head	1.17;
access;
symbols
	RELENG_8_4:1.17.0.2
	RELENG_9_1_0_RELEASE:1.16.42.1.4.2
	RELENG_9_1:1.16.42.1.0.4
	RELENG_9_1_BP:1.16.42.1
	RELENG_8_3_0_RELEASE:1.16.36.1.8.1
	RELENG_8_3:1.16.36.1.0.8
	RELENG_8_3_BP:1.16.36.1
	RELENG_9_0_0_RELEASE:1.16.42.1.2.1
	RELENG_9_0:1.16.42.1.0.2
	RELENG_9_0_BP:1.16.42.1
	RELENG_9:1.16.0.42
	RELENG_9_BP:1.16
	RELENG_7_4_0_RELEASE:1.16.40.1
	RELENG_8_2_0_RELEASE:1.16.36.1.6.1
	RELENG_7_4:1.16.0.40
	RELENG_7_4_BP:1.16
	RELENG_8_2:1.16.36.1.0.6
	RELENG_8_2_BP:1.16.36.1
	RELENG_8_1_0_RELEASE:1.16.36.1.4.1
	RELENG_8_1:1.16.36.1.0.4
	RELENG_8_1_BP:1.16.36.1
	RELENG_7_3_0_RELEASE:1.16.38.1
	RELENG_7_3:1.16.0.38
	RELENG_7_3_BP:1.16
	RELENG_8_0_0_RELEASE:1.16.36.1.2.1
	RELENG_8_0:1.16.36.1.0.2
	RELENG_8_0_BP:1.16.36.1
	RELENG_8:1.16.0.36
	RELENG_8_BP:1.16
	RELENG_7_2_0_RELEASE:1.16.34.1
	RELENG_7_2:1.16.0.34
	RELENG_7_2_BP:1.16
	RELENG_7_1_0_RELEASE:1.16.32.1
	RELENG_6_4_0_RELEASE:1.16.30.1
	RELENG_7_1:1.16.0.32
	RELENG_7_1_BP:1.16
	RELENG_6_4:1.16.0.30
	RELENG_6_4_BP:1.16
	RELENG_7_0_0_RELEASE:1.16
	RELENG_6_3_0_RELEASE:1.16
	RELENG_7_0:1.16.0.28
	RELENG_7_0_BP:1.16
	RELENG_6_3:1.16.0.26
	RELENG_6_3_BP:1.16
	RELENG_7:1.16.0.24
	RELENG_7_BP:1.16
	RELENG_6_2_0_RELEASE:1.16
	RELENG_6_2:1.16.0.22
	RELENG_6_2_BP:1.16
	RELENG_5_5_0_RELEASE:1.16
	RELENG_5_5:1.16.0.20
	RELENG_5_5_BP:1.16
	RELENG_6_1_0_RELEASE:1.16
	RELENG_6_1:1.16.0.18
	RELENG_6_1_BP:1.16
	RELENG_6_0_0_RELEASE:1.16
	RELENG_6_0:1.16.0.16
	RELENG_6_0_BP:1.16
	RELENG_6:1.16.0.14
	RELENG_6_BP:1.16
	RELENG_5_4_0_RELEASE:1.16
	RELENG_5_4:1.16.0.12
	RELENG_5_4_BP:1.16
	RELENG_4_11_0_RELEASE:1.8.2.6
	RELENG_4_11:1.8.2.6.0.12
	RELENG_4_11_BP:1.8.2.6
	RELENG_5_3_0_RELEASE:1.16
	RELENG_5_3:1.16.0.10
	RELENG_5_3_BP:1.16
	RELENG_5:1.16.0.8
	RELENG_5_BP:1.16
	RELENG_4_10_0_RELEASE:1.8.2.6
	RELENG_4_10:1.8.2.6.0.10
	RELENG_4_10_BP:1.8.2.6
	RELENG_5_2_1_RELEASE:1.16
	RELENG_5_2_0_RELEASE:1.16
	RELENG_5_2:1.16.0.6
	RELENG_5_2_BP:1.16
	RELENG_4_9_0_RELEASE:1.8.2.6
	RELENG_4_9:1.8.2.6.0.8
	RELENG_4_9_BP:1.8.2.6
	RELENG_5_1_0_RELEASE:1.16
	RELENG_5_1:1.16.0.4
	RELENG_5_1_BP:1.16
	RELENG_4_8_0_RELEASE:1.8.2.6
	RELENG_4_8:1.8.2.6.0.6
	RELENG_4_8_BP:1.8.2.6
	RELENG_5_0_0_RELEASE:1.16
	RELENG_5_0:1.16.0.2
	RELENG_5_0_BP:1.16
	RELENG_4_7_0_RELEASE:1.8.2.6
	RELENG_4_7:1.8.2.6.0.4
	RELENG_4_7_BP:1.8.2.6
	RELENG_4_6_2_RELEASE:1.8.2.6
	RELENG_4_6_1_RELEASE:1.8.2.6
	RELENG_4_6_0_RELEASE:1.8.2.6
	RELENG_4_6:1.8.2.6.0.2
	RELENG_4_6_BP:1.8.2.6
	RELENG_4_5_0_RELEASE:1.8.2.2
	RELENG_4_5:1.8.2.2.0.6
	RELENG_4_5_BP:1.8.2.2
	RELENG_4_4_0_RELEASE:1.8.2.2
	RELENG_4_4:1.8.2.2.0.4
	RELENG_4_4_BP:1.8.2.2
	RELENG_4_3_0_RELEASE:1.8.2.2
	RELENG_4_3:1.8.2.2.0.2
	RELENG_4_3_BP:1.8.2.2
	RELENG_4_2_0_RELEASE:1.8.2.2
	RELENG_4_1_1_RELEASE:1.8
	PRE_SMPNG:1.8
	RELENG_4_1_0_RELEASE:1.8
	RELENG_3_5_0_RELEASE:1.5.2.3
	RELENG_4_0_0_RELEASE:1.8
	RELENG_4:1.8.0.2
	RELENG_4_BP:1.8
	RELENG_3_4_0_RELEASE:1.5.2.3
	RELENG_3_3_0_RELEASE:1.5.2.3
	RELENG_3_2_PAO:1.5.2.2.0.2
	RELENG_3_2_PAO_BP:1.5.2.2
	RELENG_3_2_0_RELEASE:1.5.2.2
	RELENG_3_1_0_RELEASE:1.5
	RELENG_3:1.5.0.2
	RELENG_3_BP:1.5
	RELENG_2_2_8_RELEASE:1.1.2.2
	RELENG_3_0_0_RELEASE:1.5
	RELENG_2_2_7_RELEASE:1.1.2.1
	RELENG_2_2_6_RELEASE:1.1.2.1
	RELENG_2_2_5_RELEASE:1.1
	RELENG_2_1_0:1.1.0.4
	RELENG_2_2:1.1.0.2;
locks; strict;
comment	@# @;


1.17
date	2012.11.17.01.49.02;	author svnexp;	state Exp;
branches
	1.17.2.1;
next	1.16;

1.16
date	2002.05.22.16.37.29;	author gshapiro;	state Exp;
branches
	1.16.14.1
	1.16.24.1
	1.16.30.1
	1.16.32.1
	1.16.34.1
	1.16.36.1
	1.16.38.1
	1.16.40.1
	1.16.42.1;
next	1.15;

1.15
date	2002.05.08.05.17.46;	author gshapiro;	state Exp;
branches;
next	1.14;

1.14
date	2002.04.14.19.24.28;	author gshapiro;	state Exp;
branches;
next	1.13;

1.13
date	2002.03.21.06.09.20;	author gshapiro;	state Exp;
branches;
next	1.12;

1.12
date	2002.02.27.14.43.55;	author ru;	state Exp;
branches;
next	1.11;

1.11
date	2002.02.17.22.14.29;	author gshapiro;	state Exp;
branches;
next	1.10;

1.10
date	2000.11.04.03.49.13;	author gshapiro;	state Exp;
branches;
next	1.9;

1.9
date	2000.10.10.18.08.19;	author gshapiro;	state Exp;
branches;
next	1.8;

1.8
date	99.08.27.23.24.00;	author peter;	state Exp;
branches
	1.8.2.1;
next	1.7;

1.7
date	99.05.11.03.29.02;	author jmb;	state Exp;
branches;
next	1.6;

1.6
date	99.05.01.03.36.07;	author jkh;	state Exp;
branches;
next	1.5;

1.5
date	98.09.02.01.34.57;	author brian;	state Exp;
branches
	1.5.2.1;
next	1.4;

1.4
date	98.02.25.22.06.34;	author jmb;	state Exp;
branches;
next	1.3;

1.3
date	97.12.15.04.38.11;	author nate;	state Exp;
branches;
next	1.2;

1.2
date	97.12.01.00.15.38;	author jmb;	state Exp;
branches;
next	1.1;

1.1
date	97.10.19.16.40.09;	author jmb;	state Exp;
branches
	1.1.2.1;
next	;

1.17.2.1
date	2012.11.17.01.49.02;	author svnexp;	state dead;
branches;
next	1.17.2.2;

1.17.2.2
date	2013.03.28.13.02.42;	author svnexp;	state Exp;
branches;
next	;

1.16.14.1
date	2012.11.17.07.39.03;	author svnexp;	state Exp;
branches;
next	;

1.16.24.1
date	2012.11.17.08.01.17;	author svnexp;	state Exp;
branches;
next	;

1.16.30.1
date	2008.10.02.02.57.24;	author kensmith;	state Exp;
branches;
next	;

1.16.32.1
date	2008.11.25.02.59.29;	author kensmith;	state Exp;
branches;
next	;

1.16.34.1
date	2009.04.15.03.14.26;	author kensmith;	state Exp;
branches;
next	;

1.16.36.1
date	2009.08.03.08.13.06;	author kensmith;	state Exp;
branches
	1.16.36.1.2.1
	1.16.36.1.4.1
	1.16.36.1.6.1
	1.16.36.1.8.1;
next	1.16.36.2;

1.16.36.2
date	2012.11.17.10.35.56;	author svnexp;	state Exp;
branches;
next	;

1.16.36.1.2.1
date	2009.10.25.01.10.29;	author kensmith;	state Exp;
branches;
next	;

1.16.36.1.4.1
date	2010.06.14.02.09.06;	author kensmith;	state Exp;
branches;
next	;

1.16.36.1.6.1
date	2010.12.21.17.09.25;	author kensmith;	state Exp;
branches;
next	;

1.16.36.1.8.1
date	2012.03.03.06.15.13;	author kensmith;	state Exp;
branches;
next	1.16.36.1.8.2;

1.16.36.1.8.2
date	2012.11.17.08.24.38;	author svnexp;	state Exp;
branches;
next	;

1.16.38.1
date	2010.02.10.00.26.20;	author kensmith;	state Exp;
branches;
next	;

1.16.40.1
date	2010.12.21.17.10.29;	author kensmith;	state Exp;
branches;
next	1.16.40.2;

1.16.40.2
date	2012.11.17.08.16.37;	author svnexp;	state Exp;
branches;
next	;

1.16.42.1
date	2011.09.23.00.51.37;	author kensmith;	state Exp;
branches
	1.16.42.1.2.1
	1.16.42.1.4.1;
next	1.16.42.2;

1.16.42.2
date	2012.11.17.11.36.11;	author svnexp;	state Exp;
branches;
next	;

1.16.42.1.2.1
date	2011.11.11.04.20.22;	author kensmith;	state Exp;
branches;
next	1.16.42.1.2.2;

1.16.42.1.2.2
date	2012.11.17.08.36.11;	author svnexp;	state Exp;
branches;
next	;

1.16.42.1.4.1
date	2012.08.05.23.54.33;	author kensmith;	state Exp;
branches;
next	1.16.42.1.4.2;

1.16.42.1.4.2
date	2012.11.17.08.47.00;	author svnexp;	state Exp;
branches;
next	;

1.8.2.1
date	2000.10.19.21.30.25;	author gshapiro;	state Exp;
branches;
next	1.8.2.2;

1.8.2.2
date	2000.11.04.17.57.38;	author gshapiro;	state Exp;
branches;
next	1.8.2.3;

1.8.2.3
date	2002.03.25.21.40.03;	author gshapiro;	state Exp;
branches;
next	1.8.2.4;

1.8.2.4
date	2002.04.20.18.50.58;	author gshapiro;	state Exp;
branches;
next	1.8.2.5;

1.8.2.5
date	2002.05.08.15.44.38;	author gshapiro;	state Exp;
branches;
next	1.8.2.6;

1.8.2.6
date	2002.05.22.17.01.32;	author gshapiro;	state Exp;
branches;
next	1.8.2.7;

1.8.2.7
date	2012.11.17.07.22.38;	author svnexp;	state Exp;
branches;
next	;

1.5.2.1
date	99.05.01.03.37.29;	author jkh;	state Exp;
branches;
next	1.5.2.2;

1.5.2.2
date	99.05.11.03.20.45;	author jmb;	state Exp;
branches;
next	1.5.2.3;

1.5.2.3
date	99.08.29.14.19.23;	author peter;	state Exp;
branches;
next	;

1.1.2.1
date	98.02.15.14.24.58;	author jkh;	state Exp;
branches;
next	1.1.2.2;

1.1.2.2
date	98.09.03.22.14.38;	author brian;	state Exp;
branches;
next	1.1.2.3;

1.1.2.3
date	99.09.05.11.02.09;	author peter;	state Exp;
branches;
next	;


desc
@@


1.17
log
@Switching exporter and resync
@
text
@# $FreeBSD: head/etc/mail/README 97131 2002-05-22 16:37:32Z gshapiro $

		Sendmail Processes

As of sendmail 8.12, in order to improve security, the sendmail binary no
longer needs to be set-user-ID root.  Instead, a set-group-ID binary
accepts command line mail and relays it to a full mail transfer agent via
SMTP.  A group writable client mail queue (/var/spool/clientmqueue/ by
default) holds the mail if an MTA can not be contacted.

To accomplish this, under the default setup, an MTA must be listening on
localhost port 25.  If the rc.conf sendmail_enable option is set to "NO",
a sendmail daemon will still be started and bound only to the localhost
interface in order to accept command line submitted mail (note that this
does not work inside jail(2) systems as jails do not allow binding to
just the localhost interface).  If this is not a desirable solution, it
can be disabled using the sendmail_submit_enable rc.conf option.  However,
if both sendmail_enable and sendmail_submit_enable are set to "NO", you
must do one of two things for command line submitted mail:

1. Designate an alternative host for the submission agent to contact
   by altering /etc/mail/freebsd.submit.mc (or setting SENDMAIL_SUBMIT_MC
   in /etc/make.conf to an alternate .mc file) and using
   'make install-submit-cf' in /etc/mail/.  Change the FEATURE(msp) line
   to FEATURE(msp, hostname) where hostname is the fully qualified hostname
   of the alternative host.

Or:

2. Return to using a set-user-ID root sendmail binary by changing the
   ownership and permissions on the sendmail binary and removing the
   /etc/mail/submit.cf file:
	chown root /usr/libexec/sendmail/sendmail
	chmod 4755 /usr/libexec/sendmail/sendmail
	rm /etc/mail/submit.cf
   If you install from source, set the SENDMAIL_SET_USER_ID flag in
   /etc/make.conf.

Also, as of 8.12, a new queue-running daemon is started to make sure mail
doesn't remain in the client mail queue.  By default, it simply runs the
client mail queue every 30 minutes.  Its behavior can be adjusted by setting
the sendmail_msp_queue_enable and sendmail_msp_queue_flags rc.conf options.


		Filtering out SPAM from your site

Sendmail now includes excellent tools to block spam.  These tools are
available as FEATUREs that you can add to your site's .mc file.  Proper use
of these FEATUREs will prevent spammer from using your site as a relay as
well as significantly decrease the amount of spam that arrives at your
site.  No set of anti-spam tools will block all spam without blocking some
portion of legitimate mail as well.  Therefore, these FEATUREs are designed
to prevent as much spam as possible without blocking legitimate mail.

These tools are discussed in /usr/share/sendmail/cf/README.  Read the
section entitled "ANTI-SPAM CONFIGURATION CONTROL".  Example usage and
additional tools can be found in /usr/share/sendmail/cf/cf/knecht.mc.

@


1.17.2.1
log
@file README was added on branch RELENG_8_4 on 2013-03-28 13:02:42 +0000
@
text
@d1 58
@


1.17.2.2
log
@## SVN ## Exported commit - http://svnweb.freebsd.org/changeset/base/248810
## SVN ## CVS IS DEPRECATED: http://wiki.freebsd.org/CvsIsDeprecated
@
text
@a0 58
# $FreeBSD: releng/8.4/etc/mail/README 97131 2002-05-22 16:37:32Z gshapiro $

		Sendmail Processes

As of sendmail 8.12, in order to improve security, the sendmail binary no
longer needs to be set-user-ID root.  Instead, a set-group-ID binary
accepts command line mail and relays it to a full mail transfer agent via
SMTP.  A group writable client mail queue (/var/spool/clientmqueue/ by
default) holds the mail if an MTA can not be contacted.

To accomplish this, under the default setup, an MTA must be listening on
localhost port 25.  If the rc.conf sendmail_enable option is set to "NO",
a sendmail daemon will still be started and bound only to the localhost
interface in order to accept command line submitted mail (note that this
does not work inside jail(2) systems as jails do not allow binding to
just the localhost interface).  If this is not a desirable solution, it
can be disabled using the sendmail_submit_enable rc.conf option.  However,
if both sendmail_enable and sendmail_submit_enable are set to "NO", you
must do one of two things for command line submitted mail:

1. Designate an alternative host for the submission agent to contact
   by altering /etc/mail/freebsd.submit.mc (or setting SENDMAIL_SUBMIT_MC
   in /etc/make.conf to an alternate .mc file) and using
   'make install-submit-cf' in /etc/mail/.  Change the FEATURE(msp) line
   to FEATURE(msp, hostname) where hostname is the fully qualified hostname
   of the alternative host.

Or:

2. Return to using a set-user-ID root sendmail binary by changing the
   ownership and permissions on the sendmail binary and removing the
   /etc/mail/submit.cf file:
	chown root /usr/libexec/sendmail/sendmail
	chmod 4755 /usr/libexec/sendmail/sendmail
	rm /etc/mail/submit.cf
   If you install from source, set the SENDMAIL_SET_USER_ID flag in
   /etc/make.conf.

Also, as of 8.12, a new queue-running daemon is started to make sure mail
doesn't remain in the client mail queue.  By default, it simply runs the
client mail queue every 30 minutes.  Its behavior can be adjusted by setting
the sendmail_msp_queue_enable and sendmail_msp_queue_flags rc.conf options.


		Filtering out SPAM from your site

Sendmail now includes excellent tools to block spam.  These tools are
available as FEATUREs that you can add to your site's .mc file.  Proper use
of these FEATUREs will prevent spammer from using your site as a relay as
well as significantly decrease the amount of spam that arrives at your
site.  No set of anti-spam tools will block all spam without blocking some
portion of legitimate mail as well.  Therefore, these FEATUREs are designed
to prevent as much spam as possible without blocking legitimate mail.

These tools are discussed in /usr/share/sendmail/cf/README.  Read the
section entitled "ANTI-SPAM CONFIGURATION CONTROL".  Example usage and
additional tools can be found in /usr/share/sendmail/cf/cf/knecht.mc.

@


1.16
log
@Add a warning regarding localhost-only listening daemons inside jails.
Apparently binding only to 127.0.0.1 inside of a jail actually binds
to the jail IP address as well (in effect, bind to all available
interfaces in the jail).

Submitted by:	Helge Oldach <test-smtp@@oldach.net>
MFC after:	1 day
		pending RE approval
@
text
@d1 1
a1 1
# $FreeBSD: src/etc/mail/README,v 1.15 2002/05/08 05:17:46 gshapiro Exp $
@


1.16.24.1
log
@Switch importer
@
text
@d1 1
a1 1
# $FreeBSD: stable/7/etc/mail/README 97131 2002-05-22 16:37:32Z gshapiro $
@


1.16.14.1
log
@Switch importer
@
text
@d1 1
a1 1
# $FreeBSD: stable/6/etc/mail/README 97131 2002-05-22 16:37:32Z gshapiro $
@


1.16.42.1
log
@SVN rev 225736 on 2011-09-23 00:51:37Z by kensmith

Copy head to stable/9 as part of 9.0-RELEASE release cycle.

Approved by:	re (implicit)
@
text
@d1 1
a1 1
# $FreeBSD$
@


1.16.42.2
log
@## SVN ##
## SVN ## Exported commit - http://svnweb.freebsd.org/changeset/base/ 242902
## SVN ## CVS IS DEPRECATED: http://wiki.freebsd.org/CvsIsDeprecated
## SVN ##
## SVN ## ------------------------------------------------------------------------
## SVN ## r242902 | dteske | 2012-11-11 23:29:45 +0000 (Sun, 11 Nov 2012) | 10 lines
## SVN ##
## SVN ## Fix a regression introduced by SVN r211417 that saw the breakage of a feature
## SVN ## documented in usr.sbin/sysinstall/help/shortcuts.hlp (reproduced below):
## SVN ##
## SVN ## If /usr/sbin/sysinstall is linked to another filename, say
## SVN ## `/usr/local/bin/configPackages', then the basename will be used
## SVN ## as an implicit command name.
## SVN ##
## SVN ## Reviewed by:	adrian (co-mentor)
## SVN ## Approved by:	adrian (co-mentor)
## SVN ##
## SVN ## ------------------------------------------------------------------------
## SVN ##
@
text
@d1 1
a1 1
# $FreeBSD: stable/9/etc/mail/README 97131 2002-05-22 16:37:32Z gshapiro $
@


1.16.42.1.4.1
log
@SVN rev 239080 on 2012-08-05 23:54:33Z by kensmith

Copy stable/9 to releng/9.1 as part of the 9.1-RELEASE release process.

Approved by:	re (implicit)
@
text
@@


1.16.42.1.4.2
log
@Switch importer
@
text
@d1 1
a1 1
# $FreeBSD: releng/9.1/etc/mail/README 97131 2002-05-22 16:37:32Z gshapiro $
@


1.16.42.1.2.1
log
@SVN rev 227445 on 2011-11-11 04:20:22Z by kensmith

Copy stable/9 to releng/9.0 as part of the FreeBSD 9.0-RELEASE release
cycle.

Approved by:	re (implicit)
@
text
@@


1.16.42.1.2.2
log
@Switch importer
@
text
@d1 1
a1 1
# $FreeBSD: releng/9.0/etc/mail/README 97131 2002-05-22 16:37:32Z gshapiro $
@


1.16.40.1
log
@SVN rev 216618 on 2010-12-21 17:10:29Z by kensmith

Copy stable/7 to releng/7.4 in preparation for FreeBSD-7.4 release.

Approved by:	re (implicit)
@
text
@d1 1
a1 1
# $FreeBSD$
@


1.16.40.2
log
@Switch importer
@
text
@d1 1
a1 1
# $FreeBSD: releng/7.4/etc/mail/README 97131 2002-05-22 16:37:32Z gshapiro $
@


1.16.38.1
log
@SVN rev 203736 on 2010-02-10 00:26:20Z by kensmith

Copy stable/7 to releng/7.3 as part of the 7.3-RELEASE process.

Approved by:	re (implicit)
@
text
@d1 1
a1 1
# $FreeBSD$
@


1.16.36.1
log
@SVN rev 196045 on 2009-08-03 08:13:06Z by kensmith

Copy head to stable/8 as part of 8.0 Release cycle.

Approved by:	re (Implicit)
@
text
@d1 1
a1 1
# $FreeBSD$
@


1.16.36.2
log
@## SVN ##
## SVN ## Exported commit - http://svnweb.freebsd.org/changeset/base/ 242909
## SVN ## CVS IS DEPRECATED: http://wiki.freebsd.org/CvsIsDeprecated
## SVN ##
## SVN ## ------------------------------------------------------------------------
## SVN ## r242909 | dim | 2012-11-12 07:47:19 +0000 (Mon, 12 Nov 2012) | 20 lines
## SVN ##
## SVN ## MFC r242625:
## SVN ##
## SVN ## Remove duplicate const specifiers in many drivers (I hope I got all of
## SVN ## them, please let me know if not).  Most of these are of the form:
## SVN ##
## SVN ## static const struct bzzt_type {
## SVN ##       [...list of members...]
## SVN ## } const bzzt_devs[] = {
## SVN ##       [...list of initializers...]
## SVN ## };
## SVN ##
## SVN ## The second const is unnecessary, as arrays cannot be modified anyway,
## SVN ## and if the elements are const, the whole thing is const automatically
## SVN ## (e.g. it is placed in .rodata).
## SVN ##
## SVN ## I have verified this does not change the binary output of a full kernel
## SVN ## build (except for build timestamps embedded in the object files).
## SVN ##
## SVN ## Reviewed by:	yongari, marius
## SVN ##
## SVN ## ------------------------------------------------------------------------
## SVN ##
@
text
@d1 1
a1 1
# $FreeBSD: stable/8/etc/mail/README 97131 2002-05-22 16:37:32Z gshapiro $
@


1.16.36.1.8.1
log
@SVN rev 232438 on 2012-03-03 06:15:13Z by kensmith

Copy stable/8 to releng/8.3 as part of 8.3-RELEASE release cycle.

Approved by:	re (implicit)
@
text
@@


1.16.36.1.8.2
log
@Switch importer
@
text
@d1 1
a1 1
# $FreeBSD: releng/8.3/etc/mail/README 97131 2002-05-22 16:37:32Z gshapiro $
@


1.16.36.1.6.1
log
@SVN rev 216617 on 2010-12-21 17:09:25Z by kensmith

Copy stable/8 to releng/8.2 in preparation for FreeBSD-8.2 release.

Approved by:	re (implicit)
@
text
@@


1.16.36.1.4.1
log
@SVN rev 209145 on 2010-06-14 02:09:06Z by kensmith

Copy stable/8 to releng/8.1 in preparation for 8.1-RC1.

Approved by:	re (implicit)
@
text
@@


1.16.36.1.2.1
log
@SVN rev 198460 on 2009-10-25 01:10:29Z by kensmith

Copy stable/8 to releng/8.0 as part of 8.0-RELEASE release procedure.

Approved by:	re (implicit)
@
text
@@


1.16.34.1
log
@SVN rev 191087 on 2009-04-15 03:14:26Z by kensmith

Create releng/7.2 from stable/7 in preparation for 7.2-RELEASE.

Approved by:	re (implicit)
@
text
@d1 1
a1 1
# $FreeBSD$
@


1.16.32.1
log
@SVN rev 185281 on 2008-11-25 02:59:29Z by kensmith

Create releng/7.1 in preparation for moving into RC phase of 7.1 release
cycle.

Approved by:	re (implicit)
@
text
@d1 1
a1 1
# $FreeBSD$
@


1.16.30.1
log
@SVN rev 183531 on 2008-10-02 02:57:24Z by kensmith

Create releng/6.4 from stable/6 in preparation for 6.4-RC1.

Approved by:	re (implicit)
@
text
@d1 1
a1 1
# $FreeBSD$
@


1.15
log
@Fix typo.

Submitted by:	Marius Strom <marius@@marius.org>
MFC after:	1 day
		and RE approval
@
text
@d1 1
a1 1
# $FreeBSD: src/etc/mail/README,v 1.14 2002/04/14 19:24:28 gshapiro Exp $
d14 6
a19 5
interface in order to accept command line submitted mail.  If this is not
a desirable solution, it can be disabled using the sendmail_submit_enable
rc.conf option.  However, if both sendmail_enable and sendmail_submit_enable
are set to "NO", you must do one of two things for command line submitted
mail:
@


1.14
log
@Fix up submit.cf alternation instructions in light of new SENDMAIL_SUBMIT_MC
make.conf knob.

MFC after:	1 week
@
text
@d1 1
a1 1
# $FreeBSD: src/etc/mail/README,v 1.13 2002/03/21 06:09:20 gshapiro Exp $
d8 1
a8 1
SMTP.  A group writable client mail queue (/var/spool/client-mqueue/ by
@


1.13
log
@Use the proper terminology.
@
text
@d1 1
a1 1
# $FreeBSD: src/etc/mail/README,v 1.12 2002/02/27 14:43:55 ru Exp $
d20 6
a25 4
1. Designate an alternative MTA for the submission agent to contact
   by altering /etc/mail/submit.mc and using 'make submit.cf' in
   /etc/mail/.  Change the FEATURE(msp) line to FEATURE(msp, hostname)
   where hostname is the fully qualified hostname of the alternative MTA.
@


1.12
log
@Fixed a few typos.
@
text
@d1 1
a1 1
# $FreeBSD: src/etc/mail/README,v 1.11 2002/02/17 22:14:29 gshapiro Exp $
d12 1
a12 1
localhost port 25.  If the rc.conf sendmail_enable option is set to false,
d17 1
a17 1
are turned off, you must do one of two things for command line submitted
@


1.11
log
@Add information about how the new sendmail set-group-ID mail submission
works and ways to work around common problems people might have.
Include information on reverting to a set-user-ID root sendmail binary in
case anyone really needs to do this.
@
text
@d1 1
a1 1
# $FreeBSD: src/etc/mail/README,v 1.10 2000/11/04 03:49:13 gshapiro Exp $
d29 1
a29 1
   /etc/mail/submit.cf file::
d37 3
a39 3
doesn't remain in the client mail queue.  Be default, it simply runs the
client mail queue every 30 minutes.  It's behavior can be adjusted by setting
the sendmail_msp_queue_enable and sendmail_msp_queue_flags rc.conf options. 
@


1.10
log
@Grammar fix

Submitted by:	asmodai
@
text
@d1 40
a40 1
# $FreeBSD: src/etc/mail/README,v 1.9 2000/10/10 18:08:19 gshapiro Exp $
@


1.9
log
@Install the sendmail cf building tools (contrib/sendmail/cf) in
/usr/share/sendmail/cf.

PR:		19790
@
text
@d1 1
a1 1
# $FreeBSD: src/etc/mail/README,v 1.8 1999/08/27 23:24:00 peter Exp $
d5 1
a5 1
Sendmail now includes excellent tools block spam.  These tools are
@


1.8
log
@$Id$ -> $FreeBSD$
@
text
@d1 1
a1 1
# $FreeBSD$
a3 8
        Sendmail now includes excellent tools block spam.  These
tools are available as FEATUREs that you can add to your site's
.mc file.  Proper use of these FEATUREs will prevent spammer from
using your site as a relay as well as significantly decrease the
amount of spam that arrives at your site.  No set of anti-spam
tools will block all spam without blocking some portion of legitimate
mail as well.  Therefore, these FEATUREs are designed to prevent
as much spam as possible without blocking legitimate mail.
d5 11
a15 4
	These tools are discussed in /usr/src/contrib/sendmail/cf/README.
Read the section entitled "ANTI-SPAM CONFIGURATION CONTROL".  Example
usage and additional tools can be found in
/usr/src/contrib/sendmail/cf/cf/knecht.mc.
@


1.8.2.1
log
@MFC: Install the sendmail cf building tools (contrib/sendmail/cf) in
     /usr/share/sendmail/cf.
@
text
@d1 1
a1 1
# $FreeBSD: src/etc/mail/README,v 1.8 1999/08/27 23:24:00 peter Exp $
d4 8
d13 4
a16 11
Sendmail now includes excellent tools block spam.  These tools are
available as FEATUREs that you can add to your site's .mc file.  Proper use
of these FEATUREs will prevent spammer from using your site as a relay as
well as significantly decrease the amount of spam that arrives at your
site.  No set of anti-spam tools will block all spam without blocking some
portion of legitimate mail as well.  Therefore, these FEATUREs are designed
to prevent as much spam as possible without blocking legitimate mail.

These tools are discussed in /usr/share/sendmail/cf/README.  Read the
section entitled "ANTI-SPAM CONFIGURATION CONTROL".  Example usage and
additional tools can be found in /usr/share/sendmail/cf/cf/knecht.mc.
@


1.8.2.2
log
@MFC: Grammar fix

Approved by:	jkh
@
text
@d1 1
a1 1
# $FreeBSD: src/etc/mail/README,v 1.8.2.1 2000/10/19 21:30:25 gshapiro Exp $
d5 1
a5 1
Sendmail now includes excellent tools to block spam.  These tools are
@


1.8.2.3
log
@MFC: Add information about how the new sendmail set-group-ID mail submission
     works and ways to work around common problems people might have.
     Include information on reverting to a set-user-ID root sendmail binary in
     case anyone really needs to do this.
MFC: Fixed a few typos.
MFC: Use the proper terminology.

     Revision  Changes    Path
     1.11      +40 -1     src/etc/mail/README
     1.12      +5 -5      src/etc/mail/README
     1.13      +3 -3      src/etc/mail/README
@
text
@d1 1
a1 40
# $FreeBSD: src/etc/mail/README,v 1.11 2002/02/17 22:14:29 gshapiro Exp $

		Sendmail Processes

As of sendmail 8.12, in order to improve security, the sendmail binary no
longer needs to be set-user-ID root.  Instead, a set-group-ID binary
accepts command line mail and relays it to a full mail transfer agent via
SMTP.  A group writable client mail queue (/var/spool/client-mqueue/ by
default) holds the mail if an MTA can not be contacted.

To accomplish this, under the default setup, an MTA must be listening on
localhost port 25.  If the rc.conf sendmail_enable option is set to "NO",
a sendmail daemon will still be started and bound only to the localhost
interface in order to accept command line submitted mail.  If this is not
a desirable solution, it can be disabled using the sendmail_submit_enable
rc.conf option.  However, if both sendmail_enable and sendmail_submit_enable
are set to "NO", you must do one of two things for command line submitted
mail:

1. Designate an alternative MTA for the submission agent to contact
   by altering /etc/mail/submit.mc and using 'make submit.cf' in
   /etc/mail/.  Change the FEATURE(msp) line to FEATURE(msp, hostname)
   where hostname is the fully qualified hostname of the alternative MTA.

Or:

2. Return to using a set-user-ID root sendmail binary by changing the
   ownership and permissions on the sendmail binary and removing the
   /etc/mail/submit.cf file:
	chown root /usr/libexec/sendmail/sendmail
	chmod 4755 /usr/libexec/sendmail/sendmail
	rm /etc/mail/submit.cf
   If you install from source, set the SENDMAIL_SET_USER_ID flag in
   /etc/make.conf.

Also, as of 8.12, a new queue-running daemon is started to make sure mail
doesn't remain in the client mail queue.  By default, it simply runs the
client mail queue every 30 minutes.  Its behavior can be adjusted by setting
the sendmail_msp_queue_enable and sendmail_msp_queue_flags rc.conf options.

@


1.8.2.4
log
@MFC: Provide a new make.conf knob, SENDMAIL_SUBMIT_MC to allow users to pick
     the .mc file used for /etc/mail/submit.cf.  By default,
     /etc/mail/freebsd.submit.mc is installed and used.

     1.28      +34 -12    src/etc/mail/Makefile
     1.14      +7 -5      src/etc/mail/README
     1.17      +37 -7     src/etc/sendmail/Makefile
     1.185     +7 -0      src/share/examples/etc/make.conf
     1.42      +10 -0     src/share/man/man5/make.conf.5
@
text
@d1 1
a1 1
# $FreeBSD: src/etc/mail/README,v 1.8.2.3 2002/03/25 21:40:03 gshapiro Exp $
d20 4
a23 6
1. Designate an alternative host for the submission agent to contact
   by altering /etc/mail/freebsd.submit.mc (or setting SENDMAIL_SUBMIT_MC
   in /etc/make.conf to an alternate .mc file) and using
   'make install-submit-cf' in /etc/mail/.  Change the FEATURE(msp) line
   to FEATURE(msp, hostname) where hostname is the fully qualified hostname
   of the alternative host.
@


1.8.2.5
log
@MFC: Fix typo.

     Revision  Changes    Path
     1.15      +2 -2      src/etc/mail/README

Approved by:	re
@
text
@d1 1
a1 1
# $FreeBSD: src/etc/mail/README,v 1.8.2.4 2002/04/20 18:50:58 gshapiro Exp $
d8 1
a8 1
SMTP.  A group writable client mail queue (/var/spool/clientmqueue/ by
@


1.8.2.6
log
@MFC: Add a warning regarding localhost-only listening daemons inside jails.
     Apparently binding only to 127.0.0.1 inside of a jail actually binds
     to the jail IP address as well (in effect, bind to all available
     interfaces in the jail).

     Revision  Changes    Path
     1.16      +7 -6      src/etc/mail/README
     1.2       +3 -0      src/share/man/man8/rc.sendmail.8

Approved by:	re (bmah)
@
text
@d1 1
a1 1
# $FreeBSD: src/etc/mail/README,v 1.8.2.5 2002/05/08 15:44:38 gshapiro Exp $
d14 5
a18 6
interface in order to accept command line submitted mail (note that this
does not work inside jail(2) systems as jails do not allow binding to
just the localhost interface).  If this is not a desirable solution, it
can be disabled using the sendmail_submit_enable rc.conf option.  However,
if both sendmail_enable and sendmail_submit_enable are set to "NO", you
must do one of two things for command line submitted mail:
@


1.8.2.7
log
@Switch importer
@
text
@d1 1
a1 1
# $FreeBSD: stable/4/etc/mail/README 97133 2002-05-22 17:01:33Z gshapiro $
@


1.7
log
@        update spam countermeasures
        add examples of using an access_db
        update .mc files to match recommendations on
                http://www.sendmail.org/m4/anti-spam.html

	(grrr.....should have been one commit
	 did the last commit from a subdirectory)
@
text
@d1 1
a1 1
#	$Id: README,v 1.5.2.1 1999/05/01 03:37:29 jkh Exp $
@


1.6
log
@Update this file to no longer list the outdated information about gulf.net

Ignored-for-too-long-by:	jmb
@
text
@d1 1
a1 1
#	$Id: README,v 1.5 1998/09/02 01:34:57 brian Exp $
d4 13
a17 70
Introduction:
	The FreeBSD Project filters spam, unsolicited commerical
e-mail, from its mailing lists.  The filter has two parts: databases
and rulesets.  We have rulesets to /etc/sendmail.cf, check_rcpt,
check_relay, check_rbl, check_mail and xlat. (xlat is for testing
only, as explained in /etc/mail/sendmail.cf.additions.) These
rulesets use three databases.  The denyip, a list of IP addresses,
spamsites, a list of domains, and fakenames, a list of bogus
usernames (such as investor and success).  We do not accept mail
from any machine that matches a entry in either database, or users
in the fakenames database.

Filtering at your site:
	To filter spam at your site you need to:
	1. modify your /etc/sendmail.cf, 
	2. create a list of domains/ips you wish to block
	3. make the databases and 
	4. finally signal sendmail that the configuration file has changed.

1. Modifying your /etc/sendmail.cf
	Add the database declarations and the rulesets contained
in /etc/mail/sendmail.cf.additions to your .mc file.  If you do
not use m4 to generate your /etc/sendmail.cf, add the database
declarations to your /etc/sendmail.cf.

2. Put the list of domains you wish to block in /etc/mail/spamsites

3. Make the databases:
	As root, type "cd /etc/mail; make install" will build the
two databases from the retrieved source files and the local additions
files.

4. Signaling sendmail:
	Sendmail will reread its configuration whenever sendmail
receives a HUP signal.  As root, type "kill -HUP `cat
/var/run/sendmail.pid`".  Check sendmail's log file to be sure that
it has restarted.  /var/log/maillog should contain the line:  "Oct
15 08:59:16 hub sendmail[6565]: restarting /usr/sbin/sendmail on
signal".  Most likely, the date, time, hostname and process id will
be differ.

Testing the spam filter:

How can I tell if its working:
	The mail log file, /var/log/maillog, will contain a line
for every message filtered.  The lines will be similar to one of
these two log entries:

Check_mail rejects:
Oct 15 02:43:26 hub sendmail[6565]: CAA06565: ruleset=check_mail,
arg1=<announce@@martianconsulate.com>, relay=xxx.isp.net [###.###.###.###],
reject=521 <announce@@martianconsulate.com>

Nov 30 15:56:37 hub sendmail[15058]: PAA15058: ruleset=check_mail,
arg1=<ultramax@@s2.eddelwissl.NET>, relay=relay.somewhere.com
[###.###.###.###], reject=451 <ultramax@@s2.eddelwissl.NET>... Domain
does not resolve


Check_relay rejects:
Oct 19 04:45:24 hub sendmail[3503]: NOQUEUE: ruleset=check_relay,
arg1=imsp015.netvigator.com, arg2=205.252.144.206, relay=root@@localhost,
reject=521 blocked.contact postmaster@@FreeBSD.ORG

check_rcpt reject:
Nov 30 15:04:08 hub sendmail[12390]: PAA12390: ruleset=check_rcpt,
arg1=investor@@100percent.per.year.com, relay=newfed.frb.gov
[198.3.221.5], reject=553 investor@@100percent.per.year.com...
521<investor@@100percent.per.year.com>#blocked.contact postmaster
Sun Nov 16 11:40:53 PST 1997
@


1.5
log
@Add Id keywords
@
text
@d1 1
a1 1
#	$Id:$
a16 8
	WARNING: We do not maintain the database source files.
		 Read domain.txt and ips.txt.
		 (Make will fetch them for you)
		 Domains that you want to allow, should be added
		 to the file /etc/mail/allowed_domains.txt.
		 IP addresses that you want to allow, should be added
		 to the file /etc/mail/allowed_ips.txt.

d20 1
a20 1
	2. retrieve the database source files from the master site,
d30 1
a30 16
2. Fetching the database source files:

	The database source files are available from Gulf Coast
Internet via anonymous FTP.  The Makefile in /etc/mail will retreive
the source files for you: as root, type "cd /etc/mail; make" at
the command line.  The previous version of the database source
files is moved to <filename>.0.  

	Local additions should be kept in separate files.  We use
spamsites.local and denyip.local.  You may want to diff the new
versions of the files against the previous versions to see what
has changed.  

	Local deletions should be kept in separate files.  We use
allowed_domain.txt and allowed_ips.txt.  (This feature was added
after netcom.com was added to the spam block list.)
@


1.5.2.1
log
@MFC: remove obsolete info
@
text
@d1 1
a1 1
#	$Id: README,v 1.5 1998/09/02 01:34:57 brian Exp $
d17 8
d28 1
a28 1
	2. create a list of domains/ips you wish to block
d38 16
a53 1
2. Put the list of domains you wish to block in /etc/mail/spamsites
@


1.5.2.2
log
@	update spam countermeasures
	add examples of using an access_db
	update .mc files to match recommendations on
		http://www.sendmail.org/m4/anti-spam.html
@
text
@d1 1
a1 1
#	$Id: README,v 1.5.2.1 1999/05/01 03:37:29 jkh Exp $
a3 13
        Sendmail now includes excellent tools block spam.  These
tools are available as FEATUREs that you can add to your site's
.mc file.  Proper use of these FEATUREs will prevent spammer from
using your site as a relay as well as significantly decrease the
amount of spam that arrives at your site.  No set of anti-spam
tools will block all spam without blocking some portion of legitimate
mail as well.  Therefore, these FEATUREs are designed to prevent
as much spam as possible without blocking legitimate mail.

	These tools are discussed in /usr/src/contrib/sendmail/cf/README.
Read the section entitled "ANTI-SPAM CONFIGURATION CONTROL".  Example
usage and additional tools can be found in
/usr/src/contrib/sendmail/cf/cf/knecht.mc.
d5 70
@


1.5.2.3
log
@$Id$ -> $FreeBSD$
@
text
@d1 1
a1 1
# $FreeBSD$
@


1.4
log
@	added two new files: allowed_domains.txt and allowed_ips.txt.
	domains/ips listed in these files are *NOT* filtered,
	even if listed in domains.txt or ips.txt.

	someone added netcom.com to the domains.txt file,
	resulting in all mail from netcom.com being blocked.
@
text
@d1 2
@


1.3
log
@- Fix some very minor typos.
@
text
@d1 1
a1 1
	Filtering out SPAM from your site
d15 8
d37 1
d42 10
a51 4
files is moved to <filename>.0.  Local additions should be kept in
separate files.  We use spamsites.local and denyip.local.  You may
want to diff the new versions of the files against the previous
versions to see what has changed.
@


1.2
log
@        improve anti-spam rulesets: check_relay, check_mail, check_rcpt.
        break each ruleset into identified sections. (called groups).
        note which groups can be reordered.
        each group accepts and returns the same strings,
                as much as possible.
        reactivate Paul Vixie's RBL (in check_mail)
        add rules to limit mail relaying to a list of hosts and domains
                in the R class (check_rcpt, not active on hub.freebsd.org)
Submitted by:	 jmb
@
text
@d12 1
a12 1
from any machine that matches a entry in either database, or usersr
@


1.1
log
@anti-spam filter used by the FreeBSD mailing lists.
@
text
@d6 8
a13 6
and rulesets.  We have added three rulesets to /etc/sendmail.cf,
check_relay and check_mail and xlat. (xlat is for testing only, as
explained in /etc/mail/sendmail.cf.additions.) These rulesets use
two databases.  The denyip, a list of IP addresses, and spamsites,
a list of domains.  We do not accept mail from any machine that
matches a entry in either database.
d60 1
a60 1
"Oct 15 02:43:26 hub sendmail[6565]: CAA06565: ruleset=check_mail,
d62 7
a68 1
reject=521 <announce@@martianconsulate.com>"
d74 7
@


1.1.2.1
log
@MFC: selected improvements for etc files *not* including periodic changes,
     security tweaks or other kerberbos related stuff.  I expect that
     stuff to occur as a side-effect of what others will be doing in etc,
     if at all.
@
text
@d6 6
a11 8
and rulesets.  We have rulesets to /etc/sendmail.cf, check_rcpt,
check_relay, check_rbl, check_mail and xlat. (xlat is for testing
only, as explained in /etc/mail/sendmail.cf.additions.) These
rulesets use three databases.  The denyip, a list of IP addresses,
spamsites, a list of domains, and fakenames, a list of bogus
usernames (such as investor and success).  We do not accept mail
from any machine that matches a entry in either database, or users
in the fakenames database.
d58 1
a58 1
Oct 15 02:43:26 hub sendmail[6565]: CAA06565: ruleset=check_mail,
d60 1
a60 7
reject=521 <announce@@martianconsulate.com>

Nov 30 15:56:37 hub sendmail[15058]: PAA15058: ruleset=check_mail,
arg1=<ultramax@@s2.eddelwissl.NET>, relay=relay.somewhere.com
[###.###.###.###], reject=451 <ultramax@@s2.eddelwissl.NET>... Domain
does not resolve

a65 7

check_rcpt reject:
Nov 30 15:04:08 hub sendmail[12390]: PAA12390: ruleset=check_rcpt,
arg1=investor@@100percent.per.year.com, relay=newfed.frb.gov
[198.3.221.5], reject=553 investor@@100percent.per.year.com...
521<investor@@100percent.per.year.com>#blocked.contact postmaster
Sun Nov 16 11:40:53 PST 1997
@


1.1.2.2
log
@MFC: Add Id keyword
@
text
@a0 2
#	$Id:$

@


1.1.2.3
log
@$Id$ -> $FreeBSD$
@
text
@d1 1
a1 1
# $FreeBSD$
@

