[sendmail] Impossible de se connecter depuis un poste client

Impossible de se connecter depuis un poste client [sendmail] - Linux et OS Alternatifs

Marsh Posté le 18-05-2004 à 15:49:57    

Salut à tous !
 
J'ai sendmail qui tourne sur un serveur Linux sur mon réseau local.
En local j'arrive à faire un telnet localhost 25 et à me connecter. Par contre depusi un poste du réseau, impossible !
C'est aussi impossible si je tape l'ip du serveur et non pas localhost.
telnet localhost 25 fonctionne, mais pas telnet 192.168.1.3
 
J'ai vidé toutes les rêgles du firewall en ne laissant que les ACCEPT pour l'INPUT, l'OUTPUT et le FORWARD.
 
A votre avis, d'où vient le problème ?
 
mes iptables :
 

Code :
  1. [root@serve2 root]# iptables -L
  2. Chain INPUT (policy ACCEPT)
  3. target     prot opt source               destination
  5. Chain FORWARD (policy ACCEPT)
  6. target     prot opt source               destination
  8. Chain OUTPUT (policy ACCEPT)
  9. target     prot opt source               destination


 
 
Merci d'avance


Message édité par coolboarder le 18-05-2004 à 15:52:36

---------------
“You want weapons? We’re in a library! Books! The best weapons in the world!”
Reply

Marsh Posté le 18-05-2004 à 15:49:57   

Reply

Marsh Posté le 18-05-2004 à 18:26:07    

par défaut sendmail écoute en local seulement (sur loopback), il faut le configurer si tu veux qu'il écoute sur d'autres interfaces, pour vérifier ceci :
 
netstat -lptn | grep sendmail

Reply

Marsh Posté le 18-05-2004 à 22:33:39    

netstat -an | grep ":25"

Reply

Marsh Posté le 19-05-2004 à 10:08:59    

Haaaaan, bon, je vais essayer de trouver comment le faire écouter autre chose que le local alors... Merci !
 
Voici le résultat des deux commandes :
 
[root@serve2 root]# netstat -lptn | grep sendmail
[root@serve2 root]# netstat -an | grep ":25"
tcp        0      0 127.0.0.1:25            0.0.0.0:*               LISTEN
[root@serve2 root]#


---------------
“You want weapons? We’re in a library! Books! The best weapons in the world!”
Reply

Marsh Posté le 19-05-2004 à 10:12:16    

/etc/host.allow
/etc/host.deny
/etc/inetd.conf

Reply

Marsh Posté le 19-05-2004 à 10:16:52    

Je n'ai pas les deux premiers fichiers
 
xinetd.conf :

Code :
  1. #
  2. # Simple configuration file for xinetd
  3. #
  4. # Some defaults, and include /etc/xinetd.d/
  6. defaults
  7. {
  8.         instances               = 60
  9.         log_type                = SYSLOG authpriv
  10.         log_on_success          = HOST PID
  11.         log_on_failure          = HOST
  12.         cps                     = 25 30
  13. }
  15. includedir /etc/xinetd.d


---------------
“You want weapons? We’re in a library! Books! The best weapons in the world!”
Reply

Marsh Posté le 19-05-2004 à 10:20:50    

dans xinetd.d
 
as tu qqch pour sendmail?

Reply

Marsh Posté le 19-05-2004 à 10:27:05    

non...
 
xinetd.d :  
 

Code :
  1. " Press ? for keyboard shortcuts
  2. " Sorted by name (.bak,~,.o,.h,.info,.swp,.obj at end of list)
  3. "= /etc/xinetd.d/
  4. ../
  5. chargen
  6. chargen-udp
  7. daytime
  8. daytime-udp
  9. echo
  10. echo-udp
  11. finger
  12. imap
  13. imaps
  14. ipop2
  15. ipop3
  16. pop3s
  17. rexec
  18. rlogin
  19. rsh
  20. rsync
  21. servers
  22. services
  23. sgi_fam
  24. telnet
  25. time
  26. time-udp


---------------
“You want weapons? We’re in a library! Books! The best weapons in the world!”
Reply

Marsh Posté le 19-05-2004 à 10:32:05    

tu peux poster tes fichiers de conf de sendmail?

Reply

Marsh Posté le 19-05-2004 à 10:42:07    

/etc/mail/sendmail.mc

Code :
  1. divert(-1)dnl
  2. dnl #
  3. dnl # This is the sendmail macro config file for m4. If you make changes to
  4. dnl # /etc/mail/sendmail.mc, you will need to regenerate the
  5. dnl # /etc/mail/sendmail.cf file by confirming that the sendmail-cf package is
  6. dnl # installed and then performing a
  7. dnl #
  8. dnl #     make -C /etc/mail
  9. dnl #
  10. include(`/usr/share/sendmail-cf/m4/cf.m4')dnl
  11. VERSIONID(`setup for Red Hat Linux')dnl
  12. OSTYPE(`linux')dnl
  13. dnl #
  14. dnl # Uncomment and edit the following line if your outgoing mail needs to
  15. dnl # be sent out through an external mail server:
  16. dnl #
  17. dnl define(`SMART_HOST',`smtp.your.provider')
  18. dnl #
  19. define(`confDEF_USER_ID',``8:12'')dnl
  20. define(`confTRUSTED_USER', `smmsp')dnl
  21. dnl define(`confAUTO_REBUILD')dnl
  22. define(`confTO_CONNECT', `1m')dnl
  23. define(`confTRY_NULL_MX_LIST',true)dnl
  24. define(`confDONT_PROBE_INTERFACES',true)dnl
  25. define(`PROCMAIL_MAILER_PATH',`/usr/bin/procmail')dnl
  26. define(`ALIAS_FILE', `/etc/aliases')dnl
  27. dnl define(`STATUS_FILE', `/etc/mail/statistics')dnl
  28. define(`UUCP_MAILER_MAX', `2000000')dnl
  29. define(`confUSERDB_SPEC', `/etc/mail/userdb.db')dnl
  30. define(`confPRIVACY_FLAGS', `authwarnings,novrfy,noexpn,restrictqrun')dnl
  31. define(`confAUTH_OPTIONS', `A')dnl
  32. dnl #
  33. dnl # The following allows relaying if the user authenticates, and disallows
  34. dnl # plaintext authentication (PLAIN/LOGIN) on non-TLS links
  35. dnl #
  36. dnl define(`confAUTH_OPTIONS', `A p')dnl
  37. dnl #
  38. dnl # PLAIN is the preferred plaintext authentication method and used by
  39. dnl # Mozilla Mail and Evolution, though Outlook Express and other MUAs do
  40. dnl # use LOGIN. Other mechanisms should be used if the connection is not
  41. dnl # guaranteed secure.
  42. dnl #
  43. dnl TRUST_AUTH_MECH(`EXTERNAL DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl
  44. dnl define(`confAUTH_MECHANISMS', `EXTERNAL GSSAPI DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl
  45. dnl #
  46. dnl # Rudimentary information on creating certificates for sendmail TLS:
  47. dnl #     make -C /usr/share/ssl/certs usage
  48. dnl #
  49. dnl define(`confCACERT_PATH',`/usr/share/ssl/certs')
  50. dnl define(`confCACERT',`/usr/share/ssl/certs/ca-bundle.crt')
  51. dnl define(`confSERVER_CERT',`/usr/share/ssl/certs/sendmail.pem')
  52. dnl define(`confSERVER_KEY',`/usr/share/ssl/certs/sendmail.pem')
  53. dnl #
  54. dnl # This allows sendmail to use a keyfile that is shared with OpenLDAP's
  55. dnl # slapd, which requires the file to be readble by group ldap
  56. dnl #
  57. dnl define(`confDONT_BLAME_SENDMAIL',`groupreadablekeyfile')dnl
  58. dnl #
  59. dnl define(`confTO_QUEUEWARN', `4h')dnl
  60. dnl define(`confTO_QUEUERETURN', `5d')dnl
  61. dnl define(`confQUEUE_LA', `12')dnl
  62. dnl define(`confREFUSE_LA', `18')dnl
  63. define(`confTO_IDENT', `0')dnl
  64. dnl FEATURE(delay_checks)dnl
  65. FEATURE(`no_default_msa',`dnl')dnl
  66. FEATURE(`smrsh',`/usr/sbin/smrsh')dnl
  67. FEATURE(`mailertable',`hash -o /etc/mail/mailertable.db')dnl
  68. FEATURE(`virtusertable',`hash -o /etc/mail/virtusertable.db')dnl
  69. FEATURE(redirect)dnl
  70. FEATURE(always_add_domain)dnl
  71. FEATURE(use_cw_file)dnl
  72. FEATURE(use_ct_file)dnl
  73. dnl #
  74. dnl # The -t option will retry delivery if e.g. the user runs over his quota.
  75. dnl #
  76. FEATURE(local_procmail,`',`procmail -t -Y -a $h -d $u')dnl
  77. FEATURE(`access_db',`hash -T<TMPF> -o /etc/mail/access.db')dnl
  78. FEATURE(`blacklist_recipients')dnl
  79. EXPOSED_USER(`root')dnl
  80. dnl #
  81. dnl # The following causes sendmail to only listen on the IPv4 loopback address
  82. dnl # 127.0.0.1 and not on any other network devices. Remove the loopback
  83. dnl # address restriction to accept email from the internet or intranet.
  84. dnl #
  85. DAEMON_OPTIONS(`Port=smtp,Addr=127.0.0.1, Name=MTA')dnl
  86. dnl #
  87. dnl # The following causes sendmail to additionally listen to port 587 for
  88. dnl # mail from MUAs that authenticate. Roaming users who can't reach their
  89. dnl # preferred sendmail daemon due to port 25 being blocked or redirected find
  90. dnl # this useful.
  91. dnl #
  92. dnl DAEMON_OPTIONS(`Port=submission, Name=MSA, M=Ea')dnl
  93. dnl #
  94. dnl # The following causes sendmail to additionally listen to port 465, but
  95. dnl # starting immediately in TLS mode upon connecting. Port 25 or 587 followed
  96. dnl # by STARTTLS is preferred, but roaming clients using Outlook Express can't
  97. dnl # do STARTTLS on ports other than 25. Mozilla Mail can ONLY use STARTTLS
  98. dnl # and doesn't support the deprecated smtps; Evolution <1.1.1 uses smtps
  99. dnl # when SSL is enabled-- STARTTLS support is available in version 1.1.1.
  100. dnl #
  101. dnl # For this to work your OpenSSL certificates must be configured.
  102. dnl #
  103. dnl DAEMON_OPTIONS(`Port=smtps, Name=TLSMTA, M=s')dnl
  104. dnl #
  105. dnl # The following causes sendmail to additionally listen on the IPv6 loopback
  106. dnl # device. Remove the loopback address restriction listen to the network.
  107. dnl #
  108. dnl # NOTE: binding both IPv4 and IPv6 daemon to the same port requires
  109. dnl #       a kernel patch
  110. dnl #
  111. dnl DAEMON_OPTIONS(`port=smtp,Addr=::1, Name=MTA-v6, Family=inet6')dnl
  112. dnl #
  113. dnl # We strongly recommend not accepting unresolvable domains if you want to
  114. dnl # protect yourself from spam. However, the laptop and users on computers
  115. dnl # that do not have 24x7 DNS do need this.
  116. dnl #
  117. FEATURE(`accept_unresolvable_domains')dnl
  118. dnl #
  119. dnl FEATURE(`relay_based_on_MX')dnl
  120. dnl #
  121. dnl # Also accept email sent to "localhost.localdomain" as local email.
  122. dnl #
  123. LOCAL_DOMAIN(`localhost.localdomain')dnl
  124. dnl #
  125. dnl # The following example makes mail from this host and any additional
  126. dnl # specified domains appear to be sent from mydomain.com
  127. dnl #
  128. dnl MASQUERADE_AS(`mydomain.com')dnl
  129. dnl #
  130. dnl # masquerade not just the headers, but the envelope as well
  131. dnl #
  132. dnl FEATURE(masquerade_envelope)dnl
  133. dnl #
  134. dnl # masquerade not just @mydomainalias.com, but @*.mydomainalias.com as well
  135. dnl #
  136. dnl FEATURE(masquerade_entire_domain)dnl
  137. dnl #
  138. dnl MASQUERADE_DOMAIN(localhost)dnl
  139. dnl MASQUERADE_DOMAIN(localhost.localdomain)dnl
  140. dnl MASQUERADE_DOMAIN(mydomainalias.com)dnl
  141. dnl MASQUERADE_DOMAIN(mydomain.lan)dnl
  142. MAILER(smtp)dnl
  143. MAILER(procmail)dnl


 
Tu as besoin du sendmail.cf ?


---------------
“You want weapons? We’re in a library! Books! The best weapons in the world!”
Reply

Marsh Posté le 19-05-2004 à 10:42:07   

Reply

Marsh Posté le 19-05-2004 à 10:50:35    

oui

Reply

Marsh Posté le 19-05-2004 à 10:56:34    

Code :
  1. #
  2. # Copyright (c) 1998-2002 Sendmail, Inc. and its suppliers.
  3. # All rights reserved.
  4. # Copyright (c) 1983, 1995 Eric P. Allman.  All rights reserved.
  5. # Copyright (c) 1988, 1993
  6. # The Regents of the University of California.  All rights reserved.
  7. #
  8. # By using this file, you agree to the terms and conditions set
  9. # forth in the LICENSE file which can be found at the top level of
  10. # the sendmail distribution.
  11. #
  12. #
  14. ######################################################################
  15. ######################################################################
  16. #####
  17. #####  SENDMAIL CONFIGURATION FILE
  18. #####
  19. ##### built by root@serve2 on lun mai 17 15:49:27 CEST 2004
  20. ##### in /etc/mail
  21. ##### using /usr/share/sendmail-cf/ as configuration include directory
  22. #####
  23. ######################################################################
  24. #####
  25. ##### DO NOT EDIT THIS FILE!  Only edit the source .mc file.
  26. #####
  27. ######################################################################
  28. ######################################################################
  30. #####  $Id: cfhead.m4,v 8.108.2.1 2002/08/27 20:19:08 gshapiro Exp $  #####
  31. #####  $Id: cf.m4,v 8.32 1999/02/07 07:26:14 gshapiro Exp $  #####
  32. #####  setup for Red Hat Linux  #####
  33. #####  $Id: linux.m4,v 8.13 2000/09/17 17:30:00 gshapiro Exp $  #####
  37. #####  $Id: local_procmail.m4,v 8.21.42.1 2002/11/17 04:25:07 ca Exp $  #####
  40. #####  $Id: no_default_msa.m4,v 8.2 2001/02/14 05:03:22 gshapiro Exp $  #####
  42. #####  $Id: smrsh.m4,v 8.14 1999/11/18 05:06:23 ca Exp $  #####
  44. #####  $Id: mailertable.m4,v 8.23 2001/03/16 00:51:26 gshapiro Exp $  #####
  46. #####  $Id: virtusertable.m4,v 8.21 2001/03/16 00:51:26 gshapiro Exp $  #####
  48. #####  $Id: redirect.m4,v 8.15 1999/08/06 01:47:36 gshapiro Exp $  #####
  50. #####  $Id: always_add_domain.m4,v 8.11 2000/09/12 22:00:53 ca Exp $  #####
  52. #####  $Id: use_cw_file.m4,v 8.11 2001/08/26 20:58:57 gshapiro Exp $  #####
  55. #####  $Id: use_ct_file.m4,v 8.11 2001/08/26 20:58:57 gshapiro Exp $  #####
  58. #####  $Id: local_procmail.m4,v 8.21.42.1 2002/11/17 04:25:07 ca Exp $  #####
  60. #####  $Id: access_db.m4,v 8.24 2002/03/06 21:50:25 ca Exp $  #####
  62. #####  $Id: blacklist_recipients.m4,v 8.13 1999/04/02 02:25:13 gshapiro Exp $  #####
  64. #####  $Id: accept_unresolvable_domains.m4,v 8.10 1999/02/07 07:26:07 gshapiro Exp $  #####
  67. #####  $Id: proto.m4,v 8.649.2.14 2002/12/30 15:46:02 ca Exp $  #####
  69. # level 10 config file format
  70. V10/Berkeley
  72. # override file safeties - setting this option compromises system security,
  73. # addressing the actual file configuration problem is preferred
  74. # need to set this before any file actions are encountered in the cf file
  75. #O DontBlameSendmail=safe
  77. # default LDAP map specification
  78. # need to set this now before any LDAP maps are defined
  79. #O LDAPDefaultSpec=-h localhost
  81. ##################
  82. #   local info   #
  83. ##################
  85. # my LDAP cluster
  86. # need to set this before any LDAP lookups are done (including classes)
  87. #D{sendmailMTACluster}$m
  89. Cwlocalhost
  90. # file containing names of hosts for which we receive email
  91. Fw/etc/mail/local-host-names
  93. # my official domain name
  94. # ... define this only if sendmail cannot automatically determine your domain
  95. #Dj$w.Foo.COM
  97. CP.
  99. # "Smart" relay host (may be null)
  100. DS
  103. # operators that cannot be in local usernames (i.e., network indicators)
  104. CO @ % !
  106. # a class with just dot (for identifying canonical names)
  107. C..
  109. # a class with just a left bracket (for identifying domain literals)
  110. C[[
  112. # access_db acceptance class
  113. C{Accept}OK RELAY
  116. C{ResOk}OKR
  119. # Hosts for which relaying is permitted ($=R)
  120. FR-o /etc/mail/relay-domains
  122. # arithmetic map
  123. Karith arith
  124. # macro storage map
  125. Kmacro macro
  126. # possible values for TLS_connection in access map
  127. C{tls}VERIFY ENCR
  133. # dequoting map
  134. Kdequote dequote
  136. # class E: names that should be exposed as from this host, even if we masquerade
  137. # class L: names that should be delivered locally, even if we have a relay
  138. # class M: domains that should be converted to $M
  139. # class N: domains that should not be converted to $M
  140. #CL root
  141. C{E}root
  142. C{w}localhost.localdomain
  146. # my name for error messages
  147. DnMAILER-DAEMON
  150. # Mailer table (overriding domains)
  151. Kmailertable hash -o /etc/mail/mailertable.db
  153. # Virtual user table (maps incoming users)
  154. Kvirtuser hash -o /etc/mail/virtusertable.db
  156. CPREDIRECT
  158. # Access list database (for spam stomping)
  159. Kaccess hash -T<TMPF> -o /etc/mail/access.db
  161. # Configuration version number
  162. DZ8.12.8
  165. ###############
  166. #   Options   #
  167. ###############
  169. # strip message body to 7 bits on input?
  170. O SevenBitInput=False
  172. # 8-bit data handling
  173. #O EightBitMode=pass8
  175. # wait for alias file rebuild (default units: minutes)
  176. O AliasWait=10
  178. # location of alias file
  179. O AliasFile=/etc/aliases
  181. # minimum number of free blocks on filesystem
  182. O MinFreeBlocks=100
  184. # maximum message size
  185. #O MaxMessageSize=1000000
  187. # substitution for space (blank) characters
  188. O BlankSub=.
  190. # avoid connecting to "expensive" mailers on initial submission?
  191. O HoldExpensive=False
  193. # checkpoint queue runs after every N successful deliveries
  194. #O CheckpointInterval=10
  196. # default delivery mode
  197. O DeliveryMode=background
  199. # error message header/file
  200. #O ErrorHeader=/etc/mail/error-header
  202. # error mode
  203. #O ErrorMode=print
  205. # save Unix-style "From_" lines at top of header?
  206. #O SaveFromLine=False
  208. # queue file mode (qf files)
  209. #O QueueFileMode=0600
  211. # temporary file mode
  212. O TempFileMode=0600
  214. # match recipients against GECOS field?
  215. #O MatchGECOS=False
  217. # maximum hop count
  218. #O MaxHopCount=25
  220. # location of help file
  221. O HelpFile=/etc/mail/helpfile
  223. # ignore dots as terminators in incoming messages?
  224. #O IgnoreDots=False
  226. # name resolver options
  227. #O ResolverOptions=+AAONLY
  229. # deliver MIME-encapsulated error messages?
  230. O SendMimeErrors=True
  232. # Forward file search path
  233. O ForwardPath=$z/.forward.$w:$z/.forward
  235. # open connection cache size
  236. O ConnectionCacheSize=2
  238. # open connection cache timeout
  239. O ConnectionCacheTimeout=5m
  241. # persistent host status directory
  242. #O HostStatusDirectory=.hoststat
  244. # single thread deliveries (requires HostStatusDirectory)?
  245. #O SingleThreadDelivery=False
  247. # use Errors-To: header?
  248. O UseErrorsTo=False
  250. # log level
  251. O LogLevel=9
  253. # send to me too, even in an alias expansion?
  254. #O MeToo=True
  256. # verify RHS in newaliases?
  257. O CheckAliases=False
  259. # default messages to old style headers if no special punctuation?
  260. O OldStyleHeaders=True
  262. # SMTP daemon options
  264. O DaemonPortOptions=Port=smtp,Addr=127.0.0.1, Name=MTA
  266. # SMTP client options
  267. #O ClientPortOptions=Family=inet, Address=0.0.0.0
  269. # Modifiers to define {daemon_flags} for direct submissions
  270. #O DirectSubmissionModifiers
  272. # Use as mail submission program? See sendmail/SECURITY
  273. #O UseMSP
  275. # privacy flags
  276. O PrivacyOptions=authwarnings,novrfy,noexpn,restrictqrun
  278. # who (if anyone) should get extra copies of error messages
  279. #O PostmasterCopy=Postmaster
  281. # slope of queue-only function
  282. #O QueueFactor=600000
  284. # limit on number of concurrent queue runners
  285. #O MaxQueueChildren
  287. # maximum number of queue-runners per queue-grouping with multiple queues
  288. #O MaxRunnersPerQueue=1
  290. # priority of queue runners (nice(3))
  291. #O NiceQueueRun
  293. # shall we sort the queue by hostname first?
  294. #O QueueSortOrder=priority
  296. # minimum time in queue before retry
  297. #O MinQueueAge=30m
  299. # how many jobs can you process in the queue?
  300. #O MaxQueueRunSize=10000
  302. # perform initial split of envelope without checking MX records
  303. #O FastSplit=1
  305. # queue directory
  306. O QueueDirectory=/var/spool/mqueue
  308. # key for shared memory; 0 to turn off
  309. #O SharedMemoryKey=0
  313. # timeouts (many of these)
  314. #O Timeout.initial=5m
  315. O Timeout.connect=1m
  316. #O Timeout.aconnect=0s
  317. #O Timeout.iconnect=5m
  318. #O Timeout.helo=5m
  319. #O Timeout.mail=10m
  320. #O Timeout.rcpt=1h
  321. #O Timeout.datainit=5m
  322. #O Timeout.datablock=1h
  323. #O Timeout.datafinal=1h
  324. #O Timeout.rset=5m
  325. #O Timeout.quit=2m
  326. #O Timeout.misc=2m
  327. #O Timeout.command=1h
  328. O Timeout.ident=0
  329. #O Timeout.fileopen=60s
  330. #O Timeout.control=2m
  331. O Timeout.queuereturn=5d
  332. #O Timeout.queuereturn.normal=5d
  333. #O Timeout.queuereturn.urgent=2d
  334. #O Timeout.queuereturn.non-urgent=7d
  335. O Timeout.queuewarn=4h
  336. #O Timeout.queuewarn.normal=4h
  337. #O Timeout.queuewarn.urgent=1h
  338. #O Timeout.queuewarn.non-urgent=12h
  339. #O Timeout.hoststatus=30m
  340. #O Timeout.resolver.retrans=5s
  341. #O Timeout.resolver.retrans.first=5s
  342. #O Timeout.resolver.retrans.normal=5s
  343. #O Timeout.resolver.retry=4
  344. #O Timeout.resolver.retry.first=4
  345. #O Timeout.resolver.retry.normal=4
  346. #O Timeout.lhlo=2m
  347. #O Timeout.auth=10m
  348. #O Timeout.starttls=1h
  350. # time for DeliverBy; extension disabled if less than 0
  351. #O DeliverByMin=0
  353. # should we not prune routes in route-addr syntax addresses?
  354. #O DontPruneRoutes=False
  356. # queue up everything before forking?
  357. O SuperSafe=True
  359. # status file
  360. O StatusFile=/etc/mail/statistics
  362. # time zone handling:
  363. #  if undefined, use system default
  364. #  if defined but null, use TZ envariable passed in
  365. #  if defined and non-null, use that info
  366. #O TimeZoneSpec=
  368. # default UID (can be username or userid:groupid)
  369. O DefaultUser=8:12
  371. # list of locations of user database file (null means no lookup)
  372. O UserDatabaseSpec=/etc/mail/userdb.db
  374. # fallback MX host
  375. #O FallbackMXhost=fall.back.host.net
  377. # if we are the best MX host for a site, try it directly instead of config err
  378. O TryNullMXList=true
  380. # load average at which we just queue messages
  381. #O QueueLA=8
  383. # load average at which we refuse connections
  384. #O RefuseLA=12
  386. # load average at which we delay connections; 0 means no limit
  387. #O DelayLA=0
  389. # maximum number of children we allow at one time
  390. #O MaxDaemonChildren=0
  392. # maximum number of new connections per second
  393. #O ConnectionRateThrottle=0
  395. # work recipient factor
  396. #O RecipientFactor=30000
  398. # deliver each queued job in a separate process?
  399. #O ForkEachJob=False
  401. # work class factor
  402. #O ClassFactor=1800
  404. # work time factor
  405. #O RetryFactor=90000
  407. # default character set
  408. #O DefaultCharSet=iso-8859-1
  410. # service switch file (name hardwired on Solaris, Ultrix, OSF/1, others)
  411. #O ServiceSwitchFile=/etc/mail/service.switch
  413. # hosts file (normally /etc/hosts)
  414. #O HostsFile=/etc/hosts
  416. # dialup line delay on connection failure
  417. #O DialDelay=10s
  419. # action to take if there are no recipients in the message
  420. #O NoRecipientAction=add-to-undisclosed
  422. # chrooted environment for writing to files
  423. #O SafeFileEnvironment=/arch
  425. # are colons OK in addresses?
  426. #O ColonOkInAddr=True
  428. # shall I avoid expanding CNAMEs (violates protocols)?
  429. #O DontExpandCnames=False
  431. # SMTP initial login message (old $e macro)
  432. O SmtpGreetingMessage=$j Sendmail $v/$Z; $b
  434. # UNIX initial From header format (old $l macro)
  435. O UnixFromLine=From $g $d
  437. # From: lines that have embedded newlines are unwrapped onto one line
  438. #O SingleLineFromHeader=False
  440. # Allow HELO SMTP command that does not include a host name
  441. #O AllowBogusHELO=False
  443. # Characters to be quoted in a full name phrase (@,;:\()[] are automatic)
  444. #O MustQuoteChars=.
  446. # delimiter (operator) characters (old $o macro)
  447. O OperatorChars=.:%@!^/[]+
  449. # shall I avoid calling initgroups(3) because of high NIS costs?
  450. #O DontInitGroups=False
  452. # are group-writable :include: and .forward files (un)trustworthy?
  453. # True (the default) means they are not trustworthy.
  454. #O UnsafeGroupWrites=True
  457. # where do errors that occur when sending errors get sent?
  458. #O DoubleBounceAddress=postmaster
  460. # where to save bounces if all else fails
  461. #O DeadLetterDrop=/var/tmp/dead.letter
  463. # what user id do we assume for the majority of the processing?
  464. #O RunAsUser=sendmail
  466. # maximum number of recipients per SMTP envelope
  467. #O MaxRecipientsPerMessage=100
  469. # limit the rate recipients per SMTP envelope are accepted
  470. # once the threshold number of recipients have been rejected
  471. #O BadRcptThrottle=20
  473. # shall we get local names from our installed interfaces?
  474. O DontProbeInterfaces=true
  476. # Return-Receipt-To: header implies DSN request
  477. #O RrtImpliesDsn=False
  479. # override connection address (for testing)
  480. #O ConnectOnlyTo=0.0.0.0
  482. # Trusted user for file ownership and starting the daemon
  483. O TrustedUser=smmsp
  485. # Control socket for daemon management
  486. #O ControlSocketName=/var/spool/mqueue/.control
  488. # Maximum MIME header length to protect MUAs
  489. #O MaxMimeHeaderLength=0/0
  491. # Maximum length of the sum of all headers
  492. #O MaxHeadersLength=32768
  494. # Maximum depth of alias recursion
  495. #O MaxAliasRecursion=10
  497. # location of pid file
  498. #O PidFile=/var/run/sendmail.pid
  500. # Prefix string for the process title shown on 'ps' listings
  501. #O ProcessTitlePrefix=prefix
  503. # Data file (df) memory-buffer file maximum size
  504. #O DataFileBufferSize=4096
  506. # Transcript file (xf) memory-buffer file maximum size
  507. #O XscriptFileBufferSize=4096
  509. # lookup type to find information about local mailboxes
  510. #O MailboxDatabase=pw
  512. # list of authentication mechanisms
  513. #O AuthMechanisms=EXTERNAL GSSAPI KERBEROS_V4 DIGEST-MD5 CRAM-MD5
  515. # default authentication information for outgoing connections
  516. #O DefaultAuthInfo=/etc/mail/default-auth-info
  518. # SMTP AUTH flags
  519. O AuthOptions=A
  521. # SMTP AUTH maximum encryption strength
  522. #O AuthMaxBits
  524. # SMTP STARTTLS server options
  525. #O TLSSrvOptions
  527. # Input mail filters
  528. #O InputMailFilters
  531. # CA directory
  532. #O CACertPath
  533. # CA file
  534. #O CACertFile
  535. # Server Cert
  536. #O ServerCertFile
  537. # Server private key
  538. #O ServerKeyFile
  539. # Client Cert
  540. #O ClientCertFile
  541. # Client private key
  542. #O ClientKeyFile
  543. # DHParameters (only required if DSA/DH is used)
  544. #O DHParameters
  545. # Random data source (required for systems without /dev/urandom under OpenSSL)
  546. #O RandFile
  548. ############################
  549. # QUEUE GROUP DEFINITIONS  #
  550. ############################
  553. ###########################
  554. #   Message precedences   #
  555. ###########################
  557. Pfirst-class=0
  558. Pspecial-delivery=100
  559. Plist=-30
  560. Pbulk=-60
  561. Pjunk=-100
  563. #####################
  564. #   Trusted users   #
  565. #####################
  567. # this is equivalent to setting class "t"
  568. Ft/etc/mail/trusted-users
  569. Troot
  570. Tdaemon
  571. Tuucp
  573. #########################
  574. #   Format of headers   #
  575. #########################
  577. H?P?Return-Path: <$g>
  578. HReceived: $?sfrom $s $.$?_($?s$|from $.$_)
  579. $.$?{auth_type}(authenticated$?{auth_ssf} bits=${auth_ssf}$.)
  580. $.by $j ($v/$Z)$?r with $r$. id $i$?{tls_version}
  581. (version=${tls_version} cipher=${cipher} bits=${cipher_bits} verify=${verify})$.$?u
  582. for $u; $|;
  583. $.$b
  584. H?D?Resent-Date: $a
  585. H?D?Date: $a
  586. H?F?Resent-From: $?x$x <$g>$|$g$.
  587. H?F?From: $?x$x <$g>$|$g$.
  588. H?x?Full-Name: $x
  589. # HPosted-Date: $a
  590. # H?l?Received-Date: $b
  591. H?M?Resent-Message-Id: <$t.$i@$j>
  592. H?M?Message-Id: <$t.$i@$j>
  594. #
  595. ######################################################################
  596. ######################################################################
  597. #####
  598. #####   REWRITING RULES
  599. #####
  600. ######################################################################
  601. ######################################################################
  603. ############################################
  604. ###  Ruleset 3 -- Name Canonicalization  ###
  605. ############################################
  606. Scanonify=3
  608. # handle null input (translate to <@> special case)
  609. R$@   $@ <@>
  611. # strip group: syntax (not inside angle brackets!) and trailing semicolon
  612. R$*   $: $1 <@>   mark addresses
  613. R$* < $* > $* <@> $: $1 < $2 > $3   unmark <addr>
  614. R@ $* <@>  $: @ $1    unmark @host:...
  615. R$* [ IPv6 : $+ ] <@> $: $1 [ IPv6 : $2 ]  unmark IPv6 addr
  616. R$* :: $* <@>  $: $1 :: $2   unmark node::addr
  617. R:include: $* <@> $: :include: $1   unmark :include:...
  618. R$* : $* [ $* ]  $: $1 : $2 [ $3 ] <@>  remark if leading colon
  619. R$* : $* <@>  $: $2    strip colon if marked
  620. R$* <@>   $: $1    unmark
  621. R$* ;      $1    strip trailing semi
  622. R$* < $+ :; > $* $@ $2 :; <@>   catch <list:;>
  623. R$* < $* ; >     $1 < $2 >   bogus bracketed semi
  625. # null input now results from list:; syntax
  626. R$@   $@ :; <@>
  628. # strip angle brackets -- note RFC733 heuristic to get innermost item
  629. R$*   $: < $1 >   housekeeping <>
  630. R$+ < $* >     < $2 >   strip excess on left
  631. R< $* > $+     < $1 >   strip excess on right
  632. R<>   $@ < @ >   MAIL FROM:<> case
  633. R< $+ >   $: $1    remove housekeeping <>
  635. # strip route address <@a,@b,@c:user@d> -> <user@d>
  636. R@ $+ , $+  $2
  637. R@ [ $* ] : $+  $2
  638. R@ $+ : $+  $2
  640. # find focus for list syntax
  641. R $+ : $* ; @ $+ $@ $>Canonify2 $1 : $2 ; < @ $3 > list syntax
  642. R $+ : $* ;  $@ $1 : $2;   list syntax
  644. # find focus for @ syntax addresses
  645. R$+ @ $+  $: $1 < @ $2 >   focus on domain
  646. R$+ < $+ @ $+ >  $1 $2 < @ $3 >   move gaze right
  647. R$+ < @ $+ >  $@ $>Canonify2 $1 < @ $2 > already canonical
  650. # convert old-style addresses to a domain-based address
  651. R$- ! $+  $@ $>Canonify2 $2 < @ $1 .UUCP > resolve uucp names
  652. R$+ . $- ! $+  $@ $>Canonify2 $3 < @ $1 . $2 >  domain uucps
  653. R$+ ! $+  $@ $>Canonify2 $2 < @ $1 .UUCP > uucp subdomains
  655. # if we have % signs, take the rightmost one
  656. R$* % $*  $1 @ $2    First make them all @s.
  657. R$* @ $* @ $*  $1 % $2 @ $3   Undo all but the last.
  658. R$* @ $*  $@ $>Canonify2 $1 < @ $2 > Insert < > and finish
  660. # else we must be a local name
  661. R$*   $@ $>Canonify2 $1
  664. ################################################
  665. ###  Ruleset 96 -- bottom half of ruleset 3  ###
  666. ################################################
  668. SCanonify2=96
  670. # handle special cases for local names
  671. R$* < @ localhost > $*  $: $1 < @ $j . > $2  no domain at all
  672. R$* < @ localhost . $m > $* $: $1 < @ $j . > $2  local domain
  673. R$* < @ localhost . UUCP > $* $: $1 < @ $j . > $2  .UUCP domain
  675. # check for IPv4/IPv6 domain literal
  676. R$* < @ [ $+ ] > $*  $: $1 < @@ [ $2 ] > $3  mark [addr]
  677. R$* < @@ $=w > $*  $: $1 < @ $j . > $3  self-literal
  678. R$* < @@ $+ > $*  $@ $1 < @ $2 > $3  canon IP addr
  684. # if really UUCP, handle it immediately
  686. # try UUCP traffic as a local address
  687. R$* < @ $+ . UUCP > $*  $: $1 < @ $[ $2 $] . UUCP . > $3
  688. R$* < @ $+ . . UUCP . > $* $@ $1 < @ $2 . > $3
  690. # hostnames ending in class P are always canonical
  691. R$* < @ $* $=P > $*  $: $1 < @ $2 $3 . > $4
  692. R$* < @ $* $~P > $*  $: $&{daemon_flags} $| $1 < @ $2 $3 > $4
  693. R$* CC $* $| $* < @ $+.$+ > $* $: $3 < @ $4.$5 . > $6
  694. R$* CC $* $| $*   $: $3
  695. # pass to name server to make hostname canonical
  696. R$* $| $* < @ $* > $*  $: $2 < @ $[ $3 $] > $4
  697. R$* $| $*   $: $2
  699. # local host aliases and pseudo-domains are always canonical
  700. R$* < @ $=w > $*  $: $1 < @ $2 . > $3
  701. R$* < @ $=M > $*  $: $1 < @ $2 . > $3
  702. R$* < @ $={VirtHost} > $*  $: $1 < @ $2 . > $3
  703. R$* < @ $* . . > $*  $1 < @ $2 . > $3
  706. ##################################################
  707. ###  Ruleset 4 -- Final Output Post-rewriting  ###
  708. ##################################################
  709. Sfinal=4
  711. R$+ :; <@>  $@ $1 :    handle <list:;>
  712. R$* <@>   $@    handle <> and list:;
  714. # strip trailing dot off possibly canonical name
  715. R$* < @ $+ . > $* $1 < @ $2 > $3
  717. # eliminate internal code
  718. R$* < @ *LOCAL* > $* $1 < @ $j > $2
  720. # externalize local domain info
  721. R$* < $+ > $*  $1 $2 $3   defocus
  722. R@ $+ : @ $+ : $+ @ $1 , @ $2 : $3  <route-addr> canonical
  723. R@ $*   $@ @ $1    ... and exit
  725. # UUCP must always be presented in old form
  726. R$+ @ $- . UUCP  $2!$1    u@h.UUCP => h!u
  728. # delete duplicate local names
  729. R$+ % $=w @ $=w  $1 @ $2    u%host@host => u@host
  733. ##############################################################
  734. ###   Ruleset 97 -- recanonicalize and call ruleset zero   ###
  735. ###     (used for recursive calls)     ###
  736. ##############################################################
  738. SRecurse=97
  739. R$*   $: $>canonify $1
  740. R$*   $@ $>parse $1
  743. ######################################
  744. ###   Ruleset 0 -- Parse Address   ###
  745. ######################################
  747. Sparse=0
  749. R$*   $: $>Parse0 $1  initial parsing
  750. R<@>   $#local $: <@>  special case error msgs
  751. R$*   $: $>ParseLocal $1 handle local hacks
  752. R$*   $: $>Parse1 $1  final parsing
  754. #
  755. #  Parse0 -- do initial syntax checking and eliminate local addresses.
  756. # This should either return with the (possibly modified) input
  757. # or return with a #error mailer.  It should not return with a
  758. # #mailer other than the #error mailer.
  759. #
  761. SParse0
  762. R<@>   $@ <@>   special case error msgs
  763. R$* : $* ; <@>  $#error $@ 5.1.3 $: "553 List:; syntax illegal for recipient addresses"
  764. R@ <@ $* >  < @ $1 >  catch "@@host" bogosity
  765. R<@ $+>   $#error $@ 5.1.3 $: "553 User address required"
  766. R$+ <@>   $#error $@ 5.1.3 $: "553 Hostname required"
  767. R$*   $: <> $1
  768. R<> $* < @ [ $* ] : $+ > $* $1 < @ [ $2 ] : $3 > $4
  769. R<> $* < @ [ $* ] , $+ > $* $1 < @ [ $2 ] , $3 > $4
  770. R<> $* < @ [ $* ] $+ > $* $#error $@ 5.1.2 $: "553 Invalid address"
  771. R<> $* < @ [ $+ ] > $*  $1 < @ [ $2 ] > $3
  772. R<> $* <$* : $* > $* $#error $@ 5.1.3 $: "553 Colon illegal in host name part"
  773. R<> $*   $1
  774. R$* < @ . $* > $* $#error $@ 5.1.2 $: "553 Invalid host name"
  775. R$* < @ $* .. $* > $* $#error $@ 5.1.2 $: "553 Invalid host name"
  776. R$* < @ $* @ > $* $#error $@ 5.1.2 $: "553 Invalid route address"
  777. R$* @ $* < @ $* > $* $#error $@ 5.1.3 $: "553 Invalid route address"
  778. R$* , $~O $*  $#error $@ 5.1.3 $: "553 Invalid route address"
  781. # now delete the local info -- note $=O to find characters that cause forwarding
  782. R$* < @ > $*  $@ $>Parse0 $>canonify $1 user@ => user
  783. R< @ $=w . > : $* $@ $>Parse0 $>canonify $2 @here:... -> ...
  784. R$- < @ $=w . >  $: $(dequote $1 $) < @ $2 . > dequote "foo"@here
  785. R< @ $+ >  $#error $@ 5.1.3 $: "553 User address required"
  786. R$* $=O $* < @ $=w . > $@ $>Parse0 $>canonify $1 $2 $3 ...@here -> ...
  787. R$-    $: $(dequote $1 $) < @ *LOCAL* > dequote "foo"
  788. R< @ *LOCAL* >  $#error $@ 5.1.3 $: "553 User address required"
  789. R$* $=O $* < @ *LOCAL* >
  790.   $@ $>Parse0 $>canonify $1 $2 $3 ...@*LOCAL* -> ...
  791. R$* < @ *LOCAL* > $: $1
  793. #
  794. #  Parse1 -- the bottom half of ruleset 0.
  795. #
  797. SParse1
  799. # handle numeric address spec
  800. R$* < @ [ $+ ] > $* $: $>ParseLocal $1 < @ [ $2 ] > $3 numeric internet spec
  801. R$* < @ [ $+ ] > $* $1 < @ [ $2 ] : $S > $3  Add smart host to path
  802. R$* < @ [ $+ ] : > $*  $#esmtp $@ [$2] $: $1 < @ [$2] > $3 no smarthost: send
  803. R$* < @ [ $+ ] : $- : $*> $* $#$3 $@ $4 $: $1 < @ [$2] > $5 smarthost with mailer
  804. R$* < @ [ $+ ] : $+ > $* $#esmtp $@ $3 $: $1 < @ [$2] > $4 smarthost without mailer
  806. # handle virtual users
  807. R$+   $: <!> $1  Mark for lookup
  808. R<!> $+ < @ $={VirtHost} . >  $: < $(virtuser $1 @ $2 $@ $1 $: @ $) > $1 < @ $2 . >
  809. R<!> $+ < @ $=w . >  $: < $(virtuser $1 @ $2 $@ $1 $: @ $) > $1 < @ $2 . >
  810. R<@> $+ + $+ < @ $* . >
  811.   $: < $(virtuser $1 + + @ $3 $@ $1 $@ $2 $@ +$2 $: @ $) > $1 + $2 < @ $3 . >
  812. R<@> $+ + $* < @ $* . >
  813.   $: < $(virtuser $1 + * @ $3 $@ $1 $@ $2 $@ +$2 $: @ $) > $1 + $2 < @ $3 . >
  814. R<@> $+ + $* < @ $* . >
  815.   $: < $(virtuser $1 @ $3 $@ $1 $@ $2 $@ +$2 $: @ $) > $1 + $2 < @ $3 . >
  816. R<@> $+ + $+ < @ $+ . > $: < $(virtuser + + @ $3 $@ $1 $@ $2 $@ +$2 $: @ $) > $1 + $2 < @ $3 . >
  817. R<@> $+ + $* < @ $+ . > $: < $(virtuser + * @ $3 $@ $1 $@ $2 $@ +$2 $: @ $) > $1 + $2 < @ $3 . >
  818. R<@> $+ + $* < @ $+ . > $: < $(virtuser @ $3 $@ $1 $@ $2 $@ +$2 $: ! $) > $1 + $2 < @ $3 . >
  819. R<@> $+ < @ $+ . > $: < $(virtuser @ $2 $@ $1 $: @ $) > $1 < @ $2 . >
  820. R<@> $+   $: $1
  821. R<!> $+   $: $1
  822. R< error : $-.$-.$- : $+ > $*  $#error $@ $1.$2.$3 $: $4
  823. R< error : $- $+ > $*  $#error $@ $(dequote $1 $) $: $2
  824. R< $+ > $+ < @ $+ > $: $>Recurse $1
  826. # short circuit local delivery so forwarded email works
  829. R$=L < @ $=w . > $#local $: @ $1   special local names
  830. R$+ < @ $=w . >  $#local $: $1   regular local name
  832. # not local -- try mailer table lookup
  833. R$* <@ $+ > $*  $: < $2 > $1 < @ $2 > $3 extract host name
  834. R< $+ . > $*  $: < $1 > $2   strip trailing dot
  835. R< $+ > $*  $: < $(mailertable $1 $) > $2 lookup
  836. R< $~[ : $* > $*  $>MailerToTriple < $1 : $2 > $3  check -- resolved?
  837. R< $+ > $*  $: $>Mailertable <$1> $2  try domain
  839. # resolve remotely connected UUCP links (if any)
  841. # resolve fake top level domains by forwarding to other hosts
  845. # pass names that still have a host to a smarthost (if defined)
  846. R$* < @ $* > $*  $: $>MailerToTriple < $S > $1 < @ $2 > $3 glue on smarthost name
  848. # deal with other remote names
  849. R$* < @$* > $*  $#esmtp $@ $2 $: $1 < @ $2 > $3 user@host.domain
  851. # handle locally delivered names
  852. R$=L   $#local $: @ $1  special local names
  853. R$+   $#local $: $1   regular local names
  855. ###########################################################################
  856. ###   Ruleset 5 -- special rewriting after aliases have been expanded   ###
  857. ###########################################################################
  859. SLocal_localaddr
  860. Slocaladdr=5
  861. R$+   $: $1 $| $>"Local_localaddr" $1
  862. R$+ $| $#ok  $@ $1   no change
  863. R$+ $| $#$*  $#$2
  864. R$+ $| $*  $: $1
  869. # deal with plussed users so aliases work nicely
  870. R$+ + *   $#local $@ $&h $: $1
  871. R$+ + $*  $#local $@ + $2 $: $1 + *
  873. # prepend an empty "forward host" on the front
  874. R$+   $: <> $1
  878. R< > $+   $: < > < $1 <> $&h >  nope, restore +detail
  880. R< > < $+ <> + $* > $: < > < $1 + $2 >  check whether +detail
  881. R< > < $+ <> $* > $: < > < $1 >   else discard
  882. R< > < $+ + $* > $*    < > < $1 > + $2 $3  find the user part
  883. R< > < $+ > + $* $#local $@ $2 $: @ $1  strip the extra +
  884. R< > < $+ >  $@ $1    no +detail
  885. R$+   $: $1 <> $&h   add +detail back in
  887. R$+ <> + $*  $: $1 + $2   check whether +detail
  888. R$+ <> $*  $: $1    else discard
  889. R< local : $* > $* $: $>MailerToTriple < local : $1 > $2 no host extension
  890. R< error : $* > $* $: $>MailerToTriple < error : $1 > $2 no host extension
  892. R< $~[ : $+ > $+ $: $>MailerToTriple < $1 : $2 > $3 < @ $2 >
  894. R< $+ > $+  $@ $>MailerToTriple < $1 > $2 < @ $1 >
  897. ###################################################################
  898. ###  Ruleset 90 -- try domain part of mailertable entry  ###
  899. ###################################################################
  901. SMailertable=90
  902. R$* <$- . $+ > $* $: $1$2 < $(mailertable .$3 $@ $1$2 $@ $2 $) > $4
  903. R$* <$~[ : $* > $* $>MailerToTriple < $2 : $3 > $4  check -- resolved?
  904. R$* < . $+ > $*  $@ $>Mailertable $1 . <$2> $3  no -- strip & try again
  905. R$* < $* > $*  $: < $(mailertable . $@ $1$2 $) > $3 try "."
  906. R< $~[ : $* > $* $>MailerToTriple < $1 : $2 > $3  "." found?
  907. R< $* > $*  $@ $2    no mailertable match
  909. ###################################################################
  910. ###  Ruleset 95 -- canonify mailer:[user@]host syntax to triple ###
  911. ###################################################################
  913. SMailerToTriple=95
  914. R< > $*    $@ $1   strip off null relay
  915. R< error : $-.$-.$- : $+ > $*  $#error $@ $1.$2.$3 $: $4
  916. R< error : $- $+ > $*  $#error $@ $(dequote $1 $) $: $2
  917. R< local : $* > $*  $>CanonLocal < $1 > $2
  918. R< $~[ : $+ @ $+ > $*<$*>$* $# $1 $@ $3 $: $2<@$3> use literal user
  919. R< $~[ : $+ > $*  $# $1 $@ $2 $: $3 try qualified mailer
  920. R< $=w > $*   $@ $2   delete local host
  921. R< $+ > $*   $#relay $@ $1 $: $2 use unqualified mailer
  923. ###################################################################
  924. ###  Ruleset CanonLocal -- canonify local: syntax  ###
  925. ###################################################################
  927. SCanonLocal
  928. # strip local host from routed addresses
  929. R< $* > < @ $+ > : $+  $@ $>Recurse $3
  930. R< $* > $+ $=O $+ < @ $+ > $@ $>Recurse $2 $3 $4
  932. # strip trailing dot from any host name that may appear
  933. R< $* > $* < @ $* . >  $: < $1 > $2 < @ $3 >
  935. # handle local: syntax -- use old user, either with or without host
  936. R< > $* < @ $* > $*  $#local $@ $1@$2 $: $1
  937. R< > $+    $#local $@ $1    $: $1
  939. # handle local:user@host syntax -- ignore host part
  940. R< $+ @ $+ > $* < @ $* > $: < $1 > $3 < @ $4 >
  942. # handle local:user syntax
  943. R< $+ > $* <@ $* > $*  $#local $@ $2@$3 $: $1
  944. R< $+ > $*    $#local $@ $2    $: $1
  946. ###################################################################
  947. ###  Ruleset 93 -- convert header names to masqueraded form ###
  948. ###################################################################
  950. SMasqHdr=93
  953. # do not masquerade anything in class N
  954. R$* < @ $* $=N . > $@ $1 < @ $2 $3 . >
  956. R$* < @ *LOCAL* > $@ $1 < @ $j . >
  958. ###################################################################
  959. ###  Ruleset 94 -- convert envelope names to masqueraded form ###
  960. ###################################################################
  962. SMasqEnv=94
  963. R$* < @ *LOCAL* > $* $: $1 < @ $j . > $2
  965. ###################################################################
  966. ###  Ruleset 98 -- local part of ruleset zero (can be null) ###
  967. ###################################################################
  969. SParseLocal=98
  971. # addresses sent to foo@host.REDIRECT will give a 551 error code
  972. R$* < @ $+ .REDIRECT. >  $: $1 < @ $2 . REDIRECT . > < ${opMode} >
  973. R$* < @ $+ .REDIRECT. > <i> $: $1 < @ $2 . REDIRECT. >
  974. R$* < @ $+ .REDIRECT. > < $- > $#error $@ 5.1.1 $: "551 User has moved; please try " <$1@$2>
  979. ######################################################################
  980. ###  D: LookUpDomain -- search for domain in access database
  981. ###
  982. ### Parameters:
  983. ###  <$1> -- key (domain name)
  984. ###  <$2> -- default (what to return if not found in db)
  985. ###  <$3> -- mark (must be <(!|+) single-token> )
  986. ###   ! does lookup only with tag
  987. ###   + does lookup with and without tag
  988. ###  <$4> -- passthru (additional data passed unchanged through)
  989. ######################################################################
  991. SD
  992. R<$*> <$+> <$- $-> <$*>  $: < $(access $4:$1 $: ? $) > <$1> <$2> <$3 $4> <$5>
  993. R<?> <$+> <$+> <+ $-> <$*> $: < $(access $1 $: ? $) > <$1> <$2> <+ $3> <$4>
  994. R<?> <[$+.$-]> <$+> <$- $-> <$*> $@ $>D <[$1]> <$3> <$4 $5> <$6>
  995. R<?> <[$+::$-]> <$+> <$- $-> <$*> $: $>D <[$1]> <$3> <$4 $5> <$6>
  996. R<?> <[$+:$-]> <$+> <$- $-> <$*> $: $>D <[$1]> <$3> <$4 $5> <$6>
  997. R<?> <$+.$+> <$+> <$- $-> <$*> $@ $>D <$2> <$3> <$4 $5> <$6>
  998. R<?> <$+> <$+> <$- $-> <$*> $@ <$2> <$5>
  999. R<$* <TMPF>> <$+> <$+> <$- $-> <$*> $@ <<TMPF>> <$6>
  1000. R<$*> <$+> <$+> <$- $-> <$*> $@ <$1> <$6>
  1002. ######################################################################
  1003. ###  A: LookUpAddress -- search for host address in access database
  1004. ###
  1005. ### Parameters:
  1006. ###  <$1> -- key (dot quadded host address)
  1007. ###  <$2> -- default (what to return if not found in db)
  1008. ###  <$3> -- mark (must be <(!|+) single-token> )
  1009. ###   ! does lookup only with tag
  1010. ###   + does lookup with and without tag
  1011. ###  <$4> -- passthru (additional data passed through)
  1012. ######################################################################
  1014. SA
  1015. R<$+> <$+> <$- $-> <$*>  $: < $(access $4:$1 $: ? $) > <$1> <$2> <$3 $4> <$5>
  1016. R<?> <$+> <$+> <+ $-> <$*> $: < $(access $1 $: ? $) > <$1> <$2> <+ $3> <$4>
  1017. R<?> <$+::$-> <$+> <$- $-> <$*>  $@ $>A <$1> <$3> <$4 $5> <$6>
  1018. R<?> <$+:$-> <$+> <$- $-> <$*>  $@ $>A <$1> <$3> <$4 $5> <$6>
  1019. R<?> <$+.$-> <$+> <$- $-> <$*>  $@ $>A <$1> <$3> <$4 $5> <$6>
  1020. R<?> <$+> <$+> <$- $-> <$*> $@ <$2> <$5>
  1021. R<$* <TMPF>> <$+> <$+> <$- $-> <$*> $@ <<TMPF>> <$6>
  1022. R<$*> <$+> <$+> <$- $-> <$*> $@ <$1> <$6>
  1024. ######################################################################
  1025. ###  CanonAddr -- Convert an address into a standard form for
  1026. ###   relay checking.  Route address syntax is
  1027. ###   crudely converted into a %-hack address.
  1028. ###
  1029. ### Parameters:
  1030. ###  $1 -- full recipient address
  1031. ###
  1032. ### Returns:
  1033. ###  parsed address, not in source route form
  1034. ######################################################################
  1036. SCanonAddr
  1037. R$*   $: $>Parse0 $>canonify $1 make domain canonical
  1040. ######################################################################
  1041. ###  ParseRecipient -- Strip off hosts in $=R as well as possibly
  1042. ###   $* $=m or the access database.
  1043. ###   Check user portion for host separators.
  1044. ###
  1045. ### Parameters:
  1046. ###  $1 -- full recipient address
  1047. ###
  1048. ### Returns:
  1049. ###  parsed, non-local-relaying address
  1050. ######################################################################
  1052. SParseRecipient
  1053. R$*    $: <?> $>CanonAddr $1
  1054. R<?> $* < @ $* . >  <?> $1 < @ $2 >   strip trailing dots
  1055. R<?> $- < @ $* >  $: <?> $(dequote $1 $) < @ $2 > dequote local part
  1057. # if no $=O character, no host in the user portion, we are done
  1058. R<?> $* $=O $* < @ $* >  $: <NO> $1 $2 $3 < @ $4>
  1059. R<?> $*    $@ $1
  1062. R<NO> $* < @ $* $=R >  $: <RELAY> $1 < @ $2 $3 >
  1063. R<NO> $* < @ $+ >  $: $>D <$2> <NO> <+ To> <$1 < @ $2 >>
  1064. R<$+> <$+>   $: <$1> $2
  1068. R<RELAY> $* < @ $* >  $@ $>ParseRecipient $1
  1069. R<$+> $*   $@ $2
  1072. ######################################################################
  1073. ###  check_relay -- check hostname/address on SMTP startup
  1074. ######################################################################
  1076. SLocal_check_relay
  1077. Scheck_relay
  1078. R$*   $: $1 $| $>"Local_check_relay" $1
  1079. R$* $| $* $| $#$* $#$3
  1080. R$* $| $* $| $*  $@ $>"Basic_check_relay" $1 $| $2
  1082. SBasic_check_relay
  1083. # check for deferred delivery mode
  1084. R$*   $: < $&{deliveryMode} > $1
  1085. R< d > $*  $@ deferred
  1086. R< $* > $*  $: $2
  1088. R$+ $| $+  $: $>D < $1 > <?> <+ Connect> < $2 >
  1089. R   $| $+  $: $>A < $1 > <?> <+ Connect> <> empty client_name
  1090. R<?> <$+>  $: $>A < $1 > <?> <+ Connect> <> no: another lookup
  1091. R<?> <$*>  $: OK    found nothing
  1092. R<$={Accept}> <$*> $@ $1    return value of lookup
  1093. R<REJECT> <$*>  $#error $@ 5.7.1 $: "550 Access denied"
  1094. R<DISCARD> <$*>  $#discard $: discard
  1095. R<ERROR:$-.$-.$-:$+> <$*> $#error $@ $1.$2.$3 $: $4
  1096. R<ERROR:$+> <$*>  $#error $: $1
  1097. R<$* <TMPF>> <$*>  $#error $@ 4.3.0 $: "451 Temporary system failure. Please try again later."
  1098. R<$+> <$*>  $#error $: $1
  1102. ######################################################################
  1103. ###  check_mail -- check SMTP `MAIL FROM:' command argument
  1104. ######################################################################
  1106. SLocal_check_mail
  1107. Scheck_mail
  1108. R$*   $: $1 $| $>"Local_check_mail" $1
  1109. R$* $| $#$*  $#$2
  1110. R$* $| $*  $@ $>"Basic_check_mail" $1
  1112. SBasic_check_mail
  1113. # check for deferred delivery mode
  1114. R$*   $: < $&{deliveryMode} > $1
  1115. R< d > $*  $@ deferred
  1116. R< $* > $*  $: $2
  1118. # authenticated?
  1119. R$*   $: $1 $| $>"tls_client" $&{verify} $| MAIL
  1120. R$* $| $#$+  $#$2
  1121. R$* $| $*  $: $1
  1123. R<>   $@ <OK>   we MUST accept <> (RFC 1123)
  1124. R$+   $: <?> $1
  1125. R<?><$+>  $: <@> <$1>
  1126. R<?>$+   $: <@> <$1>
  1127. R$*   $: $&{daemon_flags} $| $1
  1128. R$* f $* $| <@> < $* @ $- > $: < ? $&{client_name} > < $3 @ $4 >
  1129. R$* u $* $| <@> < $* > $: <?> < $3 >
  1130. R$* $| $*  $: $2
  1131. # handle case of @localhost on address
  1132. R<@> < $* @ localhost > $: < ? $&{client_name} > < $1 @ localhost >
  1133. R<@> < $* @ [127.0.0.1] >
  1134.   $: < ? $&{client_name} > < $1 @ [127.0.0.1] >
  1135. R<@> < $* @ localhost.$m >
  1136.   $: < ? $&{client_name} > < $1 @ localhost.$m >
  1137. R<@> < $* @ localhost.UUCP >
  1138.   $: < ? $&{client_name} > < $1 @ localhost.UUCP >
  1139. R<@> $*   $: $1   no localhost as domain
  1140. R<? $=w> $*  $: $2   local client: ok
  1141. R<? $+> <$+>  $#error $@ 5.5.4 $: "553 Real domain name required for sender address"
  1142. R<?> $*   $: $1
  1143. R$*   $: <?> $>CanonAddr $1  canonify sender address and mark it
  1144. R<?> $* < @ $+ . > <?> $1 < @ $2 >   strip trailing dots
  1145. # handle non-DNS hostnames (*.bitnet, *.decnet, *.uucp, etc)
  1146. R<?> $* < @ $* $=P > $: <OKR> $1 < @ $2 $3 >
  1147. R<?> $* < @ $j > $: <OKR> $1 < @ $j >
  1148. R<?> $* < @ $+ > $: <OKR> $1 < @ $2 >  ... unresolvable OK
  1150. # check sender address: user@address, user@, address
  1151. R<$+> $+ < @ $* > $: @<$1> <$2 < @ $3 >> $| <F:$2@$3> <U:$2@> <D:$3>
  1152. R<$+> $+  $: @<$1> <$2> $| <U:$2@>
  1153. R@ <$+> <$*> $| <$+> $: <@> <$1> <$2> $| $>SearchList <+ From> $| <$3> <>
  1154. R<@> <$+> <$*> $| <$*> $: <$3> <$1> <$2>  reverse result
  1155. # retransform for further use
  1156. R<?> <$+> <$*>  $: <$1> $2 no match
  1157. R<$+> <$+> <$*>  $: <$1> $3 relevant result, keep it
  1159. # handle case of no @domain on address
  1160. R<?> $*   $: $&{daemon_flags} $| <?> $1
  1161. R$* u $* $| <?> $* $: <OKR> $3
  1162. R$* $| $*  $: $2
  1163. R<?> $*   $: < ? $&{client_addr} > $1
  1164. R<?> $*   $@ <OKR>   ...local unqualed ok
  1165. R<? $+> $*  $#error $@ 5.5.4 $: "553 Domain name required for sender address " $&f
  1166.       ...remote is not
  1167. # check results
  1168. R<?> $*   $: @ $1  mark address: nothing known about it
  1169. R<$={ResOk}> $*  $@ <OKR> domain ok: stop
  1170. R<TEMP> $*  $#error $@ 4.1.8 $: "451 Domain of sender address " $&f " does not resolve"
  1171. R<PERM> $*  $#error $@ 5.1.8 $: "553 Domain of sender address " $&f " does not exist"
  1172. R<$={Accept}> $* $# $1  accept from access map
  1173. R<DISCARD> $*  $#discard $: discard
  1174. R<REJECT> $*  $#error $@ 5.7.1 $: "550 Access denied"
  1175. R<ERROR:$-.$-.$-:$+> $*  $#error $@ $1.$2.$3 $: $4
  1176. R<ERROR:$+> $*  $#error $: $1
  1177. R<<TMPF>> $*  $#error $@ 4.3.0 $: "451 Temporary system failure. Please try again later."
  1178. R<$+> $*  $#error $: $1  error from access db
  1180. ######################################################################
  1181. ###  check_rcpt -- check SMTP `RCPT TO:' command argument
  1182. ######################################################################
  1184. SLocal_check_rcpt
  1185. Scheck_rcpt
  1186. R$*   $: $1 $| $>"Local_check_rcpt" $1
  1187. R$* $| $#$*  $#$2
  1188. R$* $| $*  $@ $>"Basic_check_rcpt" $1
  1190. SBasic_check_rcpt
  1191. # empty address?
  1192. R<>   $#error $@ nouser $: "553 User address required"
  1193. R$@   $#error $@ nouser $: "553 User address required"
  1194. # check for deferred delivery mode
  1195. R$*   $: < $&{deliveryMode} > $1
  1196. R< d > $*  $@ deferred
  1197. R< $* > $*  $: $2
  1200. ######################################################################
  1201. R$*   $: $1 $| @ $>"Rcpt_ok" $1
  1202. R$* $| @ $#TEMP $+ $: $1 $| T $2
  1203. R$* $| @ $#$*  $#$2
  1204. R$* $| @ RELAY  $@ RELAY
  1205. R$* $| @ $*  $: O $| $>"Relay_ok" $1
  1206. R$* $| T $+  $: T $2 $| $>"Relay_ok" $1
  1207. R$* $| $#TEMP $+ $#error $2
  1208. R$* $| $#$*  $#$2
  1209. R$* $| RELAY  $@ RELAY
  1210. R T $+ $| $*  $#error $1
  1211. # anything else is bogus
  1212. R$*   $#error $@ 5.7.1 $: "550 Relaying denied"
  1215. ######################################################################
  1216. ### Rcpt_ok: is the recipient ok?
  1217. ######################################################################
  1218. SRcpt_ok
  1219. R$*   $: $>ParseRecipient $1  strip relayable hosts
  1223. # blacklist local users or any host from receiving mail
  1224. R$*   $: <?> $1
  1225. R<?> $+ < @ $=w > $: <> <$1 < @ $2 >> $| <F:$1@$2> <U:$1@> <D:$2>
  1226. R<?> $+ < @ $* > $: <> <$1 < @ $2 >> $| <F:$1@$2> <D:$2>
  1227. R<?> $+   $: <> <$1> $| <U:$1@>
  1228. R<> <$*> $| <$+> $: <@> <$1> $| $>SearchList <+ To> $| <$2> <>
  1229. R<@> <$*> $| <$*> $: <$2> <$1>  reverse result
  1230. R<?> <$*>  $: @ $1  mark address as no match
  1231. R<$={Accept}> <$*> $: @ $2  mark address as no match
  1233. R<REJECT> $*  $#error $@ 5.2.1 $: "550 Mailbox disabled for this recipient"
  1234. R<DISCARD> $*  $#discard $: discard
  1235. R<ERROR:$-.$-.$-:$+> $*  $#error $@ $1.$2.$3 $: $4
  1236. R<ERROR:$+> $*  $#error $: $1
  1237. R<<TMPF>> $*  $#error $@ 4.3.0 $: "451 Temporary system failure. Please try again later."
  1238. R<$+> $*  $#error $: $1  error from access db
  1239. R@ $*   $1  remove mark
  1241. # authenticated via TLS?
  1242. R$*   $: $1 $| $>RelayTLS client authenticated?
  1243. R$* $| $# $+  $# $2   error/ok?
  1244. R$* $| $*  $: $1   no
  1246. R$*   $: $1 $| $>"Local_Relay_Auth" $&{auth_type}
  1247. R$* $| $# $*  $# $2
  1248. R$* $| NO  $: $1
  1249. R$* $| $*  $: $1 $| $&{auth_type}
  1250. R$* $|   $: $1
  1251. R$* $| $={TrustAuthMech} $# RELAY
  1252. R$* $| $*  $: $1
  1253. # anything terminating locally is ok
  1254. R$+ < @ $=w >  $@ RELAY
  1255. R$+ < @ $* $=R > $@ RELAY
  1256. R$+ < @ $+ >  $: $>D <$2> <?> <+ To> <$1 < @ $2 >>
  1257. R<RELAY> $*  $@ RELAY
  1258. R<$* <TMPF>> $*  $#TEMP $@ 4.3.0 $: "451 Temporary system failure. Please try again later."
  1259. R<$*> <$*>  $: $2
  1263. # check for local user (i.e. unqualified address)
  1264. R$*   $: <?> $1
  1265. R<?> $* < @ $+ > $: <REMOTE> $1 < @ $2 >
  1266. # local user is ok
  1267. R<?> $+   $@ RELAY
  1268. R<$+> $*  $: $2
  1270. ######################################################################
  1271. ### Relay_ok: is the relay/sender ok?
  1272. ######################################################################
  1273. SRelay_ok
  1274. # anything originating locally is ok
  1275. # check IP address
  1276. R$*   $: $&{client_addr}
  1277. R$@   $@ RELAY  originated locally
  1278. R0   $@ RELAY  originated locally
  1279. R127.0.0.1  $@ RELAY  originated locally
  1280. RIPv6:::1  $@ RELAY  originated locally
  1281. R$=R $*   $@ RELAY  relayable IP address
  1282. R$*   $: $>A <$1> <?> <+ Connect> <$1>
  1283. R<RELAY> $*   $@ RELAY  relayable IP address
  1285. R<<TMPF>> $*  $#TEMP $@ 4.3.0 $: "451 Temporary system failure. Please try again later."
  1286. R<$*> <$*>  $: $2
  1287. R$*   $: [ $1 ]  put brackets around it...
  1288. R$=w   $@ RELAY  ... and see if it is local
  1291. # check client name: first: did it resolve?
  1292. R$*   $: < $&{client_resolve} >
  1293. R<TEMP>   $#TEMP $@ 4.7.1 $: "450 Relaying temporarily denied. Cannot resolve PTR record for " $&{client_addr}
  1294. R<FORGED>  $#error $@ 5.7.1 $: "550 Relaying denied. IP name possibly forged " $&{client_name}
  1295. R<FAIL>   $#error $@ 5.7.1 $: "550 Relaying denied. IP name lookup failed " $&{client_name}
  1296. R$*   $: <@> $&{client_name}
  1297. # pass to name server to make hostname canonical
  1298. R<@> $* $=P   $:<?>  $1 $2
  1299. R<@> $+   $:<?>  $[ $1 $]
  1300. R$* .   $1   strip trailing dots
  1301. R<?> $=w  $@ RELAY
  1302. R<?> $* $=R   $@ RELAY
  1303. R<?> $*   $: $>D <$1> <?> <+ Connect> <$1>
  1304. R<RELAY> $*  $@ RELAY
  1305. R<$* <TMPF>> $*  $#TEMP $@ 4.3.0 $: "451 Temporary system failure. Please try again later."
  1306. R<$*> <$*>  $: $2
  1309. ######################################################################
  1310. ###  F: LookUpFull -- search for an entry in access database
  1311. ###
  1312. ### lookup of full key (which should be an address) and
  1313. ### variations if +detail exists: +* and without +detail
  1314. ###
  1315. ### Parameters:
  1316. ###  <$1> -- key
  1317. ###  <$2> -- default (what to return if not found in db)
  1318. ###  <$3> -- mark (must be <(!|+) single-token> )
  1319. ###   ! does lookup only with tag
  1320. ###   + does lookup with and without tag
  1321. ###  <$4> -- passthru (additional data passed unchanged through)
  1322. ######################################################################
  1324. SF
  1325. R<$+> <$*> <$- $-> <$*>  $: <$(access $4:$1 $: ? $)> <$1> <$2> <$3 $4> <$5>
  1326. R<?> <$+> <$*> <+ $-> <$*> $: <$(access $1 $: ? $)> <$1> <$2> <+ $3> <$4>
  1327. R<?> <$+ + $* @ $+> <$*> <$- $-> <$*>
  1328.   $: <$(access $6:$1+*@$3 $: ? $)> <$1+$2@$3> <$4> <$5 $6> <$7>
  1329. R<?> <$+ + $* @ $+> <$*> <+ $-> <$*>
  1330.   $: <$(access $1+*@$3 $: ? $)> <$1+$2@$3> <$4> <+ $5> <$6>
  1331. R<?> <$+ + $* @ $+> <$*> <$- $-> <$*>
  1332.   $: <$(access $6:$1@$3 $: ? $)> <$1+$2@$3> <$4> <$5 $6> <$7>
  1333. R<?> <$+ + $* @ $+> <$*> <+ $-> <$*>
  1334.   $: <$(access $1@$3 $: ? $)> <$1+$2@$3> <$4> <+ $5> <$6>
  1335. R<?> <$+> <$*> <$- $-> <$*> $@ <$2> <$5>
  1336. R<$+ <TMPF>> <$*> <$- $-> <$*> $@ <<TMPF>> <$5>
  1337. R<$+> <$*> <$- $-> <$*>  $@ <$1> <$5>
  1339. ######################################################################
  1340. ###  E: LookUpExact -- search for an entry in access database
  1341. ###
  1342. ### Parameters:
  1343. ###  <$1> -- key
  1344. ###  <$2> -- default (what to return if not found in db)
  1345. ###  <$3> -- mark (must be <(!|+) single-token> )
  1346. ###   ! does lookup only with tag
  1347. ###   + does lookup with and without tag
  1348. ###  <$4> -- passthru (additional data passed unchanged through)
  1349. ######################################################################
  1351. SE
  1352. R<$*> <$*> <$- $-> <$*>  $: <$(access $4:$1 $: ? $)> <$1> <$2> <$3 $4> <$5>
  1353. R<?> <$+> <$*> <+ $-> <$*> $: <$(access $1 $: ? $)> <$1> <$2> <+ $3> <$4>
  1354. R<?> <$+> <$*> <$- $-> <$*> $@ <$2> <$5>
  1355. R<$+ <TMPF>> <$*> <$- $-> <$*> $@ <<TMPF>> <$5>
  1356. R<$+> <$*> <$- $-> <$*>  $@ <$1> <$5>
  1358. ######################################################################
  1359. ###  U: LookUpUser -- search for an entry in access database
  1360. ###
  1361. ### lookup of key (which should be a local part) and
  1362. ### variations if +detail exists: +* and without +detail
  1363. ###
  1364. ### Parameters:
  1365. ###  <$1> -- key (user@)
  1366. ###  <$2> -- default (what to return if not found in db)
  1367. ###  <$3> -- mark (must be <(!|+) single-token> )
  1368. ###   ! does lookup only with tag
  1369. ###   + does lookup with and without tag
  1370. ###  <$4> -- passthru (additional data passed unchanged through)
  1371. ######################################################################
  1373. SU
  1374. R<$+> <$*> <$- $-> <$*>  $: <$(access $4:$1 $: ? $)> <$1> <$2> <$3 $4> <$5>
  1375. R<?> <$+> <$*> <+ $-> <$*> $: <$(access $1 $: ? $)> <$1> <$2> <+ $3> <$4>
  1376. R<?> <$+ + $* @> <$*> <$- $-> <$*>
  1377.   $: <$(access $5:$1+*@ $: ? $)> <$1+$2@> <$3> <$4 $5> <$6>
  1378. R<?> <$+ + $* @> <$*> <+ $-> <$*>
  1379.   $: <$(access $1+*@ $: ? $)> <$1+$2@> <$3> <+ $4> <$5>
  1380. R<?> <$+ + $* @> <$*> <$- $-> <$*>
  1381.   $: <$(access $5:$1@ $: ? $)> <$1+$2@> <$3> <$4 $5> <$6>
  1382. R<?> <$+ + $* @> <$*> <+ $-> <$*>
  1383.   $: <$(access $1@ $: ? $)> <$1+$2@> <$3> <+ $4> <$5>
  1384. R<?> <$+> <$*> <$- $-> <$*> $@ <$2> <$5>
  1385. R<$+ <TMPF>> <$*> <$- $-> <$*> $@ <<TMPF>> <$5>
  1386. R<$+> <$*> <$- $-> <$*>  $@ <$1> <$5>
  1388. ######################################################################
  1389. ###  SearchList: search a list of items in the access map
  1390. ### Parameters:
  1391. ###  <exact tag> $| <mark:address> <mark:address> ... <>
  1392. ### where "exact" is either "+" or "!":
  1393. ### <+ TAG> lookup with and w/o tag
  1394. ### <! TAG> lookup with tag
  1395. ### possible values for "mark" are:
  1396. ###  D: recursive host lookup (LookUpDomain)
  1397. ###  E: exact lookup, no modifications
  1398. ###  F: full lookup, try user+ext@domain and user@domain
  1399. ###  U: user lookup, try user+ext and user (input must have trailing @)
  1400. ### return: <RHS of lookup> or <?> (not found)
  1401. ######################################################################
  1403. # class with valid marks for SearchList
  1404. C{src}E F D U
  1405. SSearchList
  1406. # just call the ruleset with the name of the tag... nice trick...
  1407. R<$+> $| <$={src}:$*> <$*> $: <$1> $| <$4> $| $>$2 <$3> <?> <$1> <>
  1408. R<$+> $| <> $| <?> <>  $@ <?>
  1409. R<$+> $| <$+> $| <?> <>  $@ $>SearchList <$1> $| <$2>
  1410. R<$+> $| <$*> $| <$+> <> $@ <$3>
  1411. R<$+> $| <$+>   $@ <$2>
  1414. ######################################################################
  1415. ###  trust_auth: is user trusted to authenticate as someone else?
  1416. ###
  1417. ### Parameters:
  1418. ###  $1: AUTH= parameter from MAIL command
  1419. ######################################################################
  1421. SLocal_trust_auth
  1422. Strust_auth
  1423. R$*   $: $&{auth_type} $| $1
  1424. # required by RFC 2554 section 4.
  1425. R$@ $| $*  $#error $@ 5.7.1 $: "550 not authenticated"
  1426. R$* $| $&{auth_authen}  $@ identical
  1427. R$* $| <$&{auth_authen}> $@ identical
  1428. R$* $| $*  $: $1 $| $>"Local_trust_auth" $1
  1429. R$* $| $#$*  $#$2
  1430. R$*   $#error $@ 5.7.1 $: "550 " $&{auth_authen} " not allowed to act as " $&{auth_author}
  1432. ######################################################################
  1433. ###  Relay_Auth: allow relaying based on authentication?
  1434. ###
  1435. ### Parameters:
  1436. ###  $1: ${auth_type}
  1437. ######################################################################
  1438. SLocal_Relay_Auth
  1440. ######################################################################
  1441. ###  srv_features: which features to offer to a client?
  1442. ### (done in server)
  1443. ######################################################################
  1444. Ssrv_features
  1445. R$*  $: $>D <$&{client_name}> <?> <! "Srv_Features"> <>
  1446. R<?>$*  $: $>A <$&{client_addr}> <?> <! "Srv_Features"> <>
  1447. R<?>$*  $: <$(access "Srv_Features": $: ? $)>
  1448. R<?>$*  $@ OK
  1449. R<$* <TMPF>>$* $#temp
  1450. R<$+>$*  $# $1
  1452. ######################################################################
  1453. ###  try_tls: try to use STARTTLS?
  1454. ### (done in client)
  1455. ######################################################################
  1456. Stry_tls
  1457. R$*  $: $>D <$&{server_name}> <?> <! "Try_TLS"> <>
  1458. R<?>$*  $: $>A <$&{server_addr}> <?> <! "Try_TLS"> <>
  1459. R<?>$*  $: <$(access "Try_TLS": $: ? $)>
  1460. R<?>$*  $@ OK
  1461. R<$* <TMPF>>$* $#error $@ 4.3.0 $: "451 Temporary system failure. Please try again later."
  1462. R<NO>$*  $#error $@ 5.7.1 $: "550 do not try TLS with " $&{server_name} " ["$&{server_addr}"]"
  1464. ######################################################################
  1465. ###  tls_rcpt: is connection with server "good" enough?
  1466. ### (done in client, per recipient)
  1467. ###
  1468. ### Parameters:
  1469. ###  $1: recipient
  1470. ######################################################################
  1471. Stls_rcpt
  1472. R$*   $: $(macro {TLS_Name} $@ $&{server_name} $) $1
  1473. R$+   $: <?> $>CanonAddr $1
  1474. R<?> $+ < @ $+ . > <?> $1 <@ $2 >
  1475. R<?> $+ < @ $+ > $: $1 <@ $2 > $| <F:$1@$2> <U:$1@> <D:$2> <E:>
  1476. R<?> $+   $: $1 $| <U:$1@> <E:>
  1477. R$* $| $+ $: $1 $| $>SearchList <! "TLS_Rcpt"> $| $2 <>
  1478. R$* $| <?> $@ OK
  1479. R$* $| <$* <TMPF>> $#error $@ 4.3.0 $: "451 Temporary system failure. Please try again later."
  1480. R$* $| <$+> $@ $>"TLS_connection" $&{verify} $| <$2>
  1482. ######################################################################
  1483. ###  tls_client: is connection with client "good" enough?
  1484. ### (done in server)
  1485. ###
  1486. ### Parameters:
  1487. ###  ${verify} $| (MAIL|STARTTLS)
  1488. ######################################################################
  1489. Stls_client
  1490. R$*  $: $(macro {TLS_Name} $@ $&{server_name} $) $1
  1491. R$* $| $* $: $1 $| $>D <$&{client_name}> <?> <! "TLS_Clt"> <>
  1492. R$* $| <?>$* $: $1 $| $>A <$&{client_addr}> <?> <! "TLS_Clt"> <>
  1493. R$* $| <?>$* $: $1 $| <$(access "TLS_Clt": $: ? $)>
  1494. R$* $| <$* <TMPF>> $#error $@ 4.3.0 $: "451 Temporary system failure. Please try again later."
  1495. R$*  $@ $>"TLS_connection" $1
  1497. ######################################################################
  1498. ###  tls_server: is connection with server "good" enough?
  1499. ### (done in client)
  1500. ###
  1501. ### Parameter:
  1502. ###  ${verify}
  1503. ######################################################################
  1504. Stls_server
  1505. R$*  $: $(macro {TLS_Name} $@ $&{server_name} $) $1
  1506. R$*  $: $1 $| $>D <$&{server_name}> <?> <! "TLS_Srv"> <>
  1507. R$* $| <?>$* $: $1 $| $>A <$&{server_addr}> <?> <! "TLS_Srv"> <>
  1508. R$* $| <?>$* $: $1 $| <$(access "TLS_Srv": $: ? $)>
  1509. R$* $| <$* <TMPF>> $#error $@ 4.3.0 $: "451 Temporary system failure. Please try again later."
  1510. R$*  $@ $>"TLS_connection" $1
  1512. ######################################################################
  1513. ###  TLS_connection: is TLS connection "good" enough?
  1514. ###
  1515. ### Parameters:
  1516. ###  ${verify} $| <Requirement> [<>]
  1517. ###  Requirement: RHS from access map, may be ? for none.
  1518. ######################################################################
  1519. STLS_connection
  1520. R$* $| <$*>$*   $: $1 $| <$2>
  1521. # create the appropriate error codes
  1522. R$* $| <PERM + $={tls} $*> $: $1 $| <503:5.7.0> <$2 $3>
  1523. R$* $| <TEMP + $={tls} $*> $: $1 $| <403:4.7.0> <$2 $3>
  1524. R$* $| <$={tls} $*>  $: $1 $| <403:4.7.0> <$2 $3>
  1525. # deal with TLS handshake failures: abort
  1526. RSOFTWARE $| <$-:$+> $*  $#error $@ $2 $: $1 " TLS handshake failed."
  1527. RSOFTWARE $| $*   $#error $@ 4.7.0 $: "403 TLS handshake failed."
  1528. R$* $| <$*> <VERIFY>  $: <$2> <VERIFY> <> $1
  1529. R$* $| <$*> <VERIFY + $+> $: <$2> <VERIFY> <$3> $1
  1530. R$* $| <$*> <$={tls}:$->$* $: <$2> <$3:$4> <> $1
  1531. R$* $| <$*> <$={tls}:$- + $+>$* $: <$2> <$3:$4> <$5> $1
  1532. R$* $| $*   $@ OK
  1533. # authentication required: give appropriate error
  1534. # other side did authenticate (via STARTTLS)
  1535. R<$*><VERIFY> <> OK  $@ OK
  1536. R<$*><VERIFY> <$+> OK  $: <$1> <REQ:0> <$2>
  1537. R<$*><VERIFY:$-> <$*> OK $: <$1> <REQ:$2> <$3>
  1538. R<$*><ENCR:$-> <$*> $*  $: <$1> <REQ:$2> <$3>
  1539. R<$-:$+><VERIFY $*> <$*> $#error $@ $2 $: $1 " authentication required"
  1540. R<$-:$+><VERIFY $*> <$*> FAIL $#error $@ $2 $: $1 " authentication failed"
  1541. R<$-:$+><VERIFY $*> <$*> NO $#error $@ $2 $: $1 " not authenticated"
  1542. R<$-:$+><VERIFY $*> <$*> NOT $#error $@ $2 $: $1 " no authentication requested"
  1543. R<$-:$+><VERIFY $*> <$*> NONE $#error $@ $2 $: $1 " other side does not support STARTTLS"
  1544. R<$-:$+><VERIFY $*> <$*> $+ $#error $@ $2 $: $1 " authentication failure " $4
  1545. R<$*><REQ:$-> <$*>  $: <$1> <REQ:$2> <$3> $>max $&{cipher_bits} : $&{auth_ssf}
  1546. R<$*><REQ:$-> <$*> $-  $: <$1> <$2:$4> <$3> $(arith l $@ $4 $@ $2 $)
  1547. R<$-:$+><$-:$-> <$*> TRUE $#error $@ $2 $: $1 " encryption too weak " $4 " less than " $3
  1548. R<$-:$+><$-:$-> <$*> $*  $: <$1:$2 ++ $5>
  1549. R<$-:$+ ++ >   $@ OK
  1550. R<$-:$+ ++ $+ >   $: <$1:$2> <$3>
  1551. R<$-:$+> < $+ ++ $+ >  <$1:$2> <$3> <$4>
  1552. R<$-:$+> $+   $@ $>"TLS_req" $3 $| <$1:$2>
  1554. ######################################################################
  1555. ###  TLS_req: check additional TLS requirements
  1556. ###
  1557. ### Parameters: [<list> <of> <req>] $| <$-:$+>
  1558. ###  $-: SMTP reply code
  1559. ###  $+: Enhanced Status Code
  1560. ######################################################################
  1561. STLS_req
  1562. R $| $+  $@ OK
  1563. R<CN> $* $| <$+>  $: <CN:$&{TLS_Name}> $1 $| <$2>
  1564. R<CN:$&{cn_subject}> $* $| <$+>  $@ $>"TLS_req" $1 $| <$2>
  1565. R<CN:$+> $* $| <$-:$+> $#error $@ $4 $: $3 " CN " $&{cn_subject} " does not match " $1
  1566. R<CS:$&{cert_subject}> $* $| <$+> $@ $>"TLS_req" $1 $| <$2>
  1567. R<CS:$+> $* $| <$-:$+> $#error $@ $4 $: $3 " Cert Subject " $&{cert_subject} " does not match " $1
  1568. R<CI:$&{cert_issuer}> $* $| <$+> $@ $>"TLS_req" $1 $| <$2>
  1569. R<CI:$+> $* $| <$-:$+> $#error $@ $4 $: $3 " Cert Issuer " $&{cert_issuer} " does not match " $1
  1570. ROK   $@ OK
  1572. ######################################################################
  1573. ###  max: return the maximum of two values separated by :
  1574. ###
  1575. ### Parameters: [$-]:[$-]
  1576. ######################################################################
  1577. Smax
  1578. R:  $: 0
  1579. R:$-  $: $1
  1580. R$-:  $: $1
  1581. R$-:$-  $: $(arith l $@ $1 $@ $2 $) : $1 : $2
  1582. RTRUE:$-:$- $: $2
  1583. R$-:$-:$- $: $2
  1586. ######################################################################
  1587. ###  RelayTLS: allow relaying based on TLS authentication
  1588. ###
  1589. ### Parameters:
  1590. ###  none
  1591. ######################################################################
  1592. SRelayTLS
  1593. # authenticated?
  1594. R$*   $: <?> $&{verify}
  1595. R<?> OK   $: OK  authenticated: continue
  1596. R<?> $*   $@ NO  not authenticated
  1597. R$*   $: $&{cert_issuer}
  1598. R$+   $: $(access CERTISSUER:$1 $)
  1599. RRELAY   $# RELAY
  1600. RSUBJECT  $: <@> $&{cert_subject}
  1601. R<@> $+   $: <@> $(access CERTSUBJECT:$1 $)
  1602. R<@> RELAY  $# RELAY
  1603. R$*   $: NO
  1605. ######################################################################
  1606. ###  authinfo: lookup authinfo in the access map
  1607. ###
  1608. ### Parameters:
  1609. ###  $1: {server_name}
  1610. ###  $2: {server_addr}
  1611. ######################################################################
  1612. Sauthinfo
  1613. R$*  $: $1 $| $>D <$&{server_name}> <?> <! AuthInfo> <>
  1614. R$* $| <?>$* $: $1 $| $>A <$&{server_addr}> <?> <! AuthInfo> <>
  1615. R$* $| <?>$* $: $1 $| <$(access AuthInfo: $: ? $)> <>
  1616. R$* $| <?>$* $@ no    no authinfo available
  1617. R$* $| <$*> <> $# $2
  1619. #
  1620. ######################################################################
  1621. ######################################################################
  1622. #####
  1623. #####   MAIL FILTER DEFINITIONS
  1624. #####
  1625. ######################################################################
  1626. ######################################################################
  1628. #
  1629. ######################################################################
  1630. ######################################################################
  1631. #####
  1632. #####   MAILER DEFINITIONS
  1633. #####
  1634. ######################################################################
  1635. ######################################################################
  1637. #####################################
  1638. ###   SMTP Mailer specification   ###
  1639. #####################################
  1641. #####  $Id: smtp.m4,v 8.64 2001/04/03 01:52:54 gshapiro Exp $  #####
  1643. #
  1644. #  common sender and masquerading recipient rewriting
  1645. #
  1646. SMasqSMTP
  1647. R$* < @ $* > $*  $@ $1 < @ $2 > $3  already fully qualified
  1648. R$+   $@ $1 < @ *LOCAL* >  add local qualification
  1650. #
  1651. #  convert pseudo-domain addresses to real domain addresses
  1652. #
  1653. SPseudoToReal
  1655. # pass <route-addr>s through
  1656. R< @ $+ > $*  $@ < @ $1 > $2   resolve <route-addr>
  1658. # output fake domains as user%fake@relay
  1660. # do UUCP heuristics; note that these are shared with UUCP mailers
  1661. R$+ < @ $+ .UUCP. > $: < $2 ! > $1   convert to UUCP form
  1662. R$+ < @ $* > $*  $@ $1 < @ $2 > $3  not UUCP form
  1664. # leave these in .UUCP form to avoid further tampering
  1665. R< $&h ! > $- ! $+ $@ $2 < @ $1 .UUCP. >
  1666. R< $&h ! > $-.$+ ! $+ $@ $3 < @ $1.$2 >
  1667. R< $&h ! > $+  $@ $1 < @ $&h .UUCP. >
  1668. R< $+ ! > $+  $: $1 ! $2 < @ $Y >  use UUCP_RELAY
  1669. R$+ < @ $~[ $* : $+ > $@ $1 < @ $4 >   strip mailer: part
  1670. R$+ < @ >  $: $1 < @ *LOCAL* >  if no UUCP_RELAY
  1673. #
  1674. #  envelope sender rewriting
  1675. #
  1676. SEnvFromSMTP
  1677. R$+   $: $>PseudoToReal $1  sender/recipient common
  1678. R$* :; <@>  $@    list:; special case
  1679. R$*   $: $>MasqSMTP $1  qualify unqual'ed names
  1680. R$+   $: $>MasqEnv $1   do masquerading
  1683. #
  1684. #  envelope recipient rewriting --
  1685. #  also header recipient if not masquerading recipients
  1686. #
  1687. SEnvToSMTP
  1688. R$+   $: $>PseudoToReal $1  sender/recipient common
  1689. R$+   $: $>MasqSMTP $1  qualify unqual'ed names
  1690. R$* < @ *LOCAL* > $* $: $1 < @ $j . > $2
  1692. #
  1693. #  header sender and masquerading header recipient rewriting
  1694. #
  1695. SHdrFromSMTP
  1696. R$+   $: $>PseudoToReal $1  sender/recipient common
  1697. R:; <@>   $@    list:; special case
  1699. # do special header rewriting
  1700. R$* <@> $*  $@ $1 <@> $2   pass null host through
  1701. R< @ $* > $*  $@ < @ $1 > $2   pass route-addr through
  1702. R$*   $: $>MasqSMTP $1  qualify unqual'ed names
  1703. R$+   $: $>MasqHdr $1   do masquerading
  1706. #
  1707. #  relay mailer header masquerading recipient rewriting
  1708. #
  1709. SMasqRelay
  1710. R$+   $: $>MasqSMTP $1
  1711. R$+   $: $>MasqHdr $1
  1713. Msmtp,  P=[IPC], F=mDFMuX, S=EnvFromSMTP/HdrFromSMTP, R=EnvToSMTP, E=\r\n, L=990,
  1714.  T=DNS/RFC822/SMTP,
  1715.  A=TCP $h
  1716. Mesmtp,  P=[IPC], F=mDFMuXa, S=EnvFromSMTP/HdrFromSMTP, R=EnvToSMTP, E=\r\n, L=990,
  1717.  T=DNS/RFC822/SMTP,
  1718.  A=TCP $h
  1719. Msmtp8,  P=[IPC], F=mDFMuX8, S=EnvFromSMTP/HdrFromSMTP, R=EnvToSMTP, E=\r\n, L=990,
  1720.  T=DNS/RFC822/SMTP,
  1721.  A=TCP $h
  1722. Mdsmtp,  P=[IPC], F=mDFMuXa%, S=EnvFromSMTP/HdrFromSMTP, R=EnvToSMTP, E=\r\n, L=990,
  1723.  T=DNS/RFC822/SMTP,
  1724.  A=TCP $h
  1725. Mrelay,  P=[IPC], F=mDFMuXa8, S=EnvFromSMTP/HdrFromSMTP, R=MasqSMTP, E=\r\n, L=2040,
  1726.  T=DNS/RFC822/SMTP,
  1727.  A=TCP $h
  1730. ######################*****##############
  1731. ###   PROCMAIL Mailer specification   ###
  1732. ##################*****##################
  1734. #####  $Id: procmail.m4,v 8.22 2001/11/12 23:11:34 ca Exp $  #####
  1736. Mprocmail, P=/usr/bin/procmail, F=DFMSPhnu9, S=EnvFromSMTP/HdrFromSMTP, R=EnvToSMTP/HdrFromSMTP,
  1737.  T=DNS/RFC822/X-Unix,
  1738.  A=procmail -Y -m $h $f $u
  1741. ##################################################
  1742. ###   Local and Program Mailer specification   ###
  1743. ##################################################
  1745. #####  $Id: local.m4,v 8.58 2000/10/26 01:58:29 ca Exp $  #####
  1747. #
  1748. #  Envelope sender rewriting
  1749. #
  1750. SEnvFromL
  1751. R<@>   $n   errors to mailer-daemon
  1752. R@ <@ $*>  $n   temporarily bypass Sun bogosity
  1753. R$+   $: $>AddDomain $1 add local domain if needed
  1754. R$*   $: $>MasqEnv $1  do masquerading
  1756. #
  1757. #  Envelope recipient rewriting
  1758. #
  1759. SEnvToL
  1760. R$+ < @ $* >  $: $1   strip host part
  1762. #
  1763. #  Header sender rewriting
  1764. #
  1765. SHdrFromL
  1766. R<@>   $n   errors to mailer-daemon
  1767. R@ <@ $*>  $n   temporarily bypass Sun bogosity
  1768. R$+   $: $>AddDomain $1 add local domain if needed
  1769. R$*   $: $>MasqHdr $1  do masquerading
  1771. #
  1772. #  Header recipient rewriting
  1773. #
  1774. SHdrToL
  1775. R$+   $: $>AddDomain $1 add local domain if needed
  1776. R$* < @ *LOCAL* > $* $: $1 < @ $j . > $2
  1778. #
  1779. #  Common code to add local domain name (only if always-add-domain)
  1780. #
  1781. SAddDomain
  1782. R$* < @ $* > $*  $@ $1 < @ $2 > $3 already fully qualified
  1784. R$+   $@ $1 < @ *LOCAL* > add local qualification
  1786. Mlocal,  P=/usr/bin/procmail, F=lsDFMAw5:/|@qSPfhn9, S=EnvFromL/HdrFromL, R=EnvToL/HdrToL,
  1787.  T=DNS/RFC822/X-Unix,
  1788.  A=procmail -t -Y -a $h -d $u
  1789. Mprog,  P=/usr/sbin/smrsh, F=lsDFMoqeu9, S=EnvFromL/HdrFromL, R=EnvToL/HdrToL, D=$z:/,
  1790.  T=X-Unix/X-Unix/X-Unix,
  1791.  A=smrsh -c $u


---------------
“You want weapons? We’re in a library! Books! The best weapons in the world!”
Reply

Marsh Posté le 19-05-2004 à 11:11:43    

DAEMON_OPTIONS(`Port=smtp,Addr=127.0.0.1, Name=MTA')dnl

Reply

Marsh Posté le 19-05-2004 à 11:13:09    

dans le sendmail.cf :
 

Citation :


# SMTP daemon options
 
O DaemonPortOptions=Port=smtp,Addr=127.0.0.1, Name=MTA


 
le sendmail.cm

Citation :


dnl #
  dnl # The following causes sendmail to only listen on the IPv4 loopback address
  dnl # 127.0.0.1 and not on any other network devices. Remove the loopback
  dnl # address restriction to accept email from the internet or intranet.
  dnl #
  DAEMON_OPTIONS(`Port=smtp,Addr=127.0.0.1, Name=MTA')dnl


 
 
tu as simplement à lire ce qui est écrit en commentaire

Reply

Marsh Posté le 19-05-2004 à 11:45:09    

Je pars me cacher...  :sweat:  
 
Merci  :jap:


---------------
“You want weapons? We’re in a library! Books! The best weapons in the world!”
Reply

Sujets relatifs:

Leave a Replay

Make sure you enter the(*)required information where indicate.HTML code is not allowed