Lines Matching +full:msa +full:- +full:fixed +full:- +full:perm
1 .\" Copyright (c) 1998-2013 Proofpoint, Inc. and its suppliers.
12 .\" $Id: op.me,v 8.759 2014-01-13 14:40:05 ca Exp $
14 .\" eqn op.me | pic | troff -me
51 .eh 'SMM:08-%''Sendmail Installation and Operation Guide'
52 .oh 'Sendmail Installation and Operation Guide''SMM:08-%'
74 .b SENDMAIL\u\s-6TM\s0\d
103 .i Sendmail \u\s-2TM\s0\d
107 It is not tied to any one transport protocol \*-
173 explains the day-to-day information you should know
185 contains the nitty-gritty information about the configuration
204 Second, you must build a run-time configuration file.
214 using an M4-based configuration language.
231 on 4.4BSD-based systems.
255 obj.BSD-OS.2.1.i386.
267 .i -c .
270 .ip "\-L \fIlibdirs\fP"
272 .ip "\-I \fIincdirs\fP"
274 .ip "\-E \fIenvar\fP=\fIvalue\fP"
278 .ip "\-c"
282 .ip "\-f \fIsiteconfig\fP"
298 .ip "\-S"
299 Skip auto-configuration.
301 will avoid auto-detecting libraries if this is set.
339 real in-memory caching,
412 will no longer be installed set-user-ID root by default.
415 \&./Build install-set-user-id
433 The distribution includes an m4-based configuration package
451 Both site-dependent and site-independent descriptions of hosts.
458 .q "generic-solaris2.mc"
459 as a general description of an SMTP-connected host
470 Site-dependent subdomain descriptions.
492 to read an /etc/mail/local-host-names file on startup
502 Site-independent
520 For example, to include support for the UUCP-based mailers,
548 and features you want enabled site-wide:
554 and should be fully-qualified internet-style domain names.
600 It should be set-group-ID smmsp as described in
625 add -D_PATH_SENDMAILCF=\e"/file/name\e"
630 This is one of the two non-library file names compiled into
660 .b \-A
663 .b \-bm
665 .b \-bs ,
667 .b \-t
682 rm \-f /usr/\*(SB/newaliases
683 ln \-s /usr/\*(SD/sendmail /usr/\*(SB/newaliases
697 .b \-v
752 (-DSM_CONF_SHM)
846 on a BSD-base system,
847 or on a System-V-based system
851 if [ \-f /usr/\*(SD/sendmail \-a \-f /etc/mail/sendmail.cf ]; then
852 (cd /var/spool/mqueue; rm \-f xf*)
853 /usr/\*(SD/sendmail \-bd \-q30m &
854 echo \-n ' sendmail' >/dev/console
867 .q \-bd
870 .q \-q30m
885 if [ \-r $qffile ]
887 if [ ! \-s $qffile ]
889 echo \-n " <zero: $qffile>" > /dev/console
890 rm \-f $qffile
898 if [ \-r $tffile \-a ! \-f $qffile ]
900 echo \-n " <recovering: $tffile>" > /dev/console
903 if [ \-f $tffile ]
905 echo \-n " <extra: $tffile>" > /dev/console
906 rm \-f $tffile
916 if [ \-r $dffile \-a ! \-f $qffile \-a ! \-f $hffile \-a ! \-f $Qffile ]
918 echo \-n " <incomplete: $dffile>" > /dev/console
923 for xffile in [A-Z]f*
925 if [ \-f $xffile ]
927 echo \-n " <panic: $xffile>" > /dev/console
977 .b \-bp
1012 kill `head -1 $PIDFILE`
1013 `tail -1 $PIDFILE`
1022 pid=`head -1 $PIDFILE`
1023 cmd=`tail -1 $PIDFILE`
1116 A comma-separated list of the recipients to this mailer.
1156 Levels from 11\-64 are reserved for verbose information
1189 If the DeliveryMode option is set to queue-only or defer,
1311 .b \-bp
1323 .b \-bP
1376 This situation can be fixed by moving the queue to a temporary place
1392 /usr/\*(SD/sendmail \-C /etc/mail/queue.cf \-q
1395 .b \-C
1403 .b \-q
1407 /usr/\*(SD/sendmail \-oQ/var/spool/omqueue \-q
1420 .b \-v
1440 .b \-qQ
1447 .b \-Q
1451 sendmail -Qreason -q[!][I|R|S][matchstring]
1454 .b "-q[!][I|R|S][matchstring]"
1456 .b \-Q
1460 sendmail -qQ -Q[reason] -q[!][I|R|S|Q][matchstring]
1464 .b "-q[!][I|R|S|Q][matchstring]"
1466 .b \-Q
1471 .b \-qQ
1490 For top-level domains like
1499 has the added effect of single-threading mail delivery to a destination.
1556 .b \-bH
1561 .b \-bh
1574 \**HP-UX 10 has service switch support,
1581 (e.g., SunOS 4.X, HP-UX, BSD)
1734 .sm NIS -based
1747 .sm NIS -based
1750 .b \-l
1762 O AliasFile=nis:\-N mail.aliases@my.nis.domain
1767 O AliasFile=nis:\-f mail.aliases@my.nis.domain
1784 .b \-bi
1787 /usr/\*(SD/sendmail \-bi
1792 .b \-bi
1843 .q owner-\fIx\fP
1852 unix-wizards: eric@ucbarpa, wnj@monet, nosuchuser,
1854 owner-unix-wizards: unix-wizards-request
1855 unix-wizards-request: eric@ucbarpa
1861 unix-wizards
1871 .q owner-
1873 .q -request
1876 .i list -request''
1894 .sh 2 "Per-User Forwarding (.forward Files)"
1931 These built-ins are described here.
1932 .sh 3 "Errors-To:"
1939 The Errors-To: header was created in the bad old days
1948 The Errors-To: header is officially deprecated
1950 .sh 3 "Apparently-To:"
1962 .q "Apparently-To:"
1965 The Apparently-To: header is non-standard
2011 Protocol information to make access control decisions - either as the
2043 .b \-q
2059 (although that probably doesn't make sense if you use ``queue-only'' mode).
2075 .b \-bd
2078 .b \-bd
2080 .b \-q
2083 /usr/\*(SD/sendmail \-bd \-q30m
2089 .b \-bs \ \-Am
2096 has to be re-read on every message that comes in.
2101 /usr/\*(SD/sendmail \-q30m
2108 .b \-q
2111 .b \-v
2115 /usr/\*(SD/sendmail \-q \-v
2122 .q \-qRberkeley
2127 .q \-qSstring
2129 .q \-qIstring
2131 .q \-qQstring
2134 .q \-qGstring
2150 .q \-q!Rseattle
2175 .b \-D
2185 using the syntax 17-42.
2196 .b \-d
2201 debug-flag: \fB\-d\fP debug-list
2202 debug-list: debug-option [ , debug-option ]*
2203 debug-option: debug-categories [ . debug-level ]
2204 debug-categories: integer | integer \- integer | category-pattern
2205 category-pattern: [a-zA-Z_*?][a-zA-Z0-9_*?]*
2206 debug-level: integer
2211 \-d12 Set category 12 to level 1
2212 \-d12.3 Set category 12 to level 3
2213 \-d3\-17 Set categories 3 through 17 to level 1
2214 \-d3\-17.4 Set categories 3 through 17 to level 4
2215 \-dANSI Set category ANSI to level 1
2216 \-dsm_trace_*.3 Set all named categories matching sm_trace_* to level 3
2231 .b \-o
2233 .b \-O
2237 /usr/\*(SD/sendmail \-oT2m
2245 /usr/\*(SD/sendmail -OTimeout.queuereturn=2m
2250 but relinquishes its set-user-ID or set-group-ID permissions thereafter\**.
2261 .b \-C
2264 /usr/\*(SD/sendmail \-Ctest.cf \-oQ/tmp/mqueue
2271 .b \-C
2278 gives up set-user-ID root permissions
2279 (if it has been installed set-user-ID root)
2290 .b \-X
2294 /usr/\*(SD/sendmail \-X /tmp/traffic \-bd
2322 sendmail \-bt \-Ctest.cf
2350 followed similarly by rulesets twenty-one and four.
2354 .q \-d21
2358 sendmail \-bt \-d21.99
2397 .ip \-d\|debug-spec
2398 is equivalent to the command-line flag.
2442 sendmail \-bh
2446 sendmail \-bH
2484 options have long (multi-character names).
2515 .b \-q
2516 flag specifies how often a sub-daemon will run the queue.
2560 a long list of host that could accept an e-mail for the recipient.
2610 such as NOOP (no-operation) and VERB (go into verbose mode).
2735 (indicating a positive non-zero precedence),
2738 .q non-urgent
2766 should be ``at least 4\-5 days''.
2854 pri = msgsize - (class times bold ClassFactor) + (nrcpt times bold RecipientFactor)
2898 pri > { bold QueueFactor } over { LA - { bold QueueLA } + 1 }
2956 has some built-in measures against simple denial of service (DoS) attacks.
3023 .b -D
3114 if you want to make it possible to have group-writable support files
3122 set-user-ID to root.
3126 without set-user-ID to root but set-group-ID
3198 (i.e., usually set-user-ID root)
3255 for non-existent forward files.
3278 Accept a group-readable key file for STARTTLS.
3280 Accept a group-readable Cyrus SASL password file.
3282 Accept a group-readable DefaultAuthInfo file for SASL.
3284 Allow group-writable alias files.
3288 to consider group-writable directories to be safe.
3289 World-writable directories are always unsafe.
3295 Accept group-writable
3303 Accept group-writable
3307 Accept a group-writable Cyrus SASL password file.
3361 Run programs that are group- or world-writable without logging a warning.
3368 Accept world-writable alias files.
3436 If you are on a system that has built-in service switch support
3468 such as at a UUCP-only site,
3550 It also prefers A and CNAME records over MX records \*-
3560 \-DNAMED_BIND=0
3561 and remove \-lresolv from the list of libraries to be searched
3563 .sh 2 "Moving the Per-User Forward Files"
3719 .sh 2 "R and S \*- Rewriting Rules"
3798 \fB$\-\fP Match exactly one token
3813 $\-:$+
3860 .b $\- ,
3951 3-tuple (triple) necessary to direct the mailer.
3977 may be multi-part.
3980 is the built-in IPC mailer,
3990 is later rewritten by the mailer-specific envelope rewriting set
4065 +---+
4066 -->| 0 |-->resolved address
4067 / +---+
4068 / +---+ +---+
4069 / ---->| 1 |-->| S |--
4070 +---+ / +---+ / +---+ +---+ \e +---+
4071 addr-->| 3 |-->| D |-- --->| 4 |-->msg
4072 +---+ +---+ \e +---+ +---+ / +---+
4073 --->| 2 |-->| R |--
4074 +---+ +---+
4112 Figure 1 \*- Rewriting set semantics
4114 D \*- sender domain addition
4115 S \*- mailer-specific sender rewriting
4116 R \*- mailer-specific recipient rewriting
4126 local-part@host-domain-spec
4137 host-domain-spec
4176 It should not be used to quarantine e-mails.
4231 .b \-bs
4282 entire-SMTP-command $| SMTP-reply-first-digit
4306 The ruleset cannot override a rejection triggered by the built-in rules.
4313 sender-address $| recipient-address
4335 number-of-headers $| size-of-headers
4354 HMessage-Id: $>CheckMessageId
4367 # Has a Message-Id: header
4369 # Allow missing Message-Id: from local mail
4376 Keep in mind the Message-Id: header is not a required header and
4425 Options `D'/`M' cause the client to not use DANE/MTA-STS,
4428 DANE/MTA-STS setups by simply not using it.
4479 (treated as non-deliverable with a permanent or temporary error).
4489 (treated as non-deliverable with a permanent or temporary error).
4538 which is also a defense against SMTP smuggling (CVE-2023-51765).
4705 The keys are case-insensitive.
4846 .sh 2 "D \*- Define Macro"
4853 but user-defined macros
4860 so user-defined long macro names should begin with an upper case letter.
4904 is set and non-null,
4938 .b \-h
4999 .q MAILER-DAEMON .
5023 which adds support for UUCP, the %-hack, and X.400 addresses.
5029 .b \-p
5034 .b \-p
5039 (4 digit year 1900-9999, 2 digit month 01-12, 2 digit day 01-31,
5040 2 digit hours 00-23, 2 digit minutes 00-59).
5100 openssl dgst -h
5116 The cipher suite used for the connection, e.g., EDH-DSS-DES-CBC3-SHA,
5117 EDH-RSA-DES-CBC-SHA, DES-CBC-MD5, DES-CBC3-SHA
5320 The value of the Message-Id: header.
5340 .b \-b
5347 .b \-q
5350 .b \-q30m
5412 the e-mail will be queued.
5487 \**Older versions of sendmail didn't pre-define
5530 .q Full-Name:
5563 .q Message-Id:
5584 .b \-h
5596 .b \-p
5598 .b \-M
5600 .b \-oM
5625 .sh 2 "C and F \*- Define Classes"
5695 To specify an optional file, use ``\-o'' between the class
5698 Fc \-o /path/to/file
5707 F{VirtHosts}@ldap:\-k (&(objectClass=virtHosts)(host=*)) \-v host
5716 There is also a built-in schema that can be accessed by only specifying:
5723 \-k (&(objectClass=sendmailMTAClass)
5728 \-v sendmailMTAClassValue
5740 multi-word entries in the class are ignored in this context.
5746 .\"A set of Content-Types that will not have the newline character
5753 .\".q application/octet-stream ).
5755 .\".q application/octet-stream ,
5761 contains the Content-Transfer-Encodings that can be 8\(->7 bit encoded.
5790 A set of Content-Types that will never be encoded as base64
5791 (if they have to be encoded, they will be encoded as quoted-printable).
5804 types cannot be 8\(->7 bit encoded.
5837 .sh 2 "E \*- Set or Propagate Environment Variables"
5855 .sh 2 "M \*- Define Mailer"
5883 Eol The end-of-line string for this mailer
5890 Charset The default character set for 8-bit characters
5897 (it's case-sensitive).
5969 Do not include angle brackets around route-address syntax addresses.
5990 .b \-f
6015 error messages will be sent as from the MAILER-DAEMON
6031 \*-
6046 is misconfigured or if a long-haul network interface is set in loopback mode.
6081 .q Message-Id:
6084 Do not insert a UNIX-style
6105 Use the route-addr style reverse-path in the SMTP
6110 many hosts do not process reverse-paths properly.
6111 Reverse-paths are officially discouraged by RFC 1123.
6114 .q Return-Path:
6125 .b \-r
6162 This mailer wants UUCP-style
6184 .q Full-Name:
6215 when converting to Quoted-Printable
6237 that didn't have 8\(->7 bit MIME conversions performed.
6241 the usual attempt to do 8\(->7 bit MIME conversions will be bypassed.
6246 7\(->8 bit MIME conversions.
6270 using one of the -qI/-qR/-qS queue run modifiers
6332 Mprog, P=/bin/sh, F=lsoDq9, T=DNS/RFC822/X-Unix, A=sh \-c $u
6333 M*file*, P=[FILE], F=lsDFMPEouq9, T=DNS/RFC822/X-Unix, A=FILE $u
6361 Setting any value to zero disables corresponding mailer-specific rewriting.
6364 is actually a colon-separated path of directories to try.
6407 Content-Type: header.
6412 .q unknown-8bit
6430 the MTA-type (that is, the description of how hosts are named),
6431 the address type (the description of e-mail addresses),
6435 .q X\- .
6462 .sh 2 "H \*- Define Header"
6501 is macro-expanded before insertion into the message.
6556 The ruleset receives the header field-body as argument,
6557 i.e., not the header field-name; see also
6571 HMessage-Id: $>CheckMessageId
6575 R$* $#error $: Illegal Message-Id header
6577 would refuse any message that had a Message-Id: header of any of the
6580 Message-Id: <>
6581 Message-Id: some text
6582 Message-Id: <legal text@domain> extra crud
6599 .sh 2 "O \*- Set Option"
6678 \-k (&(objectClass=sendmailMTAAliasObject)
6683 \-v sendmailMTAAliasValue
6689 (search through a compiled-in list of alias file types,
6708 (internal symbol table \*- not normally used
6773 a protection from active (non-dictionary) attacks
6903 A don't use AUTH when sending e-mail
6904 S don't use STARTTLS when sending e-mail
6930 .i -SSL_OP_TLSEXT_PADDING
6935 .b -0x0010 .
6937 If set, colons are acceptable in e-mail addresses
6946 and proper route-addr nesting is understood
7018 Solaris and pre-4.4BSD kernel users should see the note in sendmail/README .
7031 ln -s $C `openssl crl -noout -hash < $C`.r0
7042 none do not use Diffie-Hellman.
7046 The default is ``i'' which selects a precomputed, fixed 2048 bit prime.
7047 If ``5'' is selected, then precomputed, fixed primes are used.
7059 openssl dhparam -out /etc/mail/dhparams.pem 2048
7075 Name User-definable name for the daemon (defaults to "Daemon#")
7139 That is, one way to specify a message submission agent (MSA) that
7142 O DaemonPortOptions=Name=MSA, Port=587, M=Ea
7151 It should only be used for a MSA that is accessed by authorized
7153 Users must authenticate to use a MSA which has this option turned on.
7166 through which the e-mail has been
7199 (the file must not be group/world-readable otherwise
7205 When a message that has 8-bit characters but is not in MIME format
7208 a character set must be included in the Content-Type: header.
7213 .q unknown-8bit
7219 before a memory-based
7221 becomes disk-based.
7224 Defines the location of the system-wide dead.letter file,
7227 sendmail will not attempt to save to a system-wide dead.letter file
7290 .b \-v
7298 Dial-on-demand network connections can see timeouts
7320 .b \-G
7325 caused by world- and group-writable files and directories,
7330 a group-writable
7407 .ip DoubleBounceAddress=\fIerror-address\fP
7424 Set handling of eight-bit data.
7425 There are two kinds of eight-bit data:
7429 .b \-B8BITMIME
7431 and undeclared 8-bit data, that is,
7434 undeclared 8-bit data can be automatically converted to 8BITMIME,
7435 undeclared 8-bit data can be passed as-is without conversion to MIME
7437 and declared 8-bit data can be converted to 7-bits
7438 for transmission to a non-8BITMIME mailer.
7443 .\" r Reject undeclared 8-bit data;
7444 .\" don't convert 8BITMIME\(->7BIT (``reject'')
7445 s Reject undeclared 8-bit data (``strict'')
7446 .\" do convert 8BITMIME\(->7BIT (``strict'')
7447 .\" c Convert undeclared 8-bit data to MIME;
7448 .\" don't convert 8BITMIME\(->7BIT (``convert'')
7449 m Convert undeclared 8-bit data to MIME (``mime'')
7450 .\" do convert 8BITMIME\(->7BIT (``mime'')
7451 .\" j Pass undeclared 8-bit data;
7452 .\" don't convert 8BITMIME\(->7BIT (``just send 8'')
7453 p Pass undeclared 8-bit data (``pass'')
7454 .\" do convert 8BITMIME\(->7BIT (``pass'')
7457 .\"The adaptive algorithm is to accept 8-bit data,
7459 .\"otherwise just passing it as undeclared 8-bit data;
7460 .\"8BITMIME\(->7BIT conversions are done.
7467 X-MIME-Autoconverted: from OLD to NEW by $j id $i
7475 .ip ErrorHeader=\fIfile-or-message\fP
7525 will be used in a last-ditch effort for a host.
7625 (see the "X \*- Mail Filter (Milter) Definitions" section)
7632 .q "-h host -p port -d bindDN" .
7649 .b \-M
7660 if the group is the same as that of a set-group-ID sendmail binary.
7696 If not set, there is no limit to the number of children --
7724 the header Content-Description.
7803 of non-erroneous situations such as a low bandwidth connection.
7870 .q \-q[!][I|R|S|Q][string]
7887 recipient headers (To:, Cc:, Bcc:, or Apparently-To: \(em
7894 .b Add-To
7897 .b Add-Apparently-To
7898 to add an Apparently-To: header
7899 (this is only for back-compatibility
7901 .b Add-To-Undisclosed
7903 .q "To: undisclosed-recipients:;"
7906 .b Add-Bcc
7928 sequences of non-operator characters are also tokens.
7947 is macro-expanded before it is opened, and unlinked when
7985 restrictqrun Restrict \-q command line flag
7986 restrictexpand Restrict \-bv and \-v command line flags
7990 authwarnings Put X-Authentication-Warning: headers in messages
7992 noactualrecipient Don't put X-Actual-Recipient lines in DSNs
8004 pseudo-flag sets all flags except
8020 pseudo-flag instructs
8023 .b \-bv
8032 .b \-v
8036 such as using a non-standard queue directory.
8160 .b \- \c
8181 .b \- )
8189 .b \- )
8203 for a directory if the meta-data in it has been changed.
8210 .q Return-Receipt-To:
8225 If set to a non-zero (non-root) value,
8317 UNIX-style
8348 .i -SSL_OP_TLSEXT_PADDING
8353 .b -0x0010 .
8397 -1
8416 -1
8445 option to avoid running out of per-process file descriptors.
8467 openssl engine -v
8501 will be super-safe when running things,
8571 \*- for example,
8576 and if set and non-null the TZ variable is set to this value.
8615 must add a UNIX-style From_ line
8641 .q Errors-To:
8680 To avoid this, do not install sendmail set-user-ID root,
8690 before a memory-based
8692 becomes disk-based.
8696 \-O or \-o flag,
8699 to relinquish its set-user-ID permissions.
8732 .sh 2 "P \*- Precedence Definitions"
8762 Pfirst-class=0
8763 Pspecial-delivery=100
8764 Plist=\-30
8765 Pbulk=\-60
8766 Pjunk=\-100
8778 .sh 2 "V \*- Configuration Version Level"
8812 .q \-a.
8813 flag \*- you can reset it to anything you prefer
8863 this allows fine-grained control over the special local processing.
8867 option (to allow colons in the local-part of addresses)
8919 Please send e-mail to sendmail@Sendmail.ORG
8927 .sh 2 "K \*- Key File Declaration"
8989 R$\- ! $+ $: $(uucp $1 $@ $2 $: $2 @ $1 . UUCP $)
9004 The built-in map with both name and class
9058 .b \-k
9060 .b \-v
9083 .b \-z
9087 .b \-1
9099 .b \-k
9101 .b \-v
9104 .b \-z
9132 .b \-v
9142 The current machine is always preferred \*-
9144 lowest-preference MX record, then it will be guaranteed to be returned.
9148 .b \-z
9155 This map requires the option -R to specify the DNS resource record
9161 .b \-z
9173 .b in-addr.arpa .
9182 sendmail -bt
9252 R$\- $: $(dequote $1 $)
9253 R$\- $+ $: $>3 $1 $2
9272 .b \-m
9274 .b \-s
9278 .b \-d
9287 -d set the delimiter string used for -s
9293 .b \-s
9301 .b \-d
9348 R$\- $: $(storage {MyMacro} $) $1
9353 +, -, *, /, %,
9364 The r operator returns a pseudo-random number whose value
9409 PERM a permanent failure occurred
9412 In case of errors (status TEMP, TIMEOUT or PERM) the result field may
9439 (see Section "X \*- Mail Filter (Milter) Definitions")
9457 .ip "\-o"
9458 Indicates that this map is optional \*- that is,
9464 .ip "\-N, \-O"
9466 .b \-N
9468 .b \-O
9477 .b \-N
9480 .b \-O
9485 .b \-N
9487 .b \-O
9492 .ip "\-a\fIx\fP"
9499 .ip "\-T\fIx\fP"
9509 .b \-t
9511 .ip "\-f"
9513 .ip "\-m"
9521 The \-a argument is still appended on a match,
9523 .ip "\-k\fIkeycol\fP"
9531 .b \-K
9534 .ip "\-v\fIvalcol\fP"
9544 .ip "\-z\fIdelim\fP"
9560 .ip "\-t"
9571 .b \-t
9582 .ip "\-D"
9587 .ip "\-S\fIspacesub\fP
9591 .ip "\-s\fIspacesub\fP
9595 .ip "\-q"
9597 .ip "\-L\fIlevel\fP
9600 .ip "\-A"
9603 .b \-A
9616 .b \-A
9620 .ip "\-d"
9622 .ip "\-r"
9626 .ip "\-B"
9630 .ip "\-d"
9635 .ip "\-c\fItimeout\fP"
9638 .b \-DLDAP_OPT_NETWORK_TIMEOUT
9640 .ip "\-R"
9642 .b \-DLDAP_REFERRALS
9644 .ip "\-n"
9646 .ip "\-V\fIsep\fP"
9650 .ip "\-r\fIderef\fP"
9652 .ip "\-s\fIscope\fP"
9654 .ip "\-h\fIhost\fP"
9656 Some LDAP libraries allow you to specify multiple, space-separated hosts for
9660 .ip "\-p\fIport\fP"
9662 .ip "\-H \fILDAPURI\fP"
9665 .b \-h
9667 .b \-p
9671 -h server.example.com -p 389 -b dc=example,dc=com
9675 -H ldap://server.example.com:389 -b dc=example,dc=com
9684 O LDAPDefaultSpec=-H ldaps://ldap.example.com -b dc=example,dc=com
9690 O LDAPDefaultSpec=-H ldapi://socketfile -b dc=example,dc=com
9692 .ip "\-b\fIbase\fP"
9694 .ip "\-l\fItimelimit\fP"
9696 .ip "\-Z\fIsizelimit\fP"
9698 .ip "\-d\fIdistinguished_name\fP"
9700 .ip "\-M\fImethod\fP"
9709 can be omitted and the value is case-insensitive.
9710 .ip "\-P\fIpasswordfile\fP"
9716 .ip "\-1"
9720 .ip "\-w\fIversion\fP"
9724 .b "\-w 3"
9728 .ip "\-K"
9729 Treat the LDAP search key as multi-argument and
9748 Kuucp dbm \-o \-N /etc/mail/uucpmap
9760 can be used to build database-oriented maps.
9763 .ip \-f
9765 .ip \-N
9767 .ip \-o
9769 .ip \-r
9771 normally, re-inserting an existing key is an error.
9772 .ip \-v
9786 .sh 2 "Q \*- Queue Group Declaration"
9876 .b -q
9918 .sh 2 "X \*- Mail Filter (Milter) Definitions"
9922 Mail Filter API (Milter) is designed to allow third-party programs access
9924 meta-information and content.
9952 (it's case-sensitive).
10010 Overall timeout between sending end-of-message to filter and waiting for
10046 The database is a sorted (BTree-based) structure.
10049 \fIuser-name\fP\fB:\fP\fIfield-name\fP
10052 Meta-information is always stored with a leading colon.
10075 and will normally be the name of an appropriate -request address.
10076 It is very similar to the owner-\c
10081 .ip office-address
10083 .ip office-phone
10085 .ip office-fax
10087 .ip home-address
10089 .ip home-phone
10091 .ip home-fax
10171 The key is always in the format described above \*-
10303 sendmail -d0.13 < /dev/null | grep FFR
10359 while the upper half are reserved for auto-numbering
10380 The maximum number of arguments in a MIME Content-Type: header;
10444 If you are using a non-UNIX mail format,
10446 of UNIX-style
10459 in per-operating-system clauses in conf.h.
10474 Use Berkeley-style
10524 The are several built-in ways of computing the load average.
10526 tries to auto-configure them based on imperfect guesses;
10530 .b \-DLA_TYPE= \c
10547 Use MACH-style load averages.
10575 .sh 3 "Built-in Header Semantics"
10633 .b \-t
10648 This header is a Content-Transfer-Encoding header.
10650 This header is a Content-Type header.
10663 "resent-sender", H_FROM,
10664 "resent-from", H_FROM,
10667 "full-name", H_ACHECK,
10668 "errors-to", H_FROM\^|\^H_ERRORSTO,
10671 "resent-to", H_RCPT,
10680 "content-transfer-encoding", H_CTE,
10681 "content-type", H_CTYPE,
10688 .q Resent-To: ,
10694 .q Full-Name:
10748 .q "Full-Name:"
10783 .sz -1
10793 if (s != NULL && e\->e_from.q_mailer != LocalMailer &&
10794 to->q_mailer == s->s_mailer)
10799 if (MsgSize > 50000 && bitnset(M_LOCALMAILER, to\->q_mailer))
10801 usrerr("Message too large for non-local delivery");
10802 e\->e_flags |= EF_NORETURN;
10814 .i e\(->e_flags
10882 return (pri > (QueueFactor / (CurrentLA \- QueueLA + 1)));
10995 .ip "\-v \fIATTRIBUTE\fP[:\fITYPE\fP[:\fIOBJECTCLASS\fP[|\fIOBJECTCLASS\fP|...]]]
11045 O LDAPDefaultSpec=-h ldap.example.com -b dc=example,dc=com
11048 -z,
11049 -k (&(objectClass=sendmailMTAAliasObject)(sendmailMTAKey=%0))
11050 -v sendmailMTAAliasValue,mail:NORMAL:inetOrgPerson,
11128 ln -s $C `openssl x509 -noout -hash < $C`.0
11196 openssl rand -out /etc/mail/randfile -rand \c
11217 are encoded to avoid problems with non-printable or special characters.
11244 then full DANE support for DANE-EE and DANE-TA
11250 sendmail -bt -d0.3 < /dev/null
11253 otherwise support for TLSA RR 3-1-x
11275 This requires a DNSSEC-validating recursive resolver
11285 All non-DNS maps are considered
11294 Experimental support for SMTPUTF8 (EAI, see RFC 6530-6533)
11304 This allows the use of UTF-8 for envelope addresses
11306 DNS lookups are done using the A-label format (Punycode)
11310 i.e., no conversions between UTF-8 and ASCII encodings are made.
11325 .sh 2 "MTA-STS"
11328 (MTA-STS, see RFC 8461)
11337 postfix-mta-sts-resolver
11338 (see https://github.com/Snawoot/postfix-mta-sts-resolver.git).
11341 postfix-mta-sts-resolver
11343 which might not fully implement MTA-STS.
11345 If both DANE and MTA-STS are enabled and available for the receiving domain,
11384 John Beck, Hewlett-Packard & Sun Microsystems
11432 .ip \-A\fIx\fP
11436 .b \-Am
11440 .b \-Ac .
11443 .b -bm
11445 .b -bs ,
11447 .b -t
11452 .ip \-b\fIx\fP
11475 .ip \-B\fItype\fP
11477 .ip \-C\fIfile\fP
11482 .ip "\-D \fIlogfile\fP"
11486 .ip \-d\fIlevel\fP
11488 .ip "\-f\ \fIaddr\fP"
11495 and may also appear in a Return-Path: header.
11496 .ip \-F\ \fIname\fP
11499 .ip \-G
11506 .ip "\-h\ \fIcnt\fP"
11522 .ip "\-L \fItag\fP"
11532 .ip \-n
11534 .ip "\-N \fInotifications\fP"
11539 or a comma-separated list of
11549 .ip "\-r\ \fIaddr\fP"
11551 .b \-f .
11552 .ip \-o\fIx\|value\fP
11558 .ip \-O\fIoption\fP\fB=\fP\fIvalue\fP
11565 .ip \-M\fIx\|value\fP
11570 .ip \-p\fIprotocol\fP
11579 .q \-pUUCP:uunet
11582 (Some existing programs use \-oM to set the r and s macros;
11583 this is equivalent to using \-p.)
11584 .ip \-q\fItime\fP
11596 .ip \-qp\fItime\fP
11597 Similar to \-q with a time argument,
11606 Typically the QCP will be the sendmail daemon (when started with \-bd or \-bD)
11607 or a special process (named Queue control) (when started without \-bd or \-bD).
11617 .ip \-q\fIGname\fP
11621 .ip \-q[!]\fIXstring\fP
11642 .i \-q\fIX\fP
11649 .ip "\-Q[reason]"
11653 .b \-q[!]\fIXstring\fP
11655 .ip "\-R ret"
11668 .ip \-t
11680 .ip \-U
11681 This option is required when sending mail using UTF-8;
11693 .ip "\-V envid"
11698 .ip "\-X \fIlogfile\fP"
11712 .b \-s
11715 .q "\-N" ,
11716 .q "\-R" ,
11718 .q "\-V"
11767 Due to the use of memory-buffered files,
11868 also include a leading colon-terminated list of flags,
11875 `P' to declare this as a ``primary'' (command line or SMTP-session) address.
11928 The i-number of the data file;
11950 Information for Deliver-By SMTP extension.
11974 H?P?Return-path: <^g>
11976 Fri, 17 Jul 1992 00:28:55 -0700
11978 id AAA06698; Fri, 17 Jul 1992 00:28:54 -0700
11980 id AA22777; Fri, 17 Jul 1992 03:29:14 -0400
11981 H??Received: by foo.bar.baz.de (5.57/Ultrix3.0-C)
11984 H?x?Full-name: Eric Allman
11985 H??Message-id: <9207170931.AA22757@foo.bar.baz.de>
12018 .b \-bi
12023 .b \-bp
12037 use ``head \-1'' to get just the first line;
12071 replace it with a blank sheet for double-sided output.
12116 replace it with a blank sheet for double-sided output.