HostedDB - Dedicated UNIX Servers

Securing-Optimizing-RH-Linux-1_2_256
Comments and suggestions concerning this book should be mailed to gmourani@videotron.ca © Copyright 1999-2000 Gerhard Mourani and Open Network Architecture ® 256 define(`confDEF_USER_ID',``8:12'') This configuration option specifies the default user id, in our case the user “mail” and id “8:12” (see the /etc/passwd file). OSTYPE(`linux’) This configuration option specifies the default operating system Sendmail will running on, in our case the “linux” system. This item is one of the minimal information requiring by the “mc” file. define(`confAUTO_REBUILD') This configuration option specifies Sendmail to automatically rebuild aliases file if needed. define(`confTO_CONNECT', `1m') This configuration option specifies the timeout waiting for an initial connect() with another host to complete. The default value we set to this option for Linux is 1 minute (1m). define(`confTRY_NULL_MX_LIST',true) This configuration option specifies whether the receiving server is the best MX for a host and if yes, try connecting to that host’s directly. define(`confDONT_PROBE_INTERFACES',true) This configuration option if set to true, Sendmail will _not_insert the names and addresses of any local interfaces into the $=w class (list of known "equivalent" addresses). define(`PROCMAIL_MAILER_PATH',`/usr/bin/procmail') This configuration option set the path to the procmail program (It is recommended to have procmail installed on your Central Mail Hub Server). FEATURE(`smrsh',`/usr/sbin/smrsh') This m4 macro enables the use of “smrsh” (sendmail restricted shell). With this feature you can control what program gets run via e-mail through the “/etc/aliases” and “~/.forward” files. The default location for the “smrsh” program is “/usr/local/etc/smrsh”, since we are installed “smrsh” in another location, we need to add an argument to the smrsh feature to indicate the new emplacement “/usr/sbin/smrsh”. The use of “smrsh” is recommended by CERT, so you are encouraged to use this feature as often as possible. FEATURE(mailertable) This m4 macro enables the use of “mailertable” (database selects new delivery agents). A mailertable is a database that maps “host.domain” names to special delivery agent and new domain name pairs. With this feature mail can be delivered through the use of a specified or particular delivery agent to a new domain name. FEATURE(`virtusertable',`hash -o /etc/mail/virtusertable') This m4 macro enables the use of “virtusertable” (support for virtual domains). A virtusertable is a database that maps virtual domains into new addresses. With this feature mail for virtual domain can be delivered to local, remote, or a single user address. FEATURE(redirect) This m4 macro enables the use of “redirect” (support for address.REDIRECT). With this feature mail addressed to a retired user account wahib, for example, will be bounced with an indication of the new forwarding address. The retired accounts must be set up in the aliases file on the mail server. FEATURE(always_add_domain)