1c46725b9SPeter Wemmdivert(-1) 2c46725b9SPeter Wemm# 3c46725b9SPeter Wemm# Copyright (c) 1983 Eric P. Allman 4c46725b9SPeter Wemm# Copyright (c) 1988, 1993 5c46725b9SPeter Wemm# The Regents of the University of California. All rights reserved. 6c46725b9SPeter Wemm# 7c46725b9SPeter Wemm# Redistribution and use in source and binary forms, with or without 8c46725b9SPeter Wemm# modification, are permitted provided that the following conditions 9c46725b9SPeter Wemm# are met: 10c46725b9SPeter Wemm# 1. Redistributions of source code must retain the above copyright 11c46725b9SPeter Wemm# notice, this list of conditions and the following disclaimer. 12c46725b9SPeter Wemm# 2. Redistributions in binary form must reproduce the above copyright 13c46725b9SPeter Wemm# notice, this list of conditions and the following disclaimer in the 14c46725b9SPeter Wemm# documentation and/or other materials provided with the distribution. 15c46725b9SPeter Wemm# 3. All advertising materials mentioning features or use of this software 16c46725b9SPeter Wemm# must display the following acknowledgement: 17c46725b9SPeter Wemm# This product includes software developed by the University of 18c46725b9SPeter Wemm# California, Berkeley and its contributors. 19c46725b9SPeter Wemm# 4. Neither the name of the University nor the names of its contributors 20c46725b9SPeter Wemm# may be used to endorse or promote products derived from this software 21c46725b9SPeter Wemm# without specific prior written permission. 22c46725b9SPeter Wemm# 23c46725b9SPeter Wemm# THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND 24c46725b9SPeter Wemm# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 25c46725b9SPeter Wemm# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 26c46725b9SPeter Wemm# ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 27c46725b9SPeter Wemm# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 28c46725b9SPeter Wemm# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 29c46725b9SPeter Wemm# OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 30c46725b9SPeter Wemm# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 31c46725b9SPeter Wemm# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 32c46725b9SPeter Wemm# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 33c46725b9SPeter Wemm# SUCH DAMAGE. 34c46725b9SPeter Wemm# 35c46725b9SPeter Wemm 36c46725b9SPeter Wemm# 374d9c61bdSGregory Neil Shapiro# This is a generic configuration file for FreeBSD 6.X and later systems. 3862b58260SPeter Wemm# If you want to customize it, copy it to a name appropriate for your 3962b58260SPeter Wemm# environment and do the modifications there. 4062b58260SPeter Wemm# 4162b58260SPeter Wemm# The best documentation for this .mc file is: 427f010cfcSGregory Neil Shapiro# /usr/share/sendmail/cf/README or 4362b58260SPeter Wemm# /usr/src/contrib/sendmail/cf/README 44c46725b9SPeter Wemm# 45ff14d523SJohn-Mark Gurney# NOTE: If you enable RunAsUser, make sure that you adjust the permissions 46ff14d523SJohn-Mark Gurney# and owner of the SSL certificates and keys in /etc/mail/certs to be usable 47ff14d523SJohn-Mark Gurney# by that user. 48ff14d523SJohn-Mark Gurney# 49c46725b9SPeter Wemm 507f010cfcSGregory Neil Shapirodivert(0) 513267d629SPeter WemmVERSIONID(`$FreeBSD$') 5218e370c3SGregory Neil ShapiroOSTYPE(freebsd6) 537f010cfcSGregory Neil ShapiroDOMAIN(generic) 547f010cfcSGregory Neil Shapiro 55742253f5SGregory Neil ShapiroFEATURE(access_db, `hash -o -T<TMPF> /etc/mail/access') 56*5b0945b5SGregory Neil ShapiroFEATURE(blocklist_recipients) 577f010cfcSGregory Neil ShapiroFEATURE(local_lmtp) 587f010cfcSGregory Neil ShapiroFEATURE(mailertable, `hash -o /etc/mail/mailertable') 597f010cfcSGregory Neil ShapiroFEATURE(virtusertable, `hash -o /etc/mail/virtusertable') 607f010cfcSGregory Neil Shapiro 61ff14d523SJohn-Mark Gurneydnl Enable STARTTLS for receiving email. 62ff14d523SJohn-Mark Gurneydefine(`CERT_DIR', `/etc/mail/certs')dnl 63ff14d523SJohn-Mark Gurneydefine(`confSERVER_CERT', `CERT_DIR/host.cert')dnl 64ff14d523SJohn-Mark Gurneydefine(`confSERVER_KEY', `CERT_DIR/host.key')dnl 65ff14d523SJohn-Mark Gurneydefine(`confCLIENT_CERT', `CERT_DIR/host.cert')dnl 66ff14d523SJohn-Mark Gurneydefine(`confCLIENT_KEY', `CERT_DIR/host.key')dnl 67ff14d523SJohn-Mark Gurneydefine(`confCACERT', `CERT_DIR/cacert.pem')dnl 68ff14d523SJohn-Mark Gurneydefine(`confCACERT_PATH', `CERT_DIR')dnl 69ff14d523SJohn-Mark Gurneydefine(`confDH_PARAMETERS', `CERT_DIR/dh.param')dnl 70ff14d523SJohn-Mark Gurney 718448f2e2SGregory Neil Shapirodnl Uncomment to allow relaying based on your MX records. 728448f2e2SGregory Neil Shapirodnl NOTE: This can allow sites to use your server as a backup MX without 738448f2e2SGregory Neil Shapirodnl your permission. 748448f2e2SGregory Neil Shapirodnl FEATURE(relay_based_on_MX) 758448f2e2SGregory Neil Shapiro 7668cbd142SGregory Neil Shapirodnl DNS based black hole lists 7768cbd142SGregory Neil Shapirodnl -------------------------------- 785d4e6c0cSGregory Neil Shapirodnl DNS based black hole lists come and go on a regular basis 795d4e6c0cSGregory Neil Shapirodnl so this file will not serve as a database of the available servers. 8083afcb64SGregory Neil Shapirodnl For more information, visit 8183afcb64SGregory Neil Shapirodnl http://en.wikipedia.org/wiki/DNSBL 8268cbd142SGregory Neil Shapiro 838259b306SGregory Neil Shapirodnl Uncomment to activate your chosen DNS based blacklist 848259b306SGregory Neil Shapirodnl FEATURE(dnsbl, `dnsbl.example.com') 8568cbd142SGregory Neil Shapirodnl Alternatively, you can provide your own server and rejection message: 86f20a1a6eSGregory Neil Shapirodnl FEATURE(dnsbl, `dnsbl.example.com', ``"550 Mail from " $&{client_addr} " rejected"'') 877f010cfcSGregory Neil Shapiro 8847b69cc1SJonathan M. Breslerdnl Dialup users should uncomment and define this appropriately 897f010cfcSGregory Neil Shapirodnl define(`SMART_HOST', `your.isp.mail.server') 907f010cfcSGregory Neil Shapiro 91c577eab2SGregory Neil Shapirodnl Uncomment the first line to change the location of the default 92c577eab2SGregory Neil Shapirodnl /etc/mail/local-host-names and comment out the second line. 937f010cfcSGregory Neil Shapirodnl define(`confCW_FILE', `-o /etc/mail/sendmail.cw') 947f010cfcSGregory Neil Shapirodefine(`confCW_FILE', `-o /etc/mail/local-host-names') 957f010cfcSGregory Neil Shapiro 96aeebf7b5SGregory Neil Shapirodnl Enable for both IPv4 and IPv6 (optional) 97aeebf7b5SGregory Neil ShapiroDAEMON_OPTIONS(`Name=IPv4, Family=inet') 98aeebf7b5SGregory Neil ShapiroDAEMON_OPTIONS(`Name=IPv6, Family=inet6, Modifiers=O') 99e9031bfeSGregory Neil Shapiro 100b943c00eSGregory Neil Shapirodefine(`confBIND_OPTS', `WorkAroundBrokenAAAA') 1017f010cfcSGregory Neil Shapirodefine(`confNO_RCPT_ACTION', `add-to-undisclosed') 1027f010cfcSGregory Neil Shapirodefine(`confPRIVACY_FLAGS', `authwarnings,noexpn,novrfy') 1037f010cfcSGregory Neil ShapiroMAILER(local) 1047f010cfcSGregory Neil ShapiroMAILER(smtp) 105