Sendmail

前提条件

SMTP AUTH
START TLS
MSPのSMTP AUTH PLAIN認証はTLS接続時のみ
IPv6

m4マクロ

SMTP AUTH

define(`confAUTH_MECHANISMS', `DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl
define(`confAUTH_OPTIONS', `p y')dnl
TRUST_AUTH_MECH(`DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl

START TLS

define(`CERT_DIR', `/etc/ssl')dnl
define(`confCACERT_PATH',`CERT_DIR')dnl
define(`confCACERT', `CERT_DIR/cert.pem')dnl
define(`confSERVER_CERT',`CERT_DIR/server.pem')dnl
define(`confSERVER_KEY',`CERT_DIR/server.key')dnl
define(`confCLIENT_CERT',`CERT_DIR/server.pem')dnl
define(`confCLIENT_KEY',`CERT_DIR/server.key')dnl
define(`confDONT_BLAME_SENDMAIL', `GroupReadableKeyFile')dnl
define(`confTLS_SRV_OPTIONS', `V')dnl

IPv4/v6 Dual Stack

FEATURE(`no_default_msa')
DAEMON_OPTIONS(`Name=IPv4, Family=inet')dnl
DAEMON_OPTIONS(`Port=587, Name=MSA, Family=inet, M=Ea')dnl
DAEMON_OPTIONS(`Name=IPv6, Family=inet6, Modifiers=O')dnl
DAEMON_OPTIONS(`Port=587, Name=MSAv6, Family=inet6, M=Ea')dnl

DoS対策

define(`SMTP_MAILER_MAX', `10485760')dnl
define(`confMAX_MESSAGE_SIZE', `10485760')dnl
define(`confCONNECTION_RATE_THROTTLE', `1')dnl

spam対策

define(`confMILTER_MACROS_ENVRCPT', `Z, v, r, b, {rcpt_mailer}, {rcpt_host}, {rcpt_addr}')dnl
INPUT_MAIL_FILTER(`sid-filter', `S=local:/var/run/sid-filter, F=T,T=R:2m')dnl
INPUT_MAIL_FILTER(`dkim-filter', `S=local:/var/run/milteropendkim/socket, F=T, T=R:2m')dnl
INPUT_MAIL_FILTER(`spamass-filter', `S=local:/var/run/spamass-milter.sock, F=T, T=R:2m')dnl

Cyrus IMAP

define(`confLOCAL_MAILER',`cyrusv2')dnl
define(`CYRUSV2_MAILER_ARGS', `FILE /var/imap/socket/lmtp')dnl
MAILER(cyrusv2)