divert(-1)dnl
#-----------------------------------------------------------------------------
# $Sendmail: debproto.mc,v 8.15.2 2016-12-08 18:43:49 cowboy Exp $
#
# Copyright (c) 1998-2010 Richard Nelson.  All Rights Reserved.
#
# cf/debian/sendmail.mc.  Generated from sendmail.mc.in by configure.
#
# sendmail.mc prototype config file for building Sendmail 8.15.2
#
# Note: the .in file supports 8.7.6 - 9.0.0, but the generated
#	file is customized to the version noted above.
#
# This file is used to configure Sendmail for use with Debian systems.
#
# If you modify this file, you will have to regenerate /etc/mail/sendmail.cf
# by running this file through the m4 preprocessor via one of the following:
#	* make   (or make -C /etc/mail)
#	* sendmailconfig 
#	* m4 /etc/mail/sendmail.mc > /etc/mail/sendmail.cf
# The first two options are preferred as they will also update other files
# that depend upon the contents of this file.
#
# The best documentation for this .mc file is:
# /usr/share/doc/sendmail-doc/cf.README.gz
#
#-----------------------------------------------------------------------------
divert(0)dnl
#
#   Copyright (c) 1998-2005 Richard Nelson.  All Rights Reserved.
#
#  This file is used to configure Sendmail for use with Debian systems.
#
define(`_USE_ETC_MAIL_')dnl
include(`/usr/share/sendmail/cf/m4/cf.m4')dnl
VERSIONID(`$Id: sendmail.mc, v 8.15.2-8 2016-12-08 18:43:49 cowboy Exp $')
OSTYPE(`debian')dnl
DOMAIN(`debian-mta')dnl
dnl # Items controlled by /etc/mail/sendmail.conf - DO NOT TOUCH HERE
dnl undefine(`confHOST_STATUS_DIRECTORY')dnl        #DAEMON_HOSTSTATS=
dnl # Items controlled by /etc/mail/sendmail.conf - DO NOT TOUCH HERE
dnl #
dnl # General defines
dnl #
dnl # SAFE_FILE_ENV: [undefined] If set, sendmail will do a chroot()
dnl #	into this directory before writing files.
dnl #	If *all* your user accounts are under /home then use that
dnl #	instead - it will prevent any writes outside of /home !
dnl #   define(`confSAFE_FILE_ENV',             `')dnl
dnl #
dnl # Daemon options - restrict to servicing LOCALHOST ONLY !!!
dnl # Remove `, Addr=' clauses to receive from any interface
dnl # If you want to support IPv6, switch the commented/uncommentd lines
dnl #
dnl #
FEATURE(`no_default_msa')dnl
dnl DAEMON_OPTIONS(`Family=inet6, Name=MTA-v6, Port=smtp, Addr=::1')dnl
DAEMON_OPTIONS(`Family=inet,  Name=MTA-v4local, Port=smtp, Addr=127.0.0.1')dnl
dnl #
dnl DAEMON_OPTIONS(`Family=inet6, Name=MSP-v6, Port=submission, M=Ea, Addr=::1')dnl
DAEMON_OPTIONS(`Family=inet,  Name=MTA-v4, Port=smtp, Addr=212.114.33.2')dnl
DAEMON_OPTIONS(`Family=inet,  Name=MSP-v4sub, Port=submission, M=Ea, Addr=212.114.33.2')dnl
DAEMON_OPTIONS(`Family=inet,  Name=MSP-v48080, Port=8080, M=Ea, Addr=212.114.33.2')dnl
dnl #
CLIENT_OPTIONS(`Addr=212.114.33.2')dnl
define(confHELO_NAME,`ger18.wwwserver.net')dnl
dnl #
dnl #
dnl # Be somewhat anal in what we allow
define(`confPRIVACY_FLAGS',dnl
`needmailhelo,needexpnhelo,needvrfyhelo,restrictqrun,restrictexpand,nobodyreturn,authwarnings')dnl
dnl #
dnl # Define connection throttling and window length
define(`confCONNECTION_RATE_THROTTLE', `15')dnl
define(`confCONNECTION_RATE_WINDOW_SIZE',`10m')dnl
dnl #
dnl # Features
dnl #
dnl # use /etc/mail/local-host-names
dnl #FEATURE(`use_cw_file')dnl
dnl #
dnl # The access db is the basis for most of sendmail's checking
dnl #FEATURE(`access_db', , `skip')dnl
dnl #
dnl # The greet_pause feature stops some automail bots - but check the
dnl # provided access db for details on excluding localhosts...
dnl # FEATURE(`greet_pause', `1000')dnl 1 seconds
dnl #
dnl # Delay_checks allows sender<->recipient checking
FEATURE(`delay_checks', `friend', `n')dnl
dnl #
dnl # If we get too many bad recipients, slow things down...
define(`confBAD_RCPT_THROTTLE',`3')dnl
dnl #
dnl # Stop connections that overflow our concurrent and time connection rates
dnl # FEATURE(`conncontrol', `nodelay', `terminate')dnl
dnl # FEATURE(`ratecontrol', `nodelay', `terminate')dnl
dnl #
dnl # If you're on a dialup link, you should enable this - so sendmail
dnl # will not bring up the link (it will queue mail for later)
dnl define(`confCON_EXPENSIVE',`True')dnl
dnl #
dnl # Dialup/LAN connection overrides
dnl #
include(`/etc/mail/m4/dialup.m4')dnl
include(`/etc/mail/m4/provider.m4')dnl
dnl ###############################################################################above is nearly default##############################################################################################################################
dnl ##############################################################################################################################################################################################################
dnl # Masquerading options
FEATURE(`always_add_domain')dnl
MASQUERADE_AS(`')dnl
dnl MASQUERADE_AS(`')dnl
FEATURE(`allmasquerade')dnl
FEATURE(`masquerade_envelope')dnl
FEATURE(`access_db',	`hash -T<TMPF> -o /etc/mail/access.db')dnl
FEATURE(`greet_pause',`3000')dnl
FEATURE(`blacklist_recipients')dnl
FEATURE(`use_cw_file')dnl
define(`confTRUSTED_USERS', `mdom www-run list www root www-data')dnl
FEATURE(`use_ct_file')dnl
dnl off wg spam hd am 08.10.2012 dnl
dnl FEATURE(`generics_entire_domain')dnl
FEATURE(`delay_checks', `friend', `n')dnl
FEATURE(`conncontrol', `nodelay', `terminate')dnl
FEATURE(`ratecontrol', `nodelay', `terminate')dnl
FEATURE(`virtusertable',                `hash -o /etc/mail/virtusertable.db')dnl
FEATURE(`virtuser_entire_domain')
FEATURE(`mailertable',                  `hash -o /etc/mail/mailertable.db')dnl
FEATURE(`local_procmail')dnl
FEATURE(`lookupdotdomain')dnl

dnl #blacklist testweise
dnl FEATURE(`enhdnsbl', `sbl.spamhaus.org', `"Rejected due to Spamhaus listing see http://www.spamhaus.org/query/bl?ip=" $&{client_addr} " for more information"')dnl
dnl dnl FEATURE(`enhdnsbl', `xbl.spamhaus.org', `"Rejected due to Spamhaus listing see http://www.spamhaus.org/query/bl?ip=" $&{client_addr} " for more information"')dnl
dnl FEATURE(`enhdnsbl', `ix.dnsbl.manitu.net', `"Rejected due to NiX-Spam listing see http://www.dnsbl.manitu.net/lookup.php?value=" $&{client_addr} " for more information"')dnl

dnl
dnl GREYLISTING mit milter-greylist
dnl

FEATURE(`milter-greylist')dnl
define(`confINPUT_MAIL_FILTERS', `greylist')dnl

dnl opendkim milter
#INPUT_MAIL_FILTER(`opendkim', `S=local:/var/run/opendkim/opendkim.sock')dnl

dnl spamass-milter
INPUT_MAIL_FILTER(`spamassassin', `S=local:/var/run/spamass/spamass.sock, F=, T=S:4m;R:4m;E:10m')dnl
define(`confMILTER_MACROS_CONNECT',`t, b, j, _, {daemon_name}, {if_name}, {if_addr}')dnl
define(`confMILTER_MACROS_HELO',`s, {tls_version}, {cipher}, {cipher_bits}, {cert_subject}, {cert_issuer}')dnl
define(`confMILTER_MACROS_ENVRCPT',`b, i, j, r, v, Z, {auth_type}, {greylist}, {auth_ssf}, _')dnl

define(`confDONT_PROBE_INTERFACES', `true')dnl

dnl
dnl Mailer
dnl
define(`PROCMAIL_MAILER_PATH',          `/usr/bin/procmail')dnl
dnl define(`PROCMAIL_MAILER_ARGS',          `procmail -m $h $f $u')dnl
define(`LOCAL_SHELL_FLAGS',             `eu09')dnl
dnl define(`LOCAL_MAILER_ARGS',             `procmail -a $h -d $u')dnl
define(`LOCAL_MAILER_FLAGS',            `SPfhn09')dnl
dnl define(`USENET_MAILER_PATH',            `/usr/bin/inews')dnl
dnl

dnl neue testentrys
define(`confMAX_MESSAGE_SIZE', `80000000')dnl
define(`confDF_BUFFER_SIZE', `10240')dnl
define(`confXF_BUFFER_SIZE', `10240')dnl
dnl define(`confPRIVACY_FLAGS', `goaway,noreceipts')
define(`confMAX_DAEMON_CHILDREN', `450')dnl
dnl define(`confCONNECTION_RATE_THROTTLE', `5')dnl
define(`confNO_RCPT_ACTION', `add-to-undisclosed')dnl
define(`confBAD_RCPT_THROTTLE',`3')dnl

dnl

dnl #problem "Multiple destination domains per transaction is unsupported" - daher nur eine verbindung pro mail dnl
define(`SMTP_MAILER_MAXRCPTS', `1')dnl
define(`RELAY_MAILER_MAXRCPTS', `1')dnl


dnl ##############################################################################################################################################################################################################
dnl #
dnl # Default Mailer setup
MAILER_DEFINITIONS
MAILER(`local')dnl
MAILER(`smtp')dnl

TRUST_AUTH_MECH(`LOGIN PLAIN')dnl
define(`confAUTH_MECHANISMS',   `LOGIN PLAIN')dnl


dnl #lokale speedups
define(`confTO_CONNECT', `1m')dnl
define(`confTO_IDENT', `0')dnl
define(`confTO_COMMAND', `2m')dnl
define(`confCONNECTION_RATE_THROTTLE', `20000')dnl
define(confCONNECTION_RATE_WINDOW_SIZE',60s')dnl


dnl #lokale limits
define(`confMAX_DAEMON_CHILDREN', 450)dnl
define(`confDELAY_LA', `45')dnl
define(`confQUEUE_LA', `50')dnl
define(`confREFUSE_LA', `90')dnl

include(`/etc/mail/tls/starttls.m4')dnl

LOCAL_RULESETS
dnl # hier unser isfun header für procmail
HX-AuthUser: ${auth_authen}
HApparently-To: $u


SLocal_check_relay
R$*		$: $&{client_addr}
R127.0.0.1	$@ OKSOFAR
R$*		$: < $&{client_ptr} >
R<localhost>	$#error $@ 5.7.1 $: "550 Relaying denied. localhost is not a valid PTR " $&{client_ptr}#


LOCAL_CONFIG
O CipherList=ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA
O ServerSSLOptions=+SSL_OP_NO_SSLv2 +SSL_OP_NO_SSLv3 +SSL_OP_CIPHER_SERVER_PREFERENCE
O ClientSSLOptions=+SSL_OP_NO_SSLv2 +SSL_OP_NO_SSLv3 +SSL_OP_CIPHER_SERVER_PREFERENCE