155714Skrisdivert(-1)
255714Skris#
355714Skris# Copyright (c) 1983 Eric P. Allman
455714Skris# Copyright (c) 1988, 1993
555714Skris#	The Regents of the University of California.  All rights reserved.
655714Skris#
755714Skris# Redistribution and use in source and binary forms, with or without
8296465Sdelphij# modification, are permitted provided that the following conditions
955714Skris# are met:
1055714Skris# 1. Redistributions of source code must retain the above copyright
1155714Skris#    notice, this list of conditions and the following disclaimer.
1255714Skris# 2. Redistributions in binary form must reproduce the above copyright
1355714Skris#    notice, this list of conditions and the following disclaimer in the
1455714Skris#    documentation and/or other materials provided with the distribution.
15296465Sdelphij# 3. All advertising materials mentioning features or use of this software
1655714Skris#    must display the following acknowledgement:
1755714Skris#	This product includes software developed by the University of
1855714Skris#	California, Berkeley and its contributors.
1955714Skris# 4. Neither the name of the University nor the names of its contributors
2055714Skris#    may be used to endorse or promote products derived from this software
2155714Skris#    without specific prior written permission.
22296465Sdelphij#
2355714Skris# THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
2455714Skris# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
2555714Skris# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
2655714Skris# ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
2755714Skris# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
2855714Skris# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
2955714Skris# OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
3055714Skris# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
3155714Skris# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
3255714Skris# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
3355714Skris# SUCH DAMAGE.
3455714Skris#
3555714Skris
3655714Skris#
37296465Sdelphij#  This is a generic configuration file for FreeBSD 6.X and later systems.
3855714Skris#  If you want to customize it, copy it to a name appropriate for your
3955714Skris#  environment and do the modifications there.
40296465Sdelphij#
4155714Skris#  The best documentation for this .mc file is:
4255714Skris#  /usr/share/sendmail/cf/README or
4355714Skris#  /usr/src/contrib/sendmail/cf/README
4455714Skris# 
4555714Skris#
4655714Skris#  NOTE: If you enable RunAsUser, make sure that you adjust the permissions
4755714Skris#  and owner of the SSL certificates and keys in /etc/mail/certs to be usable
4855714Skris#  by that user.
4955714Skris#
5055714Skris
5155714Skrisdivert(0)
52296465SdelphijVERSIONID(`$FreeBSD$')
5355714SkrisOSTYPE(freebsd6)
5455714SkrisDOMAIN(generic)
5555714Skris
5655714SkrisFEATURE(access_db, `hash -o -T<TMPF> /etc/mail/access')
5755714SkrisFEATURE(blacklist_recipients)
5855714SkrisFEATURE(local_lmtp)
5955714SkrisFEATURE(mailertable, `hash -o /etc/mail/mailertable')
6055714SkrisFEATURE(virtusertable, `hash -o /etc/mail/virtusertable')
6155714Skris
6255714Skrisdnl Enable STARTTLS for receiving email.
6355714Skrisdefine(`CERT_DIR', `/etc/mail/certs')dnl
6455714Skrisdefine(`confSERVER_CERT', `CERT_DIR/host.cert')dnl
65296465Sdelphijdefine(`confSERVER_KEY', `CERT_DIR/host.key')dnl
66296465Sdelphijdefine(`confCLIENT_CERT', `CERT_DIR/host.cert')dnl
67296465Sdelphijdefine(`confCLIENT_KEY', `CERT_DIR/host.key')dnl
68296465Sdelphijdefine(`confCACERT', `CERT_DIR/cacert.pem')dnl
6955714Skrisdefine(`confCACERT_PATH', `CERT_DIR')dnl
70296465Sdelphijdefine(`confDH_PARAMETERS', `CERT_DIR/dh.param')dnl
7155714Skris
7255714Skrisdnl Uncomment to allow relaying based on your MX records.
73109998Smarkmdnl NOTE: This can allow sites to use your server as a backup MX without
7455714Skrisdnl       your permission.
75109998Smarkmdnl FEATURE(relay_based_on_MX)
7655714Skris
7755714Skrisdnl DNS based black hole lists
7855714Skrisdnl --------------------------------
7955714Skrisdnl DNS based black hole lists come and go on a regular basis
8055714Skrisdnl so this file will not serve as a database of the available servers.
8155714Skrisdnl For more information, visit
8255714Skrisdnl http://en.wikipedia.org/wiki/DNSBL
8355714Skris
8455714Skrisdnl Uncomment to activate your chosen DNS based blacklist
8555714Skrisdnl FEATURE(dnsbl, `dnsbl.example.com')
8655714Skrisdnl Alternatively, you can provide your own server and rejection message:
87109998Smarkmdnl FEATURE(dnsbl, `dnsbl.example.com', ``"550 Mail from " $&{client_addr} " rejected"'')
88296465Sdelphij
89296465Sdelphijdnl Dialup users should uncomment and define this appropriately
90296465Sdelphijdnl define(`SMART_HOST', `your.isp.mail.server')
91296465Sdelphij
92296465Sdelphijdnl Uncomment the first line to change the location of the default
93296465Sdelphijdnl /etc/mail/local-host-names and comment out the second line.
94296465Sdelphijdnl define(`confCW_FILE', `-o /etc/mail/sendmail.cw')
95296465Sdelphijdefine(`confCW_FILE', `-o /etc/mail/local-host-names')
96296465Sdelphij
97296465Sdelphijdnl Enable for both IPv4 and IPv6 (optional)
98296465SdelphijDAEMON_OPTIONS(`Name=IPv4, Family=inet')
99296465SdelphijDAEMON_OPTIONS(`Name=IPv6, Family=inet6, Modifiers=O')
100296465Sdelphij
101296465Sdelphijdefine(`confBIND_OPTS', `WorkAroundBrokenAAAA')
102296465Sdelphijdefine(`confNO_RCPT_ACTION', `add-to-undisclosed')
103296465Sdelphijdefine(`confPRIVACY_FLAGS', `authwarnings,noexpn,novrfy')
10455714SkrisMAILER(local)
105296465SdelphijMAILER(smtp)
106296465Sdelphij