Re: sendmail gripe

From: Royce Williams <royce@alaska.net>
Date: Sun Nov 26 2006 - 22:52:53 AKST

Unfortunately, I'm right on the cusp -- I'm someone who *does*
understand the gist of the instructions, and I *did* need them,
in this case ... and I also recognize them as almost completely
unintelligible for my purposes. :)

My problem was that I wanted root to also be subject to masquerading.
By default since 8.10.0, root is exempted as a member of class E.
The reasoning is that you don't want email from root on a source system
(as in root@mybox.example.net) to be obscured. I solve that problem
in other ways, and don't want to be told to forced to solve it in this
way.

I ended up finding out some good guidance here:

http://groups.google.com/group/lucky.freebsd.questions/browse_thread/thread/915d36aa42fb2399/

In a nutshell, I had to:

# cp /usr/share/sendmail/cf/domain/generic.m4 /usr/share/sendmail/cf/domain/mydomain.m4

# diff -u /usr/share/sendmail/cf/domain/generic.m4 /usr/share/sendmail/cf/domain/mydomain.m4
--- /usr/share/sendmail/cf/domain/generic.m4 Sun Jul 2 11:11:27 2006
+++ /usr/share/sendmail/cf/domain/mydomain.m4 Sun Nov 26 17:06:04 2006
@@ -25,4 +25,5 @@
 define(`confMAX_HEADERS_LENGTH', `32768')dnl
 FEATURE(`redirect')dnl
 FEATURE(`use_cw_file')dnl
-EXPOSED_USER(`root')
+dnl rdw: unexpose root
+dnl EXPOSED_USER(`root')

... and then

# diff -u freebsd.mc myserver.prv.mydomain.net.mc
--- freebsd.mc Sun Jul 2 11:09:55 2006
+++ myserver.prv.mydomain.net.mc Sun Nov 26 17:07:39 2006
@@ -46,7 +46,9 @@
 divert(0)
 VERSIONID(`$FreeBSD: src/etc/sendmail/freebsd.mc,v 1.30.6.1 2006/04/13 04:00:23 gshapiro Exp $')
 OSTYPE(freebsd6)
-DOMAIN(generic)
+
+dnl DOMAIN(generic)
+DOMAIN(mydomain)

This allows my masquerading setup starting snagging root mail as well,
so that mails from root to an external account look like they're
coming from 'root@tycho.org' instead of 'root@myserver.prv.tycho.org',
which my ISP's SMTP servers know is an invalid domain, and so were
happily rejecting 'em. :)

Royce

Michael Neverdosky wrote, on 11/26/2006 4:48 PM:
> This is a common problem with documentation nearly everywhere these days.
> Those who can understand the instructions don't need them and those
> who need then don't understand.
>
> The answer is to use technical writes to do the instructions.
> At all costs programmers and engineers should NOT write the
> instructions, unless they are also trained as tech writers and did NOT
> program or engineer the system they are documenting.
>
> Clear, simple instructions in plain English are rare these days.
>
> michael
>
> On 11/26/06, Royce Williams <royce@alaska.net> wrote:
>> You know, I've been a sendmail proponent for years ... but I just
>> tried to imagine that I was a newcomer to sendmail while reading this:
>>
>> http://www.sendmail.org/m4/masquerading_relaying.html
>>
>>
>> It's easy to see why sendmail has a bad rep. Clear as mud.

---------
To unsubscribe, send email to <aklug-request@aklug.org>
with 'unsubscribe' in the message body.
Received on Sun Nov 26 22:53:22 2006

This archive was generated by hypermail 2.1.8 : Sun Nov 26 2006 - 22:53:22 AKST