3aafb73dc2
Remove unneeded options: - Unconditionally apply netqmail (which includes a local patch; remove it) - Unconditionally apply bigdns, maildiruniq, outgoingip, rcptcheck, remote - Unconditionally apply the TLS + SMTP AUTH _patch_ (not the options) - Record all applied patches (mandatory and optional) in QMAILPATCHES - Remove badrcptto, qregex, realrcptto, viruscan (moved to rejectutils) Simplify packaging: - Extract a standalone patch <https://schmonz.com/qmail/rejectutils> to repackage the mutually conflicting recipient- and content-checking patches as separate programs, along with wrappers for running checks in sequence - Extract a standalone patch <https://schmonz.com/qmail/destdir> to build to a staging area, as non-root, without hardcoded IDs - Run the destdir patch's `install-destdir` to make or repair the queue and set special file permissions, obviating the need for a dependency on mail/queue-fix and handcrafted SPECIAL_PERMS - While here, run `instcheck` to ensure we've installed just like `make setup check` as root would have - Install INSTALL and SENDMAIL docs under their original names, even on Darwin - Avoid building catpages, since we don't install them, and remove nroff from USE_TOOLS Default-enable more useful options: - "eai" (new) permits UTF-8 almost everywhere in email - "qmail-rejectutils" (new) adds several tools for selectively rejecting messages - "syncdir" forces synchronous link() and related syscalls - "tls" and "sasl", instead of causing patch conflicts, cause the TLS and SMTP AUTH code to be included (!) |
||
---|---|---|
.. | ||
README.pkgsrc | ||
README.srs |
Configuring SRS =============== You've applied a Sender Rewriting Scheme patch to your qmail installation. It is documented more fully by its author here: <URL:http://www.mco2.com.br/opensource/qmail/srs/> For qmail to SRS-rewrite your outgoing mail: # echo "srs.$YOURDOMAIN" > @PKG_SYSCONFDIR@/control/srs_domain # echo "$SECRET" > @PKG_SYSCONFDIR@/control/srs_secrets For qmail to accept and SRS-check your incoming mail: # echo "srs.$YOURDOMAIN" >> @PKG_SYSCONFDIR@/control/rcpthosts # echo "srs.$YOURDOMAIN:srs" >> @PKG_SYSCONFDIR@/control/virtualdomains # echo "| @PREFIX@/bin/srsfilter" > @PKG_SYSCONFDIR@/alias/.qmail-srs-default For other MTAs to deliver mail to your SRS subdomain: - Create a DNS MX record for "srs.$YOURDOMAIN" pointing to your qmail host. Optional configuration parameters: Maximum permitted age of a rewritten address, in days (libsrs2 defaults to 21): # echo 7 > @PKG_SYSCONFDIR@/control/srs_maxage Length of generated hash in a rewritten address (longer is more secure): # echo 4 > @PKG_SYSCONFDIR@/control/srs_hashlength Minimum length of hash to require when checking an address (can be shorter): # echo 4 > @PKG_SYSCONFDIR@/control/srs_hashmin Separator to appear after SRS[01] in rewritten addresses (-, +, or =): # echo = > @PKG_SYSCONFDIR@/control/srs_separator Skip rcpthosts check and SRS-rewrite all forwarding (1 to enable): # echo 0 > @PKG_SYSCONFDIR@/control/srs_alwaysrewrite Environment variables: With this patch, by default, qmail-inject rewrites the envelope sender if and only if EXT and HOST are set. To always rewrite, even if EXT and HOST are not set, set QMAILINJECT_FORCE_SRS. To never rewrite, even if EXT and HOST are set, set QMAILINJECT_SKIP_SRS. More about SRS: - <URL:http://www.openspf.org/SRS> - <URL:http://www.libsrs2.org/> - <URL:http://wooledge.org/~greg/qmail-srs.html>