MFC: Merge sendmail 8.16.1 from HEAD: See contrib/sendmail/RELEASE_NOTES for
details
Includes build infrastructure & config updates required for changes
in 8.16.1

Copy head@r302406 to stable/11 as part of the 11.0-RELEASE cycle.
Prune svn:mergeinfo from the new branch, as nothing has been merged
here.

Additional commits post-branch will follow.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

Minor changes to force commit these files so new freebsd*.cf files are
built to use the new sendmail-8.15.2/cf tree.

MFC after: 3 days

Minor changes to force commit these files so new freebsd*.cf files are
built to use the new sendmail-8.14.9/cf tree.

MFC after: 3 days

Minor changes to force commit these files so new freebsd*.cf files are
built to use the new sendmail-8.14.8/cf tree.

MFC after: 5 days

Enable the automatic creation of a certificate (if one does not exists)
and enable the usage by sendmail if sendmail is enabled. Include and
document knobs to disable this feature and also set the Common Name of
the certificate created.

As the certificate is signed w/ a discarded key, it only helps prevent
Eve, but not Malory from knowing the contents of the emails.

This means that new installs (and people that use the updated freebsd.mc
file) will automaticly have STARTTLS enabled allowing incoming email to
be encrypted in most cases.

Reviewed by: gshapiro
MFC after: 3 days
Security: Yes, please.

Minor changes to force commit these files so new freebsd*.cf files are
built to use the new sendmail-8.14.6/cf tree.

MFC after: 4 days

Minor changes to force commit these files so new freebsd*.cf files are
built to use the new sendmail-8.14.6/cf tree.

While here, update DNSBL link once again.

MFC after: 4 days

Add missing closing quote on commented out example

PR: bin/174108
Obtained from: Julian H. Stacey
MFC after: 1 day

Update DNSBL information (MAPS has been acquired, used a generic example)

Minor changes to force commit these files so new freebsd*.cf files are
built to use the new sendmail-8.14.4/cf tree.

MFC after: 4 days

Google changed the location of the blacklists again.

Submitted by: Tim Pozar

Fix quoting for the dnsbl example -- m4 misparses quoted strings with
commas due to our deconstruction of the line in cf/feature/dnsbl.m4.

PR: 120038
Submitted by: mattijs vreeling
MFC after: 1 week

Forced commit to .mc files to force creation of new .cf files for mergemaster.

Forced commit to .mc files to force creation of new .cf files for mergemaster.

Forced commit to .mc files to force creation of new .cf files for mergemaster.

MFC after: 1 week

Bump the version of src/etc/sendmail/freebsd*mc so mergemaster will
merge /etc/mail/freebsd*cf

Submitted by: Rostislav Krasny

Forced commit to bump the $FreeBSD$ version so mergemaster merges
/etc/mail/freebsd.cf and /etc/mail/freebsd.submit.cf.

PR: conf/95634
Submitted by: Rostislav Krasny
Approved by: re (scottl)
Obtained from: keramida

Use new OSTYPE(freebsd6).

Approved by: re (scottl)
Requested by: keramida

Enable IPv6 by default but make it optional so it doesn't affect
sites without IPv6.

Submitted by: ume
Obtained from: NetBSD
MFC after: 1 week

The sendmail binary now has a reasonable default for MaxMimeHeaderLength
built in. No need to set it here.

MFC after: 1 week

Replace old, not-working URL for an online index of DNS blacklist
servers with a reference to the Google directory.

Reviewed by: gshapiro
MFC after: 1 week

There are still many broken nameservers out there in the wild. Even
though I would personally prefer to see the broken nameservers fixed
instead of standards compliant applications work around them, I can't
force FreeBSD users to help fight that battle.

Submitted by: Damon Anton Permezel <dap@damon.com>
MFC after: 2 days
pending RE approval

Fix typos

Noticed by: Larry Rosenman <ler@lerctr.org>

Instead of dealing with the endless requests to provide more DNS based
black lists in the default config, give a pointer to a non-static list.
I was convinced this was the right thing to do after getting a PR
asking to add ORBZ the day before ORBZ went off the air.

PR: conf/35884
MFC after: 4 days

Correct a comment; FreeBSD-4 --> FreeBSD-5.

Turn FEATURE(relay_based_on_MX) off by default. It should not be used unless
absolutely necessary

Requested by: peter
PR: conf/33855
MFC after: 1 week

Update for sendmail 8.12 which has a new OSTYPE(freebsd5)
Fix access_db usage for 8.12

MAPS is becoming a subscription (fee based) service, warn users
ORBS is gone

MFC after: 1 day

Take advantage of the new OSTYPE(freebsd4) in sendmail 8.11.4

MFC after: 1 week

Add comments regarding enabling IPv6

Submitted by: ume

Add a pointer to the ORBS web site for more DNS black hole lists.

Fixup some of the commented out examples:

1) blackholes.mail-abuse.org is the same as FEATURE(dnsbl), so specifying
it in the "Other DNS based black hole lists" section leads to confusion of
specifying it twice.

2) Formatting issues. If error diagnostic not enclosed in double quotes,
varius visual artefacts appearse like 1) no space after ; and 2) redundant
space after ? (in CGI request), so I add quotes where needed.

3) FEATURE(dnsbl) directly use error code 550 by default, so I made other
dnsbl variants use the same error code too.

4) Comment relays.* list as "open relays" list, just "other" word is not
explain enough.

Submitted by: ache

Clean up freebsd.mc to make it easier for users to read and modify.
The freebsd.cf from this new freebsd.mc is functionally equivalent.

Give some additional DNS black hole possibilities as comments.

Submitted by: clive

Disable the SMTP EXPN and VRFY commands by default to prevent information
leakage.

Submitted by: Maxime Henrion <mux@qualys.com>

Do not require a local-host-names file as this configuration file is the
default /etc/mail/sendmail.cf installed on a fresh install.
Problem noted by: Hajimu UMEMOTO <ume@mahoroba.org>

The rest of the changes needed to support the new version of sendmail (8.11.0).
Beyond changes to the build system, this includes fixing up the sample
freebsd.mc configuration for changes in defaults and syntax, removing
outdated documentation, and updating the release notes.

Revert previous commit, -o is functional here and is required.

Remove -o before sendmail.cw - pure file name needed here

Add information and configuration on the DUL.
Based upon a suggestion from
Don Croyle <croyle@gelemna.ft-wayne.in.us>.

$Revision$ -> $FreeBSD$

update spam countermeasures
add examples of using an access_db
update .mc files to match recommendations on
http://www.sendmail.org/m4/anti-spam.html

Fatal typo.

PR: bin/10827
Submitted by: Mike Andrews <mandrews@termfrost.org>
PR: conf/10310
Submitted by: Brion Moss <brion@queeg.com>

Update the default sendmail.cf to be a little more respectable.
I have not enabled rbl by default, I understand an 'opt-in' is a key part
of it's legal protection.
Activate a few optional features (access_db, virtusertable, etc) which will
operate if (and only if) the corresponding table is created.
I've also turned on the MIME buffer overflow checking with sendmail.org's
recommended values (256/128).

make the /etc/sendmail.cw file optional by default.

Definately should go into 2.2..

Requested by: lots of people

The standard .mc files shipped with the new sendmail have an extra divert(0)
at the top. Make our freebsd-supplied files match the standard files.

Apply-to: 2.2

Update the freefall.mc file to (almost) match what is actually being
run on freefall..
Create freebsd.mc which is intended to be installed by src/etc/Makefile
onto generic freebsd systems.