1c46725b9SPeter Wemmdivert(-1) 2c46725b9SPeter Wemm# 3c46725b9SPeter Wemm# Copyright (c) 1983 Eric P. Allman 4c46725b9SPeter Wemm# Copyright (c) 1988, 1993 5c46725b9SPeter Wemm# The Regents of the University of California. All rights reserved. 6c46725b9SPeter Wemm# 7c46725b9SPeter Wemm# Redistribution and use in source and binary forms, with or without 8c46725b9SPeter Wemm# modification, are permitted provided that the following conditions 9c46725b9SPeter Wemm# are met: 10c46725b9SPeter Wemm# 1. Redistributions of source code must retain the above copyright 11c46725b9SPeter Wemm# notice, this list of conditions and the following disclaimer. 12c46725b9SPeter Wemm# 2. Redistributions in binary form must reproduce the above copyright 13c46725b9SPeter Wemm# notice, this list of conditions and the following disclaimer in the 14c46725b9SPeter Wemm# documentation and/or other materials provided with the distribution. 15c46725b9SPeter Wemm# 3. All advertising materials mentioning features or use of this software 16c46725b9SPeter Wemm# must display the following acknowledgement: 17c46725b9SPeter Wemm# This product includes software developed by the University of 18c46725b9SPeter Wemm# California, Berkeley and its contributors. 19c46725b9SPeter Wemm# 4. Neither the name of the University nor the names of its contributors 20c46725b9SPeter Wemm# may be used to endorse or promote products derived from this software 21c46725b9SPeter Wemm# without specific prior written permission. 22c46725b9SPeter Wemm# 23c46725b9SPeter Wemm# THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND 24c46725b9SPeter Wemm# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 25c46725b9SPeter Wemm# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 26c46725b9SPeter Wemm# ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 27c46725b9SPeter Wemm# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 28c46725b9SPeter Wemm# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 29c46725b9SPeter Wemm# OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 30c46725b9SPeter Wemm# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 31c46725b9SPeter Wemm# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 32c46725b9SPeter Wemm# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 33c46725b9SPeter Wemm# SUCH DAMAGE. 34c46725b9SPeter Wemm# 35c46725b9SPeter Wemm 36c46725b9SPeter Wemm# 374d9c61bdSGregory Neil Shapiro# This is a generic configuration file for FreeBSD 6.X and later systems. 3862b58260SPeter Wemm# If you want to customize it, copy it to a name appropriate for your 3962b58260SPeter Wemm# environment and do the modifications there. 4062b58260SPeter Wemm# 4162b58260SPeter Wemm# The best documentation for this .mc file is: 427f010cfcSGregory Neil Shapiro# /usr/share/sendmail/cf/README or 4362b58260SPeter Wemm# /usr/src/contrib/sendmail/cf/README 44c46725b9SPeter Wemm# 45*ff14d523SJohn-Mark Gurney# 46*ff14d523SJohn-Mark Gurney# NOTE: If you enable RunAsUser, make sure that you adjust the permissions 47*ff14d523SJohn-Mark Gurney# and owner of the SSL certificates and keys in /etc/mail/certs to be usable 48*ff14d523SJohn-Mark Gurney# by that user. 49*ff14d523SJohn-Mark Gurney# 50c46725b9SPeter Wemm 517f010cfcSGregory Neil Shapirodivert(0) 523267d629SPeter WemmVERSIONID(`$FreeBSD$') 5318e370c3SGregory Neil ShapiroOSTYPE(freebsd6) 547f010cfcSGregory Neil ShapiroDOMAIN(generic) 557f010cfcSGregory Neil Shapiro 56742253f5SGregory Neil ShapiroFEATURE(access_db, `hash -o -T<TMPF> /etc/mail/access') 577f010cfcSGregory Neil ShapiroFEATURE(blacklist_recipients) 587f010cfcSGregory Neil ShapiroFEATURE(local_lmtp) 597f010cfcSGregory Neil ShapiroFEATURE(mailertable, `hash -o /etc/mail/mailertable') 607f010cfcSGregory Neil ShapiroFEATURE(virtusertable, `hash -o /etc/mail/virtusertable') 617f010cfcSGregory Neil Shapiro 62*ff14d523SJohn-Mark Gurneydnl Enable STARTTLS for receiving email. 63*ff14d523SJohn-Mark Gurneydefine(`CERT_DIR', `/etc/mail/certs')dnl 64*ff14d523SJohn-Mark Gurneydefine(`confSERVER_CERT', `CERT_DIR/host.cert')dnl 65*ff14d523SJohn-Mark Gurneydefine(`confSERVER_KEY', `CERT_DIR/host.key')dnl 66*ff14d523SJohn-Mark Gurneydefine(`confCLIENT_CERT', `CERT_DIR/host.cert')dnl 67*ff14d523SJohn-Mark Gurneydefine(`confCLIENT_KEY', `CERT_DIR/host.key')dnl 68*ff14d523SJohn-Mark Gurneydefine(`confCACERT', `CERT_DIR/cacert.pem')dnl 69*ff14d523SJohn-Mark Gurneydefine(`confCACERT_PATH', `CERT_DIR')dnl 70*ff14d523SJohn-Mark Gurneydefine(`confDH_PARAMETERS', `CERT_DIR/dh.param')dnl 71*ff14d523SJohn-Mark Gurney 728448f2e2SGregory Neil Shapirodnl Uncomment to allow relaying based on your MX records. 738448f2e2SGregory Neil Shapirodnl NOTE: This can allow sites to use your server as a backup MX without 748448f2e2SGregory Neil Shapirodnl your permission. 758448f2e2SGregory Neil Shapirodnl FEATURE(relay_based_on_MX) 768448f2e2SGregory Neil Shapiro 7768cbd142SGregory Neil Shapirodnl DNS based black hole lists 7868cbd142SGregory Neil Shapirodnl -------------------------------- 795d4e6c0cSGregory Neil Shapirodnl DNS based black hole lists come and go on a regular basis 805d4e6c0cSGregory Neil Shapirodnl so this file will not serve as a database of the available servers. 8183afcb64SGregory Neil Shapirodnl For more information, visit 8283afcb64SGregory Neil Shapirodnl http://en.wikipedia.org/wiki/DNSBL 8368cbd142SGregory Neil Shapiro 848259b306SGregory Neil Shapirodnl Uncomment to activate your chosen DNS based blacklist 858259b306SGregory Neil Shapirodnl FEATURE(dnsbl, `dnsbl.example.com') 8668cbd142SGregory Neil Shapirodnl Alternatively, you can provide your own server and rejection message: 87f20a1a6eSGregory Neil Shapirodnl FEATURE(dnsbl, `dnsbl.example.com', ``"550 Mail from " $&{client_addr} " rejected"'') 887f010cfcSGregory Neil Shapiro 8947b69cc1SJonathan M. Breslerdnl Dialup users should uncomment and define this appropriately 907f010cfcSGregory Neil Shapirodnl define(`SMART_HOST', `your.isp.mail.server') 917f010cfcSGregory Neil Shapiro 92c577eab2SGregory Neil Shapirodnl Uncomment the first line to change the location of the default 93c577eab2SGregory Neil Shapirodnl /etc/mail/local-host-names and comment out the second line. 947f010cfcSGregory Neil Shapirodnl define(`confCW_FILE', `-o /etc/mail/sendmail.cw') 957f010cfcSGregory Neil Shapirodefine(`confCW_FILE', `-o /etc/mail/local-host-names') 967f010cfcSGregory Neil Shapiro 97aeebf7b5SGregory Neil Shapirodnl Enable for both IPv4 and IPv6 (optional) 98aeebf7b5SGregory Neil ShapiroDAEMON_OPTIONS(`Name=IPv4, Family=inet') 99aeebf7b5SGregory Neil ShapiroDAEMON_OPTIONS(`Name=IPv6, Family=inet6, Modifiers=O') 100e9031bfeSGregory Neil Shapiro 101b943c00eSGregory Neil Shapirodefine(`confBIND_OPTS', `WorkAroundBrokenAAAA') 1027f010cfcSGregory Neil Shapirodefine(`confNO_RCPT_ACTION', `add-to-undisclosed') 1037f010cfcSGregory Neil Shapirodefine(`confPRIVACY_FLAGS', `authwarnings,noexpn,novrfy') 1047f010cfcSGregory Neil ShapiroMAILER(local) 1057f010cfcSGregory Neil ShapiroMAILER(smtp) 106