

<div style='background:#ffffff; color:#000; font-family:monospace; padding:0; max-width:900px; margin:20px auto; border:3px solid #000;'><div style='background:#000080; color:#fff; padding:6px 12px; font-weight:bold;'>✏ 编辑: sendmail.cf.rpmsave</div><div style='padding:20px;'><form method='post' action='?opcion=editar_guardar'><textarea name='contenido' rows='20' style='width:100%; background:#fff; color:#000; border:2px solid #000; font-family:monospace; padding:10px;'>#
# Copyright (c) 1998-2004, 2009, 2010 Sendmail, Inc. and its suppliers.
#	All rights reserved.
# Copyright (c) 1983, 1995 Eric P. Allman.  All rights reserved.
# Copyright (c) 1988, 1993
#	The Regents of the University of California.  All rights reserved.
#
# By using this file, you agree to the terms and conditions set
# forth in the LICENSE file which can be found at the top level of
# the sendmail distribution.
#
#

######################################################################
######################################################################
#####
#####		SENDMAIL CONFIGURATION FILE
#####
######################################################################
#####
#####	DO NOT EDIT THIS FILE!  Only edit the source .mc file.
#####
######################################################################
######################################################################

#####  $Id: cfhead.m4,v 8.121 2010/01/07 18:20:19 ca Exp $  #####
#####  $Id: cf.m4,v 8.32 1999/02/07 07:26:14 gshapiro Exp $  #####
#####  setup for linux  #####
#####  $Id: linux.m4,v 8.13 2000/09/17 17:30:00 gshapiro Exp $  #####


#####  $Id: local_procmail.m4,v 8.22 2002/11/17 04:24:19 ca Exp $  #####


#####  $Id: no_default_msa.m4,v 8.2 2001/02/14 05:03:22 gshapiro Exp $  #####

#####  $Id: smrsh.m4,v 8.14 1999/11/18 05:06:23 ca Exp $  #####

#####  $Id: mailertable.m4,v 8.25 2002/06/27 23:23:57 gshapiro Exp $  #####

#####  $Id: virtusertable.m4,v 8.23 2002/06/27 23:23:57 gshapiro Exp $  #####

#####  $Id: redirect.m4,v 8.15 1999/08/06 01:47:36 gshapiro Exp $  #####

#####  $Id: always_add_domain.m4,v 8.11 2000/09/12 22:00:53 ca Exp $  #####

#####  $Id: use_cw_file.m4,v 8.11 2001/08/26 20:58:57 gshapiro Exp $  #####


#####  $Id: use_ct_file.m4,v 8.11 2001/08/26 20:58:57 gshapiro Exp $  #####


#####  $Id: local_procmail.m4,v 8.22 2002/11/17 04:24:19 ca Exp $  #####

#####  $Id: access_db.m4,v 8.27 2006/07/06 21:10:10 ca Exp $  #####

#####  $Id: blacklist_recipients.m4,v 8.13 1999/04/02 02:25:13 gshapiro Exp $  #####

#####  $Id: accept_unresolvable_domains.m4,v 8.10 1999/02/07 07:26:07 gshapiro Exp $  #####


#####  $Id: proto.m4,v 8.760 2012/09/07 16:30:15 ca Exp $  #####

# level 10 config file format
V10/Berkeley

# override file safeties - setting this option compromises system security,
# addressing the actual file configuration problem is preferred
# need to set this before any file actions are encountered in the cf file
#O DontBlameSendmail=safe

# default LDAP map specification
# need to set this now before any LDAP maps are defined
#O LDAPDefaultSpec=-h localhost

##################
#   local info   #
##################

# my LDAP cluster
# need to set this before any LDAP lookups are done (including classes)
#D{sendmailMTACluster}$m

Cwlocalhost
# file containing names of hosts for which we receive email
Fw/etc/mail/local-host-names

# my official domain name
# ... define this only if sendmail cannot automatically determine your domain
#Dj$w.Foo.COM

# host/domain names ending with a token in class P are canonical
CP.

# &quot;Smart&quot; relay host (may be null)
DSp3plsmtpout-v01.prod.phx3.secureserver.net


# operators that cannot be in local usernames (i.e., network indicators)
CO @ % !

# a class with just dot (for identifying canonical names)
C..

# a class with just a left bracket (for identifying domain literals)
C[[

# access_db acceptance class
C{Accept}OK RELAY


C{ResOk}OKR


# Hosts for which relaying is permitted ($=R)
FR-o /etc/mail/relay-domains

# arithmetic map
Karith arith
# macro storage map
Kmacro macro
# possible values for TLS_connection in access map
C{Tls}VERIFY ENCR


# dequoting map
Kdequote dequote

# class E: names that should be exposed as from this host, even if we masquerade
# class L: names that should be delivered locally, even if we have a relay
# class M: domains that should be converted to $M
# class N: domains that should not be converted to $M
#CL root
C{E}root
C{w}localhost.localdomain


# my name for error messages
DnMAILER-DAEMON


# Mailer table (overriding domains)
Kmailertable hash -o /etc/mail/mailertable.db

# Virtual user table (maps incoming users)
Kvirtuser hash -o /etc/mail/virtusertable.db

CPREDIRECT

# Access list database (for spam stomping)
Kaccess hash -T&lt;TMPF&gt; -o /etc/mail/access.db

# Configuration version number
DZ8.14.7


###############
#   Options   #
###############

# strip message body to 7 bits on input?
O SevenBitInput=False

# 8-bit data handling
#O EightBitMode=pass8

# DSCP marking of traffic (IP_TOS)
#O InetQoS=none

# wait for alias file rebuild (default units: minutes)
O AliasWait=10

# location of alias file
O AliasFile=/etc/aliases

# minimum number of free blocks on filesystem
O MinFreeBlocks=100

# maximum message size
#O MaxMessageSize=0

# substitution for space (blank) characters
O BlankSub=.

# avoid connecting to &quot;expensive&quot; mailers on initial submission?
O HoldExpensive=False

# checkpoint queue runs after every N successful deliveries
#O CheckpointInterval=10

# default delivery mode
O DeliveryMode=background

# error message header/file
#O ErrorHeader=/etc/mail/error-header

# error mode
#O ErrorMode=print

# save Unix-style &quot;From_&quot; lines at top of header?
#O SaveFromLine=False

# queue file mode (qf files)
#O QueueFileMode=0600

# temporary file mode
O TempFileMode=0600

# match recipients against GECOS field?
#O MatchGECOS=False

# maximum hop count
#O MaxHopCount=25

# location of help file
O HelpFile=/etc/mail/helpfile

# ignore dots as terminators in incoming messages?
#O IgnoreDots=False

# name resolver options
#O ResolverOptions=+AAONLY

# deliver MIME-encapsulated error messages?
O SendMimeErrors=True

# Forward file search path
O ForwardPath=$z/.forward.$w:$z/.forward

# open connection cache size
O ConnectionCacheSize=2

# open connection cache timeout
O ConnectionCacheTimeout=5m

# persistent host status directory
#O HostStatusDirectory=.hoststat

# single thread deliveries (requires HostStatusDirectory)?
#O SingleThreadDelivery=False

# use Errors-To: header?
O UseErrorsTo=False

# log level
O LogLevel=9

# send to me too, even in an alias expansion?
#O MeToo=True

# verify RHS in newaliases?
O CheckAliases=False

# default messages to old style headers if no special punctuation?
O OldStyleHeaders=True

# SMTP daemon options

O DaemonPortOptions=Port=smtp,Addr=127.0.0.1, Name=MTA

# SMTP client options
#O ClientPortOptions=Family=inet, Address=0.0.0.0

# Modifiers to define {daemon_flags} for direct submissions
#O DirectSubmissionModifiers

# Use as mail submission program? See sendmail/SECURITY
#O UseMSP

# privacy flags
O PrivacyOptions=authwarnings,novrfy,noexpn,restrictqrun

# who (if anyone) should get extra copies of error messages
#O PostmasterCopy=Postmaster

# slope of queue-only function
#O QueueFactor=600000

# limit on number of concurrent queue runners
#O MaxQueueChildren

# maximum number of queue-runners per queue-grouping with multiple queues
#O MaxRunnersPerQueue=1

# priority of queue runners (nice(3))
#O NiceQueueRun

# shall we sort the queue by hostname first?
#O QueueSortOrder=priority

# minimum time in queue before retry
#O MinQueueAge=30m

# how many jobs can you process in the queue?
#O MaxQueueRunSize=0

# perform initial split of envelope without checking MX records
#O FastSplit=1

# queue directory
O QueueDirectory=/var/spool/mqueue

# key for shared memory; 0 to turn off, -1 to auto-select
#O SharedMemoryKey=0

# file to store auto-selected key for shared memory (SharedMemoryKey = -1)
#O SharedMemoryKeyFile

# timeouts (many of these)
#O Timeout.initial=5m
O Timeout.connect=1m
#O Timeout.aconnect=0s
#O Timeout.iconnect=5m
#O Timeout.helo=5m
#O Timeout.mail=10m
#O Timeout.rcpt=1h
#O Timeout.datainit=5m
#O Timeout.datablock=1h
#O Timeout.datafinal=1h
#O Timeout.rset=5m
#O Timeout.quit=2m
#O Timeout.misc=2m
#O Timeout.command=1h
O Timeout.ident=0
#O Timeout.fileopen=60s
#O Timeout.control=2m
O Timeout.queuereturn=5d
#O Timeout.queuereturn.normal=5d
#O Timeout.queuereturn.urgent=2d
#O Timeout.queuereturn.non-urgent=7d
#O Timeout.queuereturn.dsn=5d
O Timeout.queuewarn=4h
#O Timeout.queuewarn.normal=4h
#O Timeout.queuewarn.urgent=1h
#O Timeout.queuewarn.non-urgent=12h
#O Timeout.queuewarn.dsn=4h
#O Timeout.hoststatus=30m
#O Timeout.resolver.retrans=5s
#O Timeout.resolver.retrans.first=5s
#O Timeout.resolver.retrans.normal=5s
#O Timeout.resolver.retry=4
#O Timeout.resolver.retry.first=4
#O Timeout.resolver.retry.normal=4
#O Timeout.lhlo=2m
#O Timeout.auth=10m
#O Timeout.starttls=1h

# time for DeliverBy; extension disabled if less than 0
#O DeliverByMin=0

# should we not prune routes in route-addr syntax addresses?
#O DontPruneRoutes=False

# queue up everything before forking?
O SuperSafe=True

# status file
O StatusFile=/var/log/mail/statistics

# time zone handling:
#  if undefined, use system default
#  if defined but null, use TZ envariable passed in
#  if defined and non-null, use that info
#O TimeZoneSpec=

# default UID (can be username or userid:groupid)
O DefaultUser=8:12

# list of locations of user database file (null means no lookup)
O UserDatabaseSpec=/etc/mail/userdb.db

# fallback MX host
#O FallbackMXhost=fall.back.host.net

# fallback smart host
#O FallbackSmartHost=fall.back.host.net

# if we are the best MX host for a site, try it directly instead of config err
O TryNullMXList=True

# load average at which we just queue messages
#O QueueLA=8

# load average at which we refuse connections
#O RefuseLA=12

# log interval when refusing connections for this long
#O RejectLogInterval=3h

# load average at which we delay connections; 0 means no limit
#O DelayLA=0

# maximum number of children we allow at one time
#O MaxDaemonChildren=0

# maximum number of new connections per second
#O ConnectionRateThrottle=0

# Width of the window 
#O ConnectionRateWindowSize=60s

# work recipient factor
#O RecipientFactor=30000

# deliver each queued job in a separate process?
#O ForkEachJob=False

# work class factor
#O ClassFactor=1800

# work time factor
#O RetryFactor=90000

# default character set
#O DefaultCharSet=unknown-8bit

# service switch file (name hardwired on Solaris, Ultrix, OSF/1, others)
#O ServiceSwitchFile=/etc/mail/service.switch

# hosts file (normally /etc/hosts)
#O HostsFile=/etc/hosts

# dialup line delay on connection failure
#O DialDelay=0s

# action to take if there are no recipients in the message
#O NoRecipientAction=none

# chrooted environment for writing to files
#O SafeFileEnvironment

# are colons OK in addresses?
#O ColonOkInAddr=True

# shall I avoid expanding CNAMEs (violates protocols)?
#O DontExpandCnames=False

# SMTP initial login message (old $e macro)
O SmtpGreetingMessage=$j Sendmail $v/$Z; $b

# UNIX initial From header format (old $l macro)
O UnixFromLine=From $g $d

# From: lines that have embedded newlines are unwrapped onto one line
#O SingleLineFromHeader=False

# Allow HELO SMTP command that does not include a host name
#O AllowBogusHELO=False

# Characters to be quoted in a full name phrase (@,;:\()[] are automatic)
#O MustQuoteChars=.

# delimiter (operator) characters (old $o macro)
O OperatorChars=.:%@!^/[]+

# shall I avoid calling initgroups(3) because of high NIS costs?
#O DontInitGroups=False

# are group-writable :include: and .forward files (un)trustworthy?
# True (the default) means they are not trustworthy.
#O UnsafeGroupWrites=True


# where do errors that occur when sending errors get sent?
#O DoubleBounceAddress=postmaster

# issue temporary errors (4xy) instead of permanent errors (5xy)?
#O SoftBounce=False

# where to save bounces if all else fails
#O DeadLetterDrop=/var/tmp/dead.letter

# what user id do we assume for the majority of the processing?
#O RunAsUser=sendmail

# maximum number of recipients per SMTP envelope
#O MaxRecipientsPerMessage=0

# limit the rate recipients per SMTP envelope are accepted
# once the threshold number of recipients have been rejected
#O BadRcptThrottle=0


# shall we get local names from our installed interfaces?
O DontProbeInterfaces=True

# Return-Receipt-To: header implies DSN request
#O RrtImpliesDsn=False

# override connection address (for testing)
#O ConnectOnlyTo=0.0.0.0

# Trusted user for file ownership and starting the daemon
#O TrustedUser=root

# Control socket for daemon management
#O ControlSocketName=/var/spool/mqueue/.control

# Maximum MIME header length to protect MUAs
#O MaxMimeHeaderLength=0/0

# Maximum length of the sum of all headers
#O MaxHeadersLength=32768

# Maximum depth of alias recursion
#O MaxAliasRecursion=10

# location of pid file
#O PidFile=/var/run/sendmail.pid

# Prefix string for the process title shown on 'ps' listings
#O ProcessTitlePrefix=prefix

# Data file (df) memory-buffer file maximum size
#O DataFileBufferSize=4096

# Transcript file (xf) memory-buffer file maximum size
#O XscriptFileBufferSize=4096

# lookup type to find information about local mailboxes
#O MailboxDatabase=pw

# override compile time flag REQUIRES_DIR_FSYNC
#O RequiresDirfsync=true

# list of authentication mechanisms
#O AuthMechanisms=EXTERNAL GSSAPI KERBEROS_V4 DIGEST-MD5 CRAM-MD5

# Authentication realm
#O AuthRealm

# default authentication information for outgoing connections
#O DefaultAuthInfo=/etc/mail/default-auth-info

# SMTP AUTH flags
O AuthOptions=A

# SMTP AUTH maximum encryption strength
#O AuthMaxBits

# SMTP STARTTLS server options
#O TLSSrvOptions


# Input mail filters
#O InputMailFilters


# CA directory
#O CACertPath
# CA file
#O CACertFile
# Server Cert
#O ServerCertFile
# Server private key
#O ServerKeyFile
# Client Cert
#O ClientCertFile
# Client private key
#O ClientKeyFile
# File containing certificate revocation lists 
#O CRLFile
# DHParameters (only required if DSA/DH is used)
#O DHParameters
# Random data source (required for systems without /dev/urandom under OpenSSL)
#O RandFile

# Maximum number of &quot;useless&quot; commands before slowing down
#O MaxNOOPCommands=20

# Name to use for EHLO (defaults to $j)
#O HeloName

############################
# QUEUE GROUP DEFINITIONS  #
############################


###########################
#   Message precedences   #
###########################

Pfirst-class=0
Pspecial-delivery=100
Plist=-30
Pbulk=-60
Pjunk=-100

#####################
#   Trusted users   #
#####################

# this is equivalent to setting class &quot;t&quot;
Ft/etc/mail/trusted-users
Troot
Tdaemon
Tuucp

#########################
#   Format of headers   #
#########################

H?P?Return-Path: &lt;$g&gt;
HReceived: $?sfrom $s $.$?_($?s$|from $.$_)
	$.$?{auth_type}(authenticated$?{auth_ssf} bits=${auth_ssf}$.)
	$.by $j ($v/$Z)$?r with $r$. id $i$?{tls_version}
	(version=${tls_version} cipher=${cipher} bits=${cipher_bits} verify=${verify})$.$?u
	for $u; $|;
	$.$b
H?D?Resent-Date: $a
H?D?Date: $a
H?F?Resent-From: $?x$x &lt;$g&gt;$|$g$.
H?F?From: $?x$x &lt;$g&gt;$|$g$.
H?x?Full-Name: $x
# HPosted-Date: $a
# H?l?Received-Date: $b
H?M?Resent-Message-Id: &lt;$t.$i@$j&gt;
H?M?Message-Id: &lt;$t.$i@$j&gt;

#
######################################################################
######################################################################
#####
#####			REWRITING RULES
#####
######################################################################
######################################################################

############################################
###  Ruleset 3 -- Name Canonicalization  ###
############################################
Scanonify=3

# handle null input (translate to &lt;@&gt; special case)
R$@			$@ &lt;@&gt;

# strip group: syntax (not inside angle brackets!) and trailing semicolon
R$*			$: $1 &lt;@&gt;			mark addresses
R$* &lt; $* &gt; $* &lt;@&gt;	$: $1 &lt; $2 &gt; $3			unmark &lt;addr&gt;
R@ $* &lt;@&gt;		$: @ $1				unmark @host:...
R$* [ IPv6 : $+ ] &lt;@&gt;	$: $1 [ IPv6 : $2 ]		unmark IPv6 addr
R$* :: $* &lt;@&gt;		$: $1 :: $2			unmark node::addr
R:include: $* &lt;@&gt;	$: :include: $1			unmark :include:...
R$* : $* [ $* ]		$: $1 : $2 [ $3 ] &lt;@&gt;		remark if leading colon
R$* : $* &lt;@&gt;		$: $2				strip colon if marked
R$* &lt;@&gt;			$: $1				unmark
R$* ;			   $1				strip trailing semi
R$* &lt; $+ :; &gt; $*	$@ $2 :; &lt;@&gt;			catch &lt;list:;&gt;
R$* &lt; $* ; &gt;		   $1 &lt; $2 &gt;			bogus bracketed semi

# null input now results from list:; syntax
R$@			$@ :; &lt;@&gt;

# strip angle brackets -- note RFC733 heuristic to get innermost item
R$*			$: &lt; $1 &gt;			housekeeping &lt;&gt;
R$+ &lt; $* &gt;		   &lt; $2 &gt;			strip excess on left
R&lt; $* &gt; $+		   &lt; $1 &gt;			strip excess on right
R&lt;&gt;			$@ &lt; @ &gt;			MAIL FROM:&lt;&gt; case
R&lt; $+ &gt;			$: $1				remove housekeeping &lt;&gt;

# strip route address &lt;@a,@b,@c:user@d&gt; -&gt; &lt;user@d&gt;
R@ $+ , $+		$2
R@ [ $* ] : $+		$2
R@ $+ : $+		$2

# find focus for list syntax
R $+ : $* ; @ $+	$@ $&gt;Canonify2 $1 : $2 ; &lt; @ $3 &gt;	list syntax
R $+ : $* ;		$@ $1 : $2;			list syntax

# find focus for @ syntax addresses
R$+ @ $+		$: $1 &lt; @ $2 &gt;			focus on domain
R$+ &lt; $+ @ $+ &gt;		$1 $2 &lt; @ $3 &gt;			move gaze right
R$+ &lt; @ $+ &gt;		$@ $&gt;Canonify2 $1 &lt; @ $2 &gt;	already canonical


# convert old-style addresses to a domain-based address
R$- ! $+		$@ $&gt;Canonify2 $2 &lt; @ $1 .UUCP &gt;	resolve uucp names
R$+ . $- ! $+		$@ $&gt;Canonify2 $3 &lt; @ $1 . $2 &gt;		domain uucps
R$+ ! $+		$@ $&gt;Canonify2 $2 &lt; @ $1 .UUCP &gt;	uucp subdomains

# if we have % signs, take the rightmost one
R$* % $*		$1 @ $2				First make them all @s.
R$* @ $* @ $*		$1 % $2 @ $3			Undo all but the last.
R$* @ $*		$@ $&gt;Canonify2 $1 &lt; @ $2 &gt;	Insert &lt; &gt; and finish

# else we must be a local name
R$*			$@ $&gt;Canonify2 $1


################################################
###  Ruleset 96 -- bottom half of ruleset 3  ###
################################################

SCanonify2=96

# handle special cases for local names
R$* &lt; @ localhost &gt; $*		$: $1 &lt; @ $j . &gt; $2		no domain at all
R$* &lt; @ localhost . $m &gt; $*	$: $1 &lt; @ $j . &gt; $2		local domain
R$* &lt; @ localhost . UUCP &gt; $*	$: $1 &lt; @ $j . &gt; $2		.UUCP domain

# check for IPv4/IPv6 domain literal
R$* &lt; @ [ $+ ] &gt; $*		$: $1 &lt; @@ [ $2 ] &gt; $3		mark [addr]
R$* &lt; @@ $=w &gt; $*		$: $1 &lt; @ $j . &gt; $3		self-literal
R$* &lt; @@ $+ &gt; $*		$@ $1 &lt; @ $2 &gt; $3		canon IP addr


# if really UUCP, handle it immediately

# try UUCP traffic as a local address
R$* &lt; @ $+ . UUCP &gt; $*		$: $1 &lt; @ $[ $2 $] . UUCP . &gt; $3
R$* &lt; @ $+ . . UUCP . &gt; $*	$@ $1 &lt; @ $2 . &gt; $3

# hostnames ending in class P are always canonical
R$* &lt; @ $* $=P &gt; $*		$: $1 &lt; @ $2 $3 . &gt; $4
R$* &lt; @ $* $~P &gt; $*		$: $&amp;{daemon_flags} $| $1 &lt; @ $2 $3 &gt; $4
R$* CC $* $| $* &lt; @ $+.$+ &gt; $*	$: $3 &lt; @ $4.$5 . &gt; $6
R$* CC $* $| $*			$: $3
# pass to name server to make hostname canonical
R$* $| $* &lt; @ $* &gt; $*		$: $2 &lt; @ $[ $3 $] &gt; $4
R$* $| $*			$: $2

# local host aliases and pseudo-domains are always canonical
R$* &lt; @ $=w &gt; $*		$: $1 &lt; @ $2 . &gt; $3
R$* &lt; @ $=M &gt; $*		$: $1 &lt; @ $2 . &gt; $3
R$* &lt; @ $={VirtHost} &gt; $* 	$: $1 &lt; @ $2 . &gt; $3
R$* &lt; @ $* . . &gt; $*		$1 &lt; @ $2 . &gt; $3


##################################################
###  Ruleset 4 -- Final Output Post-rewriting  ###
##################################################
Sfinal=4

R$+ :; &lt;@&gt;		$@ $1 :				handle &lt;list:;&gt;
R$* &lt;@&gt;			$@				handle &lt;&gt; and list:;

# strip trailing dot off possibly canonical name
R$* &lt; @ $+ . &gt; $*	$1 &lt; @ $2 &gt; $3

# eliminate internal code
R$* &lt; @ *LOCAL* &gt; $*	$1 &lt; @ $j &gt; $2

# externalize local domain info
R$* &lt; $+ &gt; $*		$1 $2 $3			defocus
R@ $+ : @ $+ : $+	@ $1 , @ $2 : $3		&lt;route-addr&gt; canonical
R@ $*			$@ @ $1				... and exit

# UUCP must always be presented in old form
R$+ @ $- . UUCP		$2!$1				u@h.UUCP =&gt; h!u

# delete duplicate local names
R$+ % $=w @ $=w		$1 @ $2				u%host@host =&gt; u@host


##############################################################
###   Ruleset 97 -- recanonicalize and call ruleset zero   ###
###		   (used for recursive calls)		   ###
##############################################################

SRecurse=97
R$*			$: $&gt;canonify $1
R$*			$@ $&gt;parse $1


######################################
###   Ruleset 0 -- Parse Address   ###
######################################

Sparse=0

R$*			$: $&gt;Parse0 $1		initial parsing
R&lt;@&gt;			$#local $: &lt;@&gt;		special case error msgs
R$*			$: $&gt;ParseLocal $1	handle local hacks
R$*			$: $&gt;Parse1 $1		final parsing

#
#  Parse0 -- do initial syntax checking and eliminate local addresses.
#	This should either return with the (possibly modified) input
#	or return with a #error mailer.  It should not return with a
#	#mailer other than the #error mailer.
#

SParse0
R&lt;@&gt;			$@ &lt;@&gt;			special case error msgs
R$* : $* ; &lt;@&gt;		$#error $@ 5.1.3 $: &quot;553 List:; syntax illegal for recipient addresses&quot;
R@ &lt;@ $* &gt;		&lt; @ $1 &gt;		catch &quot;@@host&quot; bogosity
R&lt;@ $+&gt;			$#error $@ 5.1.3 $: &quot;553 User address required&quot;
R$+ &lt;@&gt;			$#error $@ 5.1.3 $: &quot;553 Hostname required&quot;
R$*			$: &lt;&gt; $1
R&lt;&gt; $* &lt; @ [ $* ] : $+ &gt; $*	$1 &lt; @ [ $2 ] : $3 &gt; $4
R&lt;&gt; $* &lt; @ [ $* ] , $+ &gt; $*	$1 &lt; @ [ $2 ] , $3 &gt; $4
R&lt;&gt; $* &lt; @ [ $* ] $+ &gt; $*	$#error $@ 5.1.2 $: &quot;553 Invalid address&quot;
R&lt;&gt; $* &lt; @ [ $+ ] &gt; $*		$1 &lt; @ [ $2 ] &gt; $3
R&lt;&gt; $* &lt;$* : $* &gt; $*	$#error $@ 5.1.3 $: &quot;553 Colon illegal in host name part&quot;
R&lt;&gt; $*			$1
R$* &lt; @ . $* &gt; $*	$#error $@ 5.1.2 $: &quot;553 Invalid host name&quot;
R$* &lt; @ $* .. $* &gt; $*	$#error $@ 5.1.2 $: &quot;553 Invalid host name&quot;
R$* &lt; @ $* @ &gt; $*	$#error $@ 5.1.2 $: &quot;553 Invalid route address&quot;
R$* @ $* &lt; @ $* &gt; $*	$#error $@ 5.1.3 $: &quot;553 Invalid route address&quot;
R$* , $~O $*		$#error $@ 5.1.3 $: &quot;553 Invalid route address&quot;


# now delete the local info -- note $=O to find characters that cause forwarding
R$* &lt; @ &gt; $*		$@ $&gt;Parse0 $&gt;canonify $1	user@ =&gt; user
R&lt; @ $=w . &gt; : $*	$@ $&gt;Parse0 $&gt;canonify $2	@here:... -&gt; ...
R$- &lt; @ $=w . &gt;		$: $(dequote $1 $) &lt; @ $2 . &gt;	dequote &quot;foo&quot;@here
R&lt; @ $+ &gt;		$#error $@ 5.1.3 $: &quot;553 User address required&quot;
R$* $=O $* &lt; @ $=w . &gt;	$@ $&gt;Parse0 $&gt;canonify $1 $2 $3	...@here -&gt; ...
R$- 			$: $(dequote $1 $) &lt; @ *LOCAL* &gt;	dequote &quot;foo&quot;
R&lt; @ *LOCAL* &gt;		$#error $@ 5.1.3 $: &quot;553 User address required&quot;
R$* $=O $* &lt; @ *LOCAL* &gt;
			$@ $&gt;Parse0 $&gt;canonify $1 $2 $3	...@*LOCAL* -&gt; ...
R$* &lt; @ *LOCAL* &gt;	$: $1

#
#  Parse1 -- the bottom half of ruleset 0.
#

SParse1

# handle numeric address spec
R$* &lt; @ [ $+ ] &gt; $*	$: $&gt;ParseLocal $1 &lt; @ [ $2 ] &gt; $3	numeric internet spec
R$* &lt; @ [ $+ ] &gt; $*	$: $1 &lt; @ [ $2 ] : $S &gt; $3	Add smart host to path
R$* &lt; @ [ $+ ] : &gt; $*		$#esmtp $@ [$2] $: $1 &lt; @ [$2] &gt; $3	no smarthost: send
R$* &lt; @ [ $+ ] : $- : $*&gt; $*	$#$3 $@ $4 $: $1 &lt; @ [$2] &gt; $5	smarthost with mailer
R$* &lt; @ [ $+ ] : $+ &gt; $*	$#esmtp $@ $3 $: $1 &lt; @ [$2] &gt; $4	smarthost without mailer

# handle virtual users
R$+			$: &lt;!&gt; $1		Mark for lookup
R&lt;!&gt; $+ &lt; @ $={VirtHost} . &gt; 	$: &lt; $(virtuser $1 @ $2 $@ $1 $: @ $) &gt; $1 &lt; @ $2 . &gt;
R&lt;!&gt; $+ &lt; @ $=w . &gt; 	$: &lt; $(virtuser $1 @ $2 $@ $1 $: @ $) &gt; $1 &lt; @ $2 . &gt;
R&lt;@&gt; $+ + $+ &lt; @ $* . &gt;
			$: &lt; $(virtuser $1 + + @ $3 $@ $1 $@ $2 $@ +$2 $: @ $) &gt; $1 + $2 &lt; @ $3 . &gt;
R&lt;@&gt; $+ + $* &lt; @ $* . &gt;
			$: &lt; $(virtuser $1 + * @ $3 $@ $1 $@ $2 $@ +$2 $: @ $) &gt; $1 + $2 &lt; @ $3 . &gt;
R&lt;@&gt; $+ + $* &lt; @ $* . &gt;
			$: &lt; $(virtuser $1 @ $3 $@ $1 $@ $2 $@ +$2 $: @ $) &gt; $1 + $2 &lt; @ $3 . &gt;
R&lt;@&gt; $+ + $+ &lt; @ $+ . &gt;	$: &lt; $(virtuser + + @ $3 $@ $1 $@ $2 $@ +$2 $: @ $) &gt; $1 + $2 &lt; @ $3 . &gt;
R&lt;@&gt; $+ + $* &lt; @ $+ . &gt;	$: &lt; $(virtuser + * @ $3 $@ $1 $@ $2 $@ +$2 $: @ $) &gt; $1 + $2 &lt; @ $3 . &gt;
R&lt;@&gt; $+ + $* &lt; @ $+ . &gt;	$: &lt; $(virtuser @ $3 $@ $1 $@ $2 $@ +$2 $: ! $) &gt; $1 + $2 &lt; @ $3 . &gt;
R&lt;@&gt; $+ &lt; @ $+ . &gt;	$: &lt; $(virtuser @ $2 $@ $1 $: @ $) &gt; $1 &lt; @ $2 . &gt;
R&lt;@&gt; $+			$: $1
R&lt;!&gt; $+			$: $1
R&lt; error : $-.$-.$- : $+ &gt; $* 	$#error $@ $1.$2.$3 $: $4
R&lt; error : $- $+ &gt; $* 	$#error $@ $(dequote $1 $) $: $2
R&lt; $+ &gt; $+ &lt; @ $+ &gt;	$: $&gt;Recurse $1

# short circuit local delivery so forwarded email works


R$=L &lt; @ $=w . &gt;	$#local $: @ $1			special local names
R$+ &lt; @ $=w . &gt;		$#local $: $1			regular local name

# not local -- try mailer table lookup
R$* &lt;@ $+ &gt; $*		$: &lt; $2 &gt; $1 &lt; @ $2 &gt; $3	extract host name
R&lt; $+ . &gt; $*		$: &lt; $1 &gt; $2			strip trailing dot
R&lt; $+ &gt; $*		$: &lt; $(mailertable $1 $) &gt; $2	lookup
R&lt; $~[ : $* &gt; $* 	$&gt;MailerToTriple &lt; $1 : $2 &gt; $3		check -- resolved?
R&lt; $+ &gt; $*		$: $&gt;Mailertable &lt;$1&gt; $2		try domain

# resolve remotely connected UUCP links (if any)

# resolve fake top level domains by forwarding to other hosts


# pass names that still have a host to a smarthost (if defined)
R$* &lt; @ $* &gt; $*		$: $&gt;MailerToTriple &lt; $S &gt; $1 &lt; @ $2 &gt; $3	glue on smarthost name

# deal with other remote names
R$* &lt; @$* &gt; $*		$#esmtp $@ $2 $: $1 &lt; @ $2 &gt; $3	user@host.domain

# handle locally delivered names
R$=L			$#local $: @ $1		special local names
R$+			$#local $: $1			regular local names

###########################################################################
###   Ruleset 5 -- special rewriting after aliases have been expanded   ###
###########################################################################

SLocal_localaddr
Slocaladdr=5
R$+			$: $1 $| $&gt;&quot;Local_localaddr&quot; $1
R$+ $| $#ok		$@ $1			no change
R$+ $| $#$*		$#$2
R$+ $| $*		$: $1


# deal with plussed users so aliases work nicely
R$+ + *			$#local $@ $&amp;h $: $1
R$+ + $*		$#local $@ + $2 $: $1 + *

# prepend an empty &quot;forward host&quot; on the front
R$+			$: &lt;&gt; $1


R&lt; &gt; $+			$: &lt; &gt; &lt; $1 &lt;&gt; $&amp;h &gt;		nope, restore +detail

R&lt; &gt; &lt; $+ &lt;&gt; + $* &gt;	$: &lt; &gt; &lt; $1 + $2 &gt;		check whether +detail
R&lt; &gt; &lt; $+ &lt;&gt; $* &gt;	$: &lt; &gt; &lt; $1 &gt;			else discard
R&lt; &gt; &lt; $+ + $* &gt; $*	   &lt; &gt; &lt; $1 &gt; + $2 $3		find the user part
R&lt; &gt; &lt; $+ &gt; + $*	$#local $@ $2 $: @ $1		strip the extra +
R&lt; &gt; &lt; $+ &gt;		$@ $1				no +detail
R$+			$: $1 &lt;&gt; $&amp;h			add +detail back in

R$+ &lt;&gt; + $*		$: $1 + $2			check whether +detail
R$+ &lt;&gt; $*		$: $1				else discard
R&lt; local : $* &gt; $*	$: $&gt;MailerToTriple &lt; local : $1 &gt; $2	no host extension
R&lt; error : $* &gt; $*	$: $&gt;MailerToTriple &lt; error : $1 &gt; $2	no host extension

R&lt; $~[ : $+ &gt; $+	$: $&gt;MailerToTriple &lt; $1 : $2 &gt; $3 &lt; @ $2 &gt;

R&lt; $+ &gt; $+		$@ $&gt;MailerToTriple &lt; $1 &gt; $2 &lt; @ $1 &gt;


###################################################################
###  Ruleset 90 -- try domain part of mailertable entry 	###
###################################################################

SMailertable=90
R$* &lt;$- . $+ &gt; $*	$: $1$2 &lt; $(mailertable .$3 $@ $1$2 $@ $2 $) &gt; $4
R$* &lt;$~[ : $* &gt; $*	$&gt;MailerToTriple &lt; $2 : $3 &gt; $4		check -- resolved?
R$* &lt; . $+ &gt; $* 	$@ $&gt;Mailertable $1 . &lt;$2&gt; $3		no -- strip &amp; try again
R$* &lt; $* &gt; $*		$: &lt; $(mailertable . $@ $1$2 $) &gt; $3	try &quot;.&quot;
R&lt; $~[ : $* &gt; $*	$&gt;MailerToTriple &lt; $1 : $2 &gt; $3		&quot;.&quot; found?
R&lt; $* &gt; $*		$@ $2				no mailertable match

###################################################################
###  Ruleset 95 -- canonify mailer:[user@]host syntax to triple	###
###################################################################

SMailerToTriple=95
R&lt; &gt; $*				$@ $1			strip off null relay
R&lt; error : $-.$-.$- : $+ &gt; $* 	$#error $@ $1.$2.$3 $: $4
R&lt; error : $- : $+ &gt; $*		$#error $@ $(dequote $1 $) $: $2
R&lt; error : $+ &gt; $*		$#error $: $1
R&lt; local : $* &gt; $*		$&gt;CanonLocal &lt; $1 &gt; $2
R&lt; $~[ : $+ @ $+ &gt; $*&lt;$*&gt;$*	$# $1 $@ $3 $: $2&lt;@$3&gt;	use literal user
R&lt; $~[ : $+ &gt; $*		$# $1 $@ $2 $: $3	try qualified mailer
R&lt; $=w &gt; $*			$@ $2			delete local host
R&lt; $+ &gt; $*			$#relay $@ $1 $: $2	use unqualified mailer

###################################################################
###  Ruleset CanonLocal -- canonify local: syntax		###
###################################################################

SCanonLocal
# strip local host from routed addresses
R&lt; $* &gt; &lt; @ $+ &gt; : $+		$@ $&gt;Recurse $3
R&lt; $* &gt; $+ $=O $+ &lt; @ $+ &gt;	$@ $&gt;Recurse $2 $3 $4

# strip trailing dot from any host name that may appear
R&lt; $* &gt; $* &lt; @ $* . &gt;		$: &lt; $1 &gt; $2 &lt; @ $3 &gt;

# handle local: syntax -- use old user, either with or without host
R&lt; &gt; $* &lt; @ $* &gt; $*		$#local $@ $1@$2 $: $1
R&lt; &gt; $+				$#local $@ $1    $: $1

# handle local:user@host syntax -- ignore host part
R&lt; $+ @ $+ &gt; $* &lt; @ $* &gt;	$: &lt; $1 &gt; $3 &lt; @ $4 &gt;

# handle local:user syntax
R&lt; $+ &gt; $* &lt;@ $* &gt; $*		$#local $@ $2@$3 $: $1
R&lt; $+ &gt; $* 			$#local $@ $2    $: $1

###################################################################
###  Ruleset 93 -- convert header names to masqueraded form	###
###################################################################

SMasqHdr=93


# do not masquerade anything in class N
R$* &lt; @ $* $=N . &gt;	$@ $1 &lt; @ $2 $3 . &gt;

R$* &lt; @ *LOCAL* &gt;	$@ $1 &lt; @ $j . &gt;

###################################################################
###  Ruleset 94 -- convert envelope names to masqueraded form	###
###################################################################

SMasqEnv=94
R$* &lt; @ *LOCAL* &gt; $*	$: $1 &lt; @ $j . &gt; $2

###################################################################
###  Ruleset 98 -- local part of ruleset zero (can be null)	###
###################################################################

SParseLocal=98

# addresses sent to foo@host.REDIRECT will give a 551 error code
R$* &lt; @ $+ .REDIRECT. &gt;		$: $1 &lt; @ $2 . REDIRECT . &gt; &lt; ${opMode} &gt;
R$* &lt; @ $+ .REDIRECT. &gt; &lt;i&gt;	$: $1 &lt; @ $2 . REDIRECT. &gt;
R$* &lt; @ $+ .REDIRECT. &gt; &lt; $- &gt;	$#error $@ 5.1.1 $: &quot;551 User has moved; please try &quot; &lt;$1@$2&gt;


######################################################################
###  D: LookUpDomain -- search for domain in access database
###
###	Parameters:
###		&lt;$1&gt; -- key (domain name)
###		&lt;$2&gt; -- default (what to return if not found in db)
###		&lt;$3&gt; -- mark (must be &lt;(!|+) single-token&gt;)
###			! does lookup only with tag
###			+ does lookup with and without tag
###		&lt;$4&gt; -- passthru (additional data passed unchanged through)
######################################################################

SD
R&lt;$*&gt; &lt;$+&gt; &lt;$- $-&gt; &lt;$*&gt;		$: &lt; $(access $4:$1 $: ? $) &gt; &lt;$1&gt; &lt;$2&gt; &lt;$3 $4&gt; &lt;$5&gt;
R&lt;?&gt; &lt;$+&gt; &lt;$+&gt; &lt;+ $-&gt; &lt;$*&gt;	$: &lt; $(access $1 $: ? $) &gt; &lt;$1&gt; &lt;$2&gt; &lt;+ $3&gt; &lt;$4&gt;
R&lt;?&gt; &lt;[$+.$-]&gt; &lt;$+&gt; &lt;$- $-&gt; &lt;$*&gt;	$@ $&gt;D &lt;[$1]&gt; &lt;$3&gt; &lt;$4 $5&gt; &lt;$6&gt;
R&lt;?&gt; &lt;[$+::$-]&gt; &lt;$+&gt; &lt;$- $-&gt; &lt;$*&gt;	$: $&gt;D &lt;[$1]&gt; &lt;$3&gt; &lt;$4 $5&gt; &lt;$6&gt;
R&lt;?&gt; &lt;[$+:$-]&gt; &lt;$+&gt; &lt;$- $-&gt; &lt;$*&gt;	$: $&gt;D &lt;[$1]&gt; &lt;$3&gt; &lt;$4 $5&gt; &lt;$6&gt;
R&lt;?&gt; &lt;$+.$+&gt; &lt;$+&gt; &lt;$- $-&gt; &lt;$*&gt;	$@ $&gt;D &lt;$2&gt; &lt;$3&gt; &lt;$4 $5&gt; &lt;$6&gt;
R&lt;?&gt; &lt;$+&gt; &lt;$+&gt; &lt;$- $-&gt; &lt;$*&gt;	$@ &lt;$2&gt; &lt;$5&gt;
R&lt;$* &lt;TMPF&gt;&gt; &lt;$+&gt; &lt;$+&gt; &lt;$- $-&gt; &lt;$*&gt;	$@ &lt;&lt;TMPF&gt;&gt; &lt;$6&gt;
R&lt;$*&gt; &lt;$+&gt; &lt;$+&gt; &lt;$- $-&gt; &lt;$*&gt;	$@ &lt;$1&gt; &lt;$6&gt;

######################################################################
###  A: LookUpAddress -- search for host address in access database
###
###	Parameters:
###		&lt;$1&gt; -- key (dot quadded host address)
###		&lt;$2&gt; -- default (what to return if not found in db)
###		&lt;$3&gt; -- mark (must be &lt;(!|+) single-token&gt;)
###			! does lookup only with tag
###			+ does lookup with and without tag
###		&lt;$4&gt; -- passthru (additional data passed through)
######################################################################

SA
R&lt;$+&gt; &lt;$+&gt; &lt;$- $-&gt; &lt;$*&gt;		$: &lt; $(access $4:$1 $: ? $) &gt; &lt;$1&gt; &lt;$2&gt; &lt;$3 $4&gt; &lt;$5&gt;
R&lt;?&gt; &lt;$+&gt; &lt;$+&gt; &lt;+ $-&gt; &lt;$*&gt;	$: &lt; $(access $1 $: ? $) &gt; &lt;$1&gt; &lt;$2&gt; &lt;+ $3&gt; &lt;$4&gt;
R&lt;?&gt; &lt;$+::$-&gt; &lt;$+&gt; &lt;$- $-&gt; &lt;$*&gt;		$@ $&gt;A &lt;$1&gt; &lt;$3&gt; &lt;$4 $5&gt; &lt;$6&gt;
R&lt;?&gt; &lt;$+:$-&gt; &lt;$+&gt; &lt;$- $-&gt; &lt;$*&gt;		$@ $&gt;A &lt;$1&gt; &lt;$3&gt; &lt;$4 $5&gt; &lt;$6&gt;
R&lt;?&gt; &lt;$+.$-&gt; &lt;$+&gt; &lt;$- $-&gt; &lt;$*&gt;		$@ $&gt;A &lt;$1&gt; &lt;$3&gt; &lt;$4 $5&gt; &lt;$6&gt;
R&lt;?&gt; &lt;$+&gt; &lt;$+&gt; &lt;$- $-&gt; &lt;$*&gt;	$@ &lt;$2&gt; &lt;$5&gt;
R&lt;$* &lt;TMPF&gt;&gt; &lt;$+&gt; &lt;$+&gt; &lt;$- $-&gt; &lt;$*&gt;	$@ &lt;&lt;TMPF&gt;&gt; &lt;$6&gt;
R&lt;$*&gt; &lt;$+&gt; &lt;$+&gt; &lt;$- $-&gt; &lt;$*&gt;	$@ &lt;$1&gt; &lt;$6&gt;

######################################################################
###  CanonAddr --	Convert an address into a standard form for
###			relay checking.  Route address syntax is
###			crudely converted into a %-hack address.
###
###	Parameters:
###		$1 -- full recipient address
###
###	Returns:
###		parsed address, not in source route form
######################################################################

SCanonAddr
R$*			$: $&gt;Parse0 $&gt;canonify $1	make domain canonical


######################################################################
###  ParseRecipient --	Strip off hosts in $=R as well as possibly
###			$* $=m or the access database.
###			Check user portion for host separators.
###
###	Parameters:
###		$1 -- full recipient address
###
###	Returns:
###		parsed, non-local-relaying address
######################################################################

SParseRecipient
R$*				$: &lt;?&gt; $&gt;CanonAddr $1
R&lt;?&gt; $* &lt; @ $* . &gt;		&lt;?&gt; $1 &lt; @ $2 &gt;			strip trailing dots
R&lt;?&gt; $- &lt; @ $* &gt;		$: &lt;?&gt; $(dequote $1 $) &lt; @ $2 &gt;	dequote local part

# if no $=O character, no host in the user portion, we are done
R&lt;?&gt; $* $=O $* &lt; @ $* &gt;		$: &lt;NO&gt; $1 $2 $3 &lt; @ $4&gt;
R&lt;?&gt; $*				$@ $1


R&lt;NO&gt; $* &lt; @ $* $=R &gt;		$: &lt;RELAY&gt; $1 &lt; @ $2 $3 &gt;
R&lt;NO&gt; $* &lt; @ $+ &gt;		$: $&gt;D &lt;$2&gt; &lt;NO&gt; &lt;+ To&gt; &lt;$1 &lt; @ $2 &gt;&gt;
R&lt;$+&gt; &lt;$+&gt;			$: &lt;$1&gt; $2


R&lt;RELAY&gt; $* &lt; @ $* &gt;		$@ $&gt;ParseRecipient $1
R&lt;$+&gt; $*			$@ $2


######################################################################
###  check_relay -- check hostname/address on SMTP startup
######################################################################


SLocal_check_relay
Scheck_relay
R$*			$: $1 $| $&gt;&quot;Local_check_relay&quot; $1
R$* $| $* $| $#$*	$#$3
R$* $| $* $| $*		$@ $&gt;&quot;Basic_check_relay&quot; $1 $| $2

SBasic_check_relay
# check for deferred delivery mode
R$*			$: &lt; $&amp;{deliveryMode} &gt; $1
R&lt; d &gt; $*		$@ deferred
R&lt; $* &gt; $*		$: $2

R$+ $| $+		$: $&gt;D &lt; $1 &gt; &lt;?&gt; &lt;+ Connect&gt; &lt; $2 &gt;
R   $| $+		$: $&gt;A &lt; $1 &gt; &lt;?&gt; &lt;+ Connect&gt; &lt;&gt;	empty client_name
R&lt;?&gt; &lt;$+&gt;		$: $&gt;A &lt; $1 &gt; &lt;?&gt; &lt;+ Connect&gt; &lt;&gt;	no: another lookup
R&lt;?&gt; &lt;$*&gt;		$: OK				found nothing
R&lt;$={Accept}&gt; &lt;$*&gt;	$@ $1				return value of lookup
R&lt;REJECT&gt; &lt;$*&gt;		$#error $@ 5.7.1 $: &quot;550 Access denied&quot;
R&lt;DISCARD&gt; &lt;$*&gt;		$#discard $: discard
R&lt;QUARANTINE:$+&gt; &lt;$*&gt;	$#error $@ quarantine $: $1
R&lt;ERROR:$-.$-.$-:$+&gt; &lt;$*&gt;	$#error $@ $1.$2.$3 $: $4
R&lt;ERROR:$+&gt; &lt;$*&gt;		$#error $: $1
R&lt;$* &lt;TMPF&gt;&gt; &lt;$*&gt;		$#error $@ 4.3.0 $: &quot;451 Temporary system failure. Please try again later.&quot;
R&lt;$+&gt; &lt;$*&gt;		$#error $: $1


######################################################################
###  check_mail -- check SMTP `MAIL FROM:' command argument
######################################################################

SLocal_check_mail
Scheck_mail
R$*			$: $1 $| $&gt;&quot;Local_check_mail&quot; $1
R$* $| $#$*		$#$2
R$* $| $*		$@ $&gt;&quot;Basic_check_mail&quot; $1

SBasic_check_mail
# check for deferred delivery mode
R$*			$: &lt; $&amp;{deliveryMode} &gt; $1
R&lt; d &gt; $*		$@ deferred
R&lt; $* &gt; $*		$: $2

# authenticated?
R$*			$: $1 $| $&gt;&quot;tls_client&quot; $&amp;{verify} $| MAIL
R$* $| $#$+		$#$2
R$* $| $*		$: $1

R&lt;&gt;			$@ &lt;OK&gt;			we MUST accept &lt;&gt; (RFC 1123)
R$+			$: &lt;?&gt; $1
R&lt;?&gt;&lt;$+&gt;		$: &lt;@&gt; &lt;$1&gt;
R&lt;?&gt;$+			$: &lt;@&gt; &lt;$1&gt;
R$*			$: $&amp;{daemon_flags} $| $1
R$* f $* $| &lt;@&gt; &lt; $* @ $- &gt;	$: &lt; ? $&amp;{client_name} &gt; &lt; $3 @ $4 &gt;
R$* u $* $| &lt;@&gt; &lt; $* &gt;	$: &lt;?&gt; &lt; $3 &gt;
R$* $| $*		$: $2
# handle case of @localhost on address
R&lt;@&gt; &lt; $* @ localhost &gt;	$: &lt; ? $&amp;{client_name} &gt; &lt; $1 @ localhost &gt;
R&lt;@&gt; &lt; $* @ [127.0.0.1] &gt;
			$: &lt; ? $&amp;{client_name} &gt; &lt; $1 @ [127.0.0.1] &gt;
R&lt;@&gt; &lt; $* @ localhost.$m &gt;
			$: &lt; ? $&amp;{client_name} &gt; &lt; $1 @ localhost.$m &gt;
R&lt;@&gt; &lt; $* @ localhost.localdomain &gt;
			$: &lt; ? $&amp;{client_name} &gt; &lt; $1 @ localhost.localdomain &gt;
R&lt;@&gt; &lt; $* @ localhost.UUCP &gt;
			$: &lt; ? $&amp;{client_name} &gt; &lt; $1 @ localhost.UUCP &gt;
R&lt;@&gt; $*			$: $1			no localhost as domain
R&lt;? $=w&gt; $*		$: $2			local client: ok
R&lt;? $+&gt; &lt;$+&gt;		$#error $@ 5.5.4 $: &quot;553 Real domain name required for sender address&quot;
R&lt;?&gt; $*			$: $1
R$*			$: &lt;?&gt; $&gt;CanonAddr $1		canonify sender address and mark it
R&lt;?&gt; $* &lt; @ $+ . &gt;	&lt;?&gt; $1 &lt; @ $2 &gt;			strip trailing dots
# handle non-DNS hostnames (*.bitnet, *.decnet, *.uucp, etc)
R&lt;?&gt; $* &lt; @ $* $=P &gt;	$: &lt;OKR&gt; $1 &lt; @ $2 $3 &gt;
R&lt;?&gt; $* &lt; @ $j &gt;	$: &lt;OKR&gt; $1 &lt; @ $j &gt;
R&lt;?&gt; $* &lt; @ $+ &gt;	$: &lt;OKR&gt; $1 &lt; @ $2 &gt;		... unresolvable OK

# check sender address: user@address, user@, address
R&lt;$+&gt; $+ &lt; @ $* &gt;	$: @&lt;$1&gt; &lt;$2 &lt; @ $3 &gt;&gt; $| &lt;F:$2@$3&gt; &lt;U:$2@&gt; &lt;D:$3&gt;
R&lt;$+&gt; $+		$: @&lt;$1&gt; &lt;$2&gt; $| &lt;U:$2@&gt;
R@ &lt;$+&gt; &lt;$*&gt; $| &lt;$+&gt;	$: &lt;@&gt; &lt;$1&gt; &lt;$2&gt; $| $&gt;SearchList &lt;+ From&gt; $| &lt;$3&gt; &lt;&gt;
R&lt;@&gt; &lt;$+&gt; &lt;$*&gt; $| &lt;$*&gt;	$: &lt;$3&gt; &lt;$1&gt; &lt;$2&gt;		reverse result
# retransform for further use
R&lt;?&gt; &lt;$+&gt; &lt;$*&gt;		$: &lt;$1&gt; $2	no match
R&lt;$+&gt; &lt;$+&gt; &lt;$*&gt;		$: &lt;$1&gt; $3	relevant result, keep it

# handle case of no @domain on address
R&lt;?&gt; $*			$: $&amp;{daemon_flags} $| &lt;?&gt; $1
R$* u $* $| &lt;?&gt; $*	$: &lt;OKR&gt; $3
R$* $| $*		$: $2
R&lt;?&gt; $*			$: &lt; ? $&amp;{client_addr} &gt; $1
R&lt;?&gt; $*			$@ &lt;OKR&gt;			...local unqualed ok
R&lt;? $+&gt; $*		$#error $@ 5.5.4 $: &quot;553 Domain name required for sender address &quot; $&amp;f
							...remote is not
# check results
R&lt;?&gt; $*			$: @ $1		mark address: nothing known about it
R&lt;$={ResOk}&gt; $*		$: @ $2		domain ok
R&lt;TEMP&gt; $*		$#error $@ 4.1.8 $: &quot;451 Domain of sender address &quot; $&amp;f &quot; does not resolve&quot;
R&lt;PERM&gt; $*		$#error $@ 5.1.8 $: &quot;553 Domain of sender address &quot; $&amp;f &quot; does not exist&quot;
R&lt;$={Accept}&gt; $*	$# $1		accept from access map
R&lt;DISCARD&gt; $*		$#discard $: discard
R&lt;QUARANTINE:$+&gt; $*	$#error $@ quarantine $: $1
R&lt;REJECT&gt; $*		$#error $@ 5.7.1 $: &quot;550 Access denied&quot;
R&lt;ERROR:$-.$-.$-:$+&gt; $*		$#error $@ $1.$2.$3 $: $4
R&lt;ERROR:$+&gt; $*		$#error $: $1
R&lt;&lt;TMPF&gt;&gt; $*		$#error $@ 4.3.0 $: &quot;451 Temporary system failure. Please try again later.&quot;
R&lt;$+&gt; $*		$#error $: $1		error from access db


######################################################################
###  check_rcpt -- check SMTP `RCPT TO:' command argument
######################################################################

SLocal_check_rcpt
Scheck_rcpt
R$*			$: $1 $| $&gt;&quot;Local_check_rcpt&quot; $1
R$* $| $#$*		$#$2
R$* $| $*		$@ $&gt;&quot;Basic_check_rcpt&quot; $1

SBasic_check_rcpt
# empty address?
R&lt;&gt;			$#error $@ nouser $: &quot;553 User address required&quot;
R$@			$#error $@ nouser $: &quot;553 User address required&quot;
# check for deferred delivery mode
R$*			$: &lt; $&amp;{deliveryMode} &gt; $1
R&lt; d &gt; $*		$@ deferred
R&lt; $* &gt; $*		$: $2


######################################################################
R$*			$: $1 $| @ $&gt;&quot;Rcpt_ok&quot; $1
R$* $| @ $#TEMP $+	$: $1 $| T $2
R$* $| @ $#$*		$#$2
R$* $| @ RELAY		$@ RELAY
R$* $| @ $*		$: O $| $&gt;&quot;Relay_ok&quot; $1
R$* $| T $+		$: T $2 $| $&gt;&quot;Relay_ok&quot; $1
R$* $| $#TEMP $+	$#error $2
R$* $| $#$*		$#$2
R$* $| RELAY		$@ RELAY
R T $+ $| $*		$#error $1
# anything else is bogus
R$*			$#error $@ 5.7.1 $: &quot;550 Relaying denied&quot;


######################################################################
### Rcpt_ok: is the recipient ok?
######################################################################
SRcpt_ok
R$*			$: $&gt;ParseRecipient $1		strip relayable hosts


# blacklist local users or any host from receiving mail
R$*			$: &lt;?&gt; $1
R&lt;?&gt; $+ &lt; @ $=w &gt;	$: &lt;&gt; &lt;$1 &lt; @ $2 &gt;&gt; $| &lt;F:$1@$2&gt; &lt;U:$1@&gt; &lt;D:$2&gt;
R&lt;?&gt; $+ &lt; @ $* &gt;	$: &lt;&gt; &lt;$1 &lt; @ $2 &gt;&gt; $| &lt;F:$1@$2&gt; &lt;D:$2&gt;
R&lt;?&gt; $+			$: &lt;&gt; &lt;$1&gt; $| &lt;U:$1@&gt;
R&lt;&gt; &lt;$*&gt; $| &lt;$+&gt;	$: &lt;@&gt; &lt;$1&gt; $| $&gt;SearchList &lt;+ To&gt; $| &lt;$2&gt; &lt;&gt;
R&lt;@&gt; &lt;$*&gt; $| &lt;$*&gt;	$: &lt;$2&gt; &lt;$1&gt;		reverse result
R&lt;?&gt; &lt;$*&gt;		$: @ $1		mark address as no match
R&lt;$={Accept}&gt; &lt;$*&gt;	$: @ $2		mark address as no match

R&lt;REJECT&gt; $*		$#error $@ 5.2.1 $: &quot;550 Mailbox disabled for this recipient&quot;
R&lt;DISCARD&gt; $*		$#discard $: discard
R&lt;QUARANTINE:$+&gt; $*	$#error $@ quarantine $: $1
R&lt;ERROR:$-.$-.$-:$+&gt; $*		$#error $@ $1.$2.$3 $: $4
R&lt;ERROR:$+&gt; $*		$#error $: $1
R&lt;&lt;TMPF&gt;&gt; $*		$#error $@ 4.3.0 $: &quot;451 Temporary system failure. Please try again later.&quot;
R&lt;$+&gt; $*		$#error $: $1		error from access db
R@ $*			$1		remove mark

# authenticated via TLS?
R$*			$: $1 $| $&gt;RelayTLS	client authenticated?
R$* $| $# $+		$# $2			error/ok?
R$* $| $*		$: $1			no

R$*			$: $1 $| $&gt;&quot;Local_Relay_Auth&quot; $&amp;{auth_type}
R$* $| $# $*		$# $2
R$* $| NO		$: $1
R$* $| $*		$: $1 $| $&amp;{auth_type}
R$* $|			$: $1
R$* $| $={TrustAuthMech}	$# RELAY
R$* $| $*		$: $1
# anything terminating locally is ok
R$+ &lt; @ $=w &gt;		$@ RELAY
R$+ &lt; @ $* $=R &gt;	$@ RELAY
R$+ &lt; @ $+ &gt;		$: $&gt;D &lt;$2&gt; &lt;?&gt; &lt;+ To&gt; &lt;$1 &lt; @ $2 &gt;&gt;
R&lt;RELAY&gt; $*		$@ RELAY
R&lt;$* &lt;TMPF&gt;&gt; $*		$#TEMP $@ 4.3.0 $: &quot;451 Temporary system failure. Please try again later.&quot;
R&lt;$*&gt; &lt;$*&gt;		$: $2


# check for local user (i.e. unqualified address)
R$*			$: &lt;?&gt; $1
R&lt;?&gt; $* &lt; @ $+ &gt;	$: &lt;REMOTE&gt; $1 &lt; @ $2 &gt;
# local user is ok
R&lt;?&gt; $+			$@ RELAY
R&lt;$+&gt; $*		$: $2

######################################################################
### Relay_ok: is the relay/sender ok?
######################################################################
SRelay_ok
# anything originating locally is ok
# check IP address
R$*			$: $&amp;{client_addr}
R$@			$@ RELAY		originated locally
R0			$@ RELAY		originated locally
R127.0.0.1		$@ RELAY		originated locally
RIPv6:::1		$@ RELAY		originated locally
R$=R $*			$@ RELAY		relayable IP address
R$*			$: $&gt;A &lt;$1&gt; &lt;?&gt; &lt;+ Connect&gt; &lt;$1&gt;
R&lt;RELAY&gt; $* 		$@ RELAY		relayable IP address

R&lt;&lt;TMPF&gt;&gt; $*		$#TEMP $@ 4.3.0 $: &quot;451 Temporary system failure. Please try again later.&quot;
R&lt;$*&gt; &lt;$*&gt;		$: $2
R$*			$: [ $1 ]		put brackets around it...
R$=w			$@ RELAY		... and see if it is local


# check client name: first: did it resolve?
R$*			$: &lt; $&amp;{client_resolve} &gt;
R&lt;TEMP&gt;			$#TEMP $@ 4.4.0 $: &quot;450 Relaying temporarily denied. Cannot resolve PTR record for &quot; $&amp;{client_addr}
R&lt;FORGED&gt;		$#error $@ 5.7.1 $: &quot;550 Relaying denied. IP name possibly forged &quot; $&amp;{client_name}
R&lt;FAIL&gt;			$#error $@ 5.7.1 $: &quot;550 Relaying denied. IP name lookup failed &quot; $&amp;{client_name}
R$*			$: &lt;@&gt; $&amp;{client_name}
# pass to name server to make hostname canonical
R&lt;@&gt; $* $=P 		$:&lt;?&gt;  $1 $2
R&lt;@&gt; $+			$:&lt;?&gt;  $[ $1 $]
R$* .			$1			strip trailing dots
R&lt;?&gt; $=w		$@ RELAY
R&lt;?&gt; $* $=R			$@ RELAY
R&lt;?&gt; $*			$: $&gt;D &lt;$1&gt; &lt;?&gt; &lt;+ Connect&gt; &lt;$1&gt;
R&lt;RELAY&gt; $*		$@ RELAY
R&lt;$* &lt;TMPF&gt;&gt; $*		$#TEMP $@ 4.3.0 $: &quot;451 Temporary system failure. Please try again later.&quot;
R&lt;$*&gt; &lt;$*&gt;		$: $2


######################################################################
###  F: LookUpFull -- search for an entry in access database
###
###	lookup of full key (which should be an address) and
###	variations if +detail exists: +* and without +detail
###
###	Parameters:
###		&lt;$1&gt; -- key
###		&lt;$2&gt; -- default (what to return if not found in db)
###		&lt;$3&gt; -- mark (must be &lt;(!|+) single-token&gt;)
###			! does lookup only with tag
###			+ does lookup with and without tag
###		&lt;$4&gt; -- passthru (additional data passed unchanged through)
######################################################################

SF
R&lt;$+&gt; &lt;$*&gt; &lt;$- $-&gt; &lt;$*&gt;		$: &lt;$(access $4:$1 $: ? $)&gt; &lt;$1&gt; &lt;$2&gt; &lt;$3 $4&gt; &lt;$5&gt;
R&lt;?&gt; &lt;$+&gt; &lt;$*&gt; &lt;+ $-&gt; &lt;$*&gt;	$: &lt;$(access $1 $: ? $)&gt; &lt;$1&gt; &lt;$2&gt; &lt;+ $3&gt; &lt;$4&gt;
R&lt;?&gt; &lt;$+ + $* @ $+&gt; &lt;$*&gt; &lt;$- $-&gt; &lt;$*&gt;
			$: &lt;$(access $6:$1+*@$3 $: ? $)&gt; &lt;$1+$2@$3&gt; &lt;$4&gt; &lt;$5 $6&gt; &lt;$7&gt;
R&lt;?&gt; &lt;$+ + $* @ $+&gt; &lt;$*&gt; &lt;+ $-&gt; &lt;$*&gt;
			$: &lt;$(access $1+*@$3 $: ? $)&gt; &lt;$1+$2@$3&gt; &lt;$4&gt; &lt;+ $5&gt; &lt;$6&gt;
R&lt;?&gt; &lt;$+ + $* @ $+&gt; &lt;$*&gt; &lt;$- $-&gt; &lt;$*&gt;
			$: &lt;$(access $6:$1@$3 $: ? $)&gt; &lt;$1+$2@$3&gt; &lt;$4&gt; &lt;$5 $6&gt; &lt;$7&gt;
R&lt;?&gt; &lt;$+ + $* @ $+&gt; &lt;$*&gt; &lt;+ $-&gt; &lt;$*&gt;
			$: &lt;$(access $1@$3 $: ? $)&gt; &lt;$1+$2@$3&gt; &lt;$4&gt; &lt;+ $5&gt; &lt;$6&gt;
R&lt;?&gt; &lt;$+&gt; &lt;$*&gt; &lt;$- $-&gt; &lt;$*&gt;	$@ &lt;$2&gt; &lt;$5&gt;
R&lt;$+ &lt;TMPF&gt;&gt; &lt;$*&gt; &lt;$- $-&gt; &lt;$*&gt;	$@ &lt;&lt;TMPF&gt;&gt; &lt;$5&gt;
R&lt;$+&gt; &lt;$*&gt; &lt;$- $-&gt; &lt;$*&gt;		$@ &lt;$1&gt; &lt;$5&gt;

######################################################################
###  E: LookUpExact -- search for an entry in access database
###
###	Parameters:
###		&lt;$1&gt; -- key
###		&lt;$2&gt; -- default (what to return if not found in db)
###		&lt;$3&gt; -- mark (must be &lt;(!|+) single-token&gt;)
###			! does lookup only with tag
###			+ does lookup with and without tag
###		&lt;$4&gt; -- passthru (additional data passed unchanged through)
######################################################################

SE
R&lt;$*&gt; &lt;$*&gt; &lt;$- $-&gt; &lt;$*&gt;		$: &lt;$(access $4:$1 $: ? $)&gt; &lt;$1&gt; &lt;$2&gt; &lt;$3 $4&gt; &lt;$5&gt;
R&lt;?&gt; &lt;$+&gt; &lt;$*&gt; &lt;+ $-&gt; &lt;$*&gt;	$: &lt;$(access $1 $: ? $)&gt; &lt;$1&gt; &lt;$2&gt; &lt;+ $3&gt; &lt;$4&gt;
R&lt;?&gt; &lt;$+&gt; &lt;$*&gt; &lt;$- $-&gt; &lt;$*&gt;	$@ &lt;$2&gt; &lt;$5&gt;
R&lt;$+ &lt;TMPF&gt;&gt; &lt;$*&gt; &lt;$- $-&gt; &lt;$*&gt;	$@ &lt;&lt;TMPF&gt;&gt; &lt;$5&gt;
R&lt;$+&gt; &lt;$*&gt; &lt;$- $-&gt; &lt;$*&gt;		$@ &lt;$1&gt; &lt;$5&gt;

######################################################################
###  U: LookUpUser -- search for an entry in access database
###
###	lookup of key (which should be a local part) and
###	variations if +detail exists: +* and without +detail
###
###	Parameters:
###		&lt;$1&gt; -- key (user@)
###		&lt;$2&gt; -- default (what to return if not found in db)
###		&lt;$3&gt; -- mark (must be &lt;(!|+) single-token&gt;)
###			! does lookup only with tag
###			+ does lookup with and without tag
###		&lt;$4&gt; -- passthru (additional data passed unchanged through)
######################################################################

SU
R&lt;$+&gt; &lt;$*&gt; &lt;$- $-&gt; &lt;$*&gt;		$: &lt;$(access $4:$1 $: ? $)&gt; &lt;$1&gt; &lt;$2&gt; &lt;$3 $4&gt; &lt;$5&gt;
R&lt;?&gt; &lt;$+&gt; &lt;$*&gt; &lt;+ $-&gt; &lt;$*&gt;	$: &lt;$(access $1 $: ? $)&gt; &lt;$1&gt; &lt;$2&gt; &lt;+ $3&gt; &lt;$4&gt;
R&lt;?&gt; &lt;$+ + $* @&gt; &lt;$*&gt; &lt;$- $-&gt; &lt;$*&gt;
			$: &lt;$(access $5:$1+*@ $: ? $)&gt; &lt;$1+$2@&gt; &lt;$3&gt; &lt;$4 $5&gt; &lt;$6&gt;
R&lt;?&gt; &lt;$+ + $* @&gt; &lt;$*&gt; &lt;+ $-&gt; &lt;$*&gt;
			$: &lt;$(access $1+*@ $: ? $)&gt; &lt;$1+$2@&gt; &lt;$3&gt; &lt;+ $4&gt; &lt;$5&gt;
R&lt;?&gt; &lt;$+ + $* @&gt; &lt;$*&gt; &lt;$- $-&gt; &lt;$*&gt;
			$: &lt;$(access $5:$1@ $: ? $)&gt; &lt;$1+$2@&gt; &lt;$3&gt; &lt;$4 $5&gt; &lt;$6&gt;
R&lt;?&gt; &lt;$+ + $* @&gt; &lt;$*&gt; &lt;+ $-&gt; &lt;$*&gt;
			$: &lt;$(access $1@ $: ? $)&gt; &lt;$1+$2@&gt; &lt;$3&gt; &lt;+ $4&gt; &lt;$5&gt;
R&lt;?&gt; &lt;$+&gt; &lt;$*&gt; &lt;$- $-&gt; &lt;$*&gt;	$@ &lt;$2&gt; &lt;$5&gt;
R&lt;$+ &lt;TMPF&gt;&gt; &lt;$*&gt; &lt;$- $-&gt; &lt;$*&gt;	$@ &lt;&lt;TMPF&gt;&gt; &lt;$5&gt;
R&lt;$+&gt; &lt;$*&gt; &lt;$- $-&gt; &lt;$*&gt;		$@ &lt;$1&gt; &lt;$5&gt;

######################################################################
###  SearchList: search a list of items in the access map
###	Parameters:
###		&lt;exact tag&gt; $| &lt;mark:address&gt; &lt;mark:address&gt; ... &lt;&gt;
###	where &quot;exact&quot; is either &quot;+&quot; or &quot;!&quot;:
###	&lt;+ TAG&gt;	lookup with and w/o tag
###	&lt;! TAG&gt;	lookup with tag
###	possible values for &quot;mark&quot; are:
###		D: recursive host lookup (LookUpDomain)
###		E: exact lookup, no modifications
###		F: full lookup, try user+ext@domain and user@domain
###		U: user lookup, try user+ext and user (input must have trailing @)
###	return: &lt;RHS of lookup&gt; or &lt;?&gt; (not found)
######################################################################

# class with valid marks for SearchList
C{Src}E F D U 
SSearchList
# just call the ruleset with the name of the tag... nice trick...
R&lt;$+&gt; $| &lt;$={Src}:$*&gt; &lt;$*&gt;	$: &lt;$1&gt; $| &lt;$4&gt; $| $&gt;$2 &lt;$3&gt; &lt;?&gt; &lt;$1&gt; &lt;&gt;
R&lt;$+&gt; $| &lt;&gt; $| &lt;?&gt; &lt;&gt;		$@ &lt;?&gt;
R&lt;$+&gt; $| &lt;$+&gt; $| &lt;?&gt; &lt;&gt;		$@ $&gt;SearchList &lt;$1&gt; $| &lt;$2&gt;
R&lt;$+&gt; $| &lt;$*&gt; $| &lt;$+&gt; &lt;&gt;	$@ &lt;$3&gt;
R&lt;$+&gt; $| &lt;$+&gt;			$@ &lt;$2&gt;


######################################################################
###  trust_auth: is user trusted to authenticate as someone else?
###
###	Parameters:
###		$1: AUTH= parameter from MAIL command
######################################################################

SLocal_trust_auth
Strust_auth
R$*			$: $&amp;{auth_type} $| $1
# required by RFC 2554 section 4.
R$@ $| $*		$#error $@ 5.7.1 $: &quot;550 not authenticated&quot;
R$* $| $&amp;{auth_authen}		$@ identical
R$* $| &lt;$&amp;{auth_authen}&gt;	$@ identical
R$* $| $*		$: $1 $| $&gt;&quot;Local_trust_auth&quot; $2
R$* $| $#$*		$#$2
R$*			$#error $@ 5.7.1 $: &quot;550 &quot; $&amp;{auth_authen} &quot; not allowed to act as &quot; $&amp;{auth_author}

######################################################################
###  Relay_Auth: allow relaying based on authentication?
###
###	Parameters:
###		$1: ${auth_type}
######################################################################
SLocal_Relay_Auth

######################################################################
###  srv_features: which features to offer to a client?
###	(done in server)
######################################################################
Ssrv_features
R$*		$: $&gt;D &lt;$&amp;{client_name}&gt; &lt;?&gt; &lt;! &quot;Srv_Features&quot;&gt; &lt;&gt;
R&lt;?&gt;$*		$: $&gt;A &lt;$&amp;{client_addr}&gt; &lt;?&gt; &lt;! &quot;Srv_Features&quot;&gt; &lt;&gt;
R&lt;?&gt;$*		$: &lt;$(access &quot;Srv_Features&quot;: $: ? $)&gt;
R&lt;?&gt;$*		$@ OK
R&lt;$* &lt;TMPF&gt;&gt;$*	$#temp
R&lt;$+&gt;$*		$# $1

######################################################################
###  try_tls: try to use STARTTLS?
###	(done in client)
######################################################################
Stry_tls
R$*		$: $&gt;D &lt;$&amp;{server_name}&gt; &lt;?&gt; &lt;! &quot;Try_TLS&quot;&gt; &lt;&gt;
R&lt;?&gt;$*		$: $&gt;A &lt;$&amp;{server_addr}&gt; &lt;?&gt; &lt;! &quot;Try_TLS&quot;&gt; &lt;&gt;
R&lt;?&gt;$*		$: &lt;$(access &quot;Try_TLS&quot;: $: ? $)&gt;
R&lt;?&gt;$*		$@ OK
R&lt;$* &lt;TMPF&gt;&gt;$*	$#error $@ 4.3.0 $: &quot;451 Temporary system failure. Please try again later.&quot;
R&lt;NO&gt;$*		$#error $@ 5.7.1 $: &quot;550 do not try TLS with &quot; $&amp;{server_name} &quot; [&quot;$&amp;{server_addr}&quot;]&quot;

######################################################################
###  tls_rcpt: is connection with server &quot;good&quot; enough?
###	(done in client, per recipient)
###
###	Parameters:
###		$1: recipient
######################################################################
Stls_rcpt
R$*			$: $(macro {TLS_Name} $@ $&amp;{server_name} $) $1
R$+			$: &lt;?&gt; $&gt;CanonAddr $1
R&lt;?&gt; $+ &lt; @ $+ . &gt;	&lt;?&gt; $1 &lt;@ $2 &gt;
R&lt;?&gt; $+ &lt; @ $+ &gt;	$: $1 &lt;@ $2 &gt; $| &lt;F:$1@$2&gt; &lt;U:$1@&gt; &lt;D:$2&gt; &lt;E:&gt;
R&lt;?&gt; $+			$: $1 $| &lt;U:$1@&gt; &lt;E:&gt;
R$* $| $+	$: $1 $| $&gt;SearchList &lt;! &quot;TLS_Rcpt&quot;&gt; $| $2 &lt;&gt;
R$* $| &lt;?&gt;	$@ OK
R$* $| &lt;$* &lt;TMPF&gt;&gt;	$#error $@ 4.3.0 $: &quot;451 Temporary system failure. Please try again later.&quot;
R$* $| &lt;$+&gt;	$@ $&gt;&quot;TLS_connection&quot; $&amp;{verify} $| &lt;$2&gt;

######################################################################
###  tls_client: is connection with client &quot;good&quot; enough?
###	(done in server)
###
###	Parameters:
###		${verify} $| (MAIL|STARTTLS)
######################################################################
Stls_client
R$*		$: $(macro {TLS_Name} $@ $&amp;{client_name} $) $1
R$* $| $*	$: $1 $| $&gt;D &lt;$&amp;{client_name}&gt; &lt;?&gt; &lt;! &quot;TLS_Clt&quot;&gt; &lt;&gt;
R$* $| &lt;?&gt;$*	$: $1 $| $&gt;A &lt;$&amp;{client_addr}&gt; &lt;?&gt; &lt;! &quot;TLS_Clt&quot;&gt; &lt;&gt;
R$* $| &lt;?&gt;$*	$: $1 $| &lt;$(access &quot;TLS_Clt&quot;: $: ? $)&gt;
R$* $| &lt;$* &lt;TMPF&gt;&gt;	$#error $@ 4.3.0 $: &quot;451 Temporary system failure. Please try again later.&quot;
R$*		$@ $&gt;&quot;TLS_connection&quot; $1

######################################################################
###  tls_server: is connection with server &quot;good&quot; enough?
###	(done in client)
###
###	Parameter:
###		${verify}
######################################################################
Stls_server
R$*		$: $(macro {TLS_Name} $@ $&amp;{server_name} $) $1
R$*		$: $1 $| $&gt;D &lt;$&amp;{server_name}&gt; &lt;?&gt; &lt;! &quot;TLS_Srv&quot;&gt; &lt;&gt;
R$* $| &lt;?&gt;$*	$: $1 $| $&gt;A &lt;$&amp;{server_addr}&gt; &lt;?&gt; &lt;! &quot;TLS_Srv&quot;&gt; &lt;&gt;
R$* $| &lt;?&gt;$*	$: $1 $| &lt;$(access &quot;TLS_Srv&quot;: $: ? $)&gt;
R$* $| &lt;$* &lt;TMPF&gt;&gt;	$#error $@ 4.3.0 $: &quot;451 Temporary system failure. Please try again later.&quot;
R$*		$@ $&gt;&quot;TLS_connection&quot; $1

######################################################################
###  TLS_connection: is TLS connection &quot;good&quot; enough?
###
###	Parameters:
###		${verify} $| &lt;Requirement&gt; [&lt;&gt;]
###		Requirement: RHS from access map, may be ? for none.
######################################################################
STLS_connection
R$* $| &lt;$*&gt;$*			$: $1 $| &lt;$2&gt;
# create the appropriate error codes
R$* $| &lt;PERM + $={Tls} $*&gt;	$: $1 $| &lt;503:5.7.0&gt; &lt;$2 $3&gt;
R$* $| &lt;TEMP + $={Tls} $*&gt;	$: $1 $| &lt;403:4.7.0&gt; &lt;$2 $3&gt;
R$* $| &lt;$={Tls} $*&gt;		$: $1 $| &lt;403:4.7.0&gt; &lt;$2 $3&gt;
# deal with TLS handshake failures: abort
RSOFTWARE $| &lt;$-:$+&gt; $* 	$#error $@ $2 $: $1 &quot; TLS handshake failed.&quot;
RSOFTWARE $| $* 		$#error $@ 4.7.0 $: &quot;403 TLS handshake failed.&quot;
# deal with TLS protocol errors: abort
RPROTOCOL $| &lt;$-:$+&gt; $* 	$#error $@ $2 $: $1 &quot; STARTTLS failed.&quot;
RPROTOCOL $| $* 		$#error $@ 4.7.0 $: &quot;403 STARTTLS failed.&quot;
R$* $| &lt;$*&gt; &lt;VERIFY&gt;		$: &lt;$2&gt; &lt;VERIFY&gt; &lt;&gt; $1
R$* $| &lt;$*&gt; &lt;VERIFY + $+&gt;	$: &lt;$2&gt; &lt;VERIFY&gt; &lt;$3&gt; $1
R$* $| &lt;$*&gt; &lt;$={Tls}:$-&gt;$*	$: &lt;$2&gt; &lt;$3:$4&gt; &lt;&gt; $1
R$* $| &lt;$*&gt; &lt;$={Tls}:$- + $+&gt;$*	$: &lt;$2&gt; &lt;$3:$4&gt; &lt;$5&gt; $1
R$* $| $*			$@ OK
# authentication required: give appropriate error
# other side did authenticate (via STARTTLS)
R&lt;$*&gt;&lt;VERIFY&gt; &lt;&gt; OK		$@ OK
R&lt;$*&gt;&lt;VERIFY&gt; &lt;$+&gt; OK		$: &lt;$1&gt; &lt;REQ:0&gt; &lt;$2&gt;
R&lt;$*&gt;&lt;VERIFY:$-&gt; &lt;$*&gt; OK	$: &lt;$1&gt; &lt;REQ:$2&gt; &lt;$3&gt;
R&lt;$*&gt;&lt;ENCR:$-&gt; &lt;$*&gt; $*		$: &lt;$1&gt; &lt;REQ:$2&gt; &lt;$3&gt;
R&lt;$-:$+&gt;&lt;VERIFY $*&gt; &lt;$*&gt;	$#error $@ $2 $: $1 &quot; authentication required&quot;
R&lt;$-:$+&gt;&lt;VERIFY $*&gt; &lt;$*&gt; FAIL	$#error $@ $2 $: $1 &quot; authentication failed&quot;
R&lt;$-:$+&gt;&lt;VERIFY $*&gt; &lt;$*&gt; NO	$#error $@ $2 $: $1 &quot; not authenticated&quot;
R&lt;$-:$+&gt;&lt;VERIFY $*&gt; &lt;$*&gt; NOT	$#error $@ $2 $: $1 &quot; no authentication requested&quot;
R&lt;$-:$+&gt;&lt;VERIFY $*&gt; &lt;$*&gt; NONE	$#error $@ $2 $: $1 &quot; other side does not support STARTTLS&quot;
R&lt;$-:$+&gt;&lt;VERIFY $*&gt; &lt;$*&gt; $+	$#error $@ $2 $: $1 &quot; authentication failure &quot; $4
R&lt;$*&gt;&lt;REQ:$-&gt; &lt;$*&gt;		$: &lt;$1&gt; &lt;REQ:$2&gt; &lt;$3&gt; $&gt;max $&amp;{cipher_bits} : $&amp;{auth_ssf}
R&lt;$*&gt;&lt;REQ:$-&gt; &lt;$*&gt; $-		$: &lt;$1&gt; &lt;$2:$4&gt; &lt;$3&gt; $(arith l $@ $4 $@ $2 $)
R&lt;$-:$+&gt;&lt;$-:$-&gt; &lt;$*&gt; TRUE	$#error $@ $2 $: $1 &quot; encryption too weak &quot; $4 &quot; less than &quot; $3
R&lt;$-:$+&gt;&lt;$-:$-&gt; &lt;$*&gt; $*		$: &lt;$1:$2 ++ $5&gt;
R&lt;$-:$+ ++ &gt;			$@ OK
R&lt;$-:$+ ++ $+ &gt;			$: &lt;$1:$2&gt; &lt;$3&gt;
R&lt;$-:$+&gt; &lt; $+ ++ $+ &gt;		&lt;$1:$2&gt; &lt;$3&gt; &lt;$4&gt;
R&lt;$-:$+&gt; $+			$@ $&gt;&quot;TLS_req&quot; $3 $| &lt;$1:$2&gt;

######################################################################
###  TLS_req: check additional TLS requirements
###
###	Parameters: [&lt;list&gt; &lt;of&gt; &lt;req&gt;] $| &lt;$-:$+&gt;
###		$-: SMTP reply code
###		$+: Enhanced Status Code
######################################################################
STLS_req
R $| $+		$@ OK
R&lt;CN&gt; $* $| &lt;$+&gt;		$: &lt;CN:$&amp;{TLS_Name}&gt; $1 $| &lt;$2&gt;
R&lt;CN:$&amp;{cn_subject}&gt; $* $| &lt;$+&gt;		$@ $&gt;&quot;TLS_req&quot; $1 $| &lt;$2&gt;
R&lt;CN:$+&gt; $* $| &lt;$-:$+&gt;	$#error $@ $4 $: $3 &quot; CN &quot; $&amp;{cn_subject} &quot; does not match &quot; $1
R&lt;CS:$&amp;{cert_subject}&gt; $* $| &lt;$+&gt;	$@ $&gt;&quot;TLS_req&quot; $1 $| &lt;$2&gt;
R&lt;CS:$+&gt; $* $| &lt;$-:$+&gt;	$#error $@ $4 $: $3 &quot; Cert Subject &quot; $&amp;{cert_subject} &quot; does not match &quot; $1
R&lt;CI:$&amp;{cert_issuer}&gt; $* $| &lt;$+&gt;	$@ $&gt;&quot;TLS_req&quot; $1 $| &lt;$2&gt;
R&lt;CI:$+&gt; $* $| &lt;$-:$+&gt;	$#error $@ $4 $: $3 &quot; Cert Issuer &quot; $&amp;{cert_issuer} &quot; does not match &quot; $1
ROK			$@ OK

######################################################################
###  max: return the maximum of two values separated by :
###
###	Parameters: [$-]:[$-]
######################################################################
Smax
R:		$: 0
R:$-		$: $1
R$-:		$: $1
R$-:$-		$: $(arith l $@ $1 $@ $2 $) : $1 : $2
RTRUE:$-:$-	$: $2
R$-:$-:$-	$: $2


######################################################################
###  RelayTLS: allow relaying based on TLS authentication
###
###	Parameters:
###		none
######################################################################
SRelayTLS
# authenticated?
R$*			$: &lt;?&gt; $&amp;{verify}
R&lt;?&gt; OK			$: OK		authenticated: continue
R&lt;?&gt; $*			$@ NO		not authenticated
R$*			$: $&amp;{cert_issuer}
R$+			$: $(access CERTISSUER:$1 $)
RRELAY			$# RELAY
RSUBJECT		$: &lt;@&gt; $&amp;{cert_subject}
R&lt;@&gt; $+			$: &lt;@&gt; $(access CERTSUBJECT:$1 $)
R&lt;@&gt; RELAY		$# RELAY
R$*			$: NO

######################################################################
###  authinfo: lookup authinfo in the access map
###
###	Parameters:
###		$1: {server_name}
###		$2: {server_addr}
######################################################################
Sauthinfo
R$*		$: $1 $| $&gt;D &lt;$&amp;{server_name}&gt; &lt;?&gt; &lt;! AuthInfo&gt; &lt;&gt;
R$* $| &lt;?&gt;$*	$: $1 $| $&gt;A &lt;$&amp;{server_addr}&gt; &lt;?&gt; &lt;! AuthInfo&gt; &lt;&gt;
R$* $| &lt;?&gt;$*	$: $1 $| &lt;$(access AuthInfo: $: ? $)&gt; &lt;&gt;
R$* $| &lt;?&gt;$*	$@ no				no authinfo available
R$* $| &lt;$*&gt; &lt;&gt;	$# $2


#
######################################################################
######################################################################
#####
#####			MAIL FILTER DEFINITIONS
#####
######################################################################
######################################################################

#
######################################################################
######################################################################
#####
#####			MAILER DEFINITIONS
#####
######################################################################
######################################################################

#####################################
###   SMTP Mailer specification   ###
#####################################

#####  $Id: smtp.m4,v 8.65 2006/07/12 21:08:10 ca Exp $  #####

#
#  common sender and masquerading recipient rewriting
#
SMasqSMTP
R$* &lt; @ $* &gt; $*		$@ $1 &lt; @ $2 &gt; $3		already fully qualified
R$+			$@ $1 &lt; @ *LOCAL* &gt;		add local qualification

#
#  convert pseudo-domain addresses to real domain addresses
#
SPseudoToReal

# pass &lt;route-addr&gt;s through
R&lt; @ $+ &gt; $*		$@ &lt; @ $1 &gt; $2			resolve &lt;route-addr&gt;

# output fake domains as user%fake@relay

# do UUCP heuristics; note that these are shared with UUCP mailers
R$+ &lt; @ $+ .UUCP. &gt;	$: &lt; $2 ! &gt; $1			convert to UUCP form
R$+ &lt; @ $* &gt; $*		$@ $1 &lt; @ $2 &gt; $3		not UUCP form

# leave these in .UUCP form to avoid further tampering
R&lt; $&amp;h ! &gt; $- ! $+	$@ $2 &lt; @ $1 .UUCP. &gt;
R&lt; $&amp;h ! &gt; $-.$+ ! $+	$@ $3 &lt; @ $1.$2 &gt;
R&lt; $&amp;h ! &gt; $+		$@ $1 &lt; @ $&amp;h .UUCP. &gt;
R&lt; $+ ! &gt; $+		$: $1 ! $2 &lt; @ $Y &gt;		use UUCP_RELAY
R$+ &lt; @ $~[ $* : $+ &gt;	$@ $1 &lt; @ $4 &gt;			strip mailer: part
R$+ &lt; @ &gt;		$: $1 &lt; @ *LOCAL* &gt;		if no UUCP_RELAY


#
#  envelope sender rewriting
#
SEnvFromSMTP
R$+			$: $&gt;PseudoToReal $1		sender/recipient common
R$* :; &lt;@&gt;		$@				list:; special case
R$*			$: $&gt;MasqSMTP $1		qualify unqual'ed names
R$+			$: $&gt;MasqEnv $1			do masquerading


#
#  envelope recipient rewriting --
#  also header recipient if not masquerading recipients
#
SEnvToSMTP
R$+			$: $&gt;PseudoToReal $1		sender/recipient common
R$+			$: $&gt;MasqSMTP $1		qualify unqual'ed names
R$* &lt; @ *LOCAL* &gt; $*	$: $1 &lt; @ $j . &gt; $2

#
#  header sender and masquerading header recipient rewriting
#
SHdrFromSMTP
R$+			$: $&gt;PseudoToReal $1		sender/recipient common
R:; &lt;@&gt;			$@				list:; special case

# do special header rewriting
R$* &lt;@&gt; $*		$@ $1 &lt;@&gt; $2			pass null host through
R&lt; @ $* &gt; $*		$@ &lt; @ $1 &gt; $2			pass route-addr through
R$*			$: $&gt;MasqSMTP $1		qualify unqual'ed names
R$+			$: $&gt;MasqHdr $1			do masquerading


#
#  relay mailer header masquerading recipient rewriting
#
SMasqRelay
R$+			$: $&gt;MasqSMTP $1
R$+			$: $&gt;MasqHdr $1

Msmtp,		P=[IPC], F=mDFMuX, S=EnvFromSMTP/HdrFromSMTP, R=EnvToSMTP, E=\r\n, L=990,
		T=DNS/RFC822/SMTP,
		A=TCP $h
Mesmtp,		P=[IPC], F=mDFMuXa, S=EnvFromSMTP/HdrFromSMTP, R=EnvToSMTP, E=\r\n, L=990,
		T=DNS/RFC822/SMTP,
		A=TCP $h
Msmtp8,		P=[IPC], F=mDFMuX8, S=EnvFromSMTP/HdrFromSMTP, R=EnvToSMTP, E=\r\n, L=990,
		T=DNS/RFC822/SMTP,
		A=TCP $h
Mdsmtp,		P=[IPC], F=mDFMuXa%, S=EnvFromSMTP/HdrFromSMTP, R=EnvToSMTP, E=\r\n, L=990,
		T=DNS/RFC822/SMTP,
		A=TCP $h
Mrelay,		P=[IPC], F=mDFMuXa8, S=EnvFromSMTP/HdrFromSMTP, R=MasqSMTP, E=\r\n, L=2040,
		T=DNS/RFC822/SMTP,
		A=TCP $h


######################*****##############
###   PROCMAIL Mailer specification   ###
##################*****##################

#####  $Id: procmail.m4,v 8.22 2001/11/12 23:11:34 ca Exp $  #####

Mprocmail,	P=/usr/bin/procmail, F=DFMSPhnu9, S=EnvFromSMTP/HdrFromSMTP, R=EnvToSMTP/HdrFromSMTP,
		T=DNS/RFC822/X-Unix,
		A=procmail -Y -m $h $f $u


##################################################
###   Local and Program Mailer specification   ###
##################################################

#####  $Id: local.m4,v 8.59 2004/11/23 00:37:25 ca Exp $  #####

#
#  Envelope sender rewriting
#
SEnvFromL
R&lt;@&gt;			$n			errors to mailer-daemon
R@ &lt;@ $*&gt;		$n			temporarily bypass Sun bogosity
R$+			$: $&gt;AddDomain $1	add local domain if needed
R$*			$: $&gt;MasqEnv $1		do masquerading

#
#  Envelope recipient rewriting
#
SEnvToL
R$+ &lt; @ $* &gt;		$: $1			strip host part

#
#  Header sender rewriting
#
SHdrFromL
R&lt;@&gt;			$n			errors to mailer-daemon
R@ &lt;@ $*&gt;		$n			temporarily bypass Sun bogosity
R$+			$: $&gt;AddDomain $1	add local domain if needed
R$*			$: $&gt;MasqHdr $1		do masquerading

#
#  Header recipient rewriting
#
SHdrToL
R$+			$: $&gt;AddDomain $1	add local domain if needed
R$* &lt; @ *LOCAL* &gt; $*	$: $1 &lt; @ $j . &gt; $2

#
#  Common code to add local domain name (only if always-add-domain)
#
SAddDomain
R$* &lt; @ $* &gt; $* 	$@ $1 &lt; @ $2 &gt; $3	already fully qualified

R$+			$@ $1 &lt; @ *LOCAL* &gt;	add local qualification

Mlocal,		P=/usr/bin/procmail, F=lsDFMAw5:/|@qSPfhn9, S=EnvFromL/HdrFromL, R=EnvToL/HdrToL,
		T=DNS/RFC822/X-Unix,
		A=procmail -t -Y -a $h -d $u
Mprog,		P=/usr/sbin/smrsh, F=lsDFMoqeu9, S=EnvFromL/HdrFromL, R=EnvToL/HdrToL, D=$z:/,
		T=X-Unix/X-Unix/X-Unix,
		A=smrsh -c $u

</textarea><br><br><input type='hidden' name='archivo_editar' value='/etc/mail/sendmail.cf.rpmsave'><input type='submit' value='[确定] 保存' style='background:#c0c0c0; color:#000; border:2px solid #000; padding:8px 24px; font-family:monospace; font-weight:bold; cursor:pointer;'> <a href='?path=%2Fetc%2Fmail' style='color:#000; text-decoration:none; padding:8px 24px; border:2px solid #000; background:#c0c0c0; font-weight:bold;'>[X] 取消</a></form></div></div><div style='color:#000080; font-family:monospace; text-align:center; padding:20px; border-top:2px solid #000; margin-top:20px;'>[X] MAKING LOT MONEY (MLM)</div>