Copy head@r302406 to stable/11 as part of the 11.0-RELEASE cycle.
Prune svn:mergeinfo from the new branch, as nothing has been merged
here.

Additional commits post-branch will follow.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

Add a ${CP} alias for copying files in the build.

Some users build FreeBSD as non-root in Perforce workspaces. By default,
Perforce sets files read-only unless they're explicitly being edited.
As a result, the -f argument must be used to cp in order to override the
read-only flag when copying source files to object directories. Bare use of
'cp' should be avoided in the future.

Update all current users of 'cp' in the src tree.

Reviewed by: emaste
MFC after: 1 week
Sponsored by: Spectra Logic

Fix incremental builds involving non-root users with read-only source files.

Makefiles should not assume that source files can be overwritten. This is the
common case for Perforce source trees.

This is a followup commit to r211243 in the same vein.

MFC after: 1 month
Sponsored by: Spectra Logic
MFSpectraBSD: r1036319 on 2014/01/29, r1046711 on 2014/03/06

Remove trailing space.

Submitted by: jens

Bow to popular demand and default SENDMAIL_SUBMIT_MC to
`hostname`.submit.mc which is templated from freebsd.submit.mc if the
default file does not exist. This makes the building of the submit.cf
behavior identical to that of the the sendmail.cf.

PR: 44256
Submitted by: Matt Emmerton <matt@gsicomp.on.ca>
MFC after: 5 days

Style fixes: tab after a dependency operator should be a single space
second level indent of tab should be four spaces

Submitted by: ru
MFC after: 3 days

Allow multiple aliases files to be rebuilt

PR: bin/40540
Submitted by: Cyrille Lefevre <cyrille.lefevre@laposte.net>
MFC after: 3 days

Drop support for COPY, -c has been the default mode of install(1)
for a long time now.

Approved by: bde

s/${INSTALL} -c/${INSTALL} ${COPY}/

Add a new make.conf knob, SENDMAIL_MAP_PERMS, which specifies the
permissions to use for alias and map database files built by
/etc/mail/Makefile. The default is 0640 to assist users in avoiding
a file locking local denial of service.

MFC after: 1 day
pending RE approval

sys.mk no longer includes bsd.own.mk so I need to include it here for
the definition of SHAREMODE.

Submitted by: Udo Schweigert <Udo.Schweigert@siemens.com>

Provide a new make.conf knob, SENDMAIL_SUBMIT_MC to allow users to pick
the .mc file used for /etc/mail/submit.cf. By default,
/etc/mail/freebsd.submit.mc is installed and used.

Requested by: fenner
Submitted by: ume
MFC after: 1 week

Quoting Peter Wemm, "At great personal risk, touch the sendmail startup
again."

As an alternative to sendmail_enable=NONE, solve the boot time problem
for non-sendmail users completely by moving all of the sendmail startup
code from /etc/rc to /etc/rc.sendmail. The source for that script will
be kept in src/etc/sendmail/rc.sendmail so make.conf's NO_SENDMAIL will
prevent it from being installed. A new rc.conf variable,
mta_start_script specifies the script to run to start the user's
preferred MTA. For backward compatibility, it will default to
/etc/rc.sendmail. The specified script is called out of /etc/rc after
checking to make sure it exists. A new rc.sendmail.8 man page has also
been added which now houses the sendmail_* variable descriptions
formerly in rc.conf.5.

Use /etc/rc.sendmail in /etc/mail/Makefile to reduce code duplication.

Reviewed by: -current, -stable, obrien, peter, ru
MFC after: 1 week

Back out last commit. (This file is installed under /etc/mail.)

Requested by: gshapiro

Use a relative path to contrib/sendmail/cf.

Update the /etc/mail/Makefile "start" target code to match the new startup
logic and added a new set of targets for controlling the MSP queue runner
(start-mspq, stop-mspq, and restart-mspq).

Reminded by: Mark Santcroos <marks@ripe.net>
MFC after: 1 week

Don't build a submit.cf file if SENDMAIL_SET_USER_ID is set

Handle the sendmail_outbound_enable knob in the start target.

PR: 32033
MFC after: 3 days

Do not clobber users hostname.mc file if freebsd.mc changes (likely after an
installworld).

Submitted by: Steve Watt <steve@Watt.COM>
MFC after: 2 days

Revert change to always include _FFR_TLS_O_T as it requires FEATURE(access_db)

Problem found by: nsayer

If the user sets SENDMAIL_MC to /etc/mail/sendmail.mc, install is told to
install /etc/mail/sendmail.cf to /etc/mail/sendmail.cf and exits with an
error:

===> etc/sendmail
install -c -o root -g wheel -m 644 /etc/mail/sendmail.cf /etc/mail/sendmail.cf
install: /etc/mail/sendmail.cf and /etc/mail/sendmail.cf are the same file
*** Error code 64

Catch this in the Makefile and don't call install if the source and target
are the same file.

Reported by: Alexandr Listopad <laa@reis.zp.ua>
MFC after: 1 week

New make knob, SENDMAIL_M4_FLAGS, modifies the flags passed to m4 when
building a .cf file from a .mc file.

Include -D_FFR_TLS_O_T to enable tls policy control since the sendmail binary
build enables that FFR as well.

PR: conf/28361
MFC after: 1 week

Allow users to add local Makefile targets.

Submitted by: dinoex
MFC after: 7 days

Make the default .mc file be `hostname`.mc if SENDMAIL_MC make.conf knob
is not set. This allows admins to create a per-machine configuration file
while leaving the freebsd.mc template pristine. Provide a rule to create
`hostname`.mc from freebsd.mc if it doesn't exist.

PR: misc/26299
MFC after: 8 days

Allow users to override the default map type used for building maps.

The userdb database is different from the rest of the databases. It *must*
be a btree.

PR: bin/26149

Read information from local rc.conf file(s) to get proper settings for
'make start'.

PR: conf/25639
Submitted by: Esa Karkkainen <ejk@pp.htv.fi>

Fix dependencies and use a better variable name

Revamp /etc/mail/Makefile:

+ Add support for the new SENDMAIL_MC make.conf knob
+ Add the ability to build .cf files from .mc files
+ Generalize map rebuilding
+ Add the ability to rebuild the aliases file
+ Add the ability to stop, start, and restart sendmail

PR: bin/13759, bin/19897, bin/24397

The rest of the changes needed to support the new version of sendmail (8.11.0).
Beyond changes to the build system, this includes fixing up the sample
freebsd.mc configuration for changes in defaults and syntax, removing
outdated documentation, and updating the release notes.

Add sample databases for sendmail (access, mailertable, virtusertable),
as well as rename access.txt back to the standard access. Also modify
the Makefile to know how to build hashes for each of these databases.
If one of the databases is missing when Make is run, use a commented
out version of the sample.

Reviewed by: peter
Approved by: jkh

$Id$ -> $FreeBSD$

update spam countermeasures
add examples of using an access_db
update .mc files to match recommendations on
http://www.sendmail.org/m4/anti-spam.html

(grrr.....should have been one commit
did the last commit from a subdirectory)

Do not try to fetch anti-spam files from gulf.net.
They nolonger provide a list of spam domains and
spam ip address ranges.

Gasp ! Bitten by the wonders of diff/patch ! Now's your chance to
say ``I told you so'' Andrey !
Move the Id keyword to the right Makefile

Enter absolute path for the makemap command (which lives under /usr/sbin)
This makes it possible to run make from cron, i.e.:
root's crontab:
( cd /etc/mail; make all install )
without the error:
makemap hash /etc/mail/spamsites < /etc/mail/block_domains.txt
makemap: not found
*** Error code 127
If this solution is widely accepted, I'd like to merge it into -STABLE

added two new files: allowed_domains.txt and allowed_ips.txt.
domains/ips listed in these files are *NOT* filtered,
even if listed in domains.txt or ips.txt.

someone added netcom.com to the domains.txt file,
resulting in all mail from netcom.com being blocked.

improve anti-spam rulesets: check_relay, check_mail, check_rcpt.
break each ruleset into identified sections. (called groups).
note which groups can be reordered.
each group accepts and returns the same strings,
as much as possible.
reactivate Paul Vixie's RBL (in check_mail)
add rules to limit mail relaying to a list of hosts and domains
in the R class (check_rcpt, not active on hub.freebsd.org)
Submitted by: jmb

anti-spam filter used by the FreeBSD mailing lists.