README revision 98121
1# Copyright (c) 1998-2002 Sendmail, Inc. and its suppliers. 2# All rights reserved. 3# Copyright (c) 1983, 1995-1997 Eric P. Allman. All rights reserved. 4# Copyright (c) 1988 5# The Regents of the University of California. All rights reserved. 6# 7# By using this file, you agree to the terms and conditions set 8# forth in the LICENSE file which can be found at the top level of 9# the sendmail distribution. 10# 11# 12# $Id: README,v 8.355 2002/05/22 19:46:26 gshapiro Exp $ 13# 14 15This directory contains the source files for sendmail(TM). 16 17 ******************************************************************* 18 !! Read sendmail/SECURITY for important installation information !! 19 ******************************************************************* 20 21 ********************************************************** 22 ** Read below for more details on building sendmail. ** 23 ********************************************************** 24 25************************************************************************** 26** IMPORTANT: Read the appropriate paragraphs in the section on ** 27** ``Operating System and Compile Quirks''. ** 28************************************************************************** 29 30For detailed instructions, please read the document ../doc/op/op.me: 31 32 cd ../doc/op ; make op.ps op.txt 33 34Sendmail is a trademark of Sendmail, Inc. 35 36 37+-------------------+ 38| BUILDING SENDMAIL | 39+-------------------+ 40 41By far, the easiest way to compile sendmail is to use the "Build" 42script: 43 44 sh Build 45 46This uses the "uname" command to figure out what architecture you are 47on and creates a proper Makefile accordingly. It also creates a 48subdirectory per object format, so that multiarchitecture support is 49easy. In general this should be all you need. IRIX 6.x users should 50read the note below in the OPERATING SYSTEM AND COMPILE QUIRKS section. 51 52If you need to look at other include or library directories, use the 53-I or -L flags on the command line, e.g., 54 55 sh Build -I/usr/sww/include -L/usr/sww/lib 56 57It's also possible to create local site configuration in the file 58site.config.m4 (or another file settable with the -f flag). This 59file contains M4 definitions for various compilation values; the 60most useful are: 61 62confMAPDEF -D flags to specify database types to be included 63 (see below) 64confENVDEF -D flags to specify other environment information 65confINCDIRS -I flags for finding include files during compilation 66confLIBDIRS -L flags for finding libraries during linking 67confLIBS -l flags for selecting libraries during linking 68confLDOPTS other ld(1) linker options 69 70Others can be found by examining Makefile.m4. Please read 71../devtools/README for more information about the site.config.m4 72file. 73 74You can recompile from scratch using the -c flag with the Build 75command. This removes the existing compilation directory for the 76current platform and builds a new one. The -c flag must also 77be used if any site.*.m4 file in devtools/Site/ is changed. 78 79Porting to a new Unix-based system should be a matter of creating 80an appropriate configuration file in the devtools/OS/ directory. 81 82 83+----------------------+ 84| DATABASE DEFINITIONS | 85+----------------------+ 86 87There are several database formats that can be used for the alias files 88and for general maps. When used for alias files they interact in an 89attempt to be backward compatible. 90 91The options are: 92 93NEWDB The new Berkeley DB package. Some systems (e.g., BSD/OS and 94 Digital UNIX 4.0) have some version of this package 95 pre-installed. If your system does not have Berkeley DB 96 pre-installed, or the version installed is not version 2.0 97 or greater (e.g., is Berkeley DB 1.85 or 1.86), get the 98 current version from http://www.sleepycat.com/. DO NOT 99 use a version from any of the University of California, 100 Berkeley "Net" or other distributions. If you are still 101 running BSD/386 1.x, you will need to upgrade the included 102 Berkeley DB library to a current version. NEWDB is included 103 automatically if the Build script can find a library named 104 libdb.a or libdb.so. 105NDBM The older NDBM implementation -- the very old V7 DBM 106 implementation is no longer supported. 107NIS Network Information Services. To use this you must have 108 NIS support on your system. 109NISPLUS NIS+ (the revised NIS released with Solaris 2). You must 110 have NIS+ support on your system to use this flag. 111HESIOD Support for Hesiod (from the DEC/Athena distribution). You 112 must already have Hesiod support on your system for this to 113 work. You may be able to get this to work with the MIT/Athena 114 version of Hesiod, but that's likely to be a lot of work. 115 BIND 8.X also includes Hesiod support. 116LDAPMAP Lightweight Directory Access Protocol support. You will 117 have to install the UMich or OpenLDAP 118 (http://www.openldap.org/) ldap and lber libraries to use 119 this flag. 120MAP_REGEX Regular Expression support. You will need to use an 121 operating system which comes with the POSIX regex() 122 routines or install a regexp library such as libregex from 123 the Free Software Foundation. 124DNSMAP DNS map support. Requires NAMED_BIND. 125PH_MAP PH map support. You will need the libphclient library from 126 the nph package (http://www-dev.cso.uiuc.edu/ph/nph/). 127MAP_NSD nsd map support (IRIX 6.5 and later). 128 129>>> NOTE WELL for NEWDB support: If you want to get ndbm support, for 130>>> Berkeley DB versions under 2.0, it is CRITICAL that you remove 131>>> ndbm.o from libdb.a before you install it and DO NOT install ndbm.h; 132>>> for Berkeley DB versions 2.0 through 2.3.14, remove dbm.o from libdb.a 133>>> before you install it. If you don't delete these, there is absolutely 134>>> no point to including -DNDBM, since it will just get you another 135>>> (inferior) API to the same format database. These files OVERRIDE 136>>> calls to ndbm routines -- in particular, if you leave ndbm.h in, 137>>> you can find yourself using the new db package even if you don't 138>>> define NEWDB. Berkeley DB versions later than 2.3.14 do not need 139>>> to be modified. Please also consult the README in the top level 140>>> directory of the sendmail distribution for other important information. 141>>> 142>>> Further note: DO NOT remove your existing /usr/include/ndbm.h -- 143>>> you need that one. But do not install an updated ndbm.h in 144>>> /usr/include, /usr/local/include, or anywhere else. 145 146If NEWDB and NDBM are defined (but not NIS), then sendmail will read 147NDBM format alias files, but the next time a newaliases is run the 148format will be converted to NEWDB; that format will be used forever 149more. This is intended as a transition feature. 150 151If NEWDB, NDBM, and NIS are all defined and the name of the file includes 152the string "/yp/", sendmail will rebuild BOTH the NEWDB and NDBM format 153alias files. However, it will only read the NEWDB file; the NDBM format 154file is used only by the NIS subsystem. This is needed because the NIS 155maps on an NIS server are built directly from the NDBM files. 156 157If NDBM and NIS are defined (regardless of the definition of NEWDB), 158and the filename includes the string "/yp/", sendmail adds the special 159tokens "YP_LAST_MODIFIED" and "YP_MASTER_NAME", both of which are 160required if the NDBM file is to be used as an NIS map. 161 162All of these flags are normally defined in a confMAPDEF setting in your 163site.config.m4. 164 165If you define NEWDB or HESIOD you get the User Database (USERDB) 166automatically. Generally you do want to have NEWDB for it to do 167anything interesting. See above for getting the Berkeley DB 168package (i.e., NEWDB). There is no separate "user database" 169package -- don't bother searching for it on the net. 170 171Hesiod and LDAP require libraries that may not be installed with your 172system. These are outside of my ability to provide support. See the 173"Quirks" section for more information. 174 175The regex map can be used to see if an address matches a certain regular 176expression. For example, all-numerics local parts are common spam 177addresses, so "^[0-9]+$" would match this. By using such a map in a 178check_* rule-set, you can block a certain range of addresses that would 179otherwise be considered valid. 180 181 182+---------------+ 183| COMPILE FLAGS | 184+---------------+ 185 186Wherever possible, I try to make sendmail pull in the correct 187compilation options needed to compile on various environments based on 188automatically defined symbols. Some machines don't seem to have useful 189symbols available, requiring that a compilation flag be defined in 190the Makefile; see the devtools/OS subdirectory for the supported 191architectures. 192 193If you are a system to which sendmail has already been ported you 194should not have to touch the following symbols. But if you are porting, 195you may have to tweak the following compilation flags in conf.h in order 196to get it to compile and link properly: 197 198SYSTEM5 Adjust for System V (not necessarily Release 4). 199SYS5SIGNALS Use System V signal semantics -- the signal handler 200 is automatically dropped when the signal is caught. 201 If this is not set, use POSIX/BSD semantics, where the 202 signal handler stays in force until an exec or an 203 explicit delete. Implied by SYSTEM5. 204SYS5SETPGRP Use System V setpgrp() semantics. Implied by SYSTEM5. 205HASNICE Define this to zero if you lack the nice(2) system call. 206HASRRESVPORT Define this to zero if you lack the rresvport(3) system call. 207HASFCHMOD Define this to one if you have the fchmod(2) system call. 208 This improves security. 209HASFCHOWN Define this to one if you have the fchown(2) system call. 210 This is required for the TrustedUser option if sendmail 211 must rebuild an (alias) map. 212HASFLOCK Set this if you prefer to use the flock(2) system call 213 rather than using fcntl-based locking. Fcntl locking 214 has some semantic gotchas, but many vendor systems 215 also interface it to lockd(8) to do NFS-style locking. 216 Unfortunately, may vendors implementations of fcntl locking 217 is just plain broken (e.g., locks are never released, 218 causing your sendmail to deadlock; when the kernel runs 219 out of locks your system crashes). For this reason, I 220 recommend always defining this unless you are absolutely 221 certain that your fcntl locking implementation really works. 222HASUNAME Set if you have the "uname" system call. Implied by 223 SYSTEM5. 224HASUNSETENV Define this if your system library has the "unsetenv" 225 subroutine. 226HASSETSID Define this if you have the setsid(2) system call. This 227 is implied if your system appears to be POSIX compliant. 228HASINITGROUPS Define this if you have the initgroups(3) routine. 229HASSETVBUF Define this if you have the setvbuf(3) library call. 230 If you don't, setlinebuf will be used instead. This 231 defaults on if your compiler defines __STDC__. 232HASSETREUID Define this if you have setreuid(2) ***AND*** root can 233 use setreuid to change to an arbitrary user. This second 234 condition is not satisfied on AIX 3.x. You may find that 235 your system has setresuid(2), (for example, on HP-UX) in 236 which case you will also have to #define setreuid(r, e) 237 to be the appropriate call. Some systems (such as Solaris) 238 have a compatibility routine that doesn't work properly, 239 but may have "saved user ids" properly implemented so you 240 can ``#define setreuid(r, e) seteuid(e)'' and have it work. 241 The important thing is that you have a call that will set 242 the effective uid independently of the real or saved uid 243 and be able to set the effective uid back again when done. 244 There's a test program in ../test/t_setreuid.c that will 245 try things on your system. Setting this improves the 246 security, since sendmail doesn't have to read .forward 247 and :include: files as root. There are certain attacks 248 that may be unpreventable without this call. 249USESETEUID Define this to 1 if you have a seteuid(2) system call that 250 will allow root to set only the effective user id to an 251 arbitrary value ***AND*** you have saved user ids. This is 252 preferable to HASSETREUID if these conditions are fulfilled. 253 These are the semantics of the to-be-released revision of 254 Posix.1. The test program ../test/t_seteuid.c will try 255 this out on your system. If you define both HASSETREUID 256 and USESETEUID, the former is ignored. 257HASSETEGID Define this if you have setegid(2) and it can be 258 used to set the saved gid. Please run t_dropgid in 259 test/ if you are not sure whether the call works. 260HASSETREGID Define this if you have setregid(2) and it can be 261 used to set the saved gid. Please run t_dropgid in 262 test/ if you are not sure whether the call works. 263HASSETRESGID Define this if you have setresgid(2) and it can be 264 used to set the saved gid. Please run t_dropgid in 265 test/ if you are not sure whether the call works. 266HASLSTAT Define this if you have symbolic links (and thus the 267 lstat(2) system call). This improves security. Unlike 268 most other options, this one is on by default, so you 269 need to #undef it in conf.h if you don't have symbolic 270 links (these days everyone does). 271HASSETRLIMIT Define this to 1 if you have the setrlimit(2) syscall. 272 You can define it to 0 to force it off. It is assumed 273 if you are running a BSD-like system. 274HASULIMIT Define this if you have the ulimit(2) syscall (System V 275 style systems). HASSETRLIMIT overrides, as it is more 276 general. 277HASWAITPID Define this if you have the waitpid(2) syscall. 278HASGETDTABLESIZE 279 Define this if you have the getdtablesize(2) syscall. 280HAS_ST_GEN Define this to 1 if your system has the st_gen field in 281 the stat structure (see stat(2)). 282HASSRANDOMDEV Define this if your system has the srandomdev(3) function 283 call. 284HASURANDOMDEV Define this if your system has /dev/urandom(4). 285HASSTRERROR Define this if you have the libc strerror(3) function (which 286 should be declared in <errno.h>), and it should be used 287 instead of sys_errlist. 288SM_CONF_GETOPT Define this as 0 if you need a reimplementation of getopt(3). 289 On some systems, getopt does very odd things if called 290 to scan the arguments twice. This flag will ask sendmail 291 to compile in a local version of getopt that works 292 properly. 293NEEDSTRTOL Define this if your standard C library does not define 294 strtol(3). This will compile in a local version. 295NEEDFSYNC Define this if your standard C library does not define 296 fsync(2). This will try to simulate the operation using 297 fcntl(2); if that is not available it does nothing, which 298 isn't great, but at least it compiles and runs. 299HASGETUSERSHELL Define this to 1 if you have getusershell(3) in your 300 standard C library. If this is not defined, or is defined 301 to be 0, sendmail will scan the /etc/shells file (no 302 NIS-style support, defaults to /bin/sh and /bin/csh if 303 that file does not exist) to get a list of unrestricted 304 user shells. This is used to determine whether users 305 are allowed to forward their mail to a program or a file. 306NEEDPUTENV Define this if your system needs am emulation of the 307 putenv(3) call. Define to 1 to implement it in terms 308 of setenv(3) or to 2 to do it in terms of primitives. 309NOFTRUNCATE Define this if you don't have the ftruncate(2) syscall. 310 If you don't have this system call, there is an unavoidable 311 race condition that occurs when creating alias databases. 312GIDSET_T The type of entries in a gidset passed as the second 313 argument to getgroups(2). Historically this has been an 314 int, so this is the default, but some systems (such as 315 IRIX) pass it as a gid_t, which is an unsigned short. 316 This will make a difference, so it is important to get 317 this right! However, it is only an issue if you have 318 group sets. 319SLEEP_T The type returned by the system sleep() function. 320 Defaults to "unsigned int". Don't worry about this 321 if you don't have compilation problems. 322ARBPTR_T The type of an arbitrary pointer -- defaults to "void *". 323 If you are an very old compiler you may need to define 324 this to be "char *". 325SOCKADDR_LEN_T The type used for the third parameter to accept(2), 326 getsockname(2), and getpeername(2), representing the 327 length of a struct sockaddr. Defaults to int. 328SOCKOPT_LEN_T The type used for the fifth parameter to getsockopt(2) 329 and setsockopt(2), representing the length of the option 330 buffer. Defaults to int. 331LA_TYPE The type of load average your kernel supports. These 332 can be one of: 333 LA_ZERO (1) -- it always returns the load average as 334 "zero" (and does so on all architectures). 335 LA_INT (2) to read /dev/kmem for the symbol avenrun and 336 interpret as a long integer. 337 LA_FLOAT (3) same, but interpret the result as a floating 338 point number. 339 LA_SHORT (6) to interpret as a short integer. 340 LA_SUBR (4) if you have the getloadavg(3) routine in your 341 system library. 342 LA_MACH (5) to use MACH-style load averages (calls 343 processor_set_info()), 344 LA_PROCSTR (7) to read /proc/loadavg and interpret it 345 as a string representing a floating-point 346 number (Linux-style). 347 LA_READKSYM (8) is an implementation suitable for some 348 versions of SVr4 that uses the MIOC_READKSYM ioctl 349 call to read /dev/kmem. 350 LA_DGUX (9) is a special implementation for DG/UX that uses 351 the dg_sys_info system call. 352 LA_HPUX (10) is an HP-UX specific version that uses the 353 pstat_getdynamic system call. 354 LA_IRIX6 (11) is an IRIX 6.x specific version that adapts 355 to 32 or 64 bit kernels; it is otherwise very similar 356 to LA_INT. 357 LA_KSTAT (12) uses the (Solaris-specific) kstat(3k) 358 implementation. 359 LA_DEVSHORT (13) reads a short from a system file (default: 360 /dev/table/avenrun) and scales it in the same manner 361 as LA_SHORT. 362 LA_INT, LA_SHORT, LA_FLOAT, and LA_READKSYM have several 363 other parameters that they try to divine: the name of your 364 kernel, the name of the variable in the kernel to examine, 365 the number of bits of precision in a fixed point load average, 366 and so forth. LA_DEVSHORT uses _PATH_AVENRUN to find the 367 device to be read to find the load average. 368 In desperation, use LA_ZERO. The actual code is in 369 conf.c -- it can be tweaked if you are brave. 370FSHIFT For LA_INT, LA_SHORT, and LA_READKSYM, this is the number 371 of bits of load average after the binary point -- i.e., 372 the number of bits to shift right in order to scale the 373 integer to get the true integer load average. Defaults to 8. 374_PATH_UNIX The path to your kernel. Needed only for LA_INT, LA_SHORT, 375 and LA_FLOAT. Defaults to "/unix" on System V, "/vmunix" 376 everywhere else. 377LA_AVENRUN For LA_INT, LA_SHORT, and LA_FLOAT, the name of the kernel 378 variable that holds the load average. Defaults to "avenrun" 379 on System V, "_avenrun" everywhere else. 380SFS_TYPE Encodes how your kernel can locate the amount of free 381 space on a disk partition. This can be set to SFS_NONE 382 (0) if you have no way of getting this information, 383 SFS_USTAT (1) if you have the ustat(2) system call, 384 SFS_4ARGS (2) if you have a four-argument statfs(2) 385 system call (and the include file is <sys/statfs.h>), 386 SFS_VFS (3), SFS_MOUNT (4), SFS_STATFS (5) if you have 387 the two-argument statfs(2) system call with includes in 388 <sys/vfs.h>, <sys/mount.h>, or <sys/statfs.h> respectively, 389 or SFS_STATVFS (6) if you have the two-argument statvfs(2) 390 call. The default if nothing is defined is SFS_NONE. 391SFS_BAVAIL with SFS_4ARGS you can also set SFS_BAVAIL to the field name 392 in the statfs structure that holds the useful information; 393 this defaults to f_bavail. 394SPT_TYPE Encodes how your system can display what a process is doing 395 on a ps(1) command (SPT stands for Set Process Title). Can 396 be set to: 397 SPT_NONE (0) -- Don't try to set the process title at all. 398 SPT_REUSEARGV (1) -- Pad out your argv with the information; 399 this is the default if none specified. 400 SPT_BUILTIN (2) -- The system library has setproctitle. 401 SPT_PSTAT (3) -- Use the PSTAT_SETCMD option to pstat(2) 402 to set the process title; this is used by HP-UX. 403 SPT_PSSTRINGS (4) -- Use the magic PS_STRINGS pointer (4.4BSD). 404 SPT_SYSMIPS (5) -- Use sysmips() supported by NEWS-OS 6. 405 SPT_SCO (6) -- Write kernel u. area. 406 SPT_CHANGEARGV (7) -- Write pointers to our own strings into 407 the existing argv vector. 408SPT_PADCHAR Character used to pad the process title; if undefined, 409 the space character (0x20) is used. This is ignored if 410 SPT_TYPE != SPT_REUSEARGV 411ERRLIST_PREDEFINED 412 If set, assumes that some header file defines sys_errlist. 413 This may be needed if you get type conflicts on this 414 variable -- otherwise don't worry about it. 415WAITUNION The wait(2) routine takes a "union wait" argument instead 416 of an integer argument. This is for compatibility with 417 old versions of BSD. 418SCANF You can set this to extend the F command to accept a 419 scanf string -- this gives you a primitive parser for 420 class definitions -- BUT it can make you vulnerable to 421 core dumps if the target file is poorly formed. 422SYSLOG_BUFSIZE You can define this to be the size of the buffer that 423 syslog accepts. If it is not defined, it assumes a 424 1024-byte buffer. If the buffer is very small (under 425 256 bytes) the log message format changes -- each 426 e-mail message will log many more messages, since it 427 will log each piece of information as a separate line 428 in syslog. 429BROKEN_RES_SEARCH 430 On Ultrix (and maybe other systems?) if you use the 431 res_search routine with an unknown host name, it returns 432 -1 but sets h_errno to 0 instead of HOST_NOT_FOUND. If 433 you set this, sendmail considers 0 to be the same as 434 HOST_NOT_FOUND. 435NAMELISTMASK If defined, values returned by nlist(3) are masked 436 against this value before use -- a common value is 437 0x7fffffff to strip off the top bit. 438BSD4_4_SOCKADDR If defined, socket addresses have an sa_len field that 439 defines the length of this address. 440SAFENFSPATHCONF Set this to 1 if and only if you have verified that a 441 pathconf(2) call with _PC_CHOWN_RESTRICTED argument on an 442 NFS filesystem where the underlying system allows users to 443 give away files to other users returns <= 0. Be sure you 444 try both on NFS V2 and V3. Some systems assume that their 445 local policy apply to NFS servers -- this is a bad 446 assumption! The test/t_pathconf.c program will try this 447 for you -- you have to run it in a directory that is 448 mounted from a server that allows file giveaway. 449SIOCGIFCONF_IS_BROKEN 450 Set this if your system has an SIOCGIFCONF ioctl defined, 451 but it doesn't behave the same way as "most" systems (BSD, 452 Solaris, SunOS, HP-UX, etc.) 453SIOCGIFNUM_IS_BROKEN 454 Set this if your system has an SIOCGIFNUM ioctl defined, 455 but it doesn't behave the same way as "most" systems 456 (Solaris, HP-UX). 457FAST_PID_RECYCLE 458 Set this if your system can reuse the same PID in the same 459 second. 460SO_REUSEADDR_IS_BROKEN 461 Set this if your system has a setsockopt() SO_REUSEADDR 462 flag but doesn't pay attention to it when trying to bind a 463 socket to a recently closed port. 464NEEDSGETIPNODE Set this if your system supports IPv6 but doesn't include 465 the getipnodeby{name,addr}() functions. Set automatically 466 for Linux's glibc. 467PIPELINING Support SMTP PIPELINING (set by default). 468USING_NETSCAPE_LDAP 469 Deprecated in favor of SM_CONF_LDAP_MEMFREE. See 470 libsm/README. 471NEEDLINK Set this if your system doesn't have a link() call. It 472 will create a copy of the file instead of a hardlink. 473USE_ENVIRON Set this to 1 to access process environment variables from 474 the external variable environ instead of the third 475 parameter of main(). 476USE_DOUBLE_FORK By default this is on (1). Set it to 0 to suppress the 477 extra fork() used to avoid intermediate zombies. 478 479 480+-----------------------+ 481| COMPILE-TIME FEATURES | 482+-----------------------+ 483 484There are a bunch of features that you can decide to compile in, such 485as selecting various database packages and special protocol support. 486Several are assumed based on other compilation flags -- if you want to 487"un-assume" something, you probably need to edit conf.h. Compilation 488flags that add support for special features include: 489 490NDBM Include support for "new" DBM library for aliases and maps. 491 Normally defined in the Makefile. 492NEWDB Include support for Berkeley DB package (hash & btree) 493 for aliases and maps. Normally defined in the Makefile. 494 If the version of NEWDB you have is the old one that does 495 not include the "fd" call (this call was added in version 496 1.5 of the Berkeley DB code), you must upgrade to the 497 current version of Berkeley DB. 498NIS Define this to get NIS (YP) support for aliases and maps. 499 Normally defined in the Makefile. 500NISPLUS Define this to get NIS+ support for aliases and maps. 501 Normally defined in the Makefile. 502HESIOD Define this to get Hesiod support for aliases and maps. 503 Normally defined in the Makefile. 504NETINFO Define this to get NeXT NetInfo support for aliases and maps. 505 Normally defined in the Makefile. 506LDAPMAP Define this to get LDAP support for maps. 507PH_MAP Define this to get PH support for maps. 508MAP_NSD Define this to get nsd support for maps. 509USERDB Define this to 1 to include support for the User Information 510 Database. Implied by NEWDB or HESIOD. You can use 511 -DUSERDB=0 to explicitly turn it off. 512IDENTPROTO Define this as 1 to get IDENT (RFC 1413) protocol support. 513 This is assumed unless you are running on Ultrix or 514 HP-UX, both of which have a problem in the UDP 515 implementation. You can define it to be 0 to explicitly 516 turn off IDENT protocol support. If defined off, the code 517 is actually still compiled in, but it defaults off; you 518 can turn it on by setting the IDENT timeout in the 519 configuration file. 520IP_SRCROUTE Define this to 1 to get IP source routing information 521 displayed in the Received: header. This is assumed on 522 most systems, but some (e.g., Ultrix) apparently have a 523 broken version of getsockopt that doesn't properly 524 support the IP_OPTIONS call. You probably want this if 525 your OS can cope with it. Symptoms of failure will be that 526 it won't compile properly (that is, no support for fetching 527 IP_OPTIONs), or it compiles but source-routed TCP connections 528 either refuse to open or open and hang for no apparent reason. 529 Ultrix and AIX3 are known to fail this way. 530LOG Set this to get syslog(3) support. Defined by default 531 in conf.h. You want this if at all possible. 532NETINET Set this to get TCP/IP support. Defined by default 533 in conf.h. You probably want this. 534NETINET6 Set this to get IPv6 support. Other configuration may 535 be needed in conf.h for your particular operating system. 536 Also, DaemonPortOptions must be set appropriately for 537 sendmail to accept IPv6 connections. 538NETISO Define this to get ISO networking support. 539NETUNIX Define this to get Unix domain networking support. Defined 540 by default. A few bizarre systems (SCO, ISC, Altos) don't 541 support this networking domain. 542NETNS Define this to get NS networking support. 543NETX25 Define this to get X.25 networking support. 544NAMED_BIND If non-zero, include DNS (name daemon) support, including 545 MX support. The specs say you must use this if you run 546 SMTP. You don't have to be running a name server daemon 547 on your machine to need this -- any use of the DNS resolver, 548 including remote access to another machine, requires this 549 option. Defined by default in conf.h. Define it to zero 550 ONLY on machines that do not use DNS in any way. 551MATCHGECOS Permit fuzzy matching of user names against the full 552 name (GECOS) field in the /etc/passwd file. This should 553 probably be on, since you can disable it from the config 554 file if you want to. Defined by default in conf.h. 555MIME8TO7 If non-zero, include 8 to 7 bit MIME conversions. This 556 also controls advertisement of 8BITMIME in the ESMTP 557 startup dialogue. 558MIME7TO8 If non-zero, include 7 to 8 bit MIME conversions. 559HES_GETMAILHOST Define this to 1 if you are using Hesiod with the 560 hes_getmailhost() routine. This is included with the MIT 561 Hesiod distribution, but not with the DEC Hesiod distribution. 562XDEBUG Do additional internal checking. These don't cost too 563 much; you might as well leave this on. 564TCPWRAPPERS Turns on support for the TCP wrappers library (-lwrap). 565 See below for further information. 566SECUREWARE Enable calls to the SecureWare luid enabling/changing routines. 567 SecureWare is a C2 security package added to several UNIX's 568 (notably ConvexOS) to get a C2 Secure system. This 569 option causes mail delivery to be done with the luid of the 570 recipient. 571SHARE_V1 Support for the fair share scheduler, version 1. Setting to 572 1 causes final delivery to be done using the recipients 573 resource limitations. So far as I know, this is only 574 supported on ConvexOS. 575SASL Enables SMTP AUTH (RFC 2554). This requires the Cyrus SASL 576 library (ftp://ftp.andrew.cmu.edu/pub/cyrus-mail/). Please 577 install at least version 1.5.13. See below for further 578 information: SASL COMPILATION AND CONFIGURATION. If your 579 SASL library is older than 1.5.10, you have to set this 580 to its version number using a simple conversion: a.b.c 581 -> c + b*100 + a*10000, e.g. for 1.5.9 define SASL=10509. 582 Note: Using an older version than 1.5.5 of Cyrus SASL is 583 not supported. Starting with version 1.5.10, setting SASL=1 584 is sufficient. Any value other than 1 (or 0) will be 585 compared with the actual version found and if there is a 586 mismatch, compilation will fail. 587EGD Define this if your system has EGD installed, see 588 http://egd.sourceforge.net/ . It should be used to 589 seed the PRNG for STARTTLS if HASURANDOMDEV is not defined. 590STARTTLS Enables SMTP STARTTLS (RFC 2487). This requires OpenSSL 591 (http://www.OpenSSL.org/); use OpenSSL 0.9.5a or later 592 (if compatible with this version), do not use 0.9.3. 593 See STARTTLS COMPILATION AND CONFIGURATION for further 594 information. 595TLS_NO_RSA Turn off support for RSA algorithms in STARTTLS. 596MILTER Turn on support for external filters using the Milter API. 597 See libmilter/README for more information. 598REQUIRES_DIR_FSYNC Turn on support for file systems that require to 599 call fsync() for a directory if the meta-data in it has 600 been changed. This should be turned on at least for 601 ReiserFS; it is enabled by default for Linux. An alternative 602 to this compile time flag is to mount the queue directory 603 without the -async option, or using chattr +S on Linux. 604DBMMODE The default file permissions to use when creating new 605 database files for maps and aliases. Defaults to 0640. 606 607Generic notice: If you enable a compile time option that needs 608libraries or include files that don't come with sendmail or are 609installed in a location that your C compiler doesn't use by default 610you should set confINCDIRS and confLIBDIRS as explained in the 611first section: BUILDING SENDMAIL. 612 613 614+---------------------+ 615| DNS/RESOLVER ISSUES | 616+---------------------+ 617 618Many systems have old versions of the resolver library. At a minimum, 619you should be running BIND 4.8.3; older versions may compile, but they 620have known bugs that should give you pause. 621 622Common problems in old versions include "undefined" errors for 623dn_skipname. 624 625Some people have had a problem with BIND 4.9; it uses some routines 626that it expects to be externally defined such as strerror(). It may 627help to link with "-l44bsd" to solve this problem. This has apparently 628been fixed in later versions of BIND, starting around 4.9.3. In other 629words, if you use 4.9.0 through 4.9.2, you need -l44bsd; for earlier or 630later versions, you do not. 631 632!PLEASE! be sure to link with the same version of the resolver as 633the header files you used -- some people have used the 4.9 headers 634and linked with BIND 4.8 or vice versa, and it doesn't work. 635Unfortunately, it doesn't fail in an obvious way -- things just 636subtly don't work. 637 638WILDCARD MX RECORDS ARE A BAD IDEA! The only situation in which they 639work reliably is if you have two versions of DNS, one in the real world 640which has a wildcard pointing to your firewall, and a completely 641different version of the database internally that does not include 642wildcard MX records that match your domain. ANYTHING ELSE WILL GIVE 643YOU HEADACHES! 644 645When attempting to canonify a hostname, some broken name servers will 646return SERVFAIL (a temporary failure) on T_AAAA (IPv6) lookups. If you 647want to excuse this behavior, include WorkAroundBrokenAAAA in 648ResolverOptions. However, instead, we recommend catching the problem and 649reporting it to the name server administrator so we can rid the world of 650broken name servers. 651 652 653+----------------------------------------+ 654| STARTTLS COMPILATION AND CONFIGURATION | 655+----------------------------------------+ 656 657Please read the documentation accompanying the OpenSSL library. You 658have to compile and install the OpenSSL libraries before you can compile 659sendmail. See devtools/README how to set the correct compile time 660parameters; you should at least set the following variables: 661 662APPENDDEF(`conf_sendmail_ENVDEF', `-DSTARTTLS') 663APPENDDEF(`conf_sendmail_LIBS', `-lssl -lcrypto') 664 665If you have installed the OpenSSL libraries and include files in 666a location that your C compiler doesn't use by default you should 667set confINCDIRS and confLIBDIRS as explained in the first section: 668BUILDING SENDMAIL. 669 670Configuration information can be found in doc/op/op.me (required 671certificates) and cf/README (how to tell sendmail about certificates). 672 673To perform an initial test, connect to your sendmail daemon 674(telnet localhost 25) and issue a EHLO localhost and see whether 675250-STARTTLS 676is in the response. If it isn't, run the daemon with 677-O LogLevel=14 678and try again. Then take a look at the logfile and see whether 679there are any problems listed about permissions (unsafe files) 680or the validity of X.509 certificates. 681 682Further information can be found via: 683http://www.sendmail.org/tips/ 684 685 686+------------------------------------+ 687| SASL COMPILATION AND CONFIGURATION | 688+------------------------------------+ 689 690Please read the documentation accompanying the Cyrus SASL library 691(INSTALL and README). If you use Berkeley DB for Cyrus SASL then 692you must compile sendmail with the same version of Berkeley DB. 693See devtools/README how to set the correct compile time parameters; 694you should at least set the following variables: 695 696APPENDDEF(`conf_sendmail_ENVDEF', `-DSASL') 697APPENDDEF(`conf_sendmail_LIBS', `-lsasl') 698 699If you have installed the Cyrus SASL library and include files in 700a location that your C compiler doesn't use by default you should 701set confINCDIRS and confLIBDIRS as explained in the first section: 702BUILDING SENDMAIL. 703 704You have to select and install authentication mechanisms and tell 705sendmail where to find the sasl library and the include files (see 706devtools/README for the parameters to set). Setup the required 707users and passwords as explained in the SASL documentation. See 708also cf/README for authentication related options (especially 709DefaultAuthInfo if you want authentication between MTAs). 710 711To perform an initial test, connect to your sendmail daemon 712(telnet localhost 25) and issue a EHLO localhost and see whether 713250-AUTH .... 714is in the response. If it isn't, run the daemon with 715-O LogLevel=14 716and try again. Then take a look at the logfile and see whether 717there are any security related problems listed (unsafe files). 718 719Further information can be found via: 720http://www.sendmail.org/tips/ 721 722 723+-------------------------------------+ 724| OPERATING SYSTEM AND COMPILE QUIRKS | 725+-------------------------------------+ 726 727GCC problems 728 When compiling with "gcc -O -Wall" specify "-DSM_OMIT_BOGUS_WARNINGS" 729 too (see include/sm/cdefs.h for more info). 730 731 ***************************************************************** 732 ** IMPORTANT: DO NOT USE OPTIMIZATION (``-O'') IF YOU ARE ** 733 ** RUNNING GCC 2.4.x or 2.5.x. THERE IS A BUG IN THE GCC ** 734 ** OPTIMIZER THAT CAUSES SENDMAIL COMPILES TO FAIL MISERABLY. ** 735 ***************************************************************** 736 737 Jim Wilson of Cygnus believes he has found the problem -- it will 738 probably be fixed in GCC 2.5.6 -- but until this is verified, be 739 very suspicious of gcc -O. This problem is reported to have been 740 fixed in gcc 2.6. 741 742 A bug in gcc 2.5.5 caused problems compiling sendmail 8.6.5 with 743 optimization on a Sparc. If you are using gcc 2.5.5, youi should 744 upgrade to the latest version of gcc. 745 746 Apparently GCC 2.7.0 on the Pentium processor has optimization 747 problems. I recommend against using -O on that architecture. This 748 has been seen on FreeBSD 2.0.5 RELEASE. 749 750 Solaris 2.X users should use version 2.7.2.3 over 2.7.2. 751 752 We have been told there are problems with gcc 2.8.0. If you are 753 using this version, you should upgrade to 2.8.1 or later. 754 755GDBM GDBM does not work with sendmail 8.8 because the additional 756 security checks and file locking cause problems. Unfortunately, 757 gdbm does not provide a compile flag in its version of ndbm.h so 758 the code can adapt. Until the GDBM authors can fix these problems, 759 GDBM will not be supported. Please use Berkeley DB instead. 760 761Configuration file location 762 Up to 8.6, sendmail tried to find the sendmail.cf file in the same 763 place as the vendors had put it, even when this was obviously 764 stupid. As of 8.7, sendmail ALWAYS looks for /etc/sendmail.cf. 765 Beginning with 8.10, sendmail uses /etc/mail/sendmail.cf. 766 You can get sendmail to use the stupid vendor .cf location by 767 adding -DUSE_VENDOR_CF_PATH during compilation, but this may break 768 support programs and scripts that need to find sendmail.cf. You 769 are STRONGLY urged to use symbolic links if you want to use the 770 vendor location rather than changing the location in the sendmail 771 binary. 772 773 NETINFO systems use NETINFO to determine the location of 774 sendmail.cf. The full path to sendmail.cf is stored as the value of 775 the "sendmail.cf" property in the "/locations/sendmail" 776 subdirectory of NETINFO. Set the value of this property to 777 "/etc/mail/sendmail.cf" (without the quotes) to use this new 778 default location for Sendmail 8.10.0 and higher. 779 780ControlSocket permissions 781 Paraphrased from BIND 8.2.1's README: 782 783 Solaris and other pre-4.4BSD kernels do not respect ownership or 784 protections on UNIX-domain sockets. The short term fix for this is to 785 override the default path and put such control sockets into root- 786 owned directories which do not permit non-root to r/w/x through them. 787 The long term fix is for all kernels to upgrade to 4.4BSD semantics. 788 789HP MPE/iX 790 The MPE-specific code within sendmail emulates a set-user-id root 791 environment for the sendmail binary. But there is no root uid 0 on 792 MPE, nor is there any support for set-user-id programs. Even when 793 sendmail thinks it is running as uid 0, it will still have the file 794 access rights of the underlying non-zero uid, but because sendmail is 795 an MPE priv-mode program it will still be able to call setuid() to 796 successfully switch to a new uid. 797 798 MPE setgid() semantics don't quite work the way sendmail expects, so 799 special emulation is done here also. 800 801 This uid/gid emulation is enabled via the setuid/setgid file mode bits 802 which are not currently used by MPE. Code in libsm/mpeix.c examines 803 these bits and enables emulation if they have been set, i.e., 804 chmod u+s,g+s /SENDMAIL/CURRENT/SENDMAIL. 805 806SunOS 4.x (Solaris 1.x) 807 You may have to use -lresolv on SunOS. However, beware that 808 this links in a new version of gethostbyname that does not 809 understand NIS, so you must have all of your hosts in DNS. 810 811 Some people have reported problems with the SunOS version of 812 -lresolv and/or in.named, and suggest that you get a newer 813 version. The symptoms are delays when you connect to the 814 SMTP server on a SunOS machine or having your domain added to 815 addresses inappropriately. There is a version of BIND 816 version 4.9 on gatekeeper.DEC.COM in pub/BSD/bind/4.9. 817 818 There is substantial disagreement about whether you can make 819 this work with resolv+, which allows you to specify a search-path 820 of services. Some people report that it works fine, others 821 claim it doesn't work at all (including causing sendmail to 822 drop core when it tries to do multiple resolv+ lookups for a 823 single job). I haven't tried resolv+, as we use DNS exclusively. 824 825 Should you want to try resolv+, it is on ftp.uu.net in 826 /networking/ip/dns. 827 828 Apparently getservbyname() can fail under moderate to high 829 load under some circumstances. This will exhibit itself as 830 the message ``554 makeconnection: service "smtp" unknown''. 831 The problem has been traced to one or more blank lines in 832 /etc/services on the NIS server machine. Delete these 833 and it should work. This info is thanks to Brian Bartholomew 834 <bb@math.ufl.edu> of I-Kinetics, Inc. 835 836 NOTE: The SunOS 4.X linker uses library paths specified during 837 compilation using -L for run-time shared library searches. 838 Therefore, it is vital that relative and unsafe directory paths not 839 be used when compiling sendmail. 840 841SunOS 4.0.2 (Sun 386i) 842 Date: Fri, 25 Aug 1995 11:13:58 +0200 (MET DST) 843 From: teus@oce.nl 844 845 Sendmail 8.7.Beta.12 compiles and runs nearly out of the box with the 846 following changes: 847 * Don't use /usr/5bin in your PATH, but make /usr/5bin/uname 848 available as "uname" command. 849 * Use the defines "-DBSD4_3 -DNAMED_BIND=0" in 850 devtools/OS/SunOS.4.0, which is selected via the "uname" command. 851 I recommend to make available the db-library on the system first 852 (and change the Makefile to use this library). 853 Note that the sendmail.cf and aliases files are found in /etc. 854 855SunOS 4.1.3, 4.1.3_U1 856 Sendmail causes crashes on SunOS 4.1.3 and 4.1.3_U1. According 857 to Sun bug number 1077939: 858 859 If an application does a getsockopt() on a SOCK_STREAM (TCP) socket 860 after the other side of the connection has sent a TCP RESET for 861 the stream, the kernel gets a Bus Trap in the tcp_ctloutput() or 862 ip_ctloutput() routine. 863 864 For 4.1.3, this is fixed in patch 100584-08, available on the 865 Sunsolve 2.7.1 or later CDs. For 4.1.3_U1, this was fixed in patch 866 101790-01 (SunOS 4.1.3_U1: TCP socket and reset problems), later 867 obsoleted by patch 102010-05. 868 869 Sun patch 100584-08 is not currently publicly available on their 870 ftp site but a user has reported it can be found at other sites 871 using a web search engine. 872 873Solaris 2.x (SunOS 5.x) 874 To compile for Solaris, the Makefile built by Build must 875 include a SOLARIS definition which reflects the Solaris version 876 (i.e. -DSOLARIS=20400 for 2.4 or -DSOLARIS=20501 for 2.5.1). 877 If you are using gcc, make sure -I/usr/include is not used (or 878 it might complain about TopFrame). If you are using Sun's cc, 879 make sure /opt/SUNWspro/bin/cc is used instead of /usr/ucb/cc 880 (or it might complain about tm_zone). 881 882 The Solaris 2.x (x <= 3) "syslog" function is apparently limited 883 to something about 90 characters because of a kernel limitation. 884 If you have source code, you can probably up this number. You 885 can get patches that fix this problem: the patch ids are: 886 887 Solaris 2.1 100834 888 Solaris 2.2 100999 889 Solaris 2.3 101318 890 891 Be sure you have the appropriate patch installed or you won't 892 see system logging. 893 894Solaris 2.4 (SunOS 5.4) 895 If you include /usr/lib at the end of your LD_LIBRARY_PATH you run 896 the risk of getting the wrong libraries under some circumstances. 897 This is because of a new feature in Solaris 2.4, described by 898 Rod.Evans@Eng.Sun.COM: 899 900 >> Prior to SunOS 5.4, any LD_LIBRARY_PATH setting was ignored by the 901 >> runtime linker if the application was setxid (secure), thus your 902 >> applications search path would be: 903 >> 904 >> /usr/local/lib LD_LIBRARY_PATH component - IGNORED 905 >> /usr/lib LD_LIBRARY_PATH component - IGNORED 906 >> /usr/local/lib RPATH - honored 907 >> /usr/lib RPATH - honored 908 >> 909 >> the effect is that path 3 would be the first used, and this would 910 >> satisfy your resolv.so lookup. 911 >> 912 >> In SunOS 5.4 we made the LD_LIBRARY_PATH a little more flexible. 913 >> People who developed setxid applications wanted to be able to alter 914 >> the library search path to some degree to allow for their own 915 >> testing and debugging mechanisms. It was decided that the only 916 >> secure way to do this was to allow a `trusted' path to be used in 917 >> LD_LIBRARY_PATH. The only trusted directory we presently define 918 >> is /usr/lib. Thus a set-user-ID root developer could play with some 919 >> alternative shared object implementations and place them in 920 >> /usr/lib (being root we assume they'ed have access to write in this 921 >> directory). This change was made as part of 1155380 - after a 922 >> *huge* amount of discussion regarding the security aspect of things. 923 >> 924 >> So, in SunOS 5.4 your applications search path would be: 925 >> 926 >> /usr/local/lib from LD_LIBRARY_PATH - IGNORED (untrustworthy) 927 >> /usr/lib from LD_LIBRARY_PATH - honored (trustworthy) 928 >> /usr/local/lib from RPATH - honored 929 >> /usr/lib from RPATH - honored 930 >> 931 >> here, path 2 would be the first used. 932 933Solaris 2.5.1 (SunOS 5.5.1) and 2.6 (SunOS 5.6) 934 Apparently Solaris 2.5.1 patch 103663-01 installs a new 935 /usr/include/resolv.h file that defines the __P macro without 936 checking to see if it is already defined. This new resolv.h is also 937 included in the Solaris 2.6 distribution. This causes compile 938 warnings such as: 939 940 In file included from daemon.c:51: 941 /usr/include/resolv.h:208: warning: `__P' redefined 942 cdefs.h:58: warning: this is the location of the previous definition 943 944 These warnings can be safely ignored or you can create a resolv.h 945 file in the obj.SunOS.5.5.1.* or obj.SunOS.5.6.* directory that reads: 946 947 #undef __P 948 #include "/usr/include/resolv.h" 949 950 This problem was fixed in Solaris 7 (Sun bug ID 4081053). 951 952Solaris 7 (SunOS 5.7) 953 Solaris 7 includes LDAP libraries but the implementation was 954 lacking a few things. The following settings can be placed in 955 devtools/Site/site.SunOS.5.7.m4 if you plan on using those 956 libraries. 957 958 APPENDDEF(`confMAPDEF', `-DLDAPMAP') 959 APPENDDEF(`confENVDEF', `-DLDAP_VERSION_MAX=3') 960 APPENDDEF(`confLIBS', `-lldap') 961 962 Also, Sun's patch 107555 is needed to prevent a crash in the call 963 to ldap_set_option for LDAP_OPT_REFERRALS in ldapmap_setopts if 964 LDAP support is compiled in sendmail. 965 966Solaris 8 and later (SunOS 5.8 and later) 967 Solaris 8 and later can optionally install LDAP support. If you 968 have installed the Entire Distribution meta-cluster, you can use 969 the following in devtools/Site/site.SunOS.5.8.m4 (or other 970 appropriately versioned file) to enable LDAP: 971 972 APPENDDEF(`confMAPDEF', `-DLDAPMAP') 973 APPENDDEF(`confLIBS', `-lldap') 974 975Solaris 9 and later (SunOS 5.9 and later) 976 Solaris 9 and later have a revised LDAP library, libldap.so.5, 977 which is derived from a Netscape implementation, thus requiring 978 that SM_CONF_LDAP_MEMFREE be defined in conjunction with LDAPMAP: 979 980 APPENDDEF(`confMAPDEF', `-DLDAPMAP') 981 APPENDDEF(`confENVDEF', `-DSM_CONF_LDAP_MEMFREE') 982 APPENDDEF(`confLIBS', `-lldap') 983 984Solaris 985 If you are using dns for hostname resolution on Solaris, make sure 986 that the 'dns' entry is last on the hosts line in 987 '/etc/nsswitch.conf'. For example, use: 988 989 hosts: nisplus files dns 990 991 Do not use: 992 993 host: nisplus dns [NOTFOUND=return] files 994 995 Note that 'nisplus' above is an illustration. The same comment 996 applies no matter what naming services you are using. If you have 997 anything other than dns last, even after "[NOTFOUND=return]", 998 sendmail may not be able to determine whether an error was 999 temporary or permanent. The error returned by the solaris 1000 gethostbyname() is the error for the last lookup used, and other 1001 naming services do not have the same concept of temporary failure. 1002 1003Ultrix 1004 By default, the IDENT protocol is turned off on Ultrix. If you 1005 are running Ultrix 4.4 or later, or if you have included patch 1006 CXO-8919 for Ultrix 4.2 or 4.3 to fix the TCP problem, you can turn 1007 IDENT on in the configuration file by setting the "ident" timeout. 1008 1009 The Ultrix 4.5 Y2K patch (ULTV45-022-1) has changed the resolver 1010 included in libc.a. Unfortunately, the __RES symbol hasn't changed 1011 and therefore, sendmail can no longer automatically detect the 1012 newer version. If you get a compiler error: 1013 1014 /lib/libc.a(gethostent.o): local_hostname_length: multiply defined 1015 1016 Then rebuild with this in devtools/Site/site.ULTRIX.m4: 1017 1018 APPENDDEF(`conf_sendmail_ENVDEF', `-DNEEDLOCAL_HOSTNAME_LENGTH=0') 1019 1020Digital UNIX (formerly DEC OSF/1) 1021 If you are compiling on OSF/1 (DEC Alpha), you must use 1022 -L/usr/shlib (otherwise it core dumps on startup). You may also 1023 need -mld to get the nlist() function, although some versions 1024 apparently don't need this. 1025 1026 Also, the enclosed makefile removed /usr/sbin/smtpd; if you need 1027 it, just create the link to the sendmail binary. 1028 1029 On DEC OSF/1 3.2 or earlier, the MatchGECOS option doesn't work 1030 properly due to a bug in the getpw* routines. If you want to use 1031 this, use -DDEC_OSF_BROKEN_GETPWENT=1. The problem is fixed in 3.2C. 1032 1033 Digital's mail delivery agent, /bin/mail (aka /bin/binmail), will 1034 only preserve the envelope sender in the "From " header if 1035 DefaultUserID is set to daemon. Setting this to mailnull will 1036 cause all mail to have the header "From mailnull ...". To use 1037 a different DefaultUserID, you will need to use a different mail 1038 delivery agent (such as mail.local found in the sendmail 1039 distribution). 1040 1041 On Digital UNIX 4.0 and later, Berkeley DB 1.85 is included with the 1042 operating system and already has the ndbm.o module removed. However, 1043 Digital has modified the original Berkeley DB db.h include file. 1044 This results in the following warning while compiling map.c and udb.c: 1045 1046 cc: Warning: /usr/include/db.h, line 74: The redefinition of the macro 1047 "__signed" conflicts with a current definition because the replacement 1048 lists differ. The redefinition is now in effect. 1049 #define __signed signed 1050 ------------------------^ 1051 1052 This warning can be ignored. 1053 1054 Digital UNIX's linker checks /usr/ccs/lib/ before /usr/lib/. 1055 If you have installed a new version of BIND in /usr/include 1056 and /usr/lib, you will experience difficulties as Digital ships 1057 libresolv.a in /usr/ccs/lib/ as well. Be sure to replace both 1058 copies of libresolv.a. 1059 1060IRIX 1061 The header files on SGI IRIX are completely prototyped, and as 1062 a result you can sometimes get some warning messages during 1063 compilation. These can be ignored. There are two errors in 1064 deliver only if you are using gcc, both of the form ``warning: 1065 passing arg N of `execve' from incompatible pointer type''. 1066 Also, if you compile with -DNIS, you will get a complaint 1067 about a declaration of struct dom_binding in a prototype 1068 when compiling map.c; this is not important because the 1069 function being prototyped is not used in that file. 1070 1071 In order to compile sendmail you will have had to install 1072 the developers' option in order to get the necessary include 1073 files. 1074 1075 If you compile with -lmalloc (the fast memory allocator), you may 1076 get warning messages such as the following: 1077 1078 ld32: WARNING 85: definition of _calloc in /usr/lib32/libmalloc.so 1079 preempts that definition in /usr/lib32/mips3/libc.so. 1080 ld32: WARNING 85: definition of _malloc in /usr/lib32/libmalloc.so 1081 preempts that definition in /usr/lib32/mips3/libc.so. 1082 ld32: WARNING 85: definition of _realloc in /usr/lib32/libmalloc.so 1083 preempts that definition in /usr/lib32/mips3/libc.so. 1084 ld32: WARNING 85: definition of _free in /usr/lib32/libmalloc.so 1085 preempts that definition in /usr/lib32/mips3/libc.so. 1086 ld32: WARNING 85: definition of _cfree in /usr/lib32/libmalloc.so 1087 preempts that definition in /usr/lib32/mips3/libc.so. 1088 1089 These are unavoidable and innocuous -- just ignore them. 1090 1091 According to Dave Sill <de5@ornl.gov>, there is a version of the 1092 Berkeley DB library patched to run on Irix 6.2 available from 1093 http://reality.sgi.com/ariel/freeware/#db . 1094 1095IRIX 6.x 1096 If you are using XFS filesystem, avoid using the -32 ABI switch to 1097 the cc compiler if possible. 1098 1099 Broken inet_aton and inet_ntoa on IRIX using gcc: There's 1100 a problem with gcc on IRIX, i.e., gcc can't pass structs 1101 less than 16 bits long unless they are 8 bits; IRIX 6.2 has 1102 some other sized structs. See 1103 http://www.bitmechanic.com/mail-archives/mysql/current/0418.html 1104 This problem seems to be fixed by gcc v2.95.2, gcc v2.8.1 1105 is reported as broken. Check your gcc version for this bug 1106 before installing sendmail. 1107 1108IRIX 6.4 1109 The IRIX 6.5.4 version of /bin/m4 does not work properly with 1110 sendmail. Either install fw_m4.sw.m4 off the Freeware_May99 CD and 1111 use /usr/freeware/bin/m4 or install and use GNU m4. 1112 1113NeXT or NEXTSTEP 1114 NEXTSTEP 3.3 and earlier ship with the old DBM library. Also, 1115 Berkeley DB does not currently run on NEXTSTEP. 1116 1117 If you are compiling on NEXTSTEP, you will have to create an 1118 empty file "unistd.h" and create a file "dirent.h" containing: 1119 1120 #include <sys/dir.h> 1121 #define dirent direct 1122 1123 (devtools/OS/NeXT should try to do both of these for you.) 1124 1125 Apparently, there is a bug in getservbyname on Nextstep 3.0 1126 that causes it to fail under some circumstances with the 1127 message "SYSERR: service "smtp" unknown" logged. You should 1128 be able to work around this by including the line: 1129 1130 OOPort=25 1131 1132 in your .cf file. 1133 1134BSDI (BSD/386) 1.0, NetBSD 0.9, FreeBSD 1.0 1135 The "m4" from BSDI won't handle the config files properly. 1136 I haven't had a chance to test this myself. 1137 1138 The M4 shipped in FreeBSD and NetBSD 0.9 don't handle the config 1139 files properly. One must use either GNU m4 1.1 or the PD-M4 1140 recently posted in comp.os.386bsd.bugs (and maybe others). 1141 NetBSD-current includes the PD-M4 (as stated in the NetBSD file 1142 CHANGES). 1143 1144 FreeBSD 1.0 RELEASE has uname(2) now. Use -DUSEUNAME in order to 1145 use it (look into devtools/OS/FreeBSD). NetBSD-current may have 1146 it too but it has not been verified. 1147 1148 The latest version of Berkeley DB uses a different naming 1149 scheme than the version that is supplied with your release. This 1150 means you will be able to use the current version of Berkeley DB 1151 with sendmail as long you use the new db.h when compiling 1152 sendmail and link it against the new libdb.a or libdb.so. You 1153 should probably keep the original db.h in /usr/include and the 1154 new db.h in /usr/local/include. 1155 11564.3BSD 1157 If you are running a "virgin" version of 4.3BSD, you'll have 1158 a very old resolver and be missing some header files. The 1159 header files are simple -- create empty versions and everything 1160 will work fine. For the resolver you should really port a new 1161 version (4.8.3 or later) of the resolver; 4.9 is available on 1162 gatekeeper.DEC.COM in pub/BSD/bind/4.9. If you are really 1163 determined to continue to use your old, buggy version (or as 1164 a shortcut to get sendmail working -- I'm sure you have the 1165 best intentions to port a modern version of BIND), you can 1166 copy ../contrib/oldbind.compat.c into sendmail and add the 1167 following to devtools/Site/site.config.m4: 1168 1169 APPENDDEF(`confOBJADD', `oldbind.compat.o') 1170 1171OpenBSD (up to 2.9 Release), NetBSD, FreeBSD (up to 4.3-RELEASE) 1172 m4 from *BSD won't handle libsm/Makefile.m4 properly, since the 1173 maximum length for strings is too short. You need to use GNU m4 1174 or patch m4, see for example: 1175 http://FreeBSD.org/cgi/cvsweb.cgi/src/usr.bin/m4/eval.c.diff?r1=1.11&r2=1.12 1176 1177A/UX 1178 Date: Tue, 12 Oct 1993 18:28:28 -0400 (EDT) 1179 From: "Eric C. Hagberg" <hagberg@med.cornell.edu> 1180 Subject: Fix for A/UX ndbm 1181 1182 I guess this isn't really a sendmail bug, however, it is something 1183 that A/UX users should be aware of when compiling sendmail 8.6. 1184 1185 Apparently, the calls that sendmail is using to the ndbm routines 1186 in A/UX 3.0.x contain calls to "broken" routines, in that the 1187 aliases database will break when it gets "just a little big" 1188 (sorry I don't have exact numbers here, but it broke somewhere 1189 around 20-25 aliases for me.), making all aliases non-functional 1190 after exceeding this point. 1191 1192 What I did was to get the gnu-dbm-1.6 package, compile it, and 1193 then re-compile sendmail with "-lgdbm", "-DNDBM", and using the 1194 ndbm.h header file that comes with the gnu-package. This makes 1195 things behave properly. 1196 [NOTE: see comment above about GDBM] 1197 1198 I suppose porting the New Berkeley DB package is another route, 1199 however, I made a quick attempt at it, and found it difficult 1200 (not easy at least); the gnu-dbm package "configured" and 1201 compiled easily. 1202 1203 [NOTE: Berkeley DB version 2.X runs on A/UX and can be used for 1204 database maps.] 1205 1206SCO Unix 1207 From: Thomas Essebier <tom@stallion.oz.au> 1208 Organisation: Stallion Technologies Pty Ltd. 1209 1210 It will probably help those who are trying to configure sendmail 8.6.9 1211 to know that if they are on SCO, they had better set 1212 OI-dnsrch 1213 or they will core dump as soon as they try to use the resolver. 1214 i.e., although SCO has _res.dnsrch defined, and is kinda BIND 4.8.3, 1215 it does not inititialise it, nor does it understand 'search' in 1216 /etc/named.boot. 1217 - sigh - 1218 1219 According to SCO, the m4 which ships with UnixWare 2.1.2 is broken. 1220 We recommend installing GNU m4 before attempting to build sendmail. 1221 1222 On some versions a bogus error value is listed if connections 1223 time out (large negative number). To avoid this explicitly set 1224 Timeout.connect to a reasonable value (several minutes). 1225 1226DG/UX 1227 Doug Anderson <dlander@afterlife.ncsc.mil> has successfully run 1228 V8 on the DG/UX 5.4.2 and 5.4R3.x platforms under heavy usage. 1229 Originally, the DG /bin/mail program wasn't compatible with 1230 the V8 sendmail, since the DG /bin/mail requires the environment 1231 variable "_FORCE_MAIL_LOCAL_=yes" be set. Version 8.7 now includes 1232 this in the environment before invoking the local mailer. Some 1233 have used procmail to avoid this problem in the past. It works 1234 but some have experienced file locking problems with their DG/UX 1235 ports of procmail. 1236 1237Apollo DomainOS 1238 If you are compiling on Apollo, you will have to create an empty 1239 file "unistd.h" (for DomainOS 10.3 and earlier) and create a file 1240 "dirent.h" containing: 1241 1242 #include <sys/dir.h> 1243 #define dirent direct 1244 1245 (devtools/OS/DomainOS will attempt to do both of these for you.) 1246 1247HP-UX 8.00 1248 Date: Mon, 24 Jan 1994 13:25:45 +0200 1249 From: Kimmo Suominen <Kimmo.Suominen@lut.fi> 1250 Subject: 8.6.5 w/ HP-UX 8.00 on s300 1251 1252 Just compiled and fought with sendmail 8.6.5 on a HP9000/360 (i.e., 1253 a series 300 machine) running HP-UX 8.00. 1254 1255 I was getting segmentation fault when delivering to a local user. 1256 With debugging I saw it was faulting when doing _free@libc... *sigh* 1257 It seems the new implementation of malloc on s300 is buggy as of 8.0, 1258 so I tried out the one in -lmalloc (malloc(3X)). With that it seems 1259 to work just dandy. 1260 1261 When linking, you will get the following error: 1262 1263 ld: multiply defined symbol _freespace in file /usr/lib/libmalloc.a 1264 1265 but you can just ignore it. You might want to add this info to the 1266 README file for the future... 1267 1268Linux 1269 Something broke between versions 0.99.13 and 0.99.14 of Linux: 1270 the flock() system call gives errors. If you are running .14, 1271 you must not use flock. You can do this with -DHASFLOCK=0. 1272 1273 Around the inclusion of bind-4.9.3 & Linux libc-4.6.20, the 1274 initialization of the _res structure changed. If /etc/hosts.conf 1275 was configured as "hosts, bind" the resolver code could return 1276 "Name server failure" errors. This is supposedly fixed in 1277 later versions of libc (>= 4.6.29?), and later versions of 1278 sendmail (> 8.6.10) try to work around the problem. 1279 1280 Some older versions (< 4.6.20?) of the libc/include files conflict 1281 with sendmail's version of cdefs.h. Deleting sendmail's version 1282 on those systems should be non-harmful, and new versions don't care. 1283 1284 NOTE ON LINUX & BIND: By default, the Makefile generated for Linux 1285 includes header files in /usr/local/include and libraries in 1286 /usr/local/lib. If you've installed BIND on your system, the header 1287 files typically end up in the search path and you need to add 1288 "-lresolv" to the LIBS line in your Makefile. Really old versions 1289 may need to include "-l44bsd" as well (particularly if the link phase 1290 complains about missing strcasecmp, strncasecmp or strpbrk). 1291 Complaints about an undefined reference to `__dn_skipname' in 1292 domain.o are a sure sign that you need to add -lresolv to LIBS. 1293 Newer versions of Linux are basically threaded BIND, so you may or 1294 may not see complaints if you accidentally mix BIND 1295 headers/libraries with virginal libc. If you have BIND headers in 1296 /usr/local/include (resolv.h, etc) you *should* be adding -lresolv 1297 to LIBS. Data structures may change and you'd be asking for a 1298 core dump. 1299 1300 A number of problems have been reported regarding the Linux 2.2.0 1301 kernel. So far, these problems have been tracked down to syslog() 1302 and DNS resolution. We believe the problem is with the poll() 1303 implementation in the Linux 2.2.0 kernel and poll()-aware versions 1304 of glib (at least up to 2.0.111). 1305 1306glibc 1307 glibc 2.2.1 (and possibly other versions) changed the value of 1308 __RES in resolv.h but failed to actually provide the IPv6 API 1309 changes that the change implied. Therefore, compiling with 1310 -DNETINET6 fails. 1311 1312 Workarounds: 1313 1) Compile without -DNETINET6 1314 2) Build against a real BIND 8.2.2 include/lib tree 1315 3) Wait for glibc to fix it 1316 1317AIX 4.X 1318 The AIX 4.X linker uses library paths specified during compilation 1319 using -L for run-time shared library searches. Therefore, it is 1320 vital that relative and unsafe directory paths not be using when 1321 compiling sendmail. Because of this danger, by default, compiles 1322 on AIX use the -blibpath option to limit shared libraries to 1323 /usr/lib and /lib. If you need to allow more directories, such as 1324 /usr/local/lib, modify your devtools/Site/site.AIX.4.2.m4, 1325 site.AIX.4.3.m4, and/or site.AIX.4.x.m4 file(s) and set confLDOPTS 1326 approriately. For example: 1327 1328 define(`confLDOPTS', `-blibpath:/usr/lib:/lib:/usr/local/lib') 1329 1330 Be sure to only add (safe) system directories. 1331 1332 The AIX version of GNU ld also exhibits this problem. If you are 1333 using that version, instead of -blibpath, use its -rpath option. 1334 For example: 1335 1336 gcc -Wl,-rpath /usr/lib -Wl,-rpath /lib -Wl,-rpath /usr/local/lib 1337 1338AIX 4.X If the test program t-event (and most others) in libsm fails, 1339 check your compiler settings. It seems that the flags -qnoro or 1340 -qnoroconst on some AIX versions trigger a compiler bug. Check 1341 your compiler settings or use cc instead of xlc. 1342 1343AIX 4.0-4.2, maybe some AIX 4.3 versions 1344 The AIX m4 implements a different mechanism for ifdef which is 1345 inconsistent with other versions of m4. Therefore, it will not 1346 work properly with the sendmail Build architecture or m4 1347 configuration method. To work around this problem, please use 1348 GNU m4 from ftp://ftp.gnu.org/pub/gnu/. 1349 The problem seems to be solved in AIX 4.3.3 at least. 1350 1351AIX 4.3.3 1352 From: Valdis.Kletnieks@vt.edu 1353 Date: Sun, 02 Jul 2000 03:58:02 -0400 1354 1355 Under AIX 4.3.3, after applying bos.adt.include 4.3.3.12 to close the 1356 BIND 8.2.2 security holes, you can no longer build with -DNETINET6 1357 because they changed the value of __RES in resolv.h but failed to 1358 actually provide the API changes that the change implied. 1359 1360 Workarounds: 1361 1) Compile without -DNETINET6 1362 2) Build against a real BIND 8.2.2 include/lib tree 1363 3) Wait for IBM to fix it 1364 1365AIX 3.x 1366 This version of sendmail does not support MB, MG, and MR resource 1367 records, which are supported by AIX sendmail. 1368 1369 Several people have reported that the IBM-supplied named returns 1370 fairly random results -- the named should be replaced. It is not 1371 necessary to replace the resolver, which will simplify installation. 1372 A new BIND resolver can be found at http://www.isc.org/isc/. 1373 1374AIX 3.1.x 1375 The supplied load average code only works correctly for AIX 3.2.x. 1376 For 3.1, use -DLA_TYPE=LA_SUBR and get the latest ``monitor'' 1377 package by Jussi Maki <jmaki@hut.fi> from ftp.funet.fi in the 1378 directory pub/unix/AIX/rs6000/monitor-1.12.tar.Z; use the loadavgd 1379 daemon, and the getloadavg subroutine supplied with that package. 1380 If you don't care about load average throttling, just turn off 1381 load average checking using -DLA_TYPE=LA_ZERO. 1382 1383RISC/os 1384 RISC/os from MIPS is a merged AT&T/Berkeley system. When you 1385 compile on that platform you will get duplicate definitions 1386 on many files. You can ignore these. 1387 1388System V Release 4 Based Systems 1389 There is a single devtools OS that is intended for all SVR4-based 1390 systems (built from devtools/OS/SVR4). It defines __svr4__, 1391 which is predefined by some compilers. If your compiler already 1392 defines this compile variable, you can delete the definition from 1393 the generated Makefile or create a devtools/Site/site.config.m4 1394 file. 1395 1396 It's been tested on Dell Issue 2.2. 1397 1398DELL SVR4 1399 Date: Mon, 06 Dec 1993 10:42:29 EST 1400 From: "Kimmo Suominen" <kim@grendel.lut.fi> 1401 Message-ID: <2d0352f9.lento29@lento29.UUCP> 1402 To: eric@cs.berkeley.edu 1403 Cc: sendmail@cs.berkeley.edu 1404 Subject: Notes for DELL SVR4 1405 1406 Eric, 1407 1408 Here are some notes for compiling Sendmail 8.6.4 on DELL SVR4. I ran 1409 across these things when helping out some people who contacted me by 1410 e-mail. 1411 1412 1) Use gcc 2.4.5 (or later?). Dell distributes gcc 2.1 with their 1413 Issue 2.2 Unix. It is too old, and gives you problems with 1414 clock.c, because sigset_t won't get defined in <sys/signal.h>. 1415 This is due to a problematic protection rule in there, and is 1416 fixed with gcc 2.4.5. 1417 1418 2) If you don't use the new Berkeley DB (-DNEWDB), then you need 1419 to add "-lc -lucb" to the libraries to link with. This is because 1420 the -ldbm distributed by Dell needs the bcopy, bcmp and bzero 1421 functions. It is important that you specify both libraries in 1422 the given order to be sure you only get the BSTRING functions 1423 from the UCB library (and not the signal routines etc.). 1424 1425 3) Don't leave out "-lelf" even if compiling with "-lc -lucb". 1426 The UCB library also has another copy of the nlist routines, 1427 but we do want the ones from "-lelf". 1428 1429 If anyone needs a compiled gcc 2.4.5 and/or a ported DB library, they 1430 can use anonymous ftp to fetch them from lut.fi in the /kim directory. 1431 They are copies of what I use on grendel.lut.fi, and offering them 1432 does not imply that I would also support them. I have sent the DB 1433 port for SVR4 back to Keith Bostic for inclusion in the official 1434 distribution, but I haven't heard anything from him as of today. 1435 1436 - gcc-2.4.5-svr4.tar.gz (gcc 2.4.5 and the corresponding libg++) 1437 - db-1.72.tar.gz (with source, objects and a installed copy) 1438 1439 Cheers 1440 + Kim 1441 -- 1442 * Kimmo.Suominen@lut.fi * SysVr4 enthusiast at GRENDEL.LUT.FI * 1443 * KIM@FINFILES.BITNET * Postmaster and Hostmaster at LUT.FI * 1444 * + 358 200 865 718 * Unix area moderator at NIC.FUNET.FI * 1445 1446ConvexOS 10.1 and below 1447 In order to use the name server, you must create the file 1448 /etc/use_nameserver. If this file does not exist, the call 1449 to res_init() will fail and you will have absolutely no 1450 access to DNS, including MX records. 1451 1452Amdahl UTS 2.1.5 1453 In order to get UTS to work, you will have to port BIND 4.9. 1454 The vendor's BIND is reported to be ``totally inadequate.'' 1455 See sendmail/contrib/AmdahlUTS.patch for the patches necessary 1456 to get BIND 4.9 compiled for UTS. 1457 1458UnixWare 1459 According to Alexander Kolbasov <sasha@unitech.gamma.ru>, 1460 the m4 on UnixWare 2.0 (still in Beta) will core dump on the 1461 config files. GNU m4 and the m4 from UnixWare 1.x both work. 1462 1463 According to Larry Rosenman <ler@lerami.lerctr.org>: 1464 1465 UnixWare 2.1.[23]'s m4 chokes (not obviously) when 1466 processing the 8.9.0 cf files. 1467 1468 I had a LOCAL_RULE_0 that wound up AFTER the 1469 SBasic_check_rcpt rules using the SCO supplied M4. 1470 GNU M4 works fine. 1471 1472UNICOS 8.0.3.4 1473 Some people have reported that the -O flag on UNICOS can cause 1474 problems. You may want to turn this off if you have problems 1475 running sendmail. Reported by Jerry G. DeLapp <jgd@acl.lanl.gov>. 1476 1477Darwin/Mac OS X (10.X.X) 1478 The linker errors produced regarding getopt() and it's associated 1479 variables can safely be ignored. 1480 1481 From Mike Zimmerman <zimmy@torrentnet.com>: 1482 1483 From scratch here is what Darwin users need to do to the standard 1484 10.0.0, 10.0.1 install to get sendmail working. 1485 From http://www.macosx.com/forums/showthread.php?s=6dac0e9e1f3fd118a4870a8a9b559491&threadid=2242: 1486 1. chmod g-w / /private /private/etc 1487 2. Properly set HOSTNAME in /etc/hostconfig to your FQDN: 1488 HOSTNAME=-my.domain.com- 1489 3. Edit /etc/rc.boot: 1490 hostname my.domain.com 1491 domainname domain.com 1492 4. Edit /System/Library/StartupItems/Sendmail/Sendmail: 1493 Remove the "&" after the sendmail command: 1494 /usr/sbin/sendmail -bd -q1h 1495 1496 From Carsten Klapp <carsten.klapp@home.com>: 1497 1498 The easiest workaround is to remove the group-writable permission 1499 for the root directory and the symbolic /etc inherits this 1500 change. While this does fix sendmail, the unfortunate side-effect 1501 is the OS X admin will no longer be able to manipulate icons in the 1502 top level of the Startup disk unless logged into the GUI as the 1503 superuser. 1504 1505 In applying the alternate workaround, care must be taken while 1506 swapping the symlink /etc with the directory /private/etc. In all 1507 likelihood any admin who is concerned with this sendmail error has 1508 enough experience to not accidentally harm anything in the process. 1509 1510 a. Swap the /etc symlink with /private/etc (as superuser): 1511 rm /etc 1512 mv /private/etc /etc 1513 ln -s /etc /private/etc 1514 1515 b. Set / to group unwritable (as superuser): 1516 chmod g-w / 1517 1518GNU getopt 1519 I'm told that GNU getopt has a problem in that it gets confused 1520 by the double call. Use the version in conf.c instead. 1521 1522BIND 4.9.2 and Ultrix 1523 If you are running on Ultrix, be sure you read conf/Info.Ultrix 1524 in the BIND distribution very carefully -- there is information 1525 in there that you need to know in order to avoid errors of the 1526 form: 1527 1528 /lib/libc.a(gethostent.o): sethostent: multiply defined 1529 /lib/libc.a(gethostent.o): endhostent: multiply defined 1530 /lib/libc.a(gethostent.o): gethostbyname: multiply defined 1531 /lib/libc.a(gethostent.o): gethostbyaddr: multiply defined 1532 1533 during the link stage. 1534 1535BIND 8.X 1536 BIND 8.X returns HOST_NOT_FOUND instead of TRY_AGAIN on temporary 1537 DNS failures when trying to find the hostname associated with an IP 1538 address (gethostbyaddr()). This can cause problems as 1539 $&{client_name} based lookups in class R ($=R) and the access 1540 database won't succeed. 1541 1542 This will be fixed in BIND 8.2.1. For earlier versions, this can 1543 be fixed by making "dns" the last name service queried for host 1544 resolution in /etc/irs.conf: 1545 1546 hosts local continue 1547 hosts dns 1548 1549strtoul 1550 Some compilers (notably gcc) claim to be ANSI C but do not 1551 include the ANSI-required routine "strtoul". If your compiler 1552 has this problem, you will get an error in srvrsmtp.c on the 1553 code: 1554 1555 # ifdef defined(__STDC__) && !defined(BROKEN_ANSI_LIBRARY) 1556 e->e_msgsize = strtoul(vp, (char **) NULL, 10); 1557 # else 1558 e->e_msgsize = strtol(vp, (char **) NULL, 10); 1559 # endif 1560 1561 You can use -DBROKEN_ANSI_LIBRARY to get around this problem. 1562 1563Listproc 6.0c 1564 Date: 23 Sep 1995 23:56:07 GMT 1565 Message-ID: <95925101334.~INN-AUMa00187.comp-news@dl.ac.uk> 1566 From: alansz@mellers1.psych.berkeley.edu (Alan Schwartz) 1567 Subject: Listproc 6.0c + Sendmail 8.7 [Helpful hint] 1568 1569 Just upgraded to sendmail 8.7, and discovered that listproc 6.0c 1570 breaks, because it, by default, sends a blank "HELO" rather than 1571 a "HELO hostname" when using the 'system' or 'telnet' mailmethod. 1572 1573 The fix is to include -DZMAILER in the compilation, which will 1574 cause it to use "HELO hostname" (which Z-mail apparently requires 1575 as well. :) 1576 1577OpenSSL 1578 OpenSSL versions prior to 0.9.6 use a macro named Free which 1579 conflicts with existing macro names on some platforms, such as 1580 AIX. 1581 Do not use 0.9.3, but OpenSSL 0.9.5a or later if compatible with 1582 0.9.5a. 1583 1584PH 1585 PH support is provided by Mark Roth <roth@uiuc.edu>. The map is 1586 described at http://www-dev.cso.uiuc.edu/sendmail/ . 1587 1588 NOTE: The "spacedname" pseudo-field which was used by earlier 1589 versions of the PH map code is no longer supported! See the URL 1590 listed above for more information. 1591 1592 Please contact Mark Roth for support and questions regarding the 1593 map. 1594 1595TCP Wrappers 1596 If you are using -DTCPWRAPPERS to get TCP Wrappers support you will 1597 also need to install libwrap.a and modify your site.config.m4 file 1598 or the generated Makefile to include -lwrap in the LIBS line 1599 (make sure that INCDIRS and LIBDIRS point to where the tcpd.h and 1600 libwrap.a can be found). 1601 1602 TCP Wrappers is available at ftp://ftp.porcupine.org/pub/security/. 1603 1604 If you have alternate MX sites for your site, be sure that all of 1605 your MX sites reject the same set of hosts. If not, a bad guy whom 1606 you reject will connect to your site, fail, and move on to the next 1607 MX site, which will accept the mail for you and forward it on to you. 1608 1609Regular Expressions (MAP_REGEX) 1610 If sendmail linking fails with: 1611 1612 undefined reference to 'regcomp' 1613 1614 or sendmail gives an error about a regular expression with: 1615 1616 pattern-compile-error: : Operation not applicable 1617 1618 Your libc does not include a running version of POSIX-regex. Use 1619 librx or regex.o from the GNU Free Software Foundation, 1620 ftp://ftp.gnu.org/pub/gnu/rx-?.?.tar.gz or 1621 ftp://ftp.gnu.org/pub/gnu/regex-?.?.tar.gz. 1622 You can also use the regex-lib by Henry Spencer, 1623 ftp://ftp.funet.fi/pub/languages/C/spencer/regex.shar.gz 1624 Make sure, your compiler reads regex.h from the distribution, 1625 not from /usr/include, otherwise sendmail will dump a core. 1626 1627 1628+--------------+ 1629| MANUAL PAGES | 1630+--------------+ 1631 1632The manual pages have been written against the -man macros, and 1633should format correctly with any reasonable *roff. 1634 1635 1636+-----------------+ 1637| DEBUGGING HOOKS | 1638+-----------------+ 1639 1640As of 8.6.5, sendmail daemons will catch a SIGUSR1 signal and log 1641some debugging output (logged at LOG_DEBUG severity). The 1642information dumped is: 1643 1644 * The value of the $j macro. 1645 * A warning if $j is not in the set $=w. 1646 * A list of the open file descriptors. 1647 * The contents of the connection cache. 1648 * If ruleset 89 is defined, it is evaluated and the results printed. 1649 1650This allows you to get information regarding the runtime state of the 1651daemon on the fly. This should not be done too frequently, since 1652the process of rewriting may lose memory which will not be recovered. 1653Also, ruleset 89 may call non-reentrant routines, so there is a small 1654non-zero probability that this will cause other problems. It is 1655really only for debugging serious problems. 1656 1657A typical formulation of ruleset 89 would be: 1658 1659 R$* $@ $>0 some test address 1660 1661 1662+-----------------------------+ 1663| DESCRIPTION OF SOURCE FILES | 1664+-----------------------------+ 1665 1666The following list describes the files in this directory: 1667 1668Build Shell script for building sendmail. 1669Makefile A convenience for calling ./Build. 1670Makefile.m4 A template for constructing a makefile based on the 1671 information in the devtools directory. 1672README This file. 1673TRACEFLAGS My own personal list of the trace flags -- not guaranteed 1674 to be particularly up to date. 1675alias.c Does name aliasing in all forms. 1676aliases.5 Man page describing the format of the aliases file. 1677arpadate.c A subroutine which creates ARPANET standard dates. 1678bf.c Routines to implement memory-buffered file system using 1679 hooks provided by libsm now (formerly Torek stdio library). 1680bf.h Buffered file I/O function declarations and 1681 data structure and function declarations for bf.c. 1682collect.c The routine that actually reads the mail into a temp 1683 file. It also does a certain amount of parsing of 1684 the header, etc. 1685conf.c The configuration file. This contains information 1686 that is presumed to be quite static and non- 1687 controversial, or code compiled in for efficiency 1688 reasons. Most of the configuration is in sendmail.cf. 1689conf.h Configuration that must be known everywhere. 1690control.c Routines to implement control socket. 1691convtime.c A routine to sanely process times. 1692daemon.c Routines to implement daemon mode. 1693deliver.c Routines to deliver mail. 1694domain.c Routines that interface with DNS (the Domain Name 1695 System). 1696envelope.c Routines to manipulate the envelope structure. 1697err.c Routines to print error messages. 1698headers.c Routines to process message headers. 1699helpfile An example helpfile for the SMTP HELP command and -bt mode. 1700macro.c The macro expander. This is used internally to 1701 insert information from the configuration file. 1702mailq.1 Man page for the mailq command. 1703main.c The main routine to sendmail. This file also 1704 contains some miscellaneous routines. 1705makesendmail A convenience for calling ./Build. 1706map.c Support for database maps. 1707mci.c Routines that handle mail connection information caching. 1708milter.c MTA portions of the mail filter API. 1709mime.c MIME conversion routines. 1710newaliases.1 Man page for the newaliases command. 1711parseaddr.c The routines which do address parsing. 1712queue.c Routines to implement message queueing. 1713readcf.c The routine that reads the configuration file and 1714 translates it to internal form. 1715recipient.c Routines that manipulate the recipient list. 1716sasl.c Routines to interact with Cyrys-SASL. 1717savemail.c Routines which save the letter on processing errors. 1718sendmail.8 Man page for the sendmail command. 1719sendmail.h Main header file for sendmail. 1720sfsasl.c I/O interface between SASL/TLS and the MTA. 1721sfsasl.h Header file for sfsasl.c. 1722shmticklib.c Routines for shared memory counters. 1723sm_resolve.c Routines for DNS lookups (for DNS map type). 1724sm_resolve.h Header file for sm_resolve.c. 1725srvrsmtp.c Routines to implement server SMTP. 1726stab.c Routines to manage the symbol table. 1727stats.c Routines to collect and post the statistics. 1728statusd_shm.h Data structure and function declarations for shmticklib.c. 1729sysexits.c List of error messages associated with error codes 1730 in sysexits.h. 1731sysexits.h List of error codes for systems that lack their own. 1732timers.c Routines to provide microtimers. 1733timers.h Data structure and function declarations for timers.h. 1734tls.c Routines for TLS. 1735trace.c The trace package. These routines allow setting and 1736 testing of trace flags with a high granularity. 1737udb.c The user database interface module. 1738usersmtp.c Routines to implement user SMTP. 1739util.c Some general purpose routines used by sendmail. 1740version.c The version number and information about this 1741 version of sendmail. 1742 1743(Version $Revision: 8.355 $, last update $Date: 2002/05/22 19:46:26 $ ) 1744