1# $FreeBSD: head/etc/mail/README 96210 2002-05-08 05:17:46Z gshapiro $
| 1# $FreeBSD: head/etc/mail/README 97131 2002-05-22 16:37:32Z gshapiro $
|
2 3 Sendmail Processes 4 5As of sendmail 8.12, in order to improve security, the sendmail binary no 6longer needs to be set-user-ID root. Instead, a set-group-ID binary 7accepts command line mail and relays it to a full mail transfer agent via 8SMTP. A group writable client mail queue (/var/spool/clientmqueue/ by 9default) holds the mail if an MTA can not be contacted. 10 11To accomplish this, under the default setup, an MTA must be listening on 12localhost port 25. If the rc.conf sendmail_enable option is set to "NO", 13a sendmail daemon will still be started and bound only to the localhost
| 2 3 Sendmail Processes 4 5As of sendmail 8.12, in order to improve security, the sendmail binary no 6longer needs to be set-user-ID root. Instead, a set-group-ID binary 7accepts command line mail and relays it to a full mail transfer agent via 8SMTP. A group writable client mail queue (/var/spool/clientmqueue/ by 9default) holds the mail if an MTA can not be contacted. 10 11To accomplish this, under the default setup, an MTA must be listening on 12localhost port 25. If the rc.conf sendmail_enable option is set to "NO", 13a sendmail daemon will still be started and bound only to the localhost
|
14interface in order to accept command line submitted mail. If this is not 15a desirable solution, it can be disabled using the sendmail_submit_enable 16rc.conf option. However, if both sendmail_enable and sendmail_submit_enable 17are set to "NO", you must do one of two things for command line submitted 18mail:
| 14interface in order to accept command line submitted mail (note that this 15does not work inside jail(2) systems as jails do not allow binding to 16just the localhost interface). If this is not a desirable solution, it 17can be disabled using the sendmail_submit_enable rc.conf option. However, 18if both sendmail_enable and sendmail_submit_enable are set to "NO", you 19must do one of two things for command line submitted mail:
|
19 201. Designate an alternative host for the submission agent to contact 21 by altering /etc/mail/freebsd.submit.mc (or setting SENDMAIL_SUBMIT_MC 22 in /etc/make.conf to an alternate .mc file) and using 23 'make install-submit-cf' in /etc/mail/. Change the FEATURE(msp) line 24 to FEATURE(msp, hostname) where hostname is the fully qualified hostname 25 of the alternative host. 26
--- 31 unchanged lines hidden --- | 20 211. Designate an alternative host for the submission agent to contact 22 by altering /etc/mail/freebsd.submit.mc (or setting SENDMAIL_SUBMIT_MC 23 in /etc/make.conf to an alternate .mc file) and using 24 'make install-submit-cf' in /etc/mail/. Change the FEATURE(msp) line 25 to FEATURE(msp, hostname) where hostname is the fully qualified hostname 26 of the alternative host. 27
--- 31 unchanged lines hidden --- |