1c46725b9SPeter Wemmdivert(-1) 2c46725b9SPeter Wemm# 3c46725b9SPeter Wemm# Copyright (c) 1983 Eric P. Allman 4c46725b9SPeter Wemm# Copyright (c) 1988, 1993 5c46725b9SPeter Wemm# The Regents of the University of California. All rights reserved. 6c46725b9SPeter Wemm# 7c46725b9SPeter Wemm# Redistribution and use in source and binary forms, with or without 8c46725b9SPeter Wemm# modification, are permitted provided that the following conditions 9c46725b9SPeter Wemm# are met: 10c46725b9SPeter Wemm# 1. Redistributions of source code must retain the above copyright 11c46725b9SPeter Wemm# notice, this list of conditions and the following disclaimer. 12c46725b9SPeter Wemm# 2. Redistributions in binary form must reproduce the above copyright 13c46725b9SPeter Wemm# notice, this list of conditions and the following disclaimer in the 14c46725b9SPeter Wemm# documentation and/or other materials provided with the distribution. 15c46725b9SPeter Wemm# 3. All advertising materials mentioning features or use of this software 16c46725b9SPeter Wemm# must display the following acknowledgement: 17c46725b9SPeter Wemm# This product includes software developed by the University of 18c46725b9SPeter Wemm# California, Berkeley and its contributors. 19c46725b9SPeter Wemm# 4. Neither the name of the University nor the names of its contributors 20c46725b9SPeter Wemm# may be used to endorse or promote products derived from this software 21c46725b9SPeter Wemm# without specific prior written permission. 22c46725b9SPeter Wemm# 23c46725b9SPeter Wemm# THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND 24c46725b9SPeter Wemm# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 25c46725b9SPeter Wemm# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 26c46725b9SPeter Wemm# ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 27c46725b9SPeter Wemm# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 28c46725b9SPeter Wemm# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 29c46725b9SPeter Wemm# OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 30c46725b9SPeter Wemm# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 31c46725b9SPeter Wemm# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 32c46725b9SPeter Wemm# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 33c46725b9SPeter Wemm# SUCH DAMAGE. 34c46725b9SPeter Wemm# 35c46725b9SPeter Wemm 36c46725b9SPeter Wemm# 374d9c61bdSGregory Neil Shapiro# This is a generic configuration file for FreeBSD 6.X and later systems. 3862b58260SPeter Wemm# If you want to customize it, copy it to a name appropriate for your 3962b58260SPeter Wemm# environment and do the modifications there. 4062b58260SPeter Wemm# 4162b58260SPeter Wemm# The best documentation for this .mc file is: 427f010cfcSGregory Neil Shapiro# /usr/share/sendmail/cf/README or 4362b58260SPeter Wemm# /usr/src/contrib/sendmail/cf/README 44c46725b9SPeter Wemm# 45ff14d523SJohn-Mark Gurney# NOTE: If you enable RunAsUser, make sure that you adjust the permissions 46ff14d523SJohn-Mark Gurney# and owner of the SSL certificates and keys in /etc/mail/certs to be usable 47ff14d523SJohn-Mark Gurney# by that user. 48ff14d523SJohn-Mark Gurney# 49*2c191ba6SGregory Neil Shapiro# Last updated: 2024-02-01 50c46725b9SPeter Wemm 517f010cfcSGregory Neil Shapirodivert(0) 5218e370c3SGregory Neil ShapiroOSTYPE(freebsd6) 537f010cfcSGregory Neil ShapiroDOMAIN(generic) 547f010cfcSGregory Neil Shapiro 55742253f5SGregory Neil ShapiroFEATURE(access_db, `hash -o -T<TMPF> /etc/mail/access') 565b0945b5SGregory Neil ShapiroFEATURE(blocklist_recipients) 577f010cfcSGregory Neil ShapiroFEATURE(local_lmtp) 587f010cfcSGregory Neil ShapiroFEATURE(mailertable, `hash -o /etc/mail/mailertable') 597f010cfcSGregory Neil ShapiroFEATURE(virtusertable, `hash -o /etc/mail/virtusertable') 607f010cfcSGregory Neil Shapiro 61ff14d523SJohn-Mark Gurneydnl Enable STARTTLS for receiving email. 62ff14d523SJohn-Mark Gurneydefine(`CERT_DIR', `/etc/mail/certs')dnl 63ff14d523SJohn-Mark Gurneydefine(`confSERVER_CERT', `CERT_DIR/host.cert')dnl 64ff14d523SJohn-Mark Gurneydefine(`confSERVER_KEY', `CERT_DIR/host.key')dnl 65ff14d523SJohn-Mark Gurneydefine(`confCLIENT_CERT', `CERT_DIR/host.cert')dnl 66ff14d523SJohn-Mark Gurneydefine(`confCLIENT_KEY', `CERT_DIR/host.key')dnl 67ff14d523SJohn-Mark Gurneydefine(`confCACERT', `CERT_DIR/cacert.pem')dnl 68ff14d523SJohn-Mark Gurneydefine(`confCACERT_PATH', `CERT_DIR')dnl 69ff14d523SJohn-Mark Gurney 708448f2e2SGregory Neil Shapirodnl Uncomment to allow relaying based on your MX records. 718448f2e2SGregory Neil Shapirodnl NOTE: This can allow sites to use your server as a backup MX without 728448f2e2SGregory Neil Shapirodnl your permission. 738448f2e2SGregory Neil Shapirodnl FEATURE(relay_based_on_MX) 748448f2e2SGregory Neil Shapiro 75431d2a81SGregory Neil Shapirodnl DNS based block lists 76431d2a81SGregory Neil Shapirodnl --------------------- 77431d2a81SGregory Neil Shapirodnl DNS based block lists come and go on a regular basis so this 78431d2a81SGregory Neil Shapirodnl file will not serve as a database of the available servers. 7983afcb64SGregory Neil Shapirodnl For more information, visit 8083afcb64SGregory Neil Shapirodnl http://en.wikipedia.org/wiki/DNSBL 8168cbd142SGregory Neil Shapiro 82431d2a81SGregory Neil Shapirodnl Uncomment to activate your chosen DNS based block list 838259b306SGregory Neil Shapirodnl FEATURE(dnsbl, `dnsbl.example.com') 8468cbd142SGregory Neil Shapirodnl Alternatively, you can provide your own server and rejection message: 85f20a1a6eSGregory Neil Shapirodnl FEATURE(dnsbl, `dnsbl.example.com', ``"550 Mail from " $&{client_addr} " rejected"'') 867f010cfcSGregory Neil Shapiro 8747b69cc1SJonathan M. Breslerdnl Dialup users should uncomment and define this appropriately 887f010cfcSGregory Neil Shapirodnl define(`SMART_HOST', `your.isp.mail.server') 897f010cfcSGregory Neil Shapiro 90c577eab2SGregory Neil Shapirodnl Uncomment the first line to change the location of the default 91c577eab2SGregory Neil Shapirodnl /etc/mail/local-host-names and comment out the second line. 927f010cfcSGregory Neil Shapirodnl define(`confCW_FILE', `-o /etc/mail/sendmail.cw') 937f010cfcSGregory Neil Shapirodefine(`confCW_FILE', `-o /etc/mail/local-host-names') 947f010cfcSGregory Neil Shapiro 95aeebf7b5SGregory Neil Shapirodnl Enable for both IPv4 and IPv6 (optional) 96aeebf7b5SGregory Neil ShapiroDAEMON_OPTIONS(`Name=IPv4, Family=inet') 97aeebf7b5SGregory Neil ShapiroDAEMON_OPTIONS(`Name=IPv6, Family=inet6, Modifiers=O') 98e9031bfeSGregory Neil Shapiro 99b943c00eSGregory Neil Shapirodefine(`confBIND_OPTS', `WorkAroundBrokenAAAA') 1007f010cfcSGregory Neil Shapirodefine(`confNO_RCPT_ACTION', `add-to-undisclosed') 1017f010cfcSGregory Neil Shapirodefine(`confPRIVACY_FLAGS', `authwarnings,noexpn,novrfy') 1027f010cfcSGregory Neil ShapiroMAILER(local) 1037f010cfcSGregory Neil ShapiroMAILER(smtp) 104