151220Seric 251220Seric 357246Seric NEW SENDMAIL CONFIGURATION FILES 451220Seric 557246Seric Eric Allman <eric@CS.Berkeley.EDU> 651220Seric 7*68340Seric @(#)README 8.47 (Berkeley) 02/15/95 851220Seric 951220Seric 1057246SericThis document describes the sendmail configuration files being used 1167469Sericat Berkeley. These use features in the new (R8) sendmail; they will 1267469Sericnot work on other versions. 1351220Seric 1457246SericThese configuration files are probably not as general as previous 1565957Sericversions, and don't handle as many of the weird cases automagically. 1657246SericI was able to simplify by them for two reasons. First, the network 1757246Serichas become more consistent -- for example, at this point, everyone 1857246Sericon the internet is supposed to be running a name server, so hacks to 1957246Serichandle NIC-registered hosts can go away. Second, I assumed that a 2057246Sericsubdomain would be running SMTP internally -- UUCP is presumed to be 2157246Serica long-haul protocol. I realize that this is not universal, but it 2257246Sericdoes describe the vast majority of sites with which I am familiar, 2357246Sericincluding those outside the US. 2451220Seric 2565957SericOf course, the downside of this is that if you do live in a weird 2665957Sericworld, things are going to get weirder for you. I'm sorry about that, 2757246Sericbut at the time we at Berkeley had a problem, and it seemed like the 2857246Sericright thing to do. 2951220Seric 3057247SericThis package requires a post-V7 version of m4; if you are running the 3157247Seric4.2bsd, SysV.2, or 7th Edition version, I suggest finding a friend with 3257247Serica newer version. You can m4-expand on their system, then run locally. 3365002SericSunOS's /usr/5bin/m4 or BSD-Net/2's m4 both work. GNU m4 version 1.1 3465002Sericalso works. Unfortunately, I'm told that the M4 on BSDI 1.0 doesn't 3565002Sericwork -- you'll have to use a Net/2 or GNU version. 3651220Seric 3758284SericIF YOU DON'T HAVE A BERKELEY MAKE, don't despair! Just run 3864371Seric"m4 foo.mc > foo.cf" -- that should be all you need. There is also 3964371Serica fairly crude (but functional) Makefile.dist that works on the 4064371Sericold version of make. 4158284Seric 4258284SericTo get started, you may want to look at tcpproto.mc (for TCP-only 4364324Sericsites), uucpproto.mc (for UUCP-only sites), and clientproto.mc (for 4464324Sericclusters of clients using a single mail host). Others are versions 4558284Sericthat we use at Berkeley, although not all are in current use. For 4658284Sericexample, ucbarpa has gone away, but I've left ucbarpa.mc in because 4758284Sericit demonstrates some interesting techniques. 4858284Seric 4957246SericI'm not pretending that this README describes everything that these 5057246Sericconfiguration files can do; clever people can probably tweak them 5157246Sericto great effect. But it should get you started. 5257246Seric 5365509Seric******************************************************************* 5465509Seric*** BE SURE YOU CUSTOMIZE THESE FILES! They have some *** 5565509Seric*** Berkeley-specific assumptions built in, such as the name *** 5665509Seric*** of our UUCP-relay. You'll want to create your own domain *** 5765509Seric*** description, and use that in place of domain/Berkeley.m4. *** 5865509Seric******************************************************************* 5958087Seric 6065509Seric 6157246Seric+--------------------------+ 6257246Seric| INTRODUCTION AND EXAMPLE | 6357246Seric+--------------------------+ 6457246Seric 6557246SericConfiguration files are contained in the subdirectory "cf", with a 6657246Sericsuffix ".mc". They must be run through "m4" to produce a ".cf" file. 6757246Seric 6851220SericLet's examine a typical .mc file (cf/cs-exposed.mc): 6951220Seric 7051220Seric divert(-1) 7151220Seric # 7251220Seric # Copyright (c) 1983 Eric P. Allman 7351220Seric # Copyright (c) 1988 The Regents of the University of California. 7451220Seric # All rights reserved. 7551220Seric # 7651220Seric # Redistribution and use in source and binary forms are permitted 7751220Seric # provided that the above copyright notice and this paragraph are 7851220Seric # duplicated in all such forms and that any documentation, 7951220Seric # advertising materials, and other materials related to such 8051220Seric # distribution and use acknowledge that the software was developed 8151220Seric # by the University of California, Berkeley. The name of the 8251220Seric # University may not be used to endorse or promote products derived 8351220Seric # from this software without specific prior written permission. 8451220Seric # THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR 8551220Seric # IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED 8651220Seric # WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR A PARTICULAR PURPOSE. 8751220Seric # 8851220Seric 8957246SericThe divert(-1) will delete the crud in the resulting output file. 9057247SericThe copyright notice is what your lawyers require. Our lawyers require 9157246Sericthe one that I've included in my files. A copyleft is a copyright by 9257246Sericanother name. 9351220Seric 9457246SericThe next line MUST be 9557246Seric 9651220Seric include(`../m4/cf.m4') 9751220Seric 9857246SericThis will pull in the M4 macros you will need to make sense of 9957246Sericeverything else. As the saying goes, don't think about it, just 10057246Sericdo it. If you don't do it, don't bother reading the rest of this 10157246Sericfile. 10251220Seric 10356778Seric VERSIONID(`<SCCS or RCS version id>') 10451220Seric 10551220SericVERSIONID is a macro that stuffs the version information into the 10651220Sericresulting file. We use SCCS; you could use RCS, something else, or 10757246Sericomit it completely. This is not the same as the version id included 10857246Sericin SMTP greeting messages -- this is defined in m4/version.m4. 10951220Seric 11051268Seric DOMAIN(cs.exposed) 11151220Seric 11251220SericThis example exposes the host inside of the CS subdomain -- that is, 11351220Sericit doesn't try to hide the name of the workstation to the outside 11451220Sericworld. Changing this to DOMAIN(cs.hidden) would have made outgoing 11551220Sericmessages refer to "<username>@CS.Berkeley.EDU" instead of using the 11663857Sericlocal hostname. Internally this is effected by using 11757246Seric"MASQUERADE_AS(CS.Berkeley.EDU)". 11851220Seric 11951268Seric MAILER(smtp) 12051220Seric 12151309SericThese describe the mailers used at the default CS site site. The 12251309Sericlocal mailer is always included automatically. 12351220Seric 12458087Seric 12557246Seric+--------+ 12657246Seric| OSTYPE | 12757246Seric+--------+ 12857246Seric 12951220SericNote that cf/cs-exposed.mc omits an OSTYPE macro -- this assumes 13051220Sericdefault Computer Science Division environment. There are several 13157247Sericexplicit environments available: bsd4.3, bsd4.4, hpux, irix, osf1, 13257247Sericriscos4.5, sunos3.5, sunos4.1, and ultrix4.1. These change things 13357247Sericlike the location of the alias file and queue directory. Some of 13457247Sericthese files are identical to one another. 13551220Seric 13657246SericOperating system definitions are easy to write. They may define 13757246Sericthe following variables (everything defaults, so an ostype file 13857246Sericmay be empty). 13951220Seric 14057246SericALIAS_FILE [/etc/aliases] The location of the text version 14159761Seric of the alias file(s). It can be a comma-separated 14266790Seric list of names (but be sure you quote values with 14366790Seric comments in them -- for example, use 14466790Seric define(`ALIAS_FILE', `a,b') 14566790Seric to get "a" and "b" both listed as alias files; 14666790Seric otherwise the define() primitive only sees "a"). 14757246SericHELP_FILE [/usr/lib/sendmail.hf] The name of the file 14857246Seric containing information printed in response to 14957246Seric the SMTP HELP command. 15057246SericQUEUE_DIR [/var/spool/mqueue] The directory containing 15157246Seric queue files. 15257246SericSTATUS_FILE [/etc/sendmail.st] The file containing status 15357246Seric information. 15458087SericLOCAL_MAILER_PATH [/bin/mail] The program used to deliver local mail. 15564153SericLOCAL_MAILER_FLAGS [rmn] The flags used by the local mailer. The 15664153Seric flags lsDFM are always included. 15763761SericLOCAL_MAILER_ARGS [mail -d $u] The arguments passed to deliver local 15863761Seric mail. 159*68340SericLOCAL_MAILER_MAX [undefined] If defined, the maximum size of local 160*68340Seric mail that you are willing to accept. 16158087SericLOCAL_SHELL_PATH [/bin/sh] The shell used to deliver piped email. 16263791SericLOCAL_SHELL_FLAGS [eu] The flags used by the shell mailer. The 16363791Seric flags lsDFM are always included. 16463791SericLOCAL_SHELL_ARGS [sh -c $u] The arguments passed to deliver "prog" 16563791Seric mail. 16667989SericLOCAL_SHELL_DIR [$z:/] The directory search path in which the 16767989Seric shell should run. 16858087SericUSENET_MAILER_PATH [/usr/lib/news/inews] The name of the program 16958087Seric used to submit news. 17058087SericUSENET_MAILER_FLAGS [rlsDFMmn] The mailer flags for the usenet mailer. 17158087SericUSENET_MAILER_ARGS [-m -h -n] The command line arguments for the 17258087Seric usenet mailer. 17365911SericUSENET_MAILER_MAX [100000] The maximum size of messages that will 17465911Seric be accepted by the usenet mailer. 17563857SericSMTP_MAILER_FLAGS [undefined] Flags added to SMTP mailer. Default 17667915Seric flags are `mDFMUX' for all SMTP-based mailers; the 17767915Seric "esmtp" mailer adds `a' and "smtp8" adds `8'. 17865911SericSMTP_MAILER_MAX [undefined] The maximum size of messages that will 17967915Seric be transported using the smtp, smtp8, or esmtp 18067915Seric mailers. 18167915SericSMTP_MAILER_ARGS [IPC $h] The arguments passed to the smtp mailer. 18267915Seric About the only reason you would want to change this 18367915Seric would be to change the default port. 18467915SericESMTP_MAILER_ARGS [IPC $h] The arguments passed to the esmtp mailer. 18567915SericSMTP8_MAILER_ARGS [IPC $h] The arguments passed to the smtp8 mailer. 18667915SericRELAY_MAILER_ARGS [IPC $h] The arguments passed to the relay mailer. 18763857SericUUCP_MAILER_FLAGS [undefined] Flags added to UUCP mailer. Default 18863857Seric flags are `DFMhuU' (and `m' for suucp mailer, minus 18963857Seric `U' for uucp-dom mailer). 19068057SericUUCP_MAILER_ARGS [uux - -r -z -a$g -gC $h!rmail ($u)] The arguments 19163761Seric passed to the UUCP mailer. 19263791SericUUCP_MAX_SIZE [100000] The maximum size message accepted for 19363791Seric transmission by the UUCP mailers. 19465911SericFAX_MAILER_PATH [/usr/local/lib/fax/mailfax] The program used to 19565911Seric submit FAX messages. 19665911SericFAX_MAILER_MAX [100000] The maximum size message accepted for 19765911Seric transmission by FAX. 19867934SericPOP_MAILER_PATH [/usr/lib/mh/spop] The pathname of the POP mailer. 19967934SericPOP_MAILER_FLAGS [Penu] Flags added to POP mailer. Flags "lsDFM" 20067934Seric are always added. 20167934SericPOP_MAILER_ARGS [pop $u] The arguments passed to the POP mailer. 20267942SericPROCMAIL_MAILER_FLAGS [Shu] Flags added to Procmail mailer. Flags 20367942Seric ``DFMmn'' are always set. 20467942SericPROCMAIL_MAILER_ARGS [procmail -m $h $f $u] The arguments passed to 20567942Seric the Procmail mailer. 206*68340SericPROCMAIL_MAILER_MAX [undefined] If set, the maximum size message that 207*68340Seric will be accepted by the procmail mailer. 20857246Seric 20957246Seric+---------+ 21057246Seric| DOMAINS | 21157246Seric+---------+ 21257246Seric 21357246SericYou will probably want to collect domain-dependent defines into one 21457246Sericfile, referenced by the DOMAIN macro. For example, our Berkeley 21557246Sericdomain file includes definitions for several internal distinguished 21657246Serichosts: 21757246Seric 21857246SericUUCP_RELAY The host that will forward UUCP-addressed email. 21957246Seric If not defined, all UUCP sites must be directly 22064028Seric connected. 22157246SericBITNET_RELAY The host that will forward BITNET-addressed email. 22257246Seric If not defined, the .BITNET pseudo-domain won't work. 22357246SericLOCAL_RELAY The site that will handle unqualified names -- that 22457246Seric is, names with out an @domain extension. If not set, 22557246Seric they are assumed to belong on this machine. This 22657246Seric allows you to have a central site to store a 22757246Seric company- or department-wide alias database. This 22857246Seric only works at small sites, and there are better 22964028Seric methods. 23067915SericLUSER_RELAY The site that will handle lusers -- that is, apparently 23167915Seric local names that aren't local accounts or aliases. 23257246Seric 23367915SericAny of these can be either ``mailer:hostname'' (in which case the 23464028Sericmailer is the internal mailer name, such as ``suucp'' and the hostname 23564028Sericis the name of the host as appropriate for that mailer) or just a 23664028Seric``hostname'', in which case a default mailer type (usually ``relay'', 23764153Serica variant on SMTP) is used. WARNING: if you have a wildcard MX 23864153Sericrecord matching your domain, you probably want to define these to 23964153Serichave a trailing dot so that you won't get the mail diverted back 24064153Sericto yourself. 24164028Seric 24257246SericThe domain file can also be used to define a domain name, if needed 24357982Seric(using "DD<domain>") and set certain site-wide features. If all hosts 24457982Sericat your site masquerade behind one email name, you could also use 24557982SericMASQUERADE_AS here. 24657246Seric 24758408SericYou do not have to define a domain -- in particular, if you are a 24858408Sericsingle machine sitting off somewhere, it is probably more work than 24958408Sericit's worth. This is just a mechanism for combining "domain dependent 25058408Sericknowledge" into one place. 25158408Seric 25257246Seric+---------+ 25357246Seric| MAILERS | 25457246Seric+---------+ 25557246Seric 25651220SericThere are fewer mailers supported in this version than the previous 25751220Sericversion, owing mostly to a simpler world. 25851220Seric 25951220Sericlocal The local and prog mailers. You will almost always 26051220Seric need these; the only exception is if you relay ALL 26157247Seric your mail to another site. This mailer is included 26257247Seric automatically. 26351220Seric 26451220Sericsmtp The Simple Mail Transport Protocol mailer. This does 26551220Seric not hide hosts behind a gateway or another other 26651220Seric such hack; it assumes a world where everyone is 26763761Seric running the name server. This file actually defines 26867915Seric four mailers: "smtp" for regular (old-style) SMTP to 26963761Seric other servers, "esmtp" for extended SMTP to other 27067915Seric servers, "smtp8" to do SMTP to other servers without 27167915Seric converting 8-bit data to MIME (essentially, this is 27267915Seric your statement that you know the other end is 8-bit 27367915Seric clean even if it doesn't say so), and "relay" for 27467915Seric transmission to our RELAY_HOST, LUSER_RELAY, or 27567915Seric MAILER_HUB. 27651220Seric 27751220Sericuucp The Unix-to-Unix Copy Program mailer. Actually, this 27867471Seric defines two mailers, "uucp-old" (a.k.a. "uucp") and 27967471Seric "uucp-new" (a.k.a. "suucp"). The latter is for when you 28067471Seric know that the UUCP mailer at the other end can handle 28167471Seric multiple recipients in one transfer. If the smtp mailer 28267471Seric is also included in your configuration, two other mailers 28367471Seric ("uucp-dom" and "uucp-uudom") are also defined. When you 28467471Seric include the uucp mailer, sendmail looks for all names in 28565218Seric the $=U class and sends them to the uucp-old mailer; all 28665218Seric names in the $=Y class are sent to uucp-new; and all 28765218Seric names in the $=Z class are sent to uucp-uudom. Note that 28857246Seric this is a function of what version of rmail runs on 28957246Seric the receiving end, and hence may be out of your control. 29065218Seric See the section below describing UUCP mailers in more 29165218Seric detail. 29251220Seric 29358087Sericusenet Usenet (network news) delivery. If this is specified, 29458087Seric an extra rule is added to ruleset 0 that forwards all 29558087Seric local email for users named ``group.usenet'' to the 29658087Seric ``inews'' program. Note that this works for all groups, 29758087Seric and may be considered a security problem. 29858087Seric 29958363Sericfax Facsimile transmission. This is experimental and based 30058363Seric on Sam Leffler's FlexFAX software. For more information, 30158363Seric see below. 30258087Seric 30365148Sericpop Post Office Protocol. 30458363Seric 30567942Sericprocmail An interface to procmail (does not come with sendmail). 30667942Seric This is designed to be used in mailertables. For example, 30767942Seric a common question is "how do I forward all mail for a given 30867942Seric domain to a single person?". If you have this mailer 30967942Seric defined, you could set up a mailertable reading: 31067942Seric 31167942Seric host.com procmail:/etc/procmailrcs/host.com 31267942Seric 31367942Seric with the file /etc/procmailrcs/host.com reading: 31467942Seric 31567942Seric :0 # forward mail for host.com 31667942Seric ! -oi -f $1 person@other.host 31767942Seric 31867942Seric This would arrange for (anything)@host.com to be sent 31967942Seric to person@other.host. Within the procmail script, $1 is 32067942Seric the name of the sender and $2 is the name of the recipient. 32167942Seric If you use this with FEATURE(local_procmail), the FEATURE 32267942Seric should be listed first. 32367942Seric 32467929SericThe local mailer accepts addresses of the form "user+detail", where 32567929Sericthe "+detail" is not used for mailbox matching but is available 32667942Sericto certain local mail programs (in particular, see FEATURE(local_procmail)). 32767929SericFor example, "eric", "eric+sendmail", and "eric+sww" all indicate 32867929Sericthe same user, but additional arguments <null>, "sendmail", and "sww" 32967929Sericmay be provided for use in sorting mail. 33065148Seric 33167929Seric 33257246Seric+----------+ 33357246Seric| FEATURES | 33457246Seric+----------+ 33551268Seric 33657246SericSpecial features can be requested using the "FEATURE" macro. For 33757246Sericexample, the .mc line: 33857246Seric 33957246Seric FEATURE(use_cw_file) 34057246Seric 34157246Serictells sendmail that you want to have it read an /etc/sendmail.cw 34258782Sericfile to get values for class $=w. The FEATURE may contain a single 34358782Sericoptional parameter -- for example: 34457246Seric 34558782Seric FEATURE(mailertable, dbm /usr/lib/mailertable) 34658782Seric 34758782SericAvailable features are: 34858782Seric 34957246Sericuse_cw_file Read the file /etc/sendmail.cw file to get alternate 35057246Seric names for this host. This might be used if you were 35157246Seric on a host that MXed for a dynamic set of other 35257246Seric hosts. If the set is static, just including the line 35357246Seric "Cw<name1> <name2> ..." is probably superior. 35458408Seric The actual filename can be overridden by redefining 35558408Seric confCW_FILE. 35664324Seric 35758087Sericredirect Reject all mail addressed to "address.REDIRECT" with 35858087Seric a ``551 User not local; please try <address>'' message. 35958087Seric If this is set, you can alias people who have left 36058087Seric to their new address with ".REDIRECT" appended. 36164324Seric 36258284Sericnouucp Don't do anything special with UUCP addresses at all. 36364324Seric 36459080Sericnocanonify Don't pass addresses to $[ ... $] for canonification. 36559080Seric This would generally only be used by sites that only 36659080Seric act as mail gateways or which have user agents that do 36764028Seric full canonification themselves. You may also want to 36864028Seric use "define(`confBIND_OPTS',`-DNSRCH -DEFNAMES')" to 36964028Seric turn off the usual resolver options that do a similar 37064028Seric thing. 37164324Seric 37267917Sericstickyhost If set, email sent to "user@local.host" are marked 37358526Seric as "sticky" -- that is, the local addresses aren't 37458526Seric matched against UDB and don't go through ruleset 5. 37567915Seric This is used if you want a set up where "user" is 37667915Seric not necessarily the same as "user@local.host", e.g., 37767915Seric to make a distinct domain-wide namespace. Prior to 37867915Seric 8.7 this was the default, and notsticky was used to 37967915Seric turn this off. 38064324Seric 38158782Sericmailertable Include a "mailer table" which can be used to override 38258782Seric routing for particular domains. The argument of the 38358782Seric FEATURE may be the key definition. If none is specified, 38458782Seric the definition used is: 38564164Seric hash -o /etc/mailertable 38663761Seric Keys in this database are fully qualified domain names 38763761Seric or partial domains preceded by a dot -- for example, 38863761Seric "vangogh.CS.Berkeley.EDU" or ".CS.Berkeley.EDU". 38963761Seric Values must be of the form: 39058782Seric mailer:domain 39163761Seric where "mailer" is the internal mailer name, and "domain" 39263761Seric is where to send the message. These maps are not 39363761Seric reflected into the message header. 39464324Seric 39563761Sericdomaintable Include a "domain table" which can be used to provide 39667451Seric domain name mapping. Use of this should really be 39767451Seric limited to your own domains. It may be useful if you 39867451Seric change names (e.g., your company changes names from 39967451Seric oldname.com to newname.com). The argument of the 40067451Seric FEATURE may be the key definition. If none is specified, 40167451Seric the definition used is: 40264164Seric hash -o /etc/domaintable 40367451Seric The key in this table is the domain name; the value is 40467451Seric the new (fully qualified) domain. Anything in the 40563761Seric domaintable is reflected into headers; that is, this 40663761Seric is done in ruleset 3. 40764324Seric 40859034Sericbitdomain Look up bitnet hosts in a table to try to turn them into 40959034Seric internet addresses. The table can be built using the 41064153Seric bitdomain program contributed by John Gardiner Myers. 41159034Seric The argument of the FEATURE may be the key definition; if 41259034Seric none is specified, the definition used is: 41364164Seric hash -o /etc/bitdomain.db 41459034Seric Keys are the bitnet hostname; values are the corresponding 41559034Seric internet hostname. 41664324Seric 41759037Sericuucpdomain Similar feature for UUCP hosts. The default map definition 41859037Seric is: 41964164Seric hash -o /etc/uudomain.db 42059037Seric At the moment there is no automagic tool to build this 42159037Seric database. 42264324Seric 42360263Sericalways_add_domain 42460263Seric Include the local host domain even on locally delivered 42560263Seric mail. Normally it is not added unless it is already 42660263Seric present. 42764324Seric 42863761Sericallmasquerade If masquerading is enabled (using MASQUERADE_AS), this 42963761Seric feature will cause recipient addresses to also masquerade 43063761Seric as being from the masquerade host. Normally they get 43163761Seric the local hostname. Although this may be right for 43263761Seric ordinary users, it can break local aliases. For example, 43363761Seric if you send to "localalias", the originating sendmail will 43463761Seric find that alias and send to all members, but send the 43563761Seric message with "To: localalias@masqueradehost". Since that 43663761Seric alias likely does not exist, replies will fail. Use this 43763761Seric feature ONLY if you can guarantee that the ENTIRE 43863761Seric namespace on your masquerade host supersets all the 43963761Seric local entries. 44064324Seric 44164153Sericnodns We aren't running DNS at our site (for example, 44264153Seric we are UUCP-only connected). It's hard to consider 44364153Seric this a "feature", but hey, it had to go somewhere. 44457246Seric 44564324Sericnullclient This is a special case -- it creates a stripped down 44664324Seric configuration file containing nothing but support for 44764394Seric forwarding all mail to a central hub via a local 44864394Seric SMTP-based network. The argument is the name of that 44964394Seric hub. 45064394Seric 45164394Seric The only other feature that should be used in conjunction 45264394Seric with this one is "nocanonify" (this causes addresses to 45364394Seric be sent unqualified via the SMTP connection; normally 45464394Seric they are qualifed with the masquerade name, which 45564394Seric defaults to the name of the hub machine). No mailers 45664394Seric should be defined. No aliasing or forwarding is done. 45757246Seric 45867942Sericlocal_procmail Use procmail as the local mailer. This mailer can 45967929Seric make use of the "user+indicator@local.host" syntax; 46067929Seric normally the +indicator is just tossed, but by default 46167929Seric it is passed as the -a argument to procmail. The 46267929Seric argument to this feature is the pathname of procmail, 46367929Seric which defaults to /usr/local/bin/procmail. 46464324Seric 46568206Sericbestmx_is_local Accept mail as though locally addressed for any host that 46668206Seric lists us as the best possible MX record. This generates 46768206Seric additional DNS traffic, but should be OK for low to 46868206Seric medium traffic hosts. 46967929Seric 47068216Sericsmrsh Use the SendMail Restricted SHell (smrsh) provided 47168216Seric with the distribution instead of /bin/sh for mailing 47268216Seric to programs. This improves the ability of the local 47368216Seric system administrator to control what gets run via 47468216Seric e-mail. If an argument is provided it is used as the 47568216Seric pathname to smrsh; otherwise, /usr/local/etc/smrsh is 47668216Seric assumed. 47768206Seric 47868216Seric 47957246Seric+-------+ 48057246Seric| HACKS | 48157246Seric+-------+ 48257246Seric 48357246SericSome things just can't be called features. To make this clear, 48457247Sericthey go in the hack subdirectory and are referenced using the HACK 48557246Sericmacro. These will tend to be site-dependent. The release 48657246Sericincludes the Berkeley-dependent "cssubdomain" hack (that makes 48757246Sericsendmail accept local names in either Berkeley.EDU or CS.Berkeley.EDU; 48857246Sericthis is intended as a short-term aid while we move hosts into 48957246Sericsubdomains. 49057246Seric 49158087Seric 49257246Seric+--------------------+ 49357246Seric| SITE CONFIGURATION | 49457246Seric+--------------------+ 49557246Seric 49668057Seric ***************************************************** 49768057Seric * This section is really obsolete, and is preserved * 49868057Seric * only for back compatibility. You should plan on * 49968057Seric * using mailertables for new installations. In * 50068057Seric * particular, it doesn't work for the newer forms * 50168057Seric * of UUCP mailers, such as uucp-uudom. * 50268057Seric ***************************************************** 50368057Seric 50457246SericComplex sites will need more local configuration information, such as 50557246Sericlists of UUCP hosts they speak with directly. This can get a bit more 50657246Serictricky. For an example of a "complex" site, see cf/ucbvax.mc. 50757246Seric 50866336SericIf your host is known by several different names, you need to augment 50966336Sericthe $=w class. This is a list of names by which you are known, and 51066336Sericanything sent to an address using a host name in this list will be 51166336Serictreated as local mail. You can do this in two ways: either create 51266336Sericthe file /etc/sendmail.cw containing a list of your aliases (one per 51366336Sericline), and use ``FEATURE(use_cw_file)'' in the .mc file, or add the 51466336Sericline: 51566336Seric 51666336Seric Cw alias.host.name 51766336Seric 51866336Sericat the end of that file. See the ``vangogh.mc'' file for an example. 51966336SericBe sure you use the fully-qualified name of the host, rather than a 52066336Sericshort name. 52166336Seric 52257246SericThe SITECONFIG macro allows you to indirectly reference site-dependent 52357246Sericconfiguration information stored in the siteconfig subdirectory. For 52457246Sericexample, the line 52557246Seric 52657246Seric SITECONFIG(uucp.ucbvax, ucbvax, U) 52757246Seric 52857246Sericreads the file uucp.ucbvax for local connection information. The 52957246Sericsecond parameter is the local name (in this case just "ucbvax" since 53066336Sericit is locally connected, and hence a UUCP hostname). The third 53166336Sericparameter is the name of both a macro to store the local name (in 53266336Sericthis case, $U) and the name of the class (e.g., $=U) in which to store 53366336Sericthe host information read from the file. Another SITECONFIG line reads 53457246Seric 53557246Seric SITECONFIG(uucp.ucbarpa, ucbarpa.Berkeley.EDU, W) 53657246Seric 53757246SericThis says that the file uucp.ucbarpa contains the list of UUCP sites 53857246Sericconnected to ucbarpa.Berkeley.EDU. The $=W class will be used to 53966336Sericstore this list, and $W is defined to be ucbarpa.Berkeley.EDU, that 54066336Sericis, the name of the relay to which the hosts listed in uucp.ucbarpa 54166336Sericare connected. [The machine ucbarpa is gone now, but I've left 54257246Sericthis out-of-date configuration file around to demonstrate how you 54357246Sericmight do this.] 54457246Seric 54566336SericNote that the case of SITECONFIG with a third parameter of ``U'' is 54666336Sericspecial; the second parameter is assumed to be the UUCP name of the 54766336Sericlocal site, rather than the name of a remote site, and the UUCP name 54866336Sericis entered into $=w (the list of local hostnames) as $U.UUCP. 54966336Seric 55057246SericThe siteconfig file (e.g., siteconfig/uucp.ucbvax.m4) contains nothing 55157246Sericmore than a sequence of SITE macros describing connectivity. For 55257246Sericexample: 55357246Seric 55457246Seric SITE(cnmat) 55557246Seric SITE(sgi olympus) 55657246Seric 55757246SericThe second example demonstrates that you can use two names on the 55857246Sericsame line; these are usually aliases for the same host (or are at 55957246Sericleast in the same company). 56057246Seric 56158087Seric 56265218Seric+--------------------+ 56365218Seric| USING UUCP MAILERS | 56465218Seric+--------------------+ 56565218Seric 56665218SericIt's hard to get UUCP mailers right because of the extremely ad hoc 56765218Sericnature of UUCP addressing. These config files are really designed 56865218Sericfor domain-based addressing, even for UUCP sites. 56965218Seric 57065218SericThere are four UUCP mailers available. The choice of which one to 57165218Sericuse is partly a matter of local preferences and what is running at 57265218Sericthe other end of your UUCP connection. Unlike good protocols that 57365218Sericdefine what will go over the wire, UUCP uses the policy that you 57465218Sericshould do what is right for the other end; if they change, you have 57565218Sericto change. This makes it hard to do the right thing, and discourages 57665218Sericpeople from updating their software. In general, if you can avoid 57765218SericUUCP, please do. 57865218Seric 57965218SericThe major choice is whether to go for a domainized scheme or a 58065218Sericnon-domainized scheme. This depends entirely on what the other 58165218Sericend will recognize. If at all possible, you should encourage the 58265218Sericother end to go to a domain-based system -- non-domainized addresses 58365218Sericdon't work entirely properly. 58465218Seric 58565218SericThe four mailers are: 58665218Seric 58765218Seric uucp-old (obsolete name: "uucp") 58865218Seric This is the oldest, the worst (but the closest to UUCP) way of 58965218Seric sending messages accros UUCP connections. It does bangify 59065218Seric everything and prepends $U (your UUCP name) to the sender's 59165218Seric address (which can already be a bang path itself). It can 59265218Seric only send to one address at a time, so it spends a lot of 59365218Seric time copying duplicates of messages. Avoid this if at all 59465218Seric possible. 59565218Seric 59665218Seric uucp-new (obsolete name: "suucp") 59765218Seric The same as above, except that it assumes that in one rmail 59865218Seric command you can specify several recipients. It still has a 59965218Seric lot of other problems. 60065218Seric 60165218Seric uucp-dom 60265218Seric This UUCP mailer keeps everything as domain addresses. 60367471Seric Basically, it uses the SMTP mailer rewriting rules. This mailer 60467471Seric is only included if MAILER(smtp) is also specified. 60565218Seric 60665218Seric Unfortunately, a lot of UUCP mailer transport agents require 60765218Seric bangified addresses in the envelope, although you can use 60865218Seric domain-based addresses in the message header. (The envelope 60965218Seric shows up as the From_ line on UNIX mail.) So.... 61065218Seric 61165218Seric uucp-uudom 61265218Seric This is a cross between uucp-new (for the envelope addresses) 61365218Seric and uucp-dom (for the header addresses). It bangifies the 61465218Seric envelope sender (From_ line in messages) without adding the 61565218Seric local hostname, unless there is no host name on the address 61665218Seric at all (e.g., "wolf") or the host component is a UUCP host name 61765218Seric instead of a domain name ("somehost!wolf" instead of 61867471Seric "some.dom.ain!wolf"). This is also included only if MAILER(smtp) 61967471Seric is also specified. 62065218Seric 62165218SericExamples: 62265218Seric 62365218SericWe are on host grasp.insa-lyon.fr (UUCP host name "grasp"). The 62465218Sericfollowing summarizes the sender rewriting for various mailers. 62565218Seric 62665218SericMailer sender rewriting in the envelope 62765218Seric------ ------ ------------------------- 62865218Sericuucp-{old,new} wolf grasp!wolf 62965218Sericuucp-dom wolf wolf@grasp.insa-lyon.fr 63065218Sericuucp-uudom wolf grasp.insa-lyon.fr!wolf 63165218Seric 63265218Sericuucp-{old,new} wolf@fr.net grasp!fr.net!wolf 63365218Sericuucp-dom wolf@fr.net wolf@fr.net 63465218Sericuucp-uudom wolf@fr.net fr.net!wolf 63565218Seric 63665218Sericuucp-{old,new} somehost!wolf grasp!somehost!wolf 63765218Sericuucp-dom somehost!wolf somehost!wolf@grasp.insa-lyon.fr 63865218Sericuucp-uudom somehost!wolf grasp.insa-lyon.fr!somehost!wolf 63965218Seric 64065218SericIf you are using one of the domainized UUCP mailers, you really want 64165218Sericto convert all UUCP addresses to domain format -- otherwise, it will 64265218Sericdo it for you (and probably not the way you expected). For example, 64365218Sericif you have the address foo!bar!baz (and you are not sending to foo), 64465218Sericthe heuristics will add the @uucp.relay.name or @local.host.name to 64565218Sericthis address. However, if you map foo to foo.host.name first, it 64665218Sericwill not add the local hostname. You can do this using the uucpdomain 64765218Sericfeature. 64865218Seric 64965218Seric 65057246Seric+-------------------+ 65157246Seric| TWEAKING RULESETS | 65257246Seric+-------------------+ 65357246Seric 65451268SericFor more complex configurations, you can define special rules. 65551268SericThe macro LOCAL_RULE_3 introduces rules that are used in canonicalizing 65651268Sericthe names. Any modifications made here are reflected in the header. 65751268Seric 65851268SericA common use is to convert old UUCP addreses to SMTP addresses using 65951268Sericthe UUCPSMTP macro. For example: 66051268Seric 66151268Seric LOCAL_RULE_3 66251268Seric UUCPSMTP(decvax, decvax.dec.com) 66351268Seric UUCPSMTP(research, research.att.com) 66451268Seric 66551268Sericwill cause addresses of the form "decvax!user" and "research!user" 66651268Sericto be converted to "user@decvax.dec.com" and "user@research.att.com" 66751268Sericrespectively. 66851268Seric 66965957SericThis could also be used to look up hosts in a database map: 67057246Seric 67157246Seric LOCAL_RULE_3 67257246Seric R$* < @ $+ > $* $: $1 < @ $(hostmap $2 $) > $3 67357246Seric 67457246SericThis map would be defined in the LOCAL_CONFIG portion, as shown below. 67557246Seric 67651268SericSimilarly, LOCAL_RULE_0 can be used to introduce new parsing rules. 67751268SericFor example, new rules are needed to parse hostnames that you accept 67851309Sericvia MX records. For example, you might have: 67951268Seric 68051309Seric LOCAL_RULE_0 68165986Seric R$+ <@ host.dom.ain.> $#uucp $@ cnmat $: $1 < @ host.dom.ain.> 68251309Seric 68351309SericYou would use this if you had installed an MX record for cnmat.Berkeley.EDU 68451309Sericpointing at this host; this rule catches the message and forwards it on 68551309Sericusing UUCP. 68651309Seric 68758681SericYou can also tweak rulesets 1 and 2 using LOCAL_RULE_1 and LOCAL_RULE_2. 68858681SericThese rulesets are normally empty. 68958681Seric 69057246SericA similar macro is LOCAL_CONFIG. This introduces lines added after the 69157246Sericboilerplate option setting but before rulesets, and can be used to 69257945Sericdeclare local database maps or whatever. For example: 69351268Seric 69457246Seric LOCAL_CONFIG 69557246Seric Khostmap hash /etc/hostmap.db 69657246Seric Kyplocal nis -m hosts.byname 69751220Seric 69858087Seric 69957246Seric+---------------------------+ 70057246Seric| MASQUERADING AND RELAYING | 70157246Seric+---------------------------+ 70257246Seric 70357246SericYou can have your host masquerade as another using 70457246Seric 70557246Seric MASQUERADE_AS(host.domain) 70657246Seric 70765957SericThis causes outgoing SMTP mail to be labeled as coming from the 70857246Sericindicated domain, rather than $j. One normally masquerades as one 70965957Sericof one's own subdomains (for example, it's unlikely that I would 71057246Sericchoose to masquerade as an MIT site). 71157246Seric 71264153SericThe masquerade name is not normally canonified, so it is important 71364153Sericthat it be your One True Name, that is, fully qualified and not a 71464153SericCNAME. 71564153Seric 71657246Sericthere are always users that need to be "exposed" -- that is, their 71757246Sericinternal site name should be displayed instead of the masquerade name. 71857246SericRoot is an example. You can add users to this list using 71957246Seric 72057246Seric EXPOSED_USER(usernames) 72157246Seric 72257246SericThis adds users to class E; you could also use something like 72357246Seric 72457246Seric FE/etc/sendmail.cE 72557246Seric 72657246SericYou can also arrange to relay all unqualified names (that is, names 72757246Sericwithout @host) to a relay host. For example, if you have a central 72857246Sericemail server, you might relay to that host so that users don't have 72957246Sericto have .forward files or aliases. You can do this using 73057246Seric 73158071Seric define(`LOCAL_RELAY', mailer:hostname) 73257246Seric 73358071SericThe ``mailer:'' can be omitted, in which case the mailer defaults to 73458071Seric"smtp". There are some user names that you don't want relayed, perhaps 73558071Sericbecause of local aliases. A common example is root, which may be 73658071Sericlocally aliased. You can add entries to this list using 73757246Seric 73857246Seric LOCAL_USER(usernames) 73957246Seric 74057246SericThis adds users to class L; you could also use something like 74157246Seric 74257246Seric FL/etc/sendmail.cL 74357246Seric 74464153SericIf you want all incoming mail sent to a centralized hub, as for a 74564153Sericshared /var/spool/mail scheme, use 74657591Seric 74758071Seric define(`MAIL_HUB', mailer:hostname) 74857591Seric 74958071SericAgain, ``mailer:'' defaults to "smtp". If you define both LOCAL_RELAY 75066047Sericand MAIL_HUB, unqualified names will be sent to the LOCAL_RELAY and 75166047Sericother local names will be sent to MAIL_HUB. Names in $=L will be 75266047Sericdelivered locally, so you MUST have aliases or .forward files for them. 75366047Seric 75466047SericFor example, if are on machine mastodon.CS.Berkeley.EDU, the following 75558071Sericcombinations of settings will have the indicated effects: 75657591Seric 75757591Sericemail sent to.... eric eric@mastodon.CS.Berkeley.EDU 75857591Seric 75957591SericLOCAL_RELAY set to mail.CS.Berkeley.EDU (delivered locally) 76057591Sericmail.CS.Berkeley.EDU 76157591Seric 76257591SericMAIL_HUB set to mammoth.CS.Berkeley.EDU mammoth.CS.Berkeley.EDU 76357591Sericmammoth.CS.Berkeley.EDU 76457591Seric 76557591SericBoth LOCAL_RELAY and mail.CS.Berkeley.EDU mammoth.CS.Berkeley.EDU 76657591SericMAIL_HUB set as above 76757591Seric 76864153SericIf you want all outgoing mail to go to a central relay site, define 76964153SericSMART_HOST as well. Briefly: 77058071Seric 77164153Seric LOCAL_RELAY applies to unqualifed names (e.g., "eric"). 77264153Seric MAIL_HUB applies to names qualified with the name of the 77364153Seric local host (e.g., "eric@mastodon.CS.Berkeley.EDU"). 77464153Seric SMART_HOST applies to names qualified with other hosts. 77564153Seric 77664153SericHowever, beware that other relays (e.g., UUCP_RELAY, BITNET_RELAY, and 77764153SericFAX_RELAY) take precedence over SMART_HOST, so if you really want 77864153Sericabsolutely everything to go to a single central site you will need to 77964153Sericunset all the other relays -- or better yet, find or build a minimal 78064153Sericconfig file that does this. 78164153Seric 78264153Seric 78358071Seric+-------------------------------+ 78458071Seric| NON-SMTP BASED CONFIGURATIONS | 78558071Seric+-------------------------------+ 78658071Seric 78758071SericThese configuration files are designed primarily for use by SMTP-based 78858071Sericsites. I don't pretend that they are well tuned for UUCP-only or 78958071SericUUCP-primarily nodes (the latter is defined as a small local net 79058071Sericconnected to the rest of the world via UUCP). However, there is one 79158071Serichook to handle some special cases. 79258071Seric 79358071SericYou can define a ``smart host'' that understands a richer address syntax 79458071Sericusing: 79558071Seric 79658071Seric define(`SMART_HOST', mailer:hostname) 79758071Seric 79864028SericIn this case, the ``mailer:'' defaults to "relay". Any messages that 79958071Sericcan't be handled using the usual UUCP rules are passed to this host. 80058071Seric 80158071SericIf you are on a local SMTP-based net that connects to the outside 80258071Sericworld via UUCP, you can use LOCAL_NET_CONFIG to add appropriate rules. 80358071SericFor example: 80458071Seric 80558071Seric define(`SMART_HOST', suucp:uunet) 80658071Seric LOCAL_NET_CONFIG 80763761Seric R$* < @ $* .$m. > $* $#smtp $@ $2.$m. $: $1 < @ $2.$m. > $3 80858071Seric 80958071SericThis will cause all names that end in your domain name ($m) via 81058071SericSMTP; anything else will be sent via suucp (smart UUCP) to uunet. 81163761SericIf you have FEATURE(nocanonify), you may need to omit the dots after 81263761Sericthe $m. If you are running a local DNS inside your domain which is 81363761Sericnot otherwise connected to the outside world, you probably want to 81463761Sericuse: 81558071Seric 81663761Seric define(`SMART_HOST', smtp:fire.wall.com) 81763761Seric LOCAL_NET_CONFIG 81863761Seric R$* < @ $* . > $* $#smtp $@ $2. $: $1 < @ $2. > $3 81958071Seric 82063761SericThat is, send directly only to things you found in your DNS lookup; 82163761Sericanything else goes through SMART_HOST. 82263761Seric 82364153SericIf you are not running DNS at all, it is important to use 82464153SericFEATURE(nodns) to avoid having sendmail queue everything waiting 82564153Sericfor the name server to come up. 82663761Seric 82764153Seric 82864259Seric+-----------+ 82964259Seric| WHO AM I? | 83064259Seric+-----------+ 83164259Seric 83264259SericNormally, the $j macro is automatically defined to be your fully 83364259Sericqualified domain name (FQDN). Sendmail does this by getting your 83464259Serichost name using gethostname and then calling gethostbyname on the 83564259Sericresult. For example, in some environments gethostname returns 83664259Sericonly the root of the host name (such as "foo"); gethostbyname is 83764259Sericsupposed to return the FQDN ("foo.bar.com"). In some (fairly rare) 83864259Sericcases, gethostbyname may fail to return the FQDN. In this case 83964259Sericyou MUST define confDOMAIN_NAME to be your fully qualified domain 84064259Sericname. This is usually done using: 84164259Seric 84264259Seric Dmbar.com 84364259Seric define(`confDOMAIN_NAME', `$w.$m')dnl 84464259Seric 84564259Seric 84664028Seric+--------------------+ 84764028Seric| USING MAILERTABLES | 84864028Seric+--------------------+ 84964028Seric 85064028SericTo use FEATURE(mailertable), you will have to create an external 85164028Sericdatabase containing the routing information for various domains. 85264028SericFor example, a mailertable file in text format might be: 85364028Seric 85464028Seric .my.domain xnet:%1.my.domain 85564028Seric uuhost1.my.domain suucp:uuhost1 85664028Seric .bitnet smtp:relay.bit.net 85764028Seric 85864028SericThis should normally be stored in /etc/mailertable. The actual 85964028Sericdatabase version of the mailertable is built using: 86064028Seric 86164028Seric makemap hash /etc/mailertable.db < /etc/mailertable 86264028Seric 86364028SericThe semantics are simple. Any LHS entry that does not begin with 86464028Serica dot matches the full host name indicated. LHS entries beginning 86564028Sericwith a dot match anything ending with that domain name -- that is, 86664028Sericthey can be thought of as having a leading "*" wildcard. Matching 86764028Sericis done in order of most-to-least qualified -- for example, even 86864028Sericthough ".my.domain" is listed first in the above example, an entry 86964028Sericof "uuhost1.my.domain" will match the second entry since it is 87064028Sericmore explicit. 87164028Seric 87264028SericThe RHS should always be a "mailer:host" pair. The mailer is the 87364028Sericconfiguration name of a mailer (that is, an `M' line in the 87464028Sericsendmail.cf file). The "host" will be the hostname passed to 87564028Sericthat mailer. In domain-based matches (that is, those with leading 87664028Sericdots) the "%1" may be used to interpolate the wildcarded part of 87764028Sericthe host name. For example, the first line above sends everything 87864028Sericaddressed to "anything.my.domain" to that same host name, but using 87964028Sericthe (presumably experimental) xnet mailer. 88064028Seric 88167915SericIn some cases you may want to temporarily turn off MX records, 88267915Sericparticularly on gateways. For example, you may want to MX 88367915Sericeverything in a domain to one machine that then forwards it 88467915Sericdirectly. To do this, you might use the DNS configuration: 88564028Seric 88667915Seric *.domain. IN MX 0 relay.machine 88767915Seric 88867915Sericand on relay.machine use the mailertable: 88967915Seric 89067915Seric .domain smtp:[gateway.domain] 89167915Seric 89267915SericThe [square brackets] turn off MX records for this host only. 89367915SericIf you didn't do this, the mailertable would use the MX record 89467915Sericagain, which would give you an MX loop. 89567915Seric 89667915Seric 89764153Seric+--------------------------------+ 89864153Seric| USING USERDB TO MAP FULL NAMES | 89964153Seric+--------------------------------+ 90064153Seric 90164153SericThe user database was not originally intended for mapping full names 90264153Sericto login names (e.g., Eric.Allman => eric), but some people are using 90364153Sericit that way. (I would recommend that you set up aliases for this 90464153Sericpurpose instead -- since you can specify multiple alias files, this 90564153Sericis fairly easy.) The intent was to locate the default maildrop at 90664153Serica site, but allow you to override this by sending to a specific host. 90764153Seric 90864153SericIf you decide to set up the user database in this fashion, it is 90967917Sericimperative that you not use FEATURE(stickyhost) -- otherwise, 91064153Serice-mail sent to Full.Name@local.host.name will be rejected. 91164153Seric 91267917SericTo build the internal form of the user database, use: 91364153Seric 91464259Seric makemap btree /usr/data/base.db < /usr/data/base.txt 91564259Seric 91664259Seric 91767539Seric+--------------------------------+ 91867539Seric| MISCELLANEOUS SPECIAL FEATURES | 91967539Seric+--------------------------------+ 92067539Seric 92167539SericDOTTED_USER(name) 92267539Seric Sometimes it is convenient to merge configuration on a 92367539Seric centralized mail machine, for example, to forward all 92467539Seric root mail to a mail server. In this case it might be 92567539Seric useful to be able to treat the root addresses as a class 92667539Seric of addresses with subtle differences. You can do this 92767539Seric using dotted users. For example, a client might include 92867539Seric the alias: 92967539Seric 93067539Seric root: root.client1@server 93167539Seric 93267539Seric On the server, the mail configuration would include: 93367539Seric 93467539Seric DOTTED_USER(root) 93567539Seric 93667539Seric Aliases on the server that would match this address would 93767539Seric be "root.client", "root.*", and "root", tried in that 93867539Seric order. You can specify multiple addresses either by 93967539Seric joining them in one DOTTTED_USER macro or by having 94067539Seric multiple macros: 94167539Seric 94267539Seric DOTTED_USER(root) 94367539Seric DOTTED_USER(postmaster mailer-daemon) 94467539Seric 94567539Seric defines three dotted users. 94667539Seric 94767539Seric 94867960Seric+----------------+ 94967960Seric| SECURITY NOTES | 95067960Seric+----------------+ 95167960Seric 95267960SericA lot of sendmail security comes down to you. Sendmail 8 is much 95367960Sericmore careful about checking for security problems than previous 95467960Sericversions, but there are some things that you still need to watch 95567960Sericfor. In particular: 95667960Seric 95767960Seric* Make sure the aliases file isn't writable except by trusted 95867960Seric system personnel. This includes both the text and database 95967960Seric version. 96067960Seric 96167960Seric* Make sure that other files that sendmail reads, such as the 96267960Seric mailertable, is only writable by trusted system personnel. 96367960Seric 96467960Seric* The queue directory should not be world writable PARTICULARLY 96567960Seric if your system allows "file giveaways" (that is, if a non-root 96667960Seric user can chown any file they own to any other user). 96767960Seric 96867960Seric* If your system allows file giveaways, DO NOT create a publically 96967960Seric writable directory for forward files. This will allow anyone 97067960Seric to steal anyone else's e-mail. Instead, create a script that 97167960Seric copies the .forward file from users' home directories once a 97267960Seric night (if you want the non-NFS-mounted forward directory). 97367960Seric 97467960Seric* If your system allows file giveaways, you'll find that 97567960Seric sendmail is much less trusting of :include: files -- in 97667960Seric particular, you'll have to have /SENDMAIL/ANY/SHELL/ in 97767960Seric /etc/shells before they will be trusted (that is, before 97867960Seric files and programs listed in them will be honored). 97967960Seric 98067960SericIn general, file giveaways are a mistake -- if you can turn them 98167960Sericoff I recommend you do so. 98267960Seric 98367960Seric 98458363Seric+------------------+ 98558363Seric| FlexFAX SOFTWARE | 98658363Seric+------------------+ 98758363Seric 98858363SericSam Leffler's FlexFAX software is still in beta test -- but he expects a 98958363Sericpublic version out "later this week" [as of 3/1/93]. The following 99058363Sericblurb is direct from Sam: 99158363Seric 99264498Seric $Header: /usr/people/sam/fax/RCS/HOWTO,v 1.14 93/05/24 11:42:16 sam Exp $ 99358363Seric 99458363Seric How To Obtain This Software (in case all you get is this file) 99564498Seric -------------------------------------------------------------- 99658363Seric The source code is available for public ftp on 99764498Seric sgi.com sgi/fax/v2.1.src.tar.Z 99858363Seric (192.48.153.1) 99958363Seric 100058363Seric You can also obtain inst'able images for Silicon Graphics machines from 100164498Seric sgi.com sgi/fax/v2.1.inst.tar 100258363Seric (192.48.153.1) 100358363Seric 100458363Seric For example, 100558363Seric % ftp -n sgi.com 100658363Seric .... 100758363Seric ftp> user anonymous 100858363Seric ... <type in password> 100958363Seric ftp> cd sgi/fax 101058363Seric ftp> binary 101164498Seric ftp> get v2.1.src.tar.Z 101258363Seric 101364498Seric In general, the latest version of the 2.1 release of the software is 101464498Seric always available as "v2.1.src.tar.Z" or "v2.1.inst.tar" in the ftp 101564498Seric directory. This file is a link to the appropriate released version (so 101664498Seric don't waste your time retrieving the linked file as well!) Any files of 101764498Seric the form v2.1.*.patch are shell scripts that can be used to patch older 101864498Seric versions of the source code. For example, the file v2.1.0.patch would 101964498Seric contain patches to update v2.1.0.tar.Z. (Note to beta testers: this is 102064498Seric different than the naming conventions used during beta testing.) Patch 102164498Seric files only work to go between consecutive versions, so if you are 102264498Seric multiple versions behind the latest release, you will need to apply 102364498Seric each patch file between your current version and the latest. 102464498Seric 102564498Seric 102664498Seric Obtaining the Software by Electronic Mail 102764498Seric ----------------------------------------- 102864498Seric Do not send me requests for the software; they will be ignored (without 102964498Seric response). If you cannot use FTP at all, there is a service called 103064498Seric "ftpmail" available from gatekeeper.dec.com: you can send e-mail to 103164498Seric this machine and it will use FTP to retrieve files for you and send you 103264498Seric the files back again via e-mail. To find out more about the ftpmail 103358363Seric service, send a message to "ftpmail@gatekeeper.dec.com" whose body 103458363Seric consists of the single line "help". 103558363Seric 103664498Seric 103764498Seric Obtaining the Software Within Silicon Graphics 103864498Seric ---------------------------------------------- 103958363Seric Internal to Silicon Graphics there are inst'able images on the host 104064498Seric flake.asd in the directory /usr/dist. Thus you can do something like: 104158363Seric 104264498Seric % inst -f flake.asd.sgi.com:/usr/dist/flexfax 104358363Seric 104464498Seric to install the latest version of the software on your machine. 104558363Seric 104664498Seric 104764498Seric What to do Once You've Retrieved Stuff 104864498Seric -------------------------------------- 104958363Seric The external distributions come in a compressed or uncompressed tar 105058363Seric file. To extract the source distribution: 105158363Seric 105264498Seric % zcat v2.1.src.tar.Z | tar xf - 105358363Seric 105458363Seric (uncompress and extract individual files in current directory). To 105558363Seric unpack and install the client portion of the inst'able distribution: 105658363Seric 105758363Seric % mkdir dist 105864498Seric % cd dist; tar xf ../v2.1.inst.tar; cd .. 105958363Seric % inst -f dist/flexfax 106058363Seric ... 106158363Seric inst> go 106258363Seric 106358363Seric (Note, the dist subdirectory is because some versions of inst fail if 106464498Seric the files are in the current directory.) Server binaries are also 106564498Seric included in the inst'able images as flexfax.server.*. They are not 106664498Seric installed by default, so to get them also you need to do: 106758363Seric 106858363Seric % inst -f flexfax 106958363Seric ... 107058363Seric inst> install flexfax.server.* 107158363Seric inst> go 107258363Seric 107364498Seric The SGI binaries were built for Version 4.0.5H of the IRIX operating 107458363Seric system. They should work w/o problem on earlier versions of the 107558363Seric system, but I have not fully tested this. Also, note that to install a 107658363Seric server on an SGI machine, you need to have installed the Display 107758363Seric PostScript execution environment product (dps_eoe). Otherwise, the fax 107858363Seric server will not be able to convert PostScript to facsimile for 107958363Seric transmission. 108058363Seric 108164498Seric If you are working from the source distribution, look at the file 108264498Seric README in the top of the source tree. If you are working from the inst 108364498Seric images, the subsystem flexfax.man.readme contains the README file and 108464498Seric other useful pieces of information--the installed files are placed in 108564498Seric the directory /usr/local/doc/flexfax). Basically you will need to run 108664498Seric the faxaddmodem script to setup and configure your fax modem. Consult 108764498Seric the README file and the manual page for faxaddmodem for information. 108858363Seric 108958363Seric 109064498Seric FlexFAX Mail List 109164498Seric ----------------- 109258363Seric A mailing list for users of this software is located on sgi.com. 109358363Seric If you want to join this mailing list or have a list-related request 109458363Seric such as getting your name removed from it, send a request to 109558363Seric 109664498Seric majordomo@whizzer.wpd.sgi.com 109758363Seric 109864498Seric For example, to subscribe, send the line "subscribe flexfax" in 109964498Seric the body of your message. The line "help" will return a list of 110064498Seric the commands understood by the mailing list management software. 110164498Seric 110258363Seric Submissions (including bug reports) should be directed to: 110358363Seric 110458363Seric flexfax@sgi.com 110558363Seric 110664498Seric When corresponding about this software please always specify what 110764498Seric version you have, what system you're running on, and, if the problem is 110864498Seric specific to your modem, identify the modem and firmware revision. 110958363Seric 111064498Seric 111157945Seric+--------------------------------+ 111257945Seric| TWEAKING CONFIGURATION OPTIONS | 111357945Seric+--------------------------------+ 111457945Seric 111557945SericThere are a large number of configuration options that don't normally 111657945Sericneed to be changed. However, if you feel you need to tweak them, you 111757945Sericcan define the following M4 variables. This list is shown in four 111857945Sericcolumns: the name you define, the default value for that definition, 111957945Sericthe option or macro that is affected (either Ox for an option or Dx 112057945Sericfor a macro), and a brief description. Greater detail of the semantics 112157945Sericcan be found in the Installation and Operations Guide. 112257945Seric 112363582SericSome options are likely to be deprecated in future versions -- that is, 112463582Sericthe option is only included to provide back-compatibility. These are 112563582Sericmarked with "*". 112663582Seric 112765002SericRemember that these options are M4 variables, and hence may need to 112865002Sericbe quoted. In particular, arguments with commas will usually have to 112965002Sericbe ``double quoted, like this phrase'' to avoid having the comma 113065002Sericconfuse things. This is common for alias file definitions and for 113165002Sericthe read timeout. 113265002Seric 113357945SericM4 Variable Name Default Mac/Opt Description 113465002Seric================ ======= ======= =========== 113557945SericconfMAILER_NAME MAILER-DAEMON Dn The sender name used for 113657945Seric internally generated 113757945Seric outgoing messages. 113858681SericconfFROM_LINE From $g $d Dl The From_ line used when 113958681Seric sending to files or programs. 114057945SericconfFROM_HEADER $?x$x <$g>$|$g$. The format of an internally 114157945Seric Dq generated From: address. 114267929SericconfOPERATORS .:%@!^/[]+ Do Address operator characters. 114364153SericconfSMTP_LOGIN_MSG $j Sendmail $v/$Z ready at $b 114457945Seric De The initial (spontaneous) 114557945Seric SMTP greeting message. 114667820SericconfRECEIVED_HEADER $?sfrom $s $.$?_($?s$|from $.$_) $.by $j ($v/$Z)$?r with $r$. id $i$?u for $u$.; $b 114767820Seric HReceived 114867820Seric The format of the Received: 114967820Seric header in messages passed 115067820Seric through this host. It is 115167820Seric unwise to try to change this. 115259743SericconfSEVEN_BIT_INPUT False O7 Force input to seven bits? 115367551SericconfEIGHT_BIT_HANDLING pass8 O8 8-bit data handling 115457945SericconfALIAS_WAIT 10 Oa Wait (in minutes) for alias 115557945Seric file rebuild. 115658087SericconfMIN_FREE_BLOCKS 4 Ob Minimum number of free blocks 115758087Seric on queue filesystem to accept 115858087Seric SMTP mail. 115957945SericconfBLANK_SUB . OB Blank (space) substitution 116057945Seric character. 116165619SericconfCON_EXPENSIVE False Oc Avoid connecting immediately 116265619Seric to mailers marked expensive? 116357945SericconfCHECKPOINT_INTERVAL 10 OC Checkpoint queue files 116457945Seric every N recipients. 116557945SericconfDELIVERY_MODE background Od Default delivery mode. 116657945SericconfAUTO_REBUILD False OD Automatically rebuild 116757945Seric alias file if needed. 116857945SericconfERROR_MODE (undefined) Oe Error message mode. 116957945SericconfERROR_MESSAGE (undefined) OE Error message header/file. 117057945SericconfSAVE_FROM_LINES False Of Save extra leading 117157945Seric From_ lines. 117257945SericconfTEMP_FILE_MODE 0600 OF Temporary file mode. 117357945SericconfDEF_GROUP_ID 1 Og Default group id. 117457945SericconfMATCH_GECOS False OG Match GECOS field. 117557945SericconfMAX_HOP 17 Oh Maximum hop count. 117663582SericconfIGNORE_DOTS False Oi * Ignore dot as terminator 117757945Seric for incoming messages? 117857945SericconfBIND_OPTS (empty) OI Default options for BIND. 117963582SericconfMIME_FORMAT_ERRORS True Oj * Send error messages as MIME- 118059743Seric encapsulated messages per 118159743Seric RFC 1344. 118264153SericconfFORWARD_PATH (undefined) OJ The colon-separated list of 118364153Seric places to search for .forward 118467960Seric files. N.B.: see the Security 118567960Seric Notes section. 118657945SericconfMCI_CACHE_SIZE 2 Ok Size of open connection cache. 118757945SericconfMCI_CACHE_TIMEOUT 5m OK Open connection cache timeout. 118863582SericconfUSE_ERRORS_TO False Ol * Use the Errors-To: header to 118963582Seric deliver error messages. This 119063582Seric should not be necessary because 119163582Seric of general acceptance of the 119263582Seric envelope/header distinction. 119357945SericconfLOG_LEVEL 9 OL Log level. 119457945SericconfME_TOO False Om Include sender in group 119557945Seric expansions. 119657945SericconfCHECK_ALIASES True On Check RHS of aliases when 119757945Seric running newaliases. 119863582SericconfOLD_STYLE_HEADERS True Oo * Assume that headers without 119957945Seric special chars are old style. 120058859SericconfDAEMON_OPTIONS (undefined) OO SMTP daemon options. 120158806SericconfPRIVACY_FLAGS authwarnings Op Privacy flags. 120257945SericconfCOPY_ERRORS_TO (undefined) OP Address for additional copies 120357945Seric of all error messages. 120457945SericconfQUEUE_FACTOR (undefined) Oq Slope of queue-only function 120558116SericconfREAD_TIMEOUT (undefined) Or SMTP read timeouts. 120667811SericconfDONT_PRUNE_ROUTES False OR Don't prune down route-addr 120767811Seric syntax addresses to the 120867811Seric minimum possible. 120963582SericconfSAFE_QUEUE True Os * Commit all messages to disk 121057945Seric before forking. 121158806SericconfMESSAGE_TIMEOUT 5d/4h OT Timeout for messages before 121258806Seric sending error/warning message. 121359317SericconfTIME_ZONE USE_SYSTEM Ot Time zone info -- can be 121457945Seric USE_SYSTEM to use the system's 121557945Seric idea, USE_TZ to use the user's 121657945Seric TZ envariable, or something 121757945Seric else to force that value. 121857945SericconfDEF_USER_ID 1 Ou Default user id. 121958718SericconfUSERDB_SPEC (undefined) OU User database specification. 122058859SericconfFALLBACK_MX (undefined) OV Fallback MX host. 122163857SericconfTRY_NULL_MX_LIST False Ow If we are the best MX for a 122263857Seric host and haven't made other 122363857Seric arrangements, try connecting 122463857Seric to the host directly; normally 122563857Seric this would be a config error. 122657945SericconfQUEUE_LA 8 Ox Load average at which queue-only 122757945Seric function kicks in. 122857945SericconfREFUSE_LA 12 OX Load average at which incoming 122957945Seric SMTP connections are refused. 123063582SericconfWORK_RECIPIENT_FACTOR 123163582Seric (undefined) Oy Cost of each recipient. 123263582SericconfSEPARATE_PROC False OY Run all deliveries in a 123357945Seric separate process. 123457945SericconfWORK_CLASS_FACTOR (undefined) Oz Priority multiplier for class. 123557945SericconfWORK_TIME_FACTOR (undefined) OZ Cost of each delivery attempt. 123668184SericconfQUEUE_SORT_ORDER Priority O QueueSortOrder 123768184Seric Queue sort algorithm: 123868184Seric Priority or Host. 123958408SericconfCW_FILE /etc/sendmail.cw Name of file used to get the 124058408Seric Fw local additions to the $=w 124158408Seric class. 124264153SericconfSMTP_MAILER smtp - The mailer name used when 124363972Seric SMTP connectivity is required. 124467915Seric One of "smtp", "smtp8", or 124567915Seric "esmtp". 124663999SericconfLOCAL_MAILER local - The mailer name used when 124763999Seric local connectivity is required. 124863999Seric Almost always "local". 124964028SericconfRELAY_MAILER relay - The default mailer name used 125064028Seric for relaying any mail (e.g., 125164028Seric to a BITNET_RELAY, a 125264028Seric SMART_HOST, or whatever). 125364028Seric This can reasonably be "suucp" 125464028Seric if you are on a UUCP-connected 125564028Seric site. 125664259SericconfDOMAIN_NAME (undefined) Dj If defined, sets $j. 125757945Seric 125858087Seric 125957246Seric+-----------+ 126057246Seric| HIERARCHY | 126157246Seric+-----------+ 126257246Seric 126351220SericWithin this directory are several subdirectories, to wit: 126451220Seric 126551220Sericm4 General support routines. These are typically 126651220Seric very important and should not be changed without 126757247Seric very careful consideration. 126851220Seric 126951220Sericcf The configuration files themselves. They have 127051220Seric ".mc" suffixes, and must be run through m4 to 127151220Seric become complete. The resulting output should 127251220Seric have a ".cf" suffix. 127351220Seric 127451220Sericostype Definitions describing a particular operating 127551220Seric system type. These should always be referenced 127651220Seric using the OSTYPE macro in the .mc file. Examples 127751220Seric include "bsd4.3", "bsd4.4", "sunos3.5", and 127851220Seric "sunos4.1". 127951220Seric 128051220Sericdomain Definitions describing a particular domain, referenced 128151220Seric using the DOMAIN macro in the .mc file. These are 128251220Seric site dependent; for example, we contribute "cs.exposed.m4" 128351220Seric and "cs.hidden.m4" which both describe hosts in the 128451220Seric CS.Berkeley.EDU subdomain; the former displays the local 128551220Seric hostname (e.g., mammoth.CS.Berkeley.EDU), whereas the 128651220Seric latter does its best to hide the identity of the local 128751220Seric workstation inside the CS subdomain. 128851220Seric 128951220Sericmailer Descriptions of mailers. These are referenced using 129051220Seric the MAILER macro in the .mc file. 129151220Seric 129251220Sericsh Shell files used when building the .cf file from the 129351220Seric .mc file in the cf subdirectory. 129451220Seric 129551220Sericfeature These hold special orthogonal features that you might 129651220Seric want to include. They should be referenced using 129751220Seric the FEATURE macro. 129851220Seric 129951220Serichack Local hacks. These can be referenced using the HACK 130051220Seric macro. They shouldn't be of more than voyeuristic 130151220Seric interest outside the .Berkeley.EDU domain, but who knows? 130265957Seric We've all got our own peccadillos. 130351220Seric 130451268Sericsiteconfig Site configuration -- e.g., tables of locally connected 130551268Seric UUCP sites. 130651220Seric 130751268Seric 130857246Seric+------------------------+ 130957246Seric| ADMINISTRATIVE DETAILS | 131057246Seric+------------------------+ 131151220Seric 131251220SericThe following sections detail usage of certain internal parts of the 131351220Sericsendmail.cf file. Read them carefully if you are trying to modify 131451220Sericthe current model. If you find the above descriptions adequate, these 131551220Sericshould be {boring, confusing, tedious, ridiculous} (pick one or more). 131651220Seric 131751220SericRULESETS (* means built in to sendmail) 131851220Seric 131951220Seric 0 * Parsing 132051220Seric 1 * Sender rewriting 132151220Seric 2 * Recipient rewriting 132251220Seric 3 * Canonicalization 132351220Seric 4 * Post cleanup 132454839Seric 5 * Local address rewrite (after aliasing) 132560539Seric 1x mailer rules (sender qualification) 132660539Seric 2x mailer rules (recipient qualification) 132764801Seric 3x mailer rules (sender header qualification) 132864801Seric 4x mailer rules (recipient header qualification) 132964801Seric 5x mailer subroutines (general) 133064801Seric 6x mailer subroutines (general) 133164801Seric 7x mailer subroutines (general) 133264801Seric 8x reserved 133360539Seric 90 Mailertable host stripping 133460892Seric 96 Bottom half of Ruleset 3 (ruleset 6 in old sendmail) 133560892Seric 97 Hook for recursive ruleset 0 call (ruleset 7 in old sendmail) 133663857Seric 98 Local part of ruleset 0 (ruleset 8 in old sendmail) 133751220Seric 133851220Seric 133951220SericMAILERS 134051220Seric 134151220Seric 0 local, prog local and program mailers 134265218Seric 1 [e]smtp, relay SMTP channel 134365218Seric 2 uucp-* UNIX-to-UNIX Copy Program 134458087Seric 3 netnews Network News delivery 134558363Seric 4 fax Sam Leffler's FlexFAX software 134651220Seric 134751220Seric 134851220SericMACROS 134951220Seric 135051220Seric A 135151220Seric B Bitnet Relay 135265182Seric C 135354839Seric D The local domain -- usually not needed 135451220Seric E 135558363Seric F FAX Relay 135651220Seric G 135757591Seric H mail Hub (for mail clusters) 135851220Seric I 135951220Seric J 136051220Seric K 136167915Seric L Luser Relay 136251220Seric M Masquerade (who I claim to be) 136351220Seric N 136451220Seric O 136551220Seric P 136651220Seric Q 136751220Seric R Relay (for unqualified names) 136858071Seric S Smart Host 136951220Seric T 137051309Seric U my UUCP name (if I have a UUCP connection) 137151309Seric V UUCP Relay (class V hosts) 137251220Seric W UUCP Relay (class W hosts) 137351220Seric X UUCP Relay (class X hosts) 137451309Seric Y UUCP Relay (all other hosts) 137551220Seric Z Version number 137651220Seric 137751220Seric 137851220SericCLASSES 137951220Seric 138051220Seric A 138151220Seric B 138251220Seric C 138367539Seric D "dotted" users 138457246Seric E addresses that should not seem to come from $M 138554839Seric F hosts we forward for 138651220Seric G 138751220Seric H 138851220Seric I 138951220Seric J 139051220Seric K 139151220Seric L addresses that should not be forwarded to $R 139251220Seric M 139351220Seric N 139451220Seric O operators that indicate network operations (cannot be in local names) 139560211Seric P top level pseudo-domains: BITNET, FAX, UUCP, etc. 139651220Seric Q 139751220Seric R 139851220Seric S 139951220Seric T 140051220Seric U locally connected UUCP hosts 140151309Seric V UUCP hosts connected to relay $V 140251309Seric W UUCP hosts connected to relay $W 140351309Seric X UUCP hosts connected to relay $X 140451309Seric Y locally connected smart UUCP hosts 140564153Seric Z locally connected domain-ized UUCP hosts 140654839Seric . the class containing only a dot 140751220Seric 140851220Seric 140951220SericM4 DIVERSIONS 141051220Seric 141158071Seric 1 Local host detection and resolution 141258071Seric 2 Local Ruleset 3 additions 141358071Seric 3 Local Ruleset 0 additions 141451268Seric 4 UUCP Ruleset 0 additions 141551309Seric 5 locally interpreted names (overrides $R) 141654839Seric 6 local configuration (at top of file) 141751220Seric 7 mailer definitions 141866099Seric 8 141958681Seric 9 special local rulesets (1 and 2) 1420