1330 lines
43 KiB
Plaintext
1330 lines
43 KiB
Plaintext
divert(-1)
|
||
#
|
||
# Copyright (c) 1998 Sendmail, Inc. All rights reserved.
|
||
# Copyright (c) 1983, 1995 Eric P. Allman. All rights reserved.
|
||
# Copyright (c) 1988, 1993
|
||
# The Regents of the University of California. All rights reserved.
|
||
#
|
||
# By using this file, you agree to the terms and conditions set
|
||
# forth in the LICENSE file which can be found at the top level of
|
||
# the sendmail distribution.
|
||
#
|
||
#
|
||
divert(0)
|
||
|
||
VERSIONID(`@(#)proto.m4 8.243 (Berkeley) 2/2/1999')
|
||
|
||
MAILER(local)dnl
|
||
|
||
# level 8 config file format
|
||
V8/ifdef(`VENDOR_NAME', `VENDOR_NAME', `Berkeley')
|
||
divert(-1)
|
||
|
||
# do some sanity checking
|
||
ifdef(`__OSTYPE__',,
|
||
`errprint(`*** ERROR: No system type defined (use OSTYPE macro)')')
|
||
|
||
# pick our default mailers
|
||
ifdef(`confSMTP_MAILER',, `define(`confSMTP_MAILER', `esmtp')')
|
||
ifdef(`confLOCAL_MAILER',, `define(`confLOCAL_MAILER', `local')')
|
||
ifdef(`confRELAY_MAILER',,
|
||
`define(`confRELAY_MAILER',
|
||
`ifdef(`_MAILER_smtp_', `relay',
|
||
`ifdef(`_MAILER_uucp', `uucp-new', `unknown')')')')
|
||
ifdef(`confUUCP_MAILER',, `define(`confUUCP_MAILER', `uucp-old')')
|
||
define(`_SMTP_', `confSMTP_MAILER')dnl for readability only
|
||
define(`_LOCAL_', `confLOCAL_MAILER')dnl for readability only
|
||
define(`_RELAY_', `confRELAY_MAILER')dnl for readability only
|
||
define(`_UUCP_', `confUUCP_MAILER')dnl for readability only
|
||
|
||
# set our default hashed database type
|
||
ifdef(`DATABASE_MAP_TYPE',, `define(`DATABASE_MAP_TYPE', `hash')')
|
||
|
||
# back compatibility with old config files
|
||
ifdef(`confDEF_GROUP_ID',
|
||
`errprint(`*** confDEF_GROUP_ID is obsolete.')
|
||
errprint(` Use confDEF_USER_ID with a colon in the value instead.')')
|
||
ifdef(`confREAD_TIMEOUT',
|
||
`errprint(`*** confREAD_TIMEOUT is obsolete.')
|
||
errprint(` Use individual confTO_<timeout> parameters instead.')')
|
||
ifdef(`confMESSAGE_TIMEOUT',
|
||
`define(`_ARG_', index(confMESSAGE_TIMEOUT, /))
|
||
ifelse(_ARG_, -1,
|
||
`define(`confTO_QUEUERETURN', confMESSAGE_TIMEOUT)',
|
||
`define(`confTO_QUEUERETURN',
|
||
substr(confMESSAGE_TIMEOUT, 0, _ARG_))
|
||
define(`confTO_QUEUEWARN',
|
||
substr(confMESSAGE_TIMEOUT, eval(_ARG_+1)))')')
|
||
ifdef(`confMIN_FREE_BLOCKS', `ifelse(index(confMIN_FREE_BLOCKS, /), -1,,
|
||
`errprint(`*** compound confMIN_FREE_BLOCKS is obsolete.')
|
||
errprint(` Use confMAX_MESSAGE_SIZE for the second part of the value.')')')
|
||
|
||
# clean option definitions below....
|
||
define(`_OPTION', `ifdef(`$2', `O $1=$2', `#O $1`'ifelse($3, `',, `=$3')')')dnl
|
||
|
||
divert(0)dnl
|
||
|
||
# override file safeties - setting this option compromises system security
|
||
# need to set this now for the sake of class files
|
||
_OPTION(DontBlameSendmail, `confDONT_BLAME_SENDMAIL', safe)
|
||
|
||
##################
|
||
# local info #
|
||
##################
|
||
|
||
Cwlocalhost
|
||
ifdef(`USE_CW_FILE',
|
||
`# file containing names of hosts for which we receive email
|
||
Fw`'confCW_FILE',
|
||
`dnl')
|
||
|
||
# my official domain name
|
||
# ... `define' this only if sendmail cannot automatically determine your domain
|
||
ifdef(`confDOMAIN_NAME', `Dj`'confDOMAIN_NAME', `#Dj$w.Foo.COM')
|
||
|
||
ifdef(`_NULL_CLIENT_ONLY_', `divert(-1)')dnl
|
||
|
||
CP.
|
||
|
||
ifdef(`UUCP_RELAY',
|
||
`# UUCP relay host
|
||
DY`'UUCP_RELAY
|
||
CPUUCP
|
||
|
||
')dnl
|
||
ifdef(`BITNET_RELAY',
|
||
`# BITNET relay host
|
||
DB`'BITNET_RELAY
|
||
CPBITNET
|
||
|
||
')dnl
|
||
ifdef(`DECNET_RELAY',
|
||
`define(`_USE_DECNET_SYNTAX_', 1)dnl
|
||
# DECnet relay host
|
||
DC`'DECNET_RELAY
|
||
CPDECNET
|
||
|
||
')dnl
|
||
ifdef(`FAX_RELAY',
|
||
`# FAX relay host
|
||
DF`'FAX_RELAY
|
||
CPFAX
|
||
|
||
')dnl
|
||
# "Smart" relay host (may be null)
|
||
DS`'ifdef(`SMART_HOST', SMART_HOST)
|
||
|
||
ifdef(`LUSER_RELAY', `dnl
|
||
# place to which unknown users should be forwarded
|
||
Kuser user -m -a<>
|
||
DL`'LUSER_RELAY',
|
||
`dnl')
|
||
|
||
# operators that cannot be in local usernames (i.e., network indicators)
|
||
CO @ % ifdef(`_NO_UUCP_', `', `!')
|
||
|
||
# a class with just dot (for identifying canonical names)
|
||
C..
|
||
|
||
# a class with just a left bracket (for identifying domain literals)
|
||
C[[
|
||
|
||
ifdef(`MAILER_TABLE', `dnl
|
||
# Mailer table (overriding domains)
|
||
Kmailertable MAILER_TABLE',
|
||
`dnl')
|
||
|
||
ifdef(`DOMAIN_TABLE', `dnl
|
||
# Domain table (adding domains)
|
||
Kdomaintable DOMAIN_TABLE',
|
||
`dnl')
|
||
|
||
ifdef(`GENERICS_TABLE', `dnl
|
||
# Generics table (mapping outgoing addresses)
|
||
Kgenerics GENERICS_TABLE',
|
||
`dnl')
|
||
|
||
ifdef(`UUDOMAIN_TABLE', `dnl
|
||
# UUCP domain table
|
||
Kuudomain UUDOMAIN_TABLE',
|
||
`dnl')
|
||
|
||
ifdef(`BITDOMAIN_TABLE', `dnl
|
||
# BITNET mapping table
|
||
Kbitdomain BITDOMAIN_TABLE',
|
||
`dnl')
|
||
|
||
ifdef(`VIRTUSER_TABLE', `dnl
|
||
# Virtual user table (maps incoming users)
|
||
Kvirtuser VIRTUSER_TABLE',
|
||
`dnl')
|
||
|
||
ifdef(`ACCESS_TABLE', `dnl
|
||
# Access list database (for spam stomping)
|
||
Kaccess ACCESS_TABLE',
|
||
`dnl')
|
||
|
||
ifdef(`_RELAY_MX_SERVED_', `dnl
|
||
# MX map (to allow relaying to hosts that we MX for)
|
||
Kmxserved bestmx -z: -T<TEMP>',
|
||
`dnl')
|
||
|
||
ifdef(`_ACCEPT_UNRESOLVABLE_DOMAINS_',`dnl',`dnl
|
||
# Resolve map (to check if a host exists in check_mail)
|
||
Kresolve host -a<OK> -T<TEMP>')
|
||
|
||
ifdef(`confCR_FILE', `dnl
|
||
# Hosts that will permit relaying ($=R)
|
||
FR`'confCR_FILE',
|
||
`dnl')
|
||
|
||
# who I send unqualified names to (null means deliver locally)
|
||
DR`'ifdef(`LOCAL_RELAY', LOCAL_RELAY)
|
||
|
||
# who gets all local email traffic ($R has precedence for unqualified names)
|
||
DH`'ifdef(`MAIL_HUB', MAIL_HUB)
|
||
|
||
# dequoting map
|
||
Kdequote dequote
|
||
|
||
divert(0)dnl # end of nullclient diversion
|
||
# class E: names that should be exposed as from this host, even if we masquerade
|
||
ifdef(`_NULL_CLIENT_ONLY_', `#',
|
||
`# class L: names that should be delivered locally, even if we have a relay
|
||
# class M: domains that should be converted to $M
|
||
#CL root
|
||
')CE root
|
||
undivert(5)dnl
|
||
|
||
# who I masquerade as (null for no masquerading) (see also $=M)
|
||
DM`'ifdef(`MASQUERADE_NAME', MASQUERADE_NAME)
|
||
|
||
# my name for error messages
|
||
ifdef(`confMAILER_NAME', `Dn`'confMAILER_NAME', `#DnMAILER-DAEMON')
|
||
|
||
undivert(6)dnl
|
||
include(_CF_DIR_`m4/version.m4')
|
||
|
||
###############
|
||
# Options #
|
||
###############
|
||
|
||
# strip message body to 7 bits on input?
|
||
_OPTION(SevenBitInput, `confSEVEN_BIT_INPUT')
|
||
|
||
# 8-bit data handling
|
||
_OPTION(EightBitMode, `confEIGHT_BIT_HANDLING', adaptive)
|
||
|
||
ifdef(`_NULL_CLIENT_ONLY_', `dnl', `
|
||
# wait for alias file rebuild (default units: minutes)
|
||
_OPTION(AliasWait, `confALIAS_WAIT', 5m)
|
||
|
||
# location of alias file
|
||
_OPTION(AliasFile, `ALIAS_FILE', ifdef(`_USE_ETC_MAIL_', /etc/mail/aliases, /etc/aliases))
|
||
')
|
||
# minimum number of free blocks on filesystem
|
||
_OPTION(MinFreeBlocks, `confMIN_FREE_BLOCKS', 100)
|
||
|
||
# maximum message size
|
||
_OPTION(MaxMessageSize, `confMAX_MESSAGE_SIZE', 1000000)
|
||
|
||
# substitution for space (blank) characters
|
||
_OPTION(BlankSub, `confBLANK_SUB', _)
|
||
|
||
# avoid connecting to "expensive" mailers on initial submission?
|
||
_OPTION(HoldExpensive, `confCON_EXPENSIVE')
|
||
|
||
# checkpoint queue runs after every N successful deliveries
|
||
_OPTION(CheckpointInterval, `confCHECKPOINT_INTERVAL', 10)
|
||
|
||
# default delivery mode
|
||
_OPTION(DeliveryMode, `confDELIVERY_MODE', background)
|
||
|
||
# automatically rebuild the alias database?
|
||
_OPTION(AutoRebuildAliases, `confAUTO_REBUILD')
|
||
|
||
# error message header/file
|
||
_OPTION(ErrorHeader, `confERROR_MESSAGE', ifdef(`_USE_ETC_MAIL_', /etc/mail/error-header, /etc/sendmail.oE))
|
||
|
||
# error mode
|
||
_OPTION(ErrorMode, `confERROR_MODE', print)
|
||
|
||
# save Unix-style "From_" lines at top of header?
|
||
_OPTION(SaveFromLine, `confSAVE_FROM_LINES')
|
||
|
||
# temporary file mode
|
||
_OPTION(TempFileMode, `confTEMP_FILE_MODE', 0600)
|
||
|
||
# match recipients against GECOS field?
|
||
_OPTION(MatchGECOS, `confMATCH_GECOS')
|
||
|
||
# maximum hop count
|
||
_OPTION(MaxHopCount, `confMAX_HOP', 17)
|
||
|
||
# location of help file
|
||
O HelpFile=ifdef(`HELP_FILE', HELP_FILE, ifdef(`_USE_ETC_MAIL_', /etc/mail/helpfile, /usr/lib/sendmail.hf))
|
||
|
||
# ignore dots as terminators in incoming messages?
|
||
_OPTION(IgnoreDots, `confIGNORE_DOTS')
|
||
|
||
# name resolver options
|
||
_OPTION(ResolverOptions, `confBIND_OPTS', +AAONLY)
|
||
|
||
# deliver MIME-encapsulated error messages?
|
||
_OPTION(SendMimeErrors, `confMIME_FORMAT_ERRORS')
|
||
|
||
# Forward file search path
|
||
_OPTION(ForwardPath, `confFORWARD_PATH', /var/forward/$u:$z/.forward.$w:$z/.forward)
|
||
|
||
# open connection cache size
|
||
_OPTION(ConnectionCacheSize, `confMCI_CACHE_SIZE', 2)
|
||
|
||
# open connection cache timeout
|
||
_OPTION(ConnectionCacheTimeout, `confMCI_CACHE_TIMEOUT', 5m)
|
||
|
||
# persistent host status directory
|
||
_OPTION(HostStatusDirectory, `confHOST_STATUS_DIRECTORY', .hoststat)
|
||
|
||
# single thread deliveries (requires HostStatusDirectory)?
|
||
_OPTION(SingleThreadDelivery, `confSINGLE_THREAD_DELIVERY')
|
||
|
||
# use Errors-To: header?
|
||
_OPTION(UseErrorsTo, `confUSE_ERRORS_TO')
|
||
|
||
# log level
|
||
_OPTION(LogLevel, `confLOG_LEVEL', 10)
|
||
|
||
# send to me too, even in an alias expansion?
|
||
_OPTION(MeToo, `confME_TOO')
|
||
|
||
# verify RHS in newaliases?
|
||
_OPTION(CheckAliases, `confCHECK_ALIASES')
|
||
|
||
# default messages to old style headers if no special punctuation?
|
||
_OPTION(OldStyleHeaders, `confOLD_STYLE_HEADERS')
|
||
|
||
# SMTP daemon options
|
||
_OPTION(DaemonPortOptions, `confDAEMON_OPTIONS', Port=esmtp)
|
||
|
||
# privacy flags
|
||
_OPTION(PrivacyOptions, `confPRIVACY_FLAGS', authwarnings)
|
||
|
||
# who (if anyone) should get extra copies of error messages
|
||
_OPTION(PostMasterCopy, `confCOPY_ERRORS_TO', Postmaster)
|
||
|
||
# slope of queue-only function
|
||
_OPTION(QueueFactor, `confQUEUE_FACTOR', 600000)
|
||
|
||
# queue directory
|
||
O QueueDirectory=ifdef(`QUEUE_DIR', QUEUE_DIR, /var/spool/mqueue)
|
||
|
||
# timeouts (many of these)
|
||
_OPTION(Timeout.initial, `confTO_INITIAL', 5m)
|
||
_OPTION(Timeout.connect, `confTO_CONNECT', 5m)
|
||
_OPTION(Timeout.iconnect, `confTO_ICONNECT', 5m)
|
||
_OPTION(Timeout.helo, `confTO_HELO', 5m)
|
||
_OPTION(Timeout.mail, `confTO_MAIL', 10m)
|
||
_OPTION(Timeout.rcpt, `confTO_RCPT', 1h)
|
||
_OPTION(Timeout.datainit, `confTO_DATAINIT', 5m)
|
||
_OPTION(Timeout.datablock, `confTO_DATABLOCK', 1h)
|
||
_OPTION(Timeout.datafinal, `confTO_DATAFINAL', 1h)
|
||
_OPTION(Timeout.rset, `confTO_RSET', 5m)
|
||
_OPTION(Timeout.quit, `confTO_QUIT', 2m)
|
||
_OPTION(Timeout.misc, `confTO_MISC', 2m)
|
||
_OPTION(Timeout.command, `confTO_COMMAND', 1h)
|
||
_OPTION(Timeout.ident, `confTO_IDENT', 30s)
|
||
_OPTION(Timeout.fileopen, `confTO_FILEOPEN', 60s)
|
||
_OPTION(Timeout.queuereturn, `confTO_QUEUERETURN', 5d)
|
||
_OPTION(Timeout.queuereturn.normal, `confTO_QUEUERETURN_NORMAL', 5d)
|
||
_OPTION(Timeout.queuereturn.urgent, `confTO_QUEUERETURN_URGENT', 2d)
|
||
_OPTION(Timeout.queuereturn.non-urgent, `confTO_QUEUERETURN_NONURGENT', 7d)
|
||
_OPTION(Timeout.queuewarn, `confTO_QUEUEWARN', 4h)
|
||
_OPTION(Timeout.queuewarn.normal, `confTO_QUEUEWARN_NORMAL', 4h)
|
||
_OPTION(Timeout.queuewarn.urgent, `confTO_QUEUEWARN_URGENT', 1h)
|
||
_OPTION(Timeout.queuewarn.non-urgent, `confTO_QUEUEWARN_NONURGENT', 12h)
|
||
_OPTION(Timeout.hoststatus, `confTO_HOSTSTATUS', 30m)
|
||
|
||
# should we not prune routes in route-addr syntax addresses?
|
||
_OPTION(DontPruneRoutes, `confDONT_PRUNE_ROUTES')
|
||
|
||
# queue up everything before forking?
|
||
_OPTION(SuperSafe, `confSAFE_QUEUE')
|
||
|
||
# status file
|
||
O StatusFile=ifdef(`STATUS_FILE', `STATUS_FILE', ifdef(`_USE_ETC_MAIL_', /etc/mail/statistics, /etc/sendmail.st))
|
||
|
||
# time zone handling:
|
||
# if undefined, use system default
|
||
# if defined but null, use TZ envariable passed in
|
||
# if defined and non-null, use that info
|
||
ifelse(confTIME_ZONE, `USE_SYSTEM', `#O TimeZoneSpec=',
|
||
confTIME_ZONE, `USE_TZ', `O TimeZoneSpec=',
|
||
`O TimeZoneSpec=confTIME_ZONE')
|
||
|
||
# default UID (can be username or userid:groupid)
|
||
_OPTION(DefaultUser, `confDEF_USER_ID', mailnull)
|
||
|
||
# list of locations of user database file (null means no lookup)
|
||
_OPTION(UserDatabaseSpec, `confUSERDB_SPEC', ifdef(`_USE_ETC_MAIL_', /etc/mail/userdb, /etc/userdb))
|
||
|
||
# fallback MX host
|
||
_OPTION(FallbackMXhost, `confFALLBACK_MX', fall.back.host.net)
|
||
|
||
# if we are the best MX host for a site, try it directly instead of config err
|
||
_OPTION(TryNullMXList, `confTRY_NULL_MX_LIST')
|
||
|
||
# load average at which we just queue messages
|
||
_OPTION(QueueLA, `confQUEUE_LA', 8)
|
||
|
||
# load average at which we refuse connections
|
||
_OPTION(RefuseLA, `confREFUSE_LA', 12)
|
||
|
||
# maximum number of children we allow at one time
|
||
_OPTION(MaxDaemonChildren, `confMAX_DAEMON_CHILDREN', 12)
|
||
|
||
# maximum number of new connections per second
|
||
_OPTION(ConnectionRateThrottle, `confCONNECTION_RATE_THROTTLE', 3)
|
||
|
||
# work recipient factor
|
||
_OPTION(RecipientFactor, `confWORK_RECIPIENT_FACTOR', 30000)
|
||
|
||
# deliver each queued job in a separate process?
|
||
_OPTION(ForkEachJob, `confSEPARATE_PROC')
|
||
|
||
# work class factor
|
||
_OPTION(ClassFactor, `confWORK_CLASS_FACTOR', 1800)
|
||
|
||
# work time factor
|
||
_OPTION(RetryFactor, `confWORK_TIME_FACTOR', 90000)
|
||
|
||
# shall we sort the queue by hostname first?
|
||
_OPTION(QueueSortOrder, `confQUEUE_SORT_ORDER', priority)
|
||
|
||
# minimum time in queue before retry
|
||
_OPTION(MinQueueAge, `confMIN_QUEUE_AGE', 30m)
|
||
|
||
# default character set
|
||
_OPTION(DefaultCharSet, `confDEF_CHAR_SET', iso-8859-1)
|
||
|
||
# service switch file (ignored on Solaris, Ultrix, OSF/1, others)
|
||
_OPTION(ServiceSwitchFile, `confSERVICE_SWITCH_FILE', ifdef(`_USE_ETC_MAIL_', /etc/mail/service.switch, /etc/service.switch))
|
||
|
||
# hosts file (normally /etc/hosts)
|
||
_OPTION(HostsFile, `confHOSTS_FILE', /etc/hosts)
|
||
|
||
# dialup line delay on connection failure
|
||
_OPTION(DialDelay, `confDIAL_DELAY', 10s)
|
||
|
||
# action to take if there are no recipients in the message
|
||
_OPTION(NoRecipientAction, `confNO_RCPT_ACTION', add-to-undisclosed)
|
||
|
||
# chrooted environment for writing to files
|
||
_OPTION(SafeFileEnvironment, `confSAFE_FILE_ENV', /arch)
|
||
|
||
# are colons OK in addresses?
|
||
_OPTION(ColonOkInAddr, `confCOLON_OK_IN_ADDR')
|
||
|
||
# how many jobs can you process in the queue?
|
||
_OPTION(MaxQueueRunSize, `confMAX_QUEUE_RUN_SIZE', 10000)
|
||
|
||
# shall I avoid expanding CNAMEs (violates protocols)?
|
||
_OPTION(DontExpandCnames, `confDONT_EXPAND_CNAMES')
|
||
|
||
# SMTP initial login message (old $e macro)
|
||
_OPTION(SmtpGreetingMessage, `confSMTP_LOGIN_MSG')
|
||
|
||
# UNIX initial From header format (old $l macro)
|
||
_OPTION(UnixFromLine, `confFROM_LINE')
|
||
|
||
# From: lines that have embedded newlines are unwrapped onto one line
|
||
_OPTION(SingleLineFromHeader, `confSINGLE_LINE_FROM_HEADER', False)
|
||
|
||
# Allow HELO SMTP command that does not `include' a host name
|
||
_OPTION(AllowBogusHELO, `confALLOW_BOGUS_HELO', False)
|
||
|
||
# Characters to be quoted in a full name phrase (@,;:\()[] are automatic)
|
||
_OPTION(MustQuoteChars, `confMUST_QUOTE_CHARS', .)
|
||
|
||
# delimiter (operator) characters (old $o macro)
|
||
_OPTION(OperatorChars, `confOPERATORS')
|
||
|
||
# shall I avoid calling initgroups(3) because of high NIS costs?
|
||
_OPTION(DontInitGroups, `confDONT_INIT_GROUPS')
|
||
|
||
# are group-writable `:include:' and .forward files (un)trustworthy?
|
||
_OPTION(UnsafeGroupWrites, `confUNSAFE_GROUP_WRITES')
|
||
|
||
# where do errors that occur when sending errors get sent?
|
||
_OPTION(DoubleBounceAddress, `confDOUBLE_BOUNCE_ADDRESS', postmaster)
|
||
|
||
# what user id do we assume for the majority of the processing?
|
||
_OPTION(RunAsUser, `confRUN_AS_USER', sendmail)
|
||
|
||
# maximum number of recipients per SMTP envelope
|
||
_OPTION(MaxRecipientsPerMessage, `confMAX_RCPTS_PER_MESSAGE', 100)
|
||
|
||
# shall we get local names from our installed interfaces?
|
||
_OPTION(DontProbeInterfaces, `confDONT_PROBE_INTERFACES')
|
||
|
||
ifdef(`confTRUSTED_USER',
|
||
`# Trusted user for file ownership and starting the daemon
|
||
O TrustedUser=confTRUSTED_USER
|
||
')
|
||
ifdef(`confCONTROL_SOCKET_NAME',
|
||
`# Control socket for daemon management
|
||
O ControlSocketName=confCONTROL_SOCKET_NAME
|
||
')
|
||
ifdef(`confMAX_MIME_HEADER_LENGTH',
|
||
`# Maximum MIME header length to protect MUAs
|
||
O MaxMimeHeaderLength=confMAX_MIME_HEADER_LENGTH
|
||
')
|
||
ifdef(`confMAX_HEADERS_LENGTH',
|
||
`# Maximum length of the sum of all headers
|
||
O MaxHeadersLength=confMAX_HEADERS_LENGTH
|
||
')
|
||
|
||
###########################
|
||
# Message precedences #
|
||
###########################
|
||
|
||
Pfirst-class=0
|
||
Pspecial-delivery=100
|
||
Plist=-30
|
||
Pbulk=-60
|
||
Pjunk=-100
|
||
|
||
#####################
|
||
# Trusted users #
|
||
#####################
|
||
|
||
# this is equivalent to setting class "t"
|
||
ifdef(`_USE_CT_FILE_', `', `#')Ft`'ifdef(`confCT_FILE', confCT_FILE, ifdef(`_USE_ETC_MAIL_', `/etc/mail/trusted-users', `/etc/sendmail.ct'))
|
||
Troot
|
||
Tdaemon
|
||
ifdef(`_NO_UUCP_', `dnl', `Tuucp')
|
||
ifdef(`confTRUSTED_USERS', `T`'confTRUSTED_USERS', `dnl')
|
||
|
||
#########################
|
||
# Format of headers #
|
||
#########################
|
||
|
||
ifdef(`confFROM_HEADER',, `define(`confFROM_HEADER', `$?x$x <$g>$|$g$.')')dnl
|
||
H?P?Return-Path: <$g>
|
||
HReceived: confRECEIVED_HEADER
|
||
H?D?Resent-Date: $a
|
||
H?D?Date: $a
|
||
H?F?Resent-From: confFROM_HEADER
|
||
H?F?From: confFROM_HEADER
|
||
H?x?Full-Name: $x
|
||
# HPosted-Date: $a
|
||
# H?l?Received-Date: $b
|
||
H?M?Resent-Message-Id: <$t.$i@$j>
|
||
H?M?Message-Id: <$t.$i@$j>
|
||
ifdef(`_NULL_CLIENT_ONLY_',
|
||
`include(_CF_DIR_`'m4/nullrelay.m4)m4exit',
|
||
`dnl')
|
||
#
|
||
######################################################################
|
||
######################################################################
|
||
#####
|
||
##### REWRITING RULES
|
||
#####
|
||
######################################################################
|
||
######################################################################
|
||
|
||
############################################
|
||
### Ruleset 3 -- Name Canonicalization ###
|
||
############################################
|
||
S3
|
||
|
||
# handle null input (translate to <@> special case)
|
||
R$@ $@ <@>
|
||
|
||
# strip group: syntax (not inside angle brackets!) and trailing semicolon
|
||
R$* $: $1 <@> mark addresses
|
||
R$* < $* > $* <@> $: $1 < $2 > $3 unmark <addr>
|
||
R@ $* <@> $: @ $1 unmark @host:...
|
||
R$* :: $* <@> $: $1 :: $2 unmark node::addr
|
||
R:`include': $* <@> $: :`include': $1 unmark :`include':...
|
||
R$* [ $* : $* ] <@> $: $1 [ $2 : $3 ] unmark IPv6 addrs
|
||
R$* : $* [ $* ] $: $1 : $2 [ $3 ] <@> remark if leading colon
|
||
R$* : $* <@> $: $2 strip colon if marked
|
||
R$* <@> $: $1 unmark
|
||
R$* ; $1 strip trailing semi
|
||
R$* < $* ; > $1 < $2 > bogus bracketed semi
|
||
|
||
# null input now results from list:; syntax
|
||
R$@ $@ :; <@>
|
||
|
||
# strip angle brackets -- note RFC733 heuristic to get innermost item
|
||
R$* $: < $1 > housekeeping <>
|
||
R$+ < $* > < $2 > strip excess on left
|
||
R< $* > $+ < $1 > strip excess on right
|
||
R<> $@ < @ > MAIL FROM:<> case
|
||
R< $+ > $: $1 remove housekeeping <>
|
||
|
||
# make sure <@a,@b,@c:user@d> syntax is easy to parse -- undone later
|
||
R@ $+ , $+ @ $1 : $2 change all "," to ":"
|
||
|
||
# localize and dispose of route-based addresses
|
||
R@ $+ : $+ $@ $>96 < @$1 > : $2 handle <route-addr>
|
||
|
||
# find focus for list syntax
|
||
R $+ : $* ; @ $+ $@ $>96 $1 : $2 ; < @ $3 > list syntax
|
||
R $+ : $* ; $@ $1 : $2; list syntax
|
||
|
||
# find focus for @ syntax addresses
|
||
R$+ @ $+ $: $1 < @ $2 > focus on domain
|
||
R$+ < $+ @ $+ > $1 $2 < @ $3 > move gaze right
|
||
R$+ < @ $+ > $@ $>96 $1 < @ $2 > already canonical
|
||
|
||
# do some sanity checking
|
||
R$* < @ $* : $* > $* $1 < @ $2 $3 > $4 nix colons in addrs
|
||
|
||
ifdef(`_NO_UUCP_', `dnl',
|
||
`# convert old-style addresses to a domain-based address
|
||
R$- ! $+ $@ $>96 $2 < @ $1 .UUCP > resolve uucp names
|
||
R$+ . $- ! $+ $@ $>96 $3 < @ $1 . $2 > domain uucps
|
||
R$+ ! $+ $@ $>96 $2 < @ $1 .UUCP > uucp subdomains
|
||
')
|
||
ifdef(`_USE_DECNET_SYNTAX_',
|
||
`# convert node::user addresses into a domain-based address
|
||
R$- :: $+ $@ $>96 $2 < @ $1 .DECNET > resolve DECnet names
|
||
R$- . $- :: $+ $@ $>96 $3 < @ $1.$2 .DECNET > numeric DECnet addr
|
||
',
|
||
`dnl')
|
||
# if we have % signs, take the rightmost one
|
||
R$* % $* $1 @ $2 First make them all @s.
|
||
R$* @ $* @ $* $1 % $2 @ $3 Undo all but the last.
|
||
R$* @ $* $@ $>96 $1 < @ $2 > Insert < > and finish
|
||
|
||
# else we must be a local name
|
||
R$* $@ $>96 $1
|
||
|
||
|
||
################################################
|
||
### Ruleset 96 -- bottom half of ruleset 3 ###
|
||
################################################
|
||
|
||
S96
|
||
|
||
# handle special cases for local names
|
||
R$* < @ localhost > $* $: $1 < @ $j . > $2 no domain at all
|
||
R$* < @ localhost . $m > $* $: $1 < @ $j . > $2 local domain
|
||
ifdef(`_NO_UUCP_', `dnl',
|
||
`R$* < @ localhost . UUCP > $* $: $1 < @ $j . > $2 .UUCP domain')
|
||
R$* < @ [ $+ ] > $* $: $1 < @@ [ $2 ] > $3 mark [a.b.c.d]
|
||
R$* < @@ $=w > $* $: $1 < @ $j . > $3 self-literal
|
||
R$* < @@ $+ > $* $@ $1 < @ $2 > $3 canon IP addr
|
||
|
||
ifdef(`DOMAIN_TABLE', `dnl
|
||
# look up domains in the domain table
|
||
R$* < @ $+ > $* $: $1 < @ $(domaintable $2 $) > $3', `dnl')
|
||
|
||
undivert(2)dnl
|
||
|
||
ifdef(`BITDOMAIN_TABLE', `dnl
|
||
# handle BITNET mapping
|
||
R$* < @ $+ .BITNET > $* $: $1 < @ $(bitdomain $2 $: $2.BITNET $) > $3', `dnl')
|
||
|
||
ifdef(`UUDOMAIN_TABLE', `dnl
|
||
# handle UUCP mapping
|
||
R$* < @ $+ .UUCP > $* $: $1 < @ $(uudomain $2 $: $2.UUCP $) > $3', `dnl')
|
||
|
||
ifdef(`_NO_UUCP_', `dnl',
|
||
`ifdef(`UUCP_RELAY',
|
||
`# pass UUCP addresses straight through
|
||
R$* < @ $+ . UUCP > $* $@ $1 < @ $2 . UUCP . > $3',
|
||
`# if really UUCP, handle it immediately
|
||
ifdef(`_CLASS_U_',
|
||
`R$* < @ $=U . UUCP > $* $@ $1 < @ $2 . UUCP . > $3', `dnl')
|
||
ifdef(`_CLASS_V_',
|
||
`R$* < @ $=V . UUCP > $* $@ $1 < @ $2 . UUCP . > $3', `dnl')
|
||
ifdef(`_CLASS_W_',
|
||
`R$* < @ $=W . UUCP > $* $@ $1 < @ $2 . UUCP . > $3', `dnl')
|
||
ifdef(`_CLASS_X_',
|
||
`R$* < @ $=X . UUCP > $* $@ $1 < @ $2 . UUCP . > $3', `dnl')
|
||
ifdef(`_CLASS_Y_',
|
||
`R$* < @ $=Y . UUCP > $* $@ $1 < @ $2 . UUCP . > $3', `dnl')
|
||
|
||
ifdef(`_NO_CANONIFY_', `dnl', `dnl
|
||
# try UUCP traffic as a local address
|
||
R$* < @ $+ . UUCP > $* $: $1 < @ $[ $2 $] . UUCP . > $3
|
||
R$* < @ $+ . . UUCP . > $* $@ $1 < @ $2 . > $3')
|
||
')')
|
||
ifdef(`_NO_CANONIFY_', `dnl', `dnl
|
||
# pass to name server to make hostname canonical
|
||
R$* < @ $* $~P > $* $: $1 < @ $[ $2 $3 $] > $4')
|
||
|
||
# local host aliases and pseudo-domains are always canonical
|
||
R$* < @ $=w > $* $: $1 < @ $2 . > $3
|
||
R$* < @ $j > $* $: $1 < @ $j . > $2
|
||
ifdef(`_MASQUERADE_ENTIRE_DOMAIN_',
|
||
`R$* < @ $* $=M > $* $: $1 < @ $2 $3 . > $4',
|
||
`R$* < @ $=M > $* $: $1 < @ $2 . > $3')
|
||
R$* < @ $* $=P > $* $: $1 < @ $2 $3 . > $4
|
||
R$* < @ $* . . > $* $1 < @ $2 . > $3
|
||
|
||
|
||
##################################################
|
||
### Ruleset 4 -- Final Output Post-rewriting ###
|
||
##################################################
|
||
S4
|
||
|
||
R$* <@> $@ handle <> and list:;
|
||
|
||
# strip trailing dot off possibly canonical name
|
||
R$* < @ $+ . > $* $1 < @ $2 > $3
|
||
|
||
# eliminate internal code -- should never get this far!
|
||
R$* < @ *LOCAL* > $* $1 < @ $j > $2
|
||
|
||
# externalize local domain info
|
||
R$* < $+ > $* $1 $2 $3 defocus
|
||
R@ $+ : @ $+ : $+ @ $1 , @ $2 : $3 <route-addr> canonical
|
||
R@ $* $@ @ $1 ... and exit
|
||
|
||
ifdef(`_NO_UUCP_', `dnl',
|
||
`# UUCP must always be presented in old form
|
||
R$+ @ $- . UUCP $2!$1 u@h.UUCP => h!u')
|
||
|
||
ifdef(`_USE_DECNET_SYNTAX_',
|
||
`# put DECnet back in :: form
|
||
R$+ @ $+ . DECNET $2 :: $1 u@h.DECNET => h::u',
|
||
`dnl')
|
||
# delete duplicate local names
|
||
R$+ % $=w @ $=w $1 @ $2 u%host@host => u@host
|
||
|
||
|
||
|
||
##############################################################
|
||
### Ruleset 97 -- recanonicalize and call ruleset zero ###
|
||
### (used for recursive calls) ###
|
||
##############################################################
|
||
|
||
S`'97
|
||
R$* $: $>3 $1
|
||
R$* $@ $>0 $1
|
||
|
||
|
||
######################################
|
||
### Ruleset 0 -- Parse Address ###
|
||
######################################
|
||
|
||
S0
|
||
|
||
R$* $: $>Parse0 $1 initial parsing
|
||
R<@> $#_LOCAL_ $: <@> special case error msgs
|
||
R$* $: $>98 $1 handle local hacks
|
||
R$* $: $>Parse1 $1 final parsing
|
||
|
||
#
|
||
# Parse0 -- do initial syntax checking and eliminate local addresses.
|
||
# This should either return with the (possibly modified) input
|
||
# or return with a #error mailer. It should not return with a
|
||
# #mailer other than the #error mailer.
|
||
#
|
||
|
||
SParse0
|
||
R<@> $@ <@> special case error msgs
|
||
R$* : $* ; <@> $#error $@ 5.1.3 $: "List:; syntax illegal for recipient addresses"
|
||
#R@ <@ $* > < @ $1 > catch "@@host" bogosity
|
||
R<@ $+> $#error $@ 5.1.3 $: "User address required"
|
||
R$* $: <> $1
|
||
R<> $* < @ [ $+ ] > $* $1 < @ [ $2 ] > $3
|
||
R<> $* <$* : $* > $* $#error $@ 5.1.3 $: "Colon illegal in host name part"
|
||
R<> $* $1
|
||
R$* < @ . $* > $* $#error $@ 5.1.2 $: "Invalid host name"
|
||
R$* < @ $* .. $* > $* $#error $@ 5.1.2 $: "Invalid host name"
|
||
|
||
# now delete the local info -- note $=O to find characters that cause forwarding
|
||
R$* < @ > $* $@ $>Parse0 $>3 $1 user@ => user
|
||
R< @ $=w . > : $* $@ $>Parse0 $>3 $2 @here:... -> ...
|
||
R$- < @ $=w . > $: $(dequote $1 $) < @ $2 . > dequote "foo"@here
|
||
R< @ $+ > $#error $@ 5.1.3 $: "User address required"
|
||
R$* $=O $* < @ $=w . > $@ $>Parse0 $>3 $1 $2 $3 ...@here -> ...
|
||
R$- $: $(dequote $1 $) < @ *LOCAL* > dequote "foo"
|
||
R< @ *LOCAL* > $#error $@ 5.1.3 $: "User address required"
|
||
R$* $=O $* < @ *LOCAL* >
|
||
$@ $>Parse0 $>3 $1 $2 $3 ...@*LOCAL* -> ...
|
||
R$* < @ *LOCAL* > $: $1
|
||
|
||
#
|
||
# Parse1 -- the bottom half of ruleset 0.
|
||
#
|
||
|
||
SParse1
|
||
ifdef(`_MAILER_smtp_',
|
||
`# handle numeric address spec
|
||
R$* < @ [ $+ ] > $* $: $>98 $1 < @ [ $2 ] > $3 numeric internet spec
|
||
R$* < @ [ $+ ] > $* $#_SMTP_ $@ [$2] $: $1 < @ [$2] > $3 still numeric: send',
|
||
`dnl')
|
||
|
||
ifdef(`VIRTUSER_TABLE', `dnl
|
||
# handle virtual users
|
||
R$+ < @ $=w . > $: < $(virtuser $1 @ $2 $@ $1 $: @ $) > $1 < @ $2 . >
|
||
R<@> $+ + $* < @ $* . >
|
||
$: < $(virtuser $1 + * @ $3 $@ $1 $: @ $) > $1 + $2 < @ $3 . >
|
||
R<@> $+ + $* < @ $* . >
|
||
$: < $(virtuser $1 @ $3 $@ $1 $: @ $) > $1 + $2 < @ $3 . >
|
||
R<@> $+ < @ $+ . > $: < $(virtuser @ $2 $@ $1 $: @ $) > $1 < @ $2 . >
|
||
R<@> $+ $: $1
|
||
R< error : $- $+ > $* $#error $@ $(dequote $1 $) $: $2
|
||
R< $+ > $+ < @ $+ > $: $>97 $1',
|
||
`dnl')
|
||
|
||
# short circuit local delivery so forwarded email works
|
||
ifdef(`_MAILER_usenet_', `dnl
|
||
R$+ . USENET < @ $=w . > $#usenet $: $1 handle usenet specially', `dnl')
|
||
ifdef(`_STICKY_LOCAL_DOMAIN_',
|
||
`R$+ < @ $=w . > $: < $H > $1 < @ $2 . > first try hub
|
||
R< $+ > $+ < $+ > $>95 < $1 > $2 < $3 > yep ....
|
||
R< > $+ + $* < $+ > $#_LOCAL_ $: $1 + $2 plussed name?
|
||
R< > $+ < $+ > $#_LOCAL_ $: @ $1 nope, local address',
|
||
`R$=L < @ $=w . > $#_LOCAL_ $: @ $1 special local names
|
||
R$+ < @ $=w . > $#_LOCAL_ $: $1 regular local name')
|
||
|
||
ifdef(`MAILER_TABLE', `dnl
|
||
# not local -- try mailer table lookup
|
||
R$* <@ $+ > $* $: < $2 > $1 < @ $2 > $3 extract host name
|
||
R< $+ . > $* $: < $1 > $2 strip trailing dot
|
||
R< $+ > $* $: < $(mailertable $1 $) > $2 lookup
|
||
R< $~[ : $* > $* $>95 < $1 : $2 > $3 check -- resolved?
|
||
R< $+ > $* $: $>90 <$1> $2 try domain',
|
||
`dnl')
|
||
undivert(4)dnl
|
||
|
||
ifdef(`_NO_UUCP_', `dnl',
|
||
`# resolve remotely connected UUCP links (if any)
|
||
ifdef(`_CLASS_V_',
|
||
`R$* < @ $=V . UUCP . > $* $: $>95 < $V > $1 <@$2.UUCP.> $3',
|
||
`dnl')
|
||
ifdef(`_CLASS_W_',
|
||
`R$* < @ $=W . UUCP . > $* $: $>95 < $W > $1 <@$2.UUCP.> $3',
|
||
`dnl')
|
||
ifdef(`_CLASS_X_',
|
||
`R$* < @ $=X . UUCP . > $* $: $>95 < $X > $1 <@$2.UUCP.> $3',
|
||
`dnl')')
|
||
|
||
# resolve fake top level domains by forwarding to other hosts
|
||
ifdef(`BITNET_RELAY',
|
||
`R$*<@$+.BITNET.>$* $: $>95 < $B > $1 <@$2.BITNET.> $3 user@host.BITNET',
|
||
`dnl')
|
||
ifdef(`DECNET_RELAY',
|
||
`R$*<@$+.DECNET.>$* $: $>95 < $C > $1 <@$2.DECNET.> $3 user@host.DECNET',
|
||
`dnl')
|
||
ifdef(`_MAILER_pop_',
|
||
`R$+ < @ POP. > $#pop $: $1 user@POP',
|
||
`dnl')
|
||
ifdef(`_MAILER_fax_',
|
||
`R$+ < @ $+ .FAX. > $#fax $@ $2 $: $1 user@host.FAX',
|
||
`ifdef(`FAX_RELAY',
|
||
`R$*<@$+.FAX.>$* $: $>95 < $F > $1 <@$2.FAX.> $3 user@host.FAX',
|
||
`dnl')')
|
||
|
||
ifdef(`UUCP_RELAY',
|
||
`# forward non-local UUCP traffic to our UUCP relay
|
||
R$*<@$*.UUCP.>$* $: $>95 < $Y > $1 <@$2.UUCP.> $3 uucp mail',
|
||
`ifdef(`_MAILER_uucp_',
|
||
`# forward other UUCP traffic straight to UUCP
|
||
R$* < @ $+ .UUCP. > $* $#_UUCP_ $@ $2 $: $1 < @ $2 .UUCP. > $3 user@host.UUCP',
|
||
`dnl')')
|
||
ifdef(`_MAILER_usenet_', `
|
||
# addresses sent to net.group.USENET will get forwarded to a newsgroup
|
||
R$+ . USENET $#usenet $: $1',
|
||
`dnl')
|
||
|
||
ifdef(`_LOCAL_RULES_',
|
||
`# figure out what should stay in our local mail system
|
||
undivert(1)', `dnl')
|
||
|
||
# pass names that still have a host to a smarthost (if defined)
|
||
R$* < @ $* > $* $: $>95 < $S > $1 < @ $2 > $3 glue on smarthost name
|
||
|
||
# deal with other remote names
|
||
ifdef(`_MAILER_smtp_',
|
||
`R$* < @$* > $* $#_SMTP_ $@ $2 $: $1 < @ $2 > $3 user@host.domain',
|
||
`R$* < @$* > $* $#error $@ 5.1.2 $: "Unrecognized host name " $2')
|
||
|
||
# handle locally delivered names
|
||
R$=L $#_LOCAL_ $: @ $1 special local names
|
||
R$+ $#_LOCAL_ $: $1 regular local names
|
||
|
||
###########################################################################
|
||
### Ruleset 5 -- special rewriting after aliases have been expanded ###
|
||
###########################################################################
|
||
|
||
S5
|
||
|
||
# deal with plussed users so aliases work nicely
|
||
R$+ + * $#_LOCAL_ $@ $&h $: $1
|
||
R$+ + $* $#_LOCAL_ $@ + $2 $: $1 + *
|
||
|
||
# prepend an empty "forward host" on the front
|
||
R$+ $: <> $1
|
||
|
||
ifdef(`LUSER_RELAY', `dnl
|
||
# send unrecognized local users to a relay host
|
||
R< > $+ $: < $L . > $(user $1 $) look up user
|
||
R< $* > $+ <> $* $: < > $2 $3 found; strip $L
|
||
R< $* . > $+ $: < $1 > $2 strip extra dot',
|
||
`dnl')
|
||
|
||
# see if we have a relay or a hub
|
||
R< > $+ $: < $H > $1 try hub
|
||
R< > $+ $: < $R > $1 try relay
|
||
R< > $+ $: < > < $1 $&h > nope, restore +detail
|
||
R< > < $+ + $* > $* < > < $1 > + $2 $3 find the user part
|
||
R< > < $+ > + $* $#_LOCAL_ $@ $2 $: @ $1 strip the extra +
|
||
R< > < $+ > $@ $1 no +detail
|
||
R$+ $: $1 <> $&h add +detail back in
|
||
R$+ <> + $* $: $1 + $2 check whether +detail
|
||
R$+ <> $* $: $1 else discard
|
||
R< local : $* > $* $: $>95 < local : $1 > $2 no host extension
|
||
R< error : $* > $* $: $>95 < error : $1 > $2 no host extension
|
||
R< $- : $+ > $+ $: $>95 < $1 : $2 > $3 < @ $2 >
|
||
R< $+ > $+ $@ $>95 < $1 > $2 < @ $1 >
|
||
|
||
ifdef(`MAILER_TABLE', `dnl
|
||
###################################################################
|
||
### Ruleset 90 -- try domain part of mailertable entry ###
|
||
###################################################################
|
||
|
||
S90
|
||
R$* <$- . $+ > $* $: $1$2 < $(mailertable .$3 $@ $1$2 $@ $2 $) > $4
|
||
R$* <$~[ : $* > $* $>95 < $2 : $3 > $4 check -- resolved?
|
||
R$* < . $+ > $* $@ $>90 $1 . <$2> $3 no -- strip & try again
|
||
R$* < $* > $* $: < $(mailertable . $@ $1$2 $) > $3 try "."
|
||
R< $~[ : $* > $* $>95 < $1 : $2 > $3 "." found?
|
||
R< $* > $* $@ $2 no mailertable match',
|
||
`dnl')
|
||
|
||
###################################################################
|
||
### Ruleset 95 -- canonify mailer:[user@]host syntax to triple ###
|
||
###################################################################
|
||
|
||
S95
|
||
R< > $* $@ $1 strip off null relay
|
||
R< error : $- $+ > $* $#error $@ $(dequote $1 $) $: $2
|
||
R< local : $* > $* $>CanonLocal < $1 > $2
|
||
R< $- : $+ @ $+ > $*<$*>$* $# $1 $@ $3 $: $2<@$3> use literal user
|
||
R< $- : $+ > $* $# $1 $@ $2 $: $3 try qualified mailer
|
||
R< $=w > $* $@ $2 delete local host
|
||
R< $+ > $* $#_RELAY_ $@ $1 $: $2 use unqualified mailer
|
||
|
||
###################################################################
|
||
### Ruleset CanonLocal -- canonify local: syntax ###
|
||
###################################################################
|
||
|
||
SCanonLocal
|
||
# strip local host from routed addresses
|
||
R< $* > < @ $+ > : $+ $@ $>97 $3
|
||
R< $* > $+ $=O $+ < @ $+ > $@ $>97 $2 $3 $4
|
||
|
||
# strip trailing dot from any host name that may appear
|
||
R< $* > $* < @ $* . > $: < $1 > $2 < @ $3 >
|
||
|
||
# handle local: syntax -- use old user, either with or without host
|
||
R< > $* < @ $* > $* $#_LOCAL_ $@ $1@$2 $: $1
|
||
R< > $+ $#_LOCAL_ $@ $1 $: $1
|
||
|
||
# handle local:user@host syntax -- ignore host part
|
||
R< $+ @ $+ > $* < @ $* > $: < $1 > $3 < @ $4 >
|
||
|
||
# handle local:user syntax
|
||
R< $+ > $* <@ $* > $* $#_LOCAL_ $@ $2@$3 $: $1
|
||
R< $+ > $* $#_LOCAL_ $@ $2 $: $1
|
||
|
||
###################################################################
|
||
### Ruleset 93 -- convert header names to masqueraded form ###
|
||
###################################################################
|
||
|
||
S93
|
||
|
||
ifdef(`GENERICS_TABLE', `dnl
|
||
# handle generics database
|
||
ifdef(`_GENERICS_ENTIRE_DOMAIN_',
|
||
`R$+ < @ $* $=G . > $: < $1@$2$3 > $1 < @ $2$3 . > @ mark',
|
||
`R$+ < @ $=G . > $: < $1@$2 > $1 < @ $2 . > @ mark')
|
||
R$+ < @ *LOCAL* > $: < $1@$j > $1 < @ *LOCAL* > @ mark
|
||
R< $+ > $+ < $* > @ $: < $(generics $1 $: $) > $2 < $3 >
|
||
R< > $+ < @ $+ > $: < $(generics $1 $: $) > $1 < @ $2 >
|
||
R< $* @ $* > $* < $* > $@ $>3 $1 @ $2 found qualified
|
||
R< $+ > $* < $* > $: $>3 $1 @ *LOCAL* found unqualified
|
||
R< > $* $: $1 not found',
|
||
`dnl')
|
||
|
||
# special case the users that should be exposed
|
||
R$=E < @ *LOCAL* > $@ $1 < @ $j . > leave exposed
|
||
ifdef(`_MASQUERADE_ENTIRE_DOMAIN_',
|
||
`R$=E < @ $* $=M . > $@ $1 < @ $2 $3 . >',
|
||
`R$=E < @ $=M . > $@ $1 < @ $2 . >')
|
||
ifdef(`_LIMITED_MASQUERADE_', `dnl',
|
||
`R$=E < @ $=w . > $@ $1 < @ $2 . >')
|
||
|
||
# handle domain-specific masquerading
|
||
ifdef(`_MASQUERADE_ENTIRE_DOMAIN_',
|
||
`R$* < @ $* $=M . > $* $: $1 < @ $2 $3 . @ $M > $4 convert masqueraded doms',
|
||
`R$* < @ $=M . > $* $: $1 < @ $2 . @ $M > $3 convert masqueraded doms')
|
||
ifdef(`_LIMITED_MASQUERADE_', `dnl',
|
||
`R$* < @ $=w . > $* $: $1 < @ $2 . @ $M > $3')
|
||
R$* < @ *LOCAL* > $* $: $1 < @ $j . @ $M > $2
|
||
R$* < @ $+ @ > $* $: $1 < @ $2 > $3 $M is null
|
||
R$* < @ $+ @ $+ > $* $: $1 < @ $3 . > $4 $M is not null
|
||
|
||
###################################################################
|
||
### Ruleset 94 -- convert envelope names to masqueraded form ###
|
||
###################################################################
|
||
|
||
S94
|
||
ifdef(`_MASQUERADE_ENVELOPE_',
|
||
`R$+ $@ $>93 $1',
|
||
`R$* < @ *LOCAL* > $* $: $1 < @ $j . > $2')
|
||
|
||
###################################################################
|
||
### Ruleset 98 -- local part of ruleset zero (can be null) ###
|
||
###################################################################
|
||
|
||
S98
|
||
undivert(3)dnl
|
||
|
||
ifelse(substr(confDELIVERY_MODE,0,1), `d', `errprint(`WARNING: Antispam rules not available in deferred delivery mode.')')
|
||
ifdef(`ACCESS_TABLE', `dnl
|
||
######################################################################
|
||
### LookUpDomain -- search for domain in access database
|
||
###
|
||
### Parameters:
|
||
### <$1> -- key (domain name)
|
||
### <$2> -- default (what to return if not found in db)
|
||
### <$3> -- passthru (additional data passed unchanged through)
|
||
######################################################################
|
||
|
||
SLookUpDomain
|
||
R<$+> <$+> <$*> $: < $(access $1 $: ? $) > <$1> <$2> <$3>
|
||
R<?> <$+.$+> <$+> <$*> $@ $>LookUpDomain <$2> <$3> <$4>
|
||
R<?> <$+> <$+> <$*> $@ <$2> <$3>
|
||
R<$*> <$+> <$+> <$*> $@ <$1> <$4>
|
||
|
||
######################################################################
|
||
### LookUpAddress -- search for host address in access database
|
||
###
|
||
### Parameters:
|
||
### <$1> -- key (dot quadded host address)
|
||
### <$2> -- default (what to return if not found in db)
|
||
### <$3> -- passthru (additional data passed through)
|
||
######################################################################
|
||
|
||
SLookUpAddress
|
||
R<$+> <$+> <$*> $: < $(access $1 $: ? $) > <$1> <$2> <$3>
|
||
R<?> <$+.$-> <$+> <$*> $@ $>LookUpAddress <$1> <$3> <$4>
|
||
R<?> <$+> <$+> <$*> $@ <$2> <$3>
|
||
R<$*> <$+> <$+> <$*> $@ <$1> <$4>',
|
||
`dnl')
|
||
|
||
######################################################################
|
||
### CanonAddr -- Convert an address into a standard form for
|
||
### relay checking. Route address syntax is
|
||
### crudely converted into a %-hack address.
|
||
###
|
||
### Parameters:
|
||
### $1 -- full recipient address
|
||
###
|
||
### Returns:
|
||
### parsed address, not in source route form
|
||
######################################################################
|
||
|
||
SCanonAddr
|
||
R$* $: $>Parse0 $>3 $1 make domain canonical
|
||
R< @ $+ > : $* @ $* < @ $1 > : $2 % $3 change @ to % in src route
|
||
R$* < @ $+ > : $* : $* $3 $1 < @ $2 > : $4 change to % hack.
|
||
R$* < @ $+ > : $* $3 $1 < @ $2 >
|
||
|
||
######################################################################
|
||
### ParseRecipient -- Strip off hosts in $=R as well as possibly
|
||
### $* $=m or the access database.
|
||
### Check user portion for host separators.
|
||
###
|
||
### Parameters:
|
||
### $1 -- full recipient address
|
||
###
|
||
### Returns:
|
||
### parsed, non-local-relaying address
|
||
######################################################################
|
||
|
||
SParseRecipient
|
||
R$* $: <?> $>CanonAddr $1
|
||
R<?> $* < @ $* . > <?> $1 < @ $2 > strip trailing dots
|
||
R<?> $- < @ $* > $: <?> $(dequote $1 $) < @ $2 > dequote local part
|
||
|
||
# if no $=O character, no host in the user portion, we are done
|
||
R<?> $* $=O $* < @ $* > $: <NO> $1 $2 $3 < @ $4>
|
||
R<?> $* $@ $1
|
||
|
||
ifdef(`_RELAY_ENTIRE_DOMAIN_', `dnl
|
||
# if we relay, check username portion for user%host so host can be checked also
|
||
R<NO> $* < @ $* $=m > $: <RELAY> $1 < @ $2 $3 >', `dnl')
|
||
|
||
ifdef(`_RELAY_MX_SERVED_', `dnl
|
||
R<NO> $* < @ $+ > $: <MX> < : $(mxserved $2 $) : > < $1 < @$2 > >
|
||
R<MX> < : $* <TEMP> : > $* $#error $@ 4.7.1 $: "450 Can not check MX records for recipient host " $1
|
||
R<MX> < $* : $=w. : $* > < $+ > $: <RELAY> $4
|
||
R<MX> < : $* : > < $+ > $: <NO> $2', `dnl')
|
||
|
||
ifdef(`_RELAY_HOSTS_ONLY_',
|
||
`R<NO> $* < @ $=R > $: <RELAY> $1 < @ $2 >
|
||
ifdef(`ACCESS_TABLE', `dnl
|
||
R<NO> $* < @ $+ > $: <$(access $2 $: NO $)> $1 < @ $2 >',`dnl')',
|
||
`R<NO> $* < @ $* $=R > $: <RELAY> $1 < @ $2 $3 >
|
||
ifdef(`ACCESS_TABLE', `dnl
|
||
R<NO> $* < @ $+ > $: $>LookUpDomain <$2> <NO> <$1 < @ $2 >>
|
||
R<$+> <$+> $: <$1> $2',`dnl')')
|
||
|
||
R<RELAY> $* < @ $* > $@ $>ParseRecipient $1
|
||
R<$-> $* $@ $2
|
||
|
||
######################################################################
|
||
### check_relay -- check hostname/address on SMTP startup
|
||
######################################################################
|
||
|
||
SLocal_check_relay
|
||
Scheck_relay
|
||
R$* $: $1 $| $>"Local_check_relay" $1
|
||
R$* $| $* $| $#$* $#$3
|
||
R$* $| $* $| $* $@ $>"Basic_check_relay" $1 $| $2
|
||
|
||
SBasic_check_relay
|
||
# check for deferred delivery mode
|
||
R$* $: < ${deliveryMode} > $1
|
||
R< d > $* $@ deferred
|
||
R< $* > $* $: $2
|
||
|
||
ifdef(`ACCESS_TABLE', `dnl
|
||
R$+ $| $+ $: $>LookUpDomain < $1 > <?> < $2 >
|
||
R<?> < $+ > $: $>LookUpAddress < $1 > <?> < $1 >
|
||
R<?> < $+ > $: $1
|
||
R<OK> < $* > $@ OK
|
||
R<RELAY> < $* > $@ RELAY
|
||
R<REJECT> $* $#error $@ 5.7.1 $: "ifdef(`confREJECT_MSG', `confREJECT_MSG', `550 Access denied')"
|
||
R<DISCARD> $* $#discard $: discard
|
||
R<$+> $* $#error $@ 5.7.1 $: $1', `dnl')
|
||
|
||
ifdef(`_RBL_', `dnl
|
||
# DNS based IP address spam lists
|
||
R$* $: $&{client_addr}
|
||
R$-.$-.$-.$- $: $(host $4.$3.$2.$1._RBL_. $: OK $)
|
||
ROK $@ OK
|
||
R$+ $#error $@ 5.7.1 $: "Mail from " $&{client_addr} " refused by blackhole site _RBL_"',
|
||
`dnl')
|
||
|
||
######################################################################
|
||
### check_mail -- check SMTP ``MAIL FROM:'' command argument
|
||
######################################################################
|
||
|
||
SLocal_check_mail
|
||
Scheck_mail
|
||
R$* $: $1 $| $>"Local_check_mail" $1
|
||
R$* $| $#$* $#$2
|
||
R$* $| $* $@ $>"Basic_check_mail" $1
|
||
|
||
SBasic_check_mail
|
||
# check for deferred delivery mode
|
||
R$* $: < ${deliveryMode} > $1
|
||
R< d > $* $@ deferred
|
||
R< $* > $* $: $2
|
||
|
||
R<> $@ <OK>
|
||
R$* $: <?> $>CanonAddr $1
|
||
R<?> $* < @ $+ . > <?> $1 < @ $2 > strip trailing dots
|
||
# handle non-DNS hostnames (*.bitnet, *.decnet, *.uucp, etc)
|
||
R<?> $* < $* $=P > $* $: <OK> $1 < @ $2 $3 > $4
|
||
ifdef(`_ACCEPT_UNRESOLVABLE_DOMAINS_',
|
||
`R<?> $* < @ $+ > $* $: <OK> $1 < @ $2 > $3 ... unresolvable OK',
|
||
`R<?> $* < @ $+ > $* $: <? $(resolve $2 $: $2 <PERM> $) > $1 < @ $2 > $3
|
||
R<? $* <$->> $* < @ $+ > $*
|
||
$: <$2> $3 < @ $4 > $5')
|
||
|
||
ifdef(`_ACCEPT_UNQUALIFIED_SENDERS_',`dnl',`dnl
|
||
# handle case of @localhost on address
|
||
R<$+> $* < @localhost > $: < ? $&{client_name} > <$1> $2 < @localhost >
|
||
R<$+> $* < @localhost.$m >
|
||
$: < ? $&{client_name} > <$1> $2 < @localhost.$m >
|
||
ifdef(`_NO_UUCP_', `dnl',
|
||
`R<$+> $* < @localhost.UUCP >
|
||
$: < ? $&{client_name} > <$1> $2 < @localhost.UUCP >')
|
||
R<? $=w> <$+> $* <?> <$2> $3
|
||
R<? $+> <$+> $* $#error $@ 5.5.4 $: "553 Real domain name required"
|
||
R<?> <$+> $* $: <$1> $2')
|
||
|
||
ifdef(`ACCESS_TABLE', `dnl
|
||
# lookup localpart (user@)
|
||
R<$+> $* < @ $+ > $* $: <USER $(access $2@ $: ? $) > <$1> $2 < @ $3 > $4
|
||
# no match, try full address (user@domain rest)
|
||
R<USER ?> <$+> $* < @ $* > $*
|
||
$: <USER $(access $2@$3$4 $: ? $) > <$1> $2 < @ $3 > $4
|
||
# no match, try address (user@domain)
|
||
R<USER ?> <$+> $+ < @ $+ > $*
|
||
$: <USER $(access $2@$3 $: ? $) > <$1> $2 < @ $3 > $4
|
||
# no match, try (sub)domain (domain)
|
||
R<USER ?> <$+> $* < @ $+ > $*
|
||
$: $>LookUpDomain <$3> <$1> <>
|
||
# check unqualified user in access database
|
||
R<?> $* $: <USER $(access $1@ $: ? $) > <?> $1
|
||
# retransform for further use
|
||
R<USER $+> <$+> $* $: <$1> $3',
|
||
`dnl')
|
||
|
||
ifdef(`_ACCEPT_UNQUALIFIED_SENDERS_',`dnl',`dnl
|
||
# handle case of no @domain on address
|
||
R<?> $* $: < ? $&{client_name} > $1
|
||
R<?> $* $@ <OK> ...local unqualed ok
|
||
R<? $+> $* $#error $@ 5.5.4 $: "553 Domain name required"
|
||
...remote is not')
|
||
# check results
|
||
R<?> $* $@ <OK>
|
||
R<OK> $* $@ <OK>
|
||
R<TEMP> $* $#error $@ 4.1.8 $: "451 Sender domain must resolve"
|
||
R<PERM> $* $#error $@ 5.1.8 $: "501 Sender domain must exist"
|
||
ifdef(`ACCESS_TABLE', `dnl
|
||
R<RELAY> $* $@ <RELAY>
|
||
R<DISCARD> $* $#discard $: discard
|
||
R<REJECT> $* $#error $@ 5.7.1 $: "ifdef(`confREJECT_MSG', `confREJECT_MSG', `550 Access denied')"
|
||
R<$+> $* $#error $@ 5.7.1 $: $1 error from access db',
|
||
`dnl')
|
||
|
||
######################################################################
|
||
### check_rcpt -- check SMTP ``RCPT TO:'' command argument
|
||
######################################################################
|
||
|
||
SLocal_check_rcpt
|
||
Scheck_rcpt
|
||
R$* $: $1 $| $>"Local_check_rcpt" $1
|
||
R$* $| $#$* $#$2
|
||
R$* $| $* $@ $>"Basic_check_rcpt" $1
|
||
|
||
SBasic_check_rcpt
|
||
# check for deferred delivery mode
|
||
R$* $: < ${deliveryMode} > $1
|
||
R< d > $* $@ deferred
|
||
R< $* > $* $: $2
|
||
|
||
ifdef(`_LOOSE_RELAY_CHECK_',`dnl
|
||
R$* $: $>CanonAddr $1
|
||
R$* < @ $* . > $1 < @ $2 > strip trailing dots',
|
||
`R$* $: $>ParseRecipient $1 strip relayable hosts')
|
||
|
||
ifdef(`_BESTMX_IS_LOCAL_',`dnl
|
||
ifelse(_BESTMX_IS_LOCAL_, `', `dnl
|
||
# unlimited bestmx
|
||
R$* < @ $* > $* $: $1 < @ $2 @@ $(bestmx $2 $) > $3',
|
||
`dnl
|
||
# limit bestmx to $=B
|
||
R$* < @ $* $=B > $* $: $1 < @ $2 $3 @@ $(bestmx $2 $3 $) > $4')
|
||
R$* $=O $* < @ $* @@ $=w . > $* $@ $>Basic_check_rcpt $1 $2 $3
|
||
R$* < @ $* @@ $=w . > $* $: $1 < @ $3 > $4
|
||
R$* < @ $* @@ $* > $* $: $1 < @ $2 > $4')
|
||
|
||
ifdef(`_BLACKLIST_RCPT_',`dnl
|
||
ifdef(`ACCESS_TABLE', `dnl
|
||
# blacklist local users or any host from receiving mail
|
||
R$* $: <?> $1
|
||
R<?> $+ < @ $=w > $: <> <USER $1> <FULL $1@$2> <HOST $2> <$1 < @ $2 >>
|
||
R<?> $+ < @ $* > $: <> <FULL $1@$2> <HOST $2> <$1 < @ $2 >>
|
||
R<?> $+ $: <> <USER $1> <$1>
|
||
R<> <USER $+> $* $: <$(access $1 $: $)> $2
|
||
R<> <FULL $+> $* $: <$(access $1 $: $)> $2
|
||
R<OK> <FULL $+> $* $: <$(access $1 $: $)> $2
|
||
R<> <HOST $+> $* $: <$(access $1 $: $)> $2
|
||
R<OK> <HOST $+> $* $: <$(access $1 $: $)> $2
|
||
R<> <$*> $: $1
|
||
R<OK> <$*> $: $1
|
||
R<RELAY> <$*> $: $1
|
||
R<REJECT> $* $#error $@ 5.2.1 $: "550 Mailbox disabled for this recipient"
|
||
R<$+> $* $#error $@ 5.2.1 $: $1 error from access db', `dnl')', `dnl')
|
||
|
||
ifdef(`_PROMISCUOUS_RELAY_', `dnl', `dnl
|
||
# anything terminating locally is ok
|
||
ifdef(`_RELAY_ENTIRE_DOMAIN_', `dnl
|
||
R$+ < @ $* $=m > $@ OK', `dnl')
|
||
R$+ < @ $=w > $@ OK
|
||
ifdef(`_RELAY_HOSTS_ONLY_',
|
||
`R$+ < @ $=R > $@ OK
|
||
ifdef(`ACCESS_TABLE', `dnl
|
||
R$+ < @ $* > $: <$(access $2 $: ? $)> <$1 < @ $2 >>',`dnl')',
|
||
`R$+ < @ $* $=R > $@ OK
|
||
ifdef(`ACCESS_TABLE', `dnl
|
||
R$+ < @ $* > $: $>LookUpDomain <$2> <?> <$1 < @ $2 >>',`dnl')')
|
||
ifdef(`ACCESS_TABLE', `dnl
|
||
R<RELAY> $* $@ RELAY
|
||
R<$*> <$*> $: $2',`dnl')
|
||
|
||
ifdef(`_RELAY_MX_SERVED_', `dnl
|
||
# allow relaying for hosts which we MX serve
|
||
R$+ < @ $* > $: < : $(mxserved $2 $) : > $1 < @ $2 >
|
||
R< : $* <TEMP> : > $* $#error $@ 4.7.1 $: "450 Can not check MX records for recipient host " $1
|
||
R<$* : $=w . : $*> $* $@ OK
|
||
R< : $* : > $* $: $2',
|
||
`dnl')
|
||
|
||
# check for local user (i.e. unqualified address)
|
||
R$* $: <?> $1
|
||
R<?> $* < @ $+ > $: <REMOTE> $1 < @ $2 >
|
||
# local user is ok
|
||
R<?> $+ $@ OK
|
||
R<$+> $* $: $2
|
||
|
||
# anything originating locally is ok
|
||
R$* $: <?> $&{client_name}
|
||
# check if bracketed IP address (forward lookup != reverse lookup)
|
||
R<?> [$+] $: <BAD> [$1]
|
||
# pass to name server to make hostname canonical
|
||
R<?> $* $~P $: <?> $[ $1 $2 $]
|
||
R<$-> $* $: $2
|
||
R$* . $1 strip trailing dots
|
||
R$@ $@ OK
|
||
ifdef(`_RELAY_ENTIRE_DOMAIN_', `dnl
|
||
R$* $=m $@ OK', `dnl')
|
||
R$=w $@ OK
|
||
ifdef(`_RELAY_HOSTS_ONLY_',
|
||
`R$=R $@ OK
|
||
ifdef(`ACCESS_TABLE', `dnl
|
||
R$* $: <$(access $1 $: ? $)> <$1>',`dnl')',
|
||
`R$* $=R $@ OK
|
||
ifdef(`ACCESS_TABLE', `dnl
|
||
R$* $: $>LookUpDomain <$1> <?> <$1>',`dnl')')
|
||
ifdef(`ACCESS_TABLE', `dnl
|
||
R<RELAY> $* $@ RELAY
|
||
R<$*> <$*> $: $2',`dnl')
|
||
|
||
# check IP address
|
||
R$* $: $&{client_addr}
|
||
R$@ $@ OK originated locally
|
||
R0 $@ OK originated locally
|
||
R$=R $* $@ OK relayable IP address
|
||
ifdef(`ACCESS_TABLE', `dnl
|
||
R$* $: $>LookUpAddress <$1> <?> <$1>
|
||
R<RELAY> $* $@ RELAY relayable IP address
|
||
R<$*> <$*> $: $2', `dnl')
|
||
R$* $: [ $1 ] put brackets around it...
|
||
R$=w $@ OK ... and see if it is local
|
||
|
||
ifdef(`_RELAY_LOCAL_FROM_', `dnl
|
||
# anything with a local FROM is ok
|
||
R$* $: $1 $| $>CanonAddr $&f
|
||
R$* $| $+ < @ $=w . > $@ OK FROM local
|
||
R$* $| $* $: $1
|
||
', `dnl')
|
||
|
||
# anything else is bogus
|
||
R$* $#error $@ 5.7.1 $: "550 Relaying denied"')
|
||
|
||
undivert(9)dnl
|
||
#
|
||
######################################################################
|
||
######################################################################
|
||
#####
|
||
`##### MAILER DEFINITIONS'
|
||
#####
|
||
######################################################################
|
||
######################################################################
|
||
undivert(7)dnl
|