/[base]/head/etc/sendmail/freebsd.mc
ViewVC logotype

Contents of /head/etc/sendmail/freebsd.mc

Parent Directory Parent Directory | Revision Log Revision Log


Revision 256773 - (show annotations) (download)
Sat Oct 19 18:51:06 2013 UTC (10 years, 8 months ago) by jmg
File size: 4462 byte(s)
Enable the automatic creation of a certificate (if one does not exists)
and enable the usage by sendmail if sendmail is enabled.  Include and
document knobs to disable this feature and also set the Common Name of
the certificate created.

As the certificate is signed w/ a discarded key, it only helps prevent
Eve, but not Malory from knowing the contents of the emails.

This means that new installs (and people that use the updated freebsd.mc
file) will automaticly have STARTTLS enabled allowing incoming email to
be encrypted in most cases.

Reviewed by:	gshapiro
MFC after:	3 days
Security:	Yes, please.

1 divert(-1)
2 #
3 # Copyright (c) 1983 Eric P. Allman
4 # Copyright (c) 1988, 1993
5 # The Regents of the University of California. All rights reserved.
6 #
7 # Redistribution and use in source and binary forms, with or without
8 # modification, are permitted provided that the following conditions
9 # are met:
10 # 1. Redistributions of source code must retain the above copyright
11 # notice, this list of conditions and the following disclaimer.
12 # 2. Redistributions in binary form must reproduce the above copyright
13 # notice, this list of conditions and the following disclaimer in the
14 # documentation and/or other materials provided with the distribution.
15 # 3. All advertising materials mentioning features or use of this software
16 # must display the following acknowledgement:
17 # This product includes software developed by the University of
18 # California, Berkeley and its contributors.
19 # 4. Neither the name of the University nor the names of its contributors
20 # may be used to endorse or promote products derived from this software
21 # without specific prior written permission.
22 #
23 # THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
24 # ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
25 # IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
26 # ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
27 # FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
28 # DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
29 # OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
30 # HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
31 # LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
32 # OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
33 # SUCH DAMAGE.
34 #
35
36 #
37 # This is a generic configuration file for FreeBSD 6.X and later systems.
38 # If you want to customize it, copy it to a name appropriate for your
39 # environment and do the modifications there.
40 #
41 # The best documentation for this .mc file is:
42 # /usr/share/sendmail/cf/README or
43 # /usr/src/contrib/sendmail/cf/README
44 #
45 #
46 # NOTE: If you enable RunAsUser, make sure that you adjust the permissions
47 # and owner of the SSL certificates and keys in /etc/mail/certs to be usable
48 # by that user.
49 #
50
51 divert(0)
52 VERSIONID(`$FreeBSD$')
53 OSTYPE(freebsd6)
54 DOMAIN(generic)
55
56 FEATURE(access_db, `hash -o -T<TMPF> /etc/mail/access')
57 FEATURE(blacklist_recipients)
58 FEATURE(local_lmtp)
59 FEATURE(mailertable, `hash -o /etc/mail/mailertable')
60 FEATURE(virtusertable, `hash -o /etc/mail/virtusertable')
61
62 dnl Enable STARTTLS for receiving email.
63 define(`CERT_DIR', `/etc/mail/certs')dnl
64 define(`confSERVER_CERT', `CERT_DIR/host.cert')dnl
65 define(`confSERVER_KEY', `CERT_DIR/host.key')dnl
66 define(`confCLIENT_CERT', `CERT_DIR/host.cert')dnl
67 define(`confCLIENT_KEY', `CERT_DIR/host.key')dnl
68 define(`confCACERT', `CERT_DIR/cacert.pem')dnl
69 define(`confCACERT_PATH', `CERT_DIR')dnl
70 define(`confDH_PARAMETERS', `CERT_DIR/dh.param')dnl
71
72 dnl Uncomment to allow relaying based on your MX records.
73 dnl NOTE: This can allow sites to use your server as a backup MX without
74 dnl your permission.
75 dnl FEATURE(relay_based_on_MX)
76
77 dnl DNS based black hole lists
78 dnl --------------------------------
79 dnl DNS based black hole lists come and go on a regular basis
80 dnl so this file will not serve as a database of the available servers.
81 dnl For more information, visit
82 dnl http://en.wikipedia.org/wiki/DNSBL
83
84 dnl Uncomment to activate your chosen DNS based blacklist
85 dnl FEATURE(dnsbl, `dnsbl.example.com')
86 dnl Alternatively, you can provide your own server and rejection message:
87 dnl FEATURE(dnsbl, `dnsbl.example.com', ``"550 Mail from " $&{client_addr} " rejected"'')
88
89 dnl Dialup users should uncomment and define this appropriately
90 dnl define(`SMART_HOST', `your.isp.mail.server')
91
92 dnl Uncomment the first line to change the location of the default
93 dnl /etc/mail/local-host-names and comment out the second line.
94 dnl define(`confCW_FILE', `-o /etc/mail/sendmail.cw')
95 define(`confCW_FILE', `-o /etc/mail/local-host-names')
96
97 dnl Enable for both IPv4 and IPv6 (optional)
98 DAEMON_OPTIONS(`Name=IPv4, Family=inet')
99 DAEMON_OPTIONS(`Name=IPv6, Family=inet6, Modifiers=O')
100
101 define(`confBIND_OPTS', `WorkAroundBrokenAAAA')
102 define(`confNO_RCPT_ACTION', `add-to-undisclosed')
103 define(`confPRIVACY_FLAGS', `authwarnings,noexpn,novrfy')
104 MAILER(local)
105 MAILER(smtp)

Properties

Name Value
svn:keywords FreeBSD=%H

  ViewVC Help
Powered by ViewVC 1.1.27