dnl $Id: site.config.m4,v 1.3 2006/06/01 04:26:14 jmates Exp $

dnl IPv6 support
APPENDDEF(`confENVDEF', `-DNETINET6')

dnl external filter support (for MIME, spam, anti-virus filters, etc)
APPENDDEF(`confENVDEF', `-DMILTER')
dnl APPENDDEF(`conf_libmilter_ENVDEF', `-D_FFR_MILTER_ROOT_UNSAFE')

dnl BSD Load Average support
dnl APPENDDEF(`confENVDEF', `-DLA_TYPE=LA_SUBR')
dnl Linux
dnl APPENDDEF(`confENVDEF', `-DLA_TYPE=LA_PROCSTR')

dnl regex to support Header-parsing rules of various kinds, e.g. to do
dnl quick-fix blocking on the latest Microsoft malware.
dnl APPENDDEF(`confMAPDEF', `-DMAP_REGEX')

dnl SMTP AUTH support; requires cyrus-sasl to be installed on the system
dnl APPENDDEF(`confENVDEF', `-DSASL=20113')
dnl APPENDDEF(`confLIBS', `-lsasl2.2.0.1')

dnl allow relaying to folks who auth with following "trusted" methods
dnl define(`confAUTH_MECHANISMS', `GSSAPI DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')
dnl TRUST_AUTH_MECH(`GSSAPI DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')

dnl the _FFR_SASL_OPTS allows us to set AUTH_OPTIONS to disallow LOGIN
dnl and PLAIN over non-TLS links (prevents plaintext password
dnl exposure, unless you are using IPSec or something)
dnl APPENDDEF(`confENVDEF', `-D_FFR_SASL_OPTS')
dnl define(`confAUTH_OPTIONS', `p')


dnl STARTTLS support (link integrity, privacy and security), requires
dnl OpenSSL (and development headers) to be installed on system first.
APPENDDEF(`confENVDEF', `-DSTARTTLS')
APPENDDEF(`confLIBS', `-lssl -lcrypto')

dnl _FFR_SMTP_SSL option allows use of 'smtps' for connections using
dnl TLS without STARTTLS upwards-negotiation.  You will also need to
dnl configure a new daemon to live at "smtps" port
APPENDDEF(`confENVDEF', `-D_FFR_SMTP_SSL')

dnl for proper smtps support, you will need the following line in your
dnl sendmail.mc file; placing it here is dangerous unless you also have
dnl a default daemon to listen on port 25 in your .mc file!
dnl DAEMON_OPTIONS(`Port=smtps, Name=SSLMTA, M=s')

dnl additional TLS options, like CipherList
dnl http://www.sendmail.org/~ca/email/tricks.html has (sparse) details
APPENDDEF(`confENVDEF', `-D_FFR_TLS_1')


dnl tcp_wrappers support (could slow sendmail down, as libwrap has to
dnl do it's own DNS queries to figure out whether the host is allowed
dnl or not, and on a paranoid system forces the addition of a
dnl
dnl sendmail: ALL
dnl
dnl line to /etc/hosts.allow for mail to work.
dnl APPENDDEF(`confENVDEF', `-DTCPWRAPPERS')
dnl APPENDDEF(`conf_sendmail_LIBS', `-lwrap')


dnl Mac OS 10.1 and higher have this, yay!
APPENDDEF(`confENVDEF', `-DHASURANDOMDEV')

dnl now, the fun part: configure paths for your system (how to find libs
dnl and includes) Unix is both mighty picky and flexible in this regard, so
dnl you may have to tweak the below paths or softlink various lib*.so and/or
dnl *.h files to places where the build process expects to find them. This
dnl is especially true for cyrus-sasl, which usually gets installed to
dnl /usr/local but likes to live under /usr at runtime.

dnl APPENDDEF(`confLIBDIRS', `-L/usr/local/ssl/lib')
dnl APPENDDEF(`confINCDIRS', `-I/usr/local/ssl/include')