README revision 90792
1# Copyright (c) 1998-2002 Sendmail, Inc. and its suppliers. 2# All rights reserved. 3# Copyright (c) 1983, 1995-1997 Eric P. Allman. All rights reserved. 4# Copyright (c) 1988 5# The Regents of the University of California. All rights reserved. 6# 7# By using this file, you agree to the terms and conditions set 8# forth in the LICENSE file which can be found at the top level of 9# the sendmail distribution. 10# 11# 12# $Id: README,v 8.345 2002/01/09 18:04:30 ca Exp $ 13# 14 15This directory contains the source files for sendmail(TM). 16 17 ******************************************************************* 18 !! Read sendmail/SECURITY for important installation information !! 19 ******************************************************************* 20 21 ********************************************************** 22 ** Read below for more details on building sendmail. ** 23 ********************************************************** 24 25************************************************************************** 26** IMPORTANT: Read the appropriate paragraphs in the section on ** 27** ``Operating System and Compile Quirks''. ** 28************************************************************************** 29 30For detailed instructions, please read the document ../doc/op/op.me: 31 32 cd ../doc/op ; make op.ps op.txt 33 34Sendmail is a trademark of Sendmail, Inc. 35 36 37+-------------------+ 38| BUILDING SENDMAIL | 39+-------------------+ 40 41By far, the easiest way to compile sendmail is to use the "Build" 42script: 43 44 sh Build 45 46This uses the "uname" command to figure out what architecture you are 47on and creates a proper Makefile accordingly. It also creates a 48subdirectory per object format, so that multiarchitecture support is 49easy. In general this should be all you need. IRIX 6.x users should 50read the note below in the OPERATING SYSTEM AND COMPILE QUIRKS section. 51 52If you need to look at other include or library directories, use the 53-I or -L flags on the command line, e.g., 54 55 sh Build -I/usr/sww/include -L/usr/sww/lib 56 57It's also possible to create local site configuration in the file 58site.config.m4 (or another file settable with the -f flag). This 59file contains M4 definitions for various compilation values; the 60most useful are: 61 62confMAPDEF -D flags to specify database types to be included 63 (see below) 64confENVDEF -D flags to specify other environment information 65confINCDIRS -I flags for finding include files during compilation 66confLIBDIRS -L flags for finding libraries during linking 67confLIBS -l flags for selecting libraries during linking 68confLDOPTS other ld(1) linker options 69 70Others can be found by examining Makefile.m4. Please read 71../devtools/README for more information about the site.config.m4 72file. 73 74You can recompile from scratch using the -c flag with the Build 75command. This removes the existing compilation directory for the 76current platform and builds a new one. 77 78Porting to a new Unix-based system should be a matter of creating 79an appropriate configuration file in the devtools/OS/ directory. 80 81 82+----------------------+ 83| DATABASE DEFINITIONS | 84+----------------------+ 85 86There are several database formats that can be used for the alias files 87and for general maps. When used for alias files they interact in an 88attempt to be backward compatible. 89 90The options are: 91 92NEWDB The new Berkeley DB package. Some systems (e.g., BSD/OS and 93 Digital UNIX 4.0) have some version of this package 94 pre-installed. If your system does not have Berkeley DB 95 pre-installed, or the version installed is not version 2.0 96 or greater (e.g., is Berkeley DB 1.85 or 1.86), get the 97 current version from http://www.sleepycat.com/. DO NOT 98 use a version from any of the University of California, 99 Berkeley "Net" or other distributions. If you are still 100 running BSD/386 1.x, you will need to upgrade the included 101 Berkeley DB library to a current version. NEWDB is included 102 automatically if the Build script can find a library named 103 libdb.a or libdb.so. 104NDBM The older NDBM implementation -- the very old V7 DBM 105 implementation is no longer supported. 106NIS Network Information Services. To use this you must have 107 NIS support on your system. 108NISPLUS NIS+ (the revised NIS released with Solaris 2). You must 109 have NIS+ support on your system to use this flag. 110HESIOD Support for Hesiod (from the DEC/Athena distribution). You 111 must already have Hesiod support on your system for this to 112 work. You may be able to get this to work with the MIT/Athena 113 version of Hesiod, but that's likely to be a lot of work. 114 BIND 8.X also includes Hesiod support. 115LDAPMAP Lightweight Directory Access Protocol support. You will 116 have to install the UMich or OpenLDAP 117 (http://www.openldap.org/) ldap and lber libraries to use 118 this flag. 119MAP_REGEX Regular Expression support. You will need to use an 120 operating system which comes with the POSIX regex() 121 routines or install a regexp library such as libregex from 122 the Free Software Foundation. 123DNSMAP DNS map support. Requires NAMED_BIND. 124PH_MAP PH map support. You will need the libphclient library from 125 the nph package (http://www-dev.cso.uiuc.edu/ph/nph/). 126MAP_NSD nsd map support (IRIX 6.5 and later). 127 128>>> NOTE WELL for NEWDB support: If you want to get ndbm support, for 129>>> Berkeley DB versions under 2.0, it is CRITICAL that you remove 130>>> ndbm.o from libdb.a before you install it and DO NOT install ndbm.h; 131>>> for Berkeley DB versions 2.0 through 2.3.14, remove dbm.o from libdb.a 132>>> before you install it. If you don't delete these, there is absolutely 133>>> no point to including -DNDBM, since it will just get you another 134>>> (inferior) API to the same format database. These files OVERRIDE 135>>> calls to ndbm routines -- in particular, if you leave ndbm.h in, 136>>> you can find yourself using the new db package even if you don't 137>>> define NEWDB. Berkeley DB versions later than 2.3.14 do not need 138>>> to be modified. Please also consult the README in the top level 139>>> directory of the sendmail distribution for other important information. 140>>> 141>>> Further note: DO NOT remove your existing /usr/include/ndbm.h -- 142>>> you need that one. But do not install an updated ndbm.h in 143>>> /usr/include, /usr/local/include, or anywhere else. 144 145If NEWDB and NDBM are defined (but not NIS), then sendmail will read 146NDBM format alias files, but the next time a newaliases is run the 147format will be converted to NEWDB; that format will be used forever 148more. This is intended as a transition feature. 149 150If NEWDB, NDBM, and NIS are all defined and the name of the file includes 151the string "/yp/", sendmail will rebuild BOTH the NEWDB and NDBM format 152alias files. However, it will only read the NEWDB file; the NDBM format 153file is used only by the NIS subsystem. This is needed because the NIS 154maps on an NIS server are built directly from the NDBM files. 155 156If NDBM and NIS are defined (regardless of the definition of NEWDB), 157and the filename includes the string "/yp/", sendmail adds the special 158tokens "YP_LAST_MODIFIED" and "YP_MASTER_NAME", both of which are 159required if the NDBM file is to be used as an NIS map. 160 161All of these flags are normally defined in the DBMDEF line in the 162Makefile. 163 164If you define NEWDB or HESIOD you get the User Database (USERDB) 165automatically. Generally you do want to have NEWDB for it to do 166anything interesting. See above for getting the Berkeley DB 167package (i.e., NEWDB). There is no separate "user database" 168package -- don't bother searching for it on the net. 169 170Hesiod and LDAP require libraries that may not be installed with your 171system. These are outside of my ability to provide support. See the 172"Quirks" section for more information. 173 174The regex map can be used to see if an address matches a certain regular 175expression. For example, all-numerics local parts are common spam 176addresses, so "^[0-9]+$" would match this. By using such a map in a 177check_* rule-set, you can block a certain range of addresses that would 178otherwise be considered valid. 179 180 181+---------------+ 182| COMPILE FLAGS | 183+---------------+ 184 185Wherever possible, I try to make sendmail pull in the correct 186compilation options needed to compile on various environments based on 187automatically defined symbols. Some machines don't seem to have useful 188symbols available, requiring that a compilation flag be defined in 189the Makefile; see the devtools/OS subdirectory for the supported 190architectures. 191 192If you are a system to which sendmail has already been ported you 193should not have to touch the following symbols. But if you are porting, 194you may have to tweak the following compilation flags in conf.h in order 195to get it to compile and link properly: 196 197SYSTEM5 Adjust for System V (not necessarily Release 4). 198SYS5SIGNALS Use System V signal semantics -- the signal handler 199 is automatically dropped when the signal is caught. 200 If this is not set, use POSIX/BSD semantics, where the 201 signal handler stays in force until an exec or an 202 explicit delete. Implied by SYSTEM5. 203SYS5SETPGRP Use System V setpgrp() semantics. Implied by SYSTEM5. 204HASNICE Define this to zero if you lack the nice(2) system call. 205HASRRESVPORT Define this to zero if you lack the rresvport(3) system call. 206HASFCHMOD Define this to one if you have the fchmod(2) system call. 207 This improves security. 208HASFCHOWN Define this to one if you have the fchown(2) system call. 209 This is required for the TrustedUser option if sendmail 210 must rebuild an (alias) map. 211HASFLOCK Set this if you prefer to use the flock(2) system call 212 rather than using fcntl-based locking. Fcntl locking 213 has some semantic gotchas, but many vendor systems 214 also interface it to lockd(8) to do NFS-style locking. 215 Unfortunately, may vendors implementations of fcntl locking 216 is just plain broken (e.g., locks are never released, 217 causing your sendmail to deadlock; when the kernel runs 218 out of locks your system crashes). For this reason, I 219 recommend always defining this unless you are absolutely 220 certain that your fcntl locking implementation really works. 221HASUNAME Set if you have the "uname" system call. Implied by 222 SYSTEM5. 223HASUNSETENV Define this if your system library has the "unsetenv" 224 subroutine. 225HASSETSID Define this if you have the setsid(2) system call. This 226 is implied if your system appears to be POSIX compliant. 227HASINITGROUPS Define this if you have the initgroups(3) routine. 228HASSETVBUF Define this if you have the setvbuf(3) library call. 229 If you don't, setlinebuf will be used instead. This 230 defaults on if your compiler defines __STDC__. 231HASSETREUID Define this if you have setreuid(2) ***AND*** root can 232 use setreuid to change to an arbitrary user. This second 233 condition is not satisfied on AIX 3.x. You may find that 234 your system has setresuid(2), (for example, on HP-UX) in 235 which case you will also have to #define setreuid(r, e) 236 to be the appropriate call. Some systems (such as Solaris) 237 have a compatibility routine that doesn't work properly, 238 but may have "saved user ids" properly implemented so you 239 can ``#define setreuid(r, e) seteuid(e)'' and have it work. 240 The important thing is that you have a call that will set 241 the effective uid independently of the real or saved uid 242 and be able to set the effective uid back again when done. 243 There's a test program in ../test/t_setreuid.c that will 244 try things on your system. Setting this improves the 245 security, since sendmail doesn't have to read .forward 246 and :include: files as root. There are certain attacks 247 that may be unpreventable without this call. 248USESETEUID Define this to 1 if you have a seteuid(2) system call that 249 will allow root to set only the effective user id to an 250 arbitrary value ***AND*** you have saved user ids. This is 251 preferable to HASSETREUID if these conditions are fulfilled. 252 These are the semantics of the to-be-released revision of 253 Posix.1. The test program ../test/t_seteuid.c will try 254 this out on your system. If you define both HASSETREUID 255 and USESETEUID, the former is ignored. 256HASSETEGID Define this if you have setegid(2) and it can be 257 used to set the saved gid. Please run t_dropgid in 258 test/ if you are not sure whether the call works. 259HASSETREGID Define this if you have setregid(2) and it can be 260 used to set the saved gid. Please run t_dropgid in 261 test/ if you are not sure whether the call works. 262HASSETRESGID Define this if you have setresgid(2) and it can be 263 used to set the saved gid. Please run t_dropgid in 264 test/ if you are not sure whether the call works. 265HASLSTAT Define this if you have symbolic links (and thus the 266 lstat(2) system call). This improves security. Unlike 267 most other options, this one is on by default, so you 268 need to #undef it in conf.h if you don't have symbolic 269 links (these days everyone does). 270HASSETRLIMIT Define this to 1 if you have the setrlimit(2) syscall. 271 You can define it to 0 to force it off. It is assumed 272 if you are running a BSD-like system. 273HASULIMIT Define this if you have the ulimit(2) syscall (System V 274 style systems). HASSETRLIMIT overrides, as it is more 275 general. 276HASWAITPID Define this if you have the waitpid(2) syscall. 277HASGETDTABLESIZE 278 Define this if you have the getdtablesize(2) syscall. 279HAS_ST_GEN Define this to 1 if your system has the st_gen field in 280 the stat structure (see stat(2)). 281HASSRANDOMDEV Define this if your system has the srandomdev(3) function 282 call. 283HASURANDOMDEV Define this if your system has /dev/urandom(4). 284HASSTRERROR Define this if you have the libc strerror(3) function (which 285 should be declared in <errno.h>), and it should be used 286 instead of sys_errlist. 287SM_CONF_GETOPT Define this as 0 if you need a reimplementation of getopt(3). 288 On some systems, getopt does very odd things if called 289 to scan the arguments twice. This flag will ask sendmail 290 to compile in a local version of getopt that works 291 properly. 292NEEDSTRTOL Define this if your standard C library does not define 293 strtol(3). This will compile in a local version. 294NEEDFSYNC Define this if your standard C library does not define 295 fsync(2). This will try to simulate the operation using 296 fcntl(2); if that is not available it does nothing, which 297 isn't great, but at least it compiles and runs. 298HASGETUSERSHELL Define this to 1 if you have getusershell(3) in your 299 standard C library. If this is not defined, or is defined 300 to be 0, sendmail will scan the /etc/shells file (no 301 NIS-style support, defaults to /bin/sh and /bin/csh if 302 that file does not exist) to get a list of unrestricted 303 user shells. This is used to determine whether users 304 are allowed to forward their mail to a program or a file. 305NEEDPUTENV Define this if your system needs am emulation of the 306 putenv(3) call. Define to 1 to implement it in terms 307 of setenv(3) or to 2 to do it in terms of primitives. 308NOFTRUNCATE Define this if you don't have the ftruncate(2) syscall. 309 If you don't have this system call, there is an unavoidable 310 race condition that occurs when creating alias databases. 311GIDSET_T The type of entries in a gidset passed as the second 312 argument to getgroups(2). Historically this has been an 313 int, so this is the default, but some systems (such as 314 IRIX) pass it as a gid_t, which is an unsigned short. 315 This will make a difference, so it is important to get 316 this right! However, it is only an issue if you have 317 group sets. 318SLEEP_T The type returned by the system sleep() function. 319 Defaults to "unsigned int". Don't worry about this 320 if you don't have compilation problems. 321ARBPTR_T The type of an arbitrary pointer -- defaults to "void *". 322 If you are an very old compiler you may need to define 323 this to be "char *". 324SOCKADDR_LEN_T The type used for the third parameter to accept(2), 325 getsockname(2), and getpeername(2), representing the 326 length of a struct sockaddr. Defaults to int. 327SOCKOPT_LEN_T The type used for the fifth parameter to getsockopt(2) 328 and setsockopt(2), representing the length of the option 329 buffer. Defaults to int. 330LA_TYPE The type of load average your kernel supports. These 331 can be one of: 332 LA_ZERO (1) -- it always returns the load average as 333 "zero" (and does so on all architectures). 334 LA_INT (2) to read /dev/kmem for the symbol avenrun and 335 interpret as a long integer. 336 LA_FLOAT (3) same, but interpret the result as a floating 337 point number. 338 LA_SHORT (6) to interpret as a short integer. 339 LA_SUBR (4) if you have the getloadavg(3) routine in your 340 system library. 341 LA_MACH (5) to use MACH-style load averages (calls 342 processor_set_info()), 343 LA_PROCSTR (7) to read /proc/loadavg and interpret it 344 as a string representing a floating-point 345 number (Linux-style). 346 LA_READKSYM (8) is an implementation suitable for some 347 versions of SVr4 that uses the MIOC_READKSYM ioctl 348 call to read /dev/kmem. 349 LA_DGUX (9) is a special implementation for DG/UX that uses 350 the dg_sys_info system call. 351 LA_HPUX (10) is an HP-UX specific version that uses the 352 pstat_getdynamic system call. 353 LA_IRIX6 (11) is an IRIX 6.x specific version that adapts 354 to 32 or 64 bit kernels; it is otherwise very similar 355 to LA_INT. 356 LA_KSTAT (12) uses the (Solaris-specific) kstat(3k) 357 implementation. 358 LA_DEVSHORT (13) reads a short from a system file (default: 359 /dev/table/avenrun) and scales it in the same manner 360 as LA_SHORT. 361 LA_INT, LA_SHORT, LA_FLOAT, and LA_READKSYM have several 362 other parameters that they try to divine: the name of your 363 kernel, the name of the variable in the kernel to examine, 364 the number of bits of precision in a fixed point load average, 365 and so forth. LA_DEVSHORT uses _PATH_AVENRUN to find the 366 device to be read to find the load average. 367 In desperation, use LA_ZERO. The actual code is in 368 conf.c -- it can be tweaked if you are brave. 369FSHIFT For LA_INT, LA_SHORT, and LA_READKSYM, this is the number 370 of bits of load average after the binary point -- i.e., 371 the number of bits to shift right in order to scale the 372 integer to get the true integer load average. Defaults to 8. 373_PATH_UNIX The path to your kernel. Needed only for LA_INT, LA_SHORT, 374 and LA_FLOAT. Defaults to "/unix" on System V, "/vmunix" 375 everywhere else. 376LA_AVENRUN For LA_INT, LA_SHORT, and LA_FLOAT, the name of the kernel 377 variable that holds the load average. Defaults to "avenrun" 378 on System V, "_avenrun" everywhere else. 379SFS_TYPE Encodes how your kernel can locate the amount of free 380 space on a disk partition. This can be set to SFS_NONE 381 (0) if you have no way of getting this information, 382 SFS_USTAT (1) if you have the ustat(2) system call, 383 SFS_4ARGS (2) if you have a four-argument statfs(2) 384 system call (and the include file is <sys/statfs.h>), 385 SFS_VFS (3), SFS_MOUNT (4), SFS_STATFS (5) if you have 386 the two-argument statfs(2) system call with includes in 387 <sys/vfs.h>, <sys/mount.h>, or <sys/statfs.h> respectively, 388 or SFS_STATVFS (6) if you have the two-argument statvfs(2) 389 call. The default if nothing is defined is SFS_NONE. 390SFS_BAVAIL with SFS_4ARGS you can also set SFS_BAVAIL to the field name 391 in the statfs structure that holds the useful information; 392 this defaults to f_bavail. 393SPT_TYPE Encodes how your system can display what a process is doing 394 on a ps(1) command (SPT stands for Set Process Title). Can 395 be set to: 396 SPT_NONE (0) -- Don't try to set the process title at all. 397 SPT_REUSEARGV (1) -- Pad out your argv with the information; 398 this is the default if none specified. 399 SPT_BUILTIN (2) -- The system library has setproctitle. 400 SPT_PSTAT (3) -- Use the PSTAT_SETCMD option to pstat(2) 401 to set the process title; this is used by HP-UX. 402 SPT_PSSTRINGS (4) -- Use the magic PS_STRINGS pointer (4.4BSD). 403 SPT_SYSMIPS (5) -- Use sysmips() supported by NEWS-OS 6. 404 SPT_SCO (6) -- Write kernel u. area. 405 SPT_CHANGEARGV (7) -- Write pointers to our own strings into 406 the existing argv vector. 407SPT_PADCHAR Character used to pad the process title; if undefined, 408 the space character (0x20) is used. This is ignored if 409 SPT_TYPE != SPT_REUSEARGV 410ERRLIST_PREDEFINED 411 If set, assumes that some header file defines sys_errlist. 412 This may be needed if you get type conflicts on this 413 variable -- otherwise don't worry about it. 414WAITUNION The wait(2) routine takes a "union wait" argument instead 415 of an integer argument. This is for compatibility with 416 old versions of BSD. 417SCANF You can set this to extend the F command to accept a 418 scanf string -- this gives you a primitive parser for 419 class definitions -- BUT it can make you vulnerable to 420 core dumps if the target file is poorly formed. 421SYSLOG_BUFSIZE You can define this to be the size of the buffer that 422 syslog accepts. If it is not defined, it assumes a 423 1024-byte buffer. If the buffer is very small (under 424 256 bytes) the log message format changes -- each 425 e-mail message will log many more messages, since it 426 will log each piece of information as a separate line 427 in syslog. 428BROKEN_RES_SEARCH 429 On Ultrix (and maybe other systems?) if you use the 430 res_search routine with an unknown host name, it returns 431 -1 but sets h_errno to 0 instead of HOST_NOT_FOUND. If 432 you set this, sendmail considers 0 to be the same as 433 HOST_NOT_FOUND. 434NAMELISTMASK If defined, values returned by nlist(3) are masked 435 against this value before use -- a common value is 436 0x7fffffff to strip off the top bit. 437BSD4_4_SOCKADDR If defined, socket addresses have an sa_len field that 438 defines the length of this address. 439SAFENFSPATHCONF Set this to 1 if and only if you have verified that a 440 pathconf(2) call with _PC_CHOWN_RESTRICTED argument on an 441 NFS filesystem where the underlying system allows users to 442 give away files to other users returns <= 0. Be sure you 443 try both on NFS V2 and V3. Some systems assume that their 444 local policy apply to NFS servers -- this is a bad 445 assumption! The test/t_pathconf.c program will try this 446 for you -- you have to run it in a directory that is 447 mounted from a server that allows file giveaway. 448SIOCGIFCONF_IS_BROKEN 449 Set this if your system has an SIOCGIFCONF ioctl defined, 450 but it doesn't behave the same way as "most" systems (BSD, 451 Solaris, SunOS, HP-UX, etc.) 452SIOCGIFNUM_IS_BROKEN 453 Set this if your system has an SIOCGIFNUM ioctl defined, 454 but it doesn't behave the same way as "most" systems 455 (Solaris, HP-UX). 456FAST_PID_RECYCLE 457 Set this if your system can reuse the same PID in the same 458 second. 459SO_REUSEADDR_IS_BROKEN 460 Set this if your system has a setsockopt() SO_REUSEADDR 461 flag but doesn't pay attention to it when trying to bind a 462 socket to a recently closed port. 463NEEDSGETIPNODE Set this if your system supports IPv6 but doesn't include 464 the getipnodeby{name,addr}() functions. Set automatically 465 for Linux's glibc. 466PIPELINING Support SMTP PIPELINING (set by default). 467USING_NETSCAPE_LDAP 468 Set this if LDAPMAP is set and your LDAP libraries are from 469 (or are derived from) Netscape's implementation, which 470 requires that the return value of ldap_first_attribute() 471 and ldap_next_attribute() be ldap_memfree()'d. 472NEEDLINK Set this if your system doesn't have a link() call. It 473 will create a copy of the file instead of a hardlink. 474USE_ENVIRON Set this to 1 to access process environment variables from 475 the external variable environ instead of the third 476 parameter of main(). 477USE_DOUBLE_FORK By default this is on (1). Set it to 0 to suppress the 478 extra fork() used to avoid intermediate zombies. 479 480 481+-----------------------+ 482| COMPILE-TIME FEATURES | 483+-----------------------+ 484 485There are a bunch of features that you can decide to compile in, such 486as selecting various database packages and special protocol support. 487Several are assumed based on other compilation flags -- if you want to 488"un-assume" something, you probably need to edit conf.h. Compilation 489flags that add support for special features include: 490 491NDBM Include support for "new" DBM library for aliases and maps. 492 Normally defined in the Makefile. 493NEWDB Include support for Berkeley DB package (hash & btree) 494 for aliases and maps. Normally defined in the Makefile. 495 If the version of NEWDB you have is the old one that does 496 not include the "fd" call (this call was added in version 497 1.5 of the Berkeley DB code), you must upgrade to the 498 current version of Berkeley DB. 499NIS Define this to get NIS (YP) support for aliases and maps. 500 Normally defined in the Makefile. 501NISPLUS Define this to get NIS+ support for aliases and maps. 502 Normally defined in the Makefile. 503HESIOD Define this to get Hesiod support for aliases and maps. 504 Normally defined in the Makefile. 505NETINFO Define this to get NeXT NetInfo support for aliases and maps. 506 Normally defined in the Makefile. 507LDAPMAP Define this to get LDAP support for maps. 508PH_MAP Define this to get PH support for maps. 509MAP_NSD Define this to get nsd support for maps. 510USERDB Define this to 1 to include support for the User Information 511 Database. Implied by NEWDB or HESIOD. You can use 512 -DUSERDB=0 to explicitly turn it off. 513IDENTPROTO Define this as 1 to get IDENT (RFC 1413) protocol support. 514 This is assumed unless you are running on Ultrix or 515 HP-UX, both of which have a problem in the UDP 516 implementation. You can define it to be 0 to explicitly 517 turn off IDENT protocol support. If defined off, the code 518 is actually still compiled in, but it defaults off; you 519 can turn it on by setting the IDENT timeout in the 520 configuration file. 521IP_SRCROUTE Define this to 1 to get IP source routing information 522 displayed in the Received: header. This is assumed on 523 most systems, but some (e.g., Ultrix) apparently have a 524 broken version of getsockopt that doesn't properly 525 support the IP_OPTIONS call. You probably want this if 526 your OS can cope with it. Symptoms of failure will be that 527 it won't compile properly (that is, no support for fetching 528 IP_OPTIONs), or it compiles but source-routed TCP connections 529 either refuse to open or open and hang for no apparent reason. 530 Ultrix and AIX3 are known to fail this way. 531LOG Set this to get syslog(3) support. Defined by default 532 in conf.h. You want this if at all possible. 533NETINET Set this to get TCP/IP support. Defined by default 534 in conf.h. You probably want this. 535NETINET6 Set this to get IPv6 support. Other configuration may 536 be needed in conf.h for your particular operating system. 537 Also, DaemonPortOptions must be set appropriately for 538 sendmail to accept IPv6 connections. 539NETISO Define this to get ISO networking support. 540NETUNIX Define this to get Unix domain networking support. Defined 541 by default. A few bizarre systems (SCO, ISC, Altos) don't 542 support this networking domain. 543NETNS Define this to get NS networking support. 544NETX25 Define this to get X.25 networking support. 545NAMED_BIND If non-zero, include DNS (name daemon) support, including 546 MX support. The specs say you must use this if you run 547 SMTP. You don't have to be running a name server daemon 548 on your machine to need this -- any use of the DNS resolver, 549 including remote access to another machine, requires this 550 option. Defined by default in conf.h. Define it to zero 551 ONLY on machines that do not use DNS in any way. 552MATCHGECOS Permit fuzzy matching of user names against the full 553 name (GECOS) field in the /etc/passwd file. This should 554 probably be on, since you can disable it from the config 555 file if you want to. Defined by default in conf.h. 556MIME8TO7 If non-zero, include 8 to 7 bit MIME conversions. This 557 also controls advertisement of 8BITMIME in the ESMTP 558 startup dialogue. 559MIME7TO8 If non-zero, include 7 to 8 bit MIME conversions. 560HES_GETMAILHOST Define this to 1 if you are using Hesiod with the 561 hes_getmailhost() routine. This is included with the MIT 562 Hesiod distribution, but not with the DEC Hesiod distribution. 563XDEBUG Do additional internal checking. These don't cost too 564 much; you might as well leave this on. 565TCPWRAPPERS Turns on support for the TCP wrappers library (-lwrap). 566 See below for further information. 567SECUREWARE Enable calls to the SecureWare luid enabling/changing routines. 568 SecureWare is a C2 security package added to several UNIX's 569 (notably ConvexOS) to get a C2 Secure system. This 570 option causes mail delivery to be done with the luid of the 571 recipient. 572SHARE_V1 Support for the fair share scheduler, version 1. Setting to 573 1 causes final delivery to be done using the recipients 574 resource limitations. So far as I know, this is only 575 supported on ConvexOS. 576SASL Enables SMTP AUTH (RFC 2554). This requires the Cyrus SASL 577 library (ftp://ftp.andrew.cmu.edu/pub/cyrus-mail/). Please 578 install at least version 1.5.13. See below for further 579 information: SASL COMPILATION AND CONFIGURATION. If your 580 SASL library is older than 1.5.10, you have to set this 581 to its version number using a simple conversion: a.b.c 582 -> c + b*100 + a*10000, e.g. for 1.5.9 define SASL=10509. 583 Note: Using an older version than 1.5.5 of Cyrus SASL is 584 not supported. Starting with version 1.5.10, setting SASL=1 585 is sufficient. Any value other than 1 (or 0) will be 586 compared with the actual version found and if there is a 587 mismatch, compilation will fail. 588EGD Define this if your system has EGD installed, see 589 http://www.lothar.com/tech/crypto/ . It should be used to 590 seed the PRNG for STARTTLS if HASURANDOMDEV is not defined. 591STARTTLS Enables SMTP STARTTLS (RFC 2487). This requires OpenSSL 592 (http://www.OpenSSL.org/); use OpenSSL 0.9.5a or later 593 (if compatible with this version), do not use 0.9.3. 594 See STARTTLS COMPILATION AND CONFIGURATION for further 595 information. 596TLS_NO_RSA Turn off support for RSA algorithms in STARTTLS. 597MILTER Turn on support for external filters using the Milter API. 598 See libmilter/README for more information. 599REQUIRES_DIR_FSYNC Turn on support for file systems that require to 600 call fsync() for a directory if the meta-data in it has 601 been changed. This should be turned on at least for 602 ReiserFS; it is enabled by default for Linux. An alternative 603 to this compile time flag is to mount the queue directory 604 without the -async option, or using chattr +S on Linux. 605 606Generic notice: If you enable a compile time option that needs 607libraries or include files that don't come with sendmail or are 608installed in a location that your C compiler doesn't use by default 609you should set confINCDIRS and confLIBDIRS as explained in the 610first section: BUILDING SENDMAIL. 611 612 613+---------------------+ 614| DNS/RESOLVER ISSUES | 615+---------------------+ 616 617Many systems have old versions of the resolver library. At a minimum, 618you should be running BIND 4.8.3; older versions may compile, but they 619have known bugs that should give you pause. 620 621Common problems in old versions include "undefined" errors for 622dn_skipname. 623 624Some people have had a problem with BIND 4.9; it uses some routines 625that it expects to be externally defined such as strerror(). It may 626help to link with "-l44bsd" to solve this problem. This has apparently 627been fixed in later versions of BIND, starting around 4.9.3. In other 628words, if you use 4.9.0 through 4.9.2, you need -l44bsd; for earlier or 629later versions, you do not. 630 631!PLEASE! be sure to link with the same version of the resolver as 632the header files you used -- some people have used the 4.9 headers 633and linked with BIND 4.8 or vice versa, and it doesn't work. 634Unfortunately, it doesn't fail in an obvious way -- things just 635subtly don't work. 636 637WILDCARD MX RECORDS ARE A BAD IDEA! The only situation in which they 638work reliably is if you have two versions of DNS, one in the real world 639which has a wildcard pointing to your firewall, and a completely 640different version of the database internally that does not include 641wildcard MX records that match your domain. ANYTHING ELSE WILL GIVE 642YOU HEADACHES! 643 644When attempting to canonify a hostname, some broken name servers will 645return SERVFAIL (a temporary failure) on T_AAAA (IPv6) lookups. If you 646want to excuse this behavior, include WorkAroundBrokenAAAA in 647ResolverOptions. However, instead, we recommend catching the problem and 648reporting it to the name server administrator so we can rid the world of 649broken name servers. 650 651 652+----------------------------------------+ 653| STARTTLS COMPILATION AND CONFIGURATION | 654+----------------------------------------+ 655 656Please read the documentation accompanying the OpenSSL library. You 657have to compile and install the OpenSSL libraries before you can compile 658sendmail. See devtools/README how to set the correct compile time 659parameters; you should at least set the following variables: 660 661APPENDDEF(`conf_sendmail_ENVDEF', `-DSTARTTLS') 662APPENDDEF(`conf_sendmail_LIBS', `-lssl -lcrypto') 663 664If you have installed the OpenSSL libraries and include files in 665a location that your C compiler doesn't use by default you should 666set confINCDIRS and confLIBDIRS as explained in the first section: 667BUILDING SENDMAIL. 668 669Configuration information can be found in doc/op/op.me (required 670certificates) and cf/README (how to tell sendmail about certificates). 671 672To perform an initial test, connect to your sendmail daemon 673(telnet localhost 25) and issue a EHLO localhost and see whether 674250-STARTTLS 675is in the response. If it isn't, run the daemon with 676-O LogLevel=14 677and try again. Then take a look at the logfile and see whether 678there are any problems listed about permissions (unsafe files) 679or the validity of X.509 certificates. 680 681Further information can be found via: 682http://www.sendmail.org/tips/ 683 684 685+------------------------------------+ 686| SASL COMPILATION AND CONFIGURATION | 687+------------------------------------+ 688 689Please read the documentation accompanying the Cyrus SASL library 690(INSTALL and README). If you use Berkeley DB for Cyrus SASL then 691you must compile sendmail with the same version of Berkeley DB. 692See devtools/README how to set the correct compile time parameters; 693you should at least set the following variables: 694 695APPENDDEF(`conf_sendmail_ENVDEF', `-DSASL') 696APPENDDEF(`conf_sendmail_LIBS', `-lsasl') 697 698If you have installed the Cyrus SASL library and include files in 699a location that your C compiler doesn't use by default you should 700set confINCDIRS and confLIBDIRS as explained in the first section: 701BUILDING SENDMAIL. 702 703You have to select and install authentication mechanisms and tell 704sendmail where to find the sasl library and the include files (see 705devtools/README for the parameters to set). Setup the required 706users and passwords as explained in the SASL documentation. See 707also cf/README for authentication related options (especially 708DefaultAuthInfo if you want authentication between MTAs). 709 710To perform an initial test, connect to your sendmail daemon 711(telnet localhost 25) and issue a EHLO localhost and see whether 712250-AUTH .... 713is in the response. If it isn't, run the daemon with 714-O LogLevel=14 715and try again. Then take a look at the logfile and see whether 716there are any security related problems listed (unsafe files). 717 718Further information can be found via: 719http://www.sendmail.org/tips/ 720 721 722+-------------------------------------+ 723| OPERATING SYSTEM AND COMPILE QUIRKS | 724+-------------------------------------+ 725 726GCC problems 727 When compiling with "gcc -O -Wall" specify "-DSM_OMIT_BOGUS_WARNINGS" 728 too (see include/sm/cdefs.h for more info). 729 730 ***************************************************************** 731 ** IMPORTANT: DO NOT USE OPTIMIZATION (``-O'') IF YOU ARE ** 732 ** RUNNING GCC 2.4.x or 2.5.x. THERE IS A BUG IN THE GCC ** 733 ** OPTIMIZER THAT CAUSES SENDMAIL COMPILES TO FAIL MISERABLY. ** 734 ***************************************************************** 735 736 Jim Wilson of Cygnus believes he has found the problem -- it will 737 probably be fixed in GCC 2.5.6 -- but until this is verified, be 738 very suspicious of gcc -O. This problem is reported to have been 739 fixed in gcc 2.6. 740 741 A bug in gcc 2.5.5 caused problems compiling sendmail 8.6.5 with 742 optimization on a Sparc. If you are using gcc 2.5.5, youi should 743 upgrade to the latest version of gcc. 744 745 Apparently GCC 2.7.0 on the Pentium processor has optimization 746 problems. I recommend against using -O on that architecture. This 747 has been seen on FreeBSD 2.0.5 RELEASE. 748 749 Solaris 2.X users should use version 2.7.2.3 over 2.7.2. 750 751 We have been told there are problems with gcc 2.8.0. If you are 752 using this version, you should upgrade to 2.8.1 or later. 753 754GDBM GDBM does not work with sendmail 8.8 because the additional 755 security checks and file locking cause problems. Unfortunately, 756 gdbm does not provide a compile flag in its version of ndbm.h so 757 the code can adapt. Until the GDBM authors can fix these problems, 758 GDBM will not be supported. Please use Berkeley DB instead. 759 760Configuration file location 761 Up to 8.6, sendmail tried to find the sendmail.cf file in the same 762 place as the vendors had put it, even when this was obviously 763 stupid. As of 8.7, sendmail ALWAYS looks for /etc/sendmail.cf. 764 Beginning with 8.10, sendmail uses /etc/mail/sendmail.cf. 765 You can get sendmail to use the stupid vendor .cf location by 766 adding -DUSE_VENDOR_CF_PATH during compilation, but this may break 767 support programs and scripts that need to find sendmail.cf. You 768 are STRONGLY urged to use symbolic links if you want to use the 769 vendor location rather than changing the location in the sendmail 770 binary. 771 772 NETINFO systems use NETINFO to determine the location of 773 sendmail.cf. The full path to sendmail.cf is stored as the value of 774 the "sendmail.cf" property in the "/locations/sendmail" 775 subdirectory of NETINFO. Set the value of this property to 776 "/etc/mail/sendmail.cf" (without the quotes) to use this new 777 default location for Sendmail 8.10.0 and higher. 778 779ControlSocket permissions 780 Paraphrased from BIND 8.2.1's README: 781 782 Solaris and other pre-4.4BSD kernels do not respect ownership or 783 protections on UNIX-domain sockets. The short term fix for this is to 784 override the default path and put such control sockets into root- 785 owned directories which do not permit non-root to r/w/x through them. 786 The long term fix is for all kernels to upgrade to 4.4BSD semantics. 787 788HP MPE/iX 789 The MPE-specific code within sendmail emulates a set-user-id root 790 environment for the sendmail binary. But there is no root uid 0 on 791 MPE, nor is there any support for set-user-id programs. Even when 792 sendmail thinks it is running as uid 0, it will still have the file 793 access rights of the underlying non-zero uid, but because sendmail is 794 an MPE priv-mode program it will still be able to call setuid() to 795 successfully switch to a new uid. 796 797 MPE setgid() semantics don't quite work the way sendmail expects, so 798 special emulation is done here also. 799 800 This uid/gid emulation is enabled via the setuid/setgid file mode bits 801 which are not currently used by MPE. Code in libsm/mpeix.c examines 802 these bits and enables emulation if they have been set, i.e., 803 chmod u+s,g+s /SENDMAIL/CURRENT/SENDMAIL. 804 805SunOS 4.x (Solaris 1.x) 806 You may have to use -lresolv on SunOS. However, beware that 807 this links in a new version of gethostbyname that does not 808 understand NIS, so you must have all of your hosts in DNS. 809 810 Some people have reported problems with the SunOS version of 811 -lresolv and/or in.named, and suggest that you get a newer 812 version. The symptoms are delays when you connect to the 813 SMTP server on a SunOS machine or having your domain added to 814 addresses inappropriately. There is a version of BIND 815 version 4.9 on gatekeeper.DEC.COM in pub/BSD/bind/4.9. 816 817 There is substantial disagreement about whether you can make 818 this work with resolv+, which allows you to specify a search-path 819 of services. Some people report that it works fine, others 820 claim it doesn't work at all (including causing sendmail to 821 drop core when it tries to do multiple resolv+ lookups for a 822 single job). I haven't tried resolv+, as we use DNS exclusively. 823 824 Should you want to try resolv+, it is on ftp.uu.net in 825 /networking/ip/dns. 826 827 Apparently getservbyname() can fail under moderate to high 828 load under some circumstances. This will exhibit itself as 829 the message ``554 makeconnection: service "smtp" unknown''. 830 The problem has been traced to one or more blank lines in 831 /etc/services on the NIS server machine. Delete these 832 and it should work. This info is thanks to Brian Bartholomew 833 <bb@math.ufl.edu> of I-Kinetics, Inc. 834 835 NOTE: The SunOS 4.X linker uses library paths specified during 836 compilation using -L for run-time shared library searches. 837 Therefore, it is vital that relative and unsafe directory paths not 838 be used when compiling sendmail. 839 840SunOS 4.0.2 (Sun 386i) 841 Date: Fri, 25 Aug 1995 11:13:58 +0200 (MET DST) 842 From: teus@oce.nl 843 844 Sendmail 8.7.Beta.12 compiles and runs nearly out of the box with the 845 following changes: 846 * Don't use /usr/5bin in your PATH, but make /usr/5bin/uname 847 available as "uname" command. 848 * Use the defines "-DBSD4_3 -DNAMED_BIND=0" in 849 devtools/OS/SunOS.4.0, which is selected via the "uname" command. 850 I recommend to make available the db-library on the system first 851 (and change the Makefile to use this library). 852 Note that the sendmail.cf and aliases files are found in /etc. 853 854SunOS 4.1.3, 4.1.3_U1 855 Sendmail causes crashes on SunOS 4.1.3 and 4.1.3_U1. According 856 to Sun bug number 1077939: 857 858 If an application does a getsockopt() on a SOCK_STREAM (TCP) socket 859 after the other side of the connection has sent a TCP RESET for 860 the stream, the kernel gets a Bus Trap in the tcp_ctloutput() or 861 ip_ctloutput() routine. 862 863 For 4.1.3, this is fixed in patch 100584-08, available on the 864 Sunsolve 2.7.1 or later CDs. For 4.1.3_U1, this was fixed in patch 865 101790-01 (SunOS 4.1.3_U1: TCP socket and reset problems), later 866 obsoleted by patch 102010-05. 867 868 Sun patch 100584-08 is not currently publicly available on their 869 ftp site but a user has reported it can be found at other sites 870 using a web search engine. 871 872Solaris 2.x (SunOS 5.x) 873 To compile for Solaris, the Makefile built by Build must 874 include a SOLARIS definition which reflects the Solaris version 875 (i.e. -DSOLARIS=20400 for 2.4 or -DSOLARIS=20501 for 2.5.1). 876 If you are using gcc, make sure -I/usr/include is not used (or 877 it might complain about TopFrame). If you are using Sun's cc, 878 make sure /opt/SUNWspro/bin/cc is used instead of /usr/ucb/cc 879 (or it might complain about tm_zone). 880 881 The Solaris "syslog" function is apparently limited to something 882 about 90 characters because of a kernel limitation. If you have 883 source code, you can probably up this number. You can get patches 884 that fix this problem: the patch ids are: 885 886 Solaris 2.1 100834 887 Solaris 2.2 100999 888 Solaris 2.3 101318 889 890 Be sure you have the appropriate patch installed or you won't 891 see system logging. 892 893Solaris 2.4 (SunOS 5.4) 894 If you include /usr/lib at the end of your LD_LIBRARY_PATH you run 895 the risk of getting the wrong libraries under some circumstances. 896 This is because of a new feature in Solaris 2.4, described by 897 Rod.Evans@Eng.Sun.COM: 898 899 >> Prior to SunOS 5.4, any LD_LIBRARY_PATH setting was ignored by the 900 >> runtime linker if the application was setxid (secure), thus your 901 >> applications search path would be: 902 >> 903 >> /usr/local/lib LD_LIBRARY_PATH component - IGNORED 904 >> /usr/lib LD_LIBRARY_PATH component - IGNORED 905 >> /usr/local/lib RPATH - honored 906 >> /usr/lib RPATH - honored 907 >> 908 >> the effect is that path 3 would be the first used, and this would 909 >> satisfy your resolv.so lookup. 910 >> 911 >> In SunOS 5.4 we made the LD_LIBRARY_PATH a little more flexible. 912 >> People who developed setxid applications wanted to be able to alter 913 >> the library search path to some degree to allow for their own 914 >> testing and debugging mechanisms. It was decided that the only 915 >> secure way to do this was to allow a `trusted' path to be used in 916 >> LD_LIBRARY_PATH. The only trusted directory we presently define 917 >> is /usr/lib. Thus a set-user-ID root developer could play with some 918 >> alternative shared object implementations and place them in 919 >> /usr/lib (being root we assume they'ed have access to write in this 920 >> directory). This change was made as part of 1155380 - after a 921 >> *huge* amount of discussion regarding the security aspect of things. 922 >> 923 >> So, in SunOS 5.4 your applications search path would be: 924 >> 925 >> /usr/local/lib from LD_LIBRARY_PATH - IGNORED (untrustworthy) 926 >> /usr/lib from LD_LIBRARY_PATH - honored (trustworthy) 927 >> /usr/local/lib from RPATH - honored 928 >> /usr/lib from RPATH - honored 929 >> 930 >> here, path 2 would be the first used. 931 932Solaris 2.5.1 (SunOS 5.5.1) and 2.6 (SunOS 5.6) 933 Apparently Solaris 2.5.1 patch 103663-01 installs a new 934 /usr/include/resolv.h file that defines the __P macro without 935 checking to see if it is already defined. This new resolv.h is also 936 included in the Solaris 2.6 distribution. This causes compile 937 warnings such as: 938 939 In file included from daemon.c:51: 940 /usr/include/resolv.h:208: warning: `__P' redefined 941 cdefs.h:58: warning: this is the location of the previous definition 942 943 These warnings can be safely ignored or you can create a resolv.h 944 file in the obj.SunOS.5.5.1.* or obj.SunOS.5.6.* directory that reads: 945 946 #undef __P 947 #include "/usr/include/resolv.h" 948 949 This problem was fixed in Solaris 7 (Sun bug ID 4081053). 950 951Solaris 7 (SunOS 5.7) 952 Solaris 7 includes LDAP libraries but the implementation was 953 lacking a few things. The following settings can be placed in 954 devtools/Site/site.SunOS.5.7.m4 if you plan on using those 955 libraries. 956 957 APPENDDEF(`confMAPDEF', `-DLDAPMAP') 958 APPENDDEF(`confENVDEF', `-DLDAP_VERSION_MAX=3') 959 APPENDDEF(`confLIBS', `-lldap') 960 961 Also, Sun's patch 107555 is needed to prevent a crash in the call 962 to ldap_set_option for LDAP_OPT_REFERRALS in ldapmap_setopts if 963 LDAP support is compiled in sendmail. 964 965Solaris 8 and later (SunOS 5.8 and later) 966 Solaris 8 and later can optionally install LDAP support. If you 967 have installed the Entire Distribution meta-cluster, you can use 968 the following in devtools/Site/site.SunOS.5.8.m4 (or other 969 appropriately versioned file) to enable LDAP: 970 971 APPENDDEF(`confMAPDEF', `-DLDAPMAP') 972 APPENDDEF(`confLIBS', `-lldap') 973 974Solaris 9 and later (SunOS 5.9 and later) 975 Solaris 9 and later have a revised LDAP library, libldap.so.5, 976 which is derived from a Netscape implementation, thus requiring 977 that USING_NETSCAPE_LDAP be defined in conjunction with LDAPMAP: 978 979 APPENDDEF(`confMAPDEF', `-DLDAPMAP -DUSING_NETSCAPE_LDAP') 980 APPENDDEF(`confLIBS', `-lldap') 981 982Solaris 983 If you are using dns for hostname resolution on Solaris, make sure 984 that the 'dns' entry is last on the hosts line in 985 '/etc/nsswitch.conf'. For example, use: 986 987 hosts: nisplus files dns 988 989 Do not use: 990 991 host: nisplus dns [NOTFOUND=return] files 992 993 Note that 'nisplus' above is an illustration. The same comment 994 applies no matter what naming services you are using. If you have 995 anything other than dns last, even after "[NOTFOUND=return]", 996 sendmail may not be able to determine whether an error was 997 temporary or permanent. The error returned by the solaris 998 gethostbyname() is the error for the last lookup used, and other 999 naming services do not have the same concept of temporary failure. 1000 1001Ultrix 1002 By default, the IDENT protocol is turned off on Ultrix. If you 1003 are running Ultrix 4.4 or later, or if you have included patch 1004 CXO-8919 for Ultrix 4.2 or 4.3 to fix the TCP problem, you can turn 1005 IDENT on in the configuration file by setting the "ident" timeout. 1006 1007 The Ultrix 4.5 Y2K patch (ULTV45-022-1) has changed the resolver 1008 included in libc.a. Unfortunately, the __RES symbol hasn't changed 1009 and therefore, sendmail can no longer automatically detect the 1010 newer version. If you get a compiler error: 1011 1012 /lib/libc.a(gethostent.o): local_hostname_length: multiply defined 1013 1014 Then rebuild with this in devtools/Site/site.ULTRIX.m4: 1015 1016 APPENDDEF(`conf_sendmail_ENVDEF', `-DNEEDLOCAL_HOSTNAME_LENGTH=0') 1017 1018Digital UNIX (formerly DEC OSF/1) 1019 If you are compiling on OSF/1 (DEC Alpha), you must use 1020 -L/usr/shlib (otherwise it core dumps on startup). You may also 1021 need -mld to get the nlist() function, although some versions 1022 apparently don't need this. 1023 1024 Also, the enclosed makefile removed /usr/sbin/smtpd; if you need 1025 it, just create the link to the sendmail binary. 1026 1027 On DEC OSF/1 3.2 or earlier, the MatchGECOS option doesn't work 1028 properly due to a bug in the getpw* routines. If you want to use 1029 this, use -DDEC_OSF_BROKEN_GETPWENT=1. The problem is fixed in 3.2C. 1030 1031 Digital's mail delivery agent, /bin/mail (aka /bin/binmail), will 1032 only preserve the envelope sender in the "From " header if 1033 DefaultUserID is set to daemon. Setting this to mailnull will 1034 cause all mail to have the header "From mailnull ...". To use 1035 a different DefaultUserID, you will need to use a different mail 1036 delivery agent (such as mail.local found in the sendmail 1037 distribution). 1038 1039 On Digital UNIX 4.0 and later, Berkeley DB 1.85 is included with the 1040 operating system and already has the ndbm.o module removed. However, 1041 Digital has modified the original Berkeley DB db.h include file. 1042 This results in the following warning while compiling map.c and udb.c: 1043 1044 cc: Warning: /usr/include/db.h, line 74: The redefinition of the macro 1045 "__signed" conflicts with a current definition because the replacement 1046 lists differ. The redefinition is now in effect. 1047 #define __signed signed 1048 ------------------------^ 1049 1050 This warning can be ignored. 1051 1052 Digital UNIX's linker checks /usr/ccs/lib/ before /usr/lib/. 1053 If you have installed a new version of BIND in /usr/include 1054 and /usr/lib, you will experience difficulties as Digital ships 1055 libresolv.a in /usr/ccs/lib/ as well. Be sure to replace both 1056 copies of libresolv.a. 1057 1058IRIX 1059 The header files on SGI IRIX are completely prototyped, and as 1060 a result you can sometimes get some warning messages during 1061 compilation. These can be ignored. There are two errors in 1062 deliver only if you are using gcc, both of the form ``warning: 1063 passing arg N of `execve' from incompatible pointer type''. 1064 Also, if you compile with -DNIS, you will get a complaint 1065 about a declaration of struct dom_binding in a prototype 1066 when compiling map.c; this is not important because the 1067 function being prototyped is not used in that file. 1068 1069 In order to compile sendmail you will have had to install 1070 the developers' option in order to get the necessary include 1071 files. 1072 1073 If you compile with -lmalloc (the fast memory allocator), you may 1074 get warning messages such as the following: 1075 1076 ld32: WARNING 85: definition of _calloc in /usr/lib32/libmalloc.so 1077 preempts that definition in /usr/lib32/mips3/libc.so. 1078 ld32: WARNING 85: definition of _malloc in /usr/lib32/libmalloc.so 1079 preempts that definition in /usr/lib32/mips3/libc.so. 1080 ld32: WARNING 85: definition of _realloc in /usr/lib32/libmalloc.so 1081 preempts that definition in /usr/lib32/mips3/libc.so. 1082 ld32: WARNING 85: definition of _free in /usr/lib32/libmalloc.so 1083 preempts that definition in /usr/lib32/mips3/libc.so. 1084 ld32: WARNING 85: definition of _cfree in /usr/lib32/libmalloc.so 1085 preempts that definition in /usr/lib32/mips3/libc.so. 1086 1087 These are unavoidable and innocuous -- just ignore them. 1088 1089 According to Dave Sill <de5@ornl.gov>, there is a version of the 1090 Berkeley DB library patched to run on Irix 6.2 available from 1091 http://reality.sgi.com/ariel/freeware/#db . 1092 1093IRIX 6.x 1094 If you are using XFS filesystem, avoid using the -32 ABI switch to 1095 the cc compiler if possible. 1096 1097 Broken inet_aton and inet_ntoa on IRIX using gcc: There's 1098 a problem with gcc on IRIX, i.e., gcc can't pass structs 1099 less than 16 bits long unless they are 8 bits; IRIX 6.2 has 1100 some other sized structs. See 1101 http://www.bitmechanic.com/mail-archives/mysql/current/0418.html 1102 This problem seems to be fixed by gcc v2.95.2, gcc v2.8.1 1103 is reported as broken. Check your gcc version for this bug 1104 before installing sendmail. 1105 1106IRIX 6.4 1107 The IRIX 6.5.4 version of /bin/m4 does not work properly with 1108 sendmail. Either install fw_m4.sw.m4 off the Freeware_May99 CD and 1109 use /usr/freeware/bin/m4 or install and use GNU m4. 1110 1111NeXT or NEXTSTEP 1112 NEXTSTEP 3.3 and earlier ship with the old DBM library. Also, 1113 Berkeley DB does not currently run on NEXTSTEP. 1114 1115 If you are compiling on NEXTSTEP, you will have to create an 1116 empty file "unistd.h" and create a file "dirent.h" containing: 1117 1118 #include <sys/dir.h> 1119 #define dirent direct 1120 1121 (devtools/OS/NeXT should try to do both of these for you.) 1122 1123 Apparently, there is a bug in getservbyname on Nextstep 3.0 1124 that causes it to fail under some circumstances with the 1125 message "SYSERR: service "smtp" unknown" logged. You should 1126 be able to work around this by including the line: 1127 1128 OOPort=25 1129 1130 in your .cf file. 1131 1132BSDI (BSD/386) 1.0, NetBSD 0.9, FreeBSD 1.0 1133 The "m4" from BSDI won't handle the config files properly. 1134 I haven't had a chance to test this myself. 1135 1136 The M4 shipped in FreeBSD and NetBSD 0.9 don't handle the config 1137 files properly. One must use either GNU m4 1.1 or the PD-M4 1138 recently posted in comp.os.386bsd.bugs (and maybe others). 1139 NetBSD-current includes the PD-M4 (as stated in the NetBSD file 1140 CHANGES). 1141 1142 FreeBSD 1.0 RELEASE has uname(2) now. Use -DUSEUNAME in order to 1143 use it (look into devtools/OS/FreeBSD). NetBSD-current may have 1144 it too but it has not been verified. 1145 1146 The latest version of Berkeley DB uses a different naming 1147 scheme than the version that is supplied with your release. This 1148 means you will be able to use the current version of Berkeley DB 1149 with sendmail as long you use the new db.h when compiling 1150 sendmail and link it against the new libdb.a or libdb.so. You 1151 should probably keep the original db.h in /usr/include and the 1152 new db.h in /usr/local/include. 1153 11544.3BSD 1155 If you are running a "virgin" version of 4.3BSD, you'll have 1156 a very old resolver and be missing some header files. The 1157 header files are simple -- create empty versions and everything 1158 will work fine. For the resolver you should really port a new 1159 version (4.8.3 or later) of the resolver; 4.9 is available on 1160 gatekeeper.DEC.COM in pub/BSD/bind/4.9. If you are really 1161 determined to continue to use your old, buggy version (or as 1162 a shortcut to get sendmail working -- I'm sure you have the 1163 best intentions to port a modern version of BIND), you can 1164 copy ../contrib/oldbind.compat.c into sendmail and add the 1165 following to devtools/Site/site.config.m4: 1166 1167 APPENDDEF(`confOBJADD', `oldbind.compat.o') 1168 1169OpenBSD (up to 2.9 Release), NetBSD, FreeBSD (up to 4.3-RELEASE) 1170 m4 from *BSD won't handle libsm/Makefile.m4 properly, since the 1171 maximum length for strings is too short. You need to use GNU m4 1172 or patch m4, see for example: 1173 http://FreeBSD.org/cgi/cvsweb.cgi/src/usr.bin/m4/eval.c.diff?r1=1.11&r2=1.12 1174 1175A/UX 1176 Date: Tue, 12 Oct 1993 18:28:28 -0400 (EDT) 1177 From: "Eric C. Hagberg" <hagberg@med.cornell.edu> 1178 Subject: Fix for A/UX ndbm 1179 1180 I guess this isn't really a sendmail bug, however, it is something 1181 that A/UX users should be aware of when compiling sendmail 8.6. 1182 1183 Apparently, the calls that sendmail is using to the ndbm routines 1184 in A/UX 3.0.x contain calls to "broken" routines, in that the 1185 aliases database will break when it gets "just a little big" 1186 (sorry I don't have exact numbers here, but it broke somewhere 1187 around 20-25 aliases for me.), making all aliases non-functional 1188 after exceeding this point. 1189 1190 What I did was to get the gnu-dbm-1.6 package, compile it, and 1191 then re-compile sendmail with "-lgdbm", "-DNDBM", and using the 1192 ndbm.h header file that comes with the gnu-package. This makes 1193 things behave properly. 1194 [NOTE: see comment above about GDBM] 1195 1196 I suppose porting the New Berkeley DB package is another route, 1197 however, I made a quick attempt at it, and found it difficult 1198 (not easy at least); the gnu-dbm package "configured" and 1199 compiled easily. 1200 1201 [NOTE: Berkeley DB version 2.X runs on A/UX and can be used for 1202 database maps.] 1203 1204SCO Unix 1205 From: Thomas Essebier <tom@stallion.oz.au> 1206 Organisation: Stallion Technologies Pty Ltd. 1207 1208 It will probably help those who are trying to configure sendmail 8.6.9 1209 to know that if they are on SCO, they had better set 1210 OI-dnsrch 1211 or they will core dump as soon as they try to use the resolver. 1212 i.e., although SCO has _res.dnsrch defined, and is kinda BIND 4.8.3, 1213 it does not inititialise it, nor does it understand 'search' in 1214 /etc/named.boot. 1215 - sigh - 1216 1217 According to SCO, the m4 which ships with UnixWare 2.1.2 is broken. 1218 We recommend installing GNU m4 before attempting to build sendmail. 1219 1220 On some versions a bogus error value is listed if connections 1221 time out (large negative number). To avoid this explicitly set 1222 Timeout.connect to a reasonable value (several minutes). 1223 1224DG/UX 1225 Doug Anderson <dlander@afterlife.ncsc.mil> has successfully run 1226 V8 on the DG/UX 5.4.2 and 5.4R3.x platforms under heavy usage. 1227 Originally, the DG /bin/mail program wasn't compatible with 1228 the V8 sendmail, since the DG /bin/mail requires the environment 1229 variable "_FORCE_MAIL_LOCAL_=yes" be set. Version 8.7 now includes 1230 this in the environment before invoking the local mailer. Some 1231 have used procmail to avoid this problem in the past. It works 1232 but some have experienced file locking problems with their DG/UX 1233 ports of procmail. 1234 1235Apollo DomainOS 1236 If you are compiling on Apollo, you will have to create an empty 1237 file "unistd.h" (for DomainOS 10.3 and earlier) and create a file 1238 "dirent.h" containing: 1239 1240 #include <sys/dir.h> 1241 #define dirent direct 1242 1243 (devtools/OS/DomainOS will attempt to do both of these for you.) 1244 1245HP-UX 8.00 1246 Date: Mon, 24 Jan 1994 13:25:45 +0200 1247 From: Kimmo Suominen <Kimmo.Suominen@lut.fi> 1248 Subject: 8.6.5 w/ HP-UX 8.00 on s300 1249 1250 Just compiled and fought with sendmail 8.6.5 on a HP9000/360 (i.e., 1251 a series 300 machine) running HP-UX 8.00. 1252 1253 I was getting segmentation fault when delivering to a local user. 1254 With debugging I saw it was faulting when doing _free@libc... *sigh* 1255 It seems the new implementation of malloc on s300 is buggy as of 8.0, 1256 so I tried out the one in -lmalloc (malloc(3X)). With that it seems 1257 to work just dandy. 1258 1259 When linking, you will get the following error: 1260 1261 ld: multiply defined symbol _freespace in file /usr/lib/libmalloc.a 1262 1263 but you can just ignore it. You might want to add this info to the 1264 README file for the future... 1265 1266Linux 1267 Something broke between versions 0.99.13 and 0.99.14 of Linux: 1268 the flock() system call gives errors. If you are running .14, 1269 you must not use flock. You can do this with -DHASFLOCK=0. 1270 1271 Around the inclusion of bind-4.9.3 & Linux libc-4.6.20, the 1272 initialization of the _res structure changed. If /etc/hosts.conf 1273 was configured as "hosts, bind" the resolver code could return 1274 "Name server failure" errors. This is supposedly fixed in 1275 later versions of libc (>= 4.6.29?), and later versions of 1276 sendmail (> 8.6.10) try to work around the problem. 1277 1278 Some older versions (< 4.6.20?) of the libc/include files conflict 1279 with sendmail's version of cdefs.h. Deleting sendmail's version 1280 on those systems should be non-harmful, and new versions don't care. 1281 1282 NOTE ON LINUX & BIND: By default, the Makefile generated for Linux 1283 includes header files in /usr/local/include and libraries in 1284 /usr/local/lib. If you've installed BIND on your system, the header 1285 files typically end up in the search path and you need to add 1286 "-lresolv" to the LIBS line in your Makefile. Really old versions 1287 may need to include "-l44bsd" as well (particularly if the link phase 1288 complains about missing strcasecmp, strncasecmp or strpbrk). 1289 Complaints about an undefined reference to `__dn_skipname' in 1290 domain.o are a sure sign that you need to add -lresolv to LIBS. 1291 Newer versions of Linux are basically threaded BIND, so you may or 1292 may not see complaints if you accidentally mix BIND 1293 headers/libraries with virginal libc. If you have BIND headers in 1294 /usr/local/include (resolv.h, etc) you *should* be adding -lresolv 1295 to LIBS. Data structures may change and you'd be asking for a 1296 core dump. 1297 1298 A number of problems have been reported regarding the Linux 2.2.0 1299 kernel. So far, these problems have been tracked down to syslog() 1300 and DNS resolution. We believe the problem is with the poll() 1301 implementation in the Linux 2.2.0 kernel and poll()-aware versions 1302 of glib (at least up to 2.0.111). 1303 1304glibc 1305 glibc 2.2.1 (and possibly other versions) changed the value of 1306 __RES in resolv.h but failed to actually provide the IPv6 API 1307 changes that the change implied. Therefore, compiling with 1308 -DNETINET6 fails. 1309 1310 Workarounds: 1311 1) Compile without -DNETINET6 1312 2) Build against a real BIND 8.2.2 include/lib tree 1313 3) Wait for glibc to fix it 1314 1315AIX 4.X 1316 The AIX 4.X linker uses library paths specified during compilation 1317 using -L for run-time shared library searches. Therefore, it is 1318 vital that relative and unsafe directory paths not be using when 1319 compiling sendmail. Because of this danger, by default, compiles 1320 on AIX use the -blibpath option to limit shared libraries to 1321 /usr/lib and /lib. If you need to allow more directories, such as 1322 /usr/local/lib, modify your devtools/Site/site.AIX.4.2.m4, 1323 site.AIX.4.3.m4, and/or site.AIX.4.x.m4 file(s) and set confLDOPTS 1324 approriately. For example: 1325 1326 define(`confLDOPTS', `-blibpath:/usr/lib:/lib:/usr/local/lib') 1327 1328 Be sure to only add (safe) system directories. 1329 1330 The AIX version of GNU ld also exhibits this problem. If you are 1331 using that version, instead of -blibpath, use its -rpath option. 1332 For example: 1333 1334 gcc -Wl,-rpath /usr/lib -Wl,-rpath /lib -Wl,-rpath /usr/local/lib 1335 1336AIX 4.X If the test program t-event (and most others) in libsm fails, 1337 check your compiler settings. It seems that the flags -qnoro or 1338 -qnoroconst on some AIX versions trigger a compiler bug. Check 1339 your compiler settings or use cc instead of xlc. 1340 1341AIX 4.0-4.2, maybe some AIX 4.3 versions 1342 The AIX m4 implements a different mechanism for ifdef which is 1343 inconsistent with other versions of m4. Therefore, it will not 1344 work properly with the sendmail Build architecture or m4 1345 configuration method. To work around this problem, please use 1346 GNU m4 from ftp://ftp.gnu.org/pub/gnu/. 1347 The problem seems to be solved in AIX 4.3.3 at least. 1348 1349AIX 4.3.3 1350 From: Valdis.Kletnieks@vt.edu 1351 Date: Sun, 02 Jul 2000 03:58:02 -0400 1352 1353 Under AIX 4.3.3, after applying bos.adt.include 4.3.3.12 to close the 1354 BIND 8.2.2 security holes, you can no longer build with -DNETINET6 1355 because they changed the value of __RES in resolv.h but failed to 1356 actually provide the API changes that the change implied. 1357 1358 Workarounds: 1359 1) Compile without -DNETINET6 1360 2) Build against a real BIND 8.2.2 include/lib tree 1361 3) Wait for IBM to fix it 1362 1363AIX 3.x 1364 This version of sendmail does not support MB, MG, and MR resource 1365 records, which are supported by AIX sendmail. 1366 1367 Several people have reported that the IBM-supplied named returns 1368 fairly random results -- the named should be replaced. It is not 1369 necessary to replace the resolver, which will simplify installation. 1370 A new BIND resolver can be found at http://www.isc.org/isc/. 1371 1372AIX 3.1.x 1373 The supplied load average code only works correctly for AIX 3.2.x. 1374 For 3.1, use -DLA_TYPE=LA_SUBR and get the latest ``monitor'' 1375 package by Jussi Maki <jmaki@hut.fi> from ftp.funet.fi in the 1376 directory pub/unix/AIX/rs6000/monitor-1.12.tar.Z; use the loadavgd 1377 daemon, and the getloadavg subroutine supplied with that package. 1378 If you don't care about load average throttling, just turn off 1379 load average checking using -DLA_TYPE=LA_ZERO. 1380 1381RISC/os 1382 RISC/os from MIPS is a merged AT&T/Berkeley system. When you 1383 compile on that platform you will get duplicate definitions 1384 on many files. You can ignore these. 1385 1386System V Release 4 Based Systems 1387 There is a single devtools OS that is intended for all SVR4-based 1388 systems (built from devtools/OS/SVR4). It defines __svr4__, 1389 which is predefined by some compilers. If your compiler already 1390 defines this compile variable, you can delete the definition from 1391 the generated Makefile or create a devtools/Site/site.config.m4 1392 file. 1393 1394 It's been tested on Dell Issue 2.2. 1395 1396DELL SVR4 1397 Date: Mon, 06 Dec 1993 10:42:29 EST 1398 From: "Kimmo Suominen" <kim@grendel.lut.fi> 1399 Message-ID: <2d0352f9.lento29@lento29.UUCP> 1400 To: eric@cs.berkeley.edu 1401 Cc: sendmail@cs.berkeley.edu 1402 Subject: Notes for DELL SVR4 1403 1404 Eric, 1405 1406 Here are some notes for compiling Sendmail 8.6.4 on DELL SVR4. I ran 1407 across these things when helping out some people who contacted me by 1408 e-mail. 1409 1410 1) Use gcc 2.4.5 (or later?). Dell distributes gcc 2.1 with their 1411 Issue 2.2 Unix. It is too old, and gives you problems with 1412 clock.c, because sigset_t won't get defined in <sys/signal.h>. 1413 This is due to a problematic protection rule in there, and is 1414 fixed with gcc 2.4.5. 1415 1416 2) If you don't use the new Berkeley DB (-DNEWDB), then you need 1417 to add "-lc -lucb" to the libraries to link with. This is because 1418 the -ldbm distributed by Dell needs the bcopy, bcmp and bzero 1419 functions. It is important that you specify both libraries in 1420 the given order to be sure you only get the BSTRING functions 1421 from the UCB library (and not the signal routines etc.). 1422 1423 3) Don't leave out "-lelf" even if compiling with "-lc -lucb". 1424 The UCB library also has another copy of the nlist routines, 1425 but we do want the ones from "-lelf". 1426 1427 If anyone needs a compiled gcc 2.4.5 and/or a ported DB library, they 1428 can use anonymous ftp to fetch them from lut.fi in the /kim directory. 1429 They are copies of what I use on grendel.lut.fi, and offering them 1430 does not imply that I would also support them. I have sent the DB 1431 port for SVR4 back to Keith Bostic for inclusion in the official 1432 distribution, but I haven't heard anything from him as of today. 1433 1434 - gcc-2.4.5-svr4.tar.gz (gcc 2.4.5 and the corresponding libg++) 1435 - db-1.72.tar.gz (with source, objects and a installed copy) 1436 1437 Cheers 1438 + Kim 1439 -- 1440 * Kimmo.Suominen@lut.fi * SysVr4 enthusiast at GRENDEL.LUT.FI * 1441 * KIM@FINFILES.BITNET * Postmaster and Hostmaster at LUT.FI * 1442 * + 358 200 865 718 * Unix area moderator at NIC.FUNET.FI * 1443 1444ConvexOS 10.1 and below 1445 In order to use the name server, you must create the file 1446 /etc/use_nameserver. If this file does not exist, the call 1447 to res_init() will fail and you will have absolutely no 1448 access to DNS, including MX records. 1449 1450Amdahl UTS 2.1.5 1451 In order to get UTS to work, you will have to port BIND 4.9. 1452 The vendor's BIND is reported to be ``totally inadequate.'' 1453 See sendmail/contrib/AmdahlUTS.patch for the patches necessary 1454 to get BIND 4.9 compiled for UTS. 1455 1456UnixWare 1457 According to Alexander Kolbasov <sasha@unitech.gamma.ru>, 1458 the m4 on UnixWare 2.0 (still in Beta) will core dump on the 1459 config files. GNU m4 and the m4 from UnixWare 1.x both work. 1460 1461 According to Larry Rosenman <ler@lerami.lerctr.org>: 1462 1463 UnixWare 2.1.[23]'s m4 chokes (not obviously) when 1464 processing the 8.9.0 cf files. 1465 1466 I had a LOCAL_RULE_0 that wound up AFTER the 1467 SBasic_check_rcpt rules using the SCO supplied M4. 1468 GNU M4 works fine. 1469 1470UNICOS 8.0.3.4 1471 Some people have reported that the -O flag on UNICOS can cause 1472 problems. You may want to turn this off if you have problems 1473 running sendmail. Reported by Jerry G. DeLapp <jgd@acl.lanl.gov>. 1474 1475Mac OS X (10.0.X) 1476 From Mike Zimmerman <zimmy@torrentnet.com>: 1477 1478 From scratch here is what Darwin users need to do to the standard 1479 10.0.0, 10.0.1 install to get sendmail working. 1480 From http://www.macosx.com/forums/showthread.php?s=6dac0e9e1f3fd118a4870a8a9b559491&threadid=2242: 1481 1. chmod g-w / /private /private/etc 1482 2. Properly set HOSTNAME in /etc/hostconfig to your FQDN: 1483 HOSTNAME=-my.domain.com- 1484 3. Edit /etc/rc.boot: 1485 hostname my.domain.com 1486 domainname domain.com 1487 4. Edit /System/Library/StartupItems/Sendmail/Sendmail: 1488 Remove the "&" after the sendmail command: 1489 /usr/sbin/sendmail -bd -q1h 1490 1491 From Carsten Klapp <carsten.klapp@home.com>: 1492 1493 The easiest workaround is to remove the group-writable permission 1494 for the root directory and the symbolic /etc inherits this 1495 change. While this does fix sendmail, the unfortunate side-effect 1496 is the OS X admin will no longer be able to manipulate icons in the 1497 top level of the Startup disk unless logged into the GUI as the 1498 superuser. 1499 1500 In applying the alternate workaround, care must be taken while 1501 swapping the symlink /etc with the directory /private/etc. In all 1502 likelihood any admin who is concerned with this sendmail error has 1503 enough experience to not accidentally harm anything in the process. 1504 1505 a. Swap the /etc symlink with /private/etc (as superuser): 1506 rm /etc 1507 mv /private/etc /etc 1508 ln -s /etc /private/etc 1509 1510 b. Set / to group unwritable (as superuser): 1511 chmod g-w / 1512 1513GNU getopt 1514 I'm told that GNU getopt has a problem in that it gets confused 1515 by the double call. Use the version in conf.c instead. 1516 1517BIND 4.9.2 and Ultrix 1518 If you are running on Ultrix, be sure you read conf/Info.Ultrix 1519 in the BIND distribution very carefully -- there is information 1520 in there that you need to know in order to avoid errors of the 1521 form: 1522 1523 /lib/libc.a(gethostent.o): sethostent: multiply defined 1524 /lib/libc.a(gethostent.o): endhostent: multiply defined 1525 /lib/libc.a(gethostent.o): gethostbyname: multiply defined 1526 /lib/libc.a(gethostent.o): gethostbyaddr: multiply defined 1527 1528 during the link stage. 1529 1530BIND 8.X 1531 BIND 8.X returns HOST_NOT_FOUND instead of TRY_AGAIN on temporary 1532 DNS failures when trying to find the hostname associated with an IP 1533 address (gethostbyaddr()). This can cause problems as 1534 $&{client_name} based lookups in class R ($=R) and the access 1535 database won't succeed. 1536 1537 This will be fixed in BIND 8.2.1. For earlier versions, this can 1538 be fixed by making "dns" the last name service queried for host 1539 resolution in /etc/irs.conf: 1540 1541 hosts local continue 1542 hosts dns 1543 1544strtoul 1545 Some compilers (notably gcc) claim to be ANSI C but do not 1546 include the ANSI-required routine "strtoul". If your compiler 1547 has this problem, you will get an error in srvrsmtp.c on the 1548 code: 1549 1550 # ifdef defined(__STDC__) && !defined(BROKEN_ANSI_LIBRARY) 1551 e->e_msgsize = strtoul(vp, (char **) NULL, 10); 1552 # else 1553 e->e_msgsize = strtol(vp, (char **) NULL, 10); 1554 # endif 1555 1556 You can use -DBROKEN_ANSI_LIBRARY to get around this problem. 1557 1558Listproc 6.0c 1559 Date: 23 Sep 1995 23:56:07 GMT 1560 Message-ID: <95925101334.~INN-AUMa00187.comp-news@dl.ac.uk> 1561 From: alansz@mellers1.psych.berkeley.edu (Alan Schwartz) 1562 Subject: Listproc 6.0c + Sendmail 8.7 [Helpful hint] 1563 1564 Just upgraded to sendmail 8.7, and discovered that listproc 6.0c 1565 breaks, because it, by default, sends a blank "HELO" rather than 1566 a "HELO hostname" when using the 'system' or 'telnet' mailmethod. 1567 1568 The fix is to include -DZMAILER in the compilation, which will 1569 cause it to use "HELO hostname" (which Z-mail apparently requires 1570 as well. :) 1571 1572OpenSSL 1573 OpenSSL versions prior to 0.9.6 use a macro named Free which 1574 conflicts with existing macro names on some platforms, such as 1575 AIX. 1576 Do not use 0.9.3, but OpenSSL 0.9.5a or later if compatible with 1577 0.9.5a. 1578 1579PH 1580 PH support is provided by Mark Roth <roth@uiuc.edu>. The map is 1581 described at http://www-dev.cso.uiuc.edu/sendmail/ . 1582 1583 NOTE: The "spacedname" pseudo-field which was used by earlier 1584 versions of the PH map code is no longer supported! See the URL 1585 listed above for more information. 1586 1587 Please contact Mark Roth for support and questions regarding the 1588 map. 1589 1590TCP Wrappers 1591 If you are using -DTCPWRAPPERS to get TCP Wrappers support you will 1592 also need to install libwrap.a and modify your site.config.m4 file 1593 or the generated Makefile to include -lwrap in the LIBS line 1594 (make sure that INCDIRS and LIBDIRS point to where the tcpd.h and 1595 libwrap.a can be found). 1596 1597 TCP Wrappers is available at ftp://ftp.porcupine.org/pub/security/. 1598 1599 If you have alternate MX sites for your site, be sure that all of 1600 your MX sites reject the same set of hosts. If not, a bad guy whom 1601 you reject will connect to your site, fail, and move on to the next 1602 MX site, which will accept the mail for you and forward it on to you. 1603 1604Regular Expressions (MAP_REGEX) 1605 If sendmail linking fails with: 1606 1607 undefined reference to 'regcomp' 1608 1609 or sendmail gives an error about a regular expression with: 1610 1611 pattern-compile-error: : Operation not applicable 1612 1613 Your libc does not include a running version of POSIX-regex. Use 1614 librx or regex.o from the GNU Free Software Foundation, 1615 ftp://ftp.gnu.org/pub/gnu/rx-?.?.tar.gz or 1616 ftp://ftp.gnu.org/pub/gnu/regex-?.?.tar.gz. 1617 You can also use the regex-lib by Henry Spencer, 1618 ftp://ftp.funet.fi/pub/languages/C/spencer/regex.shar.gz 1619 Make sure, your compiler reads regex.h from the distribution, 1620 not from /usr/include, otherwise sendmail will dump a core. 1621 1622 1623+--------------+ 1624| MANUAL PAGES | 1625+--------------+ 1626 1627The manual pages have been written against the -man macros, and 1628should format correctly with any reasonable *roff. 1629 1630 1631+-----------------+ 1632| DEBUGGING HOOKS | 1633+-----------------+ 1634 1635As of 8.6.5, sendmail daemons will catch a SIGUSR1 signal and log 1636some debugging output (logged at LOG_DEBUG severity). The 1637information dumped is: 1638 1639 * The value of the $j macro. 1640 * A warning if $j is not in the set $=w. 1641 * A list of the open file descriptors. 1642 * The contents of the connection cache. 1643 * If ruleset 89 is defined, it is evaluated and the results printed. 1644 1645This allows you to get information regarding the runtime state of the 1646daemon on the fly. This should not be done too frequently, since 1647the process of rewriting may lose memory which will not be recovered. 1648Also, ruleset 89 may call non-reentrant routines, so there is a small 1649non-zero probability that this will cause other problems. It is 1650really only for debugging serious problems. 1651 1652A typical formulation of ruleset 89 would be: 1653 1654 R$* $@ $>0 some test address 1655 1656 1657+-----------------------------+ 1658| DESCRIPTION OF SOURCE FILES | 1659+-----------------------------+ 1660 1661The following list describes the files in this directory: 1662 1663Build Shell script for building sendmail. 1664Makefile A convenience for calling ./Build. 1665Makefile.m4 A template for constructing a makefile based on the 1666 information in the devtools directory. 1667README This file. 1668TRACEFLAGS My own personal list of the trace flags -- not guaranteed 1669 to be particularly up to date. 1670alias.c Does name aliasing in all forms. 1671aliases.5 Man page describing the format of the aliases file. 1672arpadate.c A subroutine which creates ARPANET standard dates. 1673bf.c Routines to implement memory-buffered file system using 1674 hooks provided by libsm now (formerly Torek stdio library). 1675bf.h Buffered file I/O function declarations and 1676 data structure and function declarations for bf.c. 1677collect.c The routine that actually reads the mail into a temp 1678 file. It also does a certain amount of parsing of 1679 the header, etc. 1680conf.c The configuration file. This contains information 1681 that is presumed to be quite static and non- 1682 controversial, or code compiled in for efficiency 1683 reasons. Most of the configuration is in sendmail.cf. 1684conf.h Configuration that must be known everywhere. 1685control.c Routines to implement control socket. 1686convtime.c A routine to sanely process times. 1687daemon.c Routines to implement daemon mode. 1688deliver.c Routines to deliver mail. 1689domain.c Routines that interface with DNS (the Domain Name 1690 System). 1691envelope.c Routines to manipulate the envelope structure. 1692err.c Routines to print error messages. 1693headers.c Routines to process message headers. 1694helpfile An example helpfile for the SMTP HELP command and -bt mode. 1695macro.c The macro expander. This is used internally to 1696 insert information from the configuration file. 1697mailq.1 Man page for the mailq command. 1698main.c The main routine to sendmail. This file also 1699 contains some miscellaneous routines. 1700makesendmail A convenience for calling ./Build. 1701map.c Support for database maps. 1702mci.c Routines that handle mail connection information caching. 1703milter.c MTA portions of the mail filter API. 1704mime.c MIME conversion routines. 1705newaliases.1 Man page for the newaliases command. 1706parseaddr.c The routines which do address parsing. 1707queue.c Routines to implement message queueing. 1708readcf.c The routine that reads the configuration file and 1709 translates it to internal form. 1710recipient.c Routines that manipulate the recipient list. 1711sasl.c Routines to interact with Cyrys-SASL. 1712savemail.c Routines which save the letter on processing errors. 1713sendmail.8 Man page for the sendmail command. 1714sendmail.h Main header file for sendmail. 1715sfsasl.c I/O interface between SASL/TLS and the MTA. 1716sfsasl.h Header file for sfsasl.c. 1717shmticklib.c Routines for shared memory counters. 1718sm_resolve.c Routines for DNS lookups (for DNS map type). 1719sm_resolve.h Header file for sm_resolve.c. 1720srvrsmtp.c Routines to implement server SMTP. 1721stab.c Routines to manage the symbol table. 1722stats.c Routines to collect and post the statistics. 1723statusd_shm.h Data structure and function declarations for shmticklib.c. 1724sysexits.c List of error messages associated with error codes 1725 in sysexits.h. 1726sysexits.h List of error codes for systems that lack their own. 1727timers.c Routines to provide microtimers. 1728timers.h Data structure and function declarations for timers.h. 1729tls.c Routines for TLS. 1730trace.c The trace package. These routines allow setting and 1731 testing of trace flags with a high granularity. 1732udb.c The user database interface module. 1733usersmtp.c Routines to implement user SMTP. 1734util.c Some general purpose routines used by sendmail. 1735version.c The version number and information about this 1736 version of sendmail. 1737 1738(Version $Revision: 8.345 $, last update $Date: 2002/01/09 18:04:30 $ ) 1739