Configuring Sendmail

To set up interaction between Sendmail and Dr.Web MailD, changes to sendmail.mc and sendmail.cf configuration files are required.

To avoid recompilation of the sendmail.cf configuration file, you can insert or add there the following lines (if the corresponding definitions are already present in the file):

For versions 8.14.0 and later:

############################
# Input mail filters
############################
O InputMailFilters=drweb-milter
O Milter.LogLevel=6
############################
#   Xfilters
############################
Xdrweb-milter, S=__ADDRESS__,
F=T,T=C:1m;S:5m;R:5m;E:1h

To check locally sent messages (with mail or sendmail system call), all changes made to sendmail.cf configuration file must be copied to submit.cf and submit.mc files.

Please note that submit.cf and submit.mc files are read-only by default, so you must change access permissions (providing write access) before making any changes to these files. Moreover, you must add nobodyreturn value to the O PrivacyOptions parameter.

Example:

# privacy flags
O PrivacyOptions=goaway,noetrn,nobodyreturn

Or in {sendmail_src}/cf/cf/feature/msp.m4:

define(`confPRIVACY_FLAGS'
`goaway,noetrn,nobodyreturn,restrictqrun')

If the filter is not available, you can enable the following flags (F=):

•R - fail to deliver;

•T - delay delivery.

If neither F=R, nor F=T is specified, the message is passed without check.

You may also add the following lines to sendmail.mc:

For versions 8.14.0 and later:

INPUT_MAIL_FILTER(`drweb-milter', `S=__ADDRESS__,
F=T, T=C:1m;S:5m;R:5m;E:1h')
define(`confMILTER_LOG_LEVEL',`6')

Timeout must be set according to the values of timeouts specified for Sendmail:

O Timeout.datablock=XX

(the default value is 1 hour, XX=>1h).

After you make changes to sendmail.cf configuration file, recompile it.

__ADDRESS__ string is a string that specifies the address of transport used to connect to drweb-milter. The string format and value are the same as those used in the Address parameter from the [Milter] section of the Dr.Web MailD configuration file.

For TCP-sockets address must be specified in the following format:

inet:__PORT__@__HOST__

where __PORT__ and __HOST__ must have definite values (e.g. inet:3001@localhost).

For UNIX sockets address must be specified in the following format:

local:__SOCKPATH__

where __SOCKPATH__ string must define the path which is accessible with the privileges the filter is started (e.g. local:/var/run/drweb-milter.sock).

Additional information on filter configuration can be found in Sendmail system documentation. You must restart Sendmail after specifying all necessary parameter values.

To enable logging of Sendmail message identifiers by drweb-maild module (sendmails message ID) as well as sending to drweb-maild information on successful authorization, the following line must be included in sendmail.cf:

O Milter.macros.envfrom=i,{auth_type}, ...

(suspension points denote other parameters, which values are of no importance in this case).

To allow Dr.Web MailD to define IP address and host name of the sender as well as to transfer drweb-maild module the interface address which received the message, add the following line to sendmail.cf configuration file:

O Milter.macros.connect=_,{if_addr}, ...

(suspension points denote other parameters, which values are of no importance in this case).

To disable output of the following messages to syslog:

X-Authentication-Warning: some.domain.com: drweb set sender to DrWeb-DAEMON@some.domain.com using -f

include the user with whose privileges drweb-milter is operating (drweb user by default) to the trusted-users list in submit.cf file. This can be done by adding the user to the list directly in submit.cf and sendmail.cf configuration files:

#####################
#  Trusted users    #
#####################
Tdrweb

Or by adding the following line to the submit.mc file:

define(`confTRUSTED_USERS', `drweb')