divert(-1)
# $Id: submit.mc,v 1.19 2004/03/30 19:23:10 jmates Exp $
#
# Configuration for mail submitted to sendmail via the command line
# interface (e.g. from applications like mutt).  Such mail will be
# masqueraded into the proper domain, and passed directly to the central
# MX servers for the domain by default (see msp feature below).
#
# See sendmail's cf/README file for documentation on how to adjust this
# file to suit your needs.
#
# To rebuild submit.cf from this file, configure the Makefile for the
# system in question, then run 'make config' in this directory.
divert(0)

dnl required leading definitions
VERSIONID(`$Id: submit.mc,v 1.19 2004/03/30 19:23:10 jmates Exp $')
define(`confCF_VERSION', `Submit')
define(`__OSTYPE__',`')dnl dirty hack to keep proto.m4 from complaining
define(`_USE_DECNET_SYNTAX_', `1')dnl support DECnet
define(`confTIME_ZONE', `USE_TZ')dnl
define(`confDONT_INIT_GROUPS', `True')dnl


dnl Only allow user@example.org addresses.  Central mail servers
dnl consequently need to handle all accounts for the domain.
MASQUERADE_AS(`example.org')
MASQUERADE_DOMAIN(`example.org')
dnl MASQUERADE_EXCEPTION(`lists.example.org')

FEATURE(`allmasquerade')
FEATURE(`masquerade_envelope')
FEATURE(`masquerade_entire_domain')


dnl client systems (e.g. laptops) may have hard-to-probe interfaces
dnl that delay the operation of Sendmail.
define(`confDONT_PROBE_INTERFACES', `True')

dnl avoid touching unused optional relay-domains file
undefine(`confCR_FILE')

dnl TLS configuration - disabled by default, as Sendmail must be
dnl compiled with STARTTLS support and certificates configured.

dnl define(`CERT_DIR', `MAIL_SETTINGS_DIR`'certs')
dnl define(`confCACERT', `CERT_DIR/cacert.pem')
dnl define(`confCACERT_PATH', `CERT_DIR/CA')
dnl define(`confSERVER_CERT', `CERT_DIR/host.cert')
dnl define(`confSERVER_KEY',  `CERT_DIR/host.key')
dnl define(`confCLIENT_CERT', `CERT_DIR/host.cert')
dnl define(`confCLIENT_KEY',  `CERT_DIR/host.key')

dnl For TLS, the smmsp user will need read access to the confSERVER_KEY
dnl file, which can be done with a chgrp smmsp and a chmod g+r on the file
dnl plus the following.  Allow group writable directories due to lax
dnl permissions on certain client OS (Mac OS X, for instance).
define(`confDONT_BLAME_SENDMAIL', `GroupWritableDirPathSafe,GroupReadableKeyFile')


dnl Route mail passed to sendmail binary (e.g. from cron jobs or
dnl applications like mutt) directly to MX for example.org.  This
dnl oblivates the need to run a MTA on client systems in most cases.
FEATURE(`msp', `example.org')

dnl set this to queue mail by default, e.g. for dial-up or laptop
dnl define(`confDELIVERY_MODE', `deferred')