Path: senator-bedfellow.mit.edu!bloom-beacon.mit.edu!gatech!newsxfer.itd.umich.edu!news.cic.net!locust.cic.net!pauls From: pauls@CIC.Net Newsgroups: comp.mail.sendmail,comp.mail.misc,comp.answers,news.answers Subject: comp.mail.sendmail Frequently Asked Questions (FAQ) Followup-To: comp.mail.sendmail Date: 27 Jun 1995 04:59:51 GMT Organization: CICNet, Inc. Lines: 709 Approved: news-answers-request@MIT.Edu Distribution: world Expires: 08/01/95 01:00:01 Message-ID: <3so387$mjn@spruce.cic.net> Reply-To: sendmail-faq@birch.ims.disa.mil (Sendmail FAQ Maintainers) NNTP-Posting-Host: locust.cic.net Summary: This posting contains a list of Frequently Asked Questions (and their answers) about the program "sendmail", distributed with many versions of Unix (and available for some other operating systems). This FAQ is shared between comp.mail.sendmail and the Sendmail V8 distribution. It should be read by anyone who wishes to post to comp.mail.sendmail, or anyone having questions about the newsgroup itself. Keywords: sendmail mail SMTP FAQ X-Posting-Frequency: posted on the 27th of each month Originator: pauls@locust.cic.net Xref: senator-bedfellow.mit.edu comp.mail.sendmail:21672 comp.mail.misc:24425 comp.answers:12729 news.answers:47113 Posted-By: auto-faq 3.1.1.2 Archive-name: mail/sendmail-faq [The most recent copy of this document can be obtained via anonymous FTP from rtfm.mit.edu in /pub/usenet/news.answers/mail/sendmail-faq. If you do not have access to anonymous FTP, you can retrieve it by sending email to mail-server@rtfm.mit.edu with the command "send usenet/news.answers/mail/sendmail-faq" in the message.] comp.mail.sendmail Frequently Asked Questions Last updated 2 Jun 1995 This FAQ is centered around sendmail V8 (8.6.12 being the most recent released version AFAIK, with 8.7 in early beta). As of yet, it makes no attempt to cover other versions of sendmail in any depth, although certain other versions do get mentioned in passing. Comments should be sent to Note that much of this document is copied verbatim from the FAQ developed by Eric Allman for sendmail V8, although these two documents are continuing to diverge. I've tried to be very careful to emulate his style and tone, so that this document has a consistent "feel" to it. Unfortunately, I may not have completely succeeded and where he may have been succint, I may have come across as terse (or worse). I apologize in advance for anyone who is offended, but this document is currently targeted towards the experienced Unix System Administrator/Domain Administrator/Postmaster, and therefore much has been omitted in the interest of brevity (perhaps too much, at least on my part). With several major overhauls scheduled (including at least one complete re-write), this situation will hopefully improve dramatically, but you have to bear with me for the nonce. -Brad Knowles comp.mail.sendmail FAQ Coordinator ====================================================================== BEFORE YOU GO ANY FURTHER ====================================================================== * What do you wish everyone would do before sending you mail or posting to comp.mail.sendmail? Read this FAQ completely. If they're posting a question about Sendmail V8, read src/READ_ME and cf/README completely. Read the books written to help with common problems such as compilation and installation, configuration, security issues, etc.... Ask themselves if their question hasn't already been answered. ---------------------------------------------------------------------- * How can I be sure if this is the right place to look for answers to my questions? 1. Do you know, for a fact, that the question is related to the Unix program "sendmail"? 2. Is the question about a sendmail-like program (e.g., Smail, Zmailer, MMDF, etc...)? 3. Is the question about an SMTP Gateway product for a LAN mail package (e.g., cc:Mail, MS-Mail, WordPerfect Office/GroupWise, etc...) or a POP/IMAP client program (e.g., Eudora, Pegasus, Z-Mail, etc...)? If you answered "yes" to the question #1, then this is the right place. If you're not using the most recent version of sendmail V8, be prepared for a lot of answers that amount to "Get V8". V8 doesn't solve every single sendmail problem that exists (properly configured or not), but it is the area of heaviest current development and solves a long laundry list of problems that previous versions of sendmail have. If you answered "yes" to question #2 and are not going to upgrade to sendmail (presumably V8), then this is probably not the right place to look. I recommend looking elsewhere in the "comp.mail.*" hierarchy and seeing if there is a newsgroup that might be more appropriate (comp.mail.smail, comp.mail.misc, etc...). If you answered "yes" to question #3, then this is certainly not the right place to look. Look around elsewhere in the "comp.mail.*" or "comp.*" hierarchy for a more appropriate newsgroup. You may also find some useful information in ftp://rtfm.mit.edu:/pub/usenet/news.answers/mail/mailclients-faq (put together by Paul Southworth from various sources on comp.mail.misc). Note that Z-Mail now has it's own newsgroup, comp.mail.zmail. If you couldn't answer "yes" to any of the above questions, then you're DEFINITELY in the wrong place. For the sake of your sanity and ego, not to mention avoiding the waste of your time and ours, try asking your System or E-Mail Administrator(s) before you post any questions publicly. ---------------------------------------------------------------------- * Where can I find the latest version of this FAQ? The most recent version is available via anonymous ftp to rtfm.mit.edu in /pub/usenet/news.answers/mail/sendmail-faq. If you do not have access to anonymous FTP, you can retrieve it by sending email to mail-server@rtfm.mit.edu with the command "send usenet/news.answers/mail/sendmail-faq" in the message. ---------------------------------------------------------------------- * I don't have access to Usenet news. Can I still get access to comp.mail.sendmail? Yes. Send email to mxt@dl.ac.uk with the command "sub comp-news.comp.mail.sendmail " in the message. E-mail you want posted on comp.mail.sendmail should be sent to comp-mail-sendmail@dl.ac.uk ---------------------------------------------------------------------- * I have sendmail-related DNS questions. Where should I ask them? Depending on how deeply they get into the DNS, they can be asked here. However, you'll probably be told that you should send them to the Info-BIND mailing list (if the question is specific to that program) or to the Usenet newsgroup comp.protocols.tcp-ip.domains (DNS in general). ---------------------------------------------------------------------- * How do I subscribe to either of these? For comp.protocols.tcp-ip.domains, you have to be on Usenet. So far as we know, they don't have a news-to-mail gateway yet. They do have a FAQ, and it can be found at For the Info-BIND mailing list, send email to bind-request@uunet.uu.net with the command "subscribe" in the message. Submissions should be sent to bind@uunet.uu.net ====================================================================== TO DO (in no particular order) ====================================================================== Table of Contents Restructure content (outline format) Index Additional net resources (web pages, anonymous ftp sites, etc...) Annotated bibliography (including RFCs and comments/corrections for books specific to sendmail) Reorganize by platform/version of sendmail (All Sun questions in one section, all AIX questions in another, etc...) ====================================================================== GENERAL QUESTIONS ====================================================================== * Where can I get Version 8? Via anonymous FTP from FTP.CS.Berkeley.EDU in /ucb/sendmail. ---------------------------------------------------------------------- * What are the differences between Version 8 and other versions? See doc/changes/changes.me in the sendmail V8 distribution. ---------------------------------------------------------------------- * What books are available describing sendmail? There are two books available devoted to sendmail: Costales, Allman, and Rickert, _Sendmail_. O'Reilly & Associates. Avolio & Vixie, _Sendmail: Theory and Practice_. Digital Press. Several books have sendmail chapters, for example: Nemeth, Snyder, and Seebass, _Unix System Administration Handbook_. Prentice-Hall. Carl-Mitchell and Quarterman, _Practical Internetworking with TCP/IP and UNIX_. Addison-Wesley. Hunt, _TCP/IP Network Administration_. O'Reilly & Associates. For details on sendmail-related DNS issues, consult: Liu and Albitz, _DNS and BIND_. O'Reilly & Associates. For details on UUCP, see: O'Reilly and Todino, _Managing UUCP and Usenet_. O'Reilly & Associates. ====================================================================== CONFIGURATION QUESTIONS (V8 unless otherwise indicated) ====================================================================== * How do I make all my addresses appear to be from a single host? Using the m4 macros, use: MASQUERADE_AS(my.dom.ain) This will cause all addresses to be sent out as being from the indicated domain. On your mailhub/mailhost/Domain Mail eXchanger, you may need to add "my.dom.ain" to the sendmail.cw file or the "Cwhost.my.dom.ain" line in the sendmail.cf file. ---------------------------------------------------------------------- * How do I rewrite my From: lines to read ``First_Last@My.Domain''? There are a couple of ways of doing this. This describes using the "user database" code. This is still experimental, and was intended for a different purpose -- however, it does work with a bit of care. It does require that you have the Berkeley "db" package installed (it won't work with DBM). First, create your input file. This should have lines like: loginname:mailname First_Last First_Last:maildrop loginname Install it in (say) /etc/userdb. Create the database: makemap btree /etc/userdb.db < /etc/userdb You can then create a config file that uses this. You will have to include the following in your .mc file: define(confUSERDB_SPEC, /etc/userdb.db) FEATURE(notsticky) ---------------------------------------------------------------------- * So what was the user database feature intended for? The intent was to have all information for a given user (where the user is the unique login name, not an inherently non-unique full name) in one place. This would include phone numbers, addresses, and so forth. The "maildrop" feature is because Berkeley does not use a centralized mail server (there are a number of reasons for this that are mostly historic), and so we need to know where each user gets his or her mail delivered -- i.e., the mail drop. We are in the process of setting up our environment so that mail sent to an unqualified "name" goes to that person's preferred maildrop; mail sent to "name@host" goes to that host. The purpose of "FEATURE(notsticky)" is to cause "name@host" to be looked up in the user database for delivery to the maildrop. ---------------------------------------------------------------------- * Why are you so hostile to using full names for e-mail addresses? Because full names are not unique. For example, the computer community has two Andy Tannenbaums and two Peter Deutsches. At one time, Bell Labs had two Stephen R. Bournes with offices a few doors apart. You can create alternative addresses (e.g., Stephen_R_Bourne_2), but that's even worse -- which one of them has to have their name desecrated in this way? And you can bet that one of them will get most of the other person's e-mail. So called "full names" are just an attempt to create longer versions of unique names. Rather that lulling people into a sense of security, I'd rather that it be clear that these handles are arbitrary. People should use good user agents that have alias mappings so that they can attach arbitrary names for their personal use to those with whom they correspond (such as the MH alias file). Even worse is fuzzy matching in e-mail -- this can make good addresses turn bad. For example, Eric Allman is currently (to the best of our knowledge) the only ``Allman'' at Berkeley, so mail sent to "Allman@Berkeley.EDU" should get to him. But if another Allman ever appears, this address could suddenly become ambiguous. He's been the only Allman at Berkeley for over fifteen years -- to suddenly have this "good address" bounce mail because it is ambiguous would be a heinous wrong. Finger services should be as fuzzy as possible (within reason, of course). Mail services should be unique. ---------------------------------------------------------------------- * Should I use a wildcard MX for my domain? If at all possible, no. Wildcard MX records have lots of semantic "gotcha"s. For example, they will match a host "unknown.your.domain" -- if you don't explicitly test for unknown hosts in your domain, you will get "config error: mail loops back to myself" errors. See RFCs 1535-1537 for more detail and other related (or common) problems. ---------------------------------------------------------------------- * How can I get sendmail to process messages sent to an account and send the results back to the originator? This is a local mailer issue, not a sendmail issue. Depending on what you're doing, look at procmail (mentioned again below), ftpmail, or Majordomo. Check your local archie server to see what machine(s) nearest you have the most recent versions of these programs. ---------------------------------------------------------------------- * How can I get sendmail to deliver local mail to $HOME/.mail instead of into /usr/spool/mail (or /usr/mail)? Again, this is a local mailer issue, not a sendmail issue. Either modify your local mailer (source code will be required) or change the program called in the "local" mailer configuration description to be a new program that does this local delivery. One program that is capable of doing this is "procmail", although there are probably many others as well. You might be interested in reading the paper ``HLFSD: Delivering Email to your $HOME'' available in the Proceedings of the USENIX System Administration (LISA VII) Conference (November 1993). This is also available via public FTP from ftp.cs.columbia.edu in /pub/hlfsd/{README.hlfsd,hlfsd.ps}. ---------------------------------------------------------------------- * I'm trying to to get my mail to go into queue only mode, and it delivers the mail interactively anyway. (Or, I'm trying to use the "don't deliver to expensive mailer" flag, and it delivers the mail interactively anyway.) I can see it does it: here's the output of "sendmail -v foo@somehost" (or Mail -v or equivalent). The -v flag to sendmail (which is implied by the -v flag to Mail and other programs in that family) tells sendmail to watch the transaction. Since you have explicitly asked to see what's going on, it assumes that you do not want to to auto-queue, and turns that feature off. Remove the -v flag and use a "tail -f" of the log instead to see what's going on. If you are trying to use the "don't deliver to expensive mailer" flag (mailer flag "e"), be sure you also turn on global option "c" -- otherwise it ignores the mailer flag. ---------------------------------------------------------------------- * There are four UUCP mailers listed in the configuration files. Which one should I use? The choice is partly a matter of local preferences and what is running at the other end of your UUCP connection. Unlike good protocols that define what will go over the wire, UUCP uses the policy that you should do what is right for the other end; if they change, you have to change. This makes it hard to do the right thing, and discourages people from updating their software. In general, if you can avoid UUCP, please do. If you can't avoid it, you'll have to find the version that is closest to what the other end accepts. Following is a summary of the UUCP mailers available. uucp-old (obsolete name: "uucp") This is the oldest, the worst (but the closest to UUCP) way of sending messages across UUCP connections. It does bangify everything and prepends $U (your UUCP name) to the sender's address (which can already be a bang path itself). It can only send to one address at a time, so it spends a lot of time copying duplicates of messages. Avoid this if at all possible. uucp-new (obsolete name: "suucp") The same as above, except that it assumes that in one rmail command you can specify several recipients. It still has a lot of other problems. uucp-dom This UUCP mailer keeps everything as domain addresses. Basically, it uses the SMTP mailer rewriting rules. Unfortunately, a lot of UUCP mailer transport agents require bangified addresses in the envelope, although you can use domain-based addresses in the message header. (The envelope shows up as the From_ line on UNIX mail.) So.... uucp-uudom This is a cross between uucp-new (for the envelope addresses) and uucp-dom (for the header addresses). It bangifies the envelope sender (From_ line in messages) without adding the local hostname, unless there is no host name on the address at all (e.g., "wolf") or the host component is a UUCP host name instead of a domain name ("somehost!wolf" instead of "some.dom.ain!wolf"). Examples: We are on host grasp.insa-lyon.fr (UUCP host name "grasp"). The following summarizes the sender rewriting for various mailers. Mailer sender rewriting in the envelope ------ ------ ------------------------- uucp-{old,new} wolf grasp!wolf uucp-dom wolf wolf@grasp.insa-lyon.fr uucp-uudom wolf grasp.insa-lyon.fr!wolf uucp-{old,new} wolf@fr.net grasp!fr.net!wolf uucp-dom wolf@fr.net wolf@fr.net uucp-uudom wolf@fr.net fr.net!wolf uucp-{old,new} somehost!wolf grasp!somehost!wolf uucp-dom somehost!wolf somehost!wolf@grasp.insa-lyon.fr uucp-uudom somehost!wolf grasp.insa-lyon.fr!somehost!wolf ====================================================================== RESOLVING PROBLEMS (V8 unless otherwise specified) ====================================================================== * When I compile, I get "undefined symbol inet_aton" and "undefined symbol _strerror" messages. You've probably replaced your resolver with the version from BIND 4.9.3. You need to compile with -l44bsd in order to get the additional routines. ---------------------------------------------------------------------- * I'm getting "Local configuration error" messages, such as: 553 relay.domain.net config error: mail loops back to myself 554 ... Local configuration error How can I solve this problem? You have asked mail to the domain (e.g., domain.net) to be forwarded to a specific host (in this case, relay.domain.net) by using an MX record, but the relay machine doesn't recognize itself as domain.net. Add domain.net to /etc/sendmail.cw (if you are using FEATURE(use_cw_file)) or add "Cw domain.net" to your configuration file. IMPORTANT: Be sure you kill and restart the sendmail daemon after you change the configuration file (for ANY change in the configuration, not just this one): kill `head -1 /etc/sendmail.pid` sh -c "`tail -1 /etc/sendmail.pid`" NOTA BENE: kill -1 does not work! ---------------------------------------------------------------------- * When I use sendmail V8 with a Sun config file I get lines like: /etc/sendmail.cf: line 273: replacement $3 out of bounds the line in question reads: R$*<@$%y>$* $1<@$2.LOCAL>$3 user@ether what does this mean? How do I fix it? V8 doesn't recognize the Sun "$%y" syntax, so as far as it is concerned, there is only a $1 and a $2 (but no $3) in this line. Read Rick McCarty's paper on "Converting Standard Sun Config Files to Sendmail Version 8", in the contrib directory (file "converting.sun.configs") in the latest sendmail V8 distribution for a full discussion of how to do this. ---------------------------------------------------------------------- * When I use sendmail V8 on a Sun, I sometimes get lines like: /etc/sendmail.cf: line 445: bad ruleset 96 (50 max) what does this mean? How do I fix it? You're somehow trying to start up the old Sun sendmail (or sendmail.mx) with a sendmail V8 config file, which Sun's sendmail doesn't like. Check your /etc/rc.local, any procedures that have been created to stop and re-start the sendmail processes, etc.... Make sure that you've switched everything over to using the new sendmail. To keep this problem from ever happening again, try the following: mv /usr/lib/sendmail /usr/lib/sendmail.old ln -s /usr/local/lib/sendmail.v8 /usr/lib/sendmail mv /usr/lib/sendmail.mx /usr/lib/sendmail.mx.old ln -s /usr/local/lib/sendmail.v8 /usr/lib/sendmail.mx chmod 0000 /usr/lib/sendmail.old chmod 0000 /usr/lib/sendmail.mx.old Assuming you have installed sendmail V8 in /usr/local/lib. ---------------------------------------------------------------------- * When I use sendmail V8 on an IBM RS/6000 running AIX, the system resource controller always reports sendmail as "inoperative" even though it is running. What's wrong? When running as a daemon, sendmail detaches from its parent process, fooling the SRC into thinking that sendmail has exited. To fix this, issue the commands: kill `head -1 /etc/sendmail.pid` chssys -s sendmail -f 9 -n 15 -S -a "-d0.1" startsrc -s sendmail -a "-bd -q30m" # your sendmail args may vary Now the SRC should report the correct status of sendmail. A side-effect of the "-d0.1" option is that a few lines of debug output will be printed on the system console every time sendmail starts up. For more information, read up on the System Resource Controller, the lssrc command and the chssys command in the online documentation. ---------------------------------------------------------------------- * When I use sendmail V8 on an Intel x86 machine running Linux, I have some problems. Specifically.... The current versions of Linux are generally considered to be great for hobbyists and anyone else who wants to learn Unix inside and out, or wants to always have something to do, or wants a machine for light-duty mostly personal use and not high-volume multi-user purposes. However, for those who want a system that will just sit in the background and work without a fuss handling thousands of mail messages a day for lots of different users, it's not (yet) stable enough to fit the bill. Unfortunately, there are no known shareware/freeware implementations of any operating system that provides the level of stability necessary to handle that kind of load (i.e., there are no free lunches). If you're wedded to the Intel x86 platform and want to run sendmail, we suggest you look at commercial implementations of Unix such as Interactive, UnixWare, Solaris, or BSD/386 (just a sample of the dozens of different versions of Unix for Intel x86). Of all known vendor supported versions of Unix for Intel x86, BSDI's BSD/386 is least expensive and the only one known to currently ship with sendmail V8 pre-installed. Since sendmail V8 is continuing to be developed at UC Berkeley, and BSD/386 is a full BSD 4.4 implementation, this is obviously be the most "native" sendmail V8 environment. ---------------------------------------------------------------------- * When I use sendmail on an Intel x86 machine running OS/2, I have some problems. Specifically, I have.... The OS/2 port of sendmail is known to have left out huge chunks of the code and functionality of even much older versions of sendmail, in large part because the underlying OS just doesn't have the necessary hooks to make it happen. This port is so broken that we make no attempt to provide any kind of support for it. Try BSDI's BSD/386 instead. ---------------------------------------------------------------------- * I'm connected to the network via a SLIP/PPP link. Sometimes my sendmail process hangs (although it looks like part of the message has been transfered). Everything else works. What's wrong? Most likely, the problem isn't sendmail at all, but the low level network connection. It's important that the MTU (Maximum Transfer Unit) for the SLIP connection be set properly at both ends. If they disagree, large packets will be trashed and the connection will hang. ---------------------------------------------------------------------- * I just upgraded to 8.x and suddenly I'm getting messages in my syslog of the form "collect: I/O error on connection". What is going wrong? Nothing. This is just a diagnosis of a condition that had not been diagnosed before. If you are getting a lot of these from a single host, there is probably some incompatibility between 8.x and that host. If you get a lot of them in general, you may have network problems that are causing connections to get reset. ---------------------------------------------------------------------- * I just upgraded to 8.x and now when my users try to forward their mail to a program they get an "illegal shell" message and their mail is not delivered. What's wrong? In order for people to be able to run a program from their .forward file, 8.x insists that their shell (that is, the shell listed for that user in the passwd entry) be a "valid" shell, meaning a shell listed in /etc/shells. If /etc/shells does not exist, a default list is used, typically consisting of /bin/sh and /bin/csh. This is to support environments that may have NFS-shared directories mounted on machines on which users do not have login permission. For example, many people make their file server inaccessible for performance or security reasons; although users have directories, their shell on the server is /usr/local/etc/nologin or some such. If you allowed them to run programs anyway you might as well let them log in. If you are willing to let users run programs from their .forward file even though they cannot telnet or rsh in (as might be reasonable if you run smrsh to control the list of programs they can run) then add the line /SENDMAIL/ANY/SHELL/ to /etc/shells. This must be typed exactly as indicated, in caps, with the trailing slash. NOTA BENE: DO NOT list /usr/local/etc/nologin in /etc/shells -- this will open up other security problems. ---------------------------------------------------------------------- * I just upgraded to 8.x and suddenly connections to the SMTP port take a long time. What is going wrong? It's probably something weird in your TCP implementation that makes the IDENT code act oddly. On most systems V8 tries to do a ``callback'' to the connecting host to get a validated user name (see RFC 1413 for detail). If the connecting host does not support such a service it will normally fail quickly with "Connection refused", but certain kinds of packet filters and certain TCP implementations just time out. To test this, set the IDENT timeout to zero using: define(`confREAD_TIMEOUT',`Ident=0')dnl in the .mc file used by m4 to generate your sendmail.cf file. Alternatively, if you don't use m4, you can put ``OrIdent=0'' in the configuration file (we recommend the m4 solution, since that makes maintenance much easier for people who don't understand sendmail re-write rules, or after you've been away from it for a while). Either way, this will completely disable all use of the IDENT protocol. Another possible problem is that you have your name server and/or resolver configured improperly. Make sure that all "nameserver" entries in /etc/resolv.conf point to functional servers. If you are running your own server make certain that all the servers listed in your root cache (usually called something like "/var/namedb/root.cache"; see your /etc/named.boot file to get your value) are up to date. Either of these can cause long delays. ---------------------------------------------------------------------- * I just upgraded to 8.x and suddenly I get errors such as ``unknown mailer error 5 -- mail: options MUST PRECEDE recipients.'' What is going wrong? You need OSTYPE(systype) in your .mc file -- otherwise the configurations use a default that probably disagrees with your local mail system. See cf/README for details. ---------------------------------------------------------------------- * Under V8, the "From " header gets mysteriously munged when I send to an alias. ``It's not a bug, it's a feature.'' This happens when you have a "owner-list" alias and you send to "list". V8 propagates the owner information into the envelope sender field (which appears as the "From " header on UNIX mail or as the Return-Path: header) so that downstream errors are properly returned to the mailing list owner instead of to the sender. In order to make this appear as sensible as possible to end users, I recommend making the owner point to a "request" address -- for example: list: :include:/path/name/list.list owner-list: list-request list-request: eric This will make message sent to "list" come out as being "From list-request" instead of "From eric". ---------------------------------------------------------------------- * I am trying to use MASQUERADE_AS (or the user database) to rewrite from addresses, and although it works in the From: header line, it doesn't work in the envelope (e.g., the "From " line). Believe it or not, this is intentional. The interpretation of the standards by the V8 development group was that this was an inappropriate rewriting, and that if the rewriting were incorrect at least the envelope would contain a valid return address. Other people have since described scenarios where the envelope cannot be correct without this rewriting, so 8.7 will have an option to rewrite both header and envelope. ---------------------------------------------------------------------- * I want to run Sendmail version 8 on my DEC system, but you don't have MAIL11V3 support in sendmail. How do I handle this? Get the reimplementation of the mail11 protocol by Keith Moore from gatekeeper.dec.com in /pub/DEC/gwtools (with contributions from Paul Vixie). Rumour has it that Paul will be fully integrating into sendmail V8 what little is left of IDA sendmail that is not handled (or handled as well) by V8. No additional information on this project is currently available. ---------------------------------------------------------------------- * Messages seem to disappear from my queue unsent. When I look in the queue directory I see that they have been renamed from qf* to Qf*, and sendmail doesn't see these. If you look closely you should find that the Qf files are owned by users other than root. Since sendmail runs as root it refuses to believe information in non-root-owned qf files, and it renames them to Qf to get them out of the way and make it easy for you to find. The usual cause of this is twofold: first, you have the queue directory world writable (which is probably a mistake -- this opens up other security problems) and someone is calling sendmail with an "unsafe" flag, usually a -o flag that sets an option that could compromise security. When sendmail sees this it gives up setuid root permissions. The usual solution is to not use the problematic flags. If you must use them, you have to write a special queue directory and have them processed by the same uid that submitted the job in the first place. ----------------------------------------------------------------------