kpriv/pkgsrc
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
pkgsrc/mail/sendmail/options.mk

80 lines
1.8 KiB
Makefile
Raw Normal View History

Change from using ${OPSYS} to looking for /usr/include/blacklist.h to determine whether to use the blacklistd feature. This allows for automatically picking up new OSes that provide blacklistd as well as ignoring older versions of NetBSD and FreeBSD that don't have blacklistd. Add UseBlacklist to M4 config generator. This means that you can turn it on by doing something like: LOCAL_CONFIG ... define(`confUSE_BLACKLIST', `True')dnl ... It is set to false as the feature is experimental having just been created. Ride previous PKGREVISION bump as it was less than an hour ago.
2019-07-15 07:30:33 +02:00
# $NetBSD: options.mk,v 1.26 2019/07/15 05:30:33 jnemeth Exp $
Update of sendmail to 8.13.1 pkgsrc changes: - move to use options.mk framework - solaris support tidy-up - fix linux man page extension handling bug - allow for a user defined smrsh directory - update MASTER_SITES - optional SOCKETMAP support and sample script installation - ok'ed snj@/wiz@ Summary of some of the major changes include: - New map "socket" to query maps via TCP/IP sockets. - Connection rate control as well as control over the number of incoming open connections. - Several LDAP enhancements such as LDAP recursion and LDAP URI support. - Message quarantining. - AUTH EXTERNAL will only be enabled if STARTTLS was successful and the client has been authenticated, i.e., {verify} is OK. - Basic support for certificate revocation lists. - New queue timeouts for DSN messages. - Experimental support for MTAMark. For a full list of changes see: - http://www.sendmail.org/8.13.0.html - http://www.sendmail.org/8.13.1.html
2004-08-30 22:16:28 +02:00
PKG_OPTIONS_VAR= PKG_OPTIONS.sendmail
Rename ffr-tls option to sendmail-ffr-tls as requested by wiz@. Ride version change done a few minutes ago.
2014-06-15 23:04:30 +02:00
PKG_SUPPORTED_OPTIONS= inet6 db2 db4 ldap sasl tls tcpwrappers
Add sendmail-ffr-badrcptshutdown option. This option enables the sendmail options BadRcptShutdown and BadRcptShutdownGood to be used. "ffr" stands for For Future Release, which means it is a beta test feature that may show up in a future release of sendmail. The sendmail-ffr-badrcptshutdown option is disabled by default so no change to binary packages, thus not bumping PKGREVISION.
2019-07-15 04:06:42 +02:00
PKG_SUPPORTED_OPTIONS+= sendmail-ffr-tls sendmail-ffr-badrcptshutdown
Update sendmail to 8.15.2. pkgsrc change: default to enable TLS - this has been requested a couple of times and most systems are going to have a recent enough version of openssl so in most cases there won't be additional dependencies 8.15.2/8.15.2 2015/07/03 If FEATURE(`nopercenthack') is used then some bogus input triggered a recursion which was caught and logged as SYSERR: rewrite: excessive recursion (max 50) ... Fix based on patch from Ondrej Holas. DHParameters now by default uses an included 2048 bit prime. The value 'none' previously caused a log entry claiming there was an error "cannot read or set DH parameters". Also note that this option applies to the server side only. The U= mailer field didn't accept group names containing hyphens, underbars, or periods. Based on patch from David Gwynne of the University of Queensland. CONFIG: Allow connections from IPv6:0:0:0:0:0:0:0:1 to relay again. Patch from Lars-Johan Liman of Netnod Internet Exchange. CONFIG: New option UseCompressedIPv6Addresses to select between compressed and uncompressed IPv6 addresses. The default value depends on the compile-time option IPV6_FULL: For 1 the default is False, for 0 it is True, thus preserving the current behaviour. Based on patch from John Beck of Oracle. CONFIG: Account for IPv6 localhost addresses in FEATURE(`block_bad_helo'). Suggested by Andrey Chernov from FreeBSD and Robert Scheck from the Fedora Project. CONFIG: Account for IPv6 localhost addresses in check_mail ruleset. LIBMILTER: Deal with more invalid protocol data to avoid potential crashes. Problem noted by Dimitri Kirchner. LIBMILTER: Allow a milter to specify an empty macro list ("", not NULL) in smfi_setsymlist() so no macro is sent for the selected stage. MAKEMAP: A change to check TrustedUser in fewer cases which was made in 2013 caused a potential regression when makemap was run as root (which should not be done anyway). Note: sendmail often contains options "For Future Releases" (prefix _FFR_) which might be enabled in a subsequent version or might simply be removed as they turned out not to be really useful. These features are usually not documented but if they are, then the required (FFR) options are listed in - doc/op/op.* for rulesets and macros, - cf/README for mc/cf options.
2015-07-11 12:08:32 +02:00
PKG_SUGGESTED_OPTIONS= inet6 tcpwrappers tls
While I'm here add back the PKG_OPTIONS_LEGACY_OPTS for socketmap
2005-10-20 17:10:01 +02:00
Add support for working with blacklistd. These patches were originally created for FreeBSD and were ported to pkgsrc by Hauke Fath with some cleanup by myself. These patches add a new "UseBlacklist" option to sendmail to have it send authentication failure notices to blacklistd.
2019-07-15 06:32:49 +02:00
.include "../../mk/bsd.prefs.mk"
Change from using ${OPSYS} to looking for /usr/include/blacklist.h to determine whether to use the blacklistd feature. This allows for automatically picking up new OSes that provide blacklistd as well as ignoring older versions of NetBSD and FreeBSD that don't have blacklistd. Add UseBlacklist to M4 config generator. This means that you can turn it on by doing something like: LOCAL_CONFIG ... define(`confUSE_BLACKLIST', `True')dnl ... It is set to false as the feature is experimental having just been created. Ride previous PKGREVISION bump as it was less than an hour ago.
2019-07-15 07:30:33 +02:00
.for dir in ${COMPILER_INCLUDE_DIRS}
. if exists(${dir}/blacklist.h)
Add support for working with blacklistd. These patches were originally created for FreeBSD and were ported to pkgsrc by Hauke Fath with some cleanup by myself. These patches add a new "UseBlacklist" option to sendmail to have it send authentication failure notices to blacklistd.
2019-07-15 06:32:49 +02:00
PKG_SUPPORTED_OPTIONS+= blacklistd
PKG_SUGGESTED_OPTIONS+= blacklistd
Change from using ${OPSYS} to looking for /usr/include/blacklist.h to determine whether to use the blacklistd feature. This allows for automatically picking up new OSes that provide blacklistd as well as ignoring older versions of NetBSD and FreeBSD that don't have blacklistd. Add UseBlacklist to M4 config generator. This means that you can turn it on by doing something like: LOCAL_CONFIG ... define(`confUSE_BLACKLIST', `True')dnl ... It is set to false as the feature is experimental having just been created. Ride previous PKGREVISION bump as it was less than an hour ago.
2019-07-15 07:30:33 +02:00
. endif
.endfor
Add support for working with blacklistd. These patches were originally created for FreeBSD and were ported to pkgsrc by Hauke Fath with some cleanup by myself. These patches add a new "UseBlacklist" option to sendmail to have it send authentication failure notices to blacklistd.
2019-07-15 06:32:49 +02:00
Rename ffr-tls option to sendmail-ffr-tls as requested by wiz@. Ride version change done a few minutes ago.
2014-06-15 23:04:30 +02:00
PKG_OPTIONS_LEGACY_OPTS+= starttls:tls ffr_tls_1:sendmail-ffr-tls
Update of sendmail to 8.13.1 pkgsrc changes: - move to use options.mk framework - solaris support tidy-up - fix linux man page extension handling bug - allow for a user defined smrsh directory - update MASTER_SITES - optional SOCKETMAP support and sample script installation - ok'ed snj@/wiz@ Summary of some of the major changes include: - New map "socket" to query maps via TCP/IP sockets. - Connection rate control as well as control over the number of incoming open connections. - Several LDAP enhancements such as LDAP recursion and LDAP URI support. - Message quarantining. - AUTH EXTERNAL will only be enabled if STARTTLS was successful and the client has been authenticated, i.e., {verify} is OK. - Basic support for certificate revocation lists. - New queue timeouts for DSN messages. - Experimental support for MTAMark. For a full list of changes see: - http://www.sendmail.org/8.13.0.html - http://www.sendmail.org/8.13.1.html
2004-08-30 22:16:28 +02:00
.include "../../mk/bsd.options.mk"
###
Update to sendmail 8.14.9: this fixes a minor potential security issue pkgsrc changes: - consolidate several patches into site.config.m4 - pkgsrc LDFLAGS should always be used - don't bother specifying file owner/group anywhere except in Makefile - create include/sm/os/sm_os_netbsd.h to fix warnings and OS specific stuff - install mail.local and rmail - convert to use res_n* functions - allows for linking against threaded libraries - add a TODO file - PR/35249 - Loren M. Lang - can't find libraries on Linux, this should be fixed by using pkgsrc LDFLAGS - PR/46694 - Makoto Fujiwara - bring back netbsd-proto.mc from when sendmail was part of the base system - PR/47207 - Richard Palo - let pkgsrc infrastructure handle file ownership and group - PR/48566 - Emmanuel Dreyfus - always set _FFR_USE_GETPWNAM_ERRNO on NetBSD - roll ffr_tls_1 and the suggested ffr_tls_ec into one new ffr_tls option - not enabled by default because it changes behaviour 8.14.9/8.14.9 2014/05/21 SECURITY: Properly set the close-on-exec flag for file descriptors (except stdin, stdout, and stderr) before executing mailers. Fix a misformed comment in conf.c: "/*" within comment which may cause a compilation error on some systems. Problem reported by John Beck of Oracle. DEVTOOLS: Fix regression in auto-detection of libraries when only shared libraries are available. Problem reported by Bryan Costales.
2014-06-15 22:48:49 +02:00
### Berkeley DB version 2/4 format for on disk databases e.g. aliases
Update of sendmail to 8.13.1 pkgsrc changes: - move to use options.mk framework - solaris support tidy-up - fix linux man page extension handling bug - allow for a user defined smrsh directory - update MASTER_SITES - optional SOCKETMAP support and sample script installation - ok'ed snj@/wiz@ Summary of some of the major changes include: - New map "socket" to query maps via TCP/IP sockets. - Connection rate control as well as control over the number of incoming open connections. - Several LDAP enhancements such as LDAP recursion and LDAP URI support. - Message quarantining. - AUTH EXTERNAL will only be enabled if STARTTLS was successful and the client has been authenticated, i.e., {verify} is OK. - Basic support for certificate revocation lists. - New queue timeouts for DSN messages. - Experimental support for MTAMark. For a full list of changes see: - http://www.sendmail.org/8.13.0.html - http://www.sendmail.org/8.13.1.html
2004-08-30 22:16:28 +02:00
###
.if !empty(PKG_OPTIONS:Mdb2)
standardize whitespace in .include directives
2005-07-02 03:12:52 +02:00
. include "../../databases/db/buildlink3.mk"
Update to sendmail 8.14.9: this fixes a minor potential security issue pkgsrc changes: - consolidate several patches into site.config.m4 - pkgsrc LDFLAGS should always be used - don't bother specifying file owner/group anywhere except in Makefile - create include/sm/os/sm_os_netbsd.h to fix warnings and OS specific stuff - install mail.local and rmail - convert to use res_n* functions - allows for linking against threaded libraries - add a TODO file - PR/35249 - Loren M. Lang - can't find libraries on Linux, this should be fixed by using pkgsrc LDFLAGS - PR/46694 - Makoto Fujiwara - bring back netbsd-proto.mc from when sendmail was part of the base system - PR/47207 - Richard Palo - let pkgsrc infrastructure handle file ownership and group - PR/48566 - Emmanuel Dreyfus - always set _FFR_USE_GETPWNAM_ERRNO on NetBSD - roll ffr_tls_1 and the suggested ffr_tls_ec into one new ffr_tls option - not enabled by default because it changes behaviour 8.14.9/8.14.9 2014/05/21 SECURITY: Properly set the close-on-exec flag for file descriptors (except stdin, stdout, and stderr) before executing mailers. Fix a misformed comment in conf.c: "/*" within comment which may cause a compilation error on some systems. Problem reported by John Beck of Oracle. DEVTOOLS: Fix regression in auto-detection of libraries when only shared libraries are available. Problem reported by Bryan Costales.
2014-06-15 22:48:49 +02:00
.elif !empty(PKG_OPTIONS:Mdb4)
. include "../../databases/db4/buildlink3.mk"
Update of sendmail to 8.13.1 pkgsrc changes: - move to use options.mk framework - solaris support tidy-up - fix linux man page extension handling bug - allow for a user defined smrsh directory - update MASTER_SITES - optional SOCKETMAP support and sample script installation - ok'ed snj@/wiz@ Summary of some of the major changes include: - New map "socket" to query maps via TCP/IP sockets. - Connection rate control as well as control over the number of incoming open connections. - Several LDAP enhancements such as LDAP recursion and LDAP URI support. - Message quarantining. - AUTH EXTERNAL will only be enabled if STARTTLS was successful and the client has been authenticated, i.e., {verify} is OK. - Basic support for certificate revocation lists. - New queue timeouts for DSN messages. - Experimental support for MTAMark. For a full list of changes see: - http://www.sendmail.org/8.13.0.html - http://www.sendmail.org/8.13.1.html
2004-08-30 22:16:28 +02:00
.endif
###
### Use OpenLDAP for remote database access
###
.if !empty(PKG_OPTIONS:Mldap)
The databases/openldap package has been split in -client and -server component packages. Convert LDAP-based applications to depend on openldap-client, and bump PKGREVISION for those that depend on it by default.
2006-05-31 20:22:23 +02:00
. include "../../databases/openldap-client/buildlink3.mk"
Update of sendmail to 8.13.1 pkgsrc changes: - move to use options.mk framework - solaris support tidy-up - fix linux man page extension handling bug - allow for a user defined smrsh directory - update MASTER_SITES - optional SOCKETMAP support and sample script installation - ok'ed snj@/wiz@ Summary of some of the major changes include: - New map "socket" to query maps via TCP/IP sockets. - Connection rate control as well as control over the number of incoming open connections. - Several LDAP enhancements such as LDAP recursion and LDAP URI support. - Message quarantining. - AUTH EXTERNAL will only be enabled if STARTTLS was successful and the client has been authenticated, i.e., {verify} is OK. - Basic support for certificate revocation lists. - New queue timeouts for DSN messages. - Experimental support for MTAMark. For a full list of changes see: - http://www.sendmail.org/8.13.0.html - http://www.sendmail.org/8.13.1.html
2004-08-30 22:16:28 +02:00
.endif
###
### Use SASL/v2 for SMTP AUTH
###
.if !empty(PKG_OPTIONS:Msasl)
Update path from cyrus-sasl2 to cyrus-sasl.
2006-04-13 23:45:12 +02:00
. include "../../security/cyrus-sasl/buildlink3.mk"
Update of sendmail to 8.13.1 pkgsrc changes: - move to use options.mk framework - solaris support tidy-up - fix linux man page extension handling bug - allow for a user defined smrsh directory - update MASTER_SITES - optional SOCKETMAP support and sample script installation - ok'ed snj@/wiz@ Summary of some of the major changes include: - New map "socket" to query maps via TCP/IP sockets. - Connection rate control as well as control over the number of incoming open connections. - Several LDAP enhancements such as LDAP recursion and LDAP URI support. - Message quarantining. - AUTH EXTERNAL will only be enabled if STARTTLS was successful and the client has been authenticated, i.e., {verify} is OK. - Basic support for certificate revocation lists. - New queue timeouts for DSN messages. - Experimental support for MTAMark. For a full list of changes see: - http://www.sendmail.org/8.13.0.html - http://www.sendmail.org/8.13.1.html
2004-08-30 22:16:28 +02:00
.endif
###
### Use OpenSSL libraries for SMTP STARTTLS support
###
- Move option from "starttls" to "tls" as pointed out by schmonz@ in private email. - Use PKG_OPTIONS_LEGACY_OPTS to deal with the change.
2005-07-18 23:33:24 +02:00
.if !empty(PKG_OPTIONS:Mtls)
standardize whitespace in .include directives
2005-07-02 03:12:52 +02:00
. include "../../security/openssl/buildlink3.mk"
Update of sendmail to 8.13.1 pkgsrc changes: - move to use options.mk framework - solaris support tidy-up - fix linux man page extension handling bug - allow for a user defined smrsh directory - update MASTER_SITES - optional SOCKETMAP support and sample script installation - ok'ed snj@/wiz@ Summary of some of the major changes include: - New map "socket" to query maps via TCP/IP sockets. - Connection rate control as well as control over the number of incoming open connections. - Several LDAP enhancements such as LDAP recursion and LDAP URI support. - Message quarantining. - AUTH EXTERNAL will only be enabled if STARTTLS was successful and the client has been authenticated, i.e., {verify} is OK. - Basic support for certificate revocation lists. - New queue timeouts for DSN messages. - Experimental support for MTAMark. For a full list of changes see: - http://www.sendmail.org/8.13.0.html - http://www.sendmail.org/8.13.1.html
2004-08-30 22:16:28 +02:00
.endif
Add a ffr_tls_1 option to sendmail, which enable the O CipherList option for sendmail.cf. it is required in order to remove weak ciphers, and enforce Forward Secrecy on modern MUA Usage example: O CipherList=DH@STRENGTH:HIGH:!MD5:!DES:!aNULL:!eNULL
2013-09-19 12:54:05 +02:00
###
Add sendmail-ffr-badrcptshutdown option. This option enables the sendmail options BadRcptShutdown and BadRcptShutdownGood to be used. "ffr" stands for For Future Release, which means it is a beta test feature that may show up in a future release of sendmail. The sendmail-ffr-badrcptshutdown option is disabled by default so no change to binary packages, thus not bumping PKGREVISION.
2019-07-15 04:06:42 +02:00
### 'For Future Release' _FFR_TLS_* options: CipherList, multiple certs
###
# Nothing to do here, activation is done in Makefile
###
### 'For Future Release' _FFR_BADRCPT_SHUTDOWN options:
### BadRcptShutdown, BadRcptShutdownGood
Add a ffr_tls_1 option to sendmail, which enable the O CipherList option for sendmail.cf. it is required in order to remove weak ciphers, and enforce Forward Secrecy on modern MUA Usage example: O CipherList=DH@STRENGTH:HIGH:!MD5:!DES:!aNULL:!eNULL
2013-09-19 12:54:05 +02:00
###
# Nothing to do here, activation is done in Makefile
Update of sendmail to 8.13.1 pkgsrc changes: - move to use options.mk framework - solaris support tidy-up - fix linux man page extension handling bug - allow for a user defined smrsh directory - update MASTER_SITES - optional SOCKETMAP support and sample script installation - ok'ed snj@/wiz@ Summary of some of the major changes include: - New map "socket" to query maps via TCP/IP sockets. - Connection rate control as well as control over the number of incoming open connections. - Several LDAP enhancements such as LDAP recursion and LDAP URI support. - Message quarantining. - AUTH EXTERNAL will only be enabled if STARTTLS was successful and the client has been authenticated, i.e., {verify} is OK. - Basic support for certificate revocation lists. - New queue timeouts for DSN messages. - Experimental support for MTAMark. For a full list of changes see: - http://www.sendmail.org/8.13.0.html - http://www.sendmail.org/8.13.1.html
2004-08-30 22:16:28 +02:00
###
### Use tcpwrappers for network access control to sendmail
###
.if !empty(PKG_OPTIONS:Mtcpwrappers)
standardize whitespace in .include directives
2005-07-02 03:12:52 +02:00
. include "../../security/tcp_wrappers/buildlink3.mk"
Update of sendmail to 8.13.1 pkgsrc changes: - move to use options.mk framework - solaris support tidy-up - fix linux man page extension handling bug - allow for a user defined smrsh directory - update MASTER_SITES - optional SOCKETMAP support and sample script installation - ok'ed snj@/wiz@ Summary of some of the major changes include: - New map "socket" to query maps via TCP/IP sockets. - Connection rate control as well as control over the number of incoming open connections. - Several LDAP enhancements such as LDAP recursion and LDAP URI support. - Message quarantining. - AUTH EXTERNAL will only be enabled if STARTTLS was successful and the client has been authenticated, i.e., {verify} is OK. - Basic support for certificate revocation lists. - New queue timeouts for DSN messages. - Experimental support for MTAMark. For a full list of changes see: - http://www.sendmail.org/8.13.0.html - http://www.sendmail.org/8.13.1.html
2004-08-30 22:16:28 +02:00
.endif
###
### IPv6 support.
###
.if !empty(PKG_OPTIONS:Minet6)
.endif
Add support for working with blacklistd. These patches were originally created for FreeBSD and were ported to pkgsrc by Hauke Fath with some cleanup by myself. These patches add a new "UseBlacklist" option to sendmail to have it send authentication failure notices to blacklistd.
2019-07-15 06:32:49 +02:00
###
### NetBSD blacklistd(8) support.
###
# Nothing to do here, activation is done in Makefile
Reference in a new issue Copy permalink