------+
56365218Seric| USING UUCP MAILERS |
56465218Seric+--------------------+
56565218Seric
56665218SericIt's hard to get UUCP mailers right because of the extremely ad hoc
56765218Sericnature of UUCP addressing.  These config files are really designed
56865218Sericfor domain-based addressing, even for UUCP sites.
56965218Seric
57065218SericThere are four UUCP mailers available.  The choice of which one to
57165218Sericuse is partly a matter of local preferences and what is running at
57265218Sericthe other end of your UUCP connection.  Unlike good protocols that
57365218Sericdefine what will go over the wire, UUCP uses the policy that you
57465218Sericshould do what is right for the other end; if they change, you have
57565218Sericto change.  This makes it hard to do the right thing, and discourages
57665218Sericpeople from updating their software.  In general, if you can avoid
57765218SericUUCP, please do.
57865218Seric
57965218SericThe major choice is whether to go for a domainized scheme or a
58065218Sericnon-domainized scheme.  This depends entirely on what the other
58165218Sericend will recognize.  If at all possible, you should encourage the
58265218Sericother end to go to a domain-based system -- non-domainized addresses
58365218Sericdon't work entirely properly.
58465218Seric
58565218SericThe four mailers are:
58665218Seric
58765218Seric    uucp-old (obsolete name: "uucp")
58865218Seric	This is the oldest, the worst (but the closest to UUCP) way of
58965218Seric	sending messages accros UUCP connections.  It does bangify
59065218Seric	everything and prepends $U (your UUCP name) to the sender's
59165218Seric	address (which can already be a bang path itself).  It can
59265218Seric	only send to one address at a time, so it spends a lot of
59365218Seric	time copying duplicates of messages.  Avoid this if at all
59465218Seric	possible.
59565218Seric
59665218Seric    uucp-new (obsolete name: "suucp")
59765218Seric	The same as above, except that it assumes that in one rmail
59865218Seric	command you can specify several recipients.  It still has a
59965218Seric	lot of other problems.
60065218Seric
60165218Seric    uucp-dom
60265218Seric	This UUCP mailer keeps everything as domain addresses.
60367471Seric	Basically, it uses the SMTP mailer rewriting rules.  This mailer
60467471Seric	is only included if MAILER(smtp) is also specified.
60565218Seric
60665218Seric	Unfortunately, a lot of UUCP mailer transport agents require
60765218Seric	bangified addresses in the envelope, although you can use
60865218Seric	domain-based addresses in the message header.  (The envelope
60965218Seric	shows up as the From_ line on UNIX mail.)  So....
61065218Seric
61165218Seric    uucp-uudom
61265218Seric	This is a cross between uucp-new (for the envelope addresses)
61365218Seric	and uucp-dom (for the header addresses).  It bangifies the
61465218Seric	envelope sender (From_ line in messages) without adding the
61565218Seric	local hostname, unless there is no host name on the address
61665218Seric	at all (e.g., "wolf") or the host component is a UUCP host name
61765218Seric	instead of a domain name ("somehost!wolf" instead of
61867471Seric	"some.dom.ain!wolf").  This is also included only if MAILER(smtp)
61967471Seric	is also specified.
62065218Seric
62165218SericExamples:
62265218Seric
62365218SericWe are on host grasp.insa-lyon.fr (UUCP host name "grasp").  The
62465218Sericfollowing summarizes the sender rewriting for various mailers.
62565218Seric
62665218SericMailer          sender		rewriting in the envelope
62765218Seric------		------		-------------------------
62865218Sericuucp-{old,new}	wolf		grasp!wolf
62965218Sericuucp-dom	wolf		wolf@grasp.insa-lyon.fr
63065218Sericuucp-uudom	wolf		grasp.insa-lyon.fr!wolf
63165218Seric
63265218Sericuucp-{old,new}	wolf@fr.net	grasp!fr.net!wolf
63365218Sericuucp-dom	wolf@fr.net	wolf@fr.net
63465218Sericuucp-uudom	wolf@fr.net	fr.net!wolf
63565218Seric
63665218Sericuucp-{old,new}	somehost!wolf	grasp!somehost!wolf
63765218Sericuucp-dom	somehost!wolf	somehost!wolf@grasp.insa-lyon.fr
63865218Sericuucp-uudom	somehost!wolf	grasp.insa-lyon.fr!somehost!wolf
63965218Seric
64065218SericIf you are using one of the domainized UUCP mailers, you really want
64165218Sericto convert all UUCP addresses to domain format -- otherwise, it will
64265218Sericdo it for you (and probably not the way you expected).  For example,
64365218Sericif you have the address foo!bar!baz (and you are not sending to foo),
64465218Sericthe heuristics will add the @uucp.relay.name or @local.host.name to
64565218Sericthis address.  However, if you map foo to foo.host.name first, it
64665218Sericwill not add the local hostname.  You can do this using the uucpdomain
64765218Sericfeature.
64865218Seric
64965218Seric
65057246Seric+-------------------+
65157246Seric| TWEAKING RULESETS |
65257246Seric+-------------------+
65357246Seric
65451268SericFor more complex configurations, you can define special rules.
65551268SericThe macro LOCAL_RULE_3 introduces rules that are used in canonicalizing
65651268Sericthe names.  Any modifications made here are reflected in the header.
65751268Seric
65851268SericA common use is to convert old UUCP addreses to SMTP addresses using
65951268Sericthe UUCPSMTP macro.  For example:
66051268Seric
66151268Seric	LOCAL_RULE_3
66251268Seric	UUCPSMTP(decvax,	decvax.dec.com)
66351268Seric	UUCPSMTP(research,	research.att.com)
66451268Seric
66551268Sericwill cause addresses of the form "decvax!user" and "research!user"
66651268Sericto be converted to "user@decvax.dec.com" and "user@research.att.com"
66751268Sericrespectively.
66851268Seric
66965957SericThis could also be used to look up hosts in a database map:
67057246Seric
67157246Seric	LOCAL_RULE_3
67257246Seric	R$* < @ $+ > $*		$: $1 < @ $(hostmap $2 $) > $3
67357246Seric
67457246SericThis map would be defined in the LOCAL_CONFIG portion, as shown below.
67557246Seric
67651268SericSimilarly, LOCAL_RULE_0 can be used to introduce new parsing rules.
67751268SericFor example, new rules are needed to parse hostnames that you accept
67851309Sericvia MX records.  For example, you might have:
67951268Seric
68051309Seric	LOCAL_RULE_0
68165986Seric	R$+ <@ host.dom.ain.>	$#uucp $@ cnmat $: $1 < @ host.dom.ain.>
68251309Seric
68351309SericYou would use this if you had installed an MX record for cnmat.Berkeley.EDU
68451309Sericpointing at this host; this rule catches the message and forwards it on
68551309Sericusing UUCP.
68651309Seric
68758681SericYou can also tweak rulesets 1 and 2 using LOCAL_RULE_1 and LOCAL_RULE_2.
68858681SericThese rulesets are normally empty.
68958681Seric
69057246SericA similar macro is LOCAL_CONFIG.  This introduces lines added after the
69157246Sericboilerplate option setting but before rulesets, and can be used to
69257945Sericdeclare local database maps or whatever.  For example:
69351268Seric
69457246Seric	LOCAL_CONFIG
69557246Seric	Khostmap hash /etc/hostmap.db
69657246Seric	Kyplocal nis -m hosts.byname
69751220Seric
69858087Seric
69957246Seric+---------------------------+
70057246Seric| MASQUERADING AND RELAYING |
70157246Seric+---------------------------+
70257246Seric
70357246SericYou can have your host masquerade as another using
70457246Seric
70557246Seric	MASQUERADE_AS(host.domain)
70657246Seric
70765957SericThis causes outgoing SMTP mail to be labeled as coming from the
70857246Sericindicated domain, rather than $j.  One normally masquerades as one
70965957Sericof one's own subdomains (for example, it's unlikely that I would
71057246Sericchoose to masquerade as an MIT site).
71157246Seric
71264153SericThe masquerade name is not normally canonified, so it is important
71364153Sericthat it be your One True Name, that is, fully qualified and not a
71464153SericCNAME.
71564153Seric
71657246Sericthere are always users that need to be "exposed" -- that is, their
71757246Sericinternal site name should be displayed instead of the masquerade name.
71857246SericRoot is an example.  You can add users to this list using
71957246Seric
72057246Seric	EXPOSED_USER(usernames)
72157246Seric
72257246SericThis adds users to class E; you could also use something like
72357246Seric
72457246Seric	FE/etc/sendmail.cE
72557246Seric
72657246SericYou can also arrange to relay all unqualified names (that is, names
72757246Sericwithout @host) to a relay host.  For example, if you have a central
72857246Sericemail server, you might relay to that host so that users don't have
72957246Sericto have .forward files or aliases.  You can do this using
73057246Seric
73158071Seric	define(`LOCAL_RELAY', mailer:hostname)
73257246Seric
73358071SericThe ``mailer:'' can be omitted, in which case the mailer defaults to
73458071Seric"smtp".  There are some user names that you don't want relayed, perhaps
73558071Sericbecause of local aliases.  A common example is root, which may be
73658071Sericlocally aliased.  You can add entries to this list using
73757246Seric
73857246Seric	LOCAL_USER(usernames)
73957246Seric
74057246SericThis adds users to class L; you could also use something like
74157246Seric
74257246Seric	FL/etc/sendmail.cL
74357246Seric
74464153SericIf you want all incoming mail sent to a centralized hub, as for a
74564153Sericshared /var/spool/mail scheme, use
74657591Seric
74758071Seric	define(`MAIL_HUB', mailer:hostname)
74857591Seric
74958071SericAgain, ``mailer:'' defaults to "smtp".  If you define both LOCAL_RELAY
75066047Sericand MAIL_HUB, unqualified names will be sent to the LOCAL_RELAY and
75166047Sericother local names will be sent to MAIL_HUB.  Names in $=L will be
75266047Sericdelivered locally, so you MUST have aliases or .forward files for them.
75366047Seric
75466047SericFor example, if are on machine mastodon.CS.Berkeley.EDU, the following
75558071Sericcombinations of settings will have the indicated effects:
75657591Seric
75757591Sericemail sent to....	eric			  eric@mastodon.CS.Berkeley.EDU
75857591Seric
75957591SericLOCAL_RELAY set to	mail.CS.Berkeley.EDU	  (delivered locally)
76057591Sericmail.CS.Berkeley.EDU
76157591Seric
76257591SericMAIL_HUB set to		mammoth.CS.Berkeley.EDU	  mammoth.CS.Berkeley.EDU
76357591Sericmammoth.CS.Berkeley.EDU
76457591Seric
76557591SericBoth LOCAL_RELAY and	mail.CS.Berkeley.EDU	  mammoth.CS.Berkeley.EDU
76657591SericMAIL_HUB set as above
76757591Seric
76864153SericIf you want all outgoing mail to go to a central relay site, define
76964153SericSMART_HOST as well.  Briefly:
77058071Seric
77164153Seric	LOCAL_RELAY applies to unqualifed names (e.g., "eric").
77264153Seric	MAIL_HUB applies to names qualified with the name of the
77364153Seric		local host (e.g., "eric@mastodon.CS.Berkeley.EDU").
77464153Seric	SMART_HOST applies to names qualified with other hosts.
77564153Seric
77664153SericHowever, beware that other relays (e.g., UUCP_RELAY, BITNET_RELAY, and
77764153SericFAX_RELAY) take precedence over SMART_HOST, so if you really want
77864153Sericabsolutely everything to go to a single central site you will need to
77964153Sericunset all the other relays -- or better yet, find or build a minimal
78064153Sericconfig file that does this.
78164153Seric
78264153Seric
78358071Seric+-------------------------------+
78458071Seric| NON-SMTP BASED CONFIGURATIONS |
78558071Seric+-------------------------------+
78658071Seric
78758071SericThese configuration files are designed primarily for use by SMTP-based
78858071Sericsites.  I don't pretend that they are well tuned for UUCP-only or
78958071SericUUCP-primarily nodes (the latter is defined as a small local net
79058071Sericconnected to the rest of the world via UUCP).  However, there is one
79158071Serichook to handle some special cases.
79258071Seric
79358071SericYou can define a ``smart host'' that understands a richer address syntax
79458071Sericusing:
79558071Seric
79658071Seric	define(`SMART_HOST', mailer:hostname)
79758071Seric
79864028SericIn this case, the ``mailer:'' defaults to "relay".  Any messages that
79958071Sericcan't be handled using the usual UUCP rules are passed to this host.
80058071Seric
80158071SericIf you are on a local SMTP-based net that connects to the outside
80258071Sericworld via UUCP, you can use LOCAL_NET_CONFIG to add appropriate rules.
80358071SericFor example:
80458071Seric
80558071Seric	define(`SMART_HOST', suucp:uunet)
80658071Seric	LOCAL_NET_CONFIG
80763761Seric	R$* < @ $* .$m. > $*	$#smtp $@ $2.$m. $: $1 < @ $2.$m. > $3
80858071Seric
80958071SericThis will cause all names that end in your domain name ($m) via
81058071SericSMTP; anything else will be sent via suucp (smart UUCP) to uunet.
81163761SericIf you have FEATURE(nocanonify), you may need to omit the dots after
81263761Sericthe $m.  If you are running a local DNS inside your domain which is
81363761Sericnot otherwise connected to the outside world, you probably want to
81463761Sericuse:
81558071Seric
81663761Seric	define(`SMART_HOST', smtp:fire.wall.com)
81763761Seric	LOCAL_NET_CONFIG
81863761Seric	R$* < @ $* . > $*	$#smtp $@ $2. $: $1 < @ $2. > $3
81958071Seric
82063761SericThat is, send directly only to things you found in your DNS lookup;
82163761Sericanything else goes through SMART_HOST.
82263761Seric
82364153SericIf you are not running DNS at all, it is important to use
82464153SericFEATURE(nodns) to avoid having sendmail queue everything waiting
82564153Sericfor the name server to come up.
82663761Seric
82764153Seric
82864259Seric+-----------+
82964259Seric| WHO AM I? |
83064259Seric+-----------+
83164259Seric
83264259SericNormally, the $j macro is automatically defined to be your fully
83364259Sericqualified domain name (FQDN).  Sendmail does this by getting your
83464259Serichost name using gethostname and then calling gethostbyname on the
83564259Sericresult.  For example, in some environments gethostname returns
83664259Sericonly the root of the host name (such as "foo"); gethostbyname is
83764259Sericsupposed to return the FQDN ("foo.bar.com").  In some (fairly rare)
83864259Sericcases, gethostbyname may fail to return the FQDN.  In this case
83964259Sericyou MUST define confDOMAIN_NAME to be your fully qualified domain
84064259Sericname.  This is usually done using:
84164259Seric
84264259Seric	Dmbar.com
84364259Seric	define(`confDOMAIN_NAME', `$w.$m')dnl
84464259Seric
84564259Seric
84664028Seric+--------------------+
84764028Seric| USING MAILERTABLES |
84864028Seric+--------------------+
84964028Seric
85064028SericTo use FEATURE(mailertable), you will have to create an external
85164028Sericdatabase containing the routing information for various domains.
85264028SericFor example, a mailertable file in text format might be:
85364028Seric
85464028Seric	.my.domain		xnet:%1.my.domain
85564028Seric	uuhost1.my.domain	suucp:uuhost1
85664028Seric	.bitnet			smtp:relay.bit.net
85764028Seric
85864028SericThis should normally be stored in /etc/mailertable.  The actual
85964028Sericdatabase version of the mailertable is built using:
86064028Seric
86164028Seric	makemap hash /etc/mailertable.db < /etc/mailertable
86264028Seric
86364028SericThe semantics are simple.  Any LHS entry that does not begin with
86464028Serica dot matches the full host name indicated.  LHS entries beginning
86564028Sericwith a dot match anything ending with that domain name -- that is,
86664028Sericthey can be thought of as having a leading "*" wildcard.  Matching
86764028Sericis done in order of most-to-least qualified -- for example, even
86864028Sericthough ".my.domain" is listed first in the above example, an entry
86964028Sericof "uuhost1.my.domain" will match the second entry since it is
87064028Sericmore explicit.
87164028Seric
87264028SericThe RHS should always be a "mailer:host" pair.  The mailer is the
87364028Sericconfiguration name of a mailer (that is, an `M' line in the
87464028Sericsendmail.cf file).  The "host" will be the hostname passed to
87564028Sericthat mailer.  In domain-based matches (that is, those with leading
87664028Sericdots) the "%1" may be used to interpolate the wildcarded part of
87764028Sericthe host name.  For example, the first line above sends everything
87864028Sericaddressed to "anything.my.domain" to that same host name, but using
87964028Sericthe (presumably experimental) xnet mailer.
88064028Seric
88167915SericIn some cases you may want to temporarily turn off MX records,
88267915Sericparticularly on gateways.  For example, you may want to MX
88367915Sericeverything in a domain to one machine that then forwards it
88467915Sericdirectly.  To do this, you might use the DNS configuration:
88564028Seric
88667915Seric	*.domain.	IN	MX	0	relay.machine
88767915Seric
88867915Sericand on relay.machine use the mailertable:
88967915Seric
89067915Seric	.domain		smtp:[gateway.domain]
89167915Seric
89267915SericThe [square brackets] turn off MX records for this host only.
89367915SericIf you didn't do this, the mailertable would use the MX record
89467915Sericagain, which would give you an MX loop.
89567915Seric
89667915Seric
89764153Seric+--------------------------------+
89864153Seric| USING USERDB TO MAP FULL NAMES |
89964153Seric+--------------------------------+
90064153Seric
90164153SericThe user database was not originally intended for mapping full names
90264153Sericto login names (e.g., Eric.Allman => eric), but some people are using
90364153Sericit that way.  (I would recommend that you set up aliases for this
90464153Sericpurpose instead -- since you can specify multiple alias files, this
90564153Sericis fairly easy.)  The intent was to locate the default maildrop at
90664153Serica site, but allow you to override this by sending to a specific host.
90764153Seric
90864153SericIf you decide to set up the user database in this fashion, it is
90967917Sericimperative that you not use FEATURE(stickyhost) -- otherwise,
91064153Serice-mail sent to Full.Name@local.host.name will be rejected.
91164153Seric
91267917SericTo build the internal form of the user database, use:
91364153Seric
91464259Seric	makemap btree /usr/data/base.db < /usr/data/base.txt
91564259Seric
91664259Seric
91767539Seric+--------------------------------+
91867539Seric| MISCELLANEOUS SPECIAL FEATURES |
91967539Seric+--------------------------------+
92067539Seric
92167539SericDOTTED_USER(name)
92267539Seric	Sometimes it is convenient to merge configuration on a
92367539Seric	centralized mail machine, for example, to forward all
92467539Seric	root mail to a mail server.  In this case it might be
92567539Seric	useful to be able to treat the root addresses as a class
92667539Seric	of addresses with subtle differences.  You can do this
92767539Seric	using dotted users.  For example, a client might include
92867539Seric	the alias:
92967539Seric
93067539Seric		root:  root.client1@server
93167539Seric
93267539Seric	On the server, the mail configuration would include:
93367539Seric
93467539Seric		DOTTED_USER(root)
93567539Seric
93667539Seric	Aliases on the server that would match this address would
93767539Seric	be "root.client", "root.*", and "root", tried in that
93867539Seric	order.  You can specify multiple addresses either by
93967539Seric	joining them in one DOTTTED_USER macro or by having
94067539Seric	multiple macros:
94167539Seric
94267539Seric		DOTTED_USER(root)
94367539Seric		DOTTED_USER(postmaster mailer-daemon)
94467539Seric
94567539Seric	defines three dotted users.
94667539Seric
94767539Seric
94867960Seric+----------------+
94967960Seric| SECURITY NOTES |
95067960Seric+----------------+
95167960Seric
95267960SericA lot of sendmail security comes down to you.  Sendmail 8 is much
95367960Sericmore careful about checking for security problems than previous
95467960Sericversions, but there are some things that you still need to watch
95567960Sericfor.  In particular:
95667960Seric
95767960Seric* Make sure the aliases file isn't writable except by trusted
95867960Seric  system personnel.  This includes both the text and database
95967960Seric  version.
96067960Seric
96167960Seric* Make sure that other files that sendmail reads, such as the
96267960Seric  mailertable, is only writable by trusted system personnel.
96367960Seric
96467960Seric* The queue directory should not be world writable PARTICULARLY
96567960Seric  if your system allows "file giveaways" (that is, if a non-root
96667960Seric  user can chown any file they own to any other user).
96767960Seric
96867960Seric* If your system allows file giveaways, DO NOT create a publically
96967960Seric  writable directory for forward files.  This will allow anyone
97067960Seric  to steal anyone else's e-mail.  Instead, create a script that
97167960Seric  copies the .forward file from users' home directories once a
97267960Seric  night (if you want the non-NFS-mounted forward directory).
97367960Seric
97467960Seric* If your system allows file giveaways, you'll find that
97567960Seric  sendmail is much less trusting of :include: files -- in
97667960Seric  particular, you'll have to have /SENDMAIL/ANY/SHELL/ in
97767960Seric  /etc/shells before they will be trusted (that is, before
97867960Seric  files and programs listed in them will be honored).
97967960Seric
98067960SericIn general, file giveaways are a mistake -- if you can turn them
98167960Sericoff I recommend you do so.
98267960Seric
98367960Seric
98458363Seric+------------------+
98558363Seric| FlexFAX SOFTWARE |
98658363Seric+------------------+
98758363Seric
98858363SericSam Leffler's FlexFAX software is still in beta test -- but he expects a
98958363Sericpublic version out "later this week" [as of 3/1/93].  The following
99058363Sericblurb is direct from Sam:
99158363Seric
99264498Seric	$Header: /usr/people/sam/fax/RCS/HOWTO,v 1.14 93/05/24 11:42:16 sam Exp $
99358363Seric
99458363Seric	How To Obtain This Software (in case all you get is this file)
99564498Seric	--------------------------------------------------------------
99658363Seric	The source code is available for public ftp on
99764498Seric	    sgi.com			sgi/fax/v2.1.src.tar.Z
99858363Seric		(192.48.153.1)
99958363Seric
100058363Seric	You can also obtain inst'able images for Silicon Graphics machines from
100164498Seric	    sgi.com			sgi/fax/v2.1.inst.tar
100258363Seric		(192.48.153.1)
100358363Seric
100458363Seric	For example,
100558363Seric	    % ftp -n sgi.com
100658363Seric	    ....
100758363Seric	    ftp> user anonymous
100858363Seric	    ... <type in password>
100958363Seric	    ftp> cd sgi/fax
101058363Seric	    ftp> binary
101164498Seric	    ftp> get v2.1.src.tar.Z
101258363Seric
101364498Seric	In general, the latest version of the 2.1 release of the software is
101464498Seric	always available as "v2.1.src.tar.Z" or "v2.1.inst.tar" in the ftp
101564498Seric	directory.  This file is a link to the appropriate released version (so
101664498Seric	don't waste your time retrieving the linked file as well!) Any files of
101764498Seric	the form v2.1.*.patch are shell scripts that can be used to patch older
101864498Seric	versions of the source code.  For example, the file v2.1.0.patch would
101964498Seric	contain patches to update v2.1.0.tar.Z.  (Note to beta testers: this is
102064498Seric	different than the naming conventions used during beta testing.) Patch
102164498Seric	files only work to go between consecutive versions, so if you are
102264498Seric	multiple versions behind the latest release, you will need to apply
102364498Seric	each patch file between your current version and the latest.
102464498Seric
102564498Seric
102664498Seric	Obtaining the Software by Electronic Mail
102764498Seric	-----------------------------------------
102864498Seric	Do not send me requests for the software; they will be ignored (without
102964498Seric	response).  If you cannot use FTP at all, there is a service called
103064498Seric	"ftpmail" available from gatekeeper.dec.com:  you can send e-mail to
103164498Seric	this machine and it will use FTP to retrieve files for you and send you
103264498Seric	the files back again via e-mail.  To find out more about the ftpmail
103358363Seric	service, send a message to "ftpmail@gatekeeper.dec.com" whose body
103458363Seric	consists of the single line "help".
103558363Seric
103664498Seric
103764498Seric	Obtaining the Software Within Silicon Graphics
103864498Seric	----------------------------------------------
103958363Seric	Internal to Silicon Graphics there are inst'able images on the host
104064498Seric	flake.asd in the directory /usr/dist.  Thus you can do something like:
104158363Seric
104264498Seric	    % inst -f flake.asd.sgi.com:/usr/dist/flexfax
104358363Seric
104464498Seric	to install the latest version of the software on your machine.
104558363Seric
104664498Seric
104764498Seric	What to do Once You've Retrieved Stuff
104864498Seric	--------------------------------------
104958363Seric	The external distributions come in a compressed or uncompressed tar
105058363Seric	file.  To extract the source distribution:
105158363Seric
105264498Seric	    % zcat v2.1.src.tar.Z | tar xf -
105358363Seric
105458363Seric	(uncompress and extract individual files in current directory).  To
105558363Seric	unpack and install the client portion of the inst'able distribution:
105658363Seric
105758363Seric	    % mkdir dist
105864498Seric	    % cd dist; tar xf ../v2.1.inst.tar; cd ..
105958363Seric	    % inst -f dist/flexfax
106058363Seric	    ...
106158363Seric	    inst> go
106258363Seric
106358363Seric	(Note, the dist subdirectory is because some versions of inst fail if
106464498Seric	the files are in the current directory.) Server binaries are also
106564498Seric	included in the inst'able images as flexfax.server.*.  They are not
106664498Seric	installed by default, so to get them also you need to do:
106758363Seric
106858363Seric	    % inst -f flexfax
106958363Seric	    ...
107058363Seric	    inst> install flexfax.server.*
107158363Seric	    inst> go
107258363Seric
107364498Seric	The SGI binaries were built for Version 4.0.5H of the IRIX operating
107458363Seric	system.  They should work w/o problem on earlier versions of the
107558363Seric	system, but I have not fully tested this.  Also, note that to install a
107658363Seric	server on an SGI machine, you need to have installed the Display
107758363Seric	PostScript execution environment product (dps_eoe).  Otherwise, the fax
107858363Seric	server will not be able to convert PostScript to facsimile for
107958363Seric	transmission.
108058363Seric
108164498Seric	If you are working from the source distribution, look at the file
108264498Seric	README in the top of the source tree.  If you are working from the inst
108364498Seric	images, the subsystem flexfax.man.readme contains the README file and
108464498Seric	other useful pieces of information--the installed files are placed in
108564498Seric	the directory /usr/local/doc/flexfax).  Basically you will need to run
108664498Seric	the faxaddmodem script to setup and configure your fax modem.  Consult
108764498Seric	the README file and the manual page for faxaddmodem for information.
108858363Seric
108958363Seric
109064498Seric	FlexFAX Mail List
109164498Seric	-----------------
109258363Seric	A mailing list for users of this software is located on sgi.com.
109358363Seric	If you want to join this mailing list or have a list-related request
109458363Seric	such as getting your name removed from it, send a request to
109558363Seric
109664498Seric	    majordomo@whizzer.wpd.sgi.com
109758363Seric
109864498Seric	For example, to subscribe, send the line "subscribe flexfax" in
109964498Seric	the body of your message.  The line "help" will return a list of
110064498Seric	the commands understood by the mailing list management software.
110164498Seric
110258363Seric	Submissions (including bug reports) should be directed to:
110358363Seric
110458363Seric	    flexfax@sgi.com
110558363Seric
110664498Seric	When corresponding about this software please always specify what
110764498Seric	version you have, what system you're running on, and, if the problem is
110864498Seric	specific to your modem, identify the modem and firmware revision.
110958363Seric
111064498Seric
111157945Seric+--------------------------------+
111257945Seric| TWEAKING CONFIGURATION OPTIONS |
111357945Seric+--------------------------------+
111457945Seric
111557945SericThere are a large number of configuration options that don't normally
111657945Sericneed to be changed.  However, if you feel you need to tweak them, you
111757945Sericcan define the following M4 variables.  This list is shown in four
111857945Sericcolumns:  the name you define, the default value for that definition,
111957945Sericthe option or macro that is affected (either Ox for an option or Dx
112057945Sericfor a macro), and a brief description.  Greater detail of the semantics
112157945Sericcan be found in the Installation and Operations Guide.
112257945Seric
112363582SericSome options are likely to be deprecated in future versions -- that is,
112463582Sericthe option is only included to provide back-compatibility.  These are
112563582Sericmarked with "*".
112663582Seric
112765002SericRemember that these options are M4 variables, and hence may need to
112865002Sericbe quoted.  In particular, arguments with commas will usually have to
112965002Sericbe ``double quoted, like this phrase'' to avoid having the comma
113065002Sericconfuse things.  This is common for alias file definitions and for
113165002Sericthe read timeout.
113265002Seric
113357945SericM4 Variable Name	Default		Mac/Opt	Description
113465002Seric================	=======		=======	===========
113557945SericconfMAILER_NAME		MAILER-DAEMON	Dn	The sender name used for
113657945Seric						internally generated
113757945Seric						outgoing messages.
113858681SericconfFROM_LINE		From $g  $d	Dl	The From_ line used when
113958681Seric						sending to files or programs.
114057945SericconfFROM_HEADER		$?x$x <$g>$|$g$.	The format of an internally
114157945Seric					Dq	generated From: address.
114267929SericconfOPERATORS		.:%@!^/[]+	Do	Address operator characters.
114364153SericconfSMTP_LOGIN_MSG	$j Sendmail $v/$Z ready at $b
114457945Seric					De	The initial (spontaneous)
114557945Seric						SMTP greeting message.
114667820SericconfRECEIVED_HEADER	$?sfrom $s $.$?_($?s$|from $.$_) $.by $j ($v/$Z)$?r with $r$. id $i$?u for $u$.; $b
114767820Seric					HReceived
114867820Seric						The format of the Received:
114967820Seric						header in messages passed
115067820Seric						through this host.  It is
115167820Seric						unwise to try to change this.
115259743SericconfSEVEN_BIT_INPUT	False		O7	Force input to seven bits?
115367551SericconfEIGHT_BIT_HANDLING	pass8		O8	8-bit data handling
115457945SericconfALIAS_WAIT		10		Oa	Wait (in minutes) for alias
115557945Seric						file rebuild.
115658087SericconfMIN_FREE_BLOCKS	4		Ob	Minimum number of free blocks
115758087Seric						on queue filesystem to accept
115858087Seric						SMTP mail.
115957945SericconfBLANK_SUB		.		OB	Blank (space) substitution
116057945Seric						character.
116165619SericconfCON_EXPENSIVE	False		Oc	Avoid connecting immediately
116265619Seric						to mailers marked expensive?
116357945SericconfCHECKPOINT_INTERVAL	10		OC	Checkpoint queue files
116457945Seric						every N recipients.
116557945SericconfDELIVERY_MODE	background	Od	Default delivery mode.
116657945SericconfAUTO_REBUILD	False		OD	Automatically rebuild
116757945Seric						alias file if needed.
116857945SericconfERROR_MODE		(undefined)	Oe	Error message mode.
116957945SericconfERROR_MESSAGE	(undefined)	OE	Error message header/file.
117057945SericconfSAVE_FROM_LINES	False		Of	Save extra leading
117157945Seric						From_ lines.
117257945SericconfTEMP_FILE_MODE	0600		OF	Temporary file mode.
117357945SericconfDEF_GROUP_ID	1		Og	Default group id.
117457945SericconfMATCH_GECOS		False		OG	Match GECOS field.
117557945SericconfMAX_HOP		17		Oh	Maximum hop count.
117663582SericconfIGNORE_DOTS		False		Oi *	Ignore dot as terminator
117757945Seric						for incoming messages?
117857945SericconfBIND_OPTS		(empty)		OI	Default options for BIND.
117963582SericconfMIME_FORMAT_ERRORS	True		Oj *	Send error messages as MIME-
118059743Seric						encapsulated messages per
118159743Seric						RFC 1344.
118264153SericconfFORWARD_PATH	(undefined)	OJ	The colon-separated list of
118364153Seric						places to search for .forward
118467960Seric						files.  N.B.: see the Security
118567960Seric						Notes section.
118657945SericconfMCI_CACHE_SIZE	2		Ok	Size of open connection cache.
118757945SericconfMCI_CACHE_TIMEOUT	5m		OK	Open connection cache timeout.
118863582SericconfUSE_ERRORS_TO	False		Ol *	Use the Errors-To: header to
118963582Seric						deliver error messages.  This
119063582Seric						should not be necessary because
119163582Seric						of general acceptance of the
119263582Seric						envelope/header distinction.
119357945SericconfLOG_LEVEL		9		OL	Log level.
119457945SericconfME_TOO		False		Om	Include sender in group
119557945Seric						expansions.
119657945SericconfCHECK_ALIASES	True		On	Check RHS of aliases when
119757945Seric						running newaliases.
119863582SericconfOLD_STYLE_HEADERS	True		Oo *	Assume that headers without
119957945Seric						special chars are old style.
120058859SericconfDAEMON_OPTIONS	(undefined)	OO	SMTP daemon options.
120158806SericconfPRIVACY_FLAGS	authwarnings	Op	Privacy flags.
120257945SericconfCOPY_ERRORS_TO	(undefined)	OP	Address for additional copies
120357945Seric						of all error messages.
120457945SericconfQUEUE_FACTOR	(undefined)	Oq	Slope of queue-only function
120558116SericconfREAD_TIMEOUT	(undefined)	Or	SMTP read timeouts.
120667811SericconfDONT_PRUNE_ROUTES	False		OR	Don't prune down route-addr
120767811Seric						syntax addresses to the
120867811Seric						minimum possible.
120963582SericconfSAFE_QUEUE		True		Os *	Commit all messages to disk
121057945Seric						before forking.
121158806SericconfMESSAGE_TIMEOUT	5d/4h		OT	Timeout for messages before
121258806Seric						sending error/warning message.
121359317SericconfTIME_ZONE		USE_SYSTEM	Ot	Time zone info -- can be
121457945Seric						USE_SYSTEM to use the system's
121557945Seric						idea, USE_TZ to use the user's
121657945Seric						TZ envariable, or something
121757945Seric						else to force that value.
121857945SericconfDEF_USER_ID		1		Ou	Default user id.
121958718SericconfUSERDB_SPEC		(undefined)	OU	User database specification.
122058859SericconfFALLBACK_MX		(undefined)	OV	Fallback MX host.
122163857SericconfTRY_NULL_MX_LIST	False		Ow	If we are the best MX for a
122263857Seric						host and haven't made other
122363857Seric						arrangements, try connecting
122463857Seric						to the host directly; normally
122563857Seric						this would be a config error.
122657945SericconfQUEUE_LA		8		Ox	Load average at which queue-only
122757945Seric						function kicks in.
122857945SericconfREFUSE_LA		12		OX	Load average at which incoming
122957945Seric						SMTP connections are refused.
123063582SericconfWORK_RECIPIENT_FACTOR
123163582Seric			(undefined)	Oy	Cost of each recipient.
123263582SericconfSEPARATE_PROC	False		OY	Run all deliveries in a
123357945Seric						separate process.
123457945SericconfWORK_CLASS_FACTOR	(undefined)	Oz	Priority multiplier for class.
123557945SericconfWORK_TIME_FACTOR	(undefined)	OZ	Cost of each delivery attempt.
123668184SericconfQUEUE_SORT_ORDER	Priority	O QueueSortOrder
123768184Seric						Queue sort algorithm:
123868184Seric						Priority or Host.
123958408SericconfCW_FILE		/etc/sendmail.cw	Name of file used to get the
124058408Seric					Fw	local additions to the $=w
124158408Seric						class.
124264153SericconfSMTP_MAILER		smtp		-	The mailer name used when
124363972Seric						SMTP connectivity is required.
124467915Seric						One of "smtp", "smtp8", or
124567915Seric						"esmtp".
124663999SericconfLOCAL_MAILER	local		-	The mailer name used when
124763999Seric						local connectivity is required.
124863999Seric						Almost always "local".
124964028SericconfRELAY_MAILER	relay		-	The default mailer name used
125064028Seric						for relaying any mail (e.g.,
125164028Seric						to a BITNET_RELAY, a
125264028Seric						SMART_HOST, or whatever).
125364028Seric						This can reasonably be "suucp"
125464028Seric						if you are on a UUCP-connected
125564028Seric						site.
125664259SericconfDOMAIN_NAME		(undefined)	Dj	If defined, sets $j.
125757945Seric
125858087Seric
125957246Seric+-----------+
126057246Seric| HIERARCHY |
126157246Seric+-----------+
126257246Seric
126351220SericWithin this directory are several subdirectories, to wit:
126451220Seric
126551220Sericm4		General support routines.  These are typically
126651220Seric		very important and should not be changed without
126757247Seric		very careful consideration.
126851220Seric
126951220Sericcf		The configuration files themselves.  They have
127051220Seric		".mc" suffixes, and must be run through m4 to
127151220Seric		become complete.  The resulting output should
127251220Seric		have a ".cf" suffix.
127351220Seric
127451220Sericostype		Definitions describing a particular operating
127551220Seric		system type.  These should always be referenced
127651220Seric		using the OSTYPE macro in the .mc file.  Examples
127751220Seric		include "bsd4.3", "bsd4.4", "sunos3.5", and
127851220Seric		"sunos4.1".
127951220Seric
128051220Sericdomain		Definitions describing a particular domain, referenced
128151220Seric		using the DOMAIN macro in the .mc file.  These are
128251220Seric		site dependent; for example, we contribute "cs.exposed.m4"
128351220Seric		and "cs.hidden.m4" which both describe hosts in the
128451220Seric		CS.Berkeley.EDU subdomain; the former displays the local
128551220Seric		hostname (e.g., mammoth.CS.Berkeley.EDU), whereas the
128651220Seric		latter does its best to hide the identity of the local
128751220Seric		workstation inside the CS subdomain.
128851220Seric
128951220Sericmailer		Descriptions of mailers.   These are referenced using
129051220Seric		the MAILER macro in the .mc file.
129151220Seric
129251220Sericsh		Shell files used when building the .cf file from the
129351220Seric		.mc file in the cf subdirectory.
129451220Seric
129551220Sericfeature		These hold special orthogonal features that you might
129651220Seric		want to include.  They should be referenced using
129751220Seric		the FEATURE macro.
129851220Seric
129951220Serichack		Local hacks.  These can be referenced using the HACK
130051220Seric		macro.  They shouldn't be of more than voyeuristic
130151220Seric		interest outside the .Berkeley.EDU domain, but who knows?
130265957Seric		We've all got our own peccadillos.
130351220Seric
130451268Sericsiteconfig	Site configuration -- e.g., tables of locally connected
130551268Seric		UUCP sites.
130651220Seric
130751268Seric
130857246Seric+------------------------+
130957246Seric| ADMINISTRATIVE DETAILS |
131057246Seric+------------------------+
131151220Seric
131251220SericThe following sections detail usage of certain internal parts of the
131351220Sericsendmail.cf file.  Read them carefully if you are trying to modify
131451220Sericthe current model.  If you find the above descriptions adequate, these
131551220Sericshould be {boring, confusing, tedious, ridiculous} (pick one or more).
131651220Seric
131751220SericRULESETS (* means built in to sendmail)
131851220Seric
131951220Seric   0 *	Parsing
132051220Seric   1 *	Sender rewriting
132151220Seric   2 *	Recipient rewriting
132251220Seric   3 *	Canonicalization
132351220Seric   4 *	Post cleanup
132454839Seric   5 *	Local address rewrite (after aliasing)
132560539Seric  1x	mailer rules (sender qualification)
132660539Seric  2x	mailer rules (recipient qualification)
132764801Seric  3x	mailer rules (sender header qualification)
132864801Seric  4x	mailer rules (recipient header qualification)
132964801Seric  5x	mailer subroutines (general)
133064801Seric  6x	mailer subroutines (general)
133164801Seric  7x	mailer subroutines (general)
133264801Seric  8x	reserved
133360539Seric  90	Mailertable host stripping
133460892Seric  96	Bottom half of Ruleset 3 (ruleset 6 in old sendmail)
133560892Seric  97	Hook for recursive ruleset 0 call (ruleset 7 in old sendmail)
133663857Seric  98	Local part of ruleset 0 (ruleset 8 in old sendmail)
133751220Seric
133851220Seric
133951220SericMAILERS
134051220Seric
134151220Seric   0	local, prog	local and program mailers
134265218Seric   1	[e]smtp, relay	SMTP channel
134365218Seric   2	uucp-*		UNIX-to-UNIX Copy Program
134458087Seric   3	netnews		Network News delivery
134558363Seric   4	fax		Sam Leffler's FlexFAX software
134651220Seric
134751220Seric
134851220SericMACROS
134951220Seric
135051220Seric   A
135151220Seric   B	Bitnet Relay
135265182Seric   C
135354839Seric   D	The local domain -- usually not needed
135451220Seric   E
135558363Seric   F	FAX Relay
135651220Seric   G
135757591Seric   H	mail Hub (for mail clusters)
135851220Seric   I
135951220Seric   J
136051220Seric   K
136167915Seric   L	Luser Relay
136251220Seric   M	Masquerade (who I claim to be)
136351220Seric   N
136451220Seric   O
136551220Seric   P
136651220Seric   Q
136751220Seric   R	Relay (for unqualified names)
136858071Seric   S	Smart Host
136951220Seric   T
137051309Seric   U	my UUCP name (if I have a UUCP connection)
137151309Seric   V	UUCP Relay (class V hosts)
137251220Seric   W	UUCP Relay (class W hosts)
137351220Seric   X	UUCP Relay (class X hosts)
137451309Seric   Y	UUCP Relay (all other hosts)
137551220Seric   Z	Version number
137651220Seric
137751220Seric
137851220SericCLASSES
137951220Seric
138051220Seric   A
138151220Seric   B
138251220Seric   C
138367539Seric   D	"dotted" users
138457246Seric   E	addresses that should not seem to come from $M
138554839Seric   F	hosts we forward for
138651220Seric   G
138751220Seric   H
138851220Seric   I
138951220Seric   J
139051220Seric   K
139151220Seric   L	addresses that should not be forwarded to $R
139251220Seric   M
139351220Seric   N
139451220Seric   O	operators that indicate network operations (cannot be in local names)
139560211Seric   P	top level pseudo-domains: BITNET, FAX, UUCP, etc.
139651220Seric   Q
139751220Seric   R
139851220Seric   S
139951220Seric   T
140051220Seric   U	locally connected UUCP hosts
140151309Seric   V	UUCP hosts connected to relay $V
140251309Seric   W	UUCP hosts connected to relay $W
140351309Seric   X	UUCP hosts connected to relay $X
140451309Seric   Y	locally connected smart UUCP hosts
140564153Seric   Z	locally connected domain-ized UUCP hosts
140654839Seric   .	the class containing only a dot
140751220Seric
140851220Seric
140951220SericM4 DIVERSIONS
141051220Seric
141158071Seric   1	Local host detection and resolution
141258071Seric   2	Local Ruleset 3 additions
141358071Seric   3	Local Ruleset 0 additions
141451268Seric   4	UUCP Ruleset 0 additions
141551309Seric   5	locally interpreted names (overrides $R)
141654839Seric   6	local configuration (at top of file)
141751220Seric   7	mailer definitions
141866099Seric   8
141958681Seric   9	special local rulesets (1 and 2)
1420