"Fossies" - the Fresh Open Source Software Archive

Member "sendmail-8.15.2/RELEASE_NOTES" (29 Jun 2015, 542868 Bytes) of package /linux/misc/sendmail.8.15.2.tar.gz:

As a special service "Fossies" has tried to format the requested text file into HTML format (style: standard) with prefixed line numbers. Alternatively you can here view or download the uninterpreted source code file. See also the latest Fossies "Diffs" side-by-side code changes report for "RELEASE_NOTES": 8.15.1_vs_8.15.2.

    4 This listing shows the version of the sendmail binary, the version
    5 of the sendmail configuration files, the date of release, and a
    6 summary of the changes in that release.
    8 8.15.2/8.15.2	2015/07/03
    9 	If FEATURE(`nopercenthack') is used then some bogus input triggered
   10 		a recursion which was caught and logged as
   11 		SYSERR: rewrite: excessive recursion (max 50) ...
   12 		Fix based on patch from Ondrej Holas.
   13 	DHParameters now by default uses an included 2048 bit prime.
   14 		The value 'none' previously caused a log entry claiming
   15 		there was an error "cannot read or set DH parameters".
   16 		Also note that this option applies to the server side only.
   17 	The U= mailer field didn't accept group names containing hyphens,
   18 		underbars, or periods.  Based on patch from David Gwynne
   19 		of the University of Queensland.
   20 	CONFIG: Allow connections from IPv6:0:0:0:0:0:0:0:1 to relay again.
   21 		Patch from Lars-Johan Liman of Netnod Internet Exchange.
   22 	CONFIG: New option UseCompressedIPv6Addresses to select between
   23 		compressed and uncompressed IPv6 addresses.  The default
   24 		value depends on the compile-time option IPV6_FULL:
   25 		For 1 the default is False, for 0 it is True, thus
   26 		preserving the current behaviour.  Based on patch from
   27 		John Beck of Oracle.
   28 	CONFIG: Account for IPv6 localhost addresses in
   29 		FEATURE(`block_bad_helo').  Suggested by Andrey Chernov
   30 		from FreeBSD and Robert Scheck from the Fedora Project.
   31 	CONFIG: Account for IPv6 localhost addresses in check_mail ruleset.
   32 	LIBMILTER: Deal with more invalid protocol data to avoid potential
   33 		crashes.  Problem noted by Dimitri Kirchner.
   34 	LIBMILTER: Allow a milter to specify an empty macro list ("", not
   35 		NULL) in smfi_setsymlist() so no macro is sent for the
   36 		selected stage.
   37 	MAKEMAP: A change to check TrustedUser in fewer cases which was
   38 		made in 2013 caused a potential regression when makemap
   39 		was run as root (which should not be done anyway).
   40 	Note: sendmail often contains options "For Future Releases"
   41 		(prefix _FFR_) which might be enabled in a subsequent
   42 		version or might simply be removed as they turned out not
   43 		to be really useful.  These features are usually not
   44 		documented but if they are, then the required (FFR)
   45 		options are listed in
   46 		- doc/op/op.* for rulesets and macros,
   47 		- cf/README for mc/cf options.
   49 8.15.1/8.15.1	2014/12/06
   50 	SECURITY: Properly set the close-on-exec flag for file descriptors
   51 		(except stdin, stdout, and stderr) before executing mailers.
   52 	If header rewriting fails due to a temporary map lookup failure,
   53 		queue the mail for later retry instead of sending it
   54 		without rewriting the header.  Note: this is done
   55 		while the mail is being sent and hence the transaction
   56 		is aborted, which only works for SMTP/LMTP mailers
   57 		hence the handling of temporary map failures is
   58 		suppressed for other mailers. SMTP/LMTP servers may
   59 		complain about aborted transactions when this problem
   60 		occurs.
   61 		See also "DNS Lookups" in sendmail/TUNING.
   62 	Incompatible Change: Use uncompressed IPv6 addresses by default,
   63 		i.e., they will not contain "::".  For example,
   64 		instead of ::1 it will be 0:0:0:0:0:0:0:1.  This
   65 		permits a zero subnet to have a more specific match,
   66 		such as different map entries for IPv6:0:0 vs IPv6:0.
   67 		This change requires that configuration data
   68 		(including maps, files, classes, custom ruleset,
   69 		etc) must use the same format, so make certain such
   70 		configuration data is updated before using 8.15.
   71 		As a very simple check search for patterns like
   72 		'IPv6:[0-9a-fA-F:]*::' and 'IPv6::'. If necessary,
   73 		the prior format can be retained by compiling with:
   74 		APPENDDEF(`conf_sendmail_ENVDEF', `-DIPV6_FULL=0')
   75 		in your devtools/Site/site.config.m4 file.
   76 	If debugging is turned on (-d0.14) also print the OpenSSL
   77 		versions, both build time and run time
   78 		(provided STARTTLS is compiled in).
   79 	If a connection to the MTA is dropped by the client before its
   80 		hostname can be validated, treat it as "may be forged",
   81 		so that the unvalidated hostname is not passed to a
   82 		milter in xxfi_connect().
   83 	Add a timeout for communication with socket map servers
   84 		which can be specified using the -d option.
   85 	Add a compile time option HESIOD_ALLOW_NUMERIC_LOGIN to allow
   86 		numeric logins even if HESIOD is enabled.
   87 	The new option CertFingerprintAlgorithm specifies the finger-
   88 		print algorithm (digest) to use for the presented cert.
   89 		If the option is not set, md5 is used and the macro
   90 		{cert_md5} contains the cert fingerprint.
   91 		However, if the option is set, the specified algorithm
   92 		(e.g., sha1) is used and the macro {cert_fp} contains
   93 		the cert fingerprint.
   94 		That is, as long as the option is not set, the behaviour
   95 		does not change, but otherwise, {cert_md5} is superseded
   96 		by {cert_fp} even if you set CertFingerprintAlgorithm
   97 		to md5.
   98 	The options ServerSSLOptions and ClientSSLOptions can be used
   99 		to set SSL options for the server and client side
  100 		respectively. See SSL_CTX_set_options(3) for a list.
  101 		Note: this change turns on SSL_OP_NO_SSLv2 and
  102 		SSL_OP_NO_TICKET for the client. See doc/op/op.me
  103 		for details.
  104 	The option CipherList sets the list of ciphers for STARTTLS.
  105 		See ciphers(1) for possible values.
  106 	Do not log "STARTTLS: internal error: tls_verify_cb: ssl == NULL"
  107 		if a CRLFfile is in use (and LogLevel is 14 or higher.)
  108 	Store a more specific TLS protocol version in ${tls_version}
  109 		instead of a generic one, e.g., TLSv1 instead of
  110 		TLSv1/SSLv3.
  111 	Properly set {client_port} value on little endian machines.
  112 		Patch from Kelsey Cummings of Sonic.net.
  113 	Per RFC 3848, indicate in the Received: header whether SSL or
  114 		SMTP AUTH was negotiated by setting the protocol clause
  115 		to ESMTPS, ESMTPA, or ESMTPSA instead of ESMTP.
  116 	If the 'C' flag is listed as TLSSrvOptions the requirement for the
  117 		TLS server to have a cert is removed.  This only works
  118 		under very specific circumstances and should only be used
  119 		if the consequences are understood, e.g., clients
  120 		may not work with a server using this.
  121 	The options ClientCertFile, ClientKeyFile, ServerCertFile, and
  122 		ServerKeyFile can take a second file name, which must be
  123 		separated from the first with a comma (note: do not use
  124 		any spaces) to set up a second cert/key pair. This can
  125 		be used to have certs of different types, e.g., RSA
  126 		and DSA.
  127 	A new map type "arpa" is available to reverse an IP (IPv4 or IPv6)
  128 		address. It returns the string for the PTR lookup, but
  129 		without trailing {ip6,in-addr}.arpa.
  130 	New operation mode  'C' just checks the configuration file, e.g.,
  131 		sendmail -C new.cf -bC
  132 		will perform a basic syntax/consistency check of new.cf.
  133 	The mailer flag 'I' is deprecated and will be removed in a
  134 		future version.
  135 	Allow local (not just TCP) socket connections to the server, e.g.,
  136 		O DaemonPortOptions=Family=local, Addr=/var/mta/server.sock
  137 		can be used.
  138 	If the new option MaxQueueAge is set to a value greater than zero,
  139 		entries in the queue will be retried during a queue run
  140 		only if the individual retry time has been reached which
  141 		is doubled for each attempt.  The maximum retry time is
  142 		limited by the specified value.
  143 	New DontBlameSendmail option GroupReadableDefaultAuthInfoFile
  144 		to relax requirement for DefaultAuthInfo file.
  145 	Reset timeout after receiving a message to appropriate value if
  146 		STARTTLS is in use.  Based on patch by Kelsey Cummings
  147 		of Sonic.net.
  148 	Report correct error messages from the LDAP library for a range of
  149 		small negative return values covering those used by OpenLDAP.
  150 	Fix compilation with Berkeley DB 5.0 and 6.0.  Patch from
  151 		Allan E Johannesen of Worcester Polytechnic Institute.
  152 	CONFIG: FEATURE(`nopercenthack') takes one parameter: reject or
  153 		nospecial which describes whether to disallow "%" in the
  154 		local part of an address.
  155 	DEVTOOLS: Fix regression in auto-detection of libraries when only
  156 		shared libraries are available.  Problem reported by
  157 		Bryan Costales.
  158 	LIBMILTER: Mark communication socket as close-on-exec in case
  159 		a user's filter starts other applications.
  160 		Based on patch from Paul Howarth.
  161 	Portability:
  162 		SunOS 5.12 has changed the API for sigwait(2) to conform
  163 		with XPG7.  Based on patch from Roger Faulkner of Oracle.
  164 	Deleted Files:
  165 		libsm/path.c
  167 8.14.9/8.14.9	2014/05/21
  168 	SECURITY: Properly set the close-on-exec flag for file descriptors
  169 		(except stdin, stdout, and stderr) before executing mailers.
  170 	Fix a misformed comment in conf.c: "/*" within comment
  171 		which may cause a compilation error on some systems.
  172 		Problem reported by John Beck of Oracle.
  173 	DEVTOOLS: Fix regression in auto-detection of libraries when only
  174 		shared libraries are available.  Problem reported by
  175 		Bryan Costales.
  177 8.14.8/8.14.8	2014/01/26
  178 	Properly initialize all OpenSSL algorithms for versions before
  179 		OpenSSL 0.9.8o. Without this SHA2 algorithms may not
  180 		work properly, causing for example failures for certs
  181 		that use sha256WithRSAEncryption as signature algorithm.
  182 	When looking up hostnames, ensure only to return those records
  183 		for the requested family (AF_INET or AF_INET6).
  184 		On system that have NEEDSGETIPNODE and NETINET6
  185 		this may have failed and cause delivery problems.
  186 		Problem noted by Kees Cook.
  187 	A new mailer flag '!' is available to suppress an MH hack
  188 		that drops an explicit From: header if it is the
  189 		same as what sendmail would generate.
  190 	Add an FFR (for future release) to use uncompressed IPv6 addresses,
  191 		i.e., they will not contain "::".  For example, instead
  192 		of ::1 it will be 0:0:0:0:0:0:0:1.  This means that
  193 		configuration data (including maps, files, classes,
  194 		custom ruleset, etc) have to use the same format.
  195 		This will be turned on in 8.15.  It can be enabled in 8.14
  196 		by compiling with:
  197 		APPENDDEF(`conf_sendmail_ENVDEF', `-D_FFR_IPV6_FULL')
  198 		in your devtools/Site/site.config.m4 file.
  199 	Add an additional case for the WorkAroundBrokenAAAA check when
  200 		dealing with broken nameservers by ignoring SERVFAIL
  201 		errors returned on T_AAAA (IPv6) lookups at delivery time.
  202 		Problem noted by Pavel Timofeev of OCS.
  203 	If available, pass LOGIN_SETCPUMASK and LOGIN_SETLOGINCLASS to
  204 		setusercontext() on deliveries as a different user.
  205 		Patch from Edward Tomasz Napierala from FreeBSD.
  206 	Avoid compiler warnings from a change in Cyrus-SASL 2.1.25.
  207 		Patch from Hajimu UMEMOTO from FreeBSD.
  208 	Add support for DHParameters 2048-bit primes.
  209 	CONFIG: Accept IPv6 literals when evaluating the HELO/EHLO argument
  210 		in FEATURE(`block_bad_helo').  Suggested by Andrey Chernov.
  211 	LIBSMDB: Add a missing check for malloc() in libsmdb/smndbm.c.
  212 		Patch from Bill Parker.
  213 	LIBSMDB: Fix minor memory leaks in libsmdb/ if allocations
  214 		fail.  Patch from John Beck of Oracle.
  215 	Portability:
  216 		Add support for Darwin 12.x and 13.x (Mac OS X 10.8 and 10.9).
  217 		On Linux use socklen_t as the type for the 3rd argument
  218 		for getsockname/getpeername if the glibc version is at
  219 		least 2.1.
  220 	Added Files:
  221 		devtools/OS/Darwin.12.x
  222 		devtools/OS/Darwin.13.x
  224 8.14.7/8.14.7	2013/04/21
  225 	Drop support for IPv4-mapped IPv6 addresses to prevent the MTA
  226 		from using a mapped address over a legitimate IPv6 address
  227 		and to enforce the proper semantics over the IPv6
  228 		connection.  Problem noted by Ulrich Sporlein.
  229 	Fix a regression introduced in 8.14.6: the wrong list of
  230 		macros was sent to a milter in the EHLO stage.
  231 		Problem found by Fabrice Bellet, reported via RedHat
  232 		(Jaroslav Skarvada).
  233 	Fix handling of ORCPT parameter for DSNs: xtext decoding
  234 		was not performed and a wrong syntax check was applied
  235 		to the "addr-type" field.  Problem noted by Dan Lukes
  236 		of Obludarium.
  237 	Fix handling of NUL characters in the MIME conversion functions
  238 		so that message bodies containing them will be sent
  239 		on properly. Note: this usually also affects mails
  240 		that are not converted as those functions are used
  241 		for other purposes too.  Problem noted by Elchonon
  242 		Edelson of Lockheed Martin.
  243 	Do not perform "duplicate" elimination of recipients if they
  244 		resolve to the error mailer using a temporary failure
  245 		(4xy) via ruleset 0.  Problem noted by Akira Takahashi
  246 		of IIJ.
  247 	CONTRIB: Updated version of etrn.pl script from John Beck
  248 		of Oracle.
  249 	Portability:
  250 		Unlike gcc, clang doesn't apply full prototypes to K&R
  251 		definitions.
  253 8.14.6/8.14.6	2012/12/23
  254 	Fix a regression introduced in 8.14.5: if a server offers
  255 		two AUTH lines, the MTA would not read them after
  256 		STARTTLS has been used and hence SMTP AUTH for
  257 		the client side would fail.  Problem noted by Lena.
  258 	Do not cache hostnames internally in a non case sensitive way
  259 		as that may cause addresses to change from lower case
  260 		to upper case or vice versa. These header modifications
  261 		can cause problems with milters that rely on receiving
  262 		headers in the same way as they are being sent out such
  263 		as a DKIM signing milter.
  264 	If MaxQueueChildren is set then it was possible that new queue
  265 		runners could not be started anymore because an
  266 		internal counter was subject to a race condition.
  267 	If a milter decreases the timeout it waits for a communication
  268 		with the MTA, the MTA might experience a write() timeout.
  269 		In some situations, the resulting error might have been
  270 		ignored.  Problem noted by Werner Wiethege.
  271 		Note: decreasing the communication timeout in a milter
  272 		should not be done without considering the potential
  273 		problems.
  274 	smfi_setsymlist() now properly sets the list of macros for
  275 		the milter which invoked it, instead of a global
  276 		list for all milters.  Problem reported by
  277 		David Shrimpton of the University of Queensland.
  278 	If Timeout.resolver.retrans is set to a value larger than 20,
  279 		then resolver.retry was temporarily set to 0 for
  280 		gethostbyaddr() lookups. Now it is set to 1 instead.
  281 		Patch from Peter.
  282 	If sendmail could not lock the statistics file due to a system
  283 		error, and sendmail later sends a DSN for a mail that
  284 		triggered such an error, then sendmail tried to access
  285 		memory that was freed before (causing a crash on some
  286 		systems).  Problem reported by Ryan Stone.
  287 	Do not log negative values for size= nor pri= to avoid confusing
  288 		log parsers, instead limit the values to LONG_MAX.
  289 	Account for an API change in newer versions of Cyrus-SASL.
  290 		Patch from Hajimu UMEMOTO from FreeBSD.
  291 	Do not try to resolve link-local addresses for IPv4 (just as it
  292 		is done for IPv6).  Patch from John Beck of Oracle.
  293 	Improve logging of client and server STARTTLS connection failures
  294 		that may be due to incompatible cipher lists by including
  295 		the reason for the failure in a single log line.  Suggested
  296 		by James Carey of Boeing.
  297 	Portability:
  298 		Add support for Darwin 11.x (Mac OS X 10.7).
  299 		Add support for SunOS 5.12 (aka Solaris 12). Patch from
  300 		John Beck of Oracle.
  301 	Added Files:
  302 		devtools/OS/Darwin.11.x
  303 		devtools/OS/SunOS.5.12
  305 8.14.5/8.14.5	2011/05/17
  306 	Do not cache SMTP extensions across connections as the cache
  307 		is based on hostname which may not be a unique identifier
  308 		for a server, i.e., different machines may have the
  309 		same hostname but provide different SMTP extensions.
  310 		Problem noted by Jim Hermann.
  311 	Avoid an out-of-bounds access in case a resolver reply for a DNS
  312 		map lookup returns a size larger than 1K.  Based on a
  313 		patch from Dr. Werner Fink of SuSE.
  314 	If a job is aborted using the interrupt signal (e.g., control-C from
  315 		the keyboard), perform minimal cleanup to avoid invoking
  316 		functions that are not signal-safe. Note: in previous
  317 		versions the mail might have been queued up already
  318 		and would be delivered subsequently, now an interrupt
  319 		will always remove the queue files and thus prevent
  320 		delivery.
  321 	Per RFC 6176, when operating as a TLS client, do not offer SSLv2.
  322 	Since TLS session resumption is never used as a client, disable
  323 		use of RFC 4507-style session tickets.
  324 	Work around gcc4 versions which reverse 25 years of history and
  325 		no longer align char buffers on the stack, breaking calls
  326 		to resolver functions on strict alignment platforms.
  327 		Found by Stuart Henderson of OpenBSD.
  328 	Read at most two AUTH lines from a server greeting (up to two
  329 		lines are read because servers may use "AUTH mechs" and
  330 		"AUTH=mechs"). Otherwise a malicious server may exhaust
  331 		the memory of the client.  Bug report by Nils of MWR
  332 		InfoSecurity.
  333 	Avoid triggering an assertion in the OpenLDAP code when the
  334 		connection to an LDAP server is lost while making a query.
  335 		Problem noted and patch provided by Andy Fiddaman.
  336 	If ConnectOnlyTo is set and sendmail is compiled with NETINET6
  337 		it would try to use an IPv6 address if an IPv4 (or
  338 		unparseable) address is specified.
  339 	If SASLv2 is used, make sure that the macro {auth_authen} is
  340 		stored in xtext format to avoid problems with parsing
  341 		it.  Problem noted by Christophe Wolfhugel.
  342 	CONFIG: FEATURE(`ldap_routing') in 8.14.4 tried to add a missing
  343 		-T<TMPF> that is required, but failed for some cases
  344 		that did not use LDAP.  This change has been undone
  345 		until a better solution can be implemented.  Problem
  346 		found by Andy Fiddaman.
  347 	CONFIG: Add cf/ostype/solaris11.m4 for Solaris11 support.
  348 		Contributed by Casper Dik of Oracle.
  349 	CONTRIB: qtool.pl: Deal with H entries that do not have a
  350 		letter between the question marks.  Patch from
  351 		Stefan Christensen.
  352 	DOC: Use a better description for the -i option in sendmail.
  353 		Patch from Mitchell Berger.
  354 	Portability:
  355 		Add support for Darwin 10.x (Mac OS X 10.6).
  356 		Enable HAVE_NANOSLEEP for FreeBSD 3 and later.  Patch
  357 		from John Marshall.
  358 		Enable HAVE_NANOSLEEP for OpenBSD 4.3 and later.
  359 		Use new directory "/system/volatile" for PidFile on
  360 		Solaris 11.  Patch from Casper Dik of Oracle.
  361 		Fix compilation on Solaris 11 (and maybe some other
  362 		OSs) when using OpenSSL 1.0.  Based on patch from
  363 		Jan Pechanec of Oracle.
  364 		Set SOCKADDR_LEN_T and SOCKOPT_LEN_T to socklen_t
  365 		for Solaris 11.  Patch from Roger Faulkner of Oracle.
  366 	New Files:
  367 		cf/ostype/solaris11.m4
  369 8.14.4/8.14.4	2009/12/30
  370 	SECURITY: Handle bogus certificates containing NUL characters
  371 		in CNs by placing a string indicating a bad certificate
  372 		in the {cn_subject} or {cn_issuer} macro.  Patch inspired
  373 		by Matthias Andree's changes for fetchmail.
  374 	During the generation of a queue identifier an integer overflow
  375 		could occur which might result in bogus characters
  376 		being used.  Based on patch from John Vannoy of
  377 		Pepperdine University.
  378 	The value of headers, e.g., Precedence, Content-Type, et.al.,
  379 		was not processed correctly.  Patch from Per Hedeland.
  380 	Between 8.11.7 and 8.12.0 the length limitation on a return
  381 		path was erroneously reduced from MAXNAME (256) to
  382 		MAXSHORTSTR (203).  Patch from John Gardiner Myers
  383 		of Proofpoint; the problem was also noted by Steve
  384 		Hubert of University of Washington.
  385 	Prevent a crash when a hostname lookup returns a seemingly
  386 		valid result which contains a NULL pointer (this seems
  387 		to be happening on some Linux versions).
  388 	The process title was missing the current load average when
  389 		the MTA was delaying connections due to DelayLA.
  390 		Patch from Dick St.Peters of NetHeaven.
  391 	Do not reset the number of queue entries in shared memory if
  392 		only some of them are processed.
  393 	Fix overflow of an internal array when parsing some replies
  394 		from a milter.  Problem found by Scott Rotondo
  395 		of Sun Microsystems.
  396 	If STARTTLS is turned off in the server (via M=S) then it
  397 		would not be initialized for use in the client either.
  398 		Patch from Kazuteru Okahashi of IIJ.
  399 	If a Diffie-Hellman cipher is selected for STARTTLS, the
  400 		handshake could fail with some TLS implementations
  401 		because the prime used by the server is not long enough.
  402 		Note: the initialization of the DSA/DH parameters for
  403 		the server can take a significant amount of time on slow
  404 		machines. This can be turned off by setting DHParameters
  405 		to none or a file (see doc/op/op.me).  Patch from
  406 		Petr Lampa of the Brno University of Technology.
  407 	Fix handling of `b' modifier for DaemonPortOptions on little
  408 		endian machines for loopback address.  Patch from
  409 		John Beck of Sun Microsystems.
  410 	Fix a potential memory leak in libsmdb/smdb1.c found by parfait.
  411 		Based on patch from Jonathan Gray of OpenBSD.
  412 	If a milter sets the reply code to "421" during the transfer
  413 		of the body, the SMTP server will terminate the SMTP session
  414 		with that error to match the behavior of the other callbacks.
  415 	Return EX_IOERR (instead of 0) if a mail submission fails due to
  416 		missing disk space in the mail queue.  Based on patch
  417 		from Martin Poole of RedHat.
  418 	CONFIG: Using FEATURE(`ldap_routing')'s `nodomain' argument would
  419 		cause addresses not found in LDAP to be misparsed.
  420 	CONFIG: Using a CN restriction did not work for TLS_Clt as it
  421 		referred to a wrong macro.  Patch from John Gardiner
  422 		Myers of Proofpoint.
  423 	CONFIG: The option relaytofulladdress of FEATURE(`access_db')
  424 		did not work if FEATURE(`relay_hosts_only') is used too.
  425 		Problem noted by Kristian Shaw.
  426 	CONFIG: The internal function lower() was broken and hence
  427 		strcasecmp() did not work either, which could cause
  428 		problems for some FEATURE()s if upper case arguments
  429 		were used.  Patch from Vesa-Matti J Kari of the
  430 		University of Helsinki.
  431 	LIBMILTER: Fix internal check whether a milter application
  432 		is compiled against the same version of libmilter as
  433 		it is linked against (especially useful for dynamic
  434 		libraries).
  435 	LIBMILTER: Fix memory leak that occurred when smfi_setsymlist()
  436 		was used.  Based on patch by Dan Lukes.
  437 	LIBMILTER: Document the effect of SMFIP_HDR_LEADSPC for filters
  438 		which add, insert, or replace headers.  From Benjamin
  439 		Pineau.
  440 	LIBMILTER: Fix error messages which refer to "select()" to be
  441 		correct if SM_CONF_POLL is used.  Based on patch from
  442 		John Nemeth.
  443 	LIBSM: Fix handling of LDAP search failures where the error is
  444 		carried in the search result itself, such as seen with
  445 		OpenLDAP proxy servers.
  446 	VACATION: Do not refer to a local variable outside its scope.
  447 		Based on patch from Mark Costlow of Southwest Cyberport.
  448 	Portability:
  449 		Enable HAVE_NANOSLEEP for SunOS 5.11. Patch from
  450 		John Beck of Sun Microsystems.
  451 		Drop NISPLUS from default SunOS 5.11 map definitions.
  452 		Patch from John Beck of Sun Microsystems.
  454 8.14.3/8.14.3	2008/05/03
  455 	During ruleset processing the generation of a key for a map
  456 		lookup and the parsing of the default value was broken
  457 		for some macros, e.g., $|, which caused the BlankSub
  458 		character to be inserted into the workspace and thus
  459 		failures, e.g., rules that should have matched did not.
  460 	8.14.2 caused a regression: it accessed (macro) storage which was
  461 		freed before. First instance of the problem reported by
  462 		Matthew Dillon of DragonFlyBSD; variations of the same
  463 		bug reported by Todd C. Miller of OpenBSD, Moritz
  464 		Jodeit, and Dave Hayes.
  465 	Improve pathname length checks for persistent host status.  Patch
  466 		from Joerg Sonnenberger of DragonFlyBSD.
  467 	Reword misleading SMTP reply text for FEATURE(`badmx').  Problem
  468 		noted by Beth Halsema.
  469 	The read timeout was fixed to be Timeout.datablock if STARTTLS
  470 		was activated. This may cause problems if that value
  471 		is lowered from its default. Problem noted by Jens Elkner.
  472 	CONFIG: Using LOCAL_TLS_CLIENT caused the tls_client ruleset
  473 		to operate incorrectly.  Problem found by Werner Wiethege.
  474 	LIBMILTER: Omitting some protocol steps via the xxfi_negotiate()
  475 		callback did not work properly. The patchlevel of
  476 		libmilter has been set to 1 so a milter can determine
  477 		whether libmilter contains this fix.
  478 	MAKEMAP: If a delimiter is specified (-t) use that also when
  479 		dumping a map.  Patch from Todd C. Miller of OpenBSD.
  480 	Portability:
  481 		Add support for Darwin 9.x (Mac OS X 10.5).
  482 		Support shared libraries in Darwin 8 and 9.  Patch from
  483 		Chris Behrens of Concentric.
  484 		Add support for SCO OpenServer 6, patch from Boyd Gerber.
  485 	DEVTOOLS: Clarify that confSHAREDLIBDIR requires a trailing slash.
  486 	Added Files:
  487 		devtools/OS/Darwin.9.x
  488 		devtools/OS/OSR.i386
  490 8.14.2/8.14.2	2007/11/01
  491 	If a message was queued and it contained 8 bit characters in
  492 		a From: or To: header, then those characters could be
  493 		"mistaken" for internal control characters during a queue
  494 		run and trigger various consistency checks.  Problem
  495 		noted by Neil Rickert of Northern Illinois University.
  496 	If MaxMimeHeaderLength is set to a value greater than 0 (which
  497 		it is by default) then even if the Linelimit parameter
  498 		is 0, sendmail corrupted in the non-transfer-encoding
  499 		case every MAXLINE-1 characters.  Patch from John Gardiner
  500 		Myers of Proofpoint.
  501 	Setting the suboption DeliveryMode for DaemonPortOptions did not
  502 		work in earlier 8.14 versions.
  503 	Note: DeliveryMode=interactive is silently converted to
  504 		background if a milter can reject or delete a recipient.
  505 		Prior to 8.14 this happened only if milter could delete
  506 		recipients.
  507 	ClientRate should trigger when the limit was exceeded (as
  508 		documented), not when it was reached.  Patch from
  509 		John Beck of Sun Microsystems.
  510 	Force a queue run for -qGqueuegroup even if no runners are
  511 		specified (R=0) and forking (F=f) is requested.
  512 	When multiple results are requested for a DNS map lookup
  513 		(-z and -Z), return only those that are relevant for
  514 		the query (not also those in the "additional section".)
  515 	If the message transfer time to sendmail (when acting as server)
  516 		exceeds Timeout.queuewarn or Timeout.queuereturn and
  517 		the message is refused (by a milter), sendmail previously
  518 		created a delivery status notification (DSN).  Patch
  519 		from Doug Heath of The Hertz Corporation.
  520 	A code change in Cyrus-SASL 2.1.22 for sasl_decode64() requires
  521 		the MTA to deal with some input (i.e., "=") itself.
  522 		Problem noted by Eliot Lear.
  523 	sendmail counted a delivery as successful if PIPELINING is
  524 		compiled in but not offered by the server and the
  525 		delivery failed temporarily.  Patch from Werner Wiethege.
  526 	If getting the result of an LDAP query times out then close the
  527 		map so it will be reopened on the next lookup.  This
  528 		should help "failover" configurations that specify more
  529 		than one LDAP server.
  530 	If check_compat returns $#discard then a "savemail panic" could
  531 		be triggered under some circumstances (e.g., requiring
  532 		a system which does not have the compile time flag
  533 		HASFLOCK set). Based on patch by Motonori Nakamura
  534 		of National Institute of Informatics, Japan.
  535 	If a milter rejected a recipient, the count for nrcpts= in the
  536 		logfile entry might have been wrong.  Problem found by
  537 		Petra Humann of TU Dresden.
  538 	If a milter invoked smfi_chgfrom() where ESMTP arguments are not
  539 		NULL, the message body was lost.  Patch from Motonori
  540 		Nakamura of National Institute of Informatics, Japan.
  541 	sendmail(8) had a bogus space in -qGname.  Patch from Peng Haitao.
  542 	CONTRIB: buildvirtuser: Preserve ownership and permissions when
  543 		replacing files.
  544 	CONTRIB: buildvirtuser: Skip dot-files (e.g., .cvsignore) when
  545 		reading the /etc/mail/virtusers/ directory.
  546 	CONTRIB: buildvirtuser: Emit warnings instead of exiting where
  547 		appropriate.
  548 	LIBMILTER: Fix ABI backwards compatibility so milters compiled
  549 		against an older libmilter.so shared library can use an
  550 		8.14 libmilter.so shared library.
  551 	LIBMILTER: smfi_version() did not properly extract the patchlevel
  552 		from the version number, however, the returned value was
  553 		correct for the current libmilter version.
  555 8.14.1/8.14.1	2007/04/03
  556 	Even though a milter rejects a recipient the MTA will still keep
  557 		it in its list of recipients and deliver to it if the
  558 		transaction is accepted. This is a regression introduced
  559 		in 8.14.0 due to the change for SMFIP_RCPT_REJ.  Bug
  560 		found by Andy Fiddaman.
  561 	The new DaemonPortOptions which begin with a lower case character
  562 		could not be set in 8.14.0.
  563 	If a server shut down the connection in response to a STARTTLS
  564 		command, sendmail would log a misleading error message
  565 		due to an internal inconsistency.  Problem found by
  566 		Werner Wiethege.
  567 	Document how some sendmail.cf options change the behavior of mailq.
  568 		Noted by Paul Menchini of the North Carolina School of
  569 		Science and Mathematics.
  570 	CONFIG: Add confSOFT_BOUNCE m4 option for setting SoftBounce.
  571 	CONFIG: 8.14.0's RELEASE_NOTES failed to mention the addition
  573 		m4 options for setting MaxNOOPCommands and
  574 		SharedMemoryKeyFile.
  576 		options for setting Milter.macros.eoh and Milter.macros.data.
  577 	CONTRIB: Use flock() and fcntl() in qtool.pl if necessary.
  578 		Patch from Daniel Carroll of Mesa State College.
  579 	LIBMILTER: Make sure an unknown command does not affect the
  580 		currently available macros.  Problem found by Andy Fiddaman.
  581 	LIBMILTER: The MTA did not offer SMFIF_SETSYMLIST during option
  582 		negotiation.  Problem reported by Bryan Costales.
  583 	LIBMILTER: Fix several minor errors in the documentation.
  584 		Patches from Bryan Costales.
  586 		AIX 5.{1,2}: libsm/util.c failed to compile due to
  587 			redefinition of several macros, e.g., SIG_ERR.
  588 			Patch from Jim Pirzyk with assistance by Bob
  589 			Booth, University of Illinois at Urbana-Champaign.
  590 		Add support for QNX.6.  Patch from Sean Boudreau of QNX
  591 			Software Systems.
  592 	New Files:
  593 		devtools/M4/depend/QNX6.m4
  594 		devtools/OS/QNX.6.x
  595 		include/sm/os/sm_os_qnx.h
  597 	New Files added in 8.14.0, but not shown in the release notes entry:
  598 		libmilter/docs/smfi_chgfrom.html
  599 		libmilter/docs/smfi_version.html
  601 8.14.0/8.14.0	2007/01/31
  602 	Header field values are now 8 bit clean.  Notes:
  603 		- header field names are still restricted to 7 bit.
  604 		- RFC 2822 allows only 7 bit (US-ASCII) characters in
  605 		  headers.
  606 	Preserve spaces after the colon in a header.  Previously, any
  607 		number of spaces after the colon would be changed to
  608 		exactly one space.
  609 	In some cases of deeply nested aliases/forwarding, mail can
  610 		be silently lost.  Moreover, the MaxAliasRecursion
  611 		limit may be reached too early, e.g., the counter
  612 		may be off by a factor of 4 in case of a sequence of
  613 		.forward files that refer to others.  Patch from
  614 		Motonori Nakamura of Kyoto University.
  615 	Fix a regression in 8.13.8: if InputMailFilters is set then
  616 		"sendmail -bs" can trigger an assertion because the
  617 		hostname of the client is undefined.  It is now set
  618 		to "localhost" for the xxfi_connect() callback.
  619 	Avoid referencing a freed variable during cleanup when terminating.
  620 		Problem reported and diagnosed by Joe Maimon.
  621 	New option HeloName to set the name for the HELO/EHLO command.
  622 		Patch from Nik Clayton.
  623 	New option SoftBounce to issue temporary errors (4xy) instead of
  624 		permanent errors (5xy).  This can be useful for testing.
  625 	New suboptions for DaemonPortOptions to set them individually
  626 		per daemon socket:
  627 			DeliveryMode	DeliveryMode
  628 			refuseLA	RefuseLA
  629 			delayLA		DelayLA
  630 			queueLA		QueueLA
  631 			children	MaxDaemonChildren
  632 	New option -K for LDAP maps to replace %1 through %9 in the
  633 		lookup key with the LDAP escaped contents of the
  634 		arguments specified in the map lookup.  Loosely based
  635 		on patch from Wolfgang Hottgenroth.
  636 	Log the time after which a greet_pause delay triggered.  Patch
  637 		from Nik Clayton.
  638 	If a client is rejected via TCP wrapper or some other check
  639 		performed by validate_connection() (in conf.c) then do
  640 		not also invoke greet_pause.  Problem noted by Jim Pirzyk
  641 		of the University of Illinois at Urbana-Champaign.
  642 	If a client terminates the SMTP connection during a pause
  643 		introduced by greet_pause, then a misleading message
  644 		was logged previously.  Problem noted by Vernon Schryver
  645 		et.al., patch from Matej Vela.
  646 	New command "mstat" for control socket to provide "machine
  647 		readable" status.
  648 	New named config file rule check_eom which is called at the end
  649 		of a message, its parameter is the size of the message.
  650 	If the macro {addr_type} indicates that the current address
  651 		is a header address it also distinguishes between
  652 		recipient and sender addresses (as it is done for
  653 		envelope addresses).
  654 	When a macro is set in check_relay, then its value is accessible
  655 		by all transactions in the same SMTP session.
  656 	Increase size of key for ldap lookups to 1024 (MAXKEY).
  657 	New option MaxNOOPCommands to override default of 20 for the
  658 		number of "useless" commands before the SMTP server will
  659 		slow down responding.
  660 	New option SharedMemoryKeyFile: if shared memory support is
  661 		enabled, the MTA can be asked to select a shared memory
  662 		key itself by setting SharedMemoryKey to -1 and specifying
  663 		a file where to store the selected key.
  664 	Try to deal with open HTTP proxies that are used to send spam
  665 		by recognizing some commands from them. If the first command
  666 		from the client is GET, POST, CONNECT, or USER, then the
  667 		connection is terminated immediately.
  668 	New PrivacyOptions noactualrecipient to avoid putting
  669 		X-Actual-Recipient lines in DSNs revealing the actual
  670 		account that addresses map to.  Patch from Dan Harkless.
  671 	New options B, z, and Z for DNS maps:
  672 		-B: specify a domain that is always appended to queries.
  673 		-z: specify the delimiter at which to cut off the result of
  674 			a query if it is too long.
  675 		-Z: specify the maximum number of entries to be concatenated
  676 			to form the result of a lookup.
  677 	New target "check" in the Makefile of libsm: instead of running tests
  678 		implicitly while building libsm, they must be explicitly
  679 		started by using "make check".
  680 	Fixed some inconsistent checks for NULL pointers that have been
  681 		reported by the SATURN tool which has been developed by
  682 		Isil Dillig and Thomas Dillig of Stanford University.
  683 	Fix a potential race condition caused by a signal handler for
  684 		terminated child processes.  Problem noted by David F. Skoll.
  685 	When a milter deleted a recipient, that recipient could cause a
  686 		queue group selection. This has been disabled as it was not
  687 		intended.
  688 	New operator 'r' for the arith map to return a random number.
  689 		Patch from Motonori Nakamura of Kyoto University.
  690 	New compile time option MILTER_NO_NAGLE to turn off the Nagle
  691 		algorithm for communication with libmilter ("cork" on Linux),
  692 		which may improve the communication performance on some
  693 		operating systems.  Patch from John Gardiner Myers of
  694 		Proofpoint.
  695 	If sendmail received input that contained a CR without subsequent LF
  696 		(thus violating RFC 2821 (2.3.7)), it could previously
  697 		generate an additional blank line in the output as the last
  698 		line.
  699 	Restarting persistent queue runners by sending a HUP signal to
  700 		the "queue control process" (QCP) works now.
  701 	Increase the length of an input line to 12288 to deal with
  702 		really long lines during SMTP AUTH negotiations.
  703 		Problem noted by Werner Wiethege.
  704 	If ARPANET mode (-ba) was selected STARTTLS would fail (due to
  705 		a missing initialization call for that case).  Problem
  706 		noted by Neil Rickert of Northern Illinois University.
  707 	If sendmail is linked against a library that initializes Cyrus-SASL
  708 		before sendmail did it (such as libnss-ldap), then SMTP AUTH
  709 		could fail for the sendmail client.  A patch by Moritz Both
  710 		works around the API design flaw of Cyrus-SASLv2.
  711 	CONFIG: Make it possible to unset the StatusFile option by
  712 		undefining STATUS_FILE.  By not setting StatusFile,
  713 		the MTA will not attempt to open a statistics file on
  714 		each delivery.
  715 	CONFIG: New FEATURE(`require_rdns') to reject messages from SMTP
  716 		clients whose IP address does not have proper reverse DNS.
  717 		Contributed by Neil Rickert of Northern Illinois University
  718 		and John Beck of Sun Microsystems.
  719 	CONFIG: New FEATURE(`block_bad_helo') to reject messages from SMTP
  720 		clients which provide a HELO/EHLO argument which is either
  721 		unqualified, or is one of our own names (i.e., the server
  722 		name instead of the client name).  Contributed by Neil
  723 		Rickert of Northern Illinois University and John Beck of
  724 		Sun Microsystems.
  725 	CONFIG: New FEATURE(`badmx') to reject envelope sender addresses
  726 		(MAIL) whose domain part resolves to a "bad" MX record.
  727 		Based on contribution from William Dell Wisner.
  728 	CONFIG: New macros SMTP_MAILER_LL and RELAY_MAILER_LL to override
  729 		the maximum line length of the smtp mailers.
  730 	CONFIG: New option `relaytofulladdress' for FEATURE(`access_db')
  731 		to allow entries in the access map to be of the form
  732 			To:user@example.com	RELAY
  733 	CONFIG: New subsuboptions eoh and data to specify the list of
  734 		macros a milter should receive at those stages in the
  735 		SMTP dialogue.
  736 	CONFIG: New option confHELO_NAME for HeloName to set the name
  737 		for the HELO/EHLO command.
  738 	CONFIG: dnsbl and enhdnsbl can now also discard or quarantine
  739 		messages by using those values as second argument.
  740 		Patches from Nelson Fung.
  741 	CONTRIB: cidrexpand uses a hash symbol as comment character and
  742 		ignores everything after it unless it is in quotes or
  743 		preceeded by a backslash.
  744 	DEVTOOLS: New macro confMKDIR: if set to a program that creates
  745 		directories, then it used for "make install" to create
  746 		the required installation directories.
  747 	DEVTOOLS: New macro confCCLINK to specify the linker to use for
  748 		executables (defaults to confCC).
  749 	LIBMILTER: A new version of the milter API has been created that
  750 		has several changes which are listed below and documented
  751 		in the webpages reachable via libmilter/docs/index.html.
  752 	LIBMILTER: The meaning of the version macro SMFI_VERSION has been
  753 		changed.  It now refers only to the version of libmilter,
  754 		not to the protocol version (which is used only internally,
  755 		it is not user/milter-programmer visible).  Additionally,
  756 		a version function smfi_version() has been introduced such
  757 		that a milter program can check the libmilter version also
  758 		at runtime which is useful if a shared library is used.
  759 	LIBMILTER: A new callback xxfi_negotiate() can be used to
  760 		dynamically (i.e., at runtime) determine the available
  761 		protocol actions and features of the MTA and also to
  762 		specify which of these a milter wants to use.  This allows
  763 		for more flexibility than hardcoding these flags in the
  764 		xxfi_flags field of the smfiDesc structure.
  765 	LIBMILTER: A new callback xxfi_data() is available so milters
  766 		can act on the DATA command.
  767 	LIBMILTER: A new callback xxfi_unknown() is available so milters
  768 		can receive also unknown SMTP commands.
  769 	LIBMILTER: A new return code SMFIS_NOREPLY has been added which
  770 		can be used by the xxfi_header() callback provided the
  771 		milter requested the SMFIP_NOHREPL protocol action.
  772 	LIBMILTER: The new return code SMFIS_SKIP can be used in the
  773 		xxfi_body() callback to skip over further body chunks
  774 		and directly advance to the xxfi_eom() callback.  This
  775 		is useful if a milter can make a decision based on the
  776 		body chunks it already received without reading the entire
  777 		rest of the body and the milter wants to invoke functions
  778 		that are only available from the xxfi_eom() callback.
  779 	LIBMILTER: A new function smfi_addrcpt_par() can be used to add
  780 		new recipients including ESMTP parameters.
  781 	LIBMILTER: A new function smfi_chgfrom() can be used to change the
  782 		envelope sender including ESMTP parameters.
  783 	LIBMILTER: A milter can now request to be informed about rejected
  784 		recipients (RCPT) too.  This requires to set the protocol
  785 		flag SMFIP_RCPT_REJ during option negotiation.  Whether
  786 		a RCPT has been rejected can be checked by comparing the
  787 		value of the macro {rcpt_mailer} with "error".
  788 	LIBMILTER: A milter can now override the list of macros that it
  789 		wants to receive from the MTA for each protocol step
  790 		by invoking the function smfi_setsymlist() during option
  791 		negotiation.
  792 	LIBMILTER: A milter can receive header field values with all
  793 		leading spaces by requesting the SMFIP_HDR_LEADSPC
  794 		protocol action.  Also, if the flag is set then the MTA
  795 		does not add a leading space to headers that are added,
  796 		inserted, or replaced.
  797 	LIBMILTER: If a milter sets the reply code to "421" for the HELO
  798 		callback, the SMTP server will terminate the SMTP session
  799 		with that error to match the behavior of all other callbacks.
  800 	New Files:
  801 		cf/feature/badmx.m4
  802 		cf/feature/block_bad_helo.m4
  803 		cf/feature/require_rdns.m4
  804 		devtools/M4/UNIX/check.m4
  805 		include/sm/misc.h
  806 		include/sm/sendmail.h
  807 		include/sm/tailq.h
  808 		libmilter/docs/smfi_addrcpt_par.html
  809 		libmilter/docs/smfi_setsymlist.html
  810 		libmilter/docs/xxfi_data.html
  811 		libmilter/docs/xxfi_negotiate.html
  812 		libmilter/docs/xxfi_unknown.html
  813 		libmilter/example.c
  814 		libmilter/monitor.c
  815 		libmilter/worker.c
  816 		libsm/memstat.c
  817 		libsm/t-memstat.c
  818 		libsm/t-qic.c
  819 		libsm/util.c
  820 		sendmail/daemon.h
  821 		sendmail/map.h
  823 8.13.8/8.13.8	2006/08/09
  824 	Fix a regression in 8.13.7: if shared memory is activated, then
  825 		the server can erroneously report that there is
  826 		insufficient disk space.  Additionally make sure that
  827 		an internal variable is set properly to avoid those
  828 		misleading errors.  Based on patch from Steve Hubert
  829 		of University of Washington.
  830 	Fix a regression in 8.13.7: the PidFile could be removed after
  831 		the process that forks the daemon exited, i.e., if
  832 		sendmail -bd is invoked.  Problem reported by Kan Sasaki
  833 		of Fusion Communications Corp. and Werner Wiethege.
  834 	Avoid opening qf files if QueueSortOrder is "none".  Patch from
  835 		David F. Skoll.
  836 	Avoid a crash when finishing due to referencing a freed variable.
  837 		Problem reported and diagnosed by Moritz Jodeit.
  838 	CONTRIB: cidrexpand now deals with /0 by issuing the entire IPv4
  839 		range (0..255).
  840 	LIBMILTER: The "hostname" argument of the xxfi_connect() callback
  841 		previously was the equivalent of {client_ptr}.  However,
  842 		this did not match the documentation of the function, hence
  843 		it has been changed to {client_name}.  See doc/op/op.me
  844 		about these macros.
  846 8.13.7/8.13.7	2006/06/14
  847 	A malformed MIME structure with many parts can cause sendmail to
  848 		crash while trying to send a mail due to a stack overflow,
  849 		e.g., if the stack size is limited (ulimit -s).  This
  850 		happens because the recursion of the function mime8to7()
  851 		was not restricted.  The function is called for MIME 8 to
  852 		7 bit conversion and also to enforce MaxMimeHeaderLength.
  853 		To work around this problem, recursive calls are limited to
  854 		a depth of MAXMIMENESTING (20); message content after this
  855 		limit is treated as opaque and is not checked further.
  856 		Problem noted by Frank Sheiness.
  857 	The changes to the I/O layer in 8.13.6 caused a regression for
  858 		SASL mechanisms that use the security layer, e.g.,
  859 		DIGEST-MD5.  Problem noted by Robert Stampfli.
  860 	If a timeout occurs while reading a message (during the DATA phase)
  861 		a df file might have been left behind in the queue.
  862 		This was another side effect of the changes to the I/O
  863 		layer made in 8.13.6.
  864 	Several minor problems have been fixed that were found by a
  865 		Coverity scan of sendmail 8 as part of the NetBSD
  866 		distribution. See http://scan.coverity.com/
  867 		Note: the scan generated also a lot of "false positives",
  868 		e.g., "error" reports about situations that cannot happen.
  869 		Most of those code places are marked with lint(1) comments
  870 		like NOTREACHED, but Coverity does not understand those.
  871 		Hence an explicit assertion has been added in some cases
  872 		to avoid those false positives.
  873 	If the start of the sendmail daemon fails due to a configuration
  874 		error then in some cases shared memory segments or pid
  875 		files were not removed.
  876 	If DSN support is disabled via access_db, then related ESMTP
  877 		parameters for MAIL and RCPT should be rejected.  Problem
  878 		reported by Akihiro Sagawa.
  879 	Enabling zlib compression in OpenSSL 0.9.8[ab] breaks the padding
  880 		bug work-around.  Hence if sendmail is linked against
  881 		either of these versions and compression is available,
  882 		the padding bug work-around is turned off.  Based on
  883 		patch from Victor Duchovni of Morgan Stanley.
  884 	CONFIG: FEATURE(`dnsbl') and FEATURE(`enhdnsbl') used
  885 		blackholes.mail-abuse.org as default domain for lookups,
  886 		however, that list is no longer available.  To avoid
  887 		further problems, no default value is available anymore,
  888 		but an argument must be specified.
  889 	Portability:
  890 		Fix compilation on OSF/1 for sfsasl.c.  Patch from
  891 		Pieter Bowman of the University of Utah.
  893 8.13.6/8.13.6	2006/03/22
  894 	SECURITY: Replace unsafe use of setjmp(3)/longjmp(3) in the server
  895 		and client side of sendmail with timeouts in the libsm I/O
  896 		layer and fix problems in that code.  Also fix handling of
  897 		a buffer in sm_syslog() which could have been used as an
  898 		attack vector to exploit the unsafe handling of
  899 		setjmp(3)/longjmp(3) in combination with signals.
  900 		Problem detected by Mark Dowd of ISS X-Force.
  901 	Handle theoretical integer overflows that could triggered if
  902 		the server accepted headers larger than the maximum
  903 		(signed) integer value.  This is prevented in the default
  904 		configuration by restricting the size of a header, and on
  905 		most machines memory allocations would fail before reaching
  906 		those values.  Problems found by Phil Brass of ISS.
  907 	If a server returns 421 for an RSET command when trying to start
  908 		another transaction in a session while sending mail, do
  909 		not trigger an internal consistency check.  Problem found
  910 		by Allan E Johannesen of Worcester Polytechnic Institute.
  911 	If a server returns a 5xy error code (other than 501) in response
  912 		to a STARTTLS command despite the fact that it advertised
  913 		STARTTLS and that the code is not valid according to RFC
  914 		2487 treat it nevertheless as a permanent failure instead
  915 		of a protocol error (which has been changed to a
  916 		temporary error in 8.13.5).  Problem reported by Jeff
  917 		A. Earickson of Colby College.
  918 	Clear SMTP state after a HELO/EHLO command.  Patch from John
  919 		Myers of Proofpoint.
  920 	Observe MinQueueAge option when gathering entries from the queue
  921 		for sorting etc instead of waiting until the entries are
  922 		processed.  Patch from Brian Fundakowski Feldman.
  923 	Set up TLS session cache to properly handle clients that try to
  924 		resume a stored TLS session.
  925 	Properly count the number of (direct) child processes such that
  926 		a configured value (MaxDaemonChildren) is not exceeded.
  927 		Based on patch from Attila Bruncsak.
  928 	LIBMILTER: Remove superfluous backslash in macro definition
  929 		(libmilter.h).  Based on patch from Mike Kupfer of
  930 		Sun Microsystems.
  931 	LIBMILTER: Don't try to set SO_REUSEADDR on UNIX domain sockets.
  932 		This generates an error message from libmilter on
  933 		Solaris, though other systems appear to just discard the
  934 		request silently.
  935 	LIBMILTER: Deal with sigwait(2) implementations that return
  936 		-1 and set errno instead of returning an error code
  937 		directly.  Patch from Chris Adams of HiWAAY Informations
  938 		Services.
  939 	Portability:
  940 		Fix compilation checks for closefrom(3) and statvfs(2)
  941 		in NetBSD.  Problem noted by S. Moonesamy, patch from
  942 		Andrew Brown.
  944 8.13.5/8.13.5	2005/09/16
  945 	Store the filesystem identifier of the df/ subdirectory (if it
  946 		exists) in an internal structure instead of the base
  947 		directory.  This structure is used decide whether there
  948 		is enough free disk space when selecting a queue, hence
  949 		without this change queue selection could fail if a df/
  950 		subdirectory exists and is on a different filesystem
  951 		than the base directory.
  952 	Use the queue index of the df file (instead of the qf file) for
  953 		checking whether a link(2) operation can be used to split
  954 		an envelope across queue groups.  Problem found by
  955 		Werner Wiethege.
  956 	If the list of items in the queue is larger than the maximum
  957 		number of items to process, sort the queue first and
  958 		then cut the list off instead of the other way around.
  959 		Patch from Matej Vela of Rudjer Boskovic Institute.
  960 	Fix helpfile to show full entry for ETRN.  Problem noted by
  961 		Penelope Fudd, patch from Neil Rickert of Northern Illinois
  962 		University.
  963 	FallbackSmartHost should also be tried on temporary errors.
  964 		From John Beck of Sun Microsystems.
  965 	When a server responds with 421 to the STARTTLS command then treat
  966 		it as a temporary error, not as protocol error.  Problem
  967 		noted by Andrey J. Melnikoff.
  968 	Properly define two functions in libsm as static because their
  969 		prototype used static too.  Patch from Peter Klein.
  970 	Fix syntax errors in helpfile for MAIL and RCPT commands.
  971 	LIBMILTER: When smfi_replacebody() is called with bodylen equals
  972 		zero then do not silently ignore that call.  Patch from
  973 		Gurusamy Sarathy of Active State.
  974 	LIBMILTER: Recognize "421" also in a multi-line reply to terminate
  975 		the SMTP session with that error.  Fix from Brian Kantor.
  976 	Portability: New option HASSNPRINTF which can be set if the OS
  977 			has a properly working snprintf(3) to get rid
  978 			of the last two (safe) sprintf(3) calls in the
  979 			source code.
  980 		Add support for AIX 5.3.
  981 		Add support for SunOS 5.11 (aka Solaris 11).
  982 		Add support for Darwin 8.x.  Patch from Lyndon Nerenberg.
  983 		OpenBSD 3.7 has removed support for NETISO.
  984 	CONFIG: Add OSTYPE(freebsd6) for FreeBSD 6.X.
  985 		Set DontBlameSendmail to AssumeSafeChown and
  986 			GroupWritableDirPathSafe for OSTYPE(darwin).
  987 			Patch from Lyndon Nerenberg.
  988 		Some features still used 4.7.1 as enhanced status code which
  989 			was supposed to be eliminated in 8.13.0 because some
  990 			broken systems misinterpret it as a permanent error.
  991 			Patch from Matej Vela of Rudjer Boskovic Institute.
  992 		Some default values in a generated cf file did not match
  993 			the defaults in the sendmail binary.  Problem noted
  994 			by Mike Pechkin.
  995 	New Files:
  996 		cf/ostype/freebsd6.m4
  997 		devtools/OS/AIX.5.3
  998 		devtools/OS/Darwin.8.x
  999 		devtools/OS/SunOS.5.11
 1000 		include/sm/time.h
 1002 8.13.4/8.13.4	2005/03/27
 1003 	The bug fixes in 8.13.3 for connection handling uncovered a
 1004 		different error which could result in connections that
 1005 		stay in CLOSE_WAIT state due to a variable that was not
 1006 		properly initialized.  Problem noted by Michael Sims.
 1007 	Deal with empty hostnames in hostsignature().  This bug could lead
 1008 		to an endless loop when doing LMTP deliveries to another
 1009 		host.  Problem first reported by Martin Lathoud and
 1010 		tracked down by Gael Roualland.
 1011 	Make sure return parameters are initialized in getmxrr().  Problem
 1012 		found by Gael Roualland using valgrind.
 1013 	If shared memory is used and the RunAsUser option is set, then the
 1014 		owner and group of the shared memory segment is set to
 1015 		the ids specified RunAsUser and the access mode is set
 1016 		to 0660 to allow for updates by sendmail processes.
 1017 	The number of queue entries that is (optionally) kept in shared
 1018 		memory was wrong in some cases, e.g., envelope splitting
 1019 		and bounce generation.
 1020 	Undo a change made in 8.13.0 to silently truncate long strings
 1021 		in address rewriting because the message can be triggered
 1022 		for header checks where long strings are legitimate.
 1023 		Problem reported by Mary Verge DeSisto, and tracked
 1024 		down with the help of John Beck of Sun Microsystems.
 1025 	The internal stab map did not obey the -m flag.  Patch from
 1026 		Rob McMahon of Warwick University, England.
 1027 	The socket map did not obey the -f flag.  Problem noted by
 1028 		Dan Ringdahl, forwarded by Andrzej Filip.
 1029 	The addition of LDAP recursion in 8.13.0 broke enforcement of
 1030 		the LDAP map -1 argument which tells the MTA to only
 1031 		return success if and only if a single LDAP match is found.
 1032 	Add additional error checks in the MTA for milter communication
 1033 		to avoid a possible segmentation fault.  Based on patch
 1034 		by Joe Maimon.
 1035 	Do not trigger an assertion if X509_digest() returns success but
 1036 		does not assign a value to its output parameter.  Based
 1037 		on patch by Brian Kantor.
 1038 	Add more checks when resetting internal AUTH data (applies only
 1039 		to Cyrus SASL version 2).  Otherwise an SMTP session might
 1040 		be dropped after an AUTH failure.
 1041 	Portability:
 1042 		Add LA_LONGLONG as valid LA_TYPE type for systems that use
 1043 			"long long" to read load average data, e.g.,
 1044 			AIX 5.1 in 32 bit mode.  Note: this has to be set
 1045 			"by hand", it is not (yet) automatically detected.
 1046 			Problem noted by Burak Bilen.
 1047 		Use socklen_t for accept(), etc. on AIX 5.x.  This should
 1048 			fix problems when compiling in 64 bit mode.
 1049 			Problem first reported by Harry Meiert of
 1050 			University of Bremen.
 1051 	New Files:
 1052 		include/sm/sem.h
 1053 		libsm/sem.c
 1054 		libsm/t-sem.c
 1056 8.13.3/8.13.3	2005/01/11
 1057 	Enhance handling of I/O errors, especially EOF, when STARTTLS
 1058 		is active.
 1059 	Make sure a connection is not reused after it has been closed
 1060 		due to a 421 error.  Problem found by Allan E Johannesen
 1061 		of Worcester Polytechnic Institute.
 1062 	Avoid triggering an assertion when sendmail is interrupted while
 1063 		closing a connection.  Problem found by Allan E Johannesen
 1064 		of Worcester Polytechnic Institute.
 1065 	Regression: a change in 8.13.2 caused sendmail not to try the
 1066 		next MX host (or FallbackMXhost if configured) when, at
 1067 		connection open, the current server returns a 4xy or 5xy
 1068 		SMTP reply code.  Problem noted by Mark Tranchant.
 1070 8.13.2/8.13.2	2004/12/15
 1071 	Do not split the first header even if it exceeds the internal
 1072 		buffer size.  Previously a part of such a header would
 1073 		end up in the body of the message.  Problem noted by
 1074 		Simple Nomad of BindView.
 1075 	Do not complain about "cataddr: string too long" when checking
 1076 		headers that do not contain RFC 2822 addresses.
 1077 		Problem noted by Rich Graves of Brandeis University.
 1078 	If a server returns a 421 reply to the RSET command between
 1079 		message deliveries, do not attempt to deliver any more
 1080 		messages on that connection.  This prevents bogus "Bad
 1081 		file number" recipient status.  Problem noted by
 1082 		Allan E Johannesen of Worcester Polytechnic Institute.
 1083 	Allow trailing white space in EHLO command as recommended by RFC
 1084 		2821.  Problem noted by Ralph Santagato of SBC Services.
 1085 	Deal with clients which use AUTH but negotiate a smaller buffer size
 1086 		for data exchanges than the value used by sendmail, e.g.,
 1087 		Cyrus IMAP lmtp server.  Based on patch by Jamie Clark.
 1088 	When passing ESMTP arguments for RCPT to a milter, do not cut
 1089 		them off at a comma.  Problem noted by Krzysztof Oledzki.
 1090 	Add more logging to milter change header functions to
 1091 		complement existing logging.  Based on patch from
 1092 		Gurusamy Sarathy of Active State.
 1093 	Include <lber.h> in include/sm/config.h when LDAPMAP is defined.
 1094 		Patch from Edgar Hoch of the University of Stuttgart.
 1095 	Fix DNS lookup if IPv6 is enabled when converting an IP address
 1096 		to a hostname for use with SASL.  Problem noted by Ken Jones;
 1097 		patch from Hajimu UMEMOTO.
 1098 	CONFIG: For consistency enable MODIFY_MAILER_FLAGS for the prog
 1099 		mailer.  Patch from John Beck of Sun Microsystems.
 1100 	LIBMILTER: It was possible that xxfi_abort() was called after
 1101 		xxfi_eom() for a message if some timeouts were triggered.
 1102 		Patch from Alexey Kravchuk.
 1103 	LIBMILTER: Slightly rearrange mutex use in listener.c to allow
 1104 		different threads to call smfi_opensocket() and smfi_main().
 1105 		Patch from Jordan Ritter of Cloudmark.
 1106 	MAIL.LOCAL: Properly terminate MBDB before exiting.  Problem
 1107 		noted by Nelson Fung.
 1108 	MAIL.LOCAL: make strip-mail.local used a wrong path to access
 1109 		mail.local.  Problem noted by William Park.
 1110 	VACATION: Properly terminate MBDB before exiting.  Problem noted
 1111 		by Nelson Fung.
 1112 	Portability:
 1113 		Add support for DragonFly BSD.
 1114 	New Files:
 1115 		cf/ostype/dragonfly.m4
 1116 		devtools/OS/DragonFly
 1117 		include/sm/os/sm_os_dragonfly.h
 1118 	Deleted Files:
 1119 		libsm/vsscanf.c
 1121 8.13.1/8.13.1	2004/07/30
 1122 	Using the default AliasFile ldap: specification would cause the
 1123 		objectClasses of the LDAP response to be included in the
 1124 		alias expansion.  Problem noted by Brenden Conte of
 1125 		Rensselaer Polytechnic Institute.
 1126 	Fix support for a fallback smart host for system where DNS is
 1127 		(partially) available. From John Beck of Sun Microsystems.
 1128 	Fix SuperSafe=PostMilter behavior when a milter replaces a body
 1129 		but the data file is not yet stored on disk because it is
 1130 		smaller than the size of the memory buffer.  Problem noted
 1131 		by David Russell.
 1132 	Fix certificate revocation list support; if a CRL was specified
 1133 		but the other side presented a cert that was signed by
 1134 		a different (trusted) CA than the one which issued the CRL,
 1135 		verification would always fail.  Problem noted by Al Smith.
 1136 	Run mailer programs as the RunAsUser when RunAsUser is set and
 1137 		the F=S mailer flag is set without a U= mailer equate.
 1138 		Problem noted by John Gardiner Myers of Proofpoint.
 1139 	${nbadrcpts} was off by one if BadRcptThrottle is zero.
 1140 		Patch from Sung-hoon Choi of DreamWiz Inc.
 1141 	CONFIG: Emit a warning if FEATURE(`access_db') is used after
 1142 		FEATURE(`greet_pause') because then the latter will not
 1143 		use the access map.  Note: if no default value is given
 1144 		for FEATURE(`greet_pause') then it issues an error if
 1145 		FEATURE(`access_db') is not specified before it.
 1146 		Problem noted by Alexander Dalloz of University of
 1147 		Bielefeld.
 1148 	CONFIG: Invoke ruleset Local_greet_pause if FEATURE(`greet_pause')
 1149 		is used to give more flexibility for local changes.
 1150 	Portability:
 1151 		Fix a 64 bit problem in the socket map code.  Problem
 1152 			noted by Geoff Adams.
 1153 		NetBSD 2.0F has closefrom(3).  Patch from Andrew Brown.
 1154 		NetBSD can use sysctl(3) to get the number of CPUs in
 1155 			a system.  Patch from Andrew Brown.
 1156 		Add a README file in doc/op/ to explain potential
 1157 			incompatibilities with various *roff related
 1158 			tools.  Problem tracked down by Per Hedeland.
 1159 	New Files:
 1160 		doc/op/README
 1162 8.13.0/8.13.0	2004/06/20
 1163 	Do not include AUTH data in a bounce to avoid leaking confidential
 1164 		information.  See also cf/README about MSP and the section
 1165 		"Providing SMTP AUTH Data when sendmail acts as Client".
 1166 		Problem noted by Neil Rickert of Northern Illinois
 1167 		University.
 1168 	Fix compilation error in libsm/clock.c for -D_FFR_SLEEP_USE_SELECT=n
 1169 		and -DSM_CONF_SETITIMER=0.  Problem noted by Juergen Georgi
 1170 		of RUS University of Stuttgart.
 1171 	Fix bug in conversion from 8bit to quoted-printable. Problem found
 1172 		by Christof Haerens, patch from Per Hedeland.
 1173 	Add support for LDAP recursion based on types given to attribute
 1174 		specifications in an LDAP map definition.  This allows
 1175 		LDAP queries to return a new query, a DN, or an LDAP
 1176 		URL which will in turn be queried.  See the ``LDAP
 1177 		Recursion'' section of doc/op/op.me for more information.
 1178 		Based on patch from Andrew Baucom.
 1179 	Extend the default LDAP specifications for AliasFile
 1180 		(O AliasFile=ldap:) and file classes (F{X}@LDAP) to
 1181 		include support for LDAP recursion via new attributes.
 1182 		See ``USING LDAP FOR ALIASES, MAPS, and CLASSES'' section
 1183 		of cf/README for more information.
 1184 	New option for LDAP maps: the -w option allows you to specify the
 1185 		LDAP API/protocol version to use.  The default depends on
 1186 		the LDAP library.
 1187 	New option for LDAP maps: the -H option allows you to specify an
 1188 		LDAP URI instead of specifying the LDAP server via -h host
 1189 		and -p port.  This also allows for the use of LDAP over
 1190 		SSL and connections via named sockets if your LDAP
 1191 		library supports it.
 1192 	New compile time flag SM_CONF_LDAP_INITIALIZE: set this if
 1193 		ldap_initialize(3) is available (and LDAPMAP is set).
 1194 	If MaxDaemonChildren is set and a command is repeated too often
 1195 		during a SMTP session then terminate it just like it is
 1196 		done for too many bad SMTP commands.
 1197 	Basic connection rate control support has been added: the daemon
 1198 		maintains the number of incoming connections per client
 1199 		IP address and total in the macros {client_rate} and
 1200 		{total_rate}, respectively.  These macros can be used
 1201 		in the cf file to impose connection rate limits.
 1202 		A new option ConnectionRateWindowSize (default: 60s)
 1203 		determines the length of the interval for which the
 1204 		number of connections is stored.  Based on patch from
 1205 		Jose Marcio Martins da Cruz, Ecole des Mines de Paris.
 1206 	Add optional protection from open proxies and SMTP slammers which
 1207 		send SMTP traffic without waiting for the SMTP greeting.
 1208 		If enabled by the new ruleset greet_pause (see
 1209 		FEATURE(`greet_pause')), sendmail will wait the specified
 1210 		amount of time before sending the initial 220 SMTP
 1211 		greeting.  If any traffic is received before then, a 554
 1212 		SMTP response is sent and all SMTP commands are rejected
 1213 		during that connection.
 1214 	If 32 NOOP (or unknown/bad) commands are issued by a client the SMTP
 1215 		server could sleep for a very long time.  Fix based on
 1216 		patch from Tadashi Kobayashi of IIJ.
 1217 	Fix a potential memory leak in persistent queue runners if the
 1218 		number of entries in the queue exceeds the limit of jobs.
 1219 		Problem noted by Steve Hubert of University of Washington.
 1220 	Do not use 4.7.1 as enhanced status code because some broken systems
 1221 		misinterpret it as a permanent error.
 1222 	New value for SuperSafe: PostMilter which will delay fsync() until
 1223 		all milters accepted the mail.  This can increase
 1224 		performance if many mails are rejected by milters due to
 1225 		body scans.  Based on patch from David F. Skoll.
 1226 	New macro {msg_id} which contains the value of the Message-Id:
 1227 		header, whether provided by the client or generated by
 1228 		sendmail.
 1229 	New macro {client_connections} which contains the number of open
 1230 		connections in the SMTP server for the client IP address.
 1231 		Based on patch from Jose Marcio Martins da Cruz, Ecole des
 1232 		Mines de Paris.
 1233 	sendmail will now remove its pidfile when it exits.  This was done
 1234 		to prevent confusion caused by running sendmail stop
 1235 		scripts two or more times, where the second and subsequent
 1236 		runs would report misleading error messages about sendmail's
 1237 		pid no longer existing.  See section 1.3.15 of doc/op/op.me
 1238 		for a discussion of the implications of this, including
 1239 		how to correct broken scripts which may have depended on
 1240 		the old behavior.  From John Beck of Sun Microsystems.
 1241 	Support per-daemon input filter lists which override the default
 1242 		filter list specified in InputMailFilters.  The filters
 1243 		can be listed in the I= equate of DaemonPortOptions.
 1244 	Do not add all domain prefixes of the hostname to class 'w'.  If
 1245 		your configuration relies on this behavior, you have to
 1246 		add those names to class 'w' yourself.  Problem noted
 1247 		by Sander Eerkes.
 1248 	Support message quarantining in the mail queue.  Quarantined
 1249 		messages are not run on normal queue displays or runs
 1250 		unless specifically requested with -qQ.  Quarantined queue
 1251 		files are named with an hf prefix instead of a qf prefix.
 1252 	The -q command line option now can specify which queue to display
 1253 		or run.  -qQ operates on quarantined queue items.  -qL
 1254 		operates on lost queue items.
 1255 	Restricted mail queue runs and displays can be done based on the
 1256 		quarantined reason using -qQtext to run or display
 1257 		quarantined items if the quarantine reason contains the
 1258 		given text.  Similarly, -q!Qtext will run or display
 1259 		quarantined items which do not have the given text in the
 1260 		quarantine reason.
 1261 	Items in the queue can be quarantined or unquarantined using the
 1262 		new -Q option.  See doc/op/op.me for more information.
 1263 	When displaying the quarantine mailq with 'mailq -qQ', the
 1264 		quarantine reason is shown in a new line prefixed by
 1265 		"QUARANTINE:".
 1266 	A new error code for the $#error mailer, $@ quarantine, can be used
 1267 		to quarantine messages in check_* (except check_compat) and
 1268 		header check rulesets.  The $: of the mailer triplet will
 1269 		be used for the quarantine reason.
 1270 	Add a new quarantine count to the mailstats collected.
 1271 	Add a new macro ${quarantine} which is the quarantine reason for a
 1272 		message if it is quarantined.
 1273 	New map type "socket" for a trivial query protocol over UNIX domain
 1274 		or TCP sockets (requires compile time option SOCKETMAP).
 1275 		See sendmail/README and doc/op/op.me for details as well as
 1276 		socketmapServer.pl and socketmapClient.pl in contrib.
 1277 		Code donated by Bastiaan Bakker of LifeLine Networks.
 1278 	Define new macro ${client_ptr} which holds the result of the PTR
 1279 		lookup for the client IP address.  Note: this is the same
 1280 		as ${client_name} if and only if ${client_resolve} is OK.
 1281 	Add a new macro ${nbadrcpts} which contains the number of bad
 1282 		recipients received so far in a transaction.
 1283 	Call check_relay with the value of ${client_name} to deal with bogus
 1284 		DNS entries.  See also FEATURE(`use_client_ptr').  Problem
 1285 		noted by Kai Schlichting.
 1286 	Treat Delivery-Receipt-To: headers the same as Return-Receipt-To:
 1287 		headers (turn them into DSNs).  Delivery-Receipt-To: is
 1288 		apparently used by SIMS (Sun Internet Mail System).
 1289 	Enable connection caching for LPC mailers.  Patch from Christophe
 1290 		Wolfhugel of France Telecom Oleane.
 1291 	Do not silently truncate long strings in address rewriting.
 1292 	Add support for Cyrus SASL version 2.  From Kenneth Murchison of
 1293 		Oceana Matrix Ltd.
 1294 	Add a new AuthOption=m flag to require the use of mechanisms which
 1295 		support mutual authentication.  From Kenneth Murchison of
 1296 		Oceana Matrix Ltd.
 1297 	Fix logging of TLS related problems (introduced in 8.12.11).
 1298 	The macros {auth_author} and {auth_authen} are stored in xtext
 1299 		format just like the STARTTLS related macros to avoid
 1300 		problems with parsing them.  Problem noted by Pierangelo
 1301 		Masarati of SysNet s.n.c.
 1302 	New option AuthRealm to set the authentication realm that is
 1303 		passed to the Cyrus SASL library.  Patch from Gary Mills
 1304 		of the University of Manitoba.
 1305 	Enable AUTH mechanism EXTERNAL if STARTTLS verification was
 1306 		successful, otherwise relaying would be allowed if
 1307 		EXTERNAL is listed in TRUST_AUTH_MECH() and STARTTLS
 1308 		is active.
 1309 	Add basic support for certificate revocation lists.  Note: if a
 1310 		CRLFile is specified but the file is unusable, STARTTLS
 1311 		is disabled.  Based on patch by Ralf Hornik.
 1312 	Enable workaround for inconsistent Cyrus SASLv1 API for mechanisms
 1313 		DIGEST-MD5 and LOGIN.
 1314 	Write pid to file also if sendmail only acts as persistent queue
 1315 		runner.  Proposed by Gary Mills of the University of Manitoba.
 1316 	Keep daemon pid file(s) locked so other daemons don't try to
 1317 		overwrite each other's pid files.
 1318 	Increase maximum length of logfile fields for {cert_subject} and
 1319 		{cert_issuer} from 128 to 256.  Requested by Christophe
 1320 		Wolfhugel of France Telecom.
 1321 	Log the TLS verification message on the STARTTLS= log line at
 1322 		LogLevel 12 or higher.
 1323 	If the MSP is invoked with the verbose option (-v) then it will
 1324 		try to use the SMTP command VERB to propagate this option
 1325 		to the MTA which in turn will show the delivery just like
 1326 		it was done before the default 8.12 separation of MSP and
 1327 		MTA.  Based on patch by Per Hedeland.
 1328 	If a daemon is refusing connections for longer than the time specified
 1329 		by the new option RejectLogInterval (default: 3 hours) due
 1330 		to high load, log this information.  Patch from John Beck
 1331 		of Sun Microsystems.
 1332 	Remove the ability for non-trusted users to raise the value of
 1333 		CheckpointInterval on the command line.
 1334 	New mailer flag 'B' to strip leading backslashes, which is a
 1335 		subset of the functionality of the 's' flag.
 1336 	New mailer flag 'W' to ignore long term host status information.
 1337 		Patch from Juergen Georgi of RUS University of Stuttgart.
 1338 	Enable generic mail filter API (milter) by default.  To turn
 1339 		it off, add -DMILTER=0 to the compile time options.
 1340 	An internal SMTP session discard flag was lost after an RSET/HELO/EHLO
 1341 		causing subsequent messages to be sent instead of being
 1342 		discarded.  This also caused milter callbacks to be called
 1343 		out of order after the SMTP session was reset.
 1344 	New option RequiresDirfsync to turn off the compile time flag
 1345 		REQUIRES_DIR_FSYNC at runtime.  See sendmail/README for
 1346 		further information.
 1347 	New command line option -D logfile to send debug output to
 1348 		the indicated log file instead of stdout.
 1349 	Add Timeout.queuereturn.dsn and Timeout.queuewarn.dsn to control
 1350 		queue return and warning times for delivery status
 1351 		notifications.
 1352 	New queue sort order option: 'n'one for not sorting the queue entries
 1353 		at all.
 1354 	Several more return values for ruleset srv_features have been added
 1355 		to enable/disable certain features in the server per
 1356 		connection.  See doc/op/op.me for details.
 1357 	Support for SMTP over SSL (smtps), activated by Modifier=s
 1358 		for DaemonPortOptions.
 1359 	Continue with DNS lookups on ECONNREFUSED and TRY_AGAIN when
 1360 		trying to canonify hostnames.  Suggested by Neil Rickert
 1361 		of Northern Illinois University.
 1362 	Add support for a fallback smart host (option FallbackSmartHost) to
 1363 		be tried as a last resort after all other fallbacks.  This
 1364 		is designed for sites with partial DNS (e.g., an accurate
 1365 		view of inside the company, but an incomplete view of
 1366 		outside).  From John Beck of Sun Microsystems.
 1367 	Enable timeout for STARTTLS even if client does not start the TLS
 1368 		handshake.  Based on patch by Andrey J. Melnikoff.
 1369 	Remove deprecated -v option for PH map, use -k instead.  Patch from
 1370 		Mark Roth of the University of Illinois at Urbana-Champaign.
 1371 	libphclient is version 1.2.x by default, if version 1.1.x is required
 1372 		then compile with -DNPH_VERSION=10100.  Patch from Mark Roth
 1373 		of the University of Illinois at Urbana-Champaign.
 1374 	Add Milter.macros.eom, allowing macros to be sent to milter
 1375 		applications for use in the xxfi_eom() callback.
 1376 	New macro {time} which contains the output of the time(3) function,
 1377 		i.e., the number of seconds since 0 hours, 0 minutes,
 1378 		0 seconds, January 1, 1970, Coordinated Universal Time (UTC).
 1379 	If check_relay sets the reply code to "421" the SMTP server will
 1380 		terminate the SMTP session with a 421 error message.
 1381 	Get rid of dead code that tried to access the environment variable
 1383 	Deprecate the use of ErrorMode=write.  To enable this in 8.13
 1384 		compile with -DUSE_TTYPATH=1.
 1385 	Header check rulesets using $>+ (do not strip comments) will get
 1386 		the header value passed in without balancing quotes,
 1387 		parentheses, and angle brackets.  Based on patch from
 1388 		Oleg Bulyzhin.
 1389 	Do not complain and fix up unbalanced quotes, parentheses, and
 1390 		angle brackets when reading in rulesets.  This allows
 1391 		rules to be written for header checks to catch strings
 1392 		that contain quotes, parentheses, and/or angle brackets.
 1393 		Based on patch from Oleg Bulyzhin.
 1394 	Do not close socket when accept(2) in the daemon encounters
 1395 		some temporary errors like ECONNABORTED.
 1396 	Added list of CA certificates that are used by members of the
 1397 		sendmail consortium, see CACerts.
 1398 	Portability:
 1399 		Two new compile options have been added:
 1400 			HASCLOSEFROM	System has closefrom(3).
 1401 			HASFDWALK	System has fdwalk(3).
 1402 			Based on patch from John Beck of Sun Microsystems.
 1403 		The Linux kernel version 2.4 series has a broken flock() so
 1404 			change to using fcntl() locking until they can fix
 1405 			it.  Be sure to update other sendmail related
 1406 			programs to match locking techniques.
 1407 		New compile time option NEEDINTERRNO which should be set
 1408 			if <errno.h> does not declare errno itself.
 1409 		Support for UNICOS/mk and UNICOS/mp added, some changes for
 1410 			UNICOS.  Patches contributed by Aaron Davis and
 1411 			Brian Ginsbach, Cray Inc., and Manu Mahonen of
 1412 			Center for Scientific Computing.
 1413 		Add support for Darwin 7.0/Mac OS X 10.3 (a.k.a. Panther).
 1414 		Extend support to Darwin 7.x/Mac OS X 10.3 (a.k.a. Panther).
 1415 		Remove path from compiler definition for Interix because
 1416 			Interix 3.0 and 3.5 put gcc in different locations.
 1417 			Also use <sys/mkdev.h> to get the correct
 1418 			major()/minor() definitions.  Based on feedback
 1419 			from Mark Funkenhauser.
 1420 	CONFIG: Add support for LDAP recursion to the default LDAP searches
 1421 		for maps via new attributes.  See the ``USING LDAP FOR
 1422 		ALIASES, MAPS, and CLASSES'' section of cf/README and
 1423 		cf/sendmail.schema for more information.
 1424 	CONFIG: Make sure confTRUSTED_USER is valid even if confRUN_AS_USER
 1425 		is of the form "user:group" when used for submit.mc.
 1426 		Problem noted by Carsten P. Gehrke, patch from Neil Rickert
 1427 		of Northern Illinois University.
 1428 	CONFIG: Add a new access DB value of QUARANTINE:reason which
 1429 		instructs the check_* (except check_compat) to quarantine
 1430 		the message using the given reason.
 1431 	CONFIG: Use "dns -R A" as map type for dnsbl (just as for enhdnsbl)
 1432 		instead of "host" to avoid problem with looking up other
 1433 		DNS records than just A.
 1434 	CONFIG: New option confCONNECTION_RATE_WINDOW_SIZE to define the
 1435 		length of the interval for which the number of incoming
 1436 		connections is maintained.
 1437 	CONFIG: New FEATURE(`ratecontrol') to set the limits for connection
 1438 		rate control for individual hosts or nets.
 1439 	CONFIG: New FEATURE(`conncontrol') to set the limits for the
 1440 		number of open SMTP connections for individual hosts or nets.
 1441 	CONFIG: New FEATURE(`greet_pause') enables open proxy and SMTP
 1442 		slamming protection described above.  The feature can
 1443 		take an argument specifying the milliseconds to wait and/or
 1444 		use the access database to look the pause time based on
 1445 		client hostname, domain, IP address, or subnet.
 1446 	CONFIG: New FEATURE(`use_client_ptr') to have check_relay use
 1447 		$&{client_ptr} as its first argument.  This is useful for
 1448 		rejections based on the unverified hostname of client,
 1449 		which turns on the same behavior as in earlier sendmail
 1450 		versions when delay_checks was not in use.  See also entry
 1451 		above about check_relay being invoked with ${client_name}.
 1452 	CONFIG: New option confREJECT_LOG_INTERVAL to specify the log
 1453 		interval when refusing connections for this long.
 1454 	CONFIG: Remove quotes around usage of confREJECT_MSG; in some cases
 1455 		this requires a change in a mc file.  Requested by
 1456 		Ted Roberts of Electronic Data Systems.
 1457 	CONFIG: New option confAUTH_REALM to set the authentication realm
 1458 		that is passed to the Cyrus SASL library.  Patch from
 1459 		Gary Mills of the University of Manitoba.
 1460 	CONFIG: Rename the (internal) classes {tls}/{src} to {Tls}/{Src}
 1461 		to follow the naming conventions.
 1462 	CONFIG: Add a third optional argument to local_lmtp to specify
 1463 		the A= argument.
 1464 	CONFIG: Remove the f flag from the default mailer flags of
 1465 		local_lmtp.
 1466 	CONFIG: New option confREQUIRES_DIR_FSYNC to turn off the compile
 1467 		time flag REQUIRES_DIR_FSYNC at runtime.
 1468 	CONFIG: New LOCAL_UUCP macro to insert rules into the generated
 1469 		cf file at the same place where MAILER(`uucp') inserts
 1470 		its rules.
 1471 	CONFIG: New options confTO_QUEUERETURN_DSN and confTO_QUEUEWARN_DSN
 1472 		to control queue return and warning times for delivery
 1473 		status notifications.
 1474 	CONFIG: New option confFALLBACK_SMARTHOST to define FallbackSmartHost.
 1475 	CONFIG: Add the mc file which has been used to create the cf
 1476 		file to the end of the cf file when using make in cf/cf/.
 1477 		Patch from Richard Rognlie.
 1478 	CONFIG: FEATURE(nodns) has been removed, it was a no-op since 8.9.
 1479 		Use ServiceSwitchFile to turn off DNS lookups, see
 1480 		doc/op/op.me.
 1481 	CONFIG: New option confMILTER_MACROS_EOM (sendmail Milter.macros.eom
 1482 		option) defines macros to be sent to milter applications for
 1483 		use in the xxfi_eom() callback.
 1484 	CONFIG: New option confCRL to specify file which contains
 1485 		certificate revocations lists.
 1486 	CONFIG: Add a new value (sendertoo) for the third argument to
 1487 		FEATURE(`ldap_routing') which will reject the SMTP
 1488 		MAIL From: command if the sender address doesn't exist
 1489 		in LDAP.  See cf/README for more information.
 1490 	CONFIG: Add a fifth argument to FEATURE(`ldap_routing') which
 1491 		instructs the rulesets on whether or not to do a domain
 1492 		lookup if a full address lookup doesn't match.  See cf/README
 1493 		for more information.
 1494 	CONFIG: Add a sixth argument to FEATURE(`ldap_routing') which
 1495 		instructs the rulesets on whether or not to queue the mail
 1496 		or give an SMTP temporary error if the LDAP server can't be
 1497 		reached.  See cf/README for more information.  Based on
 1498 		patch from Billy Ray Miller of Caterpillar.
 1499 	CONFIG: Experimental support for MTAMark, see cf/README for details.
 1500 	CONFIG: New option confMESSAGEID_HEADER to define a different
 1501 		Message-Id: header format.  Patch from Bastiaan Bakker
 1502 		of LifeLine Networks.
 1503 	CONTRIB: New version of cidrexpand which uses Net::CIDR.  From
 1504 		Derek J. Balling.
 1505 	CONTRIB: oldbind.compat.c has been removed due to security problems.
 1506 		Found by code inspection done by Reasoning, Inc.
 1507 	DEVTOOLS: Add an example file for devtools/Site/, contributed
 1508 		by Neil Rickert of Northern Illinois University.
 1509 	LIBMILTER: Add new function smfi_quarantine() which allows the
 1510 		filter's EOM routine to quarantine the current message.
 1511 		Filters which use this function must include the
 1512 		SMFIF_QUARANTINE flag in the registered smfiDesc structure.
 1513 	LIBMILTER: If a milter sets the reply code to "421", the SMTP server
 1514 		will terminate the SMTP session with that error.
 1515 	LIBMILTER: Upon filter shutdown, libmilter will not remove a
 1516 		named socket in the file system if it is running as root.
 1517 	LIBMILTER: Add new function smfi_progress() which allows the filter
 1518 		to notify the MTA that an EOM operation is still in progress,
 1519 		resetting the timeout.
 1520 	LIBMILTER: Add new function smfi_opensocket() which allows the filter
 1521 		to attempt to establish the interface socket, and detect
 1522 		failure to do so before calling smfi_main().
 1523 	LIBMILTER: Add new function smfi_setmlreply() which allows the
 1524 		filter to return a multi-line SMTP reply.
 1525 	LIBMILTER: Deal with more temporary errors in accept() by ignoring
 1526 		them instead of stopping after too many occurred.
 1527 		Suggested by James Carlson of Sun Microsystems.
 1528 	LIBMILTER: Fix a descriptor leak in the sample program found in
 1529 		docs/sample.html.  Reported by Dmitry Adamushko.
 1530 	LIBMILTER: The sample program also needs to use SMFIF_ADDRCPT.
 1531 		Reported by Carl Byington of 510 Software Group.
 1532 	LIBMILTER: Document smfi_stop() and smfi_setdbg().  Patches
 1533 		from Bryan Costales.
 1534 	LIBMILTER: New compile time option SM_CONF_POLL; define this if
 1535 		poll(2) should be used instead of select(2).
 1536 	LIBMILTER: New function smfi_insheader() and related protocol
 1537 		amendments to support header insertion operations.
 1538 	MAIL.LOCAL: Add support for hashed mail directories, see
 1539 		mail.local/README.  Contributed by Chris Adams of HiWAAY
 1540 		Informations Services.
 1541 	MAILSTATS: Display quarantine message counts.
 1542 	MAKEMAP: Add new flag -D to specify the comment character to use
 1543 		instead of '#'.
 1544 	VACATION: Add new flag -j to auto-respond to messages regardless of
 1545 		whether or not the recipient is listed in the To: or Cc:
 1546 		headers.
 1547 	VACATION: Add new flag -R to specify the envelope sender address
 1548 		for the auto-response message.
 1549 	New Files:
 1550 		CACerts
 1551 		cf/feature/conncontrol.m4
 1552 		cf/feature/greet_pause.m4
 1553 		cf/feature/mtamark.m4
 1554 		cf/feature/ratecontrol.m4
 1555 		cf/feature/use_client_ptr.m4
 1556 		cf/ostype/unicos.m4
 1557 		cf/ostype/unicosmk.m4
 1558 		cf/ostype/unicosmp.m4
 1559 		contrib/socketmapClient.pl
 1560 		contrib/socketmapServer.pl
 1561 		devtools/OS/Darwin.7.0
 1562 		devtools/OS/UNICOS-mk
 1563 		devtools/OS/UNICOS-mp
 1564 		devtools/Site/site.config.m4.sample
 1565 		include/sm/os/sm_os_unicos.h
 1566 		include/sm/os/sm_os_unicosmk.h
 1567 		include/sm/os/sm_os_unicosmp.h
 1568 		libmilter/docs/smfi_insheader.html
 1569 		libmilter/docs/smfi_progress.html
 1570 		libmilter/docs/smfi_quarantine.html
 1571 		libmilter/docs/smfi_setdbg.html
 1572 		libmilter/docs/smfi_setmlreply.html
 1573 		libmilter/docs/smfi_stop.html
 1574 		sendmail/ratectrl.c
 1575 	Deleted Files:
 1576 		cf/feature/nodns.m4
 1577 		contrib/oldbind.compat.c
 1578 		devtools/OS/CRAYT3E.2.0.x
 1579 		devtools/OS/CRAYTS.10.0.x
 1580 		libsm/vsprintf.c
 1581 	Renamed Files:
 1582 		devtools/OS/Darwin.7.0 => devtools/OS/Darwin.7.x
 1584 8.12.11/8.12.11	2004/01/18
 1585 	Use QueueFileMode when opening qf files.  This error was a
 1586 		regression in 8.12.10.  Problem detected and diagnosed
 1587 		Lech Szychowski of the Polish Power Grid Company.
 1588 	Properly count the number of queue runners in a work group and
 1589 		make sure the total limit of MaxQueueChildren is not
 1590 		exceeded.  Based on patch from Takayuki Yoshizawa of
 1591 		Techfirm, Inc.
 1592 	Take care of systems that can generate time values where the
 1593 		seconds can exceed the usual range of 0 to 59.
 1594 		Problem noted by Randy Diffenderfer of EDS.
 1595 	Avoid regeneration of identical queue identifiers by processes
 1596 		whose process id is the same as that of the initial
 1597 		sendmail process that was used to start the daemon.
 1598 		Problem noted by Randy Diffenderfer of EDS.
 1599 	When a milter invokes smfi_delrcpt() compare the supplied
 1600 		recipient address also against the printable addresses
 1601 		of the current list to deal with rewritten addresses.
 1602 		Based on patch from Sean Hanson of The Asylum.
 1603 	BadRcptThrottle now also works for addresses which return the
 1604 		error mailer, e.g., virtusertable entries with the
 1605 		right hand side error:.  Patch from Per Hedeland.
 1606 	Fix printing of 8 bit characters as octals in log messages.
 1607 		Based on patch by Andrey J. Melnikoff.
 1608 	Undo change of algorithm for MIME 7-bit base64 encoding to 8-bit
 1609 		text that has been introduced in 8.12.3.  There are some
 1610 		examples where the new code fails, but the old code works.
 1611 		To get the 8.12.3-8.12.10 version, compile sendmail with
 1612 		-DMIME7TO8_OLD=0.  If you have an example of improper
 1613 		7 to 8 bit conversion please send it to us.
 1614 	Return normal error code for unknown SMTP commands instead of
 1615 		the one specified by check_relay or a milter for a
 1616 		connection.  Problem noted by Andrzej Filip.
 1617 	Some ident responses contain data after the terminating CRLF which
 1618 		causes sendmail to log "POSSIBLE ATTACK...newline in string".
 1619 		To avoid this everything after LF is ignored.
 1620 	If the operating system supports O_EXLOCK and HASFLOCK is set
 1621 		then a possible race condition for creating qf files
 1622 		can be avoided.  Note: the race condition does not
 1623 		exist within sendmail, but between sendmail and an
 1624 		external application that accesses qf files.
 1625 	Log the proper options name for TLS related mising files for
 1626 		the CACertPath, CACertFile, and DHParameters options.
 1627 	Do not split an envelope if it will be discarded, otherwise df
 1628 		files could be left behind.  Problem found by Wolfgang
 1629 		Breyha.
 1630 	The use of the environment variables HOME and HOSTALIASES has been
 1631 		deprecated and will be removed in version 8.13.  This only
 1632 		effects configuration which preserve those variable via the
 1633 		'E' command in the cf file as sendmail clears out its entire
 1634 		environment.
 1635 	Portability:
 1636 		Add support for Darwin 7.0/Mac OS X 10.3 (a.k.a. Panther).
 1637 		Solaris 10 has unsetenv(), patch from Craig Mohrman of
 1638 			Sun Microsystems.
 1639 	LIBMILTER: Add extra checks in case a broken MTA sends bogus data
 1640 		to libmilter.  Based on code review by Rob Grzywinski.
 1641 	SMRSH: Properly assemble commands that contain '&&' or '||'.
 1642 		Problem noted by Eric Lee of Talking Heads.
 1643 	New Files:
 1644 		devtools/OS/Darwin.7.0
 1646 8.12.10/8.12.10	2003/09/24 (Released: 2003/09/17)
 1647 	SECURITY: Fix a buffer overflow in address parsing.  Problem
 1648 		detected by Michal Zalewski, patch from Todd C. Miller
 1649 		of Courtesan Consulting.
 1650 	Fix a potential buffer overflow in ruleset parsing.  This problem
 1651 		is not exploitable in the default sendmail configuration;
 1652 		only if non-standard rulesets recipient (2), final (4), or
 1653 		mailer-specific envelope recipients rulesets are used then
 1654 		a problem may occur.  Problem noted by Timo Sirainen.
 1655 	Accept 0 (and 0/0) as valid input for set MaxMimeHeaderLength.
 1656 		Problem noted by Thomas Schulz.
 1657 	Add several checks to avoid (theoretical) buffer over/underflows.
 1658 	Properly count message size when performing 7->8 or 8->7 bit MIME
 1659 		conversions.  Problem noted by Werner Wiethege.
 1660 	Properly compute message priority based on size of entire message,
 1661 		not just header.  Problem noted by Axel Holscher.
 1662 	Reset SevenBitInput to its configured value between SMTP
 1663 		transactions for broken clients which do not properly
 1664 		announce 8 bit data.  Problem noted by Stefan Roehrich.
 1665 	Set {addr_type} during queue runs when processing recipients.
 1666 		Based on patch from Arne Jansen.
 1667 	Better error handling in case of (very unlikely) queue-id conflicts.
 1668 	Perform better error recovery for address parsing, e.g., when
 1669 		encountering a comment that is too long.  Problem noted by
 1670 		Tanel Kokk, Union Bank of Estonia.
 1671 	Add ':' to the allowed character list for bogus HELO/EHLO
 1672 		checking.  It is used for IPv6 domain literals.  Patch from
 1673 		Iwaizako Takahiro of FreeBit Co., Ltd.
 1674 	Reset SASL connection context after a failed authentication attempt.
 1675 		Based on patch from Rob Siemborski of CMU.
 1676 	Check Berkeley DB compile time version against run time version
 1677 		to make sure they match.
 1678 	Do not attempt AAAA (IPv6) DNS lookups if IPv6 is not enabled
 1679 		in the kernel.
 1680 	When a milter adds recipients and one of them causes an error,
 1681 		do not ignore the other recipients.  Problem noted by
 1682 		Bart Duchesne.
 1683 	CONFIG: Use specified SMTP error code in mailertable entries which
 1684 		lack a DSN, i.e., "error:### Text".  Problem noted by
 1685 		Craig Hunt.
 1686 	CONFIG: Call Local_trust_auth with the correct argument.  Patch
 1687 		from Jerome Borsboom.
 1688 	CONTRIB: Better handling of temporary filenames for doublebounce.pl
 1689 		and expn.pl to avoid file overwrites, etc.  Patches from
 1690 		Richard A. Nelson of Debian and Paul Szabo.
 1691 	MAIL.LOCAL: Fix obscure race condition that could lead to an
 1692 		improper mailbox truncation if close() fails after the
 1693 		mailbox is fsync()'ed and a new message is delivered
 1694 		after the close() and before the truncate().
 1695 	MAIL.LOCAL: If mail delivery fails, do not leave behind a
 1696 		stale lockfile (which is ignored after the lock timeout).
 1697 		Patch from Oleg Bulyzhin of Cronyx Plus LLC.
 1698 	Portability:
 1699 		Port for AIX 5.2.  Thanks to Steve Hubert of University
 1700 			of Washington for providing access to a computer
 1701 			with AIX 5.2.
 1702 		setreuid(2) works on OpenBSD 3.3.  Patch from
 1703 			Todd C. Miller of Courtesan Consulting.
 1704 		Allow for custom definition of SMRSH_CMDDIR and SMRSH_PATH
 1705 			on all operating systems.  Patch from Robert Harker
 1706 			of Harker Systems.
 1707 		Use strerror(3) on Linux.  If this causes a problem on
 1708 			your Linux distribution, compile with
 1709 			-DHASSTRERROR=0 and tell sendmail.org about it.
 1710 	Added Files:
 1711 		devtools/OS/AIX.5.2
 1713 8.12.9/8.12.9	2003/03/29
 1714 	SECURITY: Fix a buffer overflow in address parsing due to
 1715 		a char to int conversion problem which is potentially
 1716 		remotely exploitable.  Problem found by Michal Zalewski.
 1717 		Note: an MTA that is not patched might be vulnerable to
 1718 		data that it receives from untrusted sources, which
 1719 		includes DNS.
 1720 	To provide partial protection to internal, unpatched sendmail MTAs,
 1721 		8.12.9 changes by default (char)0xff to (char)0x7f in
 1722 		headers etc.  To turn off this conversion compile with
 1723 		-DALLOW_255 or use the command line option -d82.101.
 1724 	To provide partial protection for internal, unpatched MTAs that may be
 1725 		performing 7->8 or 8->7 bit MIME conversions, the default
 1726 		for MaxMimeHeaderLength has been changed to 2048/1024.
 1727 		Note: this does have a performance impact, and it only
 1728 		protects against frontal attacks from the outside.
 1729 		To disable the checks and return to pre-8.12.9 defaults,
 1730 		set MaxMimeHeaderLength to 0/0.
 1731 	Do not complain about -ba when submitting mail.  Problem noted
 1732 		by Derek Wueppelmann.
 1733 	Fix compilation with Berkeley DB 1.85 on systems that do not
 1734 		have flock(2).  Problem noted by Andy Harper of Kings
 1735 		College London.
 1736 	Properly initialize data structure for dns maps to avoid various
 1737 		errors, e.g., looping processes.  Problem noted by
 1738 		Maurice Makaay of InterNLnet B.V.
 1739 	CONFIG: Prevent multiple application of rule to add smart host.
 1740 		Patch from Andrzej Filip.
 1741 	CONFIG: Fix queue group declaration in MAILER(`usenet').
 1742 	CONTRIB: buildvirtuser: New option -t builds the virtusertable
 1743 		text file instead of the database map.
 1744 	Portability:
 1745 		Revert wrong change made in 8.12.7 and actually use the
 1746 			builtin getopt() version in sendmail on Linux.
 1747 			This can be overridden by using -DSM_CONF_GETOPT=0
 1748 			in which case the OS supplied version will be used.
 1750 8.12.8/8.12.8	2003/02/11
 1751 	SECURITY: Fix a remote buffer overflow in header parsing by
 1752 		dropping sender and recipient header comments if the
 1753 		comments are too long.  Problem noted by Mark Dowd
 1754 		of ISS X-Force.
 1755 	Fix a potential non-exploitable buffer overflow in parsing the
 1756 		.cf queue settings and potential buffer underflow in
 1757 		parsing ident responses.  Problem noted by Yichen Xie of
 1758 		Stanford University Compilation Group.
 1759 	Fix ETRN #queuegroup command: actually start a queue run for
 1760 		the selected queue group.  Problem noted by Jos Vos.
 1761 	If MaxMimeHeaderLength is set and a malformed MIME header is fixed,
 1762 		log the fixup as "Fixed MIME header" instead of "Truncated
 1763 		MIME header".  Problem noted by Ian J Hart.
 1764 	CONFIG: Fix regression bug in proto.m4 that caused a bogus
 1765 		error message: "FEATURE() should be before MAILER()".
 1766 	MAIL.LOCAL: Be more explicit in some error cases, i.e., whether
 1767 		a mailbox has more than one link or whether it is not
 1768 		a regular file.  Patch from John Beck of Sun Microsystems.
 1770 8.12.7/8.12.7	2002/12/29
 1771 	Properly clean up macros to avoid persistence of session data
 1772 		across various connections.  This could cause session
 1773 		oriented restrictions, e.g., STARTTLS requirements,
 1774 		to erroneously allow a connection.  Problem noted
 1775 		by Tim Maletic of Priority Health.
 1776 	Do not lookup MX records when sorting the MSP queue.  The MSP
 1777 		only needs to relay all mail to the MTA.  Problem found
 1778 		by Gary Mills of the University of Manitoba.
 1779 	Do not restrict the length of connection information to 100
 1780 		characters in some logging statements.  Problem noted by
 1781 		Erik Parker.
 1782 	When converting an enhanced status code to an exit status, use
 1783 		EX_CONFIG if the first digit is not 2, 4, or 5 or if *.1.5
 1784 		is used.
 1785 	Reset macro $x when receiving another MAIL command.  Problem
 1786 		noted by Vlado Potisk of Wigro s.r.o.
 1787 	Don't bother setting the permissions on the build area statistics
 1788 		file, the proper permissions will be put on the file at
 1789 		install time.  This fixes installation over NFS for some
 1790 		users.  Problem noted by Martin J. Dellwo of 3-Dimensional
 1791 		Pharmaceuticals, Inc.
 1792 	Fix problem of decoding SASLv2 encrypted data.  Problem noted by
 1793 		Alex Deiter of Mobile TeleSystems, Komi Republic.
 1794 	Log milter socket open errors at MilterLogLevel 1 or higher instead
 1795 		of 11 or higher.
 1796 	Print early system errors to the console instead of silently
 1797 		exiting.  Problem noted by James Jong of IBM.
 1798 	Do not process a queue group if Runners is set to 0, regardless
 1799 		of whether F=f or sendmail is run in verbose mode (-v).
 1800 		The use of -qGname will still force queue group "name"
 1801 		to be run even if Runners=0.
 1802 	Change the level for logging the fact that a daemon is refusing
 1803 		connections due to high load from LOG_INFO to LOG_NOTICE.
 1804 		Patch from John Beck of Sun Microsystems.
 1805 	Use location information for submit.cf from NetInfo
 1806 		(/locations/sendmail/submit.cf) if available.
 1807 	Re-enable ForkEachJob which was lost in 8.12.0.  Problem noted by
 1808 		Neil Rickert of Northern Illinois University.
 1809 	Make behavior of /canon in debug mode consistent with usage in
 1810 		rulesets.  Patch from Shigeno Kazutaka of IIJ.
 1811 	Fix a potential memory leak in envelope splitting.  Problem noted
 1812 		by John Majikes of IBM.
 1813 	Do not try to share an mailbox database LDAP connection across
 1814 		different processes.  Problem noted by Randy Kunkee.
 1815 	Fix logging for undelivered recipients when the SMTP connection
 1816 		times out during message collection.  Problem noted by Neil
 1817 		Rickert of Northern Illinois University.
 1818 	Avoid problems with QueueSortOrder=random due to problems with
 1819 		qsort() on Solaris (and maybe some other operating systems).
 1820 		Problem noted by Stephan Schulz of Gruner+Jahr..
 1821 	If -f "" is specified, set the sender address to "<>".  Problem
 1822 		noted by Matthias Andree.
 1823 	Fix formatting problem of footnotes for plain text output on some
 1824 		versions of tmac.  Patch from Per Hedeland.
 1825 	Portability:
 1826 		Berkeley DB 4.1 support (requires at least 4.1.25).
 1827 		Some getopt(3) implementations in GNU/Linux are broken
 1828 			and pass a NULL pointer to an option which requires
 1829 			an argument, hence the builtin version of
 1830 			sendmail is used instead.  This can be overridden
 1831 			by using -DSM_CONF_GETOPT=0.  Problem noted by
 1832 			Vlado Potisk of Wigro s.r.o.
 1833 		Support for nph-1.2.0 from Mark D. Roth of the University
 1834 			of Illinois at Urbana-Champaign.
 1835 		Support for FreeBSD 5.0's MAC labeling from Robert Watson
 1836 			of the TrustedBSD Project.
 1837 		Support for reading the number of processors on an IRIX
 1838 			system from Michel Bourget of SGI.
 1839 		Support for UnixWare 7.1 based on input from Larry Rosenman.
 1840 		Interix support from Nedelcho Stanev of Atlantic Sky
 1841 			Corporation.
 1842 		Update Mac OS X/Darwin portability from Wilfredo Sanchez.
 1843 	CONFIG: Enforce tls_client restrictions even if delay_checks
 1844 		is used.  Problem noted by Malte Starostik.
 1845 	CONFIG: Deal with an empty hostname created via bogus
 1846 		DNS entries to get around access restrictions.
 1847 		Problem noted by Kai Schlichting.
 1848 	CONFIG: Use FEATURE(`msp', `[]') in submit.mc by default
 1849 		to avoid problems with hostname resolution for localhost
 1850 		which on many systems does not resolve to (or
 1851 		::1 for IPv6).  If you do not use IPv4 but only IPv6 then
 1852 		you need to change submit.mc accordingly, see the comment
 1853 		in the file itself.
 1854 	CONFIG: Set confDONT_INIT_GROUPS to True in submit.mc to avoid
 1855 		error messages from initgroups(3) on AIX 4.3 when sending
 1856 		mail to non-existing users. Problem noted by Mark Roth of
 1857 		the University of Illinois at Urbana-Champaign.
 1858 	CONFIG: Allow local_procmail to override local_lmtp settings.
 1859 	CONFIG: Always allow connections from or IPv6:::1 to
 1860 		relay.
 1861 	CONTRIB: cidrexpand: Deal with the prefix tags that may be included
 1862 		in access_db.
 1863 	CONTRIB: New version of doublebounce.pl contributed by Leo Bicknell.
 1864 	LIBMILTER: On Solaris libmilter may get into an endless loop if
 1865 		an error in the communication from/to the MTA occurs.
 1866 		Patch from Gurusamy Sarathy of Active State.
 1867 	LIBMILTER: Ignore EINTR from sigwait(3) which may happen on Tru64.
 1868 		Patch from from Jose Marcio Martins da Cruz of Ecole
 1869 		Nationale Superieure des Mines de Paris.
 1870 	MAIL.LOCAL: Fix a truncation race condition if the close() on
 1871 		the mailbox fails.  Problem noted by Tomoko Fukuzawa of
 1872 		Sun Microsystems.
 1873 	MAIL.LOCAL: Fix a potential file descriptor leak if mkstemp(3)
 1874 		fails.  Patch from John Beck of Sun Microsystems.
 1875 	SMRSH: SECURITY: Only allow regular files or symbolic links to be
 1876 		used for a command.  Problem noted by David Endler of
 1877 		iDEFENSE, Inc.
 1878 	New Files:
 1879 		devtools/OS/Interix
 1880 		include/sm/bdb.h
 1882 8.12.6/8.12.6	2002/08/26
 1883 	Do not add the FallbackMXhost (or its MX records) to the list
 1884 		returned by the bestmx map when -z is used as option.
 1885 		Otherwise sendmail may act as an open relay if FallbackMXhost
 1886 		and FEATURE(`relay_based_on_MX') are used together.
 1887 		Problem noted by Alexander Ignatyev.
 1888 	Properly split owner- mailing list messages when SuperSafe is set
 1889 		to interactive.  Problem noted by Todd C. Miller of
 1890 		Courtesan Consulting.
 1891 	Make sure that an envelope is queued in the selected queue group
 1892 		even if some recipients are deleted or invalid.  Problem
 1893 		found by Chris Adams of HiWAAY Informations Services.
 1894 	Do not send a bounce message if a message is completely collected
 1895 		from the SMTP client.  Problem noted by Kari Hurtta of the
 1896 		Finnish Meteorological Institute.
 1897 	Provide an 'install-submit-st' target for sendmail/Makefile to
 1898 		install the MSP statistics file using the file named in the
 1899 		confMSP_STFILE devtools variable.  Requested by Jeff
 1900 		Earickson of Colby College.
 1901 	Queue up mail with a temporary error if setusercontext() fails
 1902 		during a delivery attempt.  Patch from Todd C. Miller of
 1903 		Courtesan Consulting.
 1904 	Fix handling of base64 encoded client authentication data for
 1905 		SMTP AUTH.  Patch from Elena Slobodnik of life medien GmbH.
 1906 	Set the OpenLDAP option LDAP_OPT_RESTART so the client libraries
 1907 		restart interrupted system calls.  Problem noted by Luiz
 1908 		Henrique Duma of BSIOne.
 1909 	Prevent a segmentation fault if a program passed a NULL envp using
 1910 		execve().
 1911 	Document a problem with the counting of queue runners that may
 1912 		cause delays if MaxQueueChildren is set too low. Problem
 1913 		noted by Ian Duplisse of Cable Television Laboratories, Inc.
 1914 	If discarding a message based on a recipient, don't try to look up
 1915 		the recipient in the mailbox database if F=w is set.  This
 1916 		allows users to discard bogus recipients when dealing with
 1917 		spammers without tipping them off.  Problem noted by Neil
 1918 		Rickert of Northern Illinois University.
 1919 	If applying a header check to a header with unstructured data,
 1920 		e.g., Subject:, then do not run syntax checks that are
 1921 		supposed for addresses on the header content.
 1922 	Count messages rejected/discarded via the check_data ruleset.
 1923 	Portability:
 1924 		Fix compilation on systems which do not allow simple
 1925 			copying of the variable argument va_list.  Based on
 1926 			fix from Scott Walters.
 1927 		Fix NSD map open bug.  From Michel Bourget of SGI.
 1928 		Add some additional IRIX shells to the default shell
 1929 			list.  From Michel Bourget of SGI.
 1930 		Fix compilation issues on Mac OS X 10.2 (Darwin 6.0).
 1931 			NETISO support has been dropped.
 1932 	CONFIG: There was a seemingly minor change in 8.12.4 with respect
 1933 		to handling entries of IP nets/addresses with RHS REJECT.
 1934 		These would be rejected in check_rcpt instead of only
 1935 		being activated in check_relay.  This change has been made to
 1936 		avoid potential bogus temporary rejection of relay attempts
 1937 		"450 4.7.1 Relaying temporarily denied. Cannot resolve PTR
 1938 		record for ..." if delay_checks is enabled.  However, this
 1939 		modification causes a change of behavior if an IP net/address
 1940 		is listed in the access map with REJECT and a host/domain
 1941 		name is listed with OK or RELAY, hence it has been reversed
 1942 		such that the behavior of 8.12.3 is restored.  The original
 1943 		change was made on request of Neil Rickert of Northern
 1944 		Illinois University, the side effect has been found by
 1945 		Stefaan Van Hoornick.
 1946 	CONFIG: Make sure delay_checks works even for sender addresses
 1947 		using the local hostname ($j) or domains in class {P}.
 1948 		Based on patch from Neil Rickert of Northern Illinois
 1949 		University.
 1950 	CONFIG: Fix temporary error handling for LDAP Routing lookups.
 1951 		Fix from Andrzej Filip.
 1952 	CONTRIB: New version of etrn.pl script and external man page
 1953 		(etrn.0) from John Beck of Sun Microsystems.
 1954 	LIBMILTER: Protect a free(3) operation from being called with a
 1955 		NULL pointer.  Problem noted by Andrey J. Melnikoff.
 1956 	LIBMILTER: Protect against more interrupted select() calls.  Based
 1957 		on patch from Jose Marcio Martins da Cruz of Ecole Nationale
 1958 		Superieure des Mines de Paris.
 1959 	New Files:
 1960 		contrib/etrn.0
 1962 8.12.5/8.12.5	2002/06/25
 1963 	SECURITY: The DNS map can cause a buffer overflow if the user
 1964 		specifies a dns map using TXT records in the configuration
 1965 		file and a rogue DNS server is queried.  None of the
 1966 		sendmail supplied configuration files use this option hence
 1967 		they are not vulnerable.  Problem noted independently by
 1968 		Joost Pol of PINE Internet and Anton Rang of Sun Microsystems.
 1969 	Unprintable characters in responses from DNS servers for the DNS
 1970 		map type are changed to 'X' to avoid potential problems
 1971 		with rogue DNS servers.
 1972 	Require a suboption when setting the Milter option.  Problem noted
 1973 		by Bryan Costales.
 1974 	Do not silently overwrite command line settings for
 1975 		DirectSubmissionModifiers.  Problem noted by Bryan
 1976 		Costales.
 1977 	Prevent a segmentation fault when clearing the event list by
 1978 		turning off alarms before checking if event list is
 1979 		empty.  Problem noted by Allan E Johannesen of Worcester
 1980 		Polytechnic Institute.
 1981 	Close a potential race condition in transitioning a memory buffered
 1982 		file onto disk.  From Janani Devarajan of Sun Microsystems.
 1983 	Portability:
 1984 		Include paths.h on Linux systems running glibc 2.0 or later
 1985 			to get the definition for _PATH_SENDMAIL, used by
 1986 			rmail and vacation.  Problem noted by Kevin
 1987 			A. McGrail of Peregrine Hardware.
 1988 		NOTE: Linux appears to have broken flock() again.  Unless
 1989 			the bug is fixed before sendmail 8.13 is shipped,
 1990 			8.13 will change the default locking method to
 1991 			fcntl() for Linux kernel 2.4 and later.  You may
 1992 			want to do this in 8.12 by compiling with
 1993 			-DHASFLOCK=0.  Be sure to update other sendmail
 1994 			related programs to match locking techniques.
 1996 8.12.4/8.12.4	2002/06/03
 1997 	SECURITY: Inherent limitations in the UNIX file locking model
 1998 		can leave systems open to a local denial of service
 1999 		attack.  Be sure to read the "FILE AND MAP PERMISSIONS"
 2000 		section of the top level README for more information.
 2001 		Problem noted by lumpy.
 2002 	Use TempFileMode (defaults to 0600) for the permissions of PidFile
 2003 		instead of 0644.
 2004 	Change the default file permissions for new alias database files
 2005 		from 0644 to 0640.  This can be overridden at compile time
 2006 		by setting the DBMMODE macro.
 2007 	Fix a potential core dump problem if the environment variable
 2008 		NAME is set.  Problem noted by Beth A. Chaney of
 2009 		Purdue University.
 2010 	Expand macros before passing them to libmilter.  Problem noted
 2011 		by Jose Marcio Martins da Cruz of Ecole Nationale
 2012 		Superieure des Mines de Paris.
 2013 	Rewind the df (message body) before truncating it when libmilter
 2014 		replaces the body of a message.  Problem noted by Gisle Aas
 2015 		of Active State.
 2016 	Change SMTP reply code for AUTH failure from 500 to 535 and the
 2017 		initial zero-length response to "=" per RFC 2554.  Patches
 2018 		from Kenneth Murchison of Oceana Matrix Ltd.
 2019 	Do not try to fix broken message/rfc822 MIME attachments by
 2020 		inserting a MIME-Version: header when MaxMimeHeaderLength
 2021 		is set and no 8 to 7 bit conversion is needed.  Based on
 2022 		patch from Rehor Petr of ICZ (Czech Republic).
 2023 	Do not log "did not issue MAIL/EXPN/VRFY/ETRN" if the connection
 2024 		is rejected anyway.  Noted by Chris Loelke.
 2025 	Mention the submission mail queue in the mailq man page.  Requested
 2026 		by Bill Fenner of AT&T.
 2027 	Set ${msg_size} macro when reading a message from the command line
 2028 		or the queue.
 2029 	Detach from shared memory before dropping privileges back to
 2030 		user who started sendmail.
 2031 	If AllowBogusHELO is set to false (default) then also complain if
 2032 		the argument to HELO/EHLO contains white space.  Suggested
 2033 		by Seva Gluschenko of Cronyx Plus.
 2034 	Allow symbolicly linked forward files in writable directory paths
 2035 		if both ForwardFileInUnsafeDirPath and
 2036 		LinkedForwardFileInWritableDir DontBlameSendmail options
 2037 		are set.  Problem noted by Werner Spirk of
 2038 		Leibniz-Rechenzentrum Munich.
 2039 	Portability:
 2040 		Operating systems that lack the ftruncate() call will not
 2041 			be able to use Milter's body replacement feature.
 2042 			This only affects Altos, Maxion, and MPE/iX.
 2043 		Digital UNIX 5.0 has changed flock() semantics to be
 2044 			non-compliant.  Problem noted by Martin Mokrejs of
 2045 			Charles University in Prague.
 2046 		The sparc64 port of FreeBSD 5.0 now supports shared
 2047 			memory.
 2048 	CONFIG: FEATURE(`preserve_luser_host') needs the macro map.
 2049 		Problem noted by Andrzej Filip.
 2050 	CONFIG: Using 'local:' as a mailertable value with
 2051 		FEATURE(`preserve_luser_host') and LUSER_RELAY caused mail
 2052 		to be misaddressed.  Problem noted by Andrzej Filip.
 2053 	CONFIG: Provide a workaround for DNS based rejection lists that
 2054 		fail for AAAA queries.  Problem noted by Chris Boyd.
 2055 	CONFIG: Accept the machine's hostname as resolvable when checking
 2056 		the sender address.  This allows locally submitted mail to
 2057 		be accepted if the machine isn't connected to a nameserver
 2058 		and doesn't have an /etc/hosts entry for itself.  Problem
 2059 		noted by Robert Watson of the TrustedBSD Project.
 2060 	CONFIG: Use deferred expansion for checking the ${deliveryMode}
 2061 		macro in case the SMTP VERB command is used.  Problem
 2062 		noted by Bryan Costales.
 2063 	CONFIG: Avoid a duplicate '@domain' virtusertable lookup if no
 2064 		matches are found.  Fix from Andrzej Filip.
 2065 	CONFIG: Fix wording in default dnsbl rejection message.  Suggested
 2066 		by Lou Katz of Metron Computerware, Ltd.
 2067 	CONFIG: Add mailer cyrusv2 for Cyrus V2.  Contributed by
 2068 		Kenneth Murchison of Oceana Matrix Ltd.
 2069 	CONTRIB: Fix wording in default dnsblaccess rejection message to
 2070 		match dnsbl change.
 2071 	DEVTOOLS: Add new option for access mode of statistics file,
 2072 		confSTMODE, which specifies the permissions when initially
 2073 		installing the sendmail statistics file.
 2074 	LIBMILTER: Mark the listening socket as close-on-exec in case
 2075 		a user's filter starts other applications.
 2076 	LIBSM: Allow the MBDB initialize, lookup, and/or terminate
 2077 		functions in SmMbdbTypes to be set to NULL.
 2078 	MAKEMAP: Change the default file permissions for new databases from
 2079 		0644 to 0640.  This can be overridden at compile time
 2080 		by setting the DBMMODE macro.
 2081 	SMRSH: Fix man page bug: replace SMRSH_CMDBIN with SMRSH_CMDDIR.
 2082 		Problem noted by Dave Alden of Ohio State University.
 2083 	VACATION: When listing the vacation database (-l), don't show
 2084 		bogus timestamps for excluded (-x) addresses.  Problem
 2085 		noted by Bryan Costales.
 2086 	New Files:
 2087 		cf/mailer/cyrusv2.m4
 2089 8.12.3/8.12.3	2002/04/05
 2090 	NOTICE: In general queue files should not be moved if queue groups
 2091 		are used.  In previous versions this could cause mail
 2092 		not to be delivered if a queue file is repeatedly moved
 2093 		by an external process whenever sendmail moved it back
 2094 		into the right place.  Some precautions have been taken
 2095 		to avoid moving queue files if not really necessary.
 2096 		sendmail may use links to refer to queue files and it
 2097 		may store the path of data files in queue files.  Hence
 2098 		queue files should not be moved unless those internals
 2099 		are understood and the integrity of the files is not
 2100 		compromised.  Problem noted by Anne Bennett of Concordia
 2101 		University.
 2102 	If an error mail is created, and the mail is split across different
 2103 		queue directories, and SuperSafe is off, then write the mail
 2104 		to disk before splitting it, otherwise an assertion is
 2105 		triggered.  Problem tracked down by Henning Schmiedehausen
 2106 		of INTERMETA.
 2107 	Fix possible race condition that could cause sendmail to forget
 2108 		running queues.  Problem noted by Jeff Wasilko of smoe.org.
 2109 	Handle bogus qf files better without triggering assertions.
 2110 		Problem noted by Guy Feltin.
 2111 	Protect against interrupted select() call when enforcing Milter
 2112 		read and write timeouts.  Patch from Gurusamy Sarathy of
 2113 		ActiveState.
 2114 	Matching queue IDs with -qI should be case sensitive.  Problem
 2115 		noted by Anne Bennett of Concordia University.
 2116 	If privileges have been dropped, don't try to change group ID to
 2117 		the RunAsUser group.  Problem noted by Neil Rickert of
 2118 		Northern Illinois University.
 2119 	Fix SafeFileEnvironment path munging when the specified path
 2120 		contains a trailing slash.  Based on patch from Dirk Meyer
 2121 		of Dinoex.
 2122 	Do not limit sendmail command line length to SM_ARG_MAX (usually
 2123 		4096).  Problem noted by Allan E Johannesen of Worcester
 2124 		Polytechnic Institute.
 2125 	Clear full name of sender for each new envelope to avoid bogus data
 2126 		if several mails are sent in one session and some of them
 2127 		do not have a From: header.  Problem noted by Bas Haakman.
 2128 	Change timeout check such that cached information about a connection
 2129 		will be immediately invalid if ConnectionCacheTimeout is zero.
 2130 		Based on patch from David Burns of Portland State University.
 2131 	Properly count message size for mailstats during mail collection.
 2132 		Problem noted by Werner Wiethege.
 2133 	Log complete response from LMTP delivery agent on failure.  Based on
 2134 		patch from Motonori Nakamura of Kyoto University.
 2135 	Provide workaround for getopt() implementations that do not catch
 2136 		missing arguments.
 2137 	Fix the message size calculation if the message body is replaced by
 2138 		a milter filter and buffered file I/O is being used.
 2139 		Problem noted by Sergey Akhapkin of Dr.Web.
 2140 	Do not honor SIGUSR1 requests if running with extra privileges.
 2141 		Problem noted by Werner Wiethege.
 2142 	Prevent a file descriptor leak on mail delivery if the initial
 2143 		connect fails and DialDelay is set.  Patch from Servaas
 2144 		Vandenberghe of Katholieke Universiteit Leuven.
 2145 	Properly deal with a case where sendmail is called by root running
 2146 		a set-user-ID (non-root) program.  Problem noted by Jon
 2147 		Lusky of ISS Atlanta.
 2148 	Avoid leaving behind stray transcript (xf) files if multiple queue
 2149 		directories are used and mail is sent to a mailing list
 2150 		which has an owner- alias.  Problem noted by Anne Bennett
 2151 		of Concordia University.
 2152 	Fix class map parsing code if optional key is specified.  Problem
 2153 		found by Mario Nigrovic.
 2154 	The SMTP daemon no longer tries to fix up improperly dot-stuffed
 2155 		incoming messages.  A leading dot is always stripped by the
 2156 		SMTP receiver regardless of whether or not it is followed by
 2157 		another dot.  Problem noted by Jordan Ritter of darkridge.com.
 2158 	Fix corruption when doing automatic MIME 7-bit quoted-printable or
 2159 		base64 encoding to 8-bit text.  Problem noted by Mark
 2160 		Elvers.
 2161 	Correct the statistics gathered for total number of connections.
 2162 		Instead of being the exact same number as the total number
 2163 		of messages (T line in mailstats) it now represents the
 2164 		total number of TCP connections.
 2165 	Be more explicit about syntax errors in addresses, especially
 2166 		non-ASCII characters, and properly create DSNs if necessary.
 2167 		Problem noted by Leena Heino of the University of Tampere.
 2168 	Prevent small timeouts from being lost on slow machines if itimers
 2169 		are used.  Problem noted by Suresh Ramasubramanian.
 2170 	Prevent a race condition on child cleanup for delivery to files.
 2171 		Problem noted by Fletcher Mattox of the University of
 2172 		Texas.
 2173 	Change the SMTP error code for temporary map failures from 421
 2174 		to 451.
 2175 	Do not assume that realloc(NULL, size) works on all OS (this was
 2176 		only done in one place: queue group creation).  Based on
 2177 		patch by Bryan Costales.
 2178 	Initialize Timeout.iconnect in the code to prevent randomly short
 2179 		timeouts.  Problem noted by Bradley Watts of AT&T Canada.
 2180 	Do not try to send a second SMTP QUIT command if the remote
 2181 		responds to a MAIL command with a 421 reply or on I/O
 2182 		errors.  By doing so, the host was marked as having a
 2183 		temporary problem and other mail destined for that host was
 2184 		queued for the next queue run.  Problem noted by Fletcher
 2185 		Mattox of the University of Texas, Allan E Johannesen of
 2186 		Worcester Polytechnic Institute, Larry Greenfield of CMU,
 2187 		and Neil Rickert of Northern Illinois University.
 2188 	Ignore error replies from the SMTP QUIT command (including servers
 2189 		which drop the connection instead of responding to the
 2190 		command).
 2191 	Portability:
 2192 		Check LDAP_API_VERSION to determine if ldap_memfree() is
 2193 			available.
 2194 		Define HPUX10 when building on HP-UX 10.X.  That platform
 2195 			now gets the proper _PATH_SENDMAIL and SMRSH_CMDDIR
 2196 			settings.  Patch from Elias Halldor Agustsson of
 2197 			Skyrr.
 2198 		Fix dependency building on Mac OS X and Darwin.  Problem
 2199 			noted by John Beck.
 2200 		Preliminary support for the sparc64 port of FreeBSD 5.0.
 2201 		Add /sbin/sh as an acceptable user shell on HP-UX.  From
 2202 			Rajesh Somasund of Hewlett-Packard.
 2203 	CONFIG: Add FEATURE(`authinfo') to allow a separate database for
 2204 		SMTP AUTH information.  This feature was actually added in
 2205 		8.12.0 but a release note was not included.
 2206 	CONFIG: Do not bounce mail if FEATURE(`ldap_routing')'s bounce
 2207 		parameter is set and the LDAP lookup returns a temporary
 2208 		error.
 2209 	CONFIG: Honor FEATURE(`relay_hosts_only') when using
 2210 		FEATURE(`relay_mail_from', `domain').  Problem noted by
 2211 		Krzysztof Oledzki.
 2212 	CONFIG: FEATURE(`msp') now disables any type of alias
 2213 		initialization as aliases are not needed for the MSP.
 2214 	CONFIG: Allow users to override RELAY_MAILER_ARGS when FEATURE(`msp')
 2215 		is in use.  Patch from Andrzej Filip.
 2216 	CONFIG: FEATURE(`msp') uses `[localhost]' as default instead of
 2217 		`localhost' and turns on MX lookups for the SMTP mailers.
 2218 		This will only have an effect if a parameter is specified,
 2219 		i.e., an MX lookup will be performed on the hostname unless
 2220 		it is embedded in square brackets.  Problem noted by
 2221 		Theo Van Dinter of Collective Technologies.
 2222 	CONFIG: Set confTIME_ZONE to USE_TZ in submit.mc (TimeZoneSpec= in
 2223 		submit.cf) to use $TZ for time stamps.  This is a compromise
 2224 		to allow for the proper time zone on systems where the
 2225 		default results in misleading time stamps. That is, syslog
 2226 		time stamps and Date headers on submitted mail will use the
 2227 		user's $TZ setting.  Problem noted by Mark Roth of the
 2228 		University of Illinois at Urbana-Champaign, solution proposed
 2229 		by Neil Rickert of Northern Illinois University.
 2230 	CONFIG: Mac OS X (Darwin) ships with mail.local as non-set-user-ID
 2231 		binary.  Adjust local mailer flags accordingly.  Problem
 2232 		noted by John Beck.
 2233 	CONTRIB: Add a warning to qtool.pl to not move queue files around
 2234 		if queue groups are used.
 2235 	CONTRIB: buildvirtuser: Add -f option to force rebuild.
 2236 	CONTRIB: smcontrol.pl: Add -f option to specify control socket.
 2237 	CONTRIB: smcontrol.pl: Add support for 'memdump' command.
 2238 		Suggested by Bryan Costales.
 2239 	DEVTOOLS: Add dependency generation for test programs.
 2240 	LIBMILTER: Remove conversion of port number for the socket
 2241 		structure that is passed to xxfi_connect().  Notice:
 2242 		this fix requires that sendmail and libmilter both have
 2243 		this change; mixing versions may lead to wrong port
 2244 		values depending on the endianness of the involved systems.
 2245 		Problem noted by Gisle Aas of ActiveState.
 2246 	LIBMILTER: If smfi_setreply() sets a custom reply code of '4XX' but
 2247 		SMFI_REJECT is returned, ignore the custom reply.  Do the
 2248 		same if '5XX' is used and SMFI_TEMPFAIL is returned.
 2249 	LIBMILTER: Install include files in ${INCLUDEDIR}/libmilter/ as
 2250 		required by mfapi.h.  Problem noted by Jose Marcio Martins
 2251 		da Cruz of Ecole Nationale Superieure des Mines de Paris.
 2252 	LIBSM: Add SM_CONF_LDAP_MEMFREE as a configuration define.  Set
 2253 		this to 1 if your LDAP client libraries include
 2254 		ldap_memfree().
 2255 	LIBSMDB: Avoid a file creation race condition for Berkeley DB 1.X
 2256 		and NDBM on systems with the O_EXLOCK open(2) flag.
 2257 	SMRSH: Fix compilation problem on some operating systems.  Problem
 2258 		noted by Christian Krackowizer of schuler technodat GmbH.
 2259 	VACATION: Allow root to operate on user vacation databases.  Based
 2260 		on patch from Greg Couch of the University of California,
 2261 		San Francisco.
 2262 	VACATION: Don't ignore -C option.  Based on patch by Bryan Costales.
 2263 	VACATION: Clarify option usage in the man page.  Problem noted by
 2264 		Joe Barbish.
 2265 	New Files:
 2266 		libmilter/docs/smfi_setbacklog.html
 2268 8.12.2/8.12.2	2002/01/13
 2269 	Don't complain too much if stdin, stdout, or stderr are missing
 2270 		at startup, only log an error message.
 2271 	Fix potential problem if an unknown operation mode (character
 2272 		following -b) has been specified.
 2273 	Prevent purgestat from looping even if someone changes the
 2274 		permissions or owner of hoststatus files.  Problem noted
 2275 		by Kari Hurtta of the Finnish Meteorological Institute.
 2276 	Properly record dropped connections in persistent host status.
 2277 		Problem noted by Ulrich Windl of the Universitat
 2278 		Regensburg.
 2279 	Remove newlines from recipients read via sendmail -t to prevent
 2280 		SMTP protocol errors when sending the RCPT command.
 2281 		Problem noted by William D. Colburn of the New Mexico
 2282 		Institute of Mining and Technology.
 2283 	Only log milter body replacements once instead of for each body
 2284 		chunk sent by a filter.  Problem noted by Kari Hurtta of
 2285 		the Finnish Meteorological Institute.
 2286 	In 8.12.0 and 8.12.1, the headers were mistakenly not included in
 2287 		the message size calculation.  Problem noted by Kari Hurtta
 2288 		of the Finnish Meteorological Institute.
 2289 	Since 8.12 no longer forks at the SMTP MAIL command, the daemon
 2290 		needs to collect children status to avoid zombie processes.
 2291 		Problem noted by Chris Adams of HiWAAY Informations Services.
 2292 	Shut down "nullserver" and ETRN-only connections after 25 bad
 2293 		commands are issued.  This makes it consistent with normal
 2294 		SMTP connections.
 2295 	Avoid duplicate logging of milter rejections.  Problem noted by
 2296 		William D. Colburn of the New Mexico Institute of Mining
 2297 		and Technology.
 2298 	Error and delay DSNs were being sent to postmaster instead of the
 2299 		message sender if the sender had used a deprecated RFC822
 2300 		source route.  Problem noted by Kari Hurtta of the Finnish
 2301 		Meteorological Institute.
 2302 	Fix FallbackMXhost behavior for temporary errors during address
 2303 		parsing.  Problem noted by Jorg Bielak from Coastal Web
 2304 		Online.
 2305 	For systems on which stat(2) does not return a value for st_blksize
 2306 		that is the "optimal blocksize for I/O" three new compile
 2307 		time flags are available: SM_IO_MAX_BUF_FILE, SM_IO_MIN_BUF,
 2308 		and SM_IO_MAX_BUF, which define an upper limit for
 2309 		regular files, and a lower and upper limit for other file
 2310 		types, respectively.
 2311 	Fix a potential deadlock if two events are supposed to occur at
 2312 		exactly the same time.  Problem noted by Valdis Kletnieks
 2313 		of Virginia Tech.
 2314 	Perform envelope splitting for aliases listed directly in the
 2315 		alias file, not just for include/.forward files.
 2316 		Problem noted by John Beck of Sun Microsystems.
 2317 	Allow selection of queue group for mailq using -qGgroup.
 2318 		Based on patch by John Beck of Sun Microsystems.
 2319 	Make sure cached LDAP connections used my multiple maps in the same
 2320 		process are closed.  Patch from Taso N. Devetzis.
 2321 	If running as root, allow reading of class files in protected
 2322 		directories.  Patch from Alexander Talos of the University
 2323 		of Vienna.
 2324 	Correct a few LDAP related memory leaks.  Patch from David Powell
 2325 		of Sun Microsystems.
 2326 	Allow specification of an empty realm via the authinfo ruleset.
 2327 		This is necessary to interoperate as an SMTP AUTH client
 2328 		with servers that do not support realms when using
 2329 		CRAM-MD5.  Problem noted by Bjoern Voigt of TU Berlin.
 2330 	Avoid a potential information leak if AUTH PLAIN is used and the
 2331 		server gets stuck while processing that command.  Problem
 2332 		noted by Chris Adams from HiWAAY Informations Services.
 2333 	In addition to printing errors when parsing recipients during
 2334 		command line invocations log them to make it simpler
 2335 		to understand possible DSNs to postmaster.
 2336 	Do not use FallbackMXhost on mailers which have the F=0 flag set.
 2337 	Allow local mailers (F=l) to specify a host for TCP connections
 2338 		instead of forcing localhost.
 2339 	Obey ${DESTDIR} for installation of the client mail queue and
 2340 		submit.cf.  Patch from Peter 'Luna' Runestig.
 2341 	Re-enable support for -M option which was broken in 8.12.1.  Problem
 2342 		noted by Neil Rickert of Northern Illinois University.
 2343 	If a remote server violates the SMTP standard by unexpectedly
 2344 		dropping the connection during an SMTP transaction, stop
 2345 		sending commands.  This prevents bogus "Bad file number"
 2346 		recipient status.  Problem noted by Allan E Johannesen of
 2347 		Worcester Polytechnic Institute.
 2348 	Do not use a size estimate of 100 for postmaster bounces, it's
 2349 		almost always too small; do not guess the size at all.
 2350 	New VENDOR_DEC for Compaq/DEC.  Requested by James Seagraves of
 2351 		Compaq Computer Corp.
 2352 	Fix DaemonPortOptions IPv6 address parsing such that ::1 works
 2353 		properly.  Problem noted by Valdis Kletnieks of Virginia
 2354 		Tech.
 2355 	Portability:
 2356 		Fix IPv6 network interface probing on HP-UX 11.X.  Based on
 2357 			patch provided by HP.
 2358 		Mac OS X (aka Darwin) has a broken setreuid() call, but a
 2359 			working seteuid() call.  From Daniel J. Luke.
 2360 		Use proper type for a 32-bit integer on SINIX.  From Ganu
 2361 			Sachin of Siemens.
 2362 		Set SM_IO_MIN_BUF (4K) and SM_IO_MAX_BUF (8K) for HP-UX.
 2363 		Reduce optimization from +O3 to +O2 on HP-UX 11.  This
 2364 			fixes a problem that caused additional bogus
 2365 			characters to be written to the qf file.  Problem
 2366 			noted by Tapani Tarvainen.
 2367 		Set LDA_USE_LOCKF by default for UnixWare.  Problem noted
 2368 			by Boyd Lynn Gerber.
 2369 		Add support for HP MPE/iX.  See sendmail/README for port
 2370 			information.  From Mark Bixby of Hewlett-Packard.
 2371 		New portability defines HASNICE, HASRRESVPORT, USE_ENVIRON,
 2372 			USE_DOUBLE_FORK, and NEEDLINK.  See sendmail/README
 2373 			for more information.  From Mark Bixby of
 2374 			Hewlett-Packard.
 2375 		If an OS doesn't have a method of finding free disk space
 2376 			(SFS_NONE), lie and say there is plenty of space.
 2377 			From Mark Bixby of Hewlett-Packard.
 2378 		Add support for AIX 5.1.  From Valdis Kletnieks of
 2379 			Virginia Tech.
 2380 		Fix man page location for NeXTSTEP.  From Hisanori Gogota
 2381 			of the NTT/InterCommunication Center.
 2382 		Do not assume that strerror() always returns a string.
 2383 			Problem noted by John Beck of Sun Microsystems.
 2384 	CONFIG: Add OSTYPE(freebsd5) for FreeBSD 5.X, which has removed
 2385 		UUCP from the base operating system.  From Mark Murray of
 2386 		FreeBSD Services, Ltd.
 2387 	CONFIG: Add OSTYPE(mpeix) and a generic .mc file for HP MPE/iX
 2388 		systems.  From Mark Bixby of Hewlett-Packard.
 2389 	CONFIG: Add support for selecting a queue group for all mailers.
 2390 		Based on proposal by Stephen L. Ulmer of the University of
 2391 		Florida.
 2392 	CONFIG: Fix error reporting for compat_check.m4.  Problem noted by
 2393 		Altin Waldmann.
 2394 	CONFIG: Do not override user selections for confRUN_AS_USER and
 2395 		confTRUSTED_USER in FEATURE(msp).  From Mark Bixby of
 2396 		Hewlett-Packard.
 2397 	LIBMILTER: Fix bug that prevented the removal of a socket after
 2398 		libmilter terminated.  Problem reported by Andrey V. Pevnev
 2399 		of MSFU.
 2400 	LIBMILTER: Fix configuration error that required libsm for linking.
 2401 		Problem noted by Kari Hurtta of the Finnish Meteorological
 2402 		Institute.
 2403 	LIBMILTER: Portability fix for OpenUNIX.  Patch from Larry Rosenman.
 2404 	LIBMILTER: Fix a theoretical memory leak and a possible attempt
 2405 		to free memory twice.
 2406 	LIBSM: Fix a potential segmentation violation in the I/O library.
 2407 		Problem found and analyzed by John Beck and Tim Haley
 2408 		of Sun Microsystems.
 2409 	LIBSM: Do not clear the LDAP configuration information when
 2410 		terminating the mailbox database connection in the LDAP
 2411 		example code.  Problem noted by Nikos Voutsinas of the
 2412 		University of Athens.
 2413 	New Files:
 2414 		cf/cf/generic-mpeix.cf
 2415 		cf/cf/generic-mpeix.mc
 2416 		cf/ostype/freebsd5.m4
 2417 		cf/ostype/mpeix.m4
 2418 		devtools/OS/AIX.5.1
 2419 		devtools/OS/MPE-iX
 2420 		include/sm/os/sm_os_mpeix.h
 2421 		libsm/mpeix.c
 2423 8.12.1/8.12.1	2001/10/01
 2424 	SECURITY: Check whether dropping group privileges actually succeeded
 2425 		to avoid possible compromises of the mail system by
 2426 		supplying bogus data.  Add configuration options for
 2427 		different set*gid() calls to reset saved gid.  Problem
 2428 		found by Michal Zalewski.
 2429 	PRIVACY: Prevent information leakage when sendmail has extra
 2430 		privileges by disabling debugging (command line -d flag)
 2431 		during queue runs and disabling ETRN when sendmail -bs is
 2432 		used.  Suggested by Michal Zalewski.
 2433 	Avoid memory corruption problems resulting from bogus .cf files.
 2434 		Problem found by Michal Zalewski.
 2435 	Set the ${server_addr} macro to name of mailer when doing LMTP
 2436 		delivery.  LMTP systems may offer SMTP Authentication or
 2437 		STARTTLS causing sendmail to use this macro in rulesets.
 2438 	If debugging is turned on (-d0.10) print not just the default
 2439 		values for configuration file and pid file but also the
 2440 		selected values.  Problem noted by Brad Chapman.
 2441 	Continue dealing with broken nameservers by ignoring SERVFAIL
 2442 		errors returned on T_AAAA (IPv6) lookups at delivery time
 2443 		if ResolverOptions=WorkAroundBrokenAAAA is set.  Previously
 2444 		this only applied to hostname canonification.  Problem
 2445 		noted by Bill Fenner of AT&T Research.
 2446 	Ignore comments in NIS host records when trying to find the
 2447 		canonical name for a host.
 2448 	When sendmail has extra privileges, limit mail submission command
 2449 		line flags (i.e., -G, -h, -F, etc.)  to mail submission
 2450 		operating modes (i.e., -bm, -bs, -bv, etc.).  Idea based on
 2451 		suggestion from Michal Zalewski.
 2452 	Portability:
 2453 		AIX: Use `oslevel` if available to determine OS version.
 2454 			`uname` does not given complete information.
 2455 			Problem noted by Keith Neufeld of the Cessna
 2456 			Aircraft Company.
 2457 		OpenUNIX: Use lockf() for LDA delivery (affects mail.local).
 2458 			Problem noticed by Boyd Lynn Gerber of ZENEX.
 2459 		Avoid compiler warnings by not using pointers to pass
 2460 			integers.  Problem noted by Todd C. Miller of
 2461 			Courtesan Consulting.
 2462 	CONFIG: Add restrictqrun to PrivacyOptions for the MSP to minimize
 2463 		problems with potential misconfigurations.
 2464 	CONFIG: Fix comment showing default value of MaxHopCount.  Problem
 2465 		noted by Greg Robinson of the Defence Science and
 2466 		Technology Organisation of Australia.
 2467 	CONFIG: dnsbl: If an argument specifies an error message in case
 2468 		of temporary lookup failures for DNS based blacklists
 2469 		then use it.
 2470 	LIBMILTER: Install mfdef.h, required by mfapi.h.  Problem noted by
 2471 		Richard A. Nelson of Debian.
 2472 	LIBMILTER: Add __P definition for OS that lack it.  Problem noted
 2473 		by Chris Adams from HiWAAY Informations Services.
 2474 	LIBSMDB: Fix a lock race condition that affects makemap, praliases,
 2475 		and vacation.
 2476 	MAKEMAP: Avoid going beyond the end of an input line if it does
 2477 		not contain a value for a key.  Based on patch from
 2478 		Mark Bixby from Hewlett-Packard.
 2479 	New Files:
 2480 		test/Build
 2481 		test/Makefile
 2482 		test/Makefile.m4
 2483 		test/README
 2484 		test/t_dropgid.c
 2485 		test/t_setgid.c
 2486 	Deleted Files:
 2487 		include/sm/stdio.h
 2488 		include/sm/sysstat.h
 2490 8.12.0/8.12.0	2001/09/08
 2491 	*NOTICE*: The default installation of sendmail does not use
 2492 		set-user-ID root anymore.  You need to create a new user and
 2493 		a new group before installing sendmail (both called smmsp by
 2494 		default).  The installation process tries to install
 2495 		/etc/mail/submit.cf and creates /var/spool/clientmqueue by
 2496 		default.  Please see sendmail/SECURITY for details.
 2497 	SECURITY: Check for group and world writable forward and :include:
 2498 		files.  These checks can be turned off if absolutely
 2499 		necessary using the DontBlameSendmail option and the new
 2500 		flags:
 2501 			GroupWritableForwardFile
 2502 			WorldWritableForwardFile
 2503 			GroupWritableIncludeFile
 2504 			WorldWritableIncludeFile
 2505 		Problem noted by Slawek Zak of Politechnika Warszawska,
 2506 	SECURITY: Drop privileges when using address test mode.  Suggested
 2507 		by Michal Zalewski of the "Internet for Schools" project
 2508 		(IdS).
 2509 	Fixed problem of a global variable being used for a timeout jump
 2510 		point where the variable could become overused for more than
 2511 		one timeout concurrently.  This erroneous behavior resulted in
 2512 		a corrupted stack causing a core dump.  The timeout is now
 2513 		handled via libsm.  Problem noted by Michael Shapiro,
 2514 		John Beck, and Carl Smith of Sun Microsystems.
 2515 	If sendmail is set-group-ID then that group ID is used for permission
 2516 		checks (group ID of RunAsUser).  This allows use of a
 2517 		set-group-ID sendmail binary for initial message submission
 2518 		and no set-user-ID root sendmail is needed.  For details
 2519 		see sendmail/SECURITY.
 2520 	Log a warning if a non-trusted user changes the syslog label.
 2521 		Based on notice from Bryan Costales of SL3D, Inc.
 2522 	If sendmail is called for initial delivery, try to use submit.cf
 2523 		with a fallback of sendmail.cf as configuration file.  See
 2524 		sendmail/SECURITY.
 2525 	New configuration file option UseMSP to allow group writable queue
 2526 		files if the group is the same as that of a set-group-ID
 2527 		sendmail binary.  See sendmail/SECURITY.
 2528 	The .cf file is chosen based on the operation mode. For -bm (default),
 2529 		-bs, and -t it is submit.cf if it exists for all others it
 2530 		is sendmail.cf (to be backward compatible).  This selection
 2531 		can be changed by the new option -Ac or -Am (alternative .cf
 2532 		file: client or mta).  See sendmail/SECURITY.
 2533 	The SMTP server no longer forks on each MAIL command.  The ONEX
 2534 		command has been removed.
 2535 	Implement SMTP PIPELINING per RFC 2920.  It can be turned off
 2536 		at compile time or per host (ruleset).
 2537 	New option MailboxDatabase specifies the type of mailbox database
 2538 		used to look up local mail recipients; the default value
 2539 		is "pw", which means to use getpwnam().  New mailbox database
 2540 		types can be added by adding custom code to libsm/mbdb.c.
 2541 	Queue file names are now 15 characters long, rather than 14 characters
 2542 		long, to accomodate envelope splitting.  File systems with
 2543 		a 14 character file name length limit are no longer
 2544 		supported.
 2545 	Recipient list used for delivery now gets internally ordered by
 2546 		hostsignature (character string version of MX RR).  This orders
 2547 		recipients for the same MX RR's together meaning smaller
 2548 		portions of the list need to be scanned (instead of the whole
 2549 		list) each delivery() pass to determine piggybacking.  The
 2550 		significance of the change is better the larger the recipient
 2551 		list.  Hostsignature is now created during recipient list
 2552 		creation rather than just before delivery.
 2553 	Enhancements for more opportunistic piggybacking.  Previous
 2554 		piggybacking (called coincidental) extended to coattail
 2555 		piggybacking.  Rather than complete MX RR matching
 2556 		(coincidental) piggybacking is done if just the lowest value
 2557 		preference matches (coattail).
 2558 	If sendmail receives a temporary error on a RCPT TO: command, it will
 2559 		try other MX hosts if available.
 2560 	DefaultAuthInfo can contain a list of mechanisms to be used for
 2561 		outgoing (client-side) SMTP Authentication.
 2562 	New modifier 'A' for DaemonPortOptions/ClientPortOptions to disable
 2563 		AUTH (overrides 'a' modifier in DaemonPortOptions).  Based
 2564 		on patch from Lyndon Nerenberg of Messaging Direct.
 2565 	Enable AUTH mechanism EXTERNAL if STARTTLS is used.
 2566 	A new ruleset authinfo can be used to return client side
 2567 		authentication information for AUTH instead of DefaultAuthInfo.
 2568 		Therefore the DefaultAuthInfo option is deprecated and will be
 2569 		removed in future versions.
 2570 	Accept any SMTP continuation code 3xy for AUTH even though RFC 2554
 2571 		requires 334.  Mercury 1.48 is a known offender.
 2572 	Add new option AuthMaxBits to limit the overall encryption strength
 2573 		for the security layer in SMTP AUTH (SASL).  See
 2574 		doc/op/op.me for details.
 2575 	Introduce new STARTTLS related macros {cn_issuer}, {cn_subject},
 2576 		{cert_md5} which hold the CN (common name) of the CA that
 2577 		signed the presented certificate, the CN and the MD5 hash
 2578 		of the presented certificate, respectively.
 2579 	New ruleset try_tls to decide whether to try (as client) STARTTLS.
 2580 	New ruleset srv_features to enable/disable certain features in the
 2581 		server per connection.  See doc/op/op.me for details.
 2582 	New ruleset tls_rcpt to decide whether to send e-mail to a particular
 2583 		recipient; useful to decide whether a conection is secure
 2584 		enough on a per recipient basis.
 2585 	New option TLSSrvOptions to modify some aspects of the server
 2586 		for STARTTLS.
 2587 	If no certificate has been requested, the macro {verify} has the
 2588 		value "NOT".
 2589 	New M=S modifier for ClientPortOptions/DaemonPortOptions to turn off
 2590 		using/offering STARTTLS when delivering/receiving e-mail.
 2591 	Macro expand filenames/directories for certs and keys in the .cf file.
 2592 		Proposed by Neil Rickert of Northern Illinois University.
 2593 	Generate an ephemeral RSA key for a STARTTLS connection only if
 2594 		really required.  This change results in a noticable
 2595 		performance gains on most machines.  Moreover, if shared
 2596 		memory is in use, reuse the key several times.
 2597 	Add queue groups which can be used to group queue directories with
 2598 		the same behavior together.  See doc/op/op.me for details.
 2599 	If the new option FastSplit (defaults to one) has a value greater
 2600 		than zero, it suppresses the MX lookups on addresses when they
 2601 		are initially sorted which may result in faster envelope
 2602 		splitting.  If the mail is submitted directly from the
 2603 		command line, then the value also limits the number of
 2604 		processes to deliver the envelopes; if more envelopes are
 2605 		created they are only queued up and must be taken care of
 2606 		by a queue run.
 2607 	The check for 'enough disk space' now pays attention to which file
 2608 		system each queue directory resides in.
 2609 	All queue runners can be cleanly terminated via SIGTERM to parent.
 2610 	New option QueueFileMode for the default permissions of queue files.
 2611 	Add parallel queue runner code.  Allows multiple queue runners per work
 2612 		group (one or more queues in a multi-queue environment
 2613 		collected together) to process the same work list at the
 2614 		same time.
 2615 	Option MaxQueueChildren added to limit the number of concurrently
 2616 		active queue runner processes.
 2617 	New option MaxRunnersPerQueue to specify the maximum number of queue
 2618 		runners per queue group.
 2619 	Queue member selection by substring pattern matching now allows
 2620 		the pattern to be negated.  For -qI, -qR and -qS it is
 2621 		permissible for -q!I, -q!R and -q!S to mean remove members
 2622 		of the queue that match during processing.
 2623 	New -qp[time] option is similar to -qtime, except that instead of
 2624 		periodically forking a child to process the queue, a single
 2625 		child is forked for each queue that sleeps between queue
 2626 		runs.  A SIGHUP signal can be sent to restart this
 2627 		persistent queue runner.
 2628 	The SIGHUP signal now restarts a timed queue run process (i.e., a
 2629 		sendmail process which only runs the queue at an interval:
 2630 		sendmail -q15m).
 2631 	New option NiceQueueRun	to set the priority of queue runners.
 2632 		Proposed by Thom O'Connor.
 2633 	sendmail will run the queue(s) in the background when invoked with -q
 2634 		unless the new -qf option or -v is used.
 2635 	QueueSortOrder=Random sorts the queue randomly, which is useful if
 2636 		several queue runners are started by hand to avoid contention.
 2637 	QueueSortOrder=Modification sorts the queue by the modification time
 2638 		of the qf file (older entries first).
 2639 	Support Deliver By SMTP Service Extension (RFC 2852) which allows
 2640 		a client to specify an amount of time within which an e-mail
 2641 		should be delivered.  New option DeliverByMin added to set the
 2642 		minimum amount of time or disable the extension.
 2643 	Non-printable characters (ASCII: 0-31, 127) in mailbox addresses are
 2644 		not allowed unless escaped or quoted.
 2645 	Add support for a generic DNS map.  Based on a patch contributed
 2646 		by Leif Johansson of Stockholm University, which was based on
 2647 		work by Assar Westerlund of Swedish Institute of Computer
 2648 		Science, Kista, and Johan Danielsson of Royal Institute of
 2649 		Technology, Stockholm, Sweden.
 2650 	MX records will be looked up for FallBackMXhost.  To use the old
 2651 		behavior (no MX lookups), put the name in square brackets.
 2652 		Proposed by Thom O'Connor.
 2653 	Use shared memory to store free space of filesystems that are used
 2654 		for queues, if shared memory is available and if a key is set
 2655 		via SharedMemoryKey.  This minimizes the number of system
 2656 		calls to check the available space.  See doc/op/op.me for
 2657 		details.
 2658 	If shared memory is compiled in the option -bP can be used to print
 2659 		the number of entries in the queue(s).
 2660 	Enable generic mail filter API (milter).  See libmilter/README
 2661 		and the usual documentation for details.
 2662 	Remove AutoRebuildAliases option, deprecated since 8.10.
 2663 	Remove '-U' (initial user submission) command line option as
 2664 		announced in 8.10.
 2665 	Remove support for non-standard SMTP command XUSR.  Use an MSA instead.
 2666 	New macro {addr_type} which contains whether the current address is
 2667 		an envelope sender or recipient address.  Suggested by
 2668 		Neil Rickert of Northern Illinois University.
 2669 	Two new options for host maps: -d (retransmission timeout),
 2670 		-r (number of retries).
 2671 	New option for LDAP maps: the -V<sep> allows you to specify a
 2672 		separator such that a lookup can return both an attribute
 2673 		and value separated by the given separator.
 2674 	Add new operators '%', '|', '&' (modulo, binary or, binary and)
 2675 		to map class arith.
 2676 	If DoubleBounceAddress expands to an empty string, ``double bounces''
 2677 		(errors that occur when sending an error message) are dropped.
 2678 	New DontBlameSendmail options GroupReadableSASLDBFile and
 2679 		GroupWritableSASLDBFile to relax requirements for sasldb files.
 2680 	New DontBlameSendmail options GroupReadableKeyFile to relax
 2681 		requirements for files containing secret keys.  This is
 2682 		necessary for the MSP if client authentification is used.
 2683 	Properly handle quoted filenames for class files (to allow for
 2684 		filenames with spaces).
 2685 	Honor the resolver option RES_NOALIASES when canonifying hostnames.
 2686 	Add macros to avoid the reuse of {if_addr} etc:
 2687 		{if_name_out}	hostname of interface of outgoing connection.
 2688 		{if_addr_out}	address of interface of outgoing connection.
 2689 		{if_family_out}	family of interface of outgoing connection.
 2690 		The latter two are only set if the interface does not belong
 2691 		to the loopback net.
 2692 	Add macro {nrcpts} which holds the number of (validated) recipients.
 2693 	DialDelay option applies only to mailers with flag 'Z'.  Patch from
 2694 		Juergen Georgi of RUS University of Stuttgart.
 2695 	New Timeout.lhlo,auth,starttls options to limit the time waiting for
 2696 		an answer to the LMTP LHLO, SMTP AUTH or STARTTLS command.
 2697 	New Timeout.aconnect option to limit the overall waiting time for
 2698 		all connections for a single delivery attempt to succeed.
 2699 	Limit the rate recipients in the SMTP envelope are accepted once
 2700 		a threshold number of recipients has been rejected (option
 2701 		BadRcptThrottle).  From Gregory A Lundberg of the WU-FTPD
 2702 		Development Group.
 2703 	New option DelayLA to delay connections if the load averages
 2704 		exceeds the specified value.  The default of 0 does not
 2705 		change the previous behavior.  A value greater than 0
 2706 		will cause sendmail to sleep for one second on most
 2707 		SMTP commands and before accepting connections if that
 2708 		load average is exceeded.
 2709 	Use a dynamic (instead of fixed-size) buffer for the list of
 2710 		recipients that are sent during a connection to a mailer.
 2711 		This also introduces a new mailer field 'r' which defines
 2712 		the maximum number of recipients (defaults to 100).
 2713 		Based on patch by Motonori Nakamura of Kyoto University.
 2714 	Add new F=1 mailer flag to disable sending of null characters ('\0').
 2715 	Add new F=2 mailer flag to disable use of ESMTP, using SMTP instead.
 2716 	The deprecated [TCP] builtin mailer pathname (P=) is gone.  Use [IPC]
 2717 		instead.
 2718 	IPC is no longer available as first mailer argument (A=) for [IPC]
 2719 		builtin mailer pathnames.  Use TCP instead.
 2720 	PH map code updated to use the new libphclient API instead of the
 2721 		old libqiapi library.  Contributed by Mark Roth of the
 2722 		University of Illinois at Urbana-Champaign.
 2723 	New option DirectSubmissionModifiers to define {daemon_flags}
 2724 		for direct (command line) submissions.
 2725 	New M=O modifier for DaemonPortOptions to ignore the socket in
 2726 		case of failures.  Based on patch by Jun-ichiro itojun
 2727 		Hagino of the KAME Project.
 2728 	Add Disposition-Notification-To: (RFC 2298) to the list of headers
 2729 		whose content is rewritten similar to Reply-To:.
 2730 		Proposed by Andrzej Filip.
 2731 	Use STARTTLS/AUTH=server/client for logging incoming/outgoing
 2732 		STARTTLS/AUTH connections; log incoming connections at level
 2733 		9 or higher.  Use AUTH/STARTTLS instead of SASL/TLS for SMTP
 2734 		AUTH/STARTTLS related logfile entries.
 2735 	Convert unprintable characters (and backslash) into octal or C format
 2736 		before logging.
 2737 	Log recipients if no message is transferred but QUIT/RSET is given
 2738 		(at LogLevel 9/10 or higher).
 2739 	Log discarded recipients at LogLevel 10 or higher.
 2740 	Do not log "did not issue MAIL/EXPN/VRFY/ETRN" for connections
 2741 		in which most commands are rejected due to check_relay or
 2742 		TCP Wrappers if the host tries one of those commands anyway.
 2743 	Change logging format for cloned envelopes to be similar to that for
 2744 		DSNs ("old id: new id: clone").  Suggested by Ulrich Windl
 2745 		of the Universitat Regensburg.
 2746 	Added libsm, a C library of general purpose abstractions including
 2747 		assertions, tracing and debugging with named debug categories,
 2748 		exception handling, malloc debugging, resource pools,
 2749 		portability abstractions, and an extensible buffered I/O
 2750 		package.  It will at some point replace libsmutil.
 2751 		See libsm/index.html for details.
 2752 	Fixed most memory leaks in sendmail which were previously taken
 2753 		care of by fork() and exit().
 2754 	Use new sm_io*() functions in place of stdio calls.  Allows for
 2755 		more consistent portablity amongst different platforms
 2756 		new and old (from new libsm).
 2757 	Common I/O pkg means just one buffering method needed instead of two
 2758 		('bf_portable' and 'bf_torek' now just 'bf').
 2759 	Sfio no longer needed as SASL/TLS code uses sm_io*() API's.
 2760 	New possible value 'interactive' for SuperSafe which can be used
 2761 		together with DeliveryMode=interactive is to avoid some disk
 2762 		synchronizations calls.
 2763 	Add per-recipient status information to mailq -v output.
 2764 	T_ANY queries are no longer used by sendmail.
 2765 	When compiling with "gcc -O -Wall" specify "-DSM_OMIT_BOGUS_WARNINGS"
 2766 		too (see include/sm/cdefs.h for more info).
 2767 	sendmail -d now has general support for named debug categories.
 2768 		See libsm/debug.html and section 3.4 of doc/op/op.me
 2769 		for details.
 2770 	Eliminate the "postmaster warning" DSNs on address parsing errors
 2771 		such as unbalanced angle brackets or parentheses.  The DSNs
 2772 		generated by this condition were illegal (not RFC conform).
 2773 		Problem noted by Ulrich Windl of the Universitaet Regensburg.
 2774 	Do not issue a DSN if the ruleset localaddr resolves to the $#error
 2775 		mailer and the recipient has hence been rejected during the
 2776 		SMTP dialogue.  Problem reported by Larry Greenfield of CMU.
 2777 	Deal with a case of multiple deliveries on misconfigured systems
 2778 		that do not have postmaster defined.  If an email was sent
 2779 		from an address to which a DSN cannot be returned and
 2780 		in which at least one recipient address is non-deliverable,
 2781 		then that email had been delivered in each queue run.
 2782 		Problem reported by Matteo HCE Valsasna of Universita
 2783 		degli Studi dell'Insubria.
 2784 	The compilation options SMTP, DAEMON, and QUEUE have been removed,
 2785 		i.e., the corresponding code is always compiled in now.
 2786 	Log the command line in daemon/queue-run mode at LogLevel 10 and
 2787 		higher.  Suggested by Robert Harker of Harker Systems.
 2788 	New ResolverOptions setting: WorkAroundBrokenAAAA.  When
 2789 		attempting to canonify a hostname, some broken nameservers
 2790 		will return SERVFAIL (a temporary failure) on T_AAAA (IPv6)
 2791 		lookups.  If you want to excuse this behavior, use this new
 2792 		flag.  Suggested by Chris Foote of SE Network Access and
 2793 		Mark Roth of the University of Illinois at
 2794 		Urbana-Champaign.
 2795 	Free the memory allocated by getipnodeby{addr,name}().  Problem
 2796 		noted by Joy Latten of IBM.
 2797 	ConnectionRateThrottle limits the number of connections per second
 2798 		to each daemon individually, not the overall number of
 2799 		connections.
 2800 	Specifying only "ldap:" as an AliasFile specification will force
 2801 		sendmail to use a default alias schema as outlined in the
 2802 		``USING LDAP FOR ALIASES, MAPS, and CLASSES'' section of
 2803 		cf/README.
 2804 	Add a new syntax for the 'F' (file class) sendmail.cf command.  If
 2805 		the first character after the class name is not a '/' or a
 2806 		'|' and it contains an '@' (e.g., F{X}key@class:spec), the
 2807 		rest of the line will be parsed as a map lookup.  This
 2808 		allows classes to be filled via a map lookup.  See op.me
 2809 		for more syntax information.  Specifically, this can be
 2810 		used for commands such as VIRTUSER_DOMAIN_FILE() to read
 2811 		the list of domains via LDAP (see the ``USING LDAP FOR
 2812 		ALIASES, MAPS, and CLASSES'' section of cf/README for an
 2813 		example).
 2814 	The new macro ${sendmailMTACluster} determines the LDAP cluster for
 2815 		the default schema used in the above two items.
 2816 	Unless DontBlameSendmail=RunProgramInUnsafeDirPath is set, log a
 2817 		warning if a program being run from a mailer or file class
 2818 		(e.g., F|/path/to/prog) is in an unsafe directory path.
 2819 	Unless DontBlameSendmail=RunWritableProgram is set, log a warning
 2820 		if a program being run from a mailer or file class
 2821 		(e.g., F|/path/to/prog) is group or world writable.
 2822 	Loopback interfaces (e.g., "lo0") are now probed for class {w}
 2823 		hostnames.  Setting DontProbeInterfaces to "loopback"
 2824 		(without quotes) will disable this and return to the
 2825 		pre-8.12 behavior of only probing non-loopback interfaces.
 2826 		Suggested by Bryan Stansell of GNAC.
 2827 	In accordance with RFC 2821 section 4.1.4, accept multiple
 2828 		HELO/EHLO commands.
 2829 	Multiple ClientPortOptions settings are now allowed, one for each
 2830 		possible protocol family which may be used for outgoing
 2831 		connections.  Restrictions placed on one family only affect
 2832 		outgoing connections on that particular family.  Because of
 2833 		this change, the ${client_flags} macro is not set until the
 2834 		connection is established.  Based on patch from Motonori
 2835 		Nakamura of Kyoto University.
 2836 	PrivacyOptions=restrictexpand instructs sendmail to drop privileges
 2837 		when the -bv option is given by users who are neither root
 2838 		nor the TrustedUser so users can not read private aliases,
 2839 		forwards, or :include: files.  It also will override the -v
 2840 		(verbose) command line option.
 2841 	If the M=b modifier is set in DaemonPortOptions and the interface
 2842 		address can't be used for the outgoing connection, fall
 2843 		back to the settings in ClientPortOptions (if set).
 2844 		Problem noted by John Beck of Sun Microsystems.
 2845 	New named config file rule check_data for DATA command (input:
 2846 		number of recipients).  Based on patch from Mark Roth of
 2847 		the University of Illinois at Urbana-Champaign.
 2848 	Add support for ETRN queue selection per RFC 1985.  The queue group
 2849 		can be specified using the '#' option character.  For
 2850 		example, 'ETRN #queuegroup'.
 2851 	If an LDAP server times out or becomes unavailable, close the
 2852 		current connection and reopen to get to one of the fallback
 2853 		servers.  Patch from Paul Hilchey of the University of
 2854 		British Columbia.
 2855 	Make default error number on $#error messages 550 instead of 501
 2856 		because 501 is not allowed on all commands.
 2857 	The .cf file option UnsafeGroupWrites is deprecated, it should be
 2858 		replaced with the settings GroupWritableForwardFileSafe
 2859 		and GroupWritableIncludeFileSafe in DontBlameSendmail
 2860 		if required.
 2861 	The deprecated ldapx map class has been removed.  Use the ldap map
 2862 		class instead.
 2863 	Any IPv6 addresses used in configuration should be prefixed by the
 2864 		"IPv6:" tag to identify the address properly.  For example,
 2865 		if you want to add the IPv6 address [2002:c0a8:51d2::23f4] to
 2866 		class {w}, you would need to add [IPv6:2002:c0a8:51d2::23f4].
 2867 	Change the $&{opMode} macro if the operation mode changes while the
 2868 		MTA is running.  For example, during a queue run.
 2869 	Add "use_inet6" as a new ResolverOptions flag to control the
 2870 		RES_USE_INET6 resolver option.  Based on patch from Rick
 2871 		Nelson of IBM.
 2872 	The maximum number of commands before the MTA slows down when too
 2873 		many "light weight" commands have been received are now
 2874 		configurable during compile time.  The current values and
 2875 		their defaults are:
 2876 		    MAXBADCOMMANDS	25	unknown commands
 2881 		Setting a value to 0 disables the check.  Patch from Bryan
 2882 		Costales of SL3D, Inc.
 2883 	The header syntax H?${MyMacro}?X-My-Header: now not only checks if
 2884 		${MyMacro} is defined but also that it is not empty.
 2885 	Properly quote usernames with special characters if they are used
 2886 		in headers.  Problem noted by Kari Hurtta of the Finnish
 2887 		Meteorological Institute.
 2888 	Be sure to include the proper Final-Recipient: DSN header in bounce
 2889 		messages for messages for mailing list expanded addresses
 2890 		which are not delivered on the initial attempt.
 2891 	Do not treat errors as sticky when doing delivery via LMTP after
 2892 		the final dot has been sent to avoid affecting future
 2893 		deliveries.  Problem reported by Larry Greenfield of CMU.
 2894 	New compile time flag REQUIRES_DIR_FSYNC which turns on support for
 2895 		file systems that require to call fsync() for a directory
 2896 		if the meta-data in it has been changed.  This should be
 2897 		set at least for ReiserFS; it is enabled by default for Linux.
 2898 		See sendmail/README for further information.
 2899 	Avoid file locking deadlock when updating the statistics file if
 2900 		sendmail is signaled to terminate.  Problem noted by
 2901 		Christophe Wolfhugel of France Telecom.
 2902 	Set the $c macro (hop count) as it is being set instead of when the
 2903 		envelope is initialized.  Problem noted by Kari Hurtta of
 2904 		the Finnish Meteorological Institute.
 2905 	Properly count recipients for DeliveryMode defer and queue.  Fix
 2906 		from Peter A. Friend of EarthLink.
 2907 	Treat invalid hesiod lookups as permanent errors instead of
 2908 		temporary errors.  Problem noted by Russell McOrmond of
 2909 		flora.ca.
 2910 	Portability:
 2911 		Remove support for AIX 2, which supports only 14 character
 2912 			filenames and is outdated anyway.  Suggested by
 2913 			Valdis Kletnieks of Virginia Tech.
 2914 		Change several settings for Irix 6: remove confSBINDIR,
 2915 			i.e., use default /usr/sbin, change owner/group
 2916 			of man pages and user-executable to root/sys, set
 2917 			optimization limit to 0 (unlimited).  Based on patch
 2918 			from Ayamura Kikuchi, M.D, and proposal from Kari
 2919 			Hurtta of the Finnish Meteorological Institute.
 2920 		Do not assume LDAP support is installed by default under
 2921 			Solaris 8 and later.
 2922 		Add support for OpenUNIX.
 2923 	CONFIG: Increment version number of config file to 10.
 2924 	CONFIG: Add an install target and a README file in cf/cf.
 2925 	CONFIG: Don't accept addresses of the form a@b@, a@b@c, a@[b]c, etc.
 2926 	CONFIG: Reject empty recipient addresses (in check_rcpt).
 2927 	CONFIG: The access map uses an option of -T<TMPF> to deal with
 2928 		temporary lookup failures.
 2929 	CONFIG: New value for access map: SKIP, which causes the default
 2930 		action to be taken by aborting the search for domain names
 2931 		or IP nets.
 2932 	CONFIG: check_rcpt can deal with TEMPFAIL for either recipient or
 2933 		relay address as long as the other part allows the email
 2934 		to get through.
 2935 	CONFIG: Entries for virtusertable can make use of a third parameter
 2936 		"%3" which contains "+detail" of a wildcard match, i.e., an
 2937 		entry like user+*@domain.  This allows handling of details by
 2938 		using %1%3 as the RHS.  Additionally, a "+" wildcard has been
 2939 		introduced to match only non-empty details of addresses.
 2940 	CONFIG: Numbers for rulesets used by MAILERs have been removed
 2941 		and hence there is no required order within the MAILER
 2942 		section anymore except for MAILER(`uucp') which must come
 2943 		after MAILER(`smtp') if uucp-dom and uucp-uudom are used.
 2944 	CONFIG: Hosts listed in the generics domain class {G}
 2945 		(GENERICS_DOMAIN() and GENERICS_DOMAIN_FILE()) are treated
 2946 		as canonical.  Suggested by Per Hedeland of Ericsson.
 2947 	CONFIG: If FEATURE(`delay_checks') is used, make sure that a lookup
 2948 		in the access map which returns OK or RELAY actually
 2949 		terminates check_* ruleset checking.
 2950 	CONFIG: New tag TLS_Rcpt: for access map to be used by ruleset
 2951 		tls_rcpt, see cf/README for details.
 2952 	CONFIG: Change format of Received: header line which reveals whether
 2953 		STARTTLS has been used to "(version=${tls_version}
 2954 		cipher=${cipher} bits=${cipher_bits} verify=${verify})".
 2955 	CONFIG: Use "Spam:" as tag for lookups for FEATURE(`delay_checks')
 2956 		options friends/haters instead of "To:" and enable
 2957 		specification of whole domains instead of just users.
 2958 		Notice: this change is not backward compatible.
 2959 		Suggested by Chris Adams from HiWAAY Informations Services.
 2960 	CONFIG: Allow for local extensions for most new rulesets, see
 2961 		cf/README for details.
 2962 	CONFIG: New FEATURE(`lookupdotdomain') to lookup also .domain in
 2963 		the access map.  Proposed by Randall Winchester of the
 2964 		University of Maryland.
 2965 	CONFIG: New FEATURE(`local_no_masquerade') to avoid masquerading for
 2966 		the local mailer.  Proposed by Ingo Brueckl of Wupper Online.
 2967 	CONFIG: confRELAY_MSG/confREJECT_MSG can override the default
 2968 		messages for an unauthorized relaying attempt/for access
 2969 		map entries with RHS REJECT, respectively.
 2970 	CONFIG: FEATURE(`always_add_domain') takes an optional argument
 2971 		to specify another domain to be added instead of the local one.
 2972 		Suggested by Richard H. Gumpertz of Computer Problem
 2973 		Solving.
 2974 	CONFIG: confAUTH_OPTIONS allows setting of Cyrus-SASL specific
 2975 		options, see doc/op/op.me for details.
 2976 	CONFIG: confAUTH_MAX_BITS sets the maximum encryption strength for
 2977 		the security layer in SMTP AUTH (SASL).
 2978 	CONFIG: If Local_localaddr resolves to $#ok, localaddr is terminated
 2979 		immediately.
 2980 	CONFIG: FEATURE(`enhdnsbl') is an enhanced version of dnsbl which
 2981 		allows checking of the return values of the DNS lookups.
 2982 		See cf/README for details.
 2983 	CONFIG: FEATURE(`dnsbl') allows now to specify the behavior for
 2984 		temporary lookup failures.
 2985 	CONFIG: New option confDELIVER_BY_MIN to specify minimum time for
 2986 		Deliver By (RFC 2852) or to turn off the extension.
 2987 	CONFIG: New option confSHARED_MEMORY_KEY to set the key for shared
 2988 		memory use.
 2989 	CONFIG: New FEATURE(`compat_check') to look up a key consisting
 2990 		of the sender and the recipient address delimited by the
 2991 		string "<@>", e.g., sender@sdomain<@>recipient@rdomain,
 2992 		in the access map.  Based on code contributed by Mathias
 2993 		Koerber of Singapore Telecommunications Ltd.
 2994 	CONFIG: Add EXPOSED_USER_FILE() command to allow an exposed user
 2995 		file.  Suggested by John Beck of Sun Microsystems.
 2996 	CONFIG: Don't use MAILER-DAEMON for error messages delivered
 2997 		via LMTP.  Problem reported by Larry Greenfield of CMU.
 2998 	CONFIG: New FEATURE(`preserve_luser_host') to preserve the name of
 2999 		the recipient host if LUSER_RELAY is used.
 3000 	CONFIG: New FEATURE(`preserve_local_plus_detail') to preserve the
 3001 		+detail portion of the address when passing address to
 3002 		local delivery agent.  Disables alias and .forward +detail
 3003 		stripping.  Only use if LDA supports this.
 3004 	CONFIG: Removed deprecated FEATURE(`rbl').
 3006 		which allow you to specify 'equivalent' hosts for LDAP
 3007 		Routing lookups.  Equivalent hostnames are replaced by the
 3008 		masquerade domain name for lookups.  See cf/README for
 3009 		additional details.
 3010 	CONFIG: Add a fourth argument to FEATURE(`ldap_routing') which
 3011 		instructs the rulesets on what to do if the address being
 3012 		looked up has +detail information.  See cf/README for more
 3013 		information.
 3014 	CONFIG: When chosing a new destination via LDAP Routing, also look
 3015 		up the new routing address/host in the mailertable.  Based
 3016 		on patch from Don Badrak of the United States Census Bureau.
 3017 	CONFIG: Do not reject the SMTP Mail from: command if LDAP Routing
 3018 		is in use and the bounce option is enabled.  Only reject
 3019 		recipients as user unknown.
 3020 	CONFIG: Provide LDAP support for the remaining database map
 3021 		features.  See the ``USING LDAP FOR ALIASES AND MAPS''
 3022 		section of cf/README for more information.
 3023 	CONFIG: Add confLDAP_CLUSTER which defines the ${sendmailMTACluster}
 3024 		macro used for LDAP searches as described above in ``USING
 3026 	CONFIG: confCLIENT_OPTIONS has been replaced by CLIENT_OPTIONS(),
 3027 		which takes the options as argument and can be used
 3028 		multiple times; see cf/README for details.
 3029 	CONFIG: Add configuration macros for new options:
 3030 		confBAD_RCPT_THROTTLE		BadRcptThrottle
 3031 		confDIRECT_SUBMISSION_MODIFIERS	DirectSubmissionModifiers
 3032 		confMAILBOX_DATABASE		MailboxDatabase
 3033 		confMAX_QUEUE_CHILDREN		MaxQueueChildren
 3034 		confMAX_RUNNERS_PER_QUEUE	MaxRunnersPerQueue
 3035 		confNICE_QUEUE_RUN		NiceQueueRun
 3036 		confQUEUE_FILE_MODE		QueueFileMode
 3037 		confFAST_SPLIT			FastSplit
 3038 		confTLS_SRV_OPTIONS		TLSSrvOptions
 3039 		See above (and related documentation) for further information.
 3040 	CONFIG: Add configuration variables for new timeout options:
 3041 		confTO_ACONNECT		Timeout.aconnect
 3042 		confTO_AUTH		Timeout.auth
 3043 		confTO_LHLO		Timeout.lhlo
 3044 		confTO_STARTTLS		Timeout.starttls
 3045 	CONFIG: Add configuration macros for mail filter API:
 3046 		confINPUT_MAIL_FILTERS		InputMailFilters
 3047 		confMILTER_LOG_LEVEL		Milter.LogLevel
 3048 		confMILTER_MACROS_CONNECT	Milter.macros.connect
 3049 		confMILTER_MACROS_HELO		Milter.macros.helo
 3050 		confMILTER_MACROS_ENVFROM	Milter.macros.envfrom
 3051 		confMILTER_MACROS_ENVRCPT	Milter.macros.envrcpt
 3052 		Mail filters can be defined via INPUT_MAIL_FILTER() and
 3053 		MAIL_FILTER().  See libmilter/README, cf/README, and
 3054 		doc/op/op.me for details.
 3055 	CONFIG: Add support for accepting temporarily unresolvable domains.
 3056 		See cf/README for details.  Based on patch by Motonori
 3057 		Nakamura of Kyoto University.
 3058 	CONFIG: confDEQUOTE_OPTS can be used to specify options for the
 3059 		dequote map.
 3060 	CONFIG: New macro QUEUE_GROUP() to define queue groups.
 3061 	CONFIG: New FEATURE(`queuegroup') to select a queue group based
 3062 		on the full e-mail address or the domain of the recipient.
 3063 	CONFIG: Any IPv6 addresses used in configuration should be prefixed
 3064 		by the "IPv6:" tag to identify the address properly.  For
 3065 		example, if you want to use the IPv6 address
 3066 		2002:c0a8:51d2::23f4 in the access database, you would need
 3067 		to use IPv6:2002:c0a8:51d2::23f4 on the left hand side.
 3068 		This affects the access database as well as the
 3069 		relay-domains and local-host-names files.
 3070 	CONFIG: OSTYPE(aux) has been renamed to OSTYPE(a-ux).
 3071 	CONFIG: Avoid expansion of m4 keywords in SMART_HOST.
 3072 	CONFIG: Add MASQUERADE_EXCEPTION_FILE() for reading masquerading
 3073 		exceptions from a file.  Suggested by Trey Breckenridge of
 3074 		Mississippi State University.
 3075 	CONFIG: Add LOCAL_USER_FILE() for reading local users
 3076 		(LOCAL_USER() -- $={L}) entries from a file.
 3077 	CONTRIB: dnsblaccess.m4 is a further enhanced version of enhdnsbl.m4
 3078 		which allows to lookup error codes in the access map.
 3079 		Contributed by Neil Rickert of Northern Illinois University.
 3080 	DEVTOOLS: Add new options for installation of include and library
 3081 		files: confINCGRP, confINCMODE, confINCOWN, confLIBGRP,
 3082 		confLIBMODE, confLIBOWN.
 3083 	DEVTOOLS: Add new option confDONT_INSTALL_CATMAN to turn off
 3084 		installation of the the formatted man pages on operating
 3085 		systems which don't include cat directories.
 3086 	EDITMAP: New program for editing maps as supplement to makemap.
 3087 	MAIL.LOCAL: Mail.local now uses the libsm mbdb package to look up
 3088 		local mail recipients.  New option -D mbdb specifies the
 3089 		mailbox database type.
 3090 	MAIL.LOCAL: New option "-h filename" which instructs mail.local to
 3091 		deliver the mail to the named file in the user's home
 3092 		directory instead of the system mail spool area.  Based on
 3093 		patch from Doug Hardie of the Los Angeles Free-Net.
 3094 	MAILSTATS: New command line option -P which acts the same as -p but
 3095 		doesn't truncate the statistics file.
 3096 	MAKEMAP: Add new option -t to specify a different delimiter
 3097 		instead of white space.
 3098 	RMAIL: Invoke sendmail with '-G' to indicate this is a gateway
 3099 		submission.  Problem noted by Kari Hurtta of the Finnish
 3100 		Meteorological Institute.
 3101 	SMRSH: Use the vendor supplied directory on FreeBSD 3.3 and later.
 3102 	VACATION: Change Auto-Submitted: header value from auto-generated to
 3103 		auto-replied.  From Kenneth Murchison of Oceana Matrix Ltd.
 3104 	VACATION: New option -d to send error/debug messages to stdout
 3105 		instead of syslog.
 3106 	VACATION: New option -U which prevents the attempt to lookup login
 3107 		in the password file.  The -f and -m options must be used
 3108 		to specify the database and message file since there is no
 3109 		home directory for the default settings for these options.
 3110 	VACATION: Vacation now uses the libsm mbdb package to look up
 3111 		local mail recipients; it reads the MailboxDatabase option
 3112 		from the sendmail.cf file.  New option -C cffile which
 3113 		specifies the path of the sendmail.cf file.
 3114 	New Directories:
 3115 		libmilter/docs
 3116 	New Files:
 3117 		cf/cf/README
 3118 		cf/cf/submit.cf
 3119 		cf/cf/submit.mc
 3120 		cf/feature/authinfo.m4
 3121 		cf/feature/compat_check.m4
 3122 		cf/feature/enhdnsbl.m4
 3123 		cf/feature/msp.m4
 3124 		cf/feature/local_no_masquerade.m4
 3125 		cf/feature/lookupdotdomain.m4
 3126 		cf/feature/preserve_luser_host.m4
 3127 		cf/feature/preserve_local_plus_detail.m4
 3128 		cf/feature/queuegroup.m4
 3129 		cf/sendmail.schema
 3130 		contrib/dnsblaccess.m4
 3131 		devtools/M4/UNIX/sm-test.m4
 3132 		devtools/OS/OpenUNIX.5.i386
 3133 		editmap/*
 3134 		include/sm/*
 3135 		libsm/*
 3136 		libsmutil/cf.c
 3137 		libsmutil/err.c
 3138 		sendmail/SECURITY
 3139 		sendmail/TUNING
 3140 		sendmail/bf.c
 3141 		sendmail/bf.h
 3142 		sendmail/sasl.c
 3143 		sendmail/sm_resolve.c
 3144 		sendmail/sm_resolve.h
 3145 		sendmail/tls.c
 3146 	Deleted Files:
 3147 		cf/feature/rbl.m4
 3148 		cf/ostype/aix2.m4
 3149 		devtools/OS/AIX.2
 3150 		include/sendmail/cdefs.h
 3151 		include/sendmail/errstring.h
 3152 		include/sendmail/useful.h
 3153 		libsmutil/errstring.c
 3154 		sendmail/bf_portable.c
 3155 		sendmail/bf_portable.h
 3156 		sendmail/bf_torek.c
 3157 		sendmail/bf_torek.h
 3158 		sendmail/clock.c
 3159 	Renamed Files:
 3160 		cf/cf/generic-solaris2.mc => cf/cf/generic-solaris.mc
 3161 		cf/cf/generic-solaris2.cf => cf/cf/generic-solaris.cf
 3162 		cf/ostype/aux.m4 => cf/ostype/a-ux.m4
 3164 8.11.7/8.11.7	2003/03/29
 3165 	SECURITY: Fix a remote buffer overflow in header parsing by
 3166 		dropping sender and recipient header comments if the
 3167 		comments are too long.  Problem noted by Mark Dowd
 3168 		of ISS X-Force.
 3169 	SECURITY: Fix a buffer overflow in address parsing due to
 3170 		a char to int conversion problem which is potentially
 3171 		remotely exploitable.  Problem found by Michal Zalewski.
 3172 		Note: an MTA that is not patched might be vulnerable to
 3173 		data that it receives from untrusted sources, which
 3174 		includes DNS.
 3175 	To provide partial protection to internal, unpatched sendmail MTAs,
 3176 		8.11.7 changes by default (char)0xff to (char)0x7f in
 3177 		headers etc.  To turn off this conversion compile with
 3178 		-DALLOW_255 or use the command line option -d82.101.
 3179 	To provide partial protection for internal, unpatched MTAs that may be
 3180 		performing 7->8 or 8->7 bit MIME conversions, the default
 3181 		for MaxMimeHeaderLength has been changed to 2048/1024.
 3182 		Note: this does have a performance impact, and it only
 3183 		protects against frontal attacks from the outside.
 3184 		To disable the checks and return to pre-8.11.7 defaults,
 3185 		set MaxMimeHeaderLength to 0/0.
 3186 	Properly clean up macros to avoid persistence of session data
 3187 		across various connections.  This could cause session
 3188 		oriented restrictions, e.g., STARTTLS requirements,
 3189 		to erroneously allow a connection.  Problem noted
 3190 		by Tim Maletic of Priority Health.
 3191 	Ignore comments in NIS host records when trying to find the
 3192 		canonical name for a host.
 3193 	Fix a memory leak when closing Hesiod maps.
 3194 	Set ${msg_size} macro when reading a message from the command line
 3195 		or the queue.
 3196 	Prevent a segmentation fault when clearing the event list by
 3197 		turning off alarms before checking if event list is
 3198 		empty.  Problem noted by Allan E Johannesen of Worcester
 3199 		Polytechnic Institute.
 3200 	Fix a potential core dump problem if the environment variable
 3201 		NAME is set.  Problem noted by Beth A. Chaney of
 3202 		Purdue University.
 3203 	Prevent a race condition on child cleanup for delivery to files.
 3204 		Problem noted by Fletcher Mattox of the University of
 3205 		Texas.
 3206 	CONFIG: Do not bounce mail if FEATURE(`ldap_routing')'s bounce
 3207 		parameter is set and the LDAP lookup returns a temporary
 3208 		error.
 3209 	CONFIG: Fix a syntax error in the try_tls ruleset if
 3210 		FEATURE(`access_db') is not enabled.
 3211 	LIBSMDB: Fix a lock race condition that affects makemap, praliases,
 3212 		and vacation.
 3213 	LIBSMDB: Avoid a file creation race condition for Berkeley DB 1.X
 3214 		and NDBM on systems with the O_EXLOCK open(2) flag.
 3215 	MAKEMAP: Avoid going beyond the end of an input line if it does
 3216 		not contain a value for a key.  Based on patch from
 3217 		Mark Bixby from Hewlett-Packard.
 3218 	MAIL.LOCAL: Fix a truncation race condition if the close() on
 3219 		the mailbox fails.  Problem noted by Tomoko Fukuzawa of
 3220 		Sun Microsystems.
 3221 	SMRSH: SECURITY: Only allow regular files or symbolic links to be
 3222 		used for a command.  Problem noted by David Endler of
 3223 		iDEFENSE, Inc.
 3225 8.11.6/8.11.6	2001/08/20
 3226 	SECURITY: Fix a possible memory access violation when specifying
 3227 		out-of-bounds debug parameters.  Problem detected by
 3228 		Cade Cairns of SecurityFocus.
 3229 	Avoid leaking recipient information in unrelated DSNs.  This could
 3230 		happen if a connection is aborted, several mails had been
 3231 		scheduled for delivery via that connection, and the timeout
 3232 		is reached such that several DSNs are sent next.  Problem
 3233 		noted by Dileepan Moorkanat of Hewlett-Packard.
 3234 	Fix a possible segmentation violation when specifying too many
 3235 		wildcard operators in a rule.  Problem detected by
 3236 		Werner Wiethege.
 3237 	Avoid a segmentation fault on non-matching Hesiod lookups.  Problem
 3238 		noted by Russell McOrmond of flora.ca
 3240 8.11.5/8.11.5	2001/07/31
 3241 	Fix a possible race condition when sending a HUP signal to restart
 3242 		the daemon.  This could terminate the current process without
 3243 		starting a new daemon.  Problem reported by Wolfgang Breyha
 3244 		of SE Netway Communications.
 3245 	Only apply MaxHeadersLength when receiving a message via SMTP or
 3246 		the command line.  Problem noted by Andrey J. Melnikoff.
 3247 	When finding the system's local hostname on an IPv6-enabled system
 3248 		which doesn't have any IPv6 interface addresses, fall back
 3249 		to looking up only IPv4 addresses.  Problem noted by Tim
 3250 		Bosserman of EarthLink.
 3251 	When commands were being rejected due to check_relay or TCP
 3252 		Wrappers, the ETRN command was not giving a response.
 3253 	Incoming IPv4 connections on a Family=inet6 daemon (using
 3254 		IPv4-mapped addresses) were incorrectly labeled as "may be
 3255 		forged".  Problem noted by Per Steinar Iversen of Oslo
 3256 		University College.
 3257 	Shutdown address test mode cleanly on SIGTERM.  Problem noted by
 3258 		Greg King of the OAO Corporation.
 3259 	Restore the original real uid (changed in main() to prevent
 3260 		out of band signals) before invoking a delivery agent.
 3261 		Some delivery agents use this for the "From " envelope
 3262 		"header".  Problem noted by Leslie Carroll of the
 3263 		University at Albany.
 3264 	Mark closed file descriptors properly to avoid reuse. Problem
 3265 		noted by Jeff Bronson of J.D. Bronson, Inc.
 3266 	Setting Timeout options on the command line will also override
 3267 		their sub-suboptions in the .cf file, e.g., -O
 3268 		Timeout.queuereturn=2d will set all queuereturn timeouts
 3269 		to 2 days.  Problem noted by Roger B.A. Klorese.
 3270 	Portability:
 3271 		BSD/OS has a broken setreuid() implementation.  Problem
 3272 			noted by Vernon Schryver of Rhyolite Software.
 3273 		BSD/OS has /dev/urandom(4) (as of version 4.1/199910 ?).
 3274 			Noted by Vernon Schryver of Rhyolite Software.
 3275 		BSD/OS has fchown(2).  Noted by Dave Yadallee of Netline
 3276 			2000 Internet Solutions Inc.
 3277 		Solaris 2.X and later have strerror(3).  From Sebastian
 3278 			Hagedorn of Cologne University.
 3279 	CONFIG: Fix parsing for IPv6 domain literals in addresses
 3280 		(user@[IPv6:address]).  Problem noted by Liyuan Zhou.
 3282 8.11.4/8.11.4	2001/05/28
 3283 	Clean up signal handling routines to reduce the chances of heap
 3284 		corruption and other potential race conditions.
 3285 		Terminating and restarting the daemon may not be
 3286 		instantaneous due to this change.  Also, non-root users can
 3287 		no longer send out-of-band signals.  Problem reported by
 3288 		Michal Zalewski of BindView.
 3289 	If LogLevel is greater than 9 and SASL fails to negotiate an
 3290 		encryption layer, avoid core dump logging the encryption
 3291 		strength.  Problem noted by Miroslav Zubcic of Crol.
 3292 	If a server offers "AUTH=" and "AUTH " and the list of mechanisms is
 3293 		different in those two lines, sendmail might not have
 3294 		recognized (and used) all of the offered mechanisms.
 3295 	Fix an IP address lookup problem on Solaris 2.0 - 2.3.  Patch
 3296 		from Kenji Miyake.
 3297 	This time, really don't use the .. directory when expanding
 3298 		QueueDirectory wildcards.
 3299 	If a process is interrupted while closing a map, don't try to close
 3300 		the same map again while exiting.
 3301 	Allow local mailers (F=l) to contact remote hosts (e.g., via
 3302 		LMTP).  Problem noted by Norbert Klasen of the University
 3303 		of Tuebingen.
 3304 	If Timeout.QueueReturn was set to a value less the time it took
 3305 		to write a new queue file (e.g., 0 seconds), the bounce
 3306 		message would be lost.  Problem noted by Lorraine L Goff of
 3307 		Oklahoma State University.
 3308 	Pass map argument vector into map rewriting engine for the regex
 3309 		and prog map types.  Problem noted by Stephen Gildea of
 3310 		InTouch Systems, Inc.
 3311 	When closing an LDAP map due to a temporary error, close all of the
 3312 		other LDAP maps which share the original map's connection
 3313 		to the LDAP server.  Patch from Victor Duchovni of
 3314 		Morgan Stanley.
 3315 	To detect changes of NDBM aliases files check the timestamp of the
 3316 		.pag file instead of the .dir file.  Problem noted by Neil
 3317 		Rickert of Northern Illinois University.
 3318 	Don't treat temporary hesiod lookup failures as permanent.  Patch
 3319 		from Werner Wiethege.
 3320 	If ClientPortOptions is set, make sure to create the outgoing socket
 3321 		with the family set in that option.  Patch from Sean Farley.
 3322 	Avoid a segmentation fault trying to dereference a NULL pointer
 3323 		when logging a MaxHopCount exceeded error with an empty
 3324 		recipient list.  Problem noted by Chris Adams of HiWAAY
 3325 		Internet Services.
 3326 	Fix DSN for "Too many hops" bounces.  Problem noticed by Ulrich
 3327 		Windl of the Universitaet Regensburg.
 3328 	Fix DSN for "mail loops back to me" bounces.  Problem noticed by
 3329 		Kari Hurtta of the Finnish Meteorological Institute.
 3330 	Portability:
 3331 		OpenBSD has a broken setreuid() implementation.
 3332 	CONFIG: Undo change from 8.11.1: change 501 SMTP reply code back
 3333 		to 553 since it is allowed by DRUMS.
 3334 	CONFIG: Add OSTYPE(freebsd4) for FreeBSD 4.X.
 3335 	DEVTOOLS: install.sh did not properly handle paths in the source
 3336 		file name argument.  Noted by Kari Hurtta of the Finnish
 3337 		Meteorological Institute.
 3338 	DEVTOOLS: Add FAST_PID_RECYCLE to compile time options for OpenBSD
 3339 		since it generates random process ids.
 3340 	PRALIASES: Add back adaptive algorithm to deal with different endings
 3341 		of entries in the database (with/without trailing '\0').
 3342 		Patch from John Beck of Sun Microsystems.
 3343 	New Files:
 3344 		cf/ostype/freebsd4.m4
 3346 8.11.3/8.11.3	2001/02/27
 3347 	Prevent a segmentation fault when a bogus value was used in the
 3348 		LDAPDefaultSpec option's -r, -s, or -M flags and if a bogus
 3349 		option was used.  Problem noted by Allan E Johannesen of
 3350 		Worcester Polytechnic Institute.
 3351 	Prevent "token too long" message by shortening {currHeader} which
 3352 		could be too long if the last copied character was a quote.
 3353 		Problem detected by Jan Krueger of digitalanswers
 3354 		communications consulting gmbh.
 3355 	Additional IPv6 check for unspecified addresses.  Patch from
 3356 		Jun-ichiro itojun Hagino of the KAME Project.
 3357 	Do not ignore the ClientPortOptions setting if DaemonPortOptions
 3358 		Modifier=b (bind to same interface) is set and the
 3359 		connection came in from the command line.
 3360 	Do not bind to the loopback address if DaemonPortOptions
 3361 		Modifier=b (bind to same interface) is set.  Patch from
 3362 		John Beck of Sun Microsystems.
 3363 	Properly deal with open failures on non-optional maps used in
 3364 		check_* rulesets by returning a temporary failure.
 3365 	Buffered file I/O files were not being properly fsync'ed to disk
 3366 		when they were committed.
 3367 	Properly encode '=' for the AUTH= parameter of the MAIL command.
 3368 		Problem noted by Hadmut Danisch.
 3369 	Under certain circumstances the macro {server_name} could be set
 3370 		to the wrong hostname (of a previous connection), which may
 3371 		cause some rulesets to return wrong results.  This would
 3372 		usually cause mail to be queued up and delivered later on.
 3373 	Ignore F=z (LMTP) mailer flag if $u is given in the mailer A=
 3374 		equate.  Problem noted by Motonori Nakamura of Kyoto
 3375 		University.
 3376 	Work around broken accept() implementations which only partially
 3377 		fill in the peer address if the socket is closed before
 3378 		accept() completes.
 3379 	Return an SMTP "421" temporary failure if the data file can't be
 3380 		opened where the "354" reply would normally be given.
 3381 	Prevent a CPU loop in trying to expand a macro which doesn't exist
 3382 		in a queue run.  Problem noted by Gordon Lack of Glaxo
 3383 		Wellcome.
 3384 	If delivering via a program and that program exits with EX_TEMPFAIL,
 3385 		note that fact for the mailq display instead of just showing
 3386 		"Deferred".  Problem noted by Motonori Nakamura of Kyoto
 3387 		University.
 3388 	If doing canonification via /etc/hosts, try both the fully
 3389 		qualified hostname as well as the first portion of the
 3390 		hostname.  Problem noted by David Bremner of the
 3391 		University of New Brunswick.
 3392 	Portability:
 3393 		Fix a compilation problem for mail.local and rmail if SFIO
 3394 			is in use.  Problem noted by Auteria Wally
 3395 			Winzer Jr. of Champion Nutrition.
 3396 		IPv6 changes for platforms using KAME.  Patch from
 3397 			Jun-ichiro itojun Hagino of the KAME Project.
 3398 		OpenBSD 2.7 and higher has srandomdev(3).  OpenBSD 2.8 and
 3399 			higher has BSDI-style login classes.  Patch from
 3400 			Todd C.  Miller of Courtesan Consulting.
 3401 		Unixware 7.1.1 doesn't allow h_errno to be set directly if
 3402 			sendmail is being compiled with -kthread.  Problem
 3403 			noted by Orion Poplawski of CQG, Inc.
 3404 	CONTRIB: buildvirtuser: Substitute current domain for $DOMAIN and
 3405 		current left hand side for $LHS in virtuser files.
 3406 	DEVTOOLS: Do not pass make targets to recursive Build invocations.
 3407 		Problem noted by Jeff Bronson of J.D. Bronson, Inc.
 3408 	MAIL.LOCAL: In LMTP mode, do not return errors regarding problems
 3409 		storing the temporary message file until after the remote
 3410 		side has sent the final DATA termination dot.  Problem
 3411 		noted by Allan E Johannesen of Worcester Polytechnic
 3412 		Institute.
 3413 	MAIL.LOCAL: If LMTP mode is set, give a temporary error if users
 3414 		are also specified on the command line.  Patch from
 3415 		Motonori Nakamura of Kyoto University.
 3416 	PRALIASES: Skip over AliasFile specifications which aren't based on
 3417 		database files (i.e., only show dbm, hash, and btree).
 3418 	Renamed Files:
 3419 		devtools/OS/OSF1.V5.0 => devtools/OS/OSF1.V5.x
 3421 8.11.2/8.11.2	2000/12/29
 3422 	Prevent a segmentation fault when trying to set a class in
 3423 		address test mode due to a negative array index.  Audit
 3424 		other array indexing.  This bug is not believed to be
 3425 		exploitable.  Noted by Michal Zalewski of the "Internet for
 3426 		Schools" project (IdS).
 3427 	Add an FFR (for future release) to drop privileges when using
 3428 		address test mode.  This will be turned on in 8.12. It can
 3429 		be enabled by compiling with:
 3431 		in your devtools/Site/site.config.m4 file.  Suggested by
 3432 		Michal Zalewski of the "Internet for Schools" project (IdS).
 3433 	Fix potential problem with Cyrus-SASL security layer which may have
 3434 		caused I/O errors, especially for mechanism DIGEST-MD5.
 3435 	When QueueSortOrder was set to host, sendmail might not read
 3436 		enough of the queue file to determine the host, making the
 3437 		sort sub-optimal.  Problem noted by Jeff Earickson of
 3438 		Colby College.
 3439 	Don't issue DSNs for addresses which use the NOTIFY parameter (per
 3440 		RFC 1891) but don't have FAILURE as value.
 3441 	Initialize Cyrus-SASL library before the SMTP daemon is started.
 3442 		This implies that every change to SASL related files requires
 3443 		a restart of the daemon, e.g., Sendmail.conf, new SASL
 3444 		mechanisms (in form of shared libraries).
 3445 	Properly set the STARTTLS related macros during a queue run for
 3446 		a cached connection.  Bug reported by Michael Kellen of
 3447 		NxNetworks, Inc.
 3448 	Log the server name in relay= for ruleset tls_server instead of the
 3449 		client name.
 3450 	Include original length of bad field/header when reporting
 3451 		MaxMimeHeaderLength problems.  Requested by Ulrich Windl of
 3452 		the Universitat Regensburg.
 3453 	Fix delivery to set-user-ID files that are expanded from aliases in
 3454 		DeliveryMode queue.  Problem noted by Ric Anderson of the
 3455 		University of Arizona.
 3456 	Fix LDAP map -m (match only) flag.  Problem noted by Jeff Giuliano
 3457 		of Collective Technologies.
 3458 	Avoid using a negative argument for sleep() calls when delaying answers
 3459 		to EXPN/VRFY commands on systems which respond very slowly.
 3460 		Problem noted by Mikolaj J. Habryn of Optus Internet
 3461 		Engineering.
 3462 	Make sure the F=u flag is set in the default prog mailer
 3463 		definition.  Problem noted by Kari Hurtta of the Finnish
 3464 		Meteorological Institute.
 3465 	Fix IPv6 check for unspecified addresses.  Patch from
 3466 		Jun-ichiro itojun Hagino of the KAME Project.
 3467 	Fix return values for IRIX nsd map.  From Kari Hurtta of the Finnish
 3468 		Meteorological Institute.
 3469 	Fix parsing of DaemonPortOptions and ClientPortOptions.  Read all
 3470 		of the parameters to find Family= setting before trying to
 3471 		interpret Addr= and Port=.  Problem noted by Valdis
 3472 		Kletnieks of Virginia Tech.
 3473 	When delivering to a file directly from an alias, do not call
 3474 		initgroups(); instead use the DefaultUser group information.
 3475 		Problem noted by Marc Schaefer of ALPHANET NF.
 3476 	RunAsUser now overrides the ownership of the control socket, if
 3477 		created.  Otherwise, sendmail can not remove it upon
 3478 		close.  Problem noted by Werner Wiethege.
 3479 	Fix ConnectionRateThrottle counting as the option is the number of
 3480 		overall connections, not the number of connections per
 3481 		socket.  A future version may change this to per socket
 3482 		counting.
 3483 	Portability:
 3484 		Clean up libsmdb so it functions properly on platforms
 3485 			where sizeof(u_int32_t) != sizeof(size_t).  Problem
 3486 			noted by Rein Tollevik of Basefarm AS.
 3487 		Fix man page formatting for compatibility with Solaris'
 3488 			whatis.  From Stephen Gildea of InTouch Systems, Inc.
 3489 		UnixWare 7 includes snprintf() support.  From Larry
 3490 			Rosenman.
 3491 		IPv6 changes for platforms using KAME.  Patch from
 3492 			Jun-ichiro itojun Hagino of the KAME Project.
 3493 		Avoid a typedef compile conflict with Berkeley DB 3.X and
 3494 			Solaris 2.5 or earlier.  Problem noted by Bob Hughes
 3495 			of Pacific Access.
 3496 		Add preliminary support for AIX 5.  Contributed by
 3497 			Valdis Kletnieks of Virginia Tech.
 3498 		Solaris 9 load average support from Andrew Tucker of Sun
 3499 			Microsystems.
 3500 	CONFIG: Reject addresses of the form a!b if FEATURE(`nouucp', `r')
 3501 		is used.  Problem noted by Phil Homewood of Asia Online,
 3502 		patch from Neil Rickert of Northern Illinois University.
 3503 	CONFIG: Change the default DNS based blacklist server for
 3504 		FEATURE(`dnsbl') to blackholes.mail-abuse.org.
 3505 	CONFIG: Deal correctly with the 'C' flag in {daemon_flags}, i.e.,
 3506 		implicitly assume canonical host names.
 3507 	CONFIG: Deal with "::" in IPv6 addresses for access_db.  Based on
 3508 		patch by Motonori Nakamura of Kyoto University.
 3509 	CONFIG: New OSTYPE(`aix5') contributed by Valdis Kletnieks of
 3510 		Virginia Tech.
 3511 	CONFIG: Pass the illegal header form <list:;> through untouched
 3512 		instead of making it worse.  Problem noted by Motonori
 3513 		Nakamura of Kyoto University.
 3514 	CONTRIB: Added buildvirtuser (see `perldoc contrib/buildvirtuser`).
 3515 	CONTRIB: qtool.pl: An empty queue is not an error.  Problem noted
 3516 		by Jan Krueger of digitalanswers communications consulting
 3517 		gmbh.
 3518 	CONTRIB: domainmap.m4: Handle domains with '-' in them.  From Mark
 3519 		Roth of the University of Illinois at Urbana-Champaign.
 3520 	DEVTOOLS: Change the internal devtools OS, REL, and ARCH m4
 3521 		variables into bldOS, bldREL, and bldARCH to prevent
 3522 		namespace collisions.  Problem noted by Motonori Nakamura
 3523 		of Kyoto University.
 3524 	RMAIL: Undo the 8.11.1 change to use -G when calling sendmail.  It
 3525 		causes some changes in behavior and may break rmail for
 3526 		installations where sendmail is actually a wrapper to
 3527 		another MTA.  The change will re-appear in a future
 3528 		version.
 3529 	SMRSH: Use the vendor supplied directory on HPUX 10.X, HPUX 11.X,
 3530 		and SunOS 5.8.  Requested by Jeff A. Earickson of Colby
 3531 		College and John Beck of Sun Microsystems.
 3532 	VACATION: Fix pattern matching for addresses to ignore.
 3533 	VACATION: Don't reply to addresses of the form owner-*
 3534 		or *-owner.
 3535 	New Files:
 3536 		cf/ostype/aix5.m4
 3537 		contrib/buildvirtuser
 3538 		devtools/OS/AIX.5.0
 3540 8.11.1/8.11.1	2000/09/27
 3541 	Fix SMTP EXPN command output if the address expands to a single
 3542 		name.  Fix from John Beck of Sun Microsystems.
 3543 	Don't try STARTTLS in the client if the PRNG has not been properly
 3544 		seeded.  This problem only occurs on systems without
 3545 		/dev/urandom.  Problem detected by Jan Krueger of
 3546 		digitalanswers communications consulting gmbh and
 3547 		Neil Rickert of Northern Illinois University.
 3548 	Don't use the . and .. directories when expanding QueueDirectory
 3549 		wildcards.
 3550 	Do not try to cache LDAP connections across processes as a parent
 3551 		process may close the connection before the child process
 3552 		has completed.  Problem noted by Lai Yiu Fai of the Hong
 3553 		Kong University of Science and Technology and Wolfgang
 3554 		Hottgenroth of UUNET.
 3555 	Use Timeout.fileopen to limit the amount of time spent trying to
 3556 		read the LDAP secret from a file.
 3557 	Prevent SIGTERM from removing a command line submitted item after
 3558 		the user submits the message and before the first delivery
 3559 		attempt completes.  Problem noted by Max France of AlphaNet.
 3560 		Fix from Neil Rickert of Northern Illinois University.
 3561 	Deal correctly with MaxMessageSize restriction if message size is
 3562 		greater than 2^31.  Problem noted by Tim "Darth Dice" Bosserman
 3563 		of EarthLink.
 3564 	Turn off queue checkpointing if CheckpointInterval is set to zero.
 3565 	Treat an empty home directory (from getpw*() or $HOME) as
 3566 		non-existent instead of treating it as /.  Problem noted by
 3567 		Todd C. Miller of Courtesan Consulting.
 3568 	Don't drop duplicate headers when reading a queued item.  Problem
 3569 		noted by Motonori Nakamura of Kyoto University.
 3570 	Avoid bogus error text when logging the savemail panic "cannot
 3571 		save rejected email anywhere".  Problem noted by Marc G.
 3572 		Fournier of Acadia University.
 3573 	If an LDAP search fails because the LDAP server went down, close
 3574 		the map so subsequent searches reopen the map.  If there are
 3575 		multiple LDAP servers, the down server will be skipped and
 3576 		one of the others may be able to take over.
 3577 	Set the ${load_avg} macro to the current load average, not the
 3578 		previous load average query result.
 3579 	If a non-optional map used in a check_* ruleset can't be opened,
 3580 		return a temporary failure to the remote SMTP client
 3581 		instead of ignoring the map.  Problem noted by Allan E
 3582 		Johannesen of Worcester Polytechnic Institute.
 3583 	Avoid a race condition when queuing up split envelopes by saving
 3584 		the split envelopes before the original envelope.
 3585 	Fix a bug in the PH_MAP code which caused mail to bounce instead of
 3586 		defer if the PH server could not be contacted.  From Mark
 3587 		Roth of the University of Illinois at Urbana-Champaign.
 3588 	Prevent QueueSortOrder=Filename from interfering with -qR, -qS, and
 3589 		ETRN.  Problem noted by Erik R. Leo of SoVerNet.
 3590 	Change error code for unrecognized parameters to the SMTP MAIL and
 3591 		RCPT commands from 501 to 555 per RFC 1869.  Problem
 3592 		reported to Postfix by Robert Norris of Monash University.
 3593 	Prevent overwriting the argument of -B on certain OS.  Problem
 3594 		noted by Matteo Gelosa of I.NET S.p.A.
 3595 	Use the proper routine for freeing memory with Netscape's LDAP
 3596 		client libraries.  Patch from Paul Hilchey of the
 3597 		University of British Columbia.
 3598 	Portability:
 3599 		Move the NETINET6 define to devtools/OS/SunOS.5.{8,9}
 3600 			instead of defining it in conf.h so users can
 3601 			override the setting.  Suggested by
 3602 			Henrik Nordstrom of Ericsson.
 3603 		On HP-UX 10.X and 11.X, use /usr/sbin/sendmail instead of
 3604 			/usr/lib/sendmail for rmail and vacation.  From
 3605 			Jeff A. Earickson of Colby College.
 3606 		On HP-UX 11.X, use /usr/sbin instead of /usr/libexec (which
 3607 			does not exist).  From Jeff A. Earickson of Colby
 3608 			College.
 3609 		Avoid using the UCB subsystem on NCR MP-RAS 3.x.  From
 3610 			Tom Moore of NCR.
 3611 		NeXT 3.X and 4.X installs man pages in /usr/man.  From
 3612 			Hisanori Gogota of NTT/InterCommunicationCenter.
 3613 		Solaris 8 and later include /var/run.  The default PID file
 3614 			location is now /var/run/sendmail.pid.  From John
 3615 			Beck of Sun Microsystems.
 3616 		SFIO includes snprintf() for those operating systems
 3617 			which do not.  From Todd C. Miller of Courtesan
 3618 			Consulting.
 3619 	CONFIG: Use the result of _CERT_REGEX_SUBJECT_ not {cert_subject}.
 3620 		Problem noted by Kaspar Brand of futureLab AG.
 3621 	CONFIG: Change 553 SMTP reply code to 501 to avoid problems with
 3622 		errors in the MAIL address.
 3623 	CONFIG: Fix FEATURE(nouucp) usage in example .mc files.  Problem
 3624 		noted by Ron Jarrell of Virginia Tech.
 3625 	CONFIG: Add support for Solaris 8 (and later) as OSTYPE(solaris8).
 3626 		Contributed by John Beck of Sun Microsystems.
 3627 	CONFIG: Set confFROM_HEADER such that the mail hub can possibly add
 3628 		GECOS information for an address.  This more closely
 3629 		matches pre-8.10 nullclient behavior.  From Per Hedeland of
 3630 		Ericsson.
 3631 	CONFIG: Fix MODIFY_MAILER_FLAGS(): apply the flag modifications for
 3632 		SMTP to all *smtp* mailers and those for RELAY to the relay
 3633 		mailer as described in cf/README.
 3634 	MAIL.LOCAL: Open the mailbox as the recipient not root so quotas
 3635 		are obeyed.  Problem noted by Damian Kuczynski of NIK.
 3636 	MAKEMAP: Do not change a map's owner to the TrustedUser if using
 3637 		makemap to 'unmake' the map.
 3638 	RMAIL: Avoid overflowing the list of recipients being passed to
 3639 		sendmail.
 3640 	RMAIL: Invoke sendmail with '-G' to indicate this is a gateway
 3641 		submission.  Problem noted by Kari Hurtta of the Finnish
 3642 		Meteorological Institute.
 3643 	VACATION: Read the complete message to avoid "broken pipe" signals.
 3644 	VACATION: Do not cut off vacation.msg files which have a single
 3645 		dot as the only character on the line.
 3646 	New Files:
 3647 		cf/ostype/solaris8.m4
 3649 8.11.0/8.11.0	2000/07/19
 3650 	SECURITY: If sendmail is installed as a non-root set-user-ID binary
 3651 		(not the normal case), some operating systems will still
 3652 		keep a saved-uid of the effective-uid when sendmail tries
 3653 		to drop all of its privileges.  If sendmail needs to drop
 3654 		these privileges and the operating system doesn't set the
 3655 		saved-uid as well, exit with an error.  Problem noted by
 3656 		Kari Hurtta of the Finnish Meteorological Institute.
 3657 	SECURITY: sendmail depends on snprintf() NUL terminating the string
 3658 		it populates.  It is possible that some broken
 3659 		implementations of snprintf() exist that do not do this.
 3660 		Systems in this category should compile with
 3661 		-DSNPRINTF_IS_BROKEN=1.  Use test/t_snprintf.c to test your
 3662 		system and report broken implementations to
 3663 		sendmail-bugs@sendmail.org and your OS vendor.  Problem
 3664 		noted by Slawomir Piotrowski of TELSAT GP.
 3665 	Support SMTP Service Extension for Secure SMTP (RFC 2487) (STARTTLS).
 3666 		Implementation influenced by the example programs of
 3667 		OpenSSL and the work of Lutz Jaenicke of TU Cottbus.
 3668 	Add new STARTTLS related options CACERTPath, CACERTFile,
 3669 		ClientCertFile, ClientKeyFile, DHParameters, RandFile,
 3670 		ServerCertFile, and ServerKeyFile.  These are documented in
 3671 		cf/README and doc/op/op.me.
 3672 	New STARTTLS related macros: ${cert_issuer}, ${cert_subject},
 3673 		${tls_version}, ${cipher}, ${cipher_bits}, ${verify},
 3674 		${server_name}, and ${server_addr}.  These are documented
 3675 		in cf/README and doc/op/op.me.
 3676 	Add support for the Entropy Gathering Daemon (EGD) for better
 3677 		random data.
 3678 	New DontBlameSendmail option InsufficientEntropy for systems which
 3679 		don't properly seed the PRNG for OpenSSL but want to
 3680 		try to use STARTTLS despite the security problems.
 3681 	Support the security layer in SMTP AUTH for mechanisms which
 3682 		support encryption.  Based on code contributed by Tim
 3683 		Martin of CMU.
 3684 	Add new macro ${auth_ssf} to reflect the SMTP AUTH security
 3685 		strength factor.
 3686 	LDAP's -1 (single match only) flag was not honored if the -z
 3687 		(delimiter) flag was not given.  Problem noted by ST Wong of
 3688 		the Chinese University of Hong Kong.  Fix from Mark Adamson
 3689 		of CMU.
 3690 	Add more protection from accidentally tripping OpenLDAP 1.X's
 3691 		ld_errno == LDAP_DECODING_ERROR hack on ldap_next_attribute().
 3692 		Suggested by Kurt Zeilenga of OpenLDAP.
 3693 	Fix the default family selection for DaemonPortOptions.  As
 3694 		documented, unless a family is specified in a
 3695 		DaemonPortOptions option, "inet" is the default.  It is
 3696 		also the default if no DaemonPortOptions value is set.
 3697 		Therefore, IPv6 users should configure additional sockets
 3698 		by adding DaemonPortOptions settings with Family=inet6 if
 3699 		they wish to also listen on IPv6 interfaces.  Problem noted
 3700 		by Jun-ichiro itojun Hagino of the KAME Project.
 3701 	Set ${if_family} when setting ${if_addr} and ${if_name} to reflect
 3702 		the interface information for an outgoing connection.
 3703 		Not doing so was creating a mismatch between the socket
 3704 		family and address used in subsequent connections if the
 3705 		M=b modifier was set in DaemonPortOptions.  Problem noted
 3706 		by John Beck of Sun Microsystems.
 3707 	If DaemonPortOptions modifier M=b is used, determine the socket
 3708 		family based on the IP address.  ${if_family} is no longer
 3709 		persistent (i.e., saved in qf files).  Patch from John Beck
 3710 		of Sun Microsystems.
 3711 	sendmail 8.10 and 8.11 reused the ${if_addr} and ${if_family}
 3712 		macros for both the incoming interface address/family and
 3713 		the outgoing interface address/family.  In order for M=b
 3714 		modifier in DaemonPortOptions to work properly, preserve
 3715 		the incoming information in the queue file for later
 3716 		delivery attempts.
 3717 	Use SMTP error code and enhanced status code from check_relay in
 3718 		responses to commands.  Problem noted by Jeff Wasilko of
 3719 		smoe.org.
 3720 	Add more vigilance in checking for putc() errors on output streams
 3721 		to protect from a bug in Solaris 2.6's putc().  Problem
 3722 		noted by Graeme Hewson of Oracle.
 3723 	The LDAP map -n option (return attribute names only) wasn't working.
 3724 		Problem noted by Ajay Matia.
 3725 	Under certain circumstances, an address could be listed as deferred
 3726 		but would be bounced back to the sender as failed to be
 3727 		delivered when it really should have been queued.  Problem
 3728 		noted by Allan E Johannesen of Worcester Polytechnic Institute.
 3729 	Prevent a segmentation fault in a child SMTP process from getting
 3730 		the SMTP transaction out of sync.  Problem noted by Per
 3731 		Hedeland of Ericsson.
 3732 	Turn off RES_DEBUG if SFIO is defined unless SFIO_STDIO_COMPAT
 3733 		is defined to avoid a core dump due to incompatibilities
 3734 		between sfio and stdio.  Problem noted by Neil Rickert
 3735 		of Northern Illinois University.
 3736 	Don't log useless envelope ID on initial connection log.  Problem
 3737 		noted by Kari Hurtta of the Finnish Meteorological Institute.
 3738 	Convert the free disk space shown in a control socket status query
 3739 		to kilobyte units.
 3740 	If TryNullMXList is True and there is a temporary DNS failure
 3741 		looking up the hostname, requeue the message for a later
 3742 		attempt.  Problem noted by Ari Heikkinen of Pohjois-Savo
 3743 		Polytechnic.
 3744 	Under the proper circumstances, failed connections would be recorded
 3745 		as "Bad file number" instead of "Connection failed" in the
 3746 		queue file and persistent host status.  Problem noted by
 3747 		Graeme Hewson of Oracle.
 3748 	Avoid getting into an endless loop if a non-hoststat directory exists
 3749 		within the hoststatus directory (e.g., lost+found).
 3750 		Patch from Valdis Kletnieks of Virginia Tech.
 3751 	Make sure Timeout.queuereturn=now returns a bounce message to the
 3752 		sender.  Problem noted by Per Hedeland of Ericsson.
 3753 	If a message data file can't be opened at delivery time, panic and
 3754 		abort the attempt instead of delivering a message that
 3755 		states "<<< No Message Collected >>>".
 3756 	Fixup the GID checking code from 8.10.2 as it was overly
 3757 		restrictive.  Problem noted by Mark G. Thomas of Mark
 3758 		G. Thomas Consulting.
 3759 	Preserve source port number instead of replacing it with the ident
 3760 		port number (113).
 3761 	Document the queue status characters in the mailq man page.
 3762 		Suggested by Ulrich Windl of the Universitat Regensburg.
 3763 	Process queued items in which none of the recipient addresses have
 3764 		host portions (or there are no recipients).  Problem noted
 3765 		by Valdis Kletnieks of Virginia Tech.
 3766 	If a cached LDAP connection is used for multiple maps, make sure
 3767 		only the first to open the connection is allowed to close
 3768 		it so a later map close doesn't break the connection for
 3769 		other maps.  Problem noted by Wolfgang Hottgenroth of UUNET.
 3770 	Netscape's LDAP libraries do not support Kerberos V4
 3771 		authentication.  Patch from Rainer Schoepf of the
 3772 		University of Mainz.
 3773 	Provide workaround for inconsistent handling of data passed
 3774 		via callbacks to Cyrus SASL prior to version 1.5.23.
 3775 	Mention ENHANCEDSTATUSCODES in the SMTP HELP helpfile.  Omission
 3776 		noted by Ulrich Windl of the Universitat Regensburg.
 3777 	Portability:
 3778 		Add the ability to read IPv6 interface addresses into class
 3779 			'w' under FreeBSD (and possibly others).  From Jun
 3780 			Kuriyama of IMG SRC, Inc. and the FreeBSD Project.
 3781 		Replace code for finding the number of CPUs on HPUX.
 3782 		NCRUNIX MP-RAS 3.02 SO_REUSEADDR socket option does not
 3783 			work properly causing problems if the accept()
 3784 			fails and the socket needs to be reopened.  Patch
 3785 			from Tom Moore of NCR.
 3786 		NetBSD uses a .0 extension of formatted man pages.  From
 3787 			Andrew Brown of Crossbar Security.
 3788 		Return to using the IPv6 AI_DEFAULT flag instead of AI_V4MAPPED
 3789 			for calls to getipnodebyname().  The Linux
 3790 			implementation is broken so AI_ADDRCONFIG is stripped
 3791 			under Linux.  From John Beck of Sun Microsystems and
 3792 			John Kennedy of Cal State University, Chico.
 3793 	CONFIG: Catch invalid addresses containing a ',' at the wrong place.
 3794 		Patch from Neil Rickert of Northern Illinois University.
 3795 	CONFIG: New variables for the new sendmail options:
 3796 		confCACERT_PATH			CACERTPath
 3797 		confCACERT			CACERTFile
 3798 		confCLIENT_CERT			ClientCertFile
 3799 		confCLIENT_KEY			ClientKeyFile
 3800 		confDH_PARAMETERS		DHParameters
 3801 		confRAND_FILE			RandFile
 3802 		confSERVER_CERT			ServerCertFile
 3803 		confSERVER_KEY			ServerKeyFile
 3804 	CONFIG: Provide basic rulesets for TLS policy control and add new
 3805 		tags to the access database to support these policies.  See
 3806 		cf/README for more information.
 3807 	CONFIG: Add TLS information to the Received: header.
 3808 	CONFIG: Call tls_client ruleset from check_mail in case it wasn't
 3809 		called due to a STARTTLS command.
 3810 	CONFIG: If TLS_PERM_ERR is defined, TLS related errors are permanent
 3811 		instead of temporary.
 3812 	CONFIG: FEATURE(`relay_hosts_only') didn't work in combination with
 3813 		the access map and relaying to a domain without using a To:
 3814 		tag.  Problem noted by Mark G. Thomas of Mark G. Thomas
 3815 		Consulting.
 3816 	CONFIG: Set confEBINDIR to /usr/sbin to match the devtools entry in
 3817 		OSTYPE(`linux') and OSTYPE(`mklinux').  From Tim Pierce of
 3818 		RootsWeb.com.
 3819 	CONFIG: Make sure FEATURE(`nullclient') doesn't use aliasing and
 3820 		forwarding to make it as close to the old behavior as
 3821 		possible.  Problem noted by George W. Baltz of the
 3822 		University of Maryland.
 3823 	CONFIG: Added OSTYPE(`darwin') for Mac OS X and Darwin users.  From
 3824 		Wilfredo Sanchez of Apple Computer, Inc.
 3825 	CONFIG: Changed the map names used by FEATURE(`ldap_routing') from
 3826 		ldap_mailhost and ldap_mailroutingaddress to ldapmh and
 3827 		ldapmra as underscores in map names cause problems if
 3828 		underscore is in OperatorChars.  Problem noted by Bob Zeitz
 3829 		of the University of Alberta.
 3830 	CONFIG: Apply blacklist_recipients also to hosts in class {w}.
 3831 		Patch from Michael Tratz of Esosoft Corporation.
 3832 	CONFIG: Use A=TCP ... instead of A=IPC ... in SMTP mailers.
 3833 	CONTRIB: Add link_hash.sh to create symbolic links to the hash
 3834 		of X.509 certificates.
 3835 	CONTRIB: passwd-to-alias.pl:  More protection from special characters;
 3836 		treat special shells as root aliases; skip entries where the
 3837 		GECOS full name and username match.  From Ulrich Windl of the
 3838 		Universitat Regensburg.
 3839 	CONTRIB: qtool.pl: Add missing last_modified_time method and fix a
 3840 		typo.  Patch from Graeme Hewson of Oracle.
 3841 	CONTRIB: re-mqueue.pl: Improve handling of a race between re-mqueue
 3842 		and sendmail.  Patch from Graeme Hewson of Oracle.
 3843 	CONTRIB: re-mqueue.pl: Don't exit(0) at end so can be called as
 3844 		subroutine Patch from Graeme Hewson of Oracle.
 3845 	CONTRIB: Add movemail.pl (move old mail messages between queues by
 3846 		calling re-mqueue.pl) and movemail.conf (configuration
 3847 		script for movemail.pl).  From Graeme Hewson of Oracle.
 3848 	CONTRIB: Add cidrexpand (expands CIDR blocks as a preprocessor to
 3849 		makemap).  From Derek J. Balling of Yahoo,Inc.
 3850 	DEVTOOLS: INSTALL_RAWMAN installation option mistakenly applied any
 3851 		extension modifications (e.g., MAN8EXT) to the installation
 3852 		target.  Patch from James Ralston of Carnegie Mellon
 3853 		University.
 3854 	DEVTOOLS: Add support for SunOS 5.9.
 3855 	DEVTOOLS: New option confLN contains the command used to create
 3856 		links.
 3857 	LIBSMDB: Berkeley DB 2.X and 3.X errors might be lost and not
 3858 		reported.
 3859 	MAIL.LOCAL: DG/UX portability.  Problem noted by Tim Boyer of
 3860 		Denman Tire Corporation.
 3861 	MAIL.LOCAL: Prevent a possible DoS attack when compiled with
 3862 		-DCONTENTLENGTH.  Based on patch from 3APA3A@SECURITY.NNOV.RU.
 3863 	MAILSTATS: Fix usage statement (-p and -o are optional).
 3864 	MAKEMAP: Change man page layout as workaround for problem with nroff
 3865 		and -man on Solaris 7.  Patch from Larry Williamson.
 3866 	RMAIL: AIX 4.3 has snprintf().  Problem noted by David Hayes of
 3867 		Black Diamond Equipment, Limited.
 3868 	RMAIL: Prevent a segmentation fault if the incoming message does not
 3869 		have a From line.
 3870 	VACATION: Read all of the headers before deciding whether or not
 3871 		to respond instead of stopping after finding recipient.
 3872 	Added Files:
 3873 		cf/ostype/darwin.m4
 3874 		contrib/cidrexpand
 3875 		contrib/link_hash.sh
 3876 		contrib/movemail.conf
 3877 		contrib/movemail.pl
 3878 		devtools/OS/SunOS.5.9
 3879 		test/t_snprintf.c
 3881 8.10.2/8.10.2	2000/06/07
 3882 	SECURITY: Work around broken Linux setuid() implementation.
 3883 		On Linux, a normal user process has the ability to subvert
 3884 		the setuid() call such that it is impossible for a root
 3885 		process to drop its privileges.  Problem noted by Wojciech
 3886 		Purczynski of elzabsoft.pl.
 3887 	SECURITY: Add more vigilance around set*uid(), setgid(), setgroups(),
 3888 		initgroups(), and chroot() calls.
 3889 	Added Files:
 3890 		test/t_setuid.c
 3892 8.10.1/8.10.1	2000/04/06
 3893 	SECURITY: Limit the choice of outgoing (client-side) SMTP
 3894 		Authentication mechanisms to those specified in
 3895 		AuthMechanisms to prevent information leakage.  We do not
 3896 		recommend use of PLAIN for outgoing mail as it sends the
 3897 		password in clear text to possibly untrusted servers.  See
 3898 		cf/README's DefaultAuthInfo section for additional information.
 3899 	Copy the ident argument for openlog() to avoid problems on some
 3900 		OSs.  Based on patch from Rob Bajorek from Webhelp.com.
 3901 	Avoid bogus error message when reporting an alias line as too long.
 3902 	Avoid bogus socket error message if sendmail.cf version level is
 3903 		greater than sendmail binary supported version.  Patch
 3904 		from John Beck of Sun Microsystems.
 3905 	Prevent a malformed ruleset (missing right hand side) from causing
 3906 		a segmentation fault when using address test mode.  Based on
 3907 		patch from John Beck of Sun Microsystems.
 3908 	Prevent memory leak from use of NIS maps and yp_match(3).  Problem
 3909 		noted by Gil Kloepfer of the University of Texas at Austin.
 3910 	Fix queue file permission checks to allow for TrustedUser ownership.
 3911 	Change logging of errors from the trust_auth ruleset to LogLevel 10
 3912 		or higher.
 3913 	Avoid simple password cracking attacks against SMTP AUTH by using
 3914 		exponential delay after too many tries within one connection.
 3915 	Encode an initial empty AUTH challenge as '=', not as empty string.
 3916 	Avoid segmentation fault on EX_SOFTWARE internal error logs.
 3917 		Problem noted by Allan E Johannesen of Worcester
 3918 		Polytechnic Institute.
 3919 	Ensure that a header check which resolves to $#discard actually
 3920 		discards the message.
 3921 	Emit missing value warnings for aliases with no right hand side
 3922 		when newaliases is run instead of only when delivery is
 3923 		attempted to the alias.
 3924 	Remove AuthOptions missing value warning for consistency with other
 3925 		flag options.
 3926 	Portability:
 3927 		SECURITY: Specify a run-time shared library search path for
 3928 			AIX 4.X instead of using the dangerous AIX 4.X
 3929 			linker semantics.  AIX 4.X users should consult
 3930 			sendmail/README for further information.  Problem
 3931 			noted by Valdis Kletnieks of Virginia Tech.
 3932 		Avoid use of strerror(3) call.  Problem noted by Charles
 3933 			Levert of Ecole Polytechnique de Montreal.
 3934 		DGUX requires -lsocket -lnsl and has a non-standard install
 3935 			program.  From Tim Boyer of Denman Tire Corporation.
 3936 		HPUX 11.0 has a broken res_search() function.
 3937 		Updates to devtools/OS/NeXT.3.X, NeXT.4.X, and NEXTSTEP.4.X
 3938 			from J. P. McCann of E I A.
 3939 		Digital UNIX/Compaq Tru64 5.0 now includes snprintf(3).
 3940 			Problem noted by Michael Long of Info Avenue Internet
 3941 			Services, LLC.
 3942 		Modern (post-199912) OpenBSD versions include working
 3943 			strlc{at,py}(3) functions.  From Todd C. Miller of
 3944 			Courtesan Consulting.
 3945 		SINIX doesn't have random(3).  From Gerald Rinske of
 3946 			Siemens Business Services.
 3947 	CONFIG: Change error message about unresolvable sender domain to
 3948 		include the sender address.  Proposed by Wolfgang Rupprecht
 3949 		of WSRCC.
 3950 	CONFIG: Fix usenet mailer calls.
 3952 		to be backward compatible with 8.9.
 3953 	CONFIG: Change handling of default case @domain for virtusertable
 3954 		to allow for +*@domain to deal with +detail.
 3955 	CONTRIB: Remove converting.sun.configs -- it is obsolete.
 3956 	DEVTOOLS: confUBINMODE was being ignored.  Fix from KITAZIMA, Tuneki
 3957 		of NEC.
 3958 	DEVTOOLS: Add to NCR platform list and include the architecture
 3959 		(i486).  From Tom J. Moore of NCR.
 3960 	DEVTOOLS: SECURITY: Change method of linking with sendmail utility
 3961 		libraries to work around the AIX 4.X and SunOS 4.X linker's
 3962 		overloaded -L option.  Problem noted by Valdis Kletnieks of
 3963 		Virginia Tech.
 3964 	DEVTOOLS: configure.sh was overriding the user's choice for
 3965 		confNROFF.  Problem noted by Glenn A. Malling of Syracuse
 3966 		University.
 3967 	DEVTOOLS: New variables conf_prog_LIB_POST and confBLDVARIANT added
 3968 		for other internal projects but included in the open source
 3969 		release.
 3970 	LIBSMDB: Check for ".db" instead of simply "db" at the end of the
 3971 		map name to determine whether or not to add the extension.
 3972 		This fixes makemap when building the userdb file.  Problem
 3973 		noted by Andrew J Cole of the University of Leeds.
 3974 	LIBSMDB: Allow a database to be opened for updating and created if
 3975 		it doesn't already exist.  Problem noted by Rand Wacker of
 3976 		Sendmail.
 3977 	LIBSMDB: If type is SMDB_TYPE_DEFAULT and both NEWDB and NDBM are
 3978 		available, fall back to NDBM if NEWDB open fails.  This
 3979 		fixes praliases.  Patch	from John Beck of Sun Microsystems.
 3980 	LIBSMUTIL: safefile()'s SFF_NOTEXCL check was being misinterpreted
 3981 		as SFF_NOWRFILES.
 3982 	OP.ME: Clarify some issues regarding mailer flags.  Suggested by
 3983 		Martin Mokrejs of The Charles University and Neil Rickert of
 3984 		Northern Illinois University.
 3985 	PRALIASES: Restore 8.9.X functionality of being able to search for
 3986 		particular keys in a database by specifying the keys on the
 3987 		command line.  Man page updated accordingly.  Patch from
 3988 		John Beck of Sun Microsystems.
 3989 	VACATION: SunOS 4.X portability from Charles Levert of Ecole
 3990 		Polytechnique de Montreal.
 3991 	VACATION: Fix -t option which is ignored but available for
 3992 		compatibility with Sun's version, based on patch from
 3993 		Volker Dobler of Infratest Burke.
 3994 	Added Files:
 3995 		devtools/M4/UNIX/smlib.m4
 3996 		devtools/OS/OSF1.V5.0
 3997 	Deleted Files:
 3998 		contrib/converting.sun.configs
 3999 	Deleted Directories (already done in 8.10.0 but not listed):
 4000 		doc/intro
 4001 		doc/usenix
 4002 		doc/changes
 4004 8.10.0/8.10.0	2000/03/01
 4005 	    *************************************************************
 4006 	    * The engineering department at Sendmail, Inc. has suffered	*
 4007 	    * the tragic loss of a key member of our engineering team.	*
 4008 	    * Julie Van Bourg was the Vice President of Engineering	*
 4009 	    * at Sendmail, Inc. during the development and deployment	*
 4010 	    * of this release.  It was her vision, dedication, and	*
 4011 	    * support that has made this release a success.  Julie died	*
 4012 	    * on October 26, 1999 of cancer.  We have lost a leader, a	*
 4013 	    * coach, and a friend.					*
 4014 	    *								*
 4015 	    * This release is dedicated to her memory and to the joy,	*
 4016 	    * strength, ideals, and hope that she brought to all of us.	*
 4017 	    * Julie, we miss you!					*
 4018 	    *************************************************************
 4019 	SECURITY: The safe file checks now back track through symbolic
 4020 		links to make sure the files can't be compromised due
 4021 		to poor permissions on the parent directories of the
 4022 		symbolic link target.
 4023 	SECURITY: Only root, TrustedUser, and users in class t can rebuild
 4024 		the alias map.  Problem noted by Michal Zalewski of the
 4025 		"Internet for Schools" project (IdS).
 4026 	SECURITY: There is a potential for a denial of service attack if
 4027 		the AutoRebuildAliases option is set as a user can kill the
 4028 		sendmail process while it is rebuilding the aliases file
 4029 		(leaving it in an inconsistent state).  This option and
 4030 		its use is deprecated and will be removed from a future
 4031 		version of sendmail.
 4032 	SECURITY: Make sure all file descriptors (besides stdin, stdout, and
 4033 		stderr) are closed before restarting sendmail.  Problem noted
 4034 		by Michal Zalewski of the "Internet for Schools" project
 4035 		(IdS).
 4036 	Begin using /etc/mail/ for sendmail related files.  This affects
 4037 		a large number of files.  See cf/README for more details.
 4038 	The directory structure of the distribution has changed slightly
 4039 		for easier code sharing among the programs.
 4040 	Support SMTP AUTH (see RFC 2554).  New macros for this purpose
 4041 		are ${auth_authen}, ${auth_type}, and ${auth_author}
 4042 		which hold the client's authentication credentials,
 4043 		the mechanism used for authentication, and the
 4044 		authorization identity (i.e., the AUTH= parameter if
 4045 		supplied).  Based on code contributed by Tim Martin of CMU.
 4046 	On systems which use the Torek stdio library (all of the BSD
 4047 		distributions), use memory-buffered files to reduce
 4048 		file system overhead by not creating temporary files on
 4049 		disk.  Contributed by Exactis.com, Inc.
 4050 	New option DataFileBufferSize to control the maximum size of a
 4051 		memory-buffered data (df) file before a disk-based file is
 4052 		used.  Contributed by Exactis.com, Inc.
 4053 	New option XscriptFileBufferSize to control the maximum size of a
 4054 		memory-buffered transcript (xf) file before a disk-based
 4055 		file is used.  Contributed by Exactis.com, Inc.
 4056 	sendmail implements RFC 2476 (Message Submission), e.g., it can
 4057 		now listen on several different ports.  Use:
 4058 		O DaemonPortOptions=Name=MSA, Port=587, M=E
 4059 		to run a Message Submission Agent (MSA); this is turned
 4060 		on by default in m4-generated .cf files; it can be turned
 4061 		off with FEATURE(`no_default_msa').
 4062 	The 'XUSR' SMTP command is deprecated.  Mail user agents should
 4063 		begin using RFC 2476 Message Submission for initial user
 4064 		message submission.  XUSR may disappear from a future release.
 4065 	The new '-G' (relay (gateway) submission) command line option
 4066 		indicates that the message being submitted from the command
 4067 		line is for relaying, not initial submission.  This means
 4068 		the message will be rejected if the addresses are not fully
 4069 		qualified and no canonicalization will be done.  Future
 4070 		releases may even reject improperly formed messages.
 4071 	The '-U' (initial user submission) command line option is
 4072 		deprecated and may be removed from a future release.
 4073 		Mail user agents should begin using '-G' to indicate that
 4074 		this is a relay submission (the inverse of -U).
 4075 	The next release of sendmail will assume that any message submitted
 4076 		from the command line is an initial user submission and act
 4077 		accordingly.
 4078 	If sendmail doesn't have enough privileges to run a .forward
 4079 		program or deliver to file as the owner of that file, the
 4080 		address is marked as unsafe.  This means if RunAsUser is
 4081 		set, users won't be able to use programs or delivery to
 4082 		files in their .forward files.  Administrators can override
 4083 		this by setting the DontBlameSendmail option to the new
 4084 		setting NonRootSafeAddr.
 4085 	Allow group or world writable directories if the sticky bit is set
 4086 		on the directory and DontBlameSendmail is set to
 4087 		TrustStickyBit.  Based on patch from Chris Metcalf of
 4088 		InCert Software.
 4089 	Prevent logging of unsafe directory paths for non-existent forward
 4090 		files if the new DontWarnForwardFileInUnsafeDirPath bit is
 4091 		set in the DontBlameSendmail option.  Requested by many.
 4092 	New Timeout.control option to limit the total time spent satisfying
 4093 		a control socket request.
 4094 	New Timeout.resolver options for controlling BIND resolver
 4095 		settings:
 4096 		Timeout.resolver.retrans
 4097 			Sets the resolver's retransmission time interval (in
 4098 			seconds).  Sets both Timeout.resolver.retrans.first
 4099 			and Timeout.resolver.retrans.normal.
 4100 		Timeout.resolver.retrans.first
 4101 			Sets the resolver's retransmission time interval (in
 4102 			seconds) for the first attempt to deliver a message.
 4103 		Timeout.resolver.retrans.normal
 4104 			Sets the resolver's retransmission time interval (in
 4105 			seconds) for all resolver lookups except the first
 4106 			delivery attempt.
 4107 		Timeout.resolver.retry
 4108 			Sets the number of times to retransmit a resolver
 4109 			query.  Sets both Timeout.resolver.retry.first
 4110 			and Timeout.resolver.retry.normal.
 4111 		Timeout.resolver.retry.first
 4112 			Sets the number of times to retransmit a resolver
 4113 			query for the first attempt to deliver a message.
 4114 		Timeout.resolver.retry.normal
 4115 			Sets the number of times to retransmit a resolver
 4116 			query for all resolver lookups except the first
 4117 			delivery attempt.
 4118 		Contributed by Exactis.com, Inc.
 4119 	Support multiple queue directories.  To use multiple queues, supply
 4120 		a QueueDirectory option value ending with an asterisk.  For
 4121 		example, /var/spool/mqueue/q* will use all of the
 4122 		directories or symbolic links to directories beginning with
 4123 		'q' in /var/spool/mqueue as queue directories.  Keep in
 4124 		mind, the queue directory structure should not be changed
 4125 		while sendmail is running.  Queue runs create a separate
 4126 		process for running each queue unless the verbose flag is
 4127 		given on a non-daemon queue run.  New items are randomly
 4128 		assigned to a queue.  Contributed by Exactis.com, Inc.
 4129 	Support different directories for qf, df, and xf queue files; if
 4130 		subdirectories or symbolic links to directories of those names
 4131 		exist in the queue directories, they are used for the
 4132 		corresponding queue files.  Keep in mind, the queue
 4133 		directory structure should not be changed while sendmail is
 4134 		running.  Proposed by Mathias Koerber of Singapore
 4135 		Telecommunications Ltd.
 4136 	New queue file naming system which uses a filename guaranteed to be
 4137 		unique for 60 years.  This allows queue IDs to be assigned
 4138 		without fancy file system locking.  Queued items can be
 4139 		moved between queues easily.  Contributed by Exactis.com,
 4140 		Inc.
 4141 	Messages which are undeliverable due to temporary address failures
 4142 		(e.g., DNS failure) will now go to the FallBackMX host, if
 4143 		set.  Contributed by Exactis.com, Inc.
 4144 	New command line option '-L tag' which sets the identifier used for
 4145 		syslog.  Contributed by Exactis.com, Inc.
 4146 	QueueSortOrder=Filename will sort the queue by filename.  This
 4147 		avoids opening and reading each queue file when preparing
 4148 		to run the queue.  Contributed by Exactis.com, Inc.
 4149 	Shared memory counters and microtimers functionality has been
 4150 		donated by Exactis.com, Inc.
 4151 	The SCCS ID tags have been replaced with RCS ID tags.
 4152 	Allow trusted users (those on a T line or in $=t) to set the
 4153 		QueueDirectory (Q) option without an X-Authentication-Warning:
 4154 		being added.  Suggested by Michael K. Sanders.
 4155 	IPv6 support based on patches from John Kennedy of Cal State
 4156 		University, Chico, Motonori Nakamura of Kyoto University,
 4157 		and John Beck of Sun Microsystems.
 4158 	In low-disk space situations, where sendmail would previously refuse
 4159 		connections, still accept them, but only allow ETRN commands.
 4160 		Suggested by Mathias Koerber of Singapore Telecommunications
 4161 		Ltd.
 4162 	The [IPC] builtin mailer now allows delivery to a UNIX domain socket
 4163 		on systems which support them.  This can be used with LMTP
 4164 		local delivery agents which listen on a named socket.  An
 4165 		example mailer might be:
 4166 			Mexecmail, P=[IPC], F=lsDFMmnqSXzA5@/:|, E=\r\n,
 4167 				S=10, R=20/40, T=DNS/RFC822/X-Unix,
 4168 				A=FILE /var/run/lmtpd
 4169 		Code contributed by Lyndon Nerenberg of Messaging Direct.
 4170 	The [TCP] builtin mailer name is now deprecated.  Use [IPC]
 4171 		instead.
 4172 	The first mailer argument in the [IPC] mailer is now checked for a
 4173 		legitimate value.  Possible values are TCP (for TCP/IP
 4174 		connections), IPC (which will be deprecated in a future
 4175 		version), and FILE (for UNIX domain socket delivery).
 4176 	PrivacyOptions=goaway no longer includes the noetrn and the noreceipts
 4177 		flags.
 4178 	PrivacyOptions=nobodyreturn instructs sendmail not to include the
 4179 		body of the original message on delivery status
 4180 		notifications.
 4181 	Don't announce DSN if PrivacyOptions=noreceipts is set.  Problem noted
 4182 		by Dan Bernstein, fix from Robert Harker of Harker Systems.
 4183 	Accept the SMTP RSET command even when rejecting commands due to TCP
 4184 		Wrappers or the check_relay ruleset.  Problem noted by
 4185 		Steve Schweinhart of America Online.
 4186 	Warn if OperatorChars is set multiple times.  OperatorChars should
 4187 		not be set after rulesets are defined.  Suggested by
 4188 		Mitchell Blank Jr of Exec-PC.
 4189 	Do not report temporary failure on delivery to files.  In
 4190 		interactive delivery mode, this would result in two SMTP
 4191 		responses after the DATA command.  Problem noted by
 4192 		Nik Conwell of Boston University.
 4193 	Check file close when mailing to files.  Problem noted by Nik
 4194 		Conwell of Boston University.
 4195 	Avoid a segmentation fault when using the LDAP map.  Patch from
 4196 		Curtis W. Hillegas of Princeton University.
 4197 	Always bind to the LDAP server regardless of whether you are using
 4198 		ldap_open() or ldap_init().  Fix from Raj Kunjithapadam of
 4199 		@Home Network.
 4200 	New ruleset trust_auth to determine whether a given AUTH=
 4201 		parameter of the MAIL command should be trusted.  See SMTP
 4202 		AUTH, cf/README, and doc/op/op.ps.
 4203 	Allow new named config file rules check_vrfy, check_expn, and
 4204 		check_etrn for VRFY, EXPN, and ETRN commands, respectively,
 4205 		similar to check_rcpt etc.
 4206 	Introduce new macros ${rcpt_mailer}, ${rcpt_host}, ${rcpt_addr},
 4207 		${mail_mailer}, ${mail_host}, ${mail_addr} that hold
 4208 		the results of parsing the RCPT and MAIL arguments, i.e.
 4209 		the resolved triplet from $#mailer $@host $:addr.
 4210 		From Kari Hurtta of the Finnish Meteorological Institute.
 4211 	New macro ${client_resolve} which holds the result of the resolve
 4212 		call for ${client_name}: OK, FAIL, FORGED, TEMP.  Proposed
 4213 		by Kari Hurtta of the Finnish Meteorological Institute.
 4214 	New macros ${dsn_notify}, ${dsn_envid}, and ${dsn_ret} that hold
 4215 		the corresponding DSN parameter values.  Proposed by
 4216 		Mathias Herberts.
 4217 	New macro ${msg_size} which holds the value of the SIZE= parameter,
 4218 		i.e., usually the size of the message (in an ESMTP dialogue),
 4219 		before the message has been collected, thereafter it holds
 4220 		the message size as computed by sendmail (and can be used
 4221 		in check_compat).
 4222 	The macro ${deliveryMode} now specifies the current delivery mode
 4223 		sendmail is using instead of the value of the DeliveryMode
 4224 		option.
 4225 	New macro ${ntries} holds the number of delivery attempts.
 4226 	Drop explicit From: if same as what would be generated only if it is
 4227 		a local address.  From Motonori Nakamura of Kyoto University.
 4228 	Write pid to file also if sendmail only processes the queue.
 4229 		Proposed by Roy J. Mongiovi of Georgia Tech.
 4230 	Log "low on disk space" only when necessary.
 4231 	New macro ${load_avg} can be used to check the current load average.
 4232 		Suggested by Scott Gifford of The Internet Ramp.
 4233 	Return-Receipt-To: header implies DSN request if option RrtImpliesDsn
 4234 		is set.
 4235 	Flag -S for maps to specify the character which is substituted
 4236 		for spaces (instead of the default given by O BlankSub).
 4237 	Flag -D for maps: perform no lookup in deferred delivery mode.
 4238 		This flag is set by default for the host map.  Based on a
 4239 		proposal from Ian MacPhedran of the University of Saskatchewan.
 4240 	Open maps only on demand, not at startup.
 4241 	Log warning about unsupported IP address families.
 4242 	New option MaxHeadersLength allows to specify a maximum length
 4243 		of the sum of all headers.  This can be used to prevent
 4244 		a denial-of-service attack.
 4245 	New option MaxMimeHeaderLength which limits the size of MIME
 4246 		headers and parameters within those headers.  This option
 4247 		is intended to protect mail user agents from buffer
 4248 		overflow attacks.
 4249 	Added option MaxAliasRecursion to specify the maximum depth of
 4250 		alias recursion.
 4251 	New flag F=6 for mailers to strip headers to seven bit.
 4252 	Map type syslog to log the key via syslogd.
 4253 	Entries in the alias file can be continued by putting a backslash
 4254 		directly before the newline.
 4255 	New option DeadLetterDrop to define the location of the system-wide
 4256 		dead.letter file, formerly hardcoded to
 4257 		/usr/tmp/dead.letter.  If this option is not set (the
 4258 		default), sendmail will not attempt to save to a
 4259 		system-wide dead.letter file if it can not bounce the mail
 4260 		to the user nor postmaster.  Instead, it will rename the qf
 4261 		file as it has in the past when the dead.letter file
 4262 		could not be opened.
 4263 	New option PidFile to define the location of the pid file.  The
 4264 		value of this option is macro expanded.
 4265 	New option ProcessTitlePrefix specifies a prefix string for the
 4266 		process title shown in 'ps' listings.
 4267 	New macros for use with the PidFile and ProcessTitlePrefix options
 4268 		(along with the already existing macros):
 4269 		${daemon_info}      Daemon information, e.g.
 4270 		                    SMTP+queueing@00:30:00
 4271 		${daemon_addr}	    Daemon address, e.g.,
 4272 		${daemon_family}    Daemon family, e.g., inet, inet6, etc.
 4273 		${daemon_name}      Daemon name, e.g., MSA.
 4274 		${daemon_port}	    Daemon port, e.g., 25
 4275 		${queue_interval}   Queue run interval, e.g., 00:30:00
 4276 	New macros especially for virtual hosting:
 4277 		${if_name}	hostname of interface of incoming connection.
 4278 		${if_addr}	address of interface of incoming connection.
 4279 		The latter is only set if the interface does not belong to the
 4280 		loopback net.
 4281 	If a message being accepted via a method other than SMTP and
 4282 		would be rejected by a header check, do not send the message.
 4283 		Suggested by Phil Homewood of Mincom Pty Ltd.
 4284 	Don't strip comments for header checks if $>+ is used instead of $>.
 4285 		Provide header value as quoted string in the macro
 4286 		${currHeader} (possibly truncated to MAXNAME).  Suggested by
 4287 		Jan Krueger of Unix-AG of University of Hannover.
 4288 		The length of the header value is stored in ${hdrlen}.
 4289 	H*: allows to specify a default ruleset for header checks.  This
 4290 		ruleset will only be called if the individual header does
 4291 		not have its own ruleset assigned.  Suggested by Jan
 4292 		Krueger of Unix-AG of University of Hannover.
 4293 		The name of the header field stored in ${hdr_name}.
 4294 	Comments (i.e., text within parentheses) in rulesets are not
 4295 		removed if the config file version is greater than or equal
 4296 		to 9.  For example, "R$+ ( 1 )		$@ 1" matches the
 4297 		input "token (1)" but does not match "token".
 4298 	Avoid removing the Content-Transfer-Encoding MIME header on
 4299 		MIME messages.  Problem noted by Sigurbjorn B. Larusson of
 4300 		Multimedia Consumer Services.  Fix from Per Hedeland of
 4301 		Ericsson.
 4302 	Avoid duplicate Content-Transfer-Encoding MIME header on
 4303 		messages with 8-bit text in headers.  Problem noted by
 4304 		Per Steinar Iversen of Oslo College.  Fix from Per Hedeland
 4305 		of Ericsson.
 4306 	Avoid keeping maps locked longer than necessary when re-opening a
 4307 		modified database map file.  Problem noted by Chris Adams
 4308 		of Renaissance Internet Services.
 4309 	Resolving to the $#error mailer with a temporary failure code (e.g.,
 4310 		$#error $@ tempfail $: "400 Temporary failure") will now
 4311 		queue up the message instead of bouncing it.
 4312 	Be more liberal in acceptable responses to an SMTP RSET command as
 4313 		standard does not provide any indication of what to do when
 4314 		something other than 250 is received.  Based on a patch
 4315 		from Steve Schweinhart of America Online.
 4316 	New option TrustedUser allows to specify a user who can own
 4317 		important files instead of root.  This requires HASFCHOWN.
 4318 	Fix USERDB conditional so compiling with NEWDB or HESIOD and
 4319 		setting USERDB=0 works.  Fix from Jorg Zanger of Schock.
 4320 	Fix another instance (similar to one in 8.9.3) of a network failure
 4321 		being mis-logged as "Illegal Seek" instead of whatever
 4322 		really went wrong.  From John Beck of Sun Microsystems.
 4323 	$? tests also whether the macro is non-null.
 4324 	Print an error message if a mailer definition contains an invalid
 4325 		equate name.
 4326 	New mailer equate /= to specify a directory to chroot() into before
 4327 		executing the mailer program.  Suggested by Igor Vinokurov.
 4328 	New mailer equate W= to specify the maximum time to wait for the
 4329 		mailer to return after sending all data to it.
 4330 	Only free memory from the process list when adding a new process
 4331 		into a previously filled slot.  Previously, the memory was
 4332 		freed at removal time.  Since removal can happen in a
 4333 		signal handler, this may leave the memory map in an
 4334 		inconsistent state.  Problem noted by Jeff A. Earickson and
 4335 		David Cooley of Colby College.
 4336 	When using the UserDB @hostname catch-all, do not try to lookup
 4337 		local users in the passwd file.  The UserDB code has
 4338 		already decided the message will be passed to another host
 4339 		for processing.  Fix from Tony Landells of Burdett
 4340 		Buckeridge Young Limited.
 4341 	Support LDAP authorization via either a file containing the
 4342 		password or Kerberos V4 using the new map options
 4343 		'-ddistinguished_name', '-Mmethod', and '-Pfilename'.  The
 4344 		distinguished_name is who to login as.  The method can be
 4346 		LDAP_AUTH_KRBV4.  The filename is the file containing the
 4347 		secret key for LDAP_AUTH_SIMPLE or the name of the Kerberos
 4348 		ticket file for LDAP_AUTH_KRBV4.  Patch from Booker Bense
 4349 		of Stanford University.
 4350 	The ldapx map has been renamed to ldap.  The use of ldapx is
 4351 		deprecated and will be removed in a future version.
 4352 	If the result of an LDAP search returns a multi-valued attribute
 4353 		and the map has the column delimiter set, it turns that
 4354 		response into a delimiter separated string.  The LDAP map
 4355 		will traverse multiple entries as well.  LDAP alias maps
 4356 		automatically set the column delimiter to the comma.
 4357 		Based on patch from Booker Bense of Stanford University and
 4358 		idea from Philip A. Prindeville of Mirapoint, Inc.
 4359 	Support return of multiple values for a single LDAP lookup.  The
 4360 		values to be returned should be in a comma separated string.
 4361 		For example, `-v "email,emailother"'.  Patch from
 4362 		Curtis W. Hillegas of Princeton University.
 4363 	Allow the use of LDAP for alias maps.
 4364 	If no LDAP attributes are specified in an LDAP map declaration, all
 4365 		attributes found in the match will be returned.
 4366 	Prevent commas in quoted strings in the AliasFile value from
 4367 		breaking up a single entry into multiple entries.  This is
 4368 		needed for LDAP alias file specifications to allow for
 4369 		comma separated key and value strings.
 4370 	Keep connections to LDAP server open instead of opening and closing
 4371 		for each lookup.  To reduce overhead, sendmail will cache
 4372 		connections such that multiple maps which use the same
 4373 		host, port, bind DN, and authentication will only result in
 4374 		a single connection to that host.
 4375 	Put timeout in the proper place for USE_LDAP_INIT.
 4376 	Be more careful about checking for errors and freeing memory on
 4377 		LDAP lookups.
 4378 	Use asynchronous LDAP searches to save memory and network
 4379 		resources.
 4380 	Do not copy LDAP query results if the map's match only flag is set.
 4381 	Increase portability to the Netscape LDAP libraries.
 4382 	Change the parsing of the LDAP filter specification.  '%s' is still
 4383 		replaced with the literal contents of the map lookup key --
 4384 		note that this means a lookup can be done using the LDAP
 4385 		special characters.  The new '%0' token can be used instead
 4386 		of '%s' to encode the key buffer according to RFC 2254.
 4387 		For example, if the LDAP map specification contains '-k
 4388 		"(user=%s)"' and a lookup is done on "*", this would be
 4389 		equivalent to '-k "(user=*)"' -- matching ANY record with a
 4390 		user attribute.  Instead, if the LDAP map specification
 4391 		contains '-k "(user=%0)"' and a lookup is done on "*", this
 4392 		would be equivalent to '-k "(user=\2A)"' -- matching a user
 4393 		with the name "*".
 4394 	New LDAP map flags: "-1" requires a single match to be returned, if
 4395 		more than one is returned, it is equivalent to no records
 4396 		being found; "-r never|always|search|find" sets the LDAP
 4397 		alias dereference option; "-Z size" limits the number of
 4398 		matches to return.
 4399 	New option LDAPDefaultSpec allows a default map specification for
 4400 		LDAP maps.  The value should only contain LDAP specific
 4401 		settings such as "-h host -p port -d bindDN", etc.  The
 4402 		settings will be used for all LDAP maps unless they are
 4403 		specified in the individual map specification ('K'
 4404 		command).  This option should be set before any LDAP maps
 4405 		are defined.
 4406 	Prevent an NDBM alias file opening loop when the NDBM open
 4407 		continually fails.  Fix from Roy J. Mongiovi of Georgia
 4408 		Tech.
 4409 	Reduce memory utilization for smaller symbol table entries.  In
 4410 		particular, class entries get much smaller, which can be
 4411 		important if you have large classes.
 4412 	On network-related temporary failures, record the hostname which
 4413 		gave error in the queued status message.  Requested by
 4414 		Ulrich Windl of the Universitat Regensburg.
 4415 	Add new F=% mailer flag to allow for a store and forward
 4416 		configuration.  Mailers which have this flag will not attempt
 4417 		delivery on initial receipt of a message or on queue runs
 4418 		unless the queued message is selected using one of the
 4419 		-qI/-qR/-qS queue run modifiers or an ETRN request.  Code
 4420 		provided by Philip Guenther of Gustavus Adolphus College.
 4421 	New option ControlSocketName which, when set, creates a daemon
 4422 		control socket.  This socket allows an external program to
 4423 		control and query status from the running sendmail daemon
 4424 		via a named socket, similar to the ctlinnd interface to the
 4425 		INN news server.  Access to this interface is controlled by
 4426 		the UNIX file permissions on the named socket on most UNIX
 4427 		systems (see sendmail/README for more information).  An
 4428 		example control program is provided as contrib/smcontrol.pl.
 4429 	Change the default values of QueueLA from 8 to (8 * numproc) and
 4430 		RefuseLA from 12 to (12 * numproc) where numproc is the
 4431 		number of processors online on the system (if that can be
 4432 		determined).  For single processor machines, this change
 4433 		has no effect.
 4434 	Don't return body of message to postmaster on "Too many hops" bounces.
 4435 		Based on fix from Motonori Nakamura of Kyoto University.
 4436 	Give more detailed DSN descriptions for some cases.  Patch from
 4437 		Motonori Nakamura of Kyoto University.
 4438 	Logging of alias, forward file, and UserDB expansion now happens
 4439 		at LogLevel 11 or higher instead of 10 or higher.
 4440 	Logging of an envelope's complete delivery (the "done" message) now
 4441 		happens at LogLevel 10 or higher instead of 11 or higher.
 4442 	Logging of TCP/IP or UNIX standard input connections now happens at
 4443 		LogLevel 10 or higher.  Previously, only TCP/IP connections
 4444 		were logged, and on at LogLevel 12 or higher.  Setting
 4445 		LogLevel to 10 will now assist users in tracking frequent
 4446 		connection-based denial of service attacks.
 4447 	Log basic information about authenticated connections at LogLevel
 4448 		10 or higher.
 4449 	Log SMTP Authentication mechanism and author when logging the sender
 4450 		information (from= syslog line).
 4451 	Log the DSN code for each recipient if one is available as a new
 4452 		equate (dsn=).
 4453 	Macro expand PostmasterCopy and DoubleBounceAddress options.
 4454 	New "ph" map for performing ph queries in rulesets, see
 4455 		sendmail/README for details.  Contributed by Mark Roth
 4456 		of the University of Illinois at Urbana-Champaign.
 4457 	Detect temporary lookup failures in the host map if looking up a
 4458 		bracketed IP address.  Problem noted by Kari Hurtta of the
 4459 		Finnish Meteorological Institute.
 4460 	Do not report a Remote-MTA on local deliveries.  Problem noted by
 4461 		Kari Hurtta of the Finnish Meteorological Institute.
 4462 	When a forward file points to an alias which runs a program, run
 4463 		the program as the default user and the default group, not
 4464 		the forward file user.  This change also assures the
 4465 		:include: directives in aliases are also processed using
 4466 		the default user and group.  Problem noted by Sergiu
 4467 		Popovici of DNT Romania.
 4468 	Prevent attempts to save a dead.letter file for a user with
 4469 		no home directory (/no/such/directory).  Problem noted by
 4470 		Michael Brown of Finnigan FT/MS.
 4471 	Include message delay and number of tries when logging that a
 4472 		message has been completely delivered (LogLevel of 10 or
 4473 		above).  Suggested by Nick Hilliard of Ireland Online.
 4474 	Log the sender of a message even if none of the recipients were
 4475 		accepted.  If some of the recipients were rejected, it is
 4476 		helpful to know the sender of the message.
 4477 	Check the root directory (/) when checking a path for safety.
 4478 		Problem noted by John Beck of Sun Microsystems.
 4479 	Prevent multiple responses to the DATA command if DeliveryMode is
 4480 		interactive and delivering to an alias which resolves to
 4481 		multiple files.
 4482 	Macros in the helpfile are expanded if the helpfile version is 2 or
 4483 		greater (see below); the help function doesn't print the
 4484 		version of sendmail any longer, instead it is placed in
 4485 		the helpfile ($v).  Suggested by Chuck Foster of UUNET
 4486 		PIPEX.  Additionally, comment lines (starting with #) are
 4487 		skipped and a version line (#vers) is introduced.  The
 4488 		helpfile version for 8.10.0 is 2, if no version or an older
 4489 		version is found, a warning is logged.  The '#vers'
 4490 		directive should be placed at the top of the help file.
 4491 	Use fsync() when delivering to a file to guarantee the delivery to
 4492 		disk succeeded.  Suggested by Nick Christenson.
 4493 	If delivery to a file is unsuccessful, truncate the file back to its
 4494 		length before the attempt.
 4495 	If a forward points to a filename for delivery, change to the
 4496 		user's uid before checking permissions on the file.  This
 4497 		allows delivery to files on NFS mounted directories where
 4498 		root is remapped to nobody.  Problem noted by Harald
 4499 		Daeubler of Universitaet Ulm.
 4500 	purgestat and sendmail -bH purge only expired (Timeout.hoststatus)
 4501 		host status files, not all files.
 4502 	Any macros stored in the class $={persistentMacros} will be saved
 4503 		in the queue file for the message and set when delivery
 4504 		is attempted on the queued item.  Suggested by Kyle Jones of
 4505 		Wonderworks Inc.
 4506 	Add support for storing information between rulesets using the new
 4507 		macro map class.  This can be used to store information
 4508 		between queue runs as well using $={persistentMacros}.
 4509 		Based on an idea from Jan Krueger of Unix-AG of University
 4510 		of Hannover.
 4511 	New map class arith to allow for computations in rules.  The
 4512 		operation (+, -, *, /, l (for less than), and =) is given
 4513 		as key.  The two operands are specified as arguments; the
 4514 		lookup returns the result of the computation.  For example,
 4515 		"$(arith l $@ 4 $@ 2 $)" will return "FALSE" and
 4516 		"$(arith + $@ 4 $@ 2 $)" will return "6".
 4517 	Add new syntax for header declarations which decide whether to
 4518 		include the header based on a macro rather than a mailer
 4519 		flag:
 4520 			H?${MyMacro}?X-My-Header: ${MyMacro}
 4521 		This should be used along with $={persistentMacros}.
 4522 		It can be used for adding headers to a message based on
 4523 		the results of check_* and header check rulesets.
 4524 	Allow new named config file rule check_eoh which is called after
 4525 		all of the headers have been collected.  The input to the
 4526 		ruleset the number of headers and the size of all of the
 4527 		headers in bytes separated by $|.  This ruleset along with
 4528 		the macro storage map can be used to correlate information
 4529 		gathered between headers and to check for missing headers.
 4530 		See cf/README or doc/op/op.ps for an example.
 4531 	Change the default for the MeToo option to True to correspond
 4532 		to the clarification in the DRUMS SMTP Update spec.  This
 4533 		option is deprecated and will be removed from a future
 4534 		version.
 4535 	Change the sendmail binary default for SendMimeErrors to True.
 4536 	Change the sendmail binary default for SuperSafe to True.
 4537 	Display ruleset names in debug and address test mode output
 4538 		if referencing a named ruleset.
 4539 	New mailer equate m= which will limit the number of messages
 4540 		delivered per connection on an SMTP or LMTP mailer.
 4541 	Improve QueueSortOrder=Host by reversing the hostname before
 4542 		using it to sort.  Now all the same domains are really run
 4543 		through the queue together.  If they have the same MX host,
 4544 		then they will have a much better opportunity to use the
 4545 		connection cache if available.  This should be a reasonable
 4546 		performance improvement.  Patch from Randall Winchester of
 4547 		the University of Maryland.
 4548 	If a message is rejected by a header check ruleset, log who would
 4549 		have received the message if it had not been rejected.
 4550 	New "now" value for Timeout.queuereturn to bounce entries from the
 4551 		queue immediately.  No delivery attempt is made.
 4552 	Increase sleeping time exponentially after too many "bad" commands
 4553 		up to 4 minutes delay (compare MAX{BAD,NOOP,HELO,VRFY,ETRN}-
 4554 		COMMANDS).
 4555 	New option ClientPortOptions similar to DaemonPortOptions
 4556 		but for outgoing connections.
 4557 	New suboptions for DaemonPortOptions: Name (a name used for
 4558 		error messages and logging) and Modifiers, i.e.
 4559 			a	require authentication
 4560 			b	bind to interface through which mail has
 4561 				been received
 4562 			c	perform hostname canonification
 4563 			f	require fully qualified hostname
 4564 			h	use name of interface for outgoing HELO
 4565 				command
 4566 			C	don't perform hostname canonification
 4567 			E	disallow ETRN (see RFC 2476)
 4568 	New suboption for ClientPortOptions: Modifiers, i.e.
 4569 			h	use name of interface for HELO command
 4570 	The version number for queue files (qf) has been incremented to 4.
 4571 	Log unacceptable HELO/EHLO domain name attempts if LogLevel is set
 4572 		to 10 or higher.  Suggested by Rick Troxel of the National
 4573 		Institutes of Health.
 4574 	If a mailer dies, print the status in decimal instead of octal
 4575 		format.  Suggested by Michael Shapiro of Sun Microsystems.
 4576 	Limit the length of all MX records considered for delivery to 8k.
 4577 	Move message priority from sender to recipient logging.  Suggested by
 4578 		Ulrich Windl of the Universitat Regensburg.
 4579 	Add support for Berkeley DB 3.X.
 4580 	Add fix for Berkeley DB 2.X fcntl() locking race condition.
 4581 		Requires a post-2.7.5 version of Berkeley DB.
 4582 	Support writing traffic log (sendmail -X option) to a FIFO.
 4583 		Patch submitted by Rick Heaton of Network Associates, Inc.
 4584 	Do not ignore Timeout settings in the .cf file when a Timeout
 4585 		sub-options is set on the command line.  Problem noted by
 4586 		Graeme Hewson of Oracle.
 4587 	Randomize equal preference MX records each time delivery is
 4588 		attempted via a new connection to a host instead of once per
 4589 		session.  Suggested by Scott Salvidio of Compaq.
 4590 	Implement enhanced status codes as defined by RFC 2034.
 4591 	Add [hostname] to class w for the names of all interfaces unless
 4592 		DontProbeInterfaces is set. This is useful for sending mails
 4593 		to hosts which have dynamically assigned names.
 4594 	If a message is bounced due to bad MIME conformance, avoid bouncing
 4595 		the bounce for the same reason.  If the body is not 8-bit
 4596 		clean, and EightBitMode isn't set to pass8, the body will
 4597 		not be included in the bounce.  Problem noted by Valdis
 4598 		Kletnieks of Virginia Tech.
 4599 	The timeout for sending a message via SMTP has been changed from
 4600 		'${msgsize} / 16 + (${nrcpts} * 300)' to a timeout which
 4601 		simply checks for progress on sending data every 5 minutes.
 4602 		This will detect the inability to send information quicker
 4603 		and reduce the number of processes simply waiting to
 4604 		timeout.
 4605 	Prevent a segmentation fault on systems which give a partial filled
 4606 		interface address structure when loading the system network
 4607 		interface addresses.  Fix from Reinier Bezuidenhout of
 4608 		Nanoteq.
 4609 	Add a compile-time configuration macro, MAXINTERFACES, which
 4610 		indicates the number of interfaces to read when probing
 4611 		for hostnames and IP addresses for class w ($=w).  The
 4612 		default value is 512.  Based on idea from Reinier
 4613 		Bezuidenhout of Nanoteq.
 4614 	If the RefuseLA option is set to 0, do not reject connections based
 4615 		on load average.
 4616 	Allow ruleset 0 to have a name.  Problem noted by Neil Rickert of
 4617 		Northern Illinois University.
 4618 	Expand the Return-Path: header at delivery time, after "owner-"
 4619 		envelope splitting has occurred.
 4620 	Don't try to sort the queue if there are no entries. Patch from
 4621 		Luke Mewburn from RMIT University.
 4622 	Add a "/quit" command to address test mode.
 4623 	Include the proper sender in the UNIX "From " line and Return-Path:
 4624 		header when undeliverable mail is saved to ~/dead.letter.
 4625 		Problem noted by Kari Hurtta of the Finnish Meteorological
 4626 		Institute.
 4627 	The contents of a class can now be copied to another class using
 4628 		the syntax: "C{Dest} $={Source}".  This would copy all of
 4629 		the items in class $={Source} into the class $={Dest}.
 4630 	Include original envelope's error transcript in bounces created for
 4631 		split (owner-) envelopes to see the original errors when
 4632 		the recipients were added.  Based on fix from Motonori
 4633 		Nakamura of Kyoto University.
 4634 	Show reason for permanent delivery errors directly after the
 4635 		addresses.  From Motonori Nakamura of Kyoto University.
 4636 	Prevent a segmentation fault when bouncing a split-envelope
 4637 		message.  Patch from Motonori Nakamura of Kyoto University.
 4638 	If the specification for the queue run interval (-q###) has a
 4639 		syntax error, consider the error fatal and exit.
 4640 	Pay attention to CheckpointInterval during LMTP delivery.  Problem
 4641 		noted by Motonori Nakamura of Kyoto University.
 4642 	On operating systems which have setlogin(2), use it to set the
 4643 		login name to the RunAsUserName when starting as a daemon.
 4644 		This is for delivery to programs which use getlogin().
 4645 		Based on fix from Motonori Nakamura of Kyoto University.
 4646 	Differentiate between "command not implemented" and "command
 4647 		unrecognized" in the SMTP dialogue.
 4648 	Strip returns from forward and include files.  Problem noted by
 4649 		Allan E Johannesen of Worcester Polytechnic Institute.
 4650 	Prevent a core dump when using 'sendmail -bv' on an address which
 4651 		resolves to the $#error mailer with a temporary failure.
 4652 		Based on fix from Neil Rickert of Northern Illinois
 4653 		University.
 4654 	Prevent multiple deliveries of a message with a "non-local alias"
 4655 		pointing to a local user, if canonicalization fails
 4656 		the message was requeued *and* delivered to the alias.
 4657 	If an invalid ruleset is declared, the ruleset name could be
 4658 		ignored and its rules added to S0.  Instead, ignore the
 4659 		ruleset lines as well.
 4660 	Avoid incorrect Final-Recipient, Action, and X-Actual-Recipient
 4661 		success DSN fields as well as duplicate entries for a
 4662 		single address due to S5 and UserDB processing.  Problems
 4663 		noted by Kari Hurtta of the Finnish Meteorological
 4664 		Institute.
 4665 	Turn off timeouts when exiting sendmail due to an interrupt signal
 4666 		to prevent the timeout from firing during the exit process.
 4667 		Problem noted by Michael Shapiro of Sun Microsystems.
 4668 	Do not append @MyHostName to non-RFC822 addresses output by the EXPN
 4669 		command or on Final-Recipient: and X-Actual-Recipient: DSN
 4670 		headers.  Non-RFC822 addresses include deliveries to
 4671 		programs, file, DECnet, etc.
 4672 	Fix logic for determining if a local user is using -f or -bs to
 4673 		spoof their return address.  Based on idea from Neil Rickert
 4674 		of Northern Illinois University and patch from Per Hedeland
 4675 		of Ericsson.
 4676 	Report the proper UID in the bounce message if an :include: file is
 4677 		owned by a uid that doesn't map to a username and the
 4678 		:include: file contains delivery to a file or program.
 4679 		Problem noted by John Beck of Sun Microsystems.
 4680 	Avoid the attempt of trying to send a second SMTP QUIT command if
 4681 		the remote server responds to the first QUIT with a 4xx
 4682 		response code and drops the connection.  This behavior was
 4683 		noted by Ulrich Windl of the Universitat Regensburg when
 4684 		sendmail was talking to the Mercury 1.43 MTA.
 4685 	If a hostname lookup times out and ServiceSwitchFile is set but the
 4686 		file is not present, the lookup failure would be marked as
 4687 		a permanent failure instead of a temporary failure.  Fix
 4688 		from Russell King of the ARM Linux Project.
 4689 	Handle aliases or forwards which deliver to programs using tabs
 4690 		instead of spaces between arguments.  Problem noted by Randy
 4691 		Wormser.  Fix from Neil Rickert of Northern Illinois
 4692 		University.
 4693 	Allow MaxRecipientsPerMessage option to be set on the command line
 4694 		by normal users (e.g., sendmail won't drop its root
 4695 		privileges) to allow overrides for message submission via
 4696 		'sendmail -bs'.
 4697 	Set the names for help file and statistics file to "helpfile" and
 4698 		"statistics", respectively, if no parameters are given for
 4699 		them in the .cf file.
 4700 	Avoid bogus 'errbody: I/O Error -7' log messages when sending
 4701 		success DSN messages for messages relayed to non-DSN aware
 4702 		systems.  Problem noted by Juergen Georgi of RUS University
 4703 		of Stuttgart and Kyle Tucker of Parexel International.
 4704 	Prevent +detail information from interfering with local delivery to
 4705 		multiple users in the same transaction (F=m).
 4706 	Add H_FORCE flag for the X-Authentication-Warning: header, so it
 4707 		will be added even if one already exists.  Problem noted
 4708 		by Michal Zalewski of Marchew Industries.
 4709 	Stop processing SMTP commands if the SMTP connection is dropped.
 4710 		This prevents a remote system from flooding the connection
 4711 		with commands and then disconnecting.  Previously, the
 4712 		server would process all of the buffered commands.  Problem
 4713 		noted by Michal Zalewski of Marchew Industries.
 4714 	Properly process user-supplied headers beginning with '?'.  Problem
 4715 		noted by Michal Zalewski of Marchew Industries.
 4716 	If multiple header checks resolve to the $#error mailer, use the
 4717 		last permanent (5XX) failure if any exist.  Otherwise, use
 4718 		the last temporary (4XX) failure.
 4719 	RFC 1891 requires "hexchar" in a "xtext" to be upper case.  Patch
 4720 		from Ronald F. Guilmette of Infinite Monkeys & Co.
 4721 	Timeout.ident now defaults to 5 seconds instead of 30 seconds to
 4722 		prevent the now common delays associated with mailing to a
 4723 		site which drops IDENT packets.  Suggested by many.
 4724 	Persistent host status data is not reloaded disk when current data
 4725 		is available in the in-memory cache.  Problem noted by Per
 4726 		Hedeland of Ericsson.
 4727 	mailq displays unprintable characters in addresses as their octal
 4728 		representation and a leading backslash.  This avoids problems
 4729 		with "unprintable" characters.  Problem noted by Michal
 4730 		Zalewski of the "Internet for Schools" project (IdS).
 4731 	The mail line length limit (L= equate) was adding the '!' indicator
 4732 		one character past the limit.  This would cause subsequent
 4733 		hops to break the line again.  The '!' is now placed in
 4734 		the last column of the limit if the line needs to be broken.
 4735 		Problem noted by Joe Pruett of Q7 Enterprises.  Based on fix
 4736 		from Per Hedeland of Ericsson.
 4737 	If a resolver ANY query is larger than the UDP packet size, the
 4738 		resolver will fall back to TCP.  However, some
 4739 		misconfigured firewalls black 53/TCP so the ANY lookup
 4740 		fails whereas an MX or A record might succeed.  Therefore,
 4741 		don't fail on ANY queries.
 4742 	If an SMTP recipient is rejected due to syntax errors in the
 4743 		address, do not send an empty postmaster notification DSN
 4744 		to the postmaster.  Problem noted by Neil Rickert of
 4745 		Northern Illinois University.
 4746 	Allow '_' and '.' in map names when parsing a sequence map
 4747 		specification.  Patch from William Setzer of North Carolina
 4748 		State University.
 4749 	Fix hostname in logging of read timeouts for the QUIT command on
 4750 		cached connections.  Problem noted by Neil Rickert of
 4751 		Northern Illinois University.
 4752 	Use a more descriptive entry to log "null" connections, i.e.,
 4753 		"host did not issue MAIL/EXPN/VRFY/ETRN during connection".
 4754 	Fix a file descriptor leak in ONEX mode.
 4755 	Portability:
 4756 		Reverse signal handling logic such that sigaction(2) with
 4757 			the SA_RESTART flag is the preferred method and the
 4758 			other signal methods are only tried if SA_RESTART
 4759 			is not available.  Problem noted by Allan E
 4760 			Johannesen of Worcester Polytechnic Institute.
 4761 		AIX 4.x supports the sa_len member of struct sockaddr.
 4762 			This allows network interface probing to work
 4763 			properly.  Fix from David Bronder of the
 4764 			University of Iowa.
 4765 		AIX 4.3 has snprintf() support.
 4766 		Use "PPC" as the architecture name when building under
 4767 			AIX.  This will be reflected in the obj.* directory
 4768 			name.
 4769 		Apple Darwin support based on Apple Rhapsody port.
 4770 		Fixed AIX 'make depend' method from Valdis Kletnieks of
 4771 			Virginia Tech.
 4772 		Digital UNIX has uname(2).
 4773 		GNU Hurd updates from Mark Kettenis of the University of
 4774 			Amsterdam.
 4775 		Improved HPUX 11.0 portability.
 4776 		Properly determine the number of CPUs on FreeBSD 2.X,
 4777 			FreeBSD 3.X, HP/UX 10.X and HP/UX 11.X.
 4778 		Remove special IRIX ABI cases from Build script and the OS
 4779 			files.  Use the standard 'cc' options used by SGI
 4780 			in building the operating system.  Users can
 4781 			override the defaults by setting confCC and
 4782 			confLIBSEARCHPATH appropriately.
 4783 		IRIX nsd map support from Bob Mende of SGI.
 4784 		Minor devtools fixes for IRIX from Bob Mende of SGI.
 4785 		Linux patch for IP_SRCROUTE support from Joerg Dorchain
 4786 			of MW EDV & ELECTRONIC.
 4787 		Linux now uses /usr/sbin for confEBINDIR in the build
 4788 			system.  From MATSUURA Takanori of Osaka University.
 4789 		Remove special treatment for Linux PPC in the build
 4790 			system.  From MATSUURA Takanori of Osaka University.
 4791 		Motorolla UNIX SYSTEM V/88 Release 4.0 support from
 4792 			Sergey Rusanov of the Republic of Udmurtia.
 4793 		NCR MP-RAS 3.x includes regular expression support.  From
 4794 			Tom J. Moore of NCR.
 4795 		NEC EWS-UX/V series settings for _PATH_VENDOR_CF and
 4796 			_PATH_SENDMAILPID from Oota Toshiya of
 4797 			NEC Computers Group Planning Division.
 4798 		Minor NetBSD owner/group tweaks from Ayamura Kikuchi, M.D.
 4799 		NEWS-OS 6.X listed SYSLOG_BUFSIZE as 256 in confENVDEF and
 4800 			1024 in conf.h.  Since confENVDEF would be used,
 4801 			use that value in conf.h.
 4802 		Use NeXT's NETINFO to get domain name.  From Gerd Knops of
 4803 			BITart Consulting.
 4804 		Use NeXT's NETINFO for alias and hostname resolution if
 4806 			defined.  Patch from Wilfredo Sanchez of Apple
 4807 			Computer, Inc.
 4808 		NeXT portability tweaks.  Problems reported by Dragan
 4809 			Milicic of the University of Utah and J. P. McCann
 4810 			of E I A.
 4811 		New compile flag FAST_PID_RECYCLE: set this if your system
 4812 			can reuse the same PID in the same second.
 4813 		New compile flag HASFCHOWN: set this if your OS has
 4814 			fchown(2).
 4815 		New compile flag HASRANDOM: set this to 0 if your OS does
 4816 			not have random(3).  rand() will be used instead.
 4817 		New compile flag HASSRANDOMDEV: set this if your OS has
 4818 			srandomdev(3).
 4819 		New compile flag HASSETLOGIN: set this if your OS has
 4820 			setlogin(2).
 4821 		Replace SINIX and ReliantUNIX support with version
 4822 			specific SINIX files.  From Gerald Rinske of
 4823 			Siemens Business Services.
 4824 		Use the 60-second load average instead of the 5 second load
 4825 			average on Compaq Tru64 UNIX (formerly Digital
 4826 			UNIX).  From Chris Teakle of the University of Qld.
 4827 		Use ANSI C by default for Compaq Tru64 UNIX.  Suggested by
 4828 			Randall Winchester of Swales Aerospace.
 4829 		Correct setgroups() prototype for Compaq Tru64 UNIX.
 4830 			Problem noted by Randall Winchester of Swales
 4831 			Aerospace.
 4832 		Hitachi 3050R/3050RX and 3500 Workstations running
 4833 			HI-UX/WE2 4.02, 6.10 and 7.10 from Motonori
 4834 			NAKAMURA of Kyoto University.
 4835 		New compile flag NO_GETSERVBYNAME: set this to disable
 4836 			use of getservbyname() on systems which can
 4837 			not lookup a service by name over NIS, such as
 4838 			HI-UX.  Patch from Motonori NAKAMURA of Kyoto
 4839 			University.
 4840 		Use devtools/bin/install.sh on SCO 5.x.  Problem noted
 4841 			by Sun Wenbing of the China Engineering and
 4842 			Technology Information Network.
 4843 		make depend didn't work properly on UNIXWARE 4.2.  Problem
 4844 			noted by Ariel Malik of Netology, Ltd.
 4845 		Use /usr/lbin as confEBINDIR for Compaq Tru64 (Digital UNIX).
 4846 		Set confSTDIO_TYPE to torek for BSD-OS, FreeBSD, NetBSD,
 4847 			and OpenBSD.
 4848 		A recent Compaq Ultrix 4.5 Y2K patch has broken detection
 4849 			of local_hostname_length().  See sendmail/README
 4850 			for more details.  Problem noted by Allan E
 4851 			Johannesen of Worcester Polytechnic Institute.
 4852 	CONFIG: Begin using /etc/mail/ for sendmail related files.  This
 4853 		affects a large number of files.  See cf/README for more
 4854 		details.
 4855 	CONFIG: New macro MAIL_SETTINGS_DIR contains the path (including
 4856 		trailing slash) for the mail settings directory.
 4857 	CONFIG: Increment version number of config file to 9.
 4858 	CONFIG: OSTYPE(`bsdi1.0') and OSTYPE(`bsdi2.0') have been
 4859 		deprecated and may be removed from a future release.
 4860 		BSD/OS users should begin using OSTYPE(`bsdi').
 4861 	CONFIG: OpenBSD 2.4 installs mail.local non-set-user-ID root.  This
 4862 		requires a new OSTYPE(`openbsd').  From Todd C. Miller of
 4863 		Courtesan Consulting.
 4864 	CONFIG: New OSTYPE(`hpux11') for HP/UX 11.X.
 4865 	CONFIG: A syntax error in check_mail would cause fake top-level
 4866 		domains (.BITNET, .DECNET, .FAX, .USENET, and .UUCP) to
 4867 		be improperly rejected as unresolvable.
 4868 	CONFIG: New FEATURE(`dnsbl') takes up to two arguments (name of
 4869 		DNS server, rejection message) and can be included
 4870 		multiple times.
 4871 	CONFIG: New FEATURE(`relay_mail_from') allows relaying if the
 4872 		mail sender is listed as RELAY in the access map (and tagged
 4873 		with From:).
 4874 	CONFIG: Optional tagging of LHS in the access map (Connect:,
 4875 		From:, To:) to enable finer control.
 4876 	CONFIG: New FEATURE(`ldap_routing') implements LDAP address
 4877 		routing.  See cf/README for a complete description of the
 4878 		new functionality.
 4879 	CONFIG: New variables for the new sendmail options:
 4880 		confAUTH_MECHANISMS		AuthMechanisms
 4881 		confAUTH_OPTIONS		AuthOptions
 4882 		confCLIENT_OPTIONS		ClientPortOptions
 4883 		confCONTROL_SOCKET_NAME		ControlSocketName
 4884 		confDEAD_LETTER_DROP		DeadLetterDrop
 4885 		confDEF_AUTH_INFO		DefaultAuthInfo
 4886 		confDF_BUFFER_SIZE		DataFileBufferSize
 4887 		confLDAP_DEFAULT_SPEC		LDAPDefaultSpec
 4888 		confMAX_ALIAS_RECURSION		MaxAliasRecursion
 4889 		confMAX_HEADERS_LENGTH		MaxHeadersLength
 4890 		confMAX_MIME_HEADER_LENGTH	MaxMimeHeaderLength
 4891 		confPID_FILE			PidFile
 4892 		confPROCESS_TITLE_PREFIX	ProcessTitlePrefix
 4893 		confRRT_IMPLIES_DSN		RrtImpliesDsn
 4894 		confTO_CONTROL			Timeout.control
 4895 		confTO_RESOLVER_RETRANS		Timeout.resolver.retrans
 4896 		confTO_RESOLVER_RETRANS_FIRST	Timeout.resolver.retrans.first
 4897 		confTO_RESOLVER_RETRANS_NORMAL	Timeout.resolver.retrans.normal
 4898 		confTO_RESOLVER_RETRY		Timeout.resolver.retry
 4899 		confTO_RESOLVER_RETRY_FIRST	Timeout.resolver.retry.first
 4900 		confTO_RESOLVER_RETRY_NORMAL	Timeout.resolver.retry.normal
 4901 		confTRUSTED_USER		TrustedUser
 4902 		confXF_BUFFER_SIZE		XscriptFileBufferSize
 4903 	CONFIG: confDAEMON_OPTIONS has been replaced by DAEMON_OPTIONS(),
 4904 		which takes the options as argument and can be used
 4905 		multiple times; see cf/README for details.
 4906 	CONFIG: Add a fifth mailer definition to MAILER(`smtp') called
 4907 		"dsmtp".  This mail provides on-demand delivery using the
 4908 		F=% mailer flag described above.  The "dsmtp" mailer
 4909 		definition uses the new DSMTP_MAILER_ARGS which defaults
 4910 		to "IPC $h".
 4912 		and RELAY_MAILER_MAXMSGS for setting the m= equate for the
 4913 		local, smtp, and relay mailers respectively.
 4914 	CONFIG: New variable LOCAL_MAILER_DSN_DIAGNOSTIC_CODE for setting
 4915 		the DSN Diagnostic-Code type for the local mailer.  The
 4916 		value should be changed with care.
 4917 	CONFIG: FEATURE(`local_lmtp') now sets the DSN Diagnostic-Code type
 4918 		for the local mailer to the proper value of "SMTP".
 4919 	CONFIG: All included maps are no longer optional by default; if
 4920 		there there is a problem with a map, sendmail will
 4921 		complain.
 4922 	CONFIG: Removed root from class E; use EXPOSED_USER(`root')
 4923 		to get the old behavior.  Suggested by Joe Pruett
 4924 		of Q7 Enterprises.
 4925 	CONFIG: MASQUERADE_EXCEPTION() defines hosts/subdomains which
 4926 		will not be masqueraded.  Proposed by Arne Wichmann
 4927 		of MPI Saarbruecken, Griff Miller of PGS Tensor,
 4928 		Jayme Cox of Broderbund Software Inc.
 4929 	CONFIG: A list of exceptions for FEATURE(`nocanonify') can be
 4931 		i.e., a list of domains which are passed to $[ ... $]
 4932 		for canonification. Based on an idea from Neil Rickert
 4933 		of Northern Illinois University.
 4934 	CONFIG: If `canonify_hosts' is specified as parameter for
 4935 		FEATURE(`nocanonify') then addresses which have only
 4936 		a hostname, e.g., <user@host>, will be canonified.
 4937 	CONFIG: If FEATURE(`nocanonify') is turned on, a trailing dot is
 4938 		nevertheless added to addresses with more than one component
 4939 		in it.
 4940 	CONFIG: Canonification is no longer attempted for any host or domain
 4941 		in class 'P' ($=P).
 4942 	CONFIG: New class for matching virtusertable entries $={VirtHost} that
 4943 		can be populated by VIRTUSER_DOMAIN or VIRTUSER_DOMAIN_FILE.
 4944 		FEATURE(`virtuser_entire_domain') can be used to apply this
 4945 		class also to entire subdomains.  Hosts in this class are
 4946 		treated as canonical in SCanonify2, i.e., a trailing dot
 4947 		is added.
 4949 		include $={VirtHost} in $=R (hosts allowed to relay).
 4950 	CONFIG: FEATURE(`generics_entire_domain') can be used to apply the
 4951 		genericstable also to subdomains of $=G.
 4952 	CONFIG: Pass "+detail" as %2 for virtusertable lookups.
 4953 		Patch from Noam Freedman from University of Chicago.
 4954 	CONFIG: Pass "+detail" as %1 for genericstable lookups.  Suggested
 4955 		by Raymond S Brand of rsbx.net.
 4956 	CONFIG: Allow @domain in genericstable to override masquerading.
 4957 		Suggested by Owen Duffy from Owen Duffy & Associates.
 4958 	CONFIG: LOCAL_DOMAIN() adds entries to class w.  Suggested by Steve
 4959 		Hubert of University of Washington.
 4960 	CONFIG: OSTYPE(`gnuhurd') has been replaced by OSTYPE(`gnu') as
 4961 		GNU is now the canonical system name.  From Mark
 4962 		Kettenis of the University of Amsterdam.
 4963 	CONFIG: OSTYPE(`unixware7') updates from Larry Rosenman.
 4964 	CONFIG: Do not include '=' in option expansion if there is no value
 4965 		associated with the option.  From Andrew Brown of
 4966 		Graffiti World Wide, Inc.
 4967 	CONFIG: Add MAILER(`qpage') to define a new pager mailer.  Contributed
 4968 		by Philip A. Prindeville of Enteka Enterprise Technology
 4969 		Services.
 4970 	CONFIG: MAILER(`cyrus') was not preserving case for mail folder
 4971 		names.  Problem noted by Randall Winchester of Swales
 4972 		Aerospace.
 4973 	CONFIG: RELAY_MAILER_FLAGS can be used to define additional flags
 4974 		for the relay mailer.  Suggested by Doug Hughes of Auburn
 4975 		University and Brian Candler.
 4976 	CONFIG: LOCAL_MAILER_FLAGS now includes 'P' (Add Return-Path:
 4977 		header) by default.  Suggested by Per Hedeland of Ericsson.
 4978 	CONFIG: Use SMART_HOST for bracketed addresses, e.g., user@[host].
 4979 		Suggested by Kari Hurtta of the Finnish Meteorological
 4980 		Institute.
 4982 		i.e., to set, add, or delete flags.
 4983 	CONFIG: If SMTP AUTH is used then relaying is allowed for any user
 4984 		who authenticated via a "trusted" mechanism, i.e., one that
 4985 		is defined via TRUST_AUTH_MECH(`list of mechanisms').
 4986 	CONFIG: FEATURE(`delay_checks') delays check_mail and check_relay
 4987 		after check_rcpt and allows for exceptions from the checks.
 4988 	CONFIG: Map declarations have been moved into their associated
 4989 		feature files to allow greater flexibility in use of
 4990 		sequence maps.  Suggested by Per Hedeland of Ericsson.
 4991 	CONFIG: New macro LOCAL_MAILER_EOL to override the default end of
 4992 		line string for the local mailer.  Requested by Il Oh of
 4993 		Willamette Industries, Inc.
 4994 	CONFIG: Route addresses are stripped, i.e., <@a,@b,@c:user@d> is
 4995 		converted to <user@d>
 4996 	CONFIG: Reject bogus return address of <@@hostname>, generated by
 4997 		Sun's older, broken configuration files.
 4998 	CONFIG: FEATURE(`nullclient') now provides the full rulesets of a
 4999 		normal configuration, allowing anti-spam checks to be
 5000 		performed.
 5001 	CONFIG: Don't return a permanent error (Relaying denied) if
 5002 		${client_name} can't be resolved just temporarily.
 5003 		Suggested by Kari Hurtta of the Finnish Meteorological
 5004 		Institute.
 5005 	CONFIG: Change numbered rulesets into named (which still can
 5006 		be accessed by their numbers).
 5007 	CONFIG: FEATURE(`nouucp') takes one parameter: reject or nospecial
 5008 		which describes whether to disallow "!" in the local part
 5009 		of an address.
 5010 	CONFIG: Call Local_localaddr from localaddr (S5) which can be used
 5011 		to rewrite an address from a mailer which has the F=5 flag
 5012 		set.  If the ruleset returns a mailer, the appropriate
 5013 		action is taken, otherwise the returned tokens are ignored.
 5014 	CONFIG: cf/ostype/solaris.m4 has been renamed to solaris2.pre5.m4
 5015 		and cf/ostype/solaris2.m4 is now a copy of solaris2.ml.m4.
 5016 		The latter is kept around for backward compatibility.
 5017 	CONFIG: Allow ":D.S.N:" for mailer/virtusertable "error:" entries,
 5018 		where "D.S.N" is an RFC 1893 compliant error code.
 5019 	CONFIG: Use /usr/lbin as confEBINDIR for Compaq Tru64 (Digital UNIX).
 5020 	CONFIG: Remove second space between username and date in UNIX From_
 5021 		line.  Noted by Allan E Johannesen of Worcester Polytechnic
 5022 		Institute.
 5023 	CONFIG: Make sure all of the mailers have complete T= equates.
 5024 	CONFIG: Extend FEATURE(`local_procmail') so it can now take
 5025 		arguments overriding the mailer program, arguments, and
 5026 		mailer definition flags.  This makes it possible to use
 5027 		other programs such as maildrop for local delivery.
 5028 	CONFIG: Emit warning if FEATURE(`local_lmtp') or
 5029 		FEATURE(`local_procmail') is given after MAILER(`local').
 5030 		Patch from Richard A. Nelson of IBM.
 5031 	CONFIG: Add SMTP Authentication information to Received: header
 5032 		default value (confRECEIVED_HEADER).
 5033 	CONFIG: Remove `l' flag from USENET_MAILER_FLAGS as it is not a
 5034 		local mailer.  Problem noted by Per Hedeland of Ericsson.
 5035 	CONTRIB: Added bounce-resender.pl from Brian R. Gaeke of the
 5036 		University of California at Berkeley.
 5037 	CONTRIB: Added domainmap.m4 from Mark D. Roth of the University of
 5038 		Illinois at Urbana-Champaign.
 5039 	CONTRIB: etrn.pl now recognizes bogus host names.  Patch from
 5040 		Bruce Barnett of GE's R&D Lab.
 5041 	CONTRIB: Patches for re-mqueue.pl by Graeme Hewson of Oracle
 5042 		Corporation UK.
 5043 	CONTRIB: Added qtool.pl to assist in managing the queues.
 5044 	DEVTOOLS: Prevent user environment variables from interfering with
 5045 		the Build scripts.  Problem noted by Ezequiel H. Panepucci of
 5046 		Yale University.
 5047 	DEVTOOLS: 'Build -M' will display the obj.* directory which will
 5048 		be used for building.
 5049 	DEVTOOLS: 'Build -A' will display the architecture that would be
 5050 		used for a fresh build.
 5051 	DEVTOOLS: New variable confRANLIB, set automatically by configure.sh.
 5052 	DEVTOOLS: New variable confRANLIBOPTS for the options to send to
 5053 		ranlib.
 5054 	DEVTOOLS: 'Build -O <path>' will have the object files build in
 5055 		<path>/obj.*.  Suggested by Bryan Costales of Exactis.
 5056 	DEVTOOLS: New variable confNO_MAN_BUILD which will prevent the
 5057 		building of the man pages when defined.  Suggested by Bryan
 5058 		Costales.
 5059 	DEVTOOLS: New variables confNO_HELPFILE_INSTALL and
 5060 		confNO_STATISTICS_INSTALL which will prevent the
 5061 		installation of the sendmail helpfile and statistics file
 5062 		respectively.  Suggested by Bryan Costales.
 5063 	DEVTOOLS: Recognize ReliantUNIX as SINIX.  Patch from Gerald Rinske
 5064 		of Siemens Business Services.
 5065 	DEVTOOLS: New variable confSTDIO_TYPE which defines the type of
 5066 		stdio library.  The new buffered file I/O depends on the
 5067 		Torek stdio library.  This option can be either portable or
 5068 		torek.
 5069 	DEVTOOLS: New variables confSRCADD and confSMSRCADD which
 5070 		correspond to confOBJADD and confSMOBJADD respectively.
 5071 		They should contain the C source files for the object files
 5072 		listed in confOBJADD and confSMOBJADD.  These file names
 5073 		will be passed to the 'make depend' stage of compilation.
 5074 	DEVTOOLS: New program specific variables for each of the programs
 5075 		in the sendmail distribution.  Each has the form
 5076 		`conf_prog_ENVDEF', for example, `conf_sendmail_ENVDEF'.
 5077 		The new variables are conf_prog_ENVDEF, conf_prog_LIBS,
 5078 		conf_prog_SRCADD, and conf_prog_OBJADD.
 5079 	DEVTOOLS: Build system redesign.  This should have little affect on
 5080 		building the distribution, but documentation on the changes
 5081 		are in devtools/README.
 5082 	DEVTOOLS: Don't allow 'Build -f file' if an object directory already
 5083 		exists.  Suggested by Valdis Kletnieks of Virginia Tech.
 5084 	DEVTOOLS: Rename confSRCDIR to confSMSRCDIR since it only identifies
 5085 		the path to the sendmail source directory.  confSRCDIR is a
 5086 		new variable which identifies the root of the source
 5087 		directories for all of the programs in the distribution.
 5088 	DEVTOOLS: confSRCDIR and confSMSRCDIR are now determined at Build
 5089 		time.  They can both still be overridden by setting the m4
 5090 		macro.
 5091 	DEVTOOLS: confSBINGRP now defaults to bin instead of kmem.
 5092 	DEVTOOLS: 'Build -Q prefix' uses devtools/Site/prefix.*.m4 for
 5093 		build configurations, and places objects in obj.prefix.*/.
 5094 		Complains as 'Build -f file' does for existing object
 5095 		directories.  Suggested by Tom Smith of Digital Equipment
 5096 		Corporation.
 5097 	DEVTOOLS: Setting confINSTALL_RAWMAN will install unformatted
 5098 		manual pages in the directory tree specified by
 5099 		confMANROOTMAN.
 5100 	DEVTOOLS: If formatting the manual pages fails, copy in the
 5101 		preformatted pages from the distribution.  The new variable
 5102 		confCOPY specifies the copying program.
 5103 	DEVTOOLS: Defining confFORCE_RMAIL will install rmail without
 5104 		question.  Suggested by Terry Lambert of Whistle
 5105 		Communications.
 5106 	DEVTOOLS: confSTFILE and confHFFILE can be used to change the names
 5107 		of the installed statistics and help files, respectively.
 5108 	DEVTOOLS: Remove spaces in `uname -r` output when determining
 5109 		operating system identity.  Problem noted by Erik
 5110 		Wachtenheim of Dartmouth College.
 5111 	DEVTOOLS: New variable confLIBSEARCHPATH to specify the paths that
 5112 		will be search for the libraries specified in confLIBSEARCH.
 5113 		Defaults to "/lib /usr/lib /usr/shlib".
 5114 	DEVTOOLS: New variables confSTRIP and confSTRIPOPTS for specifying
 5115 		how to strip binaries.  These are used by the new
 5116 		install-strip target.
 5117 	DEVTOOLS: New config file site.post.m4 which is included after
 5118 		the others (if it exists).
 5119 	DEVTOOLS: Change order of LIBS: first product specific libraries
 5120 		then the default ones.
 5121 	MAIL.LOCAL: Will not be installed set-user-ID root.  To use mail.local
 5122 		as local delivery agent without LMTP mode, use
 5124 		to set the S flag.
 5125 	MAIL.LOCAL: Do not reject addresses which would otherwise be
 5126 		accepted by sendmail.  Suggested by Neil Rickert of
 5127 		Northern Illinois University.
 5128 	MAIL.LOCAL: New -7 option which causes LMTP mode not to advertise
 5129 		8BITMIME in the LHLO response.  Suggested by Kari Hurtta of
 5130 		the Finnish Meteorological Institute.
 5131 	MAIL.LOCAL: Add support for the maillock() routines by defining
 5132 		MAILLOCK when compiling.  Also requires linking with
 5133 		-lmail.  Patch from Neil Rickert of Northern Illinois
 5134 		University.
 5135 	MAIL.LOCAL: Create a Content-Length: header if CONTENTLENGTH is
 5136 		defined when compiling.  Automatically set for Solaris 2.3
 5137 		and later.  Patch from Neil Rickert of Northern Illinois
 5138 		University.
 5139 	MAIL.LOCAL: Move the initialization of the 'notifybiff' address
 5140 		structure to the beginning of the program.  This ensures that
 5141 		the getservbyname() is done before any seteuid to a possibly
 5142 		unauthenticated user.  If you are using NIS+ and secure RPC
 5143 		on a Solaris system, this avoids syslog messages such as,
 5144 		"authdes_refresh: keyserv(1m) is unable to encrypt session
 5145 		key."  Patch from Neil Rickert of Northern Illinois
 5146 		University.
 5147 	MAIL.LOCAL: Support group writable mail spool files when MAILGID is
 5148 		set to the gid to use (-DMAILGID=6) when compiling.
 5149 		Patch from Neil Rickert of Northern Illinois University.
 5150 	MAIL.LOCAL: When a mail message included lines longer than 2046
 5151 		characters (in LMTP mode), mail.local split the incoming
 5152 		line up into 2046-character output lines (excluding the
 5153 		newline).  If an input line was 2047 characters long
 5154 		(excluding CR-LF) and the last character was a '.',
 5155 		mail.local saw it as the end of input, transfered it to the
 5156 		user mailbox and tried to write an `ok' back to sendmail.
 5157 		If the message was much longer, both sendmail and
 5158 		mail.local would deadlock waiting for each other to read
 5159 		what they have written.  Problem noted by Peter Jeremy of
 5160 		Alcatel Australia Limited.
 5161 	MAIL.LOCAL: New option -b to return a permanent error instead of a
 5162 		temporary error if a mailbox exceeds quota.  Suggested by
 5163 		Neil Rickert of Northern Illinois University.
 5164 	MAIL.LOCAL: The creation of a lockfile is subject to a global
 5165 		timeout to avoid starvation.
 5166 	MAIL.LOCAL: Properly parse addresses with multiple quoted
 5167 		local-parts.  Problem noted by Ronald F. Guilmette of
 5168 		Infinite Monkeys & Co.
 5169 	MAIL.LOCAL: NCR MP/RAS 3.X portability from Tom J. Moore of NCR.
 5170 	MAILSTATS: New -p option to invoke program mode in which stats are
 5171 		printed in a machine readable fashion and the stats file
 5172 		is reset.  Patch from Kevin Hildebrand of the University
 5173 		of Maryland.
 5174 	MAKEMAP: If running as root, automatically change the ownership of
 5175 		generated maps to the TrustedUser as specified in the
 5176 		sendmail configuration file.
 5177 	MAKEMAP: New -C option to accept an alternate sendmail
 5178 		configuration file to use for finding the TrustedUser
 5179 		option.
 5180 	MAKEMAP: New -u option to dump (unmap) a database.  Based on
 5181 		code contributed by Roy Mongiovi of Georgia Tech.
 5182 	MAKEMAP: New -e option to allow empty values.  Suggested by Philip
 5183 		A. Prindeville of Enteka Enterprise Technology Services.
 5184 	MAKEMAP: Compile cleanly on 64-bit operating systems.  Problem
 5185 		noted by Gerald Rinske of Siemens Business Services.
 5186 	OP.ME: Correctly document interaction between F=S and U= mailer
 5187 		equates.  Problem noted by Bob Halley of Internet Engines.
 5188 	OP.ME: Fixup Timeout documentation.  From Graeme Hewson of Oracle
 5189 		Corporation UK.
 5190 	OP.ME: The Timeout [r] option was incorrectly listed as "safe"
 5191 		(e.g., sendmail would not drop root privileges if the
 5192 		option was specified on the command line).  Problem noted
 5193 		by Todd C. Miller of Courtesan Consulting.
 5194 	PRALIASES: Handle the hash and btree map specifications for
 5195 		Berkeley DB.  Patch from Brian J. Coan of the
 5196 		Institute for Global Communications.
 5197 	PRALIASES: Read the sendmail.cf file for the location(s) of the
 5198 		alias file(s) if the -f option is not used.  Patch from
 5199 		John Beck of Sun Microsystems.
 5200 	PRALIASES: New -C option to specify an alternate sendmail
 5201 		configuration file to use for finding alias file(s).  Patch
 5202 		from John Beck of Sun Microsystems.
 5203 	SMRSH: allow shell commands echo, exec, and exit.  Allow command
 5204 		lists using || and &&.  Based on patch from Brian J. Coan
 5205 		of the Institute for Global Communications.
 5206 	SMRSH: Update README for the new Build system.  From Tim Pierce
 5207 		of RootsWeb Genealogical Data Cooperative.
 5208 	VACATION: Added vacation auto-responder to sendmail distribution.
 5209 	LIBSMDB: Added abstracted database library.  Works with Berkeley
 5210 		DB 1.85, Berkeley DB 2.X, Berkeley DB 3.X, and NDBM.
 5211 	Changed Files:
 5212 		The Build script in the various program subdirectories are
 5213 			no longer symbolic links.  They are now scripts
 5214 			which execute the actual Build script in
 5215 			devtools/bin.
 5216 		All the manual pages are now written against -man and not
 5217 			-mandoc as they were previously.
 5218 		Add a simple Makefile to every directory so make instead
 5219 			of Build will work (unless parameters are
 5220 			required for Build).
 5221 	New Directories:
 5222 		devtools/M4/UNIX
 5223 		include
 5224 		libmilter
 5225 		libsmdb
 5226 		libsmutil
 5227 		vacation
 5228 	Renamed Directories:
 5229 		BuildTools => devtools
 5230 		src => sendmail
 5231 	Deleted Files:
 5232 		cf/m4/nullrelay.m4
 5233 		devtools/OS/Linux.ppc
 5234 		devtools/OS/ReliantUNIX
 5235 		devtools/OS/SINIX
 5236 		sendmail/ldap_map.h
 5237 	New Files:
 5238 		INSTALL
 5239 		PGPKEYS
 5240 		cf/cf/generic-linux.cf
 5241 		cf/cf/generic-linux.mc
 5242 		cf/feature/delay_checks.m4
 5243 		cf/feature/dnsbl.m4
 5244 		cf/feature/generics_entire_domain.m4
 5245 		cf/feature/no_default_msa.m4
 5246 		cf/feature/relay_mail_from.m4
 5247 		cf/feature/virtuser_entire_domain.m4
 5248 		cf/mailer/qpage.m4
 5249 		cf/ostype/bsdi.m4
 5250 		cf/ostype/hpux11.m4
 5251 		cf/ostype/openbsd.m4
 5252 		contrib/bounce-resender.pl
 5253 		contrib/domainmap.m4
 5254 		contrib/qtool.8
 5255 		contrib/qtool.pl
 5256 		devtools/M4/depend/AIX.m4
 5257 		devtools/M4/list.m4
 5258 		devtools/M4/string.m4
 5259 		devtools/M4/subst_ext.m4
 5260 		devtools/M4/switch.m4
 5261 		devtools/OS/Darwin
 5262 		devtools/OS/GNU
 5263 		devtools/OS/SINIX.5.43
 5264 		devtools/OS/SINIX.5.44
 5265 		devtools/OS/m88k
 5266 		devtools/bin/find_in_path.sh
 5267 		mail.local/Makefile
 5268 		mailstats/Makefile
 5269 		makemap/Makefile
 5270 		praliases/Makefile
 5271 		rmail/Makefile
 5272 		sendmail/Makefile
 5273 		sendmail/bf.h
 5274 		sendmail/bf_portable.c
 5275 		sendmail/bf_portable.h
 5276 		sendmail/bf_torek.c
 5277 		sendmail/bf_torek.h
 5278 		sendmail/shmticklib.c
 5279 		sendmail/statusd_shm.h
 5280 		sendmail/timers.c
 5281 		sendmail/timers.h
 5282 		smrsh/Makefile
 5283 		vacation/Makefile
 5284 	Renamed Files:
 5285 		cf/ostype/gnuhurd.m4 => cf/ostype/gnu.m4
 5286 		sendmail/cdefs.h => include/sendmail/cdefs.h
 5287 		sendmail/sendmail.hf => sendmail/helpfile
 5288 		sendmail/mailstats.h => include/sendmail/mailstats.h
 5289 		sendmail/pathnames.h => include/sendmail/pathnames.h
 5290 		sendmail/safefile.c => libsmutil/safefile.c
 5291 		sendmail/snprintf.c => libsmutil/snprintf.c
 5292 		sendmail/useful.h => include/sendmail/useful.h
 5293 		cf/ostype/solaris2.m4 => cf/ostype/solaris2.pre5.m4
 5294 	Copied Files:
 5295 		cf/ostype/solaris2.ml.m4 => cf/ostype/solaris2.m4
 5297 8.9.3/8.9.3	1999/02/04
 5298 	SECURITY: Limit message headers to a maximum of 32K bytes (total
 5299 		of all headers in a single message) to prevent a denial of
 5300 		service attack.  This limit will be configurable in 8.10.
 5301 		Problem noted by Michal Zalewski of the "Internet for
 5302 		Schools" project (IdS).
 5303 	Prevent segmentation fault on an LDAP lookup if the LDAP map
 5304 		was closed due to an earlier failure.  Problem noted by
 5305 		Jeff Wasilko of smoe.org.  Fix from Booker Bense of
 5306 		Stanford University and Per Hedeland of Ericsson.
 5307 	Preserve the order of the MIME headers in multipart messages
 5308 		when performing the MIME header length check.  This
 5309 		will allow PGP signatures to function properly.  Problem
 5310 		noted by Lars Hecking of University College, Cork, Ireland.
 5311 	If ruleset 5 rewrote the local address to an :include: directive,
 5312 		the delivery would fail with an "aliasing/forwarding loop
 5313 		broken" error.  Problem noted by Eric C Hagberg of Morgan
 5314 		Stanley.  Fix from Per Hedeland of Ericsson.
 5315 	Allow -T to work for bestmx maps.  Fix from Aaron Schrab of
 5316 		ExecPC Internet Systems.
 5317 	During the transfer of a message in an SMTP transaction, if a
 5318 		TCP timeout occurs, the message would be properly queued
 5319 		for later retry but the failure would be logged as
 5320 		"Illegal Seek" instead of a timeout.  Problem noted by
 5321 		Piotr Kucharski of the Warsaw School of Economics (SGH)
 5322 		and Carles Xavier Munyoz Baldo of CTV Internet.
 5323 	Prevent multiple deliveries on a self-referencing alias if the
 5324 		F=w mailer flag is not set.  Problem noted by Murray S.
 5325 		Kucherawy of Concentric Network Corporation and Per
 5326 		Hedeland of Ericsson.
 5327 	Do not strip empty headers but if there is no value and a
 5328 		default is defined in sendmail.cf, use the default.
 5329 		Problem noted by Philip Guenther of Gustavus Adolphus
 5330 		College and Christopher McCrory of Netus, Inc.
 5331 	Don't inherit information about the sender (notably the full name)
 5332 		in SMTP (-bs) mode, since this might be called from inetd.
 5333 	Accept any 3xx reply code in response to DATA command instead of
 5334 		requiring 354.  This change will match the wording to be
 5335 		published in the updated SMTP specification from the DRUMS
 5336 		group of the IETF.
 5337 	Portability:
 5338 		AIX 4.2.0 or 4.2.1 may become updated by the fileset
 5339 			bos.rte.net level  This introduces the
 5340 			softlink /usr/lib/libbind.a which should
 5341 			not be used.  It conflicts with the resolver
 5342 			built into libc.a.  "bind" has been removed
 5343 			from the confLIBSEARCH BuildTools variable.
 5344 			Users who have installed BIND 8.X will have
 5345 			to add it back in their site.config.m4 file.
 5346 			Problem noted by Ole Holm Nielsen of the
 5347 			Technical University of Denmark.
 5348 		CRAY TS 10.0.x from Sven Nielsen of San Diego
 5349 			Supercomputer Center.
 5350 		Improved LDAP version 3 integration based on input
 5351 			from Kurt D. Zeilenga of the OpenLDAP Foundation,
 5352 			John Beck of Sun Microsystems, and Booker Bense
 5353 			of Stanford University.
 5354 		Linux doesn't have a standard way to get the timezone
 5355 			between different releases.  Back out the
 5356 			change in 8.9.2 and don't attempt to derive
 5357 			a timezone.  Problem reported by Igor S. Livshits
 5358 			of the University of Illinois at Urbana-Champaign
 5359 			and Michael Dickens of Tetranet Communications.
 5360 		Reliant UNIX, the new name for SINIX, from Gert-Jan Looy
 5361 			of Siemens/SNI.
 5362 		SunOS 5.8 from John Beck of Sun Microsystems.
 5363 	CONFIG: SCO UnixWare 2.1 and 7.0 need TZ to get the proper
 5364 		timezone.  Problem noted by Petr Lampa of Technical
 5365 		University of Brno.
 5366 	CONFIG: Handle <@bestmx-host:user@otherhost> addressing properly
 5367 		when using FEATURE(bestmx_is_local).  Patch from Neil W.
 5368 		Rickert of Northern Illinois University.
 5369 	CONFIG: Properly handle source routed and %-hack addresses on
 5370 		hosts which the mailertable remaps to local:.  Patch from
 5371 		Neil W. Rickert of Northern Illinois University.
 5372 	CONFIG: Internal fixup of mailertable local: map value.  Patch from
 5373 		Larry Parmelee of Cornell University.
 5374 	CONFIG: Only add back +detail from host portion of mailer triplet
 5375 		on local mailer triplets if it was originally +detail.
 5376 		Patch from Neil W. Rickert of Northern Illinois University.
 5377 	CONFIG: The bestmx_is_local checking done in check_rcpt would
 5378 		cause later checks to fail.  Patch from Paul J Murphy of
 5379 		MIDS Europe.
 5380 	New Files:
 5381 		BuildTools/OS/CRAYTS.10.0.x
 5382 		BuildTools/OS/ReliantUNIX
 5383 		BuildTools/OS/SunOS.5.8
 5385 8.9.2/8.9.2	1998/12/30
 5386 	SECURITY: Remove five second sleep on accepting daemon connections
 5387 		due to an accept() failure.  This sleep could be used
 5388 		for a denial of service attack.
 5389 	Do not silently ignore queue files with names which are too long.
 5390 		Patch from Bryan Costales of InfoBeat, Inc.
 5391 	Do not store failures closing an SMTP session in persistent
 5392 		host status.  Reported by Graeme Hewson of Oracle
 5393 		Corporation UK.
 5394 	Allow symbolic link forward files if they are in safe directories.
 5395 		Problem noted by Andreas Schott of the Max Planck Society.
 5396 	Missing columns in a text map could cause a segmentation fault.
 5397 		Fix from David Lee of the University of Durham.
 5398 	Note that for 8.9.X, PrivacyOptions=goaway also includes the
 5399 		noetrn flag.  This is scheduled to change in a future
 5400 		version of sendmail.  Problem noted by Theo Van Dinter of
 5401 		Chrysalis Symbolic Designa and Alan Brown of Manawatu
 5402 		Internet Services.
 5403 	When trying to do host canonification in a Wildcard MX
 5404 		environment, try an MX lookup of the hostname without the
 5405 		default domain appended.  Problem noted by Olaf Seibert of
 5406 		Polderland Language & Speech Technology.
 5407 	Reject SMTP RCPT To: commands with only comments (i.e.
 5408 		'RCPT TO: (comment)'.  Problem noted by Earle Ake of
 5409 		Hassler Communication Systems Technology, Inc.
 5410 	Handle any number of %s in the LDAP filter spec.  Patch from
 5411 		Per Hedeland of Ericsson.
 5412 	Clear ldapx open timeouts even if the map open failed to prevent
 5413 		a segmentation fault.  Patch from Wayne Knowles of the
 5414 		National Institute of Water & Atmospheric Research Ltd.
 5415 	Do not syslog envelope clone messages when using address
 5416 		verification (-bv).  Problem noted by Kari Hurtta of the
 5417 		Finnish Meteorological Institute.
 5418 	Continue to perform queue runs while in daemon mode even if the
 5419 		daemon is rejecting connections due to a disk full
 5420 		condition.  Problem noted by JR Oldroyd of TerraNet
 5421 		Internet Services.
 5422 	Include full filename on installation of the sendmail.hf file
 5423 		in case the $HFDIR directory does not exist.  Problem
 5424 		noted by Josef Svitak of Montana State University.
 5425 	Close all maps when exiting the process with one exception.
 5426 		Berkeley DB can use internal shared memory locking for
 5427 		its memory pool.  Closing a map opened by another process
 5428 		will interfere with the shared memory and locks of the
 5429 		parent process leaving things in a bad state.  For
 5430 		Berkeley DB, only close the map if the current process
 5431 		is also the one that opened the map, otherwise only close
 5432 		the map file descriptor.  Thanks to Yoseff Francus of
 5433 		Collective Technologies for volunteering his system for
 5434 		extended testing.
 5435 	Avoid null pointer dereference on XDEBUG output for SMTP reply
 5436 		failures.  Problem noted by Carlos Canau of EUnet Portugal.
 5437 	On mailq and hoststat listings being piped to another program, such
 5438 		as more, if the pipe closes (i.e., the user quits more),
 5439 		stop sending output and exit.  Patch from Allan E Johannesen
 5440 		of Worcester Polytechnic Institute.
 5441 	In accordance with the documentation, LDAP map lookup failures
 5442 		are now considered temporary failures instead of permanent
 5443 		failures unless the -t flag is used in the map definition.
 5444 		Problem noted by Booker Bense of Stanford University and
 5445 		Eric C. Hagberg of Morgan Stanley.
 5446 	Fix by one error reporting on long alias names.  Problem noted by
 5447 		H. Paul Hammann of the Missouri Research and Education
 5448 		Network.
 5449 	Fix DontBlameSendmail=IncludeFileInUnsafeDirPath behavior.  Problem
 5450 		noted by Barry S. Finkel of Argonne National Laboratory.
 5451 	When automatically converting from 8 bit to quoted printable MIME,
 5452 		be careful not to miss a multi-part boundary if that
 5453 		boundary is preceded by a boundary-like line.  Problem
 5454 		noted by Andreas Raschle of Ansid Inc.  Fix from
 5455 		Kari Hurtta of the Finnish Meteorological Institute.
 5456 	Avoid bogus reporting of "LMTP tobuf overflow" when the buffer
 5457 		has enough space for the additional address.  Problem
 5458 		noted by Steve Cliffe of the University of Wollongong.
 5459 	Fix DontBlameSendmail=FileDeliveryToSymlink behavior.  Problem
 5460 		noted by Alex Vorobiev of Swarthmore College.
 5461 	If the check_compat ruleset resolves to the $#discard mailer,
 5462 		discard the current recipient.  Unlike check_relay,
 5463 		check_mail, and check_rcpt, the entire envelope is not
 5464 		discarded.  Problem noted by RZ D. Rahlfs.  Fix from
 5465 		Claus Assmann of Christian-Albrechts-University of Kiel.
 5466 	Avoid segmentation fault when reading ServiceSwitchFile files with
 5467 		bogus formatting.  Patch from Kari Hurtta of the Finnish
 5468 		Meteorological Institute.
 5469 	Support Berkeley DB 2.6.4 API change.
 5470 	OP.ME: Pages weren't properly output on duplexed printers.  Fix
 5471 		from Matthew Black of CSU Long Beach.
 5472 	Portability:
 5473 		Apple Rhapsody from Wilfredo Sanchez of Apple Computer, Inc.
 5474 		Avoid a clash with IRIX 6.2 getopt.h and the UserDatabase
 5475 			option structure.  Problem noted by Ashley M.
 5476 			Kirchner of Photo Craft Laboratories, Inc.
 5477 		Break out IP address to hostname translation for
 5478 			reading network interface addresses into
 5479 			class 'w'.  Patch from John Kennedy of
 5480 			Cal State University, Chico.
 5481 		AIX 4.x use -qstrict with -O3 to prevent the optimized
 5482 			from changing the semantics of the compiled
 5483 			program.  From Simon Travaglia of the
 5484 			University of Waikato, New Zealand.
 5485 		FreeBSD 2.2.2 and later support setusercontext().  From
 5486 			Peter Wemm of DIALix.
 5487 		FreeBSD 3.x fix from Peter Wemm of DIALix.
 5488 		IRIX 5.x has a syslog buffer size of 512 bytes.  From
 5489 			Nao NINOMIYA of Utsunomiya University.
 5490 		IRIX 6.5 64-bit Build support.
 5491 		LDAP Version 3 support from John Beck and Ravi Iyer
 5492 			of Sun Microsystems.
 5493 		Linux does not implement seteuid() properly.  From
 5494 			John Kennedy of Cal State University, Chico.
 5495 		Linux timezone type was set improperly.  From Takeshi Itoh
 5496 			of Bits Co., Ltd.
 5497 		NCR MP-RAS 3.x needs -lresolv for confLIBS.  From
 5498 			Tom J. Moore of NCR.
 5499 		NeXT 4.x correction to man page path.  From J. P. McCann
 5500 			of E I A.
 5501 		System V Rel 5.x (a.k.a UnixWare7 w/o BSD-Compatibility Libs)
 5502 			from Paul Gampe of the Asia Pacific Network
 5503 			Information Center.
 5504 		ULTRIX now requires an optimization limit of 970 from
 5505 			Allan E Johannesen of Worcester Polytechnic
 5506 			Institute.
 5507 		Fix extern declaration for sm_dopr().  Fix from Henk
 5508 			van Oers of Algemeen Nederlands Persbureau.
 5509 	CONFIG: Catch @hostname,user@anotherhost.domain as relaying.
 5510 		Problem noted by Mark Rogov of AirMedia, Inc.  Fix from
 5511 		Claus Assmann of Christian-Albrechts-University of Kiel.
 5512 	CONFIG: Do not refer to http://maps.vix.com/ on RBL rejections as
 5513 		there are multiple RBL's available and the MAPS RBL may
 5514 		not be the one in use.  Suggested by Alan Brown of
 5515 		Manawatu Internet Services.
 5516 	CONFIG: Properly strip route addresses (i.e., @host1:user@host2)
 5517 		when stripping down a recipient address to check for
 5518 		relaying.  Patch from Claus Assmann of
 5519 		Christian-Albrechts-University of Kiel and Neil W Rickert
 5520 		of Northern Illinois University.
 5521 	CONFIG: Allow the access database to override RBL lookups.  Patch
 5522 		from Claus Assmann of Christian-Albrechts-University of
 5523 		Kiel.
 5524 	CONFIG: UnixWare 7 support from Phillip P. Porch of The Porch
 5525 		Dot Com.
 5526 	CONFIG: Fixed check for deferred delivery mode warning.  Patch
 5527 		from Claus Assmann of Christian-Albrechts-University of
 5528 		Kiel and Per Hedeland of Ericsson.
 5529 	CONFIG: If a recipient using % addressing is used, e.g.
 5530 		user%site@othersite, and othersite's MX records are now
 5531 		checked for local hosts if FEATURE(relay_based_on_MX) is
 5532 		used.  Problem noted by Alexander Litvin of Lucky Net Ltd.
 5533 		Patch from Alexander Litvin of Lucky Net Ltd and
 5534 		Claus Assmann of Christian-Albrechts-University of Kiel.
 5535 	MAIL.LOCAL: Prevent warning messages from appearing in the LMTP
 5536 		stream.  Do not allow more than one response per recipient.
 5537 	MAIL.LOCAL: Handle routed addresses properly when using LMTP.  Fix
 5538 		from John Beck of Sun Microsystems.
 5539 	MAIL.LOCAL: Properly check for CRLF when using LMTP.  Fix from
 5540 		John Beck of Sun Microsystems.
 5541 	MAIL.LOCAL: Substitute MAILER-DAEMON for the LMTP empty sender in
 5542 		the envelope From header.
 5543 	MAIL.LOCAL: Accept underscores in hostnames in LMTP mode.
 5544 		Problem noted by Glenn A. Malling of Syracuse University.
 5545 	MAILSTATS: Document msgsrej and msgsdis fields in the man page.
 5546 		Problem noted by Richard Wong of Princeton University.
 5547 	MAKEMAP: Build group list so group writable files are allowed with
 5548 		the -s flag.  Problem noted by Curt Sampson of Internet
 5549 		Portal Services, Inc.
 5550 	PRALIASES: Automatically handle alias files created without the
 5551 		NULL byte at the end of the key.  Patch from John Beck of
 5552 		Sun Microsystems.
 5553 	PRALIASES: Support Berkeley DB 2.6.4 API change.
 5554 	New Files:
 5555 		BuildTools/OS/IRIX64.6.5
 5556 		BuildTools/OS/UnixWare.5.i386
 5557 		cf/ostype/unixware7.m4
 5558 		contrib/smcontrol.pl
 5559 		src/control.c
 5561 8.9.1/8.9.1	1998/07/02
 5562 	If both an OS specific site configuration file and a generic
 5563 		site.config.m4 file existed, only the latter was used
 5564 		instead of both.  Problem noted by Geir Johannessen of
 5565 		the Norwegian University of Science and Technology.
 5566 	Fix segmentation fault while converting 8 bit to 7 bit MIME
 5567 		multipart messages by trying to write to an unopened
 5568 		file descriptor.  Fix from Kari Hurtta of the Finnish
 5569 		Meteorological Institute.
 5570 	Do not assume Message: and Text: headers indicate the end of
 5571 		the header area when parsing MIME headers.  Problem noted
 5572 		by Kari Hurtta of the Finnish Meteorological Institute.
 5573 	Setting the confMAN#SRC Build variable would only effect the
 5574 		installation commands.  The man pages would still be
 5575 		built with .0 extensions.  Problem noted by Bryan
 5576 		Costales of InfoBeat, Inc.
 5577 	Installation of manual pages didn't honor the DESTDIR environment
 5578 		variable.  Problem noted by Bryan Costales of InfoBeat, Inc.
 5579 	If the check_relay ruleset resolved to the discard mailer, messages
 5580 		were still delivered.  Problem noted by Mirek Luc of NASK.
 5581 	Mail delivery to files would fail with an Operating System Error
 5582 		if sendmail was not running as root, i.e., RunAsUser was set.
 5583 		Problem noted by Leonard N. Zubkoff of Dandelion Digital.
 5584 	Prevent MinQueueAge from interfering from queued items created
 5585 		in the future, i.e., if the system clock was set ahead
 5586 		and then back.  Problem noted by Michael Miller of the
 5587 		University of Natal, Pietermaritzburg.
 5588 	Do not advertise ETRN support in ESTMP EHLO reply if noetrn is
 5589 		set in the PrivacyOptions option.  Fix from Ted Rule of
 5590 		Flextech TV.
 5591 	Log invalid persistent host status file lines instead of
 5592 		bouncing the message.  Problem noted by David Lindes of
 5593 		DaveLtd Enterprises.
 5594 	Move creation of empty sendmail.st file from installation to
 5595 		compilation.  Installation may be done from a read-only
 5596 		mount.  Fix from Bryan Costales of InfoBeat, Inc. and Ric
 5597 		Anderson of the Oasis Research Center, Inc.
 5598 	Enforce the maximum number of User Database entries limit.  Problem
 5599 		noted by Gary Buchanan of Credence Systems Inc.
 5600 	Allow dead.letter files in root's home directory.  Problem noted
 5601 		by Anna Ullman of Sun Microsystems.
 5602 	Program deliveries in forward files could be marked unsafe if
 5603 		any directory listed in the ForwardPath option did not
 5604 		exist.  Problem noted by Jorg Bielak of Coastal Web Online.
 5605 	Do not trust the length of the address structure returned by
 5606 		gethostbyname().  Problem noted by Chris Evans of Oxford
 5607 		University.
 5608 	If the SIZE= MAIL From: ESMTP parameter is too large, use the
 5609 		5.3.4 DSN status code instead of 5.2.2.  Similarly, for
 5610 		non-local deliveries, if the message is larger than the
 5611 		mailer maximum message size, use 5.3.4 instead of 5.2.3.
 5612 		Suggested by Antony Bowesman of
 5613 		Fujitsu/TeaWARE Mail/MIME System.
 5614 	Portability:
 5615 		Fix the check for an IP address reverse lookup for
 5616 			use in $&{client_name} on 64 bit platforms.
 5617 			From Gilles Gallot of Institut for Development
 5618 			and Resources in Intensive Scientific computing.
 5619 		BSD-OS uses .0 for man page extensions.  From Jeff Polk
 5620 			of BSDI.
 5621 		DomainOS detection for Build.  Also, version 10.4 and later
 5622 			ship a unistd.h.  Fixes from Takanobu Ishimura of
 5623 			PICT Inc.
 5624 		NeXT 4.x uses /usr/lib/man/cat for its man pages.  From
 5625 			J. P. McCann of E I A.
 5626 		SCO 4.X and 5.X include NDBM support.  From Vlado Potisk
 5627 			of TEMPEST, Ltd.
 5628 	CONFIG: Do not pass spoofed PTR results through resolver for
 5629 		qualification.  Problem noted by Michiel Boland of
 5630 		Digital Valley Internet Professionals; fix from
 5631 		Kari Hurtta of the Finnish Meteorological Institute.
 5632 	CONFIG: Do not try to resolve non-DNS hostnames such as UUCP,
 5633 		BITNET, and DECNET addresses for resolvable senders.
 5634 		Problem noted by Alexander Litvin of Lucky Net Ltd.
 5635 	CONFIG: Work around Sun's broken configuration which sends bounce
 5636 		messages as coming from @@hostname instead of <>.  LMTP
 5637 		would not accept @@hostname.
 5638 	OP.ME: Corrections to complex sendmail startup script from Rick
 5639 		Troxel of the National Institutes of Health.
 5640 	RMAIL: Do not install rmail by default, require 'make force-install'
 5641 		as this rmail isn't the same as others.  Suggested by
 5642 		Kari Hurtta of the Finnish Meteorological Institute.
 5643 	New Files:
 5644 		BuildTools/OS/DomainOS.10.4
 5646 8.9.0/8.9.0	1998/05/19
 5647 	SECURITY: To prevent users from reading files not normally
 5648 		readable, sendmail will no longer open forward, :include:,
 5649 		class, ErrorHeader, or HelpFile files located in unsafe
 5650 		(i.e., group or world writable) directory paths.  Sites
 5651 		which need the ability to override security can use the
 5652 		DontBlameSendmail option.  See the README file for more
 5653 		information.
 5654 	SECURITY: Problems can occur on poorly managed systems, specifically,
 5655 		if maps or alias files are in world writable directories.
 5656 		This fixes the change added to 8.8.6 to prevent links in these
 5657 		world writable directories.
 5658 	SECURITY: Make sure ServiceSwitchFile option file is not a link if
 5659 		it is in a world writable directory.
 5660 	SECURITY: Never pass a tty to a mailer -- if a mailer can get at the
 5661 		tty it may be able to push bytes back to the senders input.
 5662 		Unfortunately this breaks -v mode.  Problem noted by
 5663 		Wietse Venema of the Global Security Analysis Lab at
 5664 		IBM T.J. Watson Research.
 5665 	SECURITY: Empty group list if DontInitGroups is set to true to
 5666 		prevent program deliveries from picking up extra group
 5667 		privileges.  Problem reported by Wolfgang Ley of DFN-CERT.
 5668 	SECURITY: The default value for DefaultUser is now set to the uid and
 5669 		gid of the first existing user mailnull, sendmail, or daemon
 5670 		that has a non-zero uid.  If none of these exist, sendmail
 5671 		reverts back to the old behavior of using uid 1 and gid 1.
 5672 		This is a security problem for Linux which has chosen that
 5673 		uid and gid for user bin instead of daemon.  If DefaultUser
 5674 		is set in the configuration file, that value overrides this
 5675 		default.
 5676 	SECURITY: Since 8.8.7, the check for non-set-user-ID binaries
 5677 		interfered with setting an alternate group id for the
 5678 		RunAsUser option.  Problem noted by Randall Winchester of
 5679 		the University of Maryland.
 5680 	Add support for Berkeley DB 2.X.  Based on patch from John Kennedy
 5681 		of Cal State University, Chico.
 5682 	Remove support for OLD_NEWDB (pre-1.5 version of Berkeley DB).  Users
 5683 		which previously defined OLD_NEWDB=1 must now upgrade to the
 5684 		current version of Berkeley DB.
 5685 	Added support for regular expressions using the new map class regex.
 5686 		From Jan Krueger of Unix-AG of University of Hannover.
 5687 	Support for BIND 8.1.1's hesiod for hesiod maps and hesiod
 5688 		UserDatabases from Randall Winchester of the University
 5689 		of Maryland.
 5690 	Allow any shell for user shell on program deliveries on V1
 5691 		configurations for backwards compatibility on machines which
 5692 		do not have getusershell().  Fix from John Beck of Sun
 5693 		Microsystems.
 5694 	On operating systems which change the process title by reusing the
 5695 		argument vector memory, sendmail could corrupt memory if the
 5696 		last argument was either "-q" or "-d".  Problem noted by
 5697 		Frank Langbein of the University of Stuttgart.
 5698 	Support Local Mail Transfer Protocol (LMTP) between sendmail and
 5699 		mail.local on the F=z flag.
 5700 	Macro-expand the contents of the ErrMsgFile.  Previously this was
 5701 		only done if you had magic characters (0x81) to indicate
 5702 		macro expansion.  Now $x will be expanded.  This means that
 5703 		real dollar signs have to be backslash escaped.
 5704 	TCP Wrappers expects "unknown" in the hostname argument if the
 5705 		reverse DNS lookup for the incoming connection fails.
 5706 		Problem noted by Randy Grimshaw of Syracuse University and
 5707 		Wietse Venema of the Global Security Analysis Lab at
 5708 		IBM T.J. Watson Research.
 5709 	DSN success bounces generated from an invocation of sendmail -t
 5710 		would be sent to both the sender and MAILER-DAEMON.
 5711 		Problem noted by Claus Assmann of
 5712 		Christian-Albrechts-University of Kiel.
 5713 	Avoid "Error 0" messages on delivery mailers which exit with a
 5714 		valid exit value such as EX_NOPERM.  Fix from Andreas Luik
 5715 		of ISA Informationssysteme GmbH.
 5716 	Tokenize $&x expansions on right hand side of rules.  This eliminates
 5717 		the need to use tricks like $(dequote "" $&{client_name} $)
 5718 		to cause the ${client_name} macro to be properly tokenized.
 5719 	Add the MaxRecipientsPerMessage option: this limits the number of
 5720 		recipients that will be accepted in a single SMTP
 5721 		transaction.  After this number is reached, sendmail
 5722 		starts returning "452 Too many recipients" to all RCPT
 5723 		commands.  This can be used to limit the number of recipients
 5724 		per envelope (in particular, to discourage use of the server
 5725 		for spamming).  Note: a better approach is to restrict
 5726 		relaying entirely.
 5727 	Fixed pointer initialization for LDAP lmap struct, fixed -s option
 5728 		to ldapx map and added timeout for ldap_open call to
 5729 		avoid hanging sendmail in the event of hung LDAP servers.
 5730 		Patch from Booker Bense of Stanford University.
 5731 	Allow multiple -qI, -qR, or -qS queue run limiters.  For example,
 5732 		'-qRfoo -qRbar' would deliver mail to recipients with foo or
 5733 		bar in their address.  Patch from Allan E Johannesen of
 5734 		Worcester Polytechnic Institute.
 5735 	The bestmx map will now return a list of the MX servers for a host if
 5736 		passed a column delimiter via the -z map flag.  This can be
 5737 		used to check if the server is an MX server for the recipient
 5738 		of a message.  This can be used to help prevent relaying.
 5739 		Patch from Mitchell Blank Jr of Exec-PC.
 5740 	Mark failures for the *file* mailer and return bounce messages to the
 5741 		sender for those failures.
 5742 	Prevent bogus syslog timestamps on errors in sendmail.cf by
 5743 		preserving the TZ environment variable until TimeZoneSpec
 5744 		has been determined.  Problem noted by Ralf Hildebrandt of
 5745 		Technical University of Braunschweig.  Patch from Per Hedeland
 5746 		of Ericsson.
 5747 	Print test input in address test mode when input is not from the tty
 5748 		when the -v flag is given (i.e., sendmail -bt -v) to make
 5749 		output easier to decipher.  Problem noted by Aidan Nichol
 5750 		of Procter & Gamble.
 5751 	The LDAP map -s flag was not properly parsed and the error message
 5752 		given included the remainder of the arguments instead of
 5753 		solely the argument in error.  Problem noted by Aidan Nichol
 5754 		of Procter & Gamble.
 5755 	New DontBlameSendmail option.  This option allows administrators to
 5756 		bypass some of sendmail's file security checks at the expense
 5757 		of system security.  This should only be used if you are
 5758 		absolutely sure you know the consequences.  The available
 5759 		DontBlameSendmail options are:
 5760 			Safe
 5761 			AssumeSafeChown
 5762 			ClassFileInUnsafeDirPath
 5763 			ErrorHeaderInUnsafeDirPath
 5764 			GroupWritableDirPathSafe
 5765 			GroupWritableForwardFileSafe
 5766 			GroupWritableIncludeFileSafe
 5767 			GroupWritableAliasFile
 5768 			HelpFileinUnsafeDirPath
 5769 			WorldWritableAliasFile
 5770 			ForwardFileInGroupWritableDirPath
 5771 			IncludeFileInGroupWritableDirPath
 5772 			ForwardFileInUnsafeDirPath
 5773 			IncludeFileInUnsafeDirPath
 5774 			ForwardFileInUnsafeDirPathSafe
 5775 			IncludeFileInUnsafeDirPathSafe
 5776 			MapInUnsafeDirPath
 5777 			LinkedAliasFileInWritableDir
 5778 			LinkedClassFileInWritableDir
 5779 			LinkedForwardFileInWritableDir
 5780 			LinkedIncludeFileInWritableDir
 5781 			LinkedMapInWritableDir
 5782 			LinkedServiceSwitchFileInWritableDir
 5783 			FileDeliveryToHardLink
 5784 			FileDeliveryToSymLink
 5785 			WriteMapToHardLink
 5786 			WriteMapToSymLink
 5787 			WriteStatsToHardLink
 5788 			WriteStatsToSymLink
 5789 			RunProgramInUnsafeDirPath
 5790 			RunWritableProgram
 5791 	New DontProbeInterfaces option to turn off the inclusion of all the
 5792 		interface names in $=w on startup.  In particular, if you
 5793 		have lots of virtual interfaces, this option will speed up
 5794 		startup.  However, unless you make other arrangements, mail
 5795 		sent to those addresses will be bounced.
 5796 	Automatically create alias databases if they don't exist and
 5797 		AutoRebuildAliases is set.
 5798 	Add PrivacyOptions=noetrn flag to disable the SMTP ETRN command.
 5799 		Suggested by Christophe Wolfhugel of the Institut Pasteur.
 5800 	Add PrivacyOptions=noverb flag to disable the SMTP VERB command.
 5801 	When determining the client host name ($&{client_name} macro), do
 5802 		a forward (A) DNS lookup on the result of the PTR lookup
 5803 		and compare results.  If they differ or if the PTR lookup
 5804 		fails, &{client_name} will contain the IP address
 5805 		surrounded by square brackets (e.g., []).
 5806 	New map flag: -Tx appends "x" to lookups that return temporary failure
 5807 		(i.e, it is like -ax for the temporary failure case, in
 5808 		contrast to the success case).
 5809 	New syntax to do limited checking of header syntax.  A config line
 5810 		of the form:
 5811 			HHeader: $>Ruleset
 5812 		causes the indicated Ruleset to be invoked on the Header
 5813 		when read.  This ruleset works like the check_* rulesets --
 5814 		that is, it can reject mail on the basis of the contents.
 5815 	Limit the size of the HELO/EHLO parameter to prevent spammers
 5816 		from hiding their connection information in Received:
 5817 		headers.
 5818 	When SingleThreadDelivery is active, deliveries to locked hosts
 5819 		are skipped.  This will cause the delivering process to
 5820 		try the next MX host or queue the message if no other MX
 5821 		hosts are available.  Suggested by Alexander Litvin.
 5822 	The [FILE] mailer type now delivers to the file specified in the
 5823 		A= equate of the mailer definition instead of $u.  It also
 5824 		obeys all of the F= mailer flags such as the MIME
 5825 		7/8 bit conversion flags.  This is useful for defining
 5826 		a mailer which delivers to the same file regardless of the
 5827 		recipient (e.g., 'A=FILE /dev/null' to discard unwanted mail).
 5828 	Do not assume the identity of a remote connection is root@localhost
 5829 		if the remote connection closes the socket before the
 5830 		remote identity can be queried.
 5831 	Change semantics of the F=S mailer flag back to 8.7.5 behavior.
 5832 		Some mailers, including procmail, require that the real
 5833 		uid is left unchanged by sendmail.  Problem noted by Per
 5834 		Hedeland of Ericsson.
 5835 	No longer is the src/obj*/Makefile selected from a large list -- it
 5836 		is now generated using the information in BuildTools/OS/ --
 5837 		some of the details are determined dynamically via
 5838 		BuildTools/bin/configure.sh.
 5839 	The other programs in the sendmail distribution -- mail.local,
 5840 		mailstats, makemap, praliases, rmail, and smrsh -- now use
 5841 		the new Build method which creates an operating system
 5842 		specific Makefile using the information in BuildTools.
 5843 	Make 4xx reply codes to the SMTP MAIL command be non-sticky (i.e.,
 5844 		a failure on one message won't affect future messages to the
 5845 		same host).  This is necessary if the remote host sends
 5846 		a 451 error if the domain of the sender does not resolve
 5847 		as is common in anti-spam configurations.  Problem noted
 5848 		by Mitchell Blank Jr of Exec-PC.
 5849 	New "discard" mailer for check_* rulesets and header checking
 5850 		rulesets.  If one of the above rulesets resolves to the
 5851 		$#discard mailer, the commands will be accepted but the
 5852 		message will be completely discarded after it is accepting.
 5853 		This means that even if only one of the recipients
 5854 		resolves to the $#discard mailer, none of the recipients
 5855 		will receive the mail.  Suggested by Brian Kantor.
 5856 	All but the last cloned envelope of a split envelope were queued
 5857 		instead of being delivered.  Problem noted by John Caruso
 5858 		of CNET: The Computer Network.
 5859 	Fix deadlock situation in persistent host status file locking.
 5860 	Syslog an error if a user forward file could not be read due to
 5861 		an error.  Patch from John Beck of Sun Microsystems.
 5862 	Use the first name returned on machine lookups when canonifying a
 5863 		hostname via NetInfo.  Patch from Timm Wetzel of GWDG.
 5864 	Clear the $&{client_addr}, $&{client_name}, and $&{client_port}
 5865 		macros when delivering a bounce message to prevent
 5866 		rejection by a check_compat ruleset which uses these macros.
 5867 		Problem noted by Jens Hamisch of AgiX Internetservices GmbH.
 5868 	If the check_relay ruleset resolves to the the error mailer, the
 5869 		error in the $: portion of the resolved triplet is used
 5870 		in the rejection message given to the remote machine.
 5871 		Suggested by Scott Gifford of The Internet Ramp.
 5872 	Set the $&{client_addr}, $&{client_name}, and $&{client_port} macros
 5873 		before calling the check_relay ruleset.  Suggested by Scott
 5874 		Gifford of The Internet Ramp.
 5875 	Sendmail would get a segmentation fault if a mailer exited with an
 5876 		exit code of 79.  Problem noted by Aaron Schrab of ExecPC
 5877 		Internet.  Fix from Christophe Wolfhugel of the Pasteur
 5878 		Institute.
 5879 	Separate snprintf/vsnprintf routines into separate file for use by
 5880 		mail.local.
 5881 	Allow multiple map lookups on right hand side, e.g.,
 5882 		R$*	$( host $1 $) $| $( passwd $1 $).  Patch from
 5883 		Christophe Wolfhugel of the Pasteur Institute.
 5884 	Properly generate success DSN messages if requested for aliases
 5885 		which have owner- aliases.  Problem noted by Kari Hurtta
 5886 		of the Finnish Meteorological Institute.
 5887 	Properly display delayed-expansion macros ($&{macroname}) in
 5888 		address test mode (-bt).  Problem noted by Bryan Costales
 5889 		of InfoBeat, Inc.
 5890 	-qR could sometimes match names incorrectly.  Problem noted by
 5891 		Lutz Euler of Lavielle EDV Systemberatung GmbH & Co.
 5892 	Include a magic number and version in the StatusFile for the
 5893 		mailstats command.
 5894 	Record the number of rejected and discarded messages in the
 5895 		StatusFile for display by the mailstats command.  Patch
 5896 		from Randall Winchester of the University of Maryland.
 5897 	IDENT returns where the OSTYPE field equals "OTHER" now list the
 5898 		user portion as IDENT:username@site instead of
 5899 		username@site to differentiate the two.  Suggested by
 5900 		Kari Hurtta of the Finnish Meteorological Institute.
 5901 	Enforce timeout for LDAP queries.  Patch from Per Hedeland of
 5902 		Ericsson.
 5903 	Change persistent host status filename substitution so '/' is
 5904 		replaced by ':' instead of '|' to avoid clashes.  Also
 5905 		avoid clashes with hostnames with leading dots.  Fix from
 5906 		Mitchell Blank Jr. of Exec-PC.
 5907 	If the system lock table is full, only attempt to create a new
 5908 		queue entry five times before giving up.  Previously, it
 5909 		was attempted indefinitely which could cause the partition
 5910 		to run out of inodes.  Problem noted by Suzie Weigand of
 5911 		Stratus Computer, Inc.
 5912 	In verbose mode, warn if the sendmail.cf version is less than the
 5913 		currently supported version.
 5914 	Sorting for QueueSortOrder=host is now case insensitive.  Patch
 5915 		from Randall S. Winchester of the University of Maryland.
 5916 	Properly quote a full name passed via the -F command line option,
 5917 		the Full-Name: header, or the NAME environment variable if
 5918 		it contains characters which must be quoted.  Problem noted
 5919 		by Kari Hurtta of the Finnish Meteorological Institute.
 5920 	Avoid possible race condition that unlocked a mail job before
 5921 		releasing the transcript file on systems that use flock(2).
 5922 		In some cases, this might result in a "Transcript Unavailable"
 5923 		message in error bounces.
 5924 	Accept SMTP replies which contain only a reply code and no
 5925 		accompanying text.  Problem noted by Fernando Fraticelli of
 5926 		Digital Equipment Corporation.
 5927 	Portability:
 5928 		AIX 4.1 uses int for SOCKADDR_LEN_T from Motonori Nakamura
 5929 			of Kyoto University.
 5930 		AIX 4.2 requires <userpw.h> before <usersec.h>.  Patch from
 5931 			Randall S. Winchester of the University of
 5932 			Maryland.
 5933 		AIX 4.3 from Valdis Kletnieks of Virginia Tech CNS.
 5934 		CRAY T3E from Manu Mahonen of Center for Scientific Computing
 5935 			in Finland.
 5936 		Digital UNIX now uses statvfs for determining free
 5937 			disk space.  Patch from Randall S. Winchester of
 5938 			the University of Maryland.
 5939 		HP-UX 11.x from Richard Allen of Opin Kerfi HF and
 5940 			Regis McEwen of Progress Software Corporation.
 5941 		IRIX 64 bit fixes from Kari Hurtta of the Finnish
 5942 			Meteorological Institute.
 5943 		IRIX 6.2 configuration fix for mail.local from Michael Kyle
 5944 			of CIC/Advanced Computing Laboratory.
 5945 		IRIX 6.5 from Thomas H Jones II of SGI.
 5946 		IRIX 6.X load average code from Bob Mende of SGI.
 5947 		QNX from Glen McCready <glen@qnx.com>.
 5948 		SCO 4.2 and 5.x use /usr/bin instead of /usr/ucb for links
 5949 			to sendmail.  Install with group bin instead of kmem
 5950 			as kmem does not exist.  From Guillermo Freige of
 5951 			Gobernacion de la Pcia de Buenos Aires and Paul
 5952 			Fischer of BTG, Inc.
 5953 		SunOS 4.X does not include memmove().  Patch from
 5954 			Per Hedeland of Ericsson.
 5955 		SunOS 5.7 includes getloadavg() function for determining
 5956 			load average.  Patch from John Beck of Sun
 5957 			Microsystems.
 5958 	CONFIG: Increment version number of config file.
 5959 	CONFIG: add DATABASE_MAP_TYPE to set the default type of database
 5960 		map for the various maps.  The default is hash.  Patch from
 5961 		Robert Harker of Harker Systems.
 5962 	CONFIG: new confEBINDIR m4 variable for defining the executable
 5963 		directory for certain programs.
 5964 	CONFIG: new FEATURE(local_lmtp) to use the new LMTP support for
 5965 		local mail delivery.  By the default, /usr/libexec/mail.local
 5966 		is used.  This is expected to be the mail.local shipped
 5967 		with 8.9 which is LMTP capable.  The path is based on the
 5968 		new confEBINDIR m4 variable.
 5969 	CONFIG: Use confEBINDIR in determining path to smrsh for
 5970 		FEATURE(smrsh).  Note that this changes the default from
 5971 		/usr/local/etc/smrsh to /usr/libexec/smrsh.  To obtain the
 5972 		old path for smrsh, use FEATURE(smrsh, /usr/local/etc/smrsh).
 5973 	CONFIG: DOMAIN(generic) changes the default confFORWARD_PATH to
 5974 		include $z/.forward.$w+$h and $z/.forward+$h which allow
 5975 		the user to setup different .forward files for
 5976 		user+detail addressing.
 5978 		and confDONT_BLAME_SENDMAIL to set MaxRecipientsPerMessage,
 5979 		DontProbeInterfaces, and DontBlameSendmail options.
 5980 	CONFIG: by default do not allow relaying (that is, accepting mail
 5981 		from outside your domain and sending it to another host
 5982 		outside your domain).
 5983 	CONFIG: new FEATURE(promiscuous_relay) to allow mail relaying from
 5984 		any site to any site.
 5985 	CONFIG: new FEATURE(relay_entire_domain) allows any host in your
 5986 		domain as defined by the 'm' class ($=m) to relay.
 5987 	CONFIG: new FEATURE(relay_based_on_MX) to allow relaying based on
 5988 		the MX records of the host portion of an incoming recipient.
 5989 	CONFIG: new FEATURE(access_db) which turns on the access database
 5990 		feature.  This database gives you the ability to allow
 5991 		or refuse to accept mail from specified domains for
 5992 		administrative reasons.  By default, names that are listed
 5993 		as "OK" in the access db are domain names, not host names.
 5994 	CONFIG: new confCR_FILE m4 variable for defining the name of the file
 5995 		used for class 'R'.  Defaults to /etc/mail/relay-domains.
 5996 	CONFIG: new command RELAY_DOMAIN(domain) and RELAY_DOMAIN_FILE(file)
 5997 		to add items to class 'R' ($=R) for hosts allowed to relay.
 5998 	CONFIG: new FEATURE(relay_hosts_only) to change the behavior
 5999 		of FEATURE(access_db) and class 'R' to lookup individual
 6000 		host names only.
 6001 	CONFIG: new FEATURE(loose_relay_check).  Normally, if a recipient
 6002 		using % addressing is used, e.g.  user%site@othersite,
 6003 		and othersite is in class 'R', the check_rcpt ruleset
 6004 		will strip @othersite and recheck user@site for relaying.
 6005 		This feature changes that behavior.  It should not be
 6006 		needed for most installations.
 6007 	CONFIG: new FEATURE(relay_local_from) to allow relaying if the
 6008 		domain portion of the mail sender is a local host.  This
 6009 		should only be used if absolutely necessary as it opens
 6010 		a window for spammers.  Patch from Randall S. Winchester of
 6011 		the University of Maryland.
 6012 	CONFIG: new FEATURE(blacklist_recipients) turns on the ability to
 6013 		block incoming mail destined for certain recipient
 6014 		usernames, hostnames, or addresses.
 6015 	CONFIG: By default, MAIL FROM: commands in the SMTP session will be
 6016 		refused if the host part of the argument to MAIL FROM: cannot
 6017 		be located in the host name service (e.g., DNS).
 6018 	CONFIG: new FEATURE(accept_unresolvable_domains) accepts
 6019 		unresolvable hostnames in MAIL FROM: SMTP commands.
 6020 	CONFIG: new FEATURE(accept_unqualified_senders) accepts
 6021 		MAIL FROM: senders which do not include a domain.
 6022 	CONFIG: new FEATURE(rbl) Turns on rejection of hosts found in the
 6023 		Realtime Blackhole List.  You can specify the RBL name
 6024 		server to contact by specifying it as an optional argument.
 6025 		The default is rbl.maps.vix.com.  For details, see
 6026 		http://maps.vix.com/rbl/.
 6027 	CONFIG: Call Local_check_relay, Local_check_mail, and
 6028 		Local_check_rcpt from check_relay, check_mail, and
 6029 		check_rcpt.  Users with local rulesets should place the
 6030 		rules using LOCAL_RULESETS.  If a Local_check_* ruleset
 6031 		returns $#OK, the message is accepted.  If the ruleset
 6032 		returns a mailer, the appropriate action is taken, else
 6033 		the return of the ruleset is ignored.
 6034 	CONFIG: CYRUS_MAILER_FLAGS now includes the /:| mailer flags by
 6035 		default to support file, :include:, and program deliveries.
 6036 	CONFIG: Remove the default for confDEF_USER_ID so the binary can
 6037 		pick the proper default value.  See the SECURITY note
 6038 		above for more information.
 6039 	CONFIG: FEATURE(nodns) now warns the user that the feature is a
 6040 		no-op.  Patch from Kari Hurtta of the Finnish
 6041 		Meteorological Institute.
 6042 	CONFIG: OSTYPE(osf1) now sets DefaultUserID (confDEF_USER_ID) to
 6043 		daemon since DEC's /bin/mail will drop the envelope
 6044 		sender if run as mailnull.  See the Digital UNIX section
 6045 		of src/README for more information.  Problem noted by
 6046 		Kari Hurtta of the Finnish Meteorological Institute.
 6047 	CONFIG: .cf files are now stored in the same directory with the
 6048 		.mc files instead of in the obj directory.
 6049 	CONFIG: New options confSINGLE_LINE_FROM_HEADER,
 6050 		confALLOW_BOGUS_HELO, and confMUST_QUOTE_CHARS for
 6051 		setting SingleLineFromHeader, AllowBogusHELO, and
 6052 		MustQuoteChars respectively.
 6053 	MAIL.LOCAL: support -l flag to run LMTP on stdin/stdout.  This
 6054 		SMTP-like protocol allows detailed reporting of delivery
 6055 		status on a per-user basis.  Code donated by John Myers of
 6056 		CMU (now of Netscape).
 6057 	MAIL.LOCAL: HP-UX support from Randall S. Winchester of the
 6058 		University of Maryland.  NOTE: mail.local is not
 6059 		compatible with the stock HP-UX mail format.  Be sure to
 6060 		read mail.local/README.
 6061 	MAIL.LOCAL: Prevent other mail delivery agents from stealing a
 6062 		mailbox lock.  Patch from Randall S. Winchester of the
 6063 		University of Maryland.
 6064 	MAIL.LOCAL: glibc portability from John Kennedy of Cal State
 6065 		University, Chico.
 6066 	MAIL.LOCAL: IRIX portability from Kari Hurtta of the Finnish
 6067 		Meteorological Institute.
 6068 	MAILSTATS: Display the number of rejected and discarded messages
 6069 		in the StatusFile.  Patch from Randall Winchester of the
 6070 		University of Maryland.
 6071 	MAKEMAP: New -s flag to ignore safety checks on database map files
 6072 		such as linked files in world writable directories.
 6073 	MAKEMAP: Add support for Berkeley DB 2.X.  Remove OLD_NEWDB support.
 6074 	PRALIASES: Add support for Berkeley DB 2.X.
 6075 	PRALIASES: Do not automatically include NDBM support.  Problem
 6076 		noted by Ralf Hildebrandt of the Technical University of
 6077 		Braunschweig.
 6078 	RMAIL: Improve portability for other platforms.  Patches from
 6079 		Randall S. Winchester of the University of Maryland and
 6080 		Kari Hurtta of the Finnish Meteorological Institute.
 6081 	Changed Files:
 6082 		src/Makefiles/Makefile.* files have been modified to use
 6083 			the new build mechanism and are now BuildTools/OS/*.
 6084 		src/makesendmail changed to symbolic link to src/Build.
 6085 	New Files:
 6086 		BuildTools/M4/header.m4
 6087 		BuildTools/M4/depend/BSD.m4
 6088 		BuildTools/M4/depend/CC-M.m4
 6089 		BuildTools/M4/depend/NCR.m4
 6090 		BuildTools/M4/depend/Solaris.m4
 6091 		BuildTools/M4/depend/X11.m4
 6092 		BuildTools/M4/depend/generic.m4
 6093 		BuildTools/OS/AIX.4.2
 6094 		BuildTools/OS/AIX.4.x
 6095 		BuildTools/OS/CRAYT3E.2.0.x
 6096 		BuildTools/OS/HP-UX.11.x
 6097 		BuildTools/OS/IRIX.6.5
 6098 		BuildTools/OS/NEXTSTEP.4.x
 6099 		BuildTools/OS/NeXT.4.x
 6100 		BuildTools/OS/NetBSD.8.3
 6101 		BuildTools/OS/QNX
 6102 		BuildTools/OS/SunOS.5.7
 6103 		BuildTools/OS/dcosx.1.x.NILE
 6104 		BuildTools/README
 6105 		BuildTools/Site/README
 6106 		BuildTools/bin/Build
 6107 		BuildTools/bin/configure.sh
 6108 		BuildTools/bin/find_m4.sh
 6109 		BuildTools/bin/install.sh
 6110 		Makefile
 6111 		cf/cf/Build
 6112 		cf/cf/generic-hpux10.cf
 6113 		cf/feature/accept_unqualified_senders.m4
 6114 		cf/feature/accept_unresolvable_domains.m4
 6115 		cf/feature/access_db.m4
 6116 		cf/feature/blacklist_recipients.m4
 6117 		cf/feature/loose_relay_check.m4
 6118 		cf/feature/local_lmtp.m4
 6119 		cf/feature/promiscuous_relay.m4
 6120 		cf/feature/rbl.m4
 6121 		cf/feature/relay_based_on_MX.m4
 6122 		cf/feature/relay_entire_domain.m4
 6123 		cf/feature/relay_hosts_only.m4
 6124 		cf/feature/relay_local_from.m4
 6125 		cf/ostype/qnx.m4
 6126 		contrib/doublebounce.pl
 6127 		mail.local/Build
 6128 		mail.local/Makefile.m4
 6129 		mail.local/README
 6130 		mailstats/Build
 6131 		mailstats/Makefile.m4
 6132 		makemap/Build
 6133 		makemap/Makefile.m4
 6134 		praliases/Build
 6135 		praliases/Makefile.m4
 6136 		rmail/Build
 6137 		rmail/Makefile.m4
 6138 		rmail/rmail.0
 6139 		smrsh/Build
 6140 		smrsh/Makefile.m4
 6141 		src/Build
 6142 		src/Makefile.m4
 6143 		src/snprintf.c
 6144 	Deleted Files:
 6145 		cf/cf/Makefile (replaced by Makefile.dist)
 6146 		mail.local/Makefile
 6147 		mail.local/Makefile.dist
 6148 		mailstats/Makefile
 6149 		mailstats/Makefile.dist
 6150 		makemap/Makefile
 6151 		makemap/Makefile.dist
 6152 		praliases/Makefile
 6153 		praliases/Makefile.dist
 6154 		rmail/Makefile
 6155 		smrsh/Makefile
 6156 		smrsh/Makefile.dist
 6157 		src/Makefile
 6158 		src/Makefiles/Makefile.AIX.4 (split into AIX.4.x and AIX.4.2)
 6159 		src/Makefiles/Makefile.SMP_DC.OSx.NILE
 6160 			(renamed BuildTools/OS/dcosx.1.x.NILE)
 6161 		src/Makefiles/Makefile.Utah (obsolete platform)
 6162 	Renamed Files:
 6163 		READ_ME => README
 6164 		cf/cf/Makefile.dist => Makefile
 6165 		cf/cf/obj/* => cf/cf/*
 6166 		src/READ_ME => src/README
 6168 8.8.8/8.8.8	1997/10/24
 6169 	If the check_relay ruleset failed, the relay= field was logged
 6170 		incorrectly.  Problem noted by Kari Hurtta of the Finnish
 6171 		Meteorological Institute.
 6172 	If /usr/tmp/dead.letter already existed, sendmail could not
 6173 		add additional bounces to it.  Problem noted by Thomas J.
 6174 		Arseneault of SRI International.
 6175 	If an SMTP mailer used a non-standard port number for the outgoing
 6176 		connection, it would be displayed incorrectly in verbose mode.
 6177 		Problem noted by John Kennedy of Cal State University, Chico.
 6178 	Log the ETRN parameter specified by the client before altering them
 6179 		to internal form.  Suggested by Bob Kupiec of GES-Verio.
 6180 	EXPN and VRFY SMTP commands on malformed addresses were logging as
 6181 		User unknown with bogus delay= values.  Change them to log
 6182 		the same as compliant addresses.  Problem noted by Kari E.
 6183 		Hurtta of the Finnish Meteorological Institute.
 6184 	Ignore the debug resolver option unless using sendmail debug trace
 6185 		option for resolver.  Problem noted by Greg Nichols of Wind
 6186 		River Systems.
 6187 	If SingleThreadDelivery was enabled and the remote server returned a
 6188 		protocol error on the DATA command, the connection would be
 6189 		closed but the persistent host status file would not be
 6190 		unlocked so other sendmail processes could not deliver to
 6191 		that host.  Problem noted by Peter Wemm of DIALix.
 6192 	If queueing up a message due to an expensive mailer, don't increment
 6193 		the number of delivery attempts or set the last delivery
 6194 		attempt time so the message will be delivered on the next
 6195 		queue run regardless of MinQueueAge.  Problem noted by
 6196 		Brian J. Coan of the Institute for Global Communications.
 6197 	Authentication warnings of "Processed from queue _directory_" and
 6198 		"Processed by _username_ with -C _filename_" would be logged
 6199 		with the incorrect timestamp.  Problem noted by Kari E. Hurtta
 6200 		of the Finnish Meteorological Institute.
 6201 	Use a better heuristic for detecting GDBM.
 6202 	Log null connections on dropped connections.  Problem noted by
 6203 		Jon Lewis of Florida Digital Turnpike.
 6204 	If class dbm maps are rebuilt, sendmail will now detect this and
 6205 		reopen the map.  Previously, they could give stale
 6206 		results during a single message processing (but would
 6207 		recover when the next message was received).  Fix from
 6208 		Joe Pruett of Q7 Enterprises.
 6209 	Do not log failures such as "User unknown" on -bv or SMTP VRFY
 6210 		requests.  Problem noted by Kari E. Hurtta of the
 6211 		Finnish Meteorological Institute.
 6212 	Do not send a bounce message back to the sender regarding bad
 6213 		recipients if the SMTP connection is dropped before the
 6214 		message is accepted.  Problem noted by Kari E. Hurtta of the
 6215 		Finnish Meteorological Institute.
 6216 	Use "localhost" instead of "[UNIX: localhost]" when connecting to
 6217 		sendmail via a UNIX pipe.  This will allow rulesets using
 6218 		$&{client_name} to process without sending the string through
 6219 		dequote.  Problem noted by Alan Barrett of Internet Africa.
 6220 	A combination of deferred delivery mode, a double bounce situation,
 6221 		and the inability to save a bounce message to
 6222 		/var/tmp/dead.letter would cause sendmail to send a bounce
 6223 		to postmaster but not remove the offending envelope from the
 6224 		queue causing it to create a new bounce message each time the
 6225 		queue was run.  Problem noted by Brad Doctor of Net Daemons
 6226 		Associates.
 6227 	Remove newlines from hostname information returned via DNS.  There are
 6228 		no known security implications of newlines in hostnames as
 6229 		sendmail filters newlines in all vital areas; however, this
 6230 		could cause confusing error messages.
 6231 	Starting with sendmail 8.8.6, mail sent with the '-t' option would be
 6232 		rejected if any of the specified addresses were bad.  This
 6233 		behavior was modified to only reject the bad addresses and not
 6234 		the entire message.  Problem noted by Jozsef Hollosi of
 6235 		SuperNet, Inc.
 6236 	Use Timeout.fileopen when delivering mail to a file.  Suggested by
 6237 		Bryan Costales of InfoBeat, Inc.
 6238 	Display the proper Final-Recipient on DSN messages for non-SMTP
 6239 		mailers.  Problem noted by Kari E. Hurtta of the
 6240 		Finnish Meteorological Institute.
 6241 	An error in calculating the available space in the list of addresses
 6242 		for logging deliveries could cause an address to be silently
 6243 		dropped.
 6244 	Include the initial user environment if sendmail is restarted via
 6245 		a HUP signal.  This will give room for the process title.
 6246 		Problem noted by Jon Lewis of Florida Digital Turnpike.
 6247 	Mail could be delivered without a body if the machine does not
 6248 		support flock locking and runs out of processes during
 6249 		delivery.  Fix from Chuck Lever of the University of Michigan.
 6250 	Drop recipient address from 251 and 551 SMTP responses per RFC 821.
 6251 		Problem noted by Kari E. Hurtta of the Finnish Meteorological
 6252 		Institute.
 6253 	Make sure non-rebuildable database maps are opened before the
 6254 		rebuildable maps (i.e., alias files) in case the database maps
 6255 		are needed for verifying the left hand side of the aliases.
 6256 		Problem noted by Lloyd Parkes of Victoria University.
 6257 	Make sure sender RFC822 source route addresses are alias expanded for
 6258 		bounce messages.  Problem noted by Juergen Georgi of
 6259 		RUS University of Stuttgart.
 6260 	Minor lint fixes.
 6261 	Return a temporary error instead of a permanent error if an LDAP map
 6262 		search returns an error.  This will allow sequenced maps which
 6263 		use other LDAP servers to be checked.  Fix from Booker Bense
 6264 		of Stanford University.
 6265 	When automatically converting from quoted printable to 8bit text do
 6266 		not pad bare linefeeds with a space.  Problem noted by Theo
 6267 		Nolte of the University of Technology Aachen, Germany.
 6268 	Portability:
 6269 		Non-standard C compilers may have had a problem compiling
 6270 			conf.c due to a standard C external declaration of
 6271 			setproctitle().  Problem noted by Ted Roberts of
 6272 			Electronic Data Systems.
 6273 		AUX: has a broken O_EXCL implementation.  Reported by Jim
 6274 			Jagielski of jaguNET Access Services.
 6275 		BSD/OS: didn't compile if HASSETUSERCONTEXT was defined.
 6276 		Digital UNIX: Digital UNIX (and possibly others) moves
 6277 			loader environment variables into the loader memory
 6278 			area.  If one of these environment variables (such as
 6279 			LD_LIBRARY_PATH) was the last environment variable,
 6280 			an invalid memory address would be used by the process
 6281 			title routine causing memory corruption.  Problem
 6282 			noted by Sam Hartman of Mesa Internet Systems.
 6283 		GNU libc: uses an enum for _PC_CHOWN_RESTRICTED which caused
 6284 			chownsafe() to always return 0 even if the OS does
 6285 			not permit file giveaways.  Problem noted by
 6286 			Yasutaka Sumi of The University of Tokyo.
 6287 		IRIX6: Syslog buffer size set to 512 bytes.  Reported by
 6288 			Gerald Rinske of Siemens Business Services VAS.
 6289 		Linux: Pad process title with NULLs.  Problem noted by
 6290 			Jon Lewis of Florida Digital Turnpike.
 6291 		SCO OpenServer 5.0: SIOCGIFCONF ioctl call returns an
 6292 			incorrect value for the number of interfaces.
 6293 			Problem noted by Chris Loelke of JetStream Internet
 6294 			Services.
 6295 		SINIX: Update for Makefile and syslog buffer size from Gerald
 6296 			Rinske of Siemens Business Services VAS.
 6297 		Solaris: Make sure HASGETUSERSHELL setting for SunOS is not
 6298 			used on a Solaris machine.  Problem noted by
 6299 			Stephen Ma of Jtec Pty Limited.
 6300 		CONFIG: SINIX: Update from Gerald Rinske of Siemens Business
 6301 			Services VAS.
 6302 	MAKEMAP: Use a better heuristic for detecting GDBM.
 6303 	CONTRIB: expn.pl: Updated version from the author, David Muir Sharnoff.
 6304 	OP.ME: Document the F=i mailer flag.  Problem noted by Per Hedeland of
 6305 			Ericsson.
 6307 8.8.7/8.8.7	1997/08/03
 6308 	If using Berkeley DB on systems without O_EXLOCK (open a file with
 6309 		an exclusive lock already set -- i.e., almost all systems
 6310 		except 4.4-BSD derived systems), the initial attempt at
 6311 		rebuilding aliases file if the database didn't already
 6312 		exist would fail.  Patch from Raymund Will of LST Software
 6313 		GmbH.
 6314 	Bogus incoming SMTP commands would reset the SMTP conversation.
 6315 		Problem noted by Fredrik Jönsson of the Royal Institute
 6316 		of Technology, Stockholm.
 6317 	Since TCP Wrappers includes setenv(), unsetenv(), and putenv(),
 6318 		some environments could give "multiple definitions" for these
 6319 		routines during compilation.  If using TCP Wrappers, assume
 6320 		that these routines are included as though they were in the
 6321 		C library.  Patch from Robert La Ferla.
 6322 	When a NEWDB database map was rebuilt at the same time it was being
 6323 		used by a queue run, the maps could be left locked for the
 6324 		duration of the queue run, causing other processes to hang.
 6325 		Problem noted by Kendall Libby of Shore.NET.
 6326 	In some cases, NoRecipientAction=add-bcc was being ignored, so the
 6327 		mail was passed on without any recipient header.  This could
 6328 		cause problems downstream.  Problem noted by Xander Jansen
 6329 		of SURFnet ExpertiseCentrum.
 6330 	Give error when GDBM is used with sendmail.  GDBM's locking and
 6331 		linking of the .dir and .pag files interferes with sendmail's
 6332 		locking and security checks.  Problems noted by Fyodor
 6333 		Yarochkin of the Kyrgyz Republic FreeNet.
 6334 	Don't fsync qf files if SuperSafe option is not set.
 6335 	Avoid extra calls to gethostbyname for addresses for which a
 6336 		gethostbyaddr found no value.  Also, ignore any returns
 6337 		from gethostbyaddr that look like a dotted quad.
 6338 	If PTR lookup fails when looking up an SMTP peer, don't tag it as
 6339 		"may be forged", since at the network level we pretty much
 6340 		have to assume that the information is good.
 6341 	In some cases, errors during an SMTP session could leave files
 6342 		open or locked.
 6343 	Better handling of missing file descriptors (0, 1, 2) on startup.
 6344 	Better handling of non-set-user-ID binaries -- avoids certain obnoxious
 6345 		errors during testing.
 6346 	Errors in file locking of NEWDB maps had the incorrect file name
 6347 		printed in the error message.
 6348 	If the AllowBogusHELO option were set and an EHLO with a bad or
 6349 		missing parameter were issued, the EHLO behaved like a HELO.
 6350 	Load limiting never kicked in for incoming SMTP transactions if the
 6351 		DeliveryMode=background and any recipient was an alias or
 6352 		had a .forward file.  From Nik Conwell of Boston University.
 6353 	On some non-Posix systems, the decision of whether chown(2) permits
 6354 		file giveaway was undefined.  From Tetsu Ushijima of the
 6355 		Tokyo Institute of Technology.
 6356 	Fix race condition that could cause the body of a message to be
 6357 		lost (so only the header was delivered).  This only occurs
 6358 		on systems that do not use flock(2), and only when a queue
 6359 		runner runs during a critical section in another message
 6360 		delivery.  Based on a patch from Steve Schweinhart of
 6361 		Results Computing.
 6362 	If a qf file was found in a mail queue directory that had a problem
 6363 		(wrong ownership, bad format, etc.) and the file name was
 6364 		exactly MAXQFNAME bytes long, then instead of being tried
 6365 		once, it would be tried on every queue run.  Problem noted
 6366 		by Bryan Costales of Mercury Mail.
 6367 	If the system supports an st_gen field in the status structure,
 6368 		include it when reporting that a file has changed after open.
 6369 		This adds a new compile flag, HAS_ST_GEN (0/1 option).
 6370 		This out to be checked as well as reported, since it is
 6371 		theoretically possible for an attacker to remove a file after
 6372 		it is opened and replace it with another file that has the
 6373 		same i-number, but some filesystems (notably AFS) return
 6374 		garbage in this field, and hence always look like the file
 6375 		has changed.  As a practical matter this is not a security
 6376 		problem, since the files can be neither hard nor soft links,
 6377 		and on no filesystem (that I am aware of) is it possible to
 6378 		have two files on the same filesystem with the same i-number
 6379 		simultaneously.
 6380 	Delete the root Makefile from the distribution -- it is only for
 6381 		use internally, and does not work at customer sites.
 6382 	Fix botch that caused the second MAIL FROM: command in a single
 6383 		transaction to clear the entire transaction.  Problem
 6384 		noted by John Kennedy of Cal State University, Chico.
 6385 	Work properly on machines that have _PATH_VARTMP defined without
 6386 		a trailing slash.  (And a pox on vendors that decide to
 6387 		ignore the established conventions!)  Problem noted by
 6388 		Gregory Neil Shapiro of WPI.
 6389 	Internal changes to make it easier to add another protocol family
 6390 		(intended for IPv6).  Patches are from John Kennedy of
 6391 		CSU Chico.
 6392 	In certain cases, 7->8 bit MIME decoding of Base64 text could leave
 6393 		an extra space at the beginning of some lines.  Problem
 6394 		noted by Charles Karney of Princeton University; fix based
 6395 		on a patch from Christophe Wolfhugel.
 6396 	Portability:
 6397 		Allow _PATH_VENDOR_CF to be set in Makefile for consistency
 6398 			with the _Sendmail_ book, 2nd edition.  Note that
 6399 			the book is actually wrong: _PATH_SENDMAILCF should
 6400 			be used instead.
 6401 		AIX 3.x: Include <sys/select.h>.  Patch from Gene Rackow
 6402 			of Argonne National Laboratory.
 6403 		OpenBSD from from Paul DuBois of the University of Wisconsin.
 6404 		RISC/os 4.0 from Paul DuBois of the University of Wisconsin.
 6405 		SunOS: Include <memory.h> to fix warning from util.c.  From
 6406 			James Aldridge of EUnet Ltd.
 6407 		Solaris: Change STDIR (location of status file) to /etc/mail
 6408 			in Makefiles.
 6409 		Linux, Dynix, UNICOS: Remove -DNDBM and -lgdbm from
 6410 			Makefiles.  Use NEWDB on Linux instead.
 6411 		NCR MP-RAS 3.x with STREAMware TCP/IP: SIOCGIFNUM ioctl
 6412 			exists but behaves differently than other OSes.
 6413 			Add SIOCGIFNUM_IS_BROKEN compile flag to get
 6414 			around the problem.  Problem noted by Tom Moore of
 6415 			NCR Corp.
 6416 		HP-UX 9.x: fix compile warnings for old select API.  Problem
 6417 			noted by Tom Smith of Digital Equipment Corp.
 6418 		UnixWare 2.x: compile warnings on offsetof macro.  Problem
 6419 			noted by Tom Good of the Community Access Information
 6420 			Resource Network
 6421 		SCO 4.2: compile problems caused by a change in the type of
 6422 			the "length" parameters passed to accept, getpeername,
 6423 			getsockname, and getsockopt.  Adds new compile flags
 6424 			SOCKADDR_SIZE_T and SOCKOPT_SIZE_T.  Problem reported
 6425 			by Tom Good of St. Vincent's North Richmond Community
 6426 			Mental Health Center Residential Services.
 6427 		AIX 4: Use size_t for SOCKADDR_SIZE_T and SOCKOPT_SIZE_T.
 6428 			Suggested by Brett Hogden of Rochester Gas & Electric
 6429 			Corp.
 6430 		Linux: avoid compile problem for versions of <setjmp.h> that
 6431 			#define both setjmp and longjmp.  Problem pointed out
 6432 			by J.R. Oldroyd of TerraNet.
 6433 		CONFIG: SCO UnixWare 2.1: Support for OSTYPE(sco-uw-2.1)
 6434 			from Christopher Durham of SCO.
 6435 		CONFIG: NEXTSTEP: define confCW_FILE to
 6436 			/etc/sendmail/sendmail.cw to match the usual
 6437 			configuration.  Patch from Dennis Glatting of
 6438 			PlainTalk.
 6439 	CONFIG: MAILER(fax) called a program that hasn't existed for a long
 6440 		time.  Convert to use the HylaFAX 4.0 conventions.  Suggested
 6441 		by Harry Styron.
 6442 	CONFIG: Improve sample anti-spam rulesets in cf/cf/knecht.mc.  These
 6443 		are the rulesets in use on sendmail.org.
 6444 	MAKEMAP: give error on GDBM files.
 6445 	MAIL.LOCAL: Make error messages a bit more explicit, for example,
 6446 		telling more details on what actually changed when "file
 6447 		changed after open".
 6448 	CONTRIB: etrn.pl: Ignore comments in Fw files.  Support multiple Fw
 6449 		files.
 6450 	CONTRIB: passwd-to-alias.pl: Handle 8 bit characters and '-'.
 6451 	NEW FILES:
 6452 		src/Makefiles/Makefile.OpenBSD
 6453 		src/Makefiles/Makefile.RISCos.4_0
 6454 		test/t_exclopen.c
 6455 		cf/ostype/sco-uw-2.1.m4
 6457 		Makefile
 6459 8.8.6/8.8.6	1997/06/14
 6460 	    *************************************************************
 6461 	    * The extensive assistance of Gregory Neil Shapiro of WPI	*
 6462 	    * in preparing this release is gratefully appreciated.	*
 6463 	    * Sun Microsystems has also provided resources toward	*
 6464 	    * continued sendmail development.				*
 6465 	    *************************************************************
 6466 	SECURITY: A few systems allow an open with the O_EXCL|O_CREAT open
 6467 		mode bits set to create a file that is a symbolic link that
 6468 		points nowhere.  This makes it possible to create a root
 6469 		owned file in an arbitrary directory by inserting the symlink
 6470 		into a writable directory after the initial lstat(2) check
 6471 		determined that the file did not exist.  The only verified
 6472 		example of a system having these odd semantics for O_EXCL
 6473 		and symbolic links was HP-UX prior to version 9.07.  Most
 6474 		systems do not have the problem, since a exclusive create
 6475 		of a file disallows symbolic links.  Systems that have been
 6476 		verified to NOT have the problem include AIX 3.x, *BSD,
 6477 		DEC OSF/1, HP-UX 9.07 and higher, Linux, SunOS, Solaris,
 6478 		and Ultrix.  This is a potential exposure on systems that
 6479 		have this bug and which do not have a MAILER-DAEMON alias
 6480 		pointing at a legitimate account, since this will cause old
 6481 		mail to be dropped in /var/tmp/dead.letter.
 6482 	SECURITY: Problems can occur on poorly managed systems, specifically,
 6483 		if maps or alias files are in world writable directories.
 6484 		If your system has alias maps in writable directories, it
 6485 		is potentially possible for an attacker to replace the .db
 6486 		(or .dir and .pag) files by symbolic links pointing at
 6487 		another database; this can be used either to expose
 6488 		information (e.g., by pointing an alias file at /etc/spwd.db
 6489 		and probing for accounts), or as a denial-of-service attack
 6490 		(by trashing the password database).  The fix disallows
 6491 		symbolic links entirely when rebuilding alias files or on
 6492 		maps that are in writable directories, and always warns on
 6493 		writable directories; 8.9 will probably consider writable
 6494 		directories to be fatal errors.  This does not represent an
 6495 		exposure on systems that have alias files in unwritable
 6496 		system directories.
 6497 	SECURITY: disallow .forward or :include: files that are links (hard
 6498 		or soft) if the parent directory (or any directory in the
 6499 		path) is writable by anyone other than the owner.  This is
 6500 		similar to the previous case for user files.  This change
 6501 		should not affect most systems, but is necessary to prevent
 6502 		an attacker who can write the directory from pointing such
 6503 		files at other files that are readable only by the owner.
 6504 	SECURITY: Tighten safechown rules: many systems will say that they
 6505 		have a safe (restricted to root) chown even on files that
 6506 		are mounted from another system that allows owners to give
 6507 		away files.  The new rules are very strict, trusting file
 6508 		ownership only in those few cases where the system has
 6509 		been verified to be at least as paranoid as necessary.
 6510 		However, it is possible to relax the rules to partially
 6511 		trust the ownership if the directory path is not world or
 6512 		group writable.  This might allow someone who has a legitimate
 6513 		:include: file (referenced directly from /etc/aliases) to
 6514 		become another non-root user if the :include: file is in a
 6515 		non-writable directory on an NFS-mounted filesystem where
 6516 		the local system says that giveaway is denied but it is
 6517 		actually permitted.  I believe this to be a very small set
 6518 		of cases.  If in doubt, do not point :include: aliases at
 6519 		NFS-mounted filesystems.
 6520 	SECURITY: When setting a numeric group id using the RunAsUser option
 6521 		(e.g., "O RunAsUser=10:20", the group id would not be set.
 6522 		Implicit group ids (e.g., "O RunAsUser=mailnull") or alpha
 6523 		group ids (e.g., "O RunAsUser=mailuser:mailgrp") worked fine.
 6524 		The user id was still set properly.  Problem noted by Uli
 6525 		Pralle of the Technical University of Berlin.
 6526 	Save the initial gid set for use when checking for if the
 6527 		PrivacyOptions=restrictmailq option is set.  Problem reported
 6528 		by Wolfgang Ley of DFN-CERT.
 6529 	Make 55x reply codes to the SMTP DATA-"." be non-sticky (i.e., a
 6530 		failure on one message won't affect future messages to the
 6531 		same host).
 6532 	IP source route printing had an "off by one" error that would
 6533 		affect any options that came after the route option.  Patch
 6534 		from Theo de Raadt.
 6535 	The "Message is too large" error didn't successfully bounce the error
 6536 		back to the sender.  Problem reported by Stephen More of
 6537 		PSI; patch from Gregory Neil Shapiro of WPI.
 6538 	Change SMTP status code 553 to map into Extended code 5.1.0 (instead
 6539 		of 5.1.3); it apparently gets used in multiple ways.
 6540 		Suggested by John Myers of Portola Communications.
 6541 	Fix possible extra null byte generated during collection if errors
 6542 		occur at the beginning of the stream.  Patch contributed by
 6543 		Andrey A. Chernov and Gregory Neil Shapiro.
 6544 	Code changes to avoid possible reentrant call of malloc/free within
 6545 		a signal handler.  Problem noted by John Beck of Sun
 6546 		Microsystems.
 6547 	Move map initialization to be earlier so that check_relay ruleset
 6548 		will have the latest version of the map data.  Problem noted
 6549 		by Paul Forgey of Metainfo; patch from Gregory Neil Shapiro.
 6550 	If there are fatal errors during the collection phase (e.g., message
 6551 		too large) don't send the bogus message.
 6552 	Avoid "cannot open xfAAA00000" messages when sending to aliases that
 6553 		have errors and have owner- aliases.  Problem noted by Michael
 6554 		Barber of MTU; fix from Gregory Neil Shapiro of WPI.
 6555 	Avoid null pointer dereference on illegal Boundary= parameters in
 6556 		multipart/mixed Content-Type: header.  Problem noted by
 6557 		Richard Muirden of RMIT University.
 6558 	Always print error messages during newaliases (-bi) even if the
 6559 		ErrorMode is not set to "print".  Fix from Gregory Neil
 6560 		Shapiro.
 6561 	Test mode could core dump if you did a /map lookup in an optional map
 6562 		that could not be opened.  Based on a fix from John Beck of
 6563 		Sun Microsystems.
 6564 	If DNS is misconfigured so that the last MX record tried points to
 6565 		a host that does not have an A record, but other MX records
 6566 		pointed to something reasonable, don't bounce the message
 6567 		with a "host unknown" error.  Note that this should really
 6568 		be fixed in the zone file for the domain.  Problem noted by
 6569 		Joe Rhett of Navigist, Inc.
 6570 	If a map fails (e.g., DNS times out) on all recipient addresses, mark
 6571 		the message as having been tried; otherwise the next queue
 6572 		run will not realize that this is a second attempt and will
 6573 		retry immediately.  Problem noted by Bryan Costales of
 6574 		Mercury Mail.
 6575 	If the clock is set backwards, and a MinQueueAge is set, no jobs
 6576 		will be run until the later setting of the clock is reached.
 6577 		"Problem" (I use the term loosely) noted by Eric Hagberg of
 6578 		Morgan Stanley.
 6579 	If the load average rises above the cutoff threshold (above which
 6580 		sendmail will not process the queue at all) during a queue
 6581 		run, abort the queue run immediately.  Problem noted by
 6582 		Bryan Costales of Mercury Mail.
 6583 	The variable queue processing algorithm (based on the message size,
 6584 		number of recipients, message precedence, and job age) was
 6585 		non-functional -- either the entire queue was processed or
 6586 		none of the queue was processed.  The updated algorithm
 6587 		does no queue run if a single recipient zero size job will
 6588 		not be run.
 6589 	If there is a fatal ("panic") message that will cause sendmail to
 6590 		die immediately, never hold the error message for future
 6591 		printing.
 6592 	Force ErrorMode=print in -bt mode so that all errors are printed
 6593 		regardless of the setting of the ErrorMode option in the
 6594 		configuration file.  Patch from Gregory Neil Shapiro.
 6595 	New compile flag HASSTRERROR says that this OS has the strerror(3)
 6596 		routine available in one of the libraries.  Use it in conf.h.
 6597 	The -m (match only) flag now works on host class maps.
 6598 	If class hash or btree maps are rebuilt, sendmail will now detect
 6599 		this and reopen the map.  Previously, they could give
 6600 		erroneous results during a single message processing
 6601 		(but would recover when the next message was received).
 6602 	Don't delete zero length queue files when doing queue runs until the
 6603 		files are at least ten minutes old.  This avoids a potential
 6604 		race condition: the creator creates the qf file, getting back
 6605 		a file descriptor.  The queue runner locks it and deletes it
 6606 		because it is zero length.  The creator then writes the
 6607 		descriptor that is now for a disconnected file, and the
 6608 		job goes away.  Based on a suggestion by Bryan Costales.
 6609 	When determining the "validated" host name ($_ macro), do a forward
 6610 		(A) DNS lookup on the result of the PTR lookup and compare
 6611 		results.  If they differ or if the PTR lookup fails, tag the
 6612 		address as "may be forged".
 6613 	Log null connections (i.e., hosts that connect but do not do any
 6614 		substantive activity on the connection before disconnecting;
 6615 		"substantive" is defined to be MAIL, EXPN, VRFY, or ETRN.
 6616 	Always permit "writes" to /dev/null regardless of the link count.
 6617 		This is safe because /dev/null is special cased, and no open
 6618 		or write is ever actually attempted.  Patch from Villy Kruse
 6619 		of TwinCom.
 6620 	If a message cannot be sent because of a 552 (exceeded storage
 6621 		allocation) response to the MAIL FROM:<>, and a SIZE= parameter
 6622 		was given, don't return the body in the bounce, since there
 6623 		is a very good chance that the message will double-bounce.
 6624 	Fix possible line truncation if a quoted-printable had an =00 escape
 6625 		in the body.  Problem noted by Charles Karney of the Princeton
 6626 		Plasma Physics Laboratory.
 6627 	Notify flags (e.g., -NSUCCESS) were lost on user+detail addresses.
 6628 		Problem noted by Kari Hurtta of the Finnish Meteorological
 6629 		Institute.
 6630 	The MaxDaemonChildren option wasn't applying to queue runs as
 6631 		documented.  Note that this increases the potential denial
 6632 		of service problems with this option: an attacker can
 6633 		connect many times, and thereby lock out queue runs as well
 6634 		as incoming connections.  If you use this option, you should
 6635 		run the "sendmail -bd" and "sendmail -q30m" jobs separately
 6636 		to avoid this attack.  Failure to limit noted by Matthew
 6637 		Dillon of BEST Internet Communications.
 6638 	Always give a message in newaliases if alias files cannot be
 6639 		opened instead of failing silently.  Suggested by Gregory
 6640 		Neil Shapiro.  This change makes the code match the O'Reilly
 6641 		book (2nd edition).
 6642 	Some older versions of the resolver could return with h_errno == -1
 6643 		if no name server could be reached, causing mail to bounce
 6644 		instead of queueing.  Treat this like TRY_AGAIN.  Fix from
 6645 		John Beck of SunSoft.
 6646 	If a :include: file is owned by a user that does not have an entry
 6647 		in the passwd file, sendmail could dereference a null pointer.
 6648 		Problem noted by Satish Mynam of Sun Microsystems.
 6649 	Take precautions to make sure that the SMTP protocol cannot get out
 6650 		of sync if (for example) an alias file cannot be opened.
 6651 	Fix a possible race condition that can cause a SIGALRM to come in
 6652 		immediately after a SIGHUP, causing the new sendmail to die.
 6653 	Avoid possible hang on SVr3 systems when doing child reaping.  Patch
 6654 		from Villy Kruse of TwinCom.
 6655 	Ignore improperly formatted SMTP reply codes.  Previously these were
 6656 		partially processed, which could cause confusing error
 6657 		returns.
 6658 	Fix possible bogus pointer dereference when doing ldapx map lookups
 6659 		on some architectures.
 6660 	Portability:
 6661 		A/UX: from Jim Jagielski of NASA/GSFC.
 6662 		glibc: SOCK_STREAM was changed from a #define to an enum,
 6663 			thus breaking #ifdef SOCK_STREAM.  Only option seems
 6664 			to be to assume SOCK_STREAM if __GNU_LIBRARY__ is
 6665 			defined.  Problem reported by A Sun of the University
 6666 			of Washington.
 6667 		Solaris: use SIOCGIFNUM to get the number of interfaces on
 6668 			the system rather than guessing at compile time.
 6669 			Patch contributed by John Beck of Sun Microsystems.
 6670 		Intel Paragon: from Wendy Lin of Purdue University.
 6671 		GNU Hurd: from Miles Bader of the GNU project.
 6672 		RISC/os 4.50 from Harlan Stenn of PFCS Corporation.
 6673 		ISC Unix: wait never returns if SIGCLD signals are blocked.
 6674 			Unfortunately releasing them opens a race condition,
 6675 			but there appears to be no fix for this.  Patch from
 6676 			Gregory Neil Shapiro.
 6677 		BIND 8.1 for IPv6 compatibility from John Kennedy.
 6678 		Solaris: a bug in strcasecmp caused characters with the
 6679 			high order bit set to apparently randomly match
 6680 			letters -- for example, $| (0233) matches "i" and "I".
 6681 			Problem noted by John Gregson of the University of
 6682 			Cambridge.
 6683 		IRIX 6.x: make Makefile.IRIX.6.2 apply to all 6.x.  From
 6684 			Kari Hurtta.
 6685 		IRIX 6.x: Create Makefiles for systems that claim to be
 6686 			IRIX64 but are 6.2 or higher (so use the regular
 6687 			IRIX Makefile).
 6688 		IRIX 6.x: Fix load average computation on 64 bit kernels.
 6689 			Problem noted by Eric Hagberg of Morgan Stanley.
 6690 	CONFIG: Some canonification was still done for UUCP-like addresses
 6691 		even if FEATURE(nocanonify) was set.  Problem pointed out by
 6692 		Brian Candler.
 6693 	CONFIG: In some cases UUCP mailers wouldn't properly recognize all
 6694 		local names as local.  Problem noted by Jeff Polk of BSDI;
 6695 		fix provided by Gregory Neil Shapiro.
 6696 	CONFIG: The "local:user" syntax entries in mailertables and other
 6697 		"mailer:user" syntax locations returned an incorrect value
 6698 		for the $h macro.  Problem noted by Gregory Neil Shapiro.
 6699 	CONFIG: Retain "+detail" information when forwarding mail to a
 6700 		MAIL_HUB, LUSER_RELAY, or LOCAL_RELAY.  Patch from Philip
 6701 		Guenther of Gustavus Adolphus College.
 6702 	CONFIG: Make sure user+detail works for FEATURE(virtusertable);
 6703 		rules are the same as for aliasing.  Based on a patch from
 6704 		Gregory Neil Shapiro.
 6705 	CONFIG: Break up parsing rules into several pieces; this should
 6706 		have no functional change in this release, but makes it
 6707 		possible to have better anti-spam rulesets in the future.
 6708 	CONFIG: Disallow double dots in host names to avoid having the
 6709 		HostStatusDirectory store status under the wrong name.
 6710 		In some cases this can be used as a denial-of-service attack.
 6711 		Problem noted by Ron Jarrell of Virginia Tech, patch from
 6712 		Gregory Neil Shapiro.
 6713 	CONFIG: Don't use F=m (multiple recipients per invocation) for
 6714 		MAILER(procmail), but do pass F=Pn9 (include Return-Path:,
 6715 		don't include From_, and convert to 8-bit).  Suggestions
 6716 		from Kimmo Suominen and Roderick Schertler.
 6717 	CONFIG: Domains under $=M (specified with MASQUERADE_DOMAIN) were
 6718 		being masqueraded as though FEATURE(masquerade_entire_domain)
 6719 		was specified, even when it wasn't.
 6720 	MAIL.LOCAL: Solaris 2.6 has snprintf.  From John Beck of SunSoft.
 6721 	MAIL.LOCAL: SECURITY: check to make sure that an attacker doesn't
 6722 		"slip in" a symbolic link between the lstat(2) call and the
 6723 		exclusive open.  This is only a problem on System V derived
 6724 		systems that allow an exclusive create on files that are
 6725 		symbolic links pointing nowhere.
 6726 	MAIL.LOCAL: If the final mailbox close() failed, the user id was
 6727 		not reset back to root, which on some systems would cause
 6728 		later mailboxes to fail.  Also, any partial message would
 6729 		not be truncated, which could result in repeated deliveries.
 6730 		Problem noted by Bruce Evans via Peter Wemm (FreeBSD
 6731 		developers).
 6732 	MAKEMAP: Handle cases where O_EXLOCK is #defined to be 0.  A similar
 6733 		change to the sendmail map code was made in 8.8.3.  Problem
 6734 		noted by Gregory Neil Shapiro.
 6735 	MAKEMAP: Give warnings on file problems such as map files that are
 6736 		symbolic links; although makemap is not set-user-ID root, it is
 6737 		often run as root and hence has the potential for the same
 6738 		sorts of problems as alias rebuilds.
 6739 	MAKEMAP: Change compilation so that it will link properly on
 6740 		NEXTSTEP.
 6741 	CONTRIB: etrn.pl: search for Cw as well as Fw lines in sendmail.cf.
 6742 		Accept an optional list of arguments following the server
 6743 		name for the ETRN arguments to use (instead of $=w).  Other
 6744 		miscellaneous bug fixes.  From Christian von Roques via
 6745 		John Beck of Sun Microsystems.
 6746 	CONTRIB: Add passwd-to-alias.pl, contributed by Kari Hurtta.  This
 6747 		Perl script converts GECOS information in the /etc/passwd
 6748 		file into aliases, allowing for faster access to full name
 6749 		lookups; it is also clever about adding aliases (to root)
 6750 		for system accounts.
 6751 	NEW FILES:
 6752 		src/safefile.c
 6753 		cf/ostype/gnuhurd.m4
 6754 		cf/ostype/irix6.m4
 6755 		contrib/passwd-to-alias.pl
 6756 		src/Makefiles/Makefile.IRIX64.6.1
 6757 		src/Makefiles/Makefile.IRIX64.6.x
 6759 		src/Makefiles/Makefile.IRIX.6.2 =>	Makefile.IRIX.6.x
 6760 		src/Makefiles/Makefile.IRIX64 =>	Makefile.IRIX64.6.0
 6762 8.8.5/8.8.5	1997/01/21
 6763 	SECURITY: Clear out group list during startup.  Without this, sendmail
 6764 		will continue to run with the group permissions of the caller,
 6765 		even if RunAsUser is specified.
 6766 	SECURITY: Make purgestat (-bH) be root-only.  This is not in response
 6767 		to any known attack, but it's best to be conservative.
 6768 		Suggested by Peter Wemm of DIALix.
 6769 	SECURITY: Fix buffer overrun problem in MIME code that has possible
 6770 		security implications.  Patch from Alex Garthwaite of the
 6771 		University of Pennsylvania.
 6772 	Use of a -f flag with a phrase attached (e.g., "-f 'Full Name <addr>'")
 6773 		would truncate the address after "Full".  Although the -f
 6774 		syntax is incorrect (since it is in the envelope, it
 6775 		shouldn't have comments and full names), the failure mode
 6776 		was unnecessarily awful.
 6777 	Fix a possible null pointer dereference when converting 8-bit data
 6778 		to a 7-bit format.  Problem noted by Jim Hutchins of
 6779 		Sandia National Labs and David James of British Telecom.
 6780 	Clear out stale state that affected F=9 on SMTP mailers in queue
 6781 		runs.  Although this really shouldn't be used (F=9 is for
 6782 		final delivery only, and using it on an SMTP mailer makes
 6783 		it possible for a message to be converted from 8->7->8->7
 6784 		bits several times), it shouldn't have failed with a syserr.
 6785 		Problem noted by Eric Hagberg of Morgan Stanley.
 6786 	_Really_ fix the multiple :maildrop code in the user database
 6787 		module.  Patch from Roy Mongiovi of Georgia Tech.
 6788 	Let F lines in the configuration file actually read root-only
 6789 		files if the configuration file is safe.  Based on a
 6790 		patch from Keith Reynolds of SCO.
 6791 	ETRN followed by QUIT would hold the connection open until the queue
 6792 		run completed.  Problem noted by Truck Lewis of TDK
 6793 		Semiconductor Corp.
 6794 	It turns out that despite the documentation, the TCP wrappers library
 6795 		does _not_ log rejected connections.  Do the logging ourselves.
 6796 		Problem noted by Fletcher Mattox of the University of Texas
 6797 		at Austin.
 6798 	If sendmail finds a qf file in its queue directory that is an unknown
 6799 		version (e.g., when backing out to an old version), the
 6800 		error is reported on every queue run.  Change it to only
 6801 		give the error once (and rename the qf => Qf).  Patch from
 6802 		William A. Gianopoulos of Raytheon Company.
 6803 	Start a new session when doing background delivery; currently it
 6804 		ignored signals but didn't start a new signal, that caused
 6805 		some problems if a background process tried to send mail
 6806 		under certain circumstances.  Problem noted by Eric Hagberg
 6807 		of Morgan Stanley; fix from Kari Hurtta.
 6808 	Simplify test for skipping a queue run to just check if the current
 6809 		load average is >= the queueing load average.  Previously
 6810 		the check factored in some other parameters that caused it
 6811 		to essentially never skip the queue run.  Patch from Bryan
 6812 		Costales.
 6813 	If the SMTP server is running in "nullserver" mode (that is, it is
 6814 		rejecting all commands), start sleeping after MAXBADCOMMAND
 6815 		(25) commands; this helps prevent a bad guy from putting
 6816 		you into a tight loop as a denial-of-service attack.  Based
 6817 		on an e-mail conversation with Brad Knowles of AOL.
 6818 	Slow down when too many "light weight" commands have been issued;
 6819 		this helps prevent a class of denial-of-service attacks.
 6820 		The current values and defaults are:
 6825 		These will probably be configurable in a future release.
 6826 	On systems that have uid_t typedefed to be an unsigned short, programs
 6827 		that had the F=S flag and no U= equate would be invoked with
 6828 		the real uid set to 65535 rather than being left unchanged.
 6829 	In some cases, NOTIFY=NEVER was not being honored.  Problem noted
 6830 		by Steve Hubert of the University of Washington, Seattle.
 6831 	Mail that was Quoted-Printable encoded and had a soft line break on
 6832 		the last line (i.e., an incomplete continuation) had the last
 6833 		line dropped.  Since this appears to be illegal it isn't
 6834 		clear what to do with it, but flushing the last line seems
 6835 		to be a better "fail soft" approach.  Based on a patch from
 6836 		Eric Hagberg.
 6837 	If AllowBogusHELO and PrivacyOptions=needmailhelo are both set, a
 6838 		bogus HELO command still causes the "Polite people say HELO
 6839 		first" error message.  Problem pointed out by Chris Thomas
 6840 		of UCLA; patch from John Beck of SunSoft.
 6841 	Handle "sendmail -bp -qSfoobar" properly if restrictqrun is set
 6842 		in PrivacyOptions.  The -q shouldn't turn this command off.
 6843 		Problem noted by Murray Kucherawy of Pacific Bell Internet;
 6844 		based on a patch from Gregory Neil Shapiro of WPI.
 6845 	Don't consider SMTP reply codes 452 or 552 (exceeded storage allocation)
 6846 		in a DATA transaction to be sticky; these can occur because
 6847 		a message is too large, and smaller messages should still go
 6848 		through.  Problem noted by Matt Dillon of Best Internet
 6849 		Communications.
 6850 	In some cases bounces were saved in /var/tmp/dead.letter even if they
 6851 		had been successfully delivered to the envelope sender.
 6852 		Problem noted Eric Hagberg of Morgan Stanley; solution from
 6853 		Gregory Neil Shapiro of WPI.
 6854 	Give better diagnostics on long alias lines.  Based on code contributed
 6855 		by Patrick Gosling of the University of Cambridge.
 6856 	Increase the number of virtual interfaces that will be probed for
 6857 		alternate names.  Problem noted by Amy Rich of Shore.Net.
 6859 		UXP/DS V20L10 for Fujitsu DS/90: Makefile patches from
 6860 			Toshiaki Nomura of Fujitsu Limited.
 6861 		SunOS with LDAP support: compile problems with struct timeval.
 6862 			Patch from Nick Cuccia of TCSI Corporation.
 6863 		SCO: from Keith Reynolds of SCO.
 6864 		Solaris: kstat load average computation wasn't being used.
 6865 			Fixes from Michael Ju. Tokarev of Telecom Service, JSC
 6866 			(Moscow).
 6867 		OpenBSD: from Jason Downs of teeny.org.
 6868 		Altos System V: from Tim Rice.
 6869 		Solaris 2.5: from Alan Perry of SunSoft.
 6870 		Solaris 2.6: from John Beck of SunSoft.
 6871 		Harris Nighthawk PowerUX (mh6000 box): from Bob Miorelli
 6872 			of Pratt & Whitney <miorelli@pweh.com>.
 6873 	CONFIG: It seems that I hadn't gotten the Received: line syntax
 6874 		_just_right_ yet.  Tweak it again.  I'll omit the names
 6875 		of the "contributors" (quantity two) in this one case.
 6876 		As of now, NO MORE DISCUSSION about the syntax of the
 6877 		Received: line.
 6878 	CONFIG: Although FEATURE(nullclient) uses EXPOSED_USER (class $=E),
 6879 		it never inserts that class into the output file.  Fix it
 6880 		so it will honor EXPOSED_USER but will _not_ include root
 6881 		automatically in this class.  Problem noted by Ronan KERYELL
 6882 		of Centre de Recherche en Informatique de l'École Nationale
 6883 		Supérieure des Mines de Paris (CRI-ENSMP).
 6884 	CONFIG: Clean up handling of "local:" syntax in relay specifications
 6885 		such as LUSER_RELAY.  This change permits the following
 6886 		syntaxes:  ``local:'' will send to the same user on the
 6887 		local machine (e.g., in a mailertable entry for "host",
 6888 		``local:'' will cause an address addressed to user@host to
 6889 		go to user on the local machone).  ``local:user'' will send
 6890 		to the named user on the local machine.  ``local:user@host''
 6891 		is equivalent to ``local:user'' (the host is ignored).  In
 6892 		all cases, the original user@host is passed in $@ (i.e., the
 6893 		detail information).  Inspired by a report from Michael Fuhr.
 6894 	CONFIG: Strip quotes from the first word of an "error:" host
 6895 		indication.  This lets you set (for example) the LUSER_RELAY
 6896 		to be ``error:\"5.1.1\" Your Message Here''.  Note the use
 6897 		of the \" so that the resulting string is properly quoted.
 6898 		Problem noted by Gregory Neil Shapiro of WPI.
 6899 	OP.ME: documentation was inconsistent about whether sendmail did a
 6900 		NOOP or a RSET to probe the connection (it does a RSET).
 6901 		Inconsistency noted by Deeran Peethamparam.
 6902 	OP.ME: insert additional blank pages so it will print properly on
 6903 		a duplex printer.  From Matthew Black of Cal State University,
 6904 		Long Beach.
 6906 8.8.4/8.8.4	1996/12/02
 6907 	SECURITY: under some circumstances, an attacker could get additional
 6908 		permissions by hard linking to files that were group
 6909 		writable by the attacker.  The solution is to disallow any
 6910 		files that have hard links -- this will affect .forward,
 6911 		:include:, and output files.  Problem noted by Terry
 6912 		Kyriacopoulos of Interlog Internet Services.  As a
 6913 		workaround, set UnsafeGroupWrites -- always a good idea.
 6914 	SECURITY: the TryNullMXList (w) option should not be safe -- if it
 6915 		is, it is possible to do a denial-of-service attack on
 6916 		MX hosts that rely on the use of the null MX list.  There
 6917 		is no danger if you have this option turned off (the default).
 6918 		Problem noted by Dan Bernstein.  Also, make the DontInitGroups
 6919 		unsafe.  I know of no specific attack against this, although
 6920 		a denial-of-service attack is probably possible, but in theory
 6921 		you should not be able to safely tweak anything that affects
 6922 		the permissions that are used when mail is delivered.
 6923 	Purgestat could go into an infinite loop if one of the host status
 6924 		directories somehow became empty.  Problem noted by Roy
 6925 		Mongiovi of Georgia Tech.
 6926 	Processes got "lost" when counting children due to a race condition.
 6927 		This caused "proc_list_probe: lost pid" messages to be logged.
 6928 		Problem noted by several people.
 6929 	On systems with System V SIGCLD child signal semantics (notably AIX
 6930 		and HP-UX), mail transactions would print the message "451
 6931 		SMTP-MAIL: lost child: No child processes".  Problem noted
 6932 		by several people.
 6933 	Miscellaneous compiler warnings on picky compilers (or when setting
 6934 		gcc to high warning levels).  From Tom Moore of NCR Corp.
 6935 	SMTP protocol errors, and most errors on MAIL FROM: lines should
 6936 		not be persistent between runs, since they are based on the
 6937 		message rather than the host.  Problem noted by Matt Dillon
 6938 		of Best Internet Communications.
 6939 	The F=7 flag was ignored on SMTP mailers.  Problem noted by Tom Moore
 6940 		of NCR (a.k.a., AT&T Global Information Solutions).
 6941 	Avoid the possibility of having a child daemon run to completion
 6942 		(including closing the SMTP socket) before the parent has
 6943 		had a chance to close the socket; this can cause the parent
 6944 		to hang for a long time waiting for the socket to drain.
 6945 		Patch from Don Lewis of TDK Semiconductor.
 6946 	If the fork() failed in a queue run, the queue runners would not be
 6947 		rescheduled (so queue runs would stop).  Patch from Don Lewis.
 6948 	Some error conditions in ETRN could cause output without an SMTP
 6949 		status code.  Problem noted by Don Lewis.
 6950 	Multiple :maildrop addresses in the user database didn't work properly.
 6951 		Patch from Roy Mongiovi of Georgia Tech.
 6952 	Add ".db" automatically onto any user database spec that does not
 6953 		already have it; this is for consistency with makemap, the
 6954 		K line, and the documentation.  Inconsistency pointed out
 6955 		by Roy Mongiovi.
 6956 	Allow sendmail to be properly called in nohup mode.  Patch from
 6957 		Kyle Jones of UUNET.
 6958 	Change ETRN to ignore but still update host status files; previously
 6959 		it would ignore them and not save the updated status, which
 6960 		caused stale information to be maintained.  Based on a patch
 6961 		from Christopher Davis of Kapor Enterprises Inc.  Also, have
 6962 		ETRN ignore the MinQueueAge option.
 6963 	Patch long term host status to recover more gracefully from an empty
 6964 		host status file condition.  Patch from NAKAMURA Motonori
 6965 		of Kyoto University.
 6966 	Several patches to signal handling code to fix potential race
 6967 		conditions from Don Lewis.
 6968 	Make it possible to compile with -DDAEMON=0 (previously it had some
 6969 		compile errors).  This turns DAEMON, QUEUE, and SMTP into
 6970 		0/1 compilation flags.  Note that DAEMON is an obsolete
 6971 		compile flag; use NETINET instead.  Solution based on a
 6972 		patch from Bryan Costales.
 6974 		AIX4: getpwnam() and getpwuid() do a sequential scan of the
 6975 			/etc/security/passwd file when called as root.  This
 6976 			is very slow on some systems.  To speed it up, use the
 6977 			(undocumented) _getpw{nam,uid}_shadow() routines.
 6978 			Patch from Chris Thomas of UCLA/OAC Systems Group.
 6979 		SCO 5.x: include -lprot in the Makefile.  Patch from Bill
 6980 			Glicker of Burrelle's Information Service.
 6981 		NEWS-OS 4.x: need a definition for MODE_T to compile.  Patch
 6982 			from Makoto MATSUSHITA of Osaka University.
 6983 		SunOS 4.0.3: compile problems.  Patches from Andrew Cole of
 6984 			Leeds University and SASABE Tetsuro of the University
 6985 			of Tokyo.
 6986 		DG/UX from Brian J. Murrell of InterLinx Support
 6987 			Services, Inc.
 6988 		Domain/OS from Don (Truck) Lewis of TDK Semiconductor Corp.
 6989 			I believe this to have only been a problem if you
 6990 			compiled with -DUSE_VENDOR_CF_PATH -- another reason
 6991 			to stick with /etc/sendmail.cf as your One True Path.
 6992 		Digital UNIX (OSF/1 on Alpha) load average computation from
 6993 			Martin Laubach of the Technischen Universität Wien.
 6994 	CONFIG: change default Received: line to be multiple lines rather
 6995 		than one long one.  By popular demand.
 6996 	MAIL.LOCAL: warnings weren't being logged on some systems.  Patch
 6997 		from Jerome Berkman of U.C. Berkeley.
 6998 	MAKEMAP: be sure to zero hinfo to avoid cruft that can cause runs
 6999 		to take a very long time.  Problem noted by Yoshiro YONEYA
 7000 		of NTT Software Corporation.
 7001 	CONTRIB: add etrn.pl, contributed by John Beck.
 7002 	NEW FILES:
 7003 		contrib/etrn.pl
 7005 8.8.3/8.8.3	1996/11/17
 7006 	SECURITY: it was possible to get a root shell by lying to sendmail
 7007 		about argv[0] and then sending it a signal.  Problem noted
 7008 		by Leshka Zakharoff <leshka@leshka.chuvashia.su> on the
 7009 		best-of-security list.
 7010 	Log sendmail binary version number in "Warning: .cf version level
 7011 		(%d) exceeds program functionality (%d) message" -- this
 7012 		should make it clearer to people that they are running
 7013 		the wrong binary.
 7014 	Fix a problem that occurs when you open an SMTP connection and then
 7015 		do one or more ETRN commands followed by a MAIL command; at
 7016 		the end of the DATA phase sendmail would incorrectly report
 7017 		"451 SMTP-MAIL: lost child: No child processes".  Problem
 7018 		noted by Eric Bishop of Virginia Tech.
 7019 	When doing text-based host canonification (typically /etc/hosts
 7020 		lookup), a null host name would match any /etc/hosts entry
 7021 		with space at the end of the line.  Problem noted by Steve
 7022 		Hubert of the University of Washington, Seattle.
 7023 	7 to 8 bit BASE64 MIME conversions could duplicate bits of text.
 7024 		Problem reported by Tom Smith of Digital Equipment Corp.
 7025 	Increase the size of the DNS answer buffer -- the standard UDP packet
 7026 		size PACKETSZ (512) is not sufficient for some nameserver
 7027 		answers containing very many resource records.  The resolver
 7028 		may also switch to TCP and retry if it detects UDP packet
 7029 		overflow.  Also, allow for the fact that the resolver
 7030 		routines res_query and res_search return the size of the
 7031 		*un*truncated answer in case the supplied answer buffer it
 7032 		not big enough to accommodate the entire answer.  Patch from
 7033 		Eric Wassenaar.
 7034 	Improvements to MaxDaemonChildren code.  If you think you have too
 7035 		many children, probe the ones you have to verify that they
 7036 		are still around.  Suggested by Jared Mauch of CICnet, Inc.
 7037 		Also, do this probe before growing the vector of children
 7038 		pids; this previously caused the vector to grow indefinitely
 7039 		due to a race condition.  Problem reported by Kyle Jones of
 7040 		UUNET.
 7041 	On some architectures, <db.h> (from the Berkeley DB library) defines
 7042 		O_EXLOCK to zero; this fools the map compilation code into
 7043 		thinking that it can avoid race conditions by locking on open.
 7044 		Change it to check for O_EXLOCK non-zero.  Problem noted by
 7045 		Leif Erlingsson of Data Lege.
 7046 	Always call res_init() on startup (if compiled in, of course) to
 7047 		allow the sendmail.cf file to tweak resolver flags; without
 7048 		it, flag tweaks in ResolverOptions are ignored.  Patch from
 7049 		Andrew Sun of Merrill Lynch.
 7050 	Improvements to host status printing code.  Suggested by Steve Hubert
 7051 		of the University of Washington, Seattle.
 7052 	Change MinQueueAge option processing to do the check for the job age
 7053 		when reading the queue file, rather than at the end; this
 7054 		avoids parsing the addresses, which can do DNS lookups.
 7055 		Problem noted by John Beck of InReference, Inc.
 7056 	When MIME was being 7->8 bit decoded, "From " lines weren't being
 7057 		properly escaped.  Problem noted by Peter Nilsson of the
 7058 		University of Linkoping.
 7059 	In some cases, sendmail would retain root permissions during queue
 7060 		runs even if RunAsUser was set.  Problem noted by Mark
 7061 		Thomas of Mark G. Thomas Consulting.
 7062 	If the F=l flag was set on an SMTP mailer to indicate that it is
 7063 		actually local delivery, and NOTIFY=SUCCESS is specified in
 7064 		the envelope, and the receiving SMTP server speaks DSN, then
 7065 		the DSN would be both generated locally and propagated to the
 7066 		other end.
 7067 	The U= mailer field didn't correctly extract the group id if the
 7068 		user id was numeric.  Problem noted by Kenneth Herron of
 7069 		MCI Telecommunications Communications.
 7070 	If a message exceeded the fixed maximum size on input, the body of
 7071 		the message was included in the bounce.  Note that this did
 7072 		not occur if it exceeded the maximum _output_ size.  Problem
 7073 		reported by Kyle Jones of UUNET.
 7075 		AIX4: 4.1 doesn't have a working setreuid(2); change the
 7076 			AIX4 defines to use seteuid(2) instead, which
 7077 			works on 4.1 as well as 4.2.  Problem noted by
 7078 			Håkan Lindholm of interAF, Sweden.
 7079 		AIX4: use tzname[] vector to determine time zone name.
 7080 			Patch from NAKAMURA Motonori of Kyoto University.
 7081 		MkLinux: add Makefile.Linux.ppc and OSTYPE(mklinux) support.
 7082 			Contributed by Paul DuBois <dubois@primate.wisc.edu>.
 7083 		Solaris: kstat(3k) support for retrieving the load average.
 7084 			This adds the LA_KSTAT definition for LA_TYPE.
 7085 			The outline of the implementation was contributed
 7086 			by Michael Tokarev of Telecom Service, JSC, Moscow.
 7087 		HP-UX 10.0 gripes about the (perfectly legal!) forward
 7088 			declaration of struct rusage at the top of conf.h;
 7089 			change it to only be included if you are using gcc,
 7090 			which is apparently the only compiler that requires
 7091 			it in the first place.  Problem noted by Jeff
 7092 			Earickson of Colby College.
 7093 		IRIX: don't default to using gcc.  IRIX is a civilized
 7094 			operating system that comes with a decent compiler
 7095 			by default.  Problem noted by Barry Bouwsma and
 7096 			Kari Hurtta.
 7097 	CONFIG: specify F=9 as default in FEATURE(local_procmail) for
 7098 		consistency with other local mailers.  Inconsistency
 7099 		pointed out by Teddy Hogeborn <teddy@fukt.hk-r.se>.
 7100 	CONFIG: if the "limited best mx" feature is used (to reduce DNS
 7101 		overhead) as part of the bestmx_is_local feature, the
 7102 		domain part was dropped from the name.  Patch from Steve
 7103 		Hubert of the University of Washington, Seattle.
 7104 	CONFIG: catch addresses of the form "user@.dom.ain"; these could
 7105 		end up being translated to the null host name, which would
 7106 		return any entry in /etc/hosts that had a space at the end
 7107 		of the line.  Problem noted by Steve Hubert of the
 7108 		University of Washington, Seattle.
 7109 	CONFIG: add OSTYPE(aix4).  From Michael Sofka of Rensselaer
 7110 		Polytechnic Institute.
 7111 	MAKEMAP: tweak hash and btree parameters for better performance.
 7112 		Patch from Matt Dillon of Best Internet Communications.
 7113 	NEW FILES:
 7114 		src/Makefiles/Makefile.Linux.ppc
 7115 		cf/ostype/aix4.m4
 7116 		cf/ostype/mklinux.m4
 7118 8.8.2/8.8.2	1996/10/18
 7119 	SECURITY: fix a botch in the 7-bit MIME patch; the previous patch
 7120 		changed the code but didn't fix the problem.
 7122 		Solaris: Don't use the system getusershell(3); it can
 7123 			apparently corrupt the heap in some circumstances.
 7124 			Problem found by Ken Pizzini of Spry, Inc.
 7125 	OP.ME: document several mailer flags that were accidentally omitted
 7126 		from this document.  These flags were F=d, F=j, F=R, and F=9.
 7127 	CONFIG: no changes.
 7129 8.8.1/8.8.1	1996/10/17
 7130 	SECURITY: unset all environment variables that the resolver will
 7131 		examine during queue runs and daemon mode.  Problem noted
 7132 		by Dan Bernstein of the University of Illinois at Chicago.
 7133 	SECURITY: in some cases an illegal 7-bit MIME-encoded text/plain
 7134 		message could overflow a buffer if it was converted back
 7135 		to 8 bits.  This caused core dumps and has the potential
 7136 		for a remote attack.  Problem first noted by Gregory Shapiro
 7137 		of WPI.
 7138 	Avoid duplicate deliveries of error messages on systems that don't
 7139 		have flock(2) support.  Patch from Motonori Nakamura of
 7140 		Kyoto University.
 7141 	Ignore null FallBackMX (V) options.  If this option is null (as
 7142 		opposed to undefined) it can cause "null signature" syserrs
 7143 		on illegal host names.
 7144 	If a Base64 encoded text/plain message has no trailing newline in
 7145 		the encoded text, conversion back to 8 bits will drop the
 7146 		final line.  Problem noted by Pierre David.
 7147 	If running with a RunAsUser, sendmail would give bogus "cannot
 7148 		setuid" (or seteuid, or setreuid) messages on some systems.
 7149 		Problem pointed out by Jordan Mendelson of Web Services, Inc.
 7150 	Always print error messages in -bv mode -- previously, -bv would
 7151 		be absolutely silent on errors if the error mode was sent
 7152 		to (say) mail-back.  Problem noted by Kyle Jones of UUNET.
 7153 	If -qI/R/S is set (or the ETRN command is used), ignore all long
 7154 		term host status.  This is necessary because it is common
 7155 		to do this when you know a host has just come back up.
 7156 	Disallow duplicate HELO/EHLO commands as required by RFC 1651 section
 7157 		4.2.  Excessive permissiveness noted by Lee Flight of the
 7158 		University of Leicester.
 7159 	If a service (such as NIS) is specified as the last entry in the
 7160 		service switch, but that service is not compiled in, sendmail
 7161 		would return a temporary failure when an entry was not found
 7162 		in the map.  This caused the message to be queued instead of
 7163 		bouncing immediately.  Problem noted by Harry Edmon of the
 7164 		University of Washington.
 7166 		Solaris 2.3 had compilation problems in conf.c.  Several
 7167 			people pointed this out.
 7168 		NetBSD from Charles Hannum of MIT.
 7169 		AIX4 improvements based on info from Steve Bauer of South
 7170 			Dakota School of Mines & Technology.
 7171 	CONFIG: ``error:code message'' syntax was broken in virtusertable.
 7172 		Patch from Gil Kloepfer Jr.
 7173 	CONFIG: if FEATURE(nocanonify) was specified, hosts in $=M (set
 7174 		using MASQUERADE_DOMAIN) were not masqueraded unless they
 7175 		were also in $=w.  Problem noted by Zoltan Basti of
 7176 		Softec.
 7177 	MAIL.LOCAL: patches to compile and link cleanly on AIX.  Based
 7178 		on a patch from Eric Hagberg of Morgan Stanley.
 7179 	MAIL.LOCAL: patches to compile on NEXTSTEP.  From Patrick Nolan
 7180 		of Stanford via Robert La Ferla.
 7182 8.8.0/8.8.0	1996/09/26
 7183 	Under some circumstances, Bcc: headers would not be properly
 7184 		deleted.  Pointed out by Jonathan Kamens of OpenVision.
 7185 	Log a warning if the sendmail daemon is invoked without a full
 7186 		pathname, which prevents "kill -1" from working.  I was
 7187 		urged to put this in by Andrey A. Chernov of DEMOS (Russia).
 7188 	Fix small buffer overflow.  Since the data in this buffer was not
 7189 		read externally, there was no security problem (and in fact
 7190 		probably wouldn't really overflow on most compilers).  Pointed
 7191 		out by KIZU takashi of Osaka University.
 7192 	Fix problem causing domain literals such as [] to be ignored
 7193 		if a FallbackMXHost was specified in the configuration file
 7194 		-- all mail would be sent to the fallback even if the original
 7195 		host was accessible.  Pointed out by Munenari Hirayama of
 7196 		NSC (Japan).
 7197 	A message that didn't terminate with a newline would (sometimes) not
 7198 		have the trailing "." added properly in the SMTP dialogue,
 7199 		causing SMTP to hang.  Patch from Per Hedeland of Ericsson.
 7200 	The DaemonPortOptions suboption to bind to a particular address was
 7201 		incorrect and nonfunctional due to a misunderstanding of the
 7202 		semantics of binding on a passive socket.  Patch from
 7203 		NIIBE Yutaka of Mitsubishi Research Institute.
 7204 	Increase the number of MX hosts for a single name to 100 to better
 7205 		handle the truly huge service providers such as AOL, which
 7206 		has 13 at the moment (and climbing).  In order to avoid
 7207 		trashing memory, the buffer for all names has only been
 7208 		slightly increased in size, to 12.8K from 10.2K -- this means
 7209 		that if a single name had 100 MX records, the average size
 7210 		of those records could not exceed 128 bytes.  Requested by
 7211 		Brad Knowles of America On Line.
 7212 	Restore use of IDENT returns where the OSTYPE field equals "OTHER".
 7213 		Urged by Dan Bernstein of U.C. Berkeley.
 7214 	Print q_statdate and q_specificity in address structure debugging
 7215 		printout.
 7216 	Expand MCI structure flag bits for debugging output.
 7217 	Support IPv6-style domain literals, which can have colons between
 7218 		square braces.
 7219 	Log open file descriptors for the "cannot dup" messages in deliver();
 7220 		this is an attempt to track down a bug that one person seems
 7221 		to be having (it may be a Solaris bug!).
 7222 	DSN NOTIFY parameters were not properly propagated across queue runs;
 7223 		this caused the NOTIFY info to sometimes be lost.  Problem
 7224 		pointed out by Claus Assmann of the
 7225 		Christian-Albrechts-University of Kiel.
 7226 	The statistics gathered in the sendmail.st file were too high; in
 7227 		some cases failures (e.g., user unknown or temporary failure)
 7228 		would count as a delivery as far as the statistics were
 7229 		concerned.  Problem noted by Tom Moore of AT&T GIS.
 7230 	Systems that don't have flock() would not send split envelopes in
 7231 		the initial run.  Problem pointed out by Leonard Zubkoff of
 7232 		Dandelion Digital.
 7233 	Move buffer overflow checking -- these primarily involve distrusting
 7234 		results that may come from NIS and DNS.
 7235 	4.4-BSD-derived systems, including FreeBSD, NetBSD, and BSD/OS didn't
 7236 		include <paths.h> and hence had the wrong pathnames for a few
 7237 		things like /var/tmp.  Reported by Matthew Green.
 7238 	Conditions were reversed for the Priority: header, resulting in all
 7239 		values being interpreted as non-urgent except for non-urgent,
 7240 		which was interpreted as normal.  Patch from Bryan Costales.
 7241 	The -o (optional) flag was being ignored on hash and btree maps
 7242 		since 8.7.2.  Fix from Bryan Costales.
 7243 	Content-Types listed in class "q" will always be encoded as
 7244 		Quoted-Printable (or more accurately, will never be encoded
 7245 		as base64).  The class can have primary types (e.g., "text")
 7246 		or full types (e.g., "text/plain").  Based on a suggestion by
 7247 		Marius Olafsson of the University of Iceland.
 7248 	Define ${envid} to be the original envelope id (from the ESMTP DSN
 7249 		dialogue) so it can be passed to programs in mailers.
 7250 	Define ${bodytype} to be the body type (from the -B flag or the
 7251 		BODY= ESMTP parameter) so it can be passed to programs in
 7252 		mailers.
 7253 	Cause the VRFY command to return 252 instead of 250 unless the F=q
 7254 		flag is set in the mailer descriptor.  Suggested by John
 7255 		Myers of CMU.
 7256 	Implement ESMTP ETRN command to flush the queue for a specific host.
 7257 		The command takes a host name; data for that host is
 7258 		immediately (and asynchronously) flushed.  Because this shares
 7259 		the -qR implementation, other hosts may be attempted, but
 7260 		there should be no security implications.  Implementation
 7261 		from John Beck of InReference, Inc.  See RFC 1985 for details.
 7262 	Add three new command line flags to pass in DSN parameters: -V envid
 7263 		(equivalent to ENVID=envid on the MAIL command), -R ret
 7264 		(equivalent to RET=ret on the MAIL command), and -Nnotify
 7265 		(equivalent to NOTIFY=notify on the RCPT command).  Note
 7266 		that the -N flag applies to all recipients; there is no way
 7267 		to specify per-address notifications on the command line,
 7268 		nor is there an equivalent for the ORCPT= per-address
 7269 		parameter.
 7270 	Restore LogLevel option to be safe (it can only be increased);
 7271 		apparently I went into paranoid mode between 8.6 and 8.7
 7272 		and made it unsafe.  Pointed out by Dabe Murphy of the
 7273 		University of Maryland.
 7274 	New logging on log level 15:  all SMTP traffic.  Patches from
 7275 		Andrew Gross of San Diego Supercomputer Center.
 7276 	NetInfo property value searching code wasn't stopping when it found
 7277 		a match.  This was causing the wrong values to be found (and
 7278 		had a memory leak).  Found by Bastian Schleuter of TU-Berlin.
 7279 	Add new F=0 (zero) mailer flag to turn off MX lookups.  It was pointed
 7280 		out by Bill Wisner of Electronics for Imaging that you can't
 7281 		use the bracket address form for the MAIL_HUB macro, since
 7282 		that causes the brackets to remain in the envelope recipient
 7283 		address used for delivery.  The simple fix (stripping off the
 7284 		brackets in the config file) breaks the use of IP literal
 7285 		addresses.  This flag will solve that problem.
 7286 	Add MustQuoteChars option.  This is a list of characters that must
 7287 		be quoted if they are found in the phrase part of an address
 7288 		(that is, the full name part).  The characters @,;:\()[] are
 7289 		always in this list and cannot be removed.  The default is
 7290 		this list plus . and ' to match RFC 822.
 7291 	Add AllowBogusHELO option; if set, sendmail will allow HELO commands
 7292 		that do not include a host name for back compatibility with
 7293 		some stupid SMTP clients.  Setting this violates RFC 1123
 7294 		section 5.2.5.
 7295 	Add MaxDaemonChildren option; if this is set, sendmail will start
 7296 		rejecting connections if it has more than this many
 7297 		outstanding children accepting mail.  Note that you may
 7298 		see more processes than this because of outgoing mail; this
 7299 		is for incoming connections only.
 7300 	Add ConnectionRateThrottle option.  If set to a positive value, the
 7301 		number of incoming SMTP connections that will be permitted
 7302 		in a single second is limited to this number.  Connections are
 7303 		not refused during this time, just deferred.  The intent is to
 7304 		flatten out demand so that load average limiting can kick in.
 7305 		It is less radical than MaxDaemonChildren, which will stop
 7306 		accepting connections even if all the connections are idle
 7307 		(e.g., due to connection caching).
 7308 	Add Timeout.hoststatus option.  This interval (defaulting to 30m)
 7309 		specifies how long cached information about the state of a
 7310 		host will be kept before they are considered stale and the
 7311 		host is retried.  If you are using persistent host status
 7312 		(i.e., the HostStatusDirectory option is set) this will apply
 7313 		between runs; otherwise, it applies only within a single queue
 7314 		run and hence is useful only for hosts that have large queues
 7315 		that take a very long time to run.
 7316 	Add SingleLineFromHeader option.  If set, From: headers are coerced
 7317 		into being a single line even if they had newlines in them
 7318 		when read.  This is to get around a botch in Lotus Notes.
 7319 	Text class maps were totally broken -- if you ever retrieved the last
 7320 		item in a table it would be truncated.  Problem noted by
 7321 		Gregory Neil Shapiro of WPI.
 7322 	Extend the lines printed by the mailq command (== the -bp flag) when
 7323 		-v is given to 120 characters; this allows more information
 7324 		to be displayed.  Suggested by Gregory Neil Shapiro of WPI.
 7325 	Allow macro definitions (`D' lines) with unquoted commas; previously
 7326 		this was treated as end-of-input.  Problem noted by Bryan
 7327 		Costales.
 7328 	The RET= envelope parameter (used for DSNs) wasn't properly written
 7329 		to the queue file.  Fix from John Hughes of Atlantic
 7330 		Technologies, Inc.
 7331 	Close /var/tmp/dead.letter after a successful write -- otherwise
 7332 		if this happens in a queue run it can cause nasty delays.
 7333 		Problem noted by Mark Horton of AT&T.
 7334 	If userdb entries pointed to userdb entries, and there were multiple
 7335 		values for a given key, the database cursor would get
 7336 		trashed by the recursive call.  Problem noted by Roy Mongiovi
 7337 		of Georgia Tech.  Fixed by reading all the values and creating
 7338 		a comma-separated list; thus, the -v output will be somewhat
 7339 		different for this case.
 7340 	Fix buffer allocation problem with Hesiod-based userdb maps when
 7341 		HES_GETMAILHOST is defined.  Based on a patch by Betty Lee
 7342 		of Stanford University.
 7343 	When envelopes were split due to aliases with owner- aliases, and
 7344 		there was some error on one of the lists, more than one of
 7345 		the owners would get the message.  Problem pointed out by
 7346 		Roy Mongiovi of Georgia Tech.
 7347 	Detect excessive recursion in macro expansions, e.g., $X defined
 7348 		in terms of $Y which is defined in terms of $X.  Problem
 7349 		noted by Bryan Costales; patch from Eric Wassenaar.
 7350 	When using F=U to get "ugly UUCP" From_ lines, a buffer could in
 7351 		some cases get trashed causing bogus From_ lines.  Fix from
 7352 		Kyle Jones of UUNET.
 7353 	When doing load average initialization, if the nlist call for avenrun
 7354 		failed, the second and subsequent lookups wouldn't notice
 7355 		that fact causing bogus load averages to be returned.  Noted
 7356 		by Casper Dik of Sun Holland.
 7357 	Fix problem with incompatibility with some versions of inet_aton that
 7358 		have changed the return value to unsigned, so a check for an
 7359 		error return of -1 doesn't work.  Use INADDR_NONE instead.
 7360 		This could cause mail to addresses such as [foo.com] to bounce
 7361 		or get dropped.  Problem noted by Christophe Wolfhugel of the
 7362 		Pasteur Institute.
 7363 	DSNs were inconsistent if a failure occurred during the DATA phase
 7364 		rather than the RCPT phase: the Action: would be correct, but
 7365 		the detailed status information would be wrong.  Problem noted
 7366 		by Bob Snyder of General Electric Company.
 7367 	Add -U command line flag and the XUSR ESMTP extension, both indicating
 7368 		that this is the initial MUA->MTA submission.  The flag current
 7369 		does nothing, but in future releases (when MUAs start using
 7370 		these flags) it will probably turn on things like DNS
 7371 		canonification.
 7372 	Default end-of-line string (E= specification on mailer [M] lines)
 7373 		to \r\n on SMTP mailers.  Default remains \n on non-SMTP
 7374 		mailers.
 7375 	Change the internal definition for the *file* and *include* mailers
 7376 		to have $u in the argument vectors so that they aren't
 7377 		misinterpreted as SMTP mailers and thus use \r\n line
 7378 		termination.  This will affect anyone who has redefined
 7379 		either of these in their configuration file.
 7380 	Don't assume that IDENT servers close the connection after a query;
 7381 		responses can be newline terminated.  From Terry Kennedy of
 7382 		St. Peter's College.
 7383 	Avoid core dumps on erroneous configuration files that have
 7384 		$#mailer with nothing following.  From Bryan Costales.
 7385 	Avoid null pointer dereference with high debug values in unlockqueue.
 7386 		Fix from Randy Martin of Clemson University.
 7387 	Fix possible buffer overrun when expanding very large macros.  Fix
 7388 		from Kyle Jones of UUNET.
 7389 	After 25 EXPN or VRFY commands, start pausing for a second before
 7390 		processing each one.  This avoids a certain form of denial
 7391 		of service attack.  Potential attack pointed out by Bryan
 7392 		Costales.
 7393 	Allow new named (not numbered!) config file rules to do validity
 7394 		checking on SMTP arguments: check_mail for MAIL commands and
 7395 		check_rcpt for RCPT commands.  These rulesets can do anything
 7396 		they want; their result is ignored unless they resolve to the
 7397 		$#error mailer, in which case the indicated message is printed
 7398 		and the command is rejected.  Similarly, the check_compat
 7399 		ruleset is called before delivery with "from_addr $| to_addr"
 7400 		(the $| is a meta-symbol used to separate the two addresses);
 7401 		it can give a "this sender can't send to this recipient"
 7402 		notification.  Note that this patch allows $| to stand alone
 7403 		in rulesets.
 7404 	Define new macros ${client_name}, ${client_addr}, and ${client_port}
 7405 		that have the name, IP address, and port number (respectively)
 7406 		of the SMTP client (that is, the entity at the other end of
 7407 		the connection.  These can be used in (e.g.) check_rcpt to
 7408 		verify that someone isn't trying to relay mail through your
 7409 		host inappropriately.  Be sure to use the deferred evaluation
 7410 		form, for example $&{client_name}, to avoid having these bound
 7411 		when sendmail reads the configuration file.
 7412 	Add new config file rule check_relay to check the incoming connection
 7413 		information.  Like check_compat, it is passed the host name
 7414 		and host address separated by $| and can reject connections
 7415 		on that basis.
 7416 	Allow IDA-style recursive function calls.  Code contributed by Mark
 7417 		Lovell and Paul Vixie.
 7418 	Eliminate the "No ! in UUCP From address!" message" -- instead, create
 7419 		a virtual UUCP address using either a domain address or the $k
 7420 		macro.  Based on code contributed by Mark Lovell and Paul
 7421 		Vixie.
 7422 	Add Stanford LDAP map.  Requires special libraries that are not
 7423 		included with sendmail.  Contributed by Booker C. Bense
 7424 		<bbense@networking.stanford.edu>; contact him for support.
 7425 		See also the src/READ_ME file.
 7426 	Allow -dANSI to turn on ANSI escape sequences in debug output; this
 7427 		puts metasymbols (e.g., $+) in reverse video.  Really useful
 7428 		only for debugging deep bits of code where it is important to
 7429 		distinguish between the single-character metasymbol $+ and the
 7430 		two characters $, +.
 7431 	Changed ruleset 89 (executed in dumpstate()) to a named ruleset,
 7432 		debug_dumpstate.
 7433 	Add new UnsafeGroupWrites option; if set, .forward and :include:
 7434 		files that are group writable are considered "unsafe" -- that
 7435 		is, programs and files referenced from such files are not
 7436 		valid recipients.
 7437 	Delete bogosity test for FallBackMX host; this prevented it to be a
 7438 		name that was not in DNS or was a domain-literal.  Problem
 7439 		noted by Tom May.
 7440 	Change the introduction to error messages to more clearly delineate
 7441 		permanent from temporary failures; if both existed in a
 7442 		single message it could be confusing.  Suggested by John
 7443 		Beck of InReference, Inc.
 7444 	The IngoreDot (i) option didn't work for lines that were terminated
 7445 		with CRLF.  Problem noted by Ted Stockwell of Secure
 7446 		Computing Corporation.
 7447 	Add a heuristic to improve the handling of unbalanced `<' signs in
 7448 		message headers.  Problem reported by Matt Dillon of Best
 7449 		Internet Communications.
 7450 	Check for bogus characters in the 0200-0237 range; since these are
 7451 		used internally, very strange errors can occur if those
 7452 		characters appear in headers.  Problem noted by Anders Gertz
 7453 		of Lysator.
 7454 	Implement 7 -> 8 bit MIME conversions.  This only takes place if the
 7455 		recipient mailer has the F=9 flag set, and only works on
 7456 		text/plain body types.  Code contributed by Marius Olafsson
 7457 		of the University of Iceland.
 7458 	Special case "postmaster" name so that it is always treated as lower
 7459 		case in alias files regardless of configuration settings;
 7460 		this prevents some potential problems where "Postmaster" or
 7461 		"POSTMASTER" might not match "postmaster".  In most cases
 7462 		this change is a no-op.
 7463 	The -o map flag was ignored for text maps.  Problem noted by Bryan
 7464 		Costales.
 7465 	The -a map flag was ignored for dequote maps.  Problem noted by
 7466 		Bryan Costales.
 7467 	Fix core dump when a lookup of a class "prog" map returns no
 7468 		response.  Patch from Bryan Costales.
 7469 	Log instances where sendmail is deferring or rejecting connections
 7470 		on LogLevel 14.  Suggested by Kyle Jones of UUNET.
 7471 	Include port number in process title for network daemons.  Suggested
 7472 		by Kyle Jones of UUNET.
 7473 	Send ``double bounces'' (errors that occur when sending an error
 7474 		message) to the address indicated in the DoubleBounceAddress
 7475 		option (default: postmaster).  Previously they were always
 7476 		sent to postmaster.  Suggested by Kyle Jones of UUNET.
 7477 	Add new mode, -bD, that acts like -bd in all respects except that
 7478 		it runs in foreground.  This is useful for using with a
 7479 		wrapper that "watches" system services.  Suggested by Kyle
 7480 		Jones of UUNET.
 7481 	Fix botch in spacing around (parenthesized) comments in addresses
 7482 		when the comment comes before the address.  Patch from
 7483 		Motonori Nakamura of Kyoto University.
 7484 	Use the prefix "Postmaster notify" on the Subject: lines of messages
 7485 		that are being bounced to postmaster, rather than "Returned
 7486 		mail".  This permits the person who is postmaster more
 7487 		easily determine what messages are to their role as
 7488 		postmaster versus bounces to mail they actually sent.  Based
 7489 		on a suggestion by Motonori Nakamura.
 7490 	Add new value "time" for QueueSortOrder option; this causes the queue
 7491 		to be sorted strictly by the time of submission.  Note that
 7492 		this can cause very bad behavior over slow lines (because
 7493 		large jobs will tend to delay small jobs) and on nodes with
 7494 		heavy traffic (because old things in the queue for hosts that
 7495 		are down delay processing of new jobs).  Also, this does not
 7496 		guarantee that jobs will be delivered in submission order
 7497 		unless you also set DeliveryMode=queue.  In general, it should
 7498 		probably only be used on the command line, and only in
 7499 		conjunction with -qRhost.domain.  In fact, there are very few
 7500 		cases where it should be used at all.  Based on an
 7501 		implementation by Motonori Nakamura.
 7502 	If a map lookup in ruleset 5 returns tempfail, queue the message in
 7503 		the same manner as other rulesets.  Previously a temporary
 7504 		failure in ruleset 5 was ignored.  Patch from Booker Bense
 7505 		of Stanford University.
 7506 	Don't proceed to the next MX host if an SMTP MAIL command returns a
 7507 		5yz (permanent failure) code.  The next MX host will still be
 7508 		tried if the connection cannot be opened in the first place
 7509 		or if the MAIL command returns a 4yz (temporary failure) code.
 7510 		(It's hard to know what to do here, since neither RFC 974 nor
 7511 		RFC 1123 specify when to proceed to the next MX host.)
 7512 		Suggested by Jonathan Kamens of OpenVision, Inc.
 7513 	Add new "-t" flag for map definitions (the "K" line in the .cf file).
 7514 		This causes map lookups that get a temporary failure (e.g.,
 7515 		name server failure) to _not_ defer the delivery of the
 7516 		message.  This should only be used if your configuration file
 7517 		is prepared to do something sensible in this case.  Based on
 7518 		an idea by Gregory Shapiro of WPI.
 7519 	Fix problem finding network interface addresses.  Patch from
 7520 		Motonori Nakamura.
 7521 	Don't reject qf entries that are not owned by your effective uid if
 7522 		you are not running set-user-ID; this makes management of
 7523 		certain kinds of firewall setups difficult.  Patch
 7524 		suggested by Eamonn Coleman of Qualcomm.
 7525 	Add persistent host status.  This keeps the information normally
 7526 		maintained within a single queue run in disk files that are
 7527 		shared between sendmail instances.  The HostStatusDirectory
 7528 		is the directory in which the information is maintained.  If
 7529 		not set, persistent host status is turned off.  If not a full
 7530 		pathname, it is relative to the queue directory.  A common
 7531 		value is ".hoststat".
 7532 		There are also two new operation modes:
 7533 		  * -bh prints the status of hosts that have had recent
 7534 		    connections.
 7535 		  * -bH purges the host statuses.  No attempt is made to save
 7536 		    recent status information.
 7537 		This feature was originally written by Paul Vixie of Vixie
 7538 		Enterprises for KJS and adapted for V8 by Mark Lovell of
 7539 		Bigrock Consulting.  Paul's funding of Mark and Mark's patience
 7540 		with my insistence that things fit cleanly into the V8
 7541 		framework is gratefully appreciated.
 7542 	New SingleThreadDelivery option (requires HostStatusDirectory to
 7543 		operate).  Avoids letting two sendmails on the local machine
 7544 		open connections to the same remote host at the same time.
 7545 		This reduces load on the other machine, but can cause mail to
 7546 		be delayed (for example, if one sendmail is delivering a huge
 7547 		message, other sendmails won't be able to send even small
 7548 		messages).  Also, it requires another file descriptor (for the
 7549 		lock file) per connection, so you may have to reduce
 7550 		ConnectionCacheSize to avoid running out of per-process
 7551 		file descriptors.  Based on the persistent host status code
 7552 		contributed by Paul Vixie and Mark Lovell.
 7553 	Allow sending to non-simple files (e.g., /dev/null) even if the
 7554 		SafeFileEnvironment option is set.  Problem noted by Bryan
 7555 		Costales.
 7556 	The -qR flag mistakenly matched flags in the "R" line of the queue
 7557 		file.  Problem noted by Bryan Costales.
 7558 	If a job was aborted using the interrupt signal (e.g., control-C from
 7559 		the keyboard), on some occasions an empty df file would be
 7560 		left around; these would collect in the queue directory.
 7561 		Problem noted by Bryan Costales.
 7562 	Change the makesendmail script to enhance the search for Makefiles
 7563 		based on release number.  For example, on SunOS 5.5.1, it will
 7564 		search for Makefile.SunOS.5.5.1, Makefile.SunOS.5.5, and then
 7565 		Makefile.SunOS.5.x (in addition to the other rules, e.g.,
 7566 		adding $arch).  Problem noted by Jason Mastaler of Atlanta
 7567 		Webmasters.
 7568 	When creating maps using "newaliases", always map the keys to lower
 7569 		case when creating the map unless the -f flag is specified on
 7570 		the map itself.  Previously this was done based on the F=u
 7571 		flag in the local mailer, which meant you could create aliases
 7572 		that you could never access.  Problem noted by Bob Wu of DEC.
 7573 	When a job was read from the queue, the bits causing notification on
 7574 		failure or delay were always set.  This caused those
 7575 		notifications to be sent even if NOTIFY=NEVER had been
 7576 		specified.  Problem noted by Steve Hubert of the University
 7577 		of Washington, Seattle.
 7578 	Add new configurable routine validate_connection (in conf.c).  This
 7579 		lets you decide if you are willing to accept traffic from
 7580 		this host.  If it returns FALSE, all SMTP commands will return
 7581 		"550 Access denied".  -DTCPWRAPPERS will include support for
 7582 		TCP wrappers; you will need to add -lwrap to the link line.
 7583 		(See src/READ_ME for details.)
 7584 	Don't include the "THIS IS A WARNING MESSAGE ONLY" banner on postmaster
 7585 		bounces.  Some people seemed to think that this could be
 7586 		confusing (even though it is true).  Suggested by Motonori
 7587 		Nakamura.
 7588 	Add new RunAsUser option; this causes sendmail to do a setuid to that
 7589 		user early in processing to avoid potential security problems.
 7590 		However, this means that all .forward and :include: files must
 7591 		be readable by that user, and all files to be written must be
 7592 		writable by that user and all programs will be executed by that
 7593 		user.  It is also incompatible with the SafeFileEnvironment
 7594 		option.  In other words, it may not actually add much to
 7595 		security.  However, it should be useful on firewalls and other
 7596 		places where users don't have accounts and the aliases file is
 7597 		well constrained.
 7598 	Add Timeout.iconnect.  This is like Timeout.connect except it is used
 7599 		only on the first attempt to delivery to an address.  It could
 7600 		be set to be lower than Timeout.connect on the principle that
 7601 		the mail should go through quickly to responsive hosts; less
 7602 		responsive hosts get to wait for the next queue run.
 7603 	Fix a problem on Solaris that occasionally causes programs
 7604 		(such as vacation) to hang with their standard input connected
 7605 		to a UDP port.  It also created some signal handling problems.
 7606 		The problems turned out to be an interaction between vfork(2)
 7607 		and some of the libraries, particularly NIS/NIS+.  I am
 7608 		indebted to Tor Egge <tegge@idt.ntnu.no> for this fix.
 7609 	Change user class map to do the same matching that actual delivery
 7610 		will do instead of just a /etc/passwd lookup.  This adds
 7611 		fuzzy matching to the user map.  Patch from Dan Oscarsson.
 7612 	The Timeout.* options are not safe -- they can be used to create a
 7613 		denial-of-service attack.  Problem noted by Christophe
 7614 		Wolfhugel.
 7615 	Don't send PostmasterCopy messages in the event of a "delayed"
 7616 		notification.  Suggested by Barry Bouwsma.
 7617 	Don't advertise "VERB" ESMTP extension if the "noexpn" privacy
 7618 		option is set, since this disables VERB mode.  Suggested
 7619 		by John Hawkinson of MIT.
 7620 	Complain if the QueueDirectory (Q) option is not set.  Problem noted
 7621 		by Motonori Nakamura of Kyoto University.
 7622 	Only queue messages on transient .forward open failures if there
 7623 		were no successful opens.  The previous behavior caused it
 7624 		to queue even if a "fall back" .forward was found.  Problem
 7625 		noted by Ann-Kian Yeo of the Dept. of Information Systems
 7626 		and Computer Science (DISCS), NUS, Singapore.
 7627 	Don't do 8->7 bit conversions when bouncing a MIME message that
 7628 		is bouncing because of a MIME error during 8->7 bit conversion;
 7629 		the encapsulated message will bounce again, causing a loop.
 7630 		Problem noted by Steve Hubert of the University of Washington.
 7631 	Create xf (transcript) files using the TempFileMode option value
 7632 		instead of 0644.  Suggested by Ann-Kian Yeo of the
 7633 		National University of Singapore.
 7634 	Print errors if setgid/setuid/etc. fail during delivery.  This helps
 7635 		detect cases where DefaultUid is set to something that the
 7636 		system can't cope with.
 7638 		Support for AIX/RS 2.2.1 from Mark Whetzel of Western
 7639 			Atlas International.
 7640 		Patches for Intel Paragon OSF/1 1.3 from Leo Bicknell
 7641 			<bicknell@ufp.org>.
 7642 		On DEC OSF/1 3.2 and earlier, the MatchGECOS code would only
 7643 			work on the first recipient of a message due to a
 7644 			bug in the getpwent family.  If this is something you
 7645 			use, you can define DEC_OSF_BROKEN_GETPWENT=1 for a
 7646 			workaround.  From Maximum Entropy of Sanford C.
 7647 			Bernstein and Associates.
 7648 		FreeBSD uname -r returns a string containing
 7649 			parentheses, which breaks makesendmail.  Reported
 7650 			by Piero Serini <piero@strider.ibenet.it>.
 7651 		Sequent DYNIX/ptx 4.0.2 patches from Jack Woolley of
 7652 			Systems and Computer Technology Corporation.
 7653 		Solaris 2.x: omit the UUCP grade parameter (-g flag) because
 7654 			it is system-dependent.  Problem noted by J.J. Bailey
 7655 			of Bailey Computer Consulting.
 7656 		Pyramid NILE running DC/OSx support from Earle F. Ake of
 7657 			Hassler Communication Systems Technology, Inc.
 7658 		HP-UX 10.x compile glitches, reported by Anne Brink of the
 7659 			U.S. Army and James Byrne of Harte & Lyne Limited.
 7660 		NetBSD from Matthew Green of the NetBSD crew.
 7661 		SCO 5.x from Keith Reynolds of SCO.
 7662 		IRIX 6.2 from Robert Tarrall of the University of
 7663 			Colorado and Kari Hurtta of the Finnish Meteorological
 7664 			Institute.
 7665 		UXP/DS (Fujitsu/ICL DS/90 series) support from Diego R.
 7666 			Lopez, CICA (Seville).
 7667 		NCR SVR4 MP-RAS 3.x support from Tom Moore of NCR.
 7668 		PTX 3.2.0 from Kenneth Stailey of the US Department of Labor
 7669 			Employment Standards Administration.
 7670 		Altos System V (5.3.1) from Tim Rice of Multitalents.
 7671 		Concurrent Systems Corporation Maxion from Donald R. Laster
 7672 			Jr.
 7673 		NetInfo maps (improved debugging and multi-valued aliases)
 7674 			from Adrian Steinmann of Steinmann Consulting.
 7675 		ConvexOS 11.5 (including SecureWare C2 and the Share Scheduler)
 7676 			from Eric Schnoebelen of Convex.
 7677 		Linux 2.0 mail.local patches from Horst von Brand.
 7678 		NEXTSTEP 3.x compilation from Robert La Ferla.
 7679 		NEXTSTEP 3.x code changes from Allan J. Nathanson of NeXT.
 7680 		Solaris 2.5 configuration fixes for mail.local by Jim Davis
 7681 			of the University of Arizona.
 7682 		Solaris 2.5 has a working setreuid.  Noted by David Linn of
 7683 			Vanderbilt University.
 7684 		Solaris changes for praliases, makemap, mailstats, and smrsh.
 7685 			Previously you had to add -DSOLARIS in Makefile.dist;
 7686 			this auto-detects.  Based on a patch from Randall
 7687 			Winchester of the University of Maryland.
 7688 	CONFIG: add generic-nextstep3.3.mc file.  Contributed by
 7689 		Robert La Ferla of Hot Software.
 7690 	CONFIG: allow mailertables to resolve to ``error:code message''
 7691 		(where "code" is an exit status) on domains (previously
 7692 		worked only on hosts).  Patch from Cor Bosman of Xs4all
 7693 		Foundation.
 7694 	CONFIG: hooks for IPv6-style domain literals.
 7695 	CONFIG: predefine ALIAS_FILE and change the prototype file so that
 7696 		if it is undefined the AliasFile option is never set; this
 7697 		should be transparent for most everyone.  Suggested by John
 7698 		Myers of CMU.
 7699 	CONFIG: add FEATURE(limited_masquerade).  Without this feature, any
 7700 		domain listed in $=w is masqueraded.  With it, only those
 7701 		domains listed in a MASQUERADE_DOMAIN macro are masqueraded.
 7702 	CONFIG: add FEATURE(masquerade_entire_domain).  This causes
 7703 		masquerading specified by MASQUERADE_DOMAIN to apply to all
 7704 		hosts under those domains as well as the domain headers
 7705 		themselves.  For example, if a configuration had
 7706 		MASQUERADE_DOMAIN(foo.com), then without this feature only
 7707 		foo.com would be masqueraded; with it, *.foo.com would be
 7708 		masqueraded as well.  Based on an implementation by Richard
 7709 		(Pug) Bainter of U. Texas.
 7710 	CONFIG: add FEATURE(genericstable) to do a more general rewriting of
 7711 		outgoing addresses.  Defaults to ``hash -o /etc/genericstable''.
 7712 		Keys are user names; values are outgoing mail addresses.  Yes,
 7713 		this does overlap with the user database, and figuring out
 7714 		just when to use which one may be tricky.  Based on code
 7715 		contributed by Richard (Pug) Bainter of U. Texas with updates
 7716 		from Per Hedeland of Ericsson.
 7717 	CONFIG: add FEATURE(virtusertable) to do generalized rewriting of
 7718 		incoming addresses.  Defaults to ``hash -o /etc/virtusertable''.
 7719 		Keys are either fully qualified addresses or just the host
 7720 		part (with the @ sign).  For example, a table containing:
 7721 			info@foo.com	foo-info
 7722 			info@bar.com	bar-info
 7723 			@baz.org	jane@elsewhere.net
 7724 		would send all mail destined for info@foo.com to foo-info
 7725 		(which is presumably an alias), mail addressed to info@bar.com
 7726 		to bar-info, and anything addressed to anyone at baz.org will
 7727 		be sent to jane@elsewhere.net.  The names foo.com, bar.com,
 7728 		and baz.org must all be in $=w.  Based on discussions with
 7729 		a great many people.
 7730 	CONFIG: add nullclient configurations to define SMTP_MAILER_FLAGS.
 7731 		Suggested by Richard Bainter.
 7732 	CONFIG: add FAX_MAILER_ARGS to tweak the arguments passed to the
 7733 		"fax" mailer.
 7734 	CONFIG: allow mailertable entries to resolve to local:user; this
 7735 		passes the original user@host in to procmail-style local
 7736 		mailers as the "detail" information to allow them to do
 7737 		additional clever processing.  From Joe Pruett of
 7738 		Teleport Corporation.  Delivery to the original user can
 7739 		be done by specifying "local:" (with nothing after the colon).
 7740 	CONFIG: allow any context that takes "mailer:domain" to also take
 7741 		"mailer:user@domain" to force mailing to the given user;
 7742 		"local:user" can also be used to do local delivery.  This
 7743 		applies on *_RELAY and in the mailertable entries.  Based
 7744 		on a suggestion by Ribert Kiessling of Easynet.
 7745 	CONFIG: Allow FEATURE(bestmx_is_local) to take an argument that
 7746 		limits the possible domains; this reduces the number of DNS
 7747 		lookups required to support this feature.  For example,
 7748 		FEATURE(bestmx_is_local, my.site.com) limits the lookups
 7749 		to domains under my.site.com.  Code contributed by Anthony
 7750 		Thyssen <anthony@cit.gu.edu.au>.
 7751 	CONFIG: LOCAL_RULESETS introduces any locally defined rulesets,
 7752 		such as the check_rcpt ruleset.  Suggested by Gregory Shapiro
 7753 		of WPI.
 7754 	CONFIG: MAILER_DEFINITIONS introduces any mailer definitions, in the
 7755 		event you have to define local mailers.  Suggested by
 7756 		Gregory Shapiro of WPI.
 7757 	CONFIG: fix cases where a three- (or more-) stage route-addr could
 7758 		be misinterpreted as a list:...; syntax.  Based on a patch by
 7759 		Vlado Potisk <Vlado_Potisk@tempest.sk>.
 7760 	CONFIG: Fix masquerading of UUCP addresses when the UUCP relay is
 7761 		remotely connected.  The address host!user was being
 7762 		converted to host!user@thishost instead of host!user@uurelay.
 7763 		Problem noted by William Gianopoulos of Raytheon Company.
 7764 	CONFIG: add confTO_ICONNECT to set Timeout.iconnect.
 7765 	CONFIG: change FEATURE(redirect) message from "User not local" to
 7766 		"User has moved"; the former wording was confusing if the
 7767 		new address is still on the local host.  Based on a suggestion
 7768 		by Andreas Luik.
 7769 	CONFIG: add support in FEATURE(nullclient) for $=E (exposed users).
 7770 		However, the class is not pre-initialized to contain root.
 7771 		Suggested by Gregory Neil Shapiro.
 7772 	CONTRIB: Remove XLA code at the request of the author, Christophe
 7773 		Wolfhugel.
 7774 	CONTRIB: Add re-mqueue.pl, contributed by Paul Pomes of Qualcomm.
 7775 	MAIL.LOCAL: make it possible to compile mail.local on Solaris.  Note
 7776 		well: this produces a slightly different mailbox format (no
 7777 		Content-Length: headers), file ownerships and modes are
 7778 		different (not owned by group mail; mode 600 instead of 660),
 7779 		and the local mailer flags will have to be tweaked (make them
 7780 		match bsd4.4) in order to use this mailer.  Patches from Paul
 7781 		Hammann of the Missouri Research and Education Network.
 7782 	MAIL.LOCAL: in some cases it could return EX_OK even though there
 7783 		was a delivery error, such as if the ownership on the file
 7784 		was wrong or the mode changed between the initial stat and
 7785 		the open.  Problem reported by William Colburn of the New
 7786 		Mexico Institute of Mining and Technology.
 7787 	MAILSTATS: handle zero length files more reliably.  Patch from Bryan
 7788 		Costales.
 7789 	MAILSTATS: add man page contributed by Keith Bostic of BSDI.
 7790 	MAKEMAP: The -d flag (to allow duplicate keys) to a btree map wasn't
 7791 		honored.  Fix from Michael Scott Shappe.
 7792 	PRALIASES: add man page contributed by Keith Bostic of BSDI.
 7793 	NEW FILES:
 7794 		src/Makefiles/Makefile.AIX.2
 7795 		src/Makefiles/Makefile.IRIX.6.2
 7796 		src/Makefiles/Makefile.maxion
 7797 		src/Makefiles/Makefile.NCR.MP-RAS.3.x
 7798 		src/Makefiles/Makefile.SCO.5.x
 7799 		src/Makefiles/Makefile.UXPDSV20
 7800 		mailstats/mailstats.8
 7801 		praliases/praliases.8
 7802 		cf/cf/generic-nextstep3.3.mc
 7803 		cf/feature/genericstable.m4
 7804 		cf/feature/limited_masquerade.m4
 7805 		cf/feature/masquerade_entire_domain.m4
 7806 		cf/feature/virtusertable.m4
 7807 		cf/ostype/aix2.m4
 7808 		cf/ostype/altos.m4
 7809 		cf/ostype/maxion.m4
 7810 		cf/ostype/solaris2.ml.m4
 7811 		cf/ostype/uxpds.m4
 7812 		contrib/re-mqueue.pl
 7814 		src/Makefiles/Makefile.Solaris
 7815 		contrib/xla/README
 7816 		contrib/xla/xla.c
 7818 		src/Makefiles/Makefile.NCR3000 =>	Makefile.NCR.MP-RAS.2.x
 7819 		src/Makefiles/Makefile.SCO.3.2v4.2 =>	Makefile.SCO.4.2
 7820 		src/Makefiles/Makefile.UXPDS =>		Makefile.UXPDSV10
 7821 		src/Makefiles/Makefile.NeXT =>		Makefile.NeXT.2.x
 7822 		src/Makefiles/Makefile.NEXTSTEP =>	Makefile.NeXT.3.x
 7824 8.7.6/8.7.3	1996/09/17
 7825 	SECURITY: It is possible to force getpwuid to fail when writing the
 7826 		queue file, causing sendmail to fall back to running programs
 7827 		as the default user.  This is not exploitable from off-site.
 7828 		Workarounds include using a unique user for the DefaultUser
 7829 		(old u & g options) and using smrsh as the local shell.
 7830 	SECURITY: fix some buffer overruns; in at least one case this allows
 7831 		a local user to get root.  This is not known to be exploitable
 7832 		from off-site.  The workaround is to disable chfn(1) commands.
 7834 8.7.5/8.7.3	1996/03/04
 7835 	Fix glitch in 8.7.4 when putting certain internal lines; this can
 7836 		in some case cause connections to hang or messages to have
 7837 		extra spaces in odd places.  Patch from Eric Wassenaar;
 7838 		reports from Eric Hall of Chiron Corporation, Stephen
 7839 		Hansen of Stanford University, Dean Gaudet of HotWired,
 7840 		and others.
 7842 8.7.4/8.7.3	1996/02/18
 7843 	SECURITY: In some cases it was still possible for an attacker to
 7844 		insert newlines into a queue file, thus allowing access to
 7845 		any user (except root).
 7846 	CONFIG: no changes -- it is not a bug that the configuration
 7847 		version number is unchanged.
 7849 8.7.3/8.7.3	1995/12/03
 7850 	Fix botch in name server timeout in RCPT code; this problem caused
 7851 		two responses in SMTP, which breaks things horribly.  Fix
 7852 		from Gregory Neil Shapiro of WPI.
 7853 	Verify that L= value on M lines cannot be negative, which could cause
 7854 		negative array subscripting.  Not a security problem since
 7855 		this has to be in the config file, but it could have caused
 7856 		core dumps.  Pointed out by Bryan Costales.
 7857 	Fix -d21 debug output for long macro names.  Pointed out by Bryan
 7858 		Costales.
 7860 		SCO doesn't have ftruncate.  From Bill Aten of Computerizers.
 7861 		IBM's version of arpa/nameser.h defaults to the wrong byte
 7862 			order.  Tweak it to work properly.  Based on fixes
 7863 			from Fletcher Mattox of UTexas and Betty Lee of
 7864 			Stanford University.
 7865 	CONFIG: add confHOSTS_FILE m4 variable to set HostsFile option.
 7866 		Deficiency pointed out by Bryan Costales of ICSI.
 7868 8.7.2/8.7.2	1995/11/19
 7869 	REALLY fix the backslash escapes in SmtpGreetingMessage,
 7870 		OperatorChars, and UnixFromLine options.  They were not
 7871 		properly repaired in 8.7.1.
 7872 	Completely delete the Bcc: header if and only if there are other
 7873 		valid recipient headers (To:, Cc: or Apparently-To:, the
 7874 		last being a historic botch, of course).  If Bcc: is the
 7875 		only recipient header in the message, its value is tossed,
 7876 		but the header name is kept.  The old behavior (always keep
 7877 		the header name and toss the value) allowed primary recipients
 7878 		to see that a Bcc: went to _someone_.
 7879 	Include queue id on ``Authentication-Warning: <host>: <user> set
 7880 		sender to <address> using -f'' syslog messages.  Suggested
 7881 		by Kari Hurtta.
 7882 	If a sequence or switch map lookup entry gets a tempfail but then
 7883 		continues on to another map type, but the name is not found,
 7884 		return a temporary failure from the sequence or switch map.
 7885 		For example, if hosts search ``dns files'' and DNS fails
 7886 		with a tempfail, the hosts map will go on and search files,
 7887 		but if it fails the whole thing should be a tempfail, not
 7888 		a permanent (host unknown) failure, even though that is the
 7889 		failure in the hosts.files map.  This error caused hard
 7890 		bounces when it should have requeued.
 7891 	Aliases to files such as /users/bar/foo/inbox, with /users/bar/foo
 7892 		owned by bar mode 700 and inbox being set-user-ID bar stopped
 7893 		working properly due to excessive paranoia.  Pointed out by
 7894 		John Hawkinson of Panix.
 7895 	An SMTP RCPT command referencing a host that gave a nameserver
 7896 		timeout would return a 451 command (8.6 accepted it and
 7897 		queued it locally).  Revert to the 8.6 behavior in order
 7898 		to simplify queue management for clustered systems.  Suggested
 7899 		by Gregory Neil Shapiro of WPI.  The same problem could break
 7900 		MH, which assumes that the SMTP session will succeed (tsk, tsk
 7901 		-- mail gets lost!); this was pointed out by Stuart Pook of
 7902 		Infobiogen.
 7903 	Fix possible buffer overflow in munchstring().  This was not a security
 7904 		problem because you couldn't specify any argument to this
 7905 		without first giving up root privileges, but it is still a
 7906 		good idea to avoid future problems.  Problem noted by John
 7907 		Hawkinson and Sam Hartman of MIT.
 7908 	``452 Out of disk space for temp file'' messages weren't being
 7909 		printed.  Fix from David Perlin of Nanosoft.
 7910 	Don't advertise the ESMTP DSN extension if the SendMimeErrors option
 7911 		is not set, since this is required to get the actual DSNs
 7912 		created.  Problem pointed out by John Gardiner Myers of CMU.
 7913 	Log permission problems that cause .forward and :include: files to
 7914 		be untrusted or ignored on log level 12 and higher.  Suggested
 7915 		by Randy Martin of Clemson University.
 7916 	Allow user ids in U= clauses of M lines to have hyphens and
 7917 		underscores.
 7918 	Fix overcounting of recipients -- only happened when sending to an
 7919 		alias.  Pointed out by Mark Andrews of SGI and Jack Woolley
 7920 		of Systems and Computer Technology Corporation.
 7921 	If a message is sent to an address that fails, the error message that
 7922 		is returned could show some extraneous "success" information
 7923 		included even if the user did not request success notification,
 7924 		which was confusing.  Pointed out by Allan Johannesen of WPI.
 7925 	Config files that had no AliasFile definition were defaulting to
 7926 		using /etc/aliases; this caused problems with nullclient
 7927 		configurations.  Change it back to the 8.6 semantics of
 7928 		having no local alias file unless it is declared.  Problem
 7929 		noted by Charles Karney of Princeton University.
 7930 	Fix compile problem if NOTUNIX is defined.  Pointed out by Bryan
 7931 		Costales of ICSI.
 7932 	Map lookups of class "userdb" maps were always case sensitive; they
 7933 		should be controlled by the -f flag like other maps.  Pointed
 7934 		out by Bjart Kvarme <bjart.kvarme@usit.uio.no>.
 7935 	Fix problem that caused some addresses to be passed through ruleset 5
 7936 		even when they were tagged as "sticky" by prefixing the
 7937 		address with an "@".  Patch from Thomas Dwyer III of Michigan
 7938 		Technological University.
 7939 	When converting a message to Quoted-Printable, prevent any lines with
 7940 		dots alone on a line by themselves.  This is because of the
 7941 		preponderance of broken mailers that still get this wrong.
 7942 		Code contributed by Per Hedeland of Ericsson.
 7943 	Fix F{macro}/file construct -- it previously did nothing.  Pointed
 7944 		out by Bjart Kvarme of USIT/UiO (Norway).
 7945 	Announce whether a cached connection is SMTP or ESMTP (in -v mode).
 7946 		Requested by Allan Johannesen.
 7947 	Delete check for text format of alias files -- it should be legal
 7948 		to have the database format of the alias files without the
 7949 		text version.  Problem pointed out by Joe Rhett of Navigist,
 7950 		Inc.
 7951 	If "Ot" was specified with no value, the TZ variable was not properly
 7952 		imported from the environment.  Pointed out by Frank Crawford
 7953 		<frank@ansto.gov.au>.
 7954 	Some architectures core dumped on "program" maps that didn't have
 7955 		extra arguments.  Patch from Booker C. Bense of Stanford
 7956 		University.
 7957 	Queue run processes would re-spawn daemons when given a SIGHUP; only
 7958 		the parent should do this.  Fix from Brian Coan of the
 7959 		Association for Progressive Communications.
 7960 	If MinQueueAge was set and a message was considered but not run
 7961 		during a queue run and the Timeout.queuereturn interval was
 7962 		reached, a "timed out" error message would be returned that
 7963 		didn't include the failed address (and claimed to be a warning
 7964 		even though it was fatal).  The fix is to not return such
 7965 		messages until they are actually tried, i.e., in the next
 7966 		MinQueueAge interval.  Problem noted by Rein Tollevik of
 7967 		SINTEF RUNIT, Oslo.
 7968 	Add HES_GETMAILHOST compile flag to support MIT Hesiod distributions
 7969 		that have the hes_getmailhost() routine.  DEC Hesiod
 7970 		distributions do not have this routine.  Based on a patch
 7971 		from Betty Lee of Stanford University.
 7972 	Extensive cleanups to map open code to handle a locking race condition
 7973 		in ndbm, hash, and btree format database files on some (most
 7974 		non-4.4-BSD based) OS architectures.  This should solve the
 7975 		occasional "user unknown" problem during alias rebuilds that
 7976 		has plagued me for quite some time.  Based on a patch from
 7977 		Thomas Dwyer III of Michigan Technological University.
 7979 		Solaris: Change location of newaliases and mailq from
 7980 			/usr/ucb to /usr/bin to match Sun settings.  From
 7981 			James B. Davis of TCI.
 7982 		DomainOS: Makefile.DomainOS doesn't require -ldbm.  From
 7983 			Don Lewis of Silicon Systems.
 7984 		HP-UX 10: rename Makefile.HP-UX.10 => Makefile.HP-UX.10.x
 7985 			so that the makesendmail script will find it.  Pointed
 7986 			out by Richard Allen of the University of Iceland.
 7987 			Also, use -Aa -D_HPUX_SOURCE instead of -Ae, which
 7988 			isn't supported on all compilers.
 7989 		UXPDS: compilation fixes from Diego R. Lopez.
 7990 	CONFIG: FAX mailer wasn't setting .FAX as a pseudo-domain unless
 7991 		you also had a FAX_RELAY.  From Thomas.Tornblom@Hax.SE.
 7992 	CONFIG: Minor glitch in S21 -- attachment of local domain name
 7993 		didn't have trailing dot.  From Jim Hickstein of Teradyne.
 7994 	CONFIG: Fix best_mx_is_local feature to allow nested addresses such as
 7995 		user%host@thishost.  From Claude Scarpelli of Infobiogen
 7996 		(France).
 7997 	CONFIG: OSTYPE(hpux10) failed to define the location of the help file.
 7998 		Pointed out by Hannu Martikka of Nokia Telecommunications.
 7999 	CONFIG: Diagnose some inappropriate ordering in configuration files,
 8000 		such as FEATURE(smrsh) listed after MAILER(local).  Based on
 8001 		a bug report submitted by Paul Hoffman of Proper Publishing.
 8002 	CONFIG: Make OSTYPE files consistently not override settings that
 8003 		have already been set.  Previously it worked differently
 8004 		for different files.
 8005 	CONFIG: Change relay mailer to do masquerading like 8.6 did.  My take
 8006 		is that this is wrong, but the change was causing problems
 8007 		for some people.  From Per Hedeland of Ericsson.
 8008 	CONTRIB: bitdomain.c patch from John Gardiner Myers <jgm+@CMU.EDU>;
 8009 		portability changes for Posix environments (no functional
 8010 		changes).
 8012 8.7.1/8.7.1	1995/10/01
 8013 	Old macros that have become options (SmtpGreetingMessage,
 8014 		OperatorChars, and UnixFromLine) didn't allow backslash
 8015 		escapes in the options, where they previously had.  Bug
 8016 		pointed out by John Hawkinson of MIT.
 8017 	Fix strange case of an executable called by a program map that
 8018 		returns a value but also a non-zero exit status; this
 8019 		would give contradictory results in the higher level; in
 8020 		particular, the default clause in the map lookup would be
 8021 		ignored.  Change to ignore the value if the program returns
 8022 		non-zero exit status.  From Tom Moore of AT&T GIS.
 8023 	Shorten parameters passed to syslog() in some contexts to avoid a
 8024 		bug in many vendors' implementations of that routine.  Although
 8025 		this isn't really a bug in sendmail per se, and my solution
 8026 		has to assume that syslog() has at least a 1K buffer size
 8027 		internally (I know some vendors have shortened this
 8028 		dramatically -- they're on their own), sendmail is a popular
 8029 		target.  Also, limit the size of %s arguments in sprintf.
 8030 		These both have possible security implications.  Solutions
 8031 		suggested by Casper Dik of Sun's Network Security Group
 8032 		(Holland), Mark Seiden, and others.
 8033 	Fix a problem that might cause a non-standard -B (body type)
 8034 		parameter to be passed to the next server with undefined
 8035 		results.  This could have security implications.
 8036 	If a filesystem was at > 100% utilization, the freediskspace()
 8037 		routine incorrectly returned an error rather than zero.
 8038 		Problem noted by G. Paul Ziemba of Alantec.
 8039 	Change MX sort order so that local hostnames (those in $=w) always
 8040 		sort first within a given preference.  This forces the bestmx
 8041 		map to always return the local host first, if it is included
 8042 		in the list of highest priority MX records.  From K. Robert
 8043 		Elz.
 8044 	Avoid some possible null pointer dereferences.  Fixes from Randy
 8045 		Martin <WOLF@CLEMSON.EDU>
 8046 	When sendmail starts up on systems that have no fully qualified
 8047 		domain name (FQDN) anywhere in the first matching host map
 8048 		(e.g., /etc/hosts if the hosts service searches "files dns"),
 8049 		sendmail would sleep to try to find a FQDN, which it really
 8050 		really needs.  This has been changed to fall through to the
 8051 		next map type if it can't find a FQDN -- i.e., if the hosts
 8052 		file doesn't have a FQDN, it will try dns even though the
 8053 		short name was found in /etc/hosts.  This is probably a crock,
 8054 		but many people have hosts files without FQDNs.  Remember:
 8055 		domain names are your friends.
 8056 	Log a high-priority message if you can't find your FQDN during startup.
 8057 		Suggested by Simon Barnes of Schlumberger Limited.
 8058 	When using Hesiod, initialize it early to improve error reporting.
 8059 		Patch from Don Lewis of Silicon Systems, Inc.
 8060 	Apparently at least some versions of Linux have a 90 !minute! TCP
 8061 		connection timeout in the kernel.  Add a new "connect" timeout
 8062 		to limit this time.  Defaults to zero (use whatever the
 8063 		kernel provides).  Based on code contributed by J.R. Oldroyd
 8064 		of TerraNet.
 8065 	Under some circumstances, a failed message would not be properly
 8066 		removed from the queue, causing tons of bogus error messages.
 8067 		(This fix eliminates the problematic EF_KEEPQUEUE flag.)
 8068 		Problem noted by Allan E Johannesen and Gregory Neil Shapiro
 8069 		of WPI.
 8071 		On IRIX 5.x, there was an inconsistency in the setting
 8072 			of sendmail.st location.  Change the Makefile to
 8073 			install it in /var/sendmail.st to match the OSTYPE
 8074 			file and SGI standards.  From Andre
 8075 			<andre@curry.zfe.siemens.de>.
 8076 		Support for Fujitsu/ICL UXP/DS (For the DS/90 Series)
 8077 			from Diego R. Lopez <drlopez@cica.es>.
 8078 		Linux compilation patches from J.R. Oldroyd of TerraNet, Inc.
 8079 		LUNA 2 Mach patches from Motonori Nakamura.
 8080 		SunOS Makefile was including -ldbm, which is for the old
 8081 			dbm library.  The ndbm library is part of libc.
 8082 	CONFIG: avoid bouncing ``user@host.'' (note trailing dot) with
 8083 		``local configuration error'' in nullclient configuration.
 8084 		Patch from Gregory Neil Shapiro of WPI.
 8085 	CONFIG: don't allow an alias file in nullclient configurations --
 8086 		since all addresses are relayed, they give errors during
 8087 		rebuild.  Suggested by Per Hedeland of Ericsson.
 8088 	CONFIG: local mailer on Solaris 2 should always get a -f flag because
 8089 		otherwise the F=S causes the From_ line to imply that root is
 8090 		the sender.  Problem pointed out by Claude Scarpelli of
 8091 		Infobiogen (France).
 8092 	NEW FILES:
 8093 		cf/feature/use_ct_file.m4 (omitted from 8.7 by mistake)
 8094 		src/Makefiles/Makefile.KSR (omitted from 8.7 by mistake)
 8095 		src/Makefiles/Makefile.UXPDS
 8097 8.7/8.7		1995/09/16
 8098 	Fix a problem that could cause sendmail to run out of file
 8099 		descriptors due to a trashed data structure after a
 8100 		vfork.  Fix from Brian Coan of the Institute for
 8101 		Global Communications.
 8102 	Change the VRFY response if you have disabled VRFY -- some
 8103 		people seemed to think that it was too rude.
 8104 	Avoid reference to uninitialized file descriptor if HASFLOCK
 8105 		was not defined.  This was used "safely" in the sense
 8106 		that it only did a stat, but it would have set the
 8107 		map modification time improperly.  Problem pointed out
 8108 		by Roy Mongiovi of Georgia Tech.
 8109 	Clean up the Subject: line on warning messages and return
 8110 		receipts so that they don't say "Returned mail:"; this
 8111 		can be confusing.
 8112 	Move ruleset entry/exit debugging from 21.2 to 21.1 -- this is
 8113 		useful enough to make it worthwhile printing on "-d".
 8114 	Avoid logging alias statistics every time you read the alias
 8115 		file on systems with no database method compiled in.
 8116 	If you have a name with a trailing dot, and you try looking it
 8117 		up using gethostbyname without the dot (for /etc/hosts
 8118 		compatibility), be sure to turn off RES_DEFNAMES and
 8119 		RES_DNSRCH to avoid finding the wrong name accidentally.
 8120 		Problem noted by Charles Amos of the University of
 8121 		Maryland.
 8122 	Don't do timeouts in collect if you are not running SMTP.
 8123 		There is nothing that says you can't have a long
 8124 		running program piped into sendmail (possibly via
 8125 		/bin/mail, which just execs sendmail).  Problem reported
 8126 		by Don "Truck" Lewis of Silicon Systems.
 8127 	Try gethostbyname() even if the DNS lookup fails iff option I
 8128 		is not set.  This allows you to have hosts listed in
 8129 		NIS or /etc/hosts that are not known to DNS.  It's normally
 8130 		a bad idea, but can be useful on firewall machines.  This
 8131 		should really be broken out on a separate flag, I suppose.
 8132 	Avoid compile warnings against BIND 4.9.3, which uses function
 8133 		prototypes.  From Don Lewis of Silicon Systems.
 8134 	Avoid possible incorrect diagnosis of DNS-related errors caused
 8135 		by things like attempts to resolve uucp names using
 8136 		$[ ... $] -- the fix is to clear h_errno at appropriate
 8137 		times.  From Kyle Jones of UUNET.
 8138 	SECURITY: avoid denial-of-service attacks possible by destroying
 8139 		the alias database file by setting resource limits low.
 8140 		This involves adding two new compile-time options:
 8141 		HASSETRLIMIT (indicating that setrlimit(2) support is
 8142 		available) and HASULIMIT (indicating that ulimit(2) support
 8143 		is available -- the Release 3 form is used).  The former
 8144 		is assumed on BSD-based systems, the latter on System
 8145 		V-based systems.  Attack noted by Phil Brandenberger of
 8146 		Swarthmore University.
 8147 	New syntaxes in test (-bt) mode:
 8148 		``.Dmvalue'' will define macro "m" to "value".
 8149 		``.Ccvalue'' will add "value" to class "c".
 8150 		``=Sruleset'' will dump the contents of the indicated
 8151 			ruleset.
 8152 		``=M'' will display the known mailers.
 8153 		``-ddebug-spec'' is equivalent to the command-line
 8154 			-d debug flag.
 8155 		``$m'' will print the value of macro $m.
 8156 		``$=c'' will print the contents of class $=c.
 8157 		``/mx host'' returns the MX records for ``host''.
 8158 		``/parse address'' will parse address, returning the value of
 8159 			crackaddr (essentially, the comment information)
 8160 			and the parsed address.
 8161 		``/try mailer address'' will rewrite address into the form
 8162 			it will have when presented to the indicated mailer.
 8163 		``/tryflags flags'' will set flags used by parsing.  The
 8164 			flags can be `H' for header or `E' for envelope,
 8165 			and `S' for sender or `R' for recipient.  These
 8166 			can be combined, so `HR' sets flags for header
 8167 			recipients.
 8168 		``/canon hostname'' will try to canonify hostname and
 8169 			return the result.
 8170 		``/map mapname key'' will look up `key' in the indicated
 8171 			`mapname' and return the result.
 8172 	Somewhat better handling of UNIX-domain socket addresses -- it
 8173 		should show the pathname rather than hex bytes.
 8174 	Restore ``-ba'' mode -- this reads a file from stdin and parses
 8175 		the header for envelope sender information and uses
 8176 		CR-LF as message terminators.  It was thought to be
 8177 		obsolete (used only for Arpanet NCP protocols), but it
 8178 		turns out that the UK ``Grey Book'' protocols require
 8179 		that functionality.
 8180 	Fix a fix in previous release -- if gethostname and gethostbyname
 8181 		return a name without dots, and if an attempt to canonify
 8182 		that name fails, wait one minute and try again.  This can
 8183 		result in an extra 60 second delay on startup if your system
 8184 		hostname (as returned by hostname(1)) has no dot and no names
 8185 		listed in /etc/hosts or your NIS map have a dot.
 8186 	Check for proper domain name on HELO and EHLO commands per
 8187 		RFC 1123 section 5.2.5.  Problem noted by Thomas Dwyer III
 8188 		of Michigan Technological University.
 8189 	Relax chownsafe rules slightly -- old version said that if you
 8190 		can't tell if _POSIX_CHOWN_RESTRICTED is set (that is,
 8191 		if fpathconf returned EINVAL or ENOSYS), assume that
 8192 		chown is not safe.  The new version falls back to whether
 8193 		you are on a BSD system or not.  This is important for
 8194 		SunOS, which apparently always returns one of those
 8195 		error codes.  This impacts whether you can mail to files
 8196 		or not.
 8197 	Syntax errors such as unbalanced parentheses in the configuration
 8198 		file could be omitted if you had "Oem" prior to the
 8199 		syntax error in the config file.  Change to always print
 8200 		the error message.  It was especially weird because it
 8201 		would cause a "warning" message to be sent to the Postmaster
 8202 		for every message sent (but with no transcript).  Problem
 8203 		noted by Gregory Paris of Motorola.
 8204 	Rewrite collect and putbody to handle full 8-bit data, including
 8205 		zero bytes.  These changes are internally extensive, but
 8206 		should have minimal impact on external function.
 8207 	Allow full words for option names -- if the option letter is
 8208 		(apparently) a space, then take the word following -- e.g.,
 8209 			O MatchGECOS=TRUE
 8210 		The full list of old and new names is as follows:
 8211 			7	SevenBitInput
 8212 			8	EightBitMode
 8213 			A	AliasFile
 8214 			a	AliasWait
 8215 			B	BlankSub
 8216 			b	MinFreeBlocks/MaxMessageSize
 8217 			C	CheckpointInterval
 8218 			c	HoldExpensive
 8219 			D	AutoRebuildAliases
 8220 			d	DeliveryMode
 8221 			E	ErrorHeader
 8222 			e	ErrorMode
 8223 			f	SaveFromLine
 8224 			F	TempFileMode
 8225 			G	MatchGECOS
 8226 			H	HelpFile
 8227 			h	MaxHopCount
 8228 			i	IgnoreDots
 8229 			I	ResolverOptions
 8230 			J	ForwardPath
 8231 			j	SendMimeErrors
 8232 			k	ConnectionCacheSize
 8233 			K	ConnectionCacheTimeout
 8234 			L	LogLevel
 8235 			l	UseErrorsTo
 8236 			m	MeToo
 8237 			n	CheckAliases
 8238 			O	DaemonPortOptions
 8239 			o	OldStyleHeaders
 8240 			P	PostmasterCopy
 8241 			p	PrivacyOptions
 8242 			Q	QueueDirectory
 8243 			q	QueueFactor
 8244 			R	DontPruneRoutes
 8245 			r, T	Timeout
 8246 			S	StatusFile
 8247 			s	SuperSafe
 8248 			t	TimeZoneSpec
 8249 			u	DefaultUser
 8250 			U	UserDatabaseSpec
 8251 			V	FallbackMXHost
 8252 			v	Verbose
 8253 			w	TryNullMXList
 8254 			x	QueueLA
 8255 			X	RefuseLA
 8256 			Y	ForkEachJob
 8257 			y	RecipientFactor
 8258 			z	ClassFactor
 8259 			Z	RetryFactor
 8260 		The old macros that passed information into sendmail have
 8261 		been changed to options; those correspondences are:
 8262 			$e	SmtpGreetingMessage
 8263 			$l	UnixFromLine
 8264 			$o	OperatorChars
 8265 			$q	(deleted -- not necessary)
 8266 		To avoid possible problems with an older sendmail,
 8267 		configuration level 6 is accepted by this version of
 8268 		sendmail; any config file using the new names should
 8269 		specify "V6" in the configuration.
 8270 	Change address parsing to properly note that a phrase before a
 8271 		colon and a trailing semicolon are essentially the same
 8272 		as text outside of angle brackets (i.e., sendmail should
 8273 		treat them as comments).  This is to handle the
 8274 		``group name: addr1, addr2, ..., addrN;'' syntax (it will
 8275 		assume that ``group name:'' is a comment on the first
 8276 		address and the ``;'' is a comment on the last address).
 8277 		This requires config file support to get right.  It does
 8278 		understand that :: is NOT this syntax, and can be turned
 8279 		off completely by setting the ColonOkInAddresses option.
 8280 	Level 6 config files added with new mailer flags:
 8281 		    A	Addresses are aliasable.
 8282 		    i	Do udb rewriting on envelope as well as header
 8283 			sender lines.  Applies to the from address mailer
 8284 			flags rather than the recipient mailer flags.
 8285 		    j	Do udb rewriting on header recipient addresses.
 8286 			Applies to the sender mailer flags rather than the
 8287 			recipient mailer flags.
 8288 		    k	Disable check for loops when doing HELO command.
 8289 		    o	Always run as the mail recipient, even on local
 8290 			delivery.
 8291 		    w	Check for an /etc/passwd entry for this user.
 8292 		    5	Pass addresses through ruleset 5.
 8293 		    :	Check for :include: on this address.
 8294 		    |	Check for |program on this address.
 8295 		    /	Check for /file on this address.
 8296 		    @	Look up sender header addresses in the user
 8297 			database.  Applies to the mailer flags for the
 8298 			mailer corresponding to the envelope sender
 8299 			address, rather than to recipient mailer flags.
 8300 		Pre-level 6 configuration files set A, w, 5, :, |, /, and @
 8301 		on the "local" mailer, the o flag on the "prog" and "*file*"
 8302 		mailers, and the ColonOkInAddresses option.
 8303 	Eight-to-seven bit MIME conversions.  This borrows ideas from
 8304 		John Beck of Hewlett-Packard, who generously contributed
 8305 		their implementation to me, which I then didn't use (see
 8306 		mime.c for an explanation of why).  This adds the
 8307 		EightBitMode option (a.k.a. `8') and an F=8 mailer flag
 8308 		to control handling of 8-bit data.  These have to cope with
 8309 		two types of 8-bit data: unlabelled 8-bit data (that is,
 8310 		8-bit data that is entered without declaring it as 8-bit
 8311 		MIME -- technically this is illegal according to the
 8312 		specs) and labelled 8-bit data (that is, it was declared
 8313 		as 8BITMIME in the ESMTP session or by using the
 8314 		-B8BITMIME command line flag).  If the F=8 mailer flag is
 8315 		set then 8-bit data is sent to non-8BITMIME machines
 8316 		instead of converting to 7 bit (essentially using
 8317 		just-send-8 semantics).  The values for EightBitMode are:
 8318 		    m	convert unlabelled 8-bit input to 8BITMIME, and do
 8319 			any necessary conversion of 8BITMIME to 7BIT
 8320 			(essentially, the full MIME option).
 8321 		    p	pass unlabelled 8-bit input, but convert labelled
 8322 			8BITMIME input to 7BIT as required (default).
 8323 		    s	strict adherence: reject unlabelled 8-bit input,
 8324 			convert 8BITMIME to 7BIT as required.  The F=8
 8325 			flag is ignored.
 8326 		Unlabelled 8-bit data is rejected in mode `s' regardless of
 8327 			the setting of F=8.
 8328 	Add new internal class 'n', which is the set of MIME Content-Types
 8329 		which can not be 8 to 7 bit encoded because of other
 8330 		considerations.  Types "multipart/*" and "message/*" are
 8331 		never directly encoded (although their components can be).
 8332 	Add new internal class 's', which is the set of subtypes of the
 8333 		MIME message/* content type that can be treated as though
 8334 		they are an RFC822 message.  It is predefined to have
 8335 		"rfc822".  Suggested By Kari Hurtta.
 8336 	Add new internal class 'e'.  This is the set of MIME
 8337 		Content-Transfer-Encodings that can be converted to
 8338 		a seven bit format (Quoted-Printable or Base64).  It is
 8339 		preinitialized to contain "7bit", "8bit", and "binary".
 8340 	Add C=charset mailer parameter and the the DefaultCharSet option (no
 8341 		short name) to set the default character set to use in the
 8342 		Content-Type: header when doing encoding of an 8-bit message
 8343 		which isn't marked as MIME into MIME format.  If the C=
 8344 		parameter is set on the Envelope From address, use that as
 8345 		the default encoding; else use the DefaultCharSet option.
 8346 		If neither is set, it defaults to "unknown-8bit" as
 8347 		suggested by RFC 1428 section 3.
 8348 	Allow ``U=user:group'' field in mailer definition to set a default
 8349 		user and group that a mailer will be executed as.  This
 8350 		overrides the 'u' and 'g' options, and if the `F=S' flag is
 8351 		also set, it is the uid/gid that will always be used (that
 8352 		is, the controlling address is ignored).  The values may be
 8353 		numeric or symbolic; if only a symbolic user is given (no
 8354 		group) that user's default group in the passwd file is used
 8355 		as the group.  Based on code donated by Chip Rosenthal of
 8356 		Unicom.
 8357 	Allow `u' option to also accept user:group as a value, in the same
 8358 		fashion as the U= mailer option.
 8359 	Add the symbolic time zone name in the Arpanet format dates (as
 8360 		a comment).  This adds a new compile-time configuration
 8361 		flag: TZ_TYPE can be set to TZ_TM_NAME (use the value
 8362 		of (struct tm *)->tm_name), TZ_TM_ZONE (use the value
 8363 		of (struct tm *)->tm_zone), TZ_TZNAME (use extern char
 8364 		*tzname[(struct tm *)->tm_isdst]), TZ_TIMEZONE (use
 8365 		timezone()), or TZ_NONE (don't include the comment).  Code
 8366 		from Chip Rosenthal.
 8367 	The "Timeout" option (formerly "r") is extended to allow suboptions.
 8368 		For example,
 8369 		    O Timeout.helo = 2m
 8370 		There are also two new suboptions "queuereturn" and
 8371 		"queuewarn"; these subsume the old T option.  Thus, to
 8372 		set them both the preferred new syntax is
 8373 		    O Timeout.queuereturn = 5d
 8374 		    O Timeout.queuewarn = 4h
 8375 	Sort queue by host name instead of by message priority if the
 8376 		QueueSortOrder option (no short name) is set is set to
 8377 		``host''.  This makes better use of the connection cache,
 8378 		but may delay more ``interactive'' messages behind large
 8379 		backlogs under some circumstances.  This is probably a
 8380 		good option if you have high speed links or don't do lots
 8381 		of ``batch'' messages, but less good if you are using
 8382 		something like PPP on a 14.4 modem.  Based on code
 8383 		contributed by Roy Mongiovi of Georgia Tech (my main
 8384 		contribution was to make it configurable).
 8385 	Save i-number of df file in qf file to simplify rebuilding of queue
 8386 		after disastrous disk crash.  Suggested by Kyle Jones of
 8387 		UUNET; closely based on code from KJS DECWRL code written
 8388 		by Paul Vixie.  NOTA BENE: The qf files produced by 8.7
 8389 		are NOT back compatible with 8.6 -- that is, you can convert
 8390 		from 8.6 to 8.7, but not the other direction.
 8391 	Add ``F=d'' mailer flag to disable all use of angle brackets in
 8392 		route-addrs in envelopes; this is because in some cases
 8393 		they can be sent to the shell, which interprets them as
 8394 		I/O redirection.
 8395 	Don't include error file (option E) with return-receipts; this
 8396 		can be confusing.
 8397 	Don't send "Warning: cannot send" messages to owner-* or
 8398 		*-request addresses.  Suggested by Christophe Wolfhugel
 8399 		of the Institut Pasteur, Paris.
 8400 	Allow -O command line flag to set long form options.
 8401 	Add "MinQueueAge" option to set the minimum time between attempts
 8402 		to run the queue.  For example, if the queue interval
 8403 		(-q value) is five minutes, but the minimum queue age
 8404 		is fifteen minutes, jobs won't be tried more often than
 8405 		once every fifteen minutes.  This can be used to give
 8406 		you more responsiveness if your delivery mode is set to
 8407 		queue-only.
 8408 	Allow "fileopen" timeout (default: 60 seconds) for opening
 8409 		:include: and .forward files.
 8410 	Add "-k", "-v", and "-z" flags to map definitions; these set the
 8411 		key field name, the value field name, and the field
 8412 		delimiter.  The field delimiter can be a single character
 8413 		or the sequence "\t" or "\n" for tab or newline.
 8414 		These are for use by NIS+ and similar access methods.
 8415 	Change maps to always strip quotes before lookups; the -q flag
 8416 		turns off this behavior.  Suggested by Motonori Nakamura.
 8417 	Add "nisplus" map class.  Takes -k and -v flags to choose the
 8418 		key and value field names respectively.  Code donated by
 8419 		Sun Microsystems.
 8420 	Add "hesiod" map class.  The "file name" is used as the
 8421 		"HesiodNameType" parameter to hes_resolve(3).  Returns the
 8422 		first value found for the match.  Code donated by Scott
 8423 		Hutton of Indiana University.
 8424 	Add "netinfo" (NeXT NetInfo) map class.  Maps can have a -k flag to
 8425 		specify the name of the property that is searched as the
 8426 		key and a -v flag to specify the name of the property that
 8427 		is returned as the value (defaults to "members").  The
 8428 		default map is "/aliases".  Some code based on code
 8429 		contributed by Robert La Ferla of Hot Software.
 8430 	Add "text" map class.  This does slow, linear searches through
 8431 		text files.  The -z flag specifies a column delimiter
 8432 		(defaults to any sequence of white space), the -k flag
 8433 		sets the key column number, and the -v flag sets the
 8434 		value column number.  Lines beginning with `#' are treated
 8435 		as comments.
 8436 	Add "program" map class to execute arbitrary programs.  The search
 8437 		key is presented as the last argument; the output is one
 8438 		line read from the programs standard output.  Exit statuses
 8439 		are from sysexits.h.
 8440 	Add "sequence" map class -- searches maps in sequence until it
 8441 		finds a match.  For example, the declarations:
 8442 		    Kmap1 ...
 8443 		    Kmap2 ...
 8444 		    Kmapseq sequence map1 map2
 8445 		defines a map "mapseq" that first searches map1; if the
 8446 		value is found it is returned immediately, otherwise
 8447 		map2 is searched and the value returned.
 8448 	Add "switch" map class.  This is much like "sequence" except that
 8449 		the ordering is fetched from an external file, usually
 8450 		the system service switch.  The parameter is the name of
 8451 		the service to switch on, and the maps that it will use
 8452 		are the name of the switch map followed by ".service_type".
 8453 		For example, if the declaration of the map is
 8454 		    Ksample switch hosts
 8455 		and the system service switch specifies that hosts are
 8456 		looked up using dns and nis in that order, then this is
 8457 		equivalent to
 8458 		    Ksample sequence sample.dns sample.nis
 8459 		The subordinate maps (sample.*) must already be defined.
 8460 	Add "user" map class -- looks up users using getpwnam.  Takes a
 8461 		"-v field" flag on the definition that tells what passwd
 8462 		entry to return -- legal values are name, passwd, uid, gid,
 8463 		gecos, dir, and shell.  Generally expected to be used with
 8464 		the -m (matchonly) flag.
 8465 	Add "bestmx" map class -- returns the best MX value for the host
 8466 		listed as the value.  If there are several "best" MX records
 8467 		for this host, one will be chosen at random.
 8468 	Add "userdb" map class -- looks up entries in the user database.
 8469 		The "file name" is actually the tag that will be used,
 8470 		typically "mailname".  If there are multiple entries
 8471 		matching the name, the one chosen is undefined.
 8472 	Add multiple queue timeouts (both return and warning).  These are
 8473 		set by the Precedence: or Priority: header fields to one of
 8474 		three values.  If a Priority: is set and has value "normal",
 8475 		"urgent", or "non-urgent" the corresponding timeouts are
 8476 		used.  If no priority is set, the Precedence: is consulted;
 8477 		if negative, non-urgent timeouts are used; if greater than
 8478 		zero, urgent timeouts are used.  Otherwise, normal timeouts
 8479 		are used.  The timeouts are set by setting the six timeouts
 8480 		queue{warn,return}.{urgent,normal,non-urgent}.
 8481 	Fix problem when a mail address is resolved to a $#error mailer
 8482 		with a temporary failure indication; it works in SMTP,
 8483 		but when delivering locally the mail is silently discarded.
 8484 		This patch, from Kyle Jones of UUNET, bounces it instead
 8485 		of queueing it (queueing is very hard).
 8486 	When using /etc/hosts or NIS-style lookups, don't assume that
 8487 		the first name in the list is the best one -- instead,
 8488 		search for the first one with a dot.  For example, if
 8489 		an /etc/hosts entry reads
 8490	mammoth mammoth.CS.Berkeley.EDU
 8491 		this change will use the second name as the canonical
 8492 		machine name instead of the initial, unqualified name.
 8493 	Change dequote map to replace spaces in quoted text with a value
 8494 		indicated by the -s flag on the dequote map definition.
 8495 		For example, ``Mdequote dequote -s_'' will change
 8496 		"Foo Bar" into an unquoted Foo_Bar instead of leaving it
 8497 		quoted (because of the space character).  Suggested by Dan
 8498 		Oscarsson for use in X.400 addresses.
 8499 	Implement long macro names as ${name}; long class names can
 8500 		be similarly referenced as $={name} and $~{name}.
 8501 		Definitions are (e.g.) ``D{name}value''.  Names that have
 8502 		a leading lower case letter or punctuation characters are
 8503 		reserved for internal use by sendmail; i.e., config files
 8504 		should use names that begin with a capital letter.  Based
 8505 		on code contributed by Dan Oscarsson.
 8506 	Fix core dump if getgrgid returns a null group list (as opposed
 8507 		to an empty group list, that is, a pointer to a list
 8508 		with no members).  Fix from Andrew Chang of Sun Microsystems.
 8509 	Fix possible core dump if malloc fails -- if the malloc in xalloc
 8510 		failed, it called syserr which called newstr which called
 8511 		xalloc....  The newstr is now avoided for "panic" messages.
 8512 		Reported by Stuart Kemp of James Cook University.
 8513 	Improve connection cache timeouts; previously, they were not even
 8514 		checked if you were delivering to anything other than an
 8515 		IPC-connected host, so a series of (say) local mail
 8516 		deliveries could cause cached connections to be open
 8517 		much longer than the specified timeout.
 8518 	If an incoming message exceeds the maximum message size, stop
 8519 		writing the incoming bytes to the queue data file, since
 8520 		this can fill your mqueue partition -- this is a possible
 8521 		denial-of-service attack.
 8522 	Don't reject all numeric local user names unless HESIOD is
 8523 		defined.  It turns out that Posix allows all-numeric
 8524 		user names.  Fix from Tony Sanders of BSDI.
 8525 	Add service switch support.  If the local OS has a service
 8526 		switch (e.g., /etc/nsswitch.conf on Solaris or /etc/svc.conf
 8527 		on DEC systems) that will be used; otherwise, it falls back
 8528 		to using a local mechanism based on the ServiceSwitchFile
 8529 		option (default: /etc/service.switch).  For example, if the
 8530 		service switch lists "files" and "nis" for the aliases
 8531 		service, that will be the default lookup order.  the "files"
 8532 		("local" on DEC) service type expands to any alias files
 8533 		you listed in the configuration file, even if they aren't
 8534 		actually file lookups.
 8535 	Option I (NameServerOptions) no longer sets the "UseNameServer"
 8536 		variable which tells whether or not DNS should be considered
 8537 		canonical.  This is now determined based on whether or not
 8538 		"dns" is in the service list for "hosts".
 8539 	Add preliminary support for the ESMTP "DSN" extension (Delivery
 8540 		Status Notifications).  DSN notifications override
 8541 		Return-Receipt-To: headers, which are bogus anyhow --
 8542 		support for them has been removed.
 8543 	Add T=mts-name-type/address-type/diagnostic-type keyletter to mailer
 8544 		definitions to define the types used in DSN returns for
 8545 		MTA names, addresses, and diagnostics respectively.
 8546 	Extend heuristic to force running in ESMTP mode to look for the
 8547 		five-character string "ESMTP" anywhere in the 220 greeting
 8548 		message (not just the second line).  This is to provide
 8549 		better compatibility with other ESMTP servers.
 8550 	Print sequence number of job when running the queue so you can
 8551 		easily see how much progress you have made.  Suggested
 8552 		by Peter Wemm of DIALix.
 8553 	Map newlines to spaces in logged message-ids; some versions of
 8554 		syslog truncate the rest of the line after newlines.
 8555 		Suggested by Fletcher Mattox of U. Texas.
 8556 	Move up forking for job runs so that if a message is split into
 8557 		multiple envelopes you don't get "fork storms" -- this
 8558 		also improves the connection cache utilization.
 8559 	Accept "<<>>", "<<<>>>", and so forth as equivalent to "<>" for
 8560 		the purposes of refusing to send error returns.  Suggested
 8561 		by Motonori Nakamura of Ritsumeikan University.
 8562 	Relax rules on when a file can be written when referenced from
 8563 		the aliases file: use the default uid/gid instead of the
 8564 		real uid/gid.  This allows you to create a file owned by
 8565 		and writable only by the default uid/gid that will work
 8566 		all the time (without having the set-user-ID bit set).  Change
 8567 		suggested by Shau-Ping Lo and Andrew Cheng of Sun
 8568 		Microsystems.
 8569 	Add "DialDelay" option (no short name) to provide an "extra"
 8570 		delay for dial on demand systems.  If this is non-zero
 8571 		and a connect fails, sendmail will wait this long and
 8572 		then try again.  If it takes longer than the kernel
 8573 		timeout interval to establish the connection, this
 8574 		option can give the network software time to establish
 8575 		the link.  The default units are seconds.
 8576 	Move logging of sender information to be as early as possible;
 8577 		previously, it could be delayed a while for SMTP mail
 8578 		sent to aliases.  Suggested by Brad Knowles of the
 8579 		Defense Information Systems Agency.
 8580 	Call res_init() before setting RES_DEBUG; this is required by
 8581 		BIND 4.9.3, or so I'm told.  From Douglas Anderson of
 8582 		the National Computer Security Center.
 8583 	Add xdelay= field in logs -- this is a transaction delay, telling
 8584 		you how long it took to deliver to this address on the
 8585 		last try.  It is intended to be used for sorting mailing
 8586 		lists to favor "quick" addresses.  Provided for use by
 8587 		the mailprio scripts (see below).
 8588 	If a map cannot be opened, and that map is non-optional, and
 8589 		an address requires that map for resolution, queue the
 8590 		map instead of bouncing it.  This involves creating a
 8591 		pseudo-class of maps called "bogus-map" -- if a required
 8592 		map cannot be opened, the class is changed to bogus-map;
 8593 		all queries against bogus-map return "tempfail".  The
 8594 		bogus-map class is not directly accessible.  A sample
 8595 		implementation was donated by Jem Taylor of Glasgow
 8596 		University Computing Service.
 8597 	Fix a possible core dump when mailing to a program that talks
 8598 		SMTP on its standard input.  Fix from Keith Moore of
 8599 		the University of Kentucky.
 8600 	Make it possible to resolve filenames to $#local $: @ /filename;
 8601 		previously, the "@" would cause it to not be recognized
 8602 		as a file.  Problem noted by Brian Hill of U.C. Davis.
 8603 	Accept a -1 signal to re-exec the daemon.  This only works if
 8604 		argv[0] is a full path to sendmail.
 8605 	Fix bug in "addr=..." field in O option on little-endian machines
 8606 		-- the network number wasn't being converted to network
 8607 		byte order.  Patch from Kurt Lidl of Pix Technologies
 8608 		Corporation.
 8609 	Pre-initialize the resolver early on; this is to avoid a bug with
 8610 		BIND 4.9.3 that can cause the _res.retry field to get
 8611 		reset to zero, causing all name server lookups to time
 8612 		out.  Fix from Matt Day of Artisoft.
 8613 	Restore T line (trusted users) in config file -- but instead of
 8614 		locking out the -f flag, they just tell whether or not
 8615 		an X-Authentication-Warning: will be added.  This really
 8616 		just creates new entries in class 't', so "Ft/file/name"
 8617 		can be used to read trusted user names from a file.
 8618 		Trusted users are also allowed to execute programs even
 8619 		if they have a shell that isn't in /etc/shells.
 8620 	Improve NEWDB alias file rebuilding so it will create them
 8621 		properly if they do not already exist.  This had been
 8622 		a MAYBENEXTRELEASE feature in 8.6.9.
 8623 	Check for @:@ entry in NIS maps before starting up to avoid
 8624 		(but not prevent, sigh) race conditions.  This ought to
 8625 		be handled properly in ypserv, but isn't.  Suggested by
 8626 		Michael Beirne of Motorola.
 8627 	Refuse connections if there isn't enough space on the filesystem
 8628 		holding the queue.  Contributed by Robert Dana of Wolf
 8629 		Communications.
 8630 	Skip checking for directory permissions in the path to a file
 8631 		when checking for file permissions iff setreuid()
 8632 		succeeded -- it is unnecessary in that case.  This avoids
 8633 		significant performance problems when looking for .forward
 8634 		files.  Based on a suggestion by Win Bent of USC.
 8635 	Allow symbolic ruleset names.  Syntax can be "Sname" to get an
 8636 		arbitrary ruleset number assigned or "Sname = integer"
 8637 		to assign a specific ruleset number.  Reference is
 8638 		$>name_or_number.  Names can be composed of alphas, digits,
 8639 		underscore, or hyphen (first character must be non-numeric).
 8640 	Allow -o flag on AliasFile lines to make the alias file optional.
 8641 		From Bryan Costales of ICSI.
 8642 	Add NoRecipientAction option to handle the case where there is
 8643 		no legal recipient header in the message.  It can take
 8644 		on values:
 8645 		  None			Leave the message as is.  The
 8646 					message will be passed on even
 8647 					though it is in technically
 8648 					illegal syntax.
 8649 		  Add-To		Add a To: header with any
 8650 					recipients that it can find from
 8651 					the envelope.  This risks exposing
 8652 					Bcc: recipients.
 8653 		  Add-Apparently-To	Add an Apparently-To: header.  This
 8654 					has almost no redeeming social value,
 8655 					and is provided only for back
 8656 					compatibility.
 8657 		  Add-To-Undisclosed	Add a header reading
 8658 					To: undisclosed-recipients:;
 8659 					which will have the effect of
 8660 					making the message legal without
 8661 					exposing Bcc: recipients.
 8662 		  Add-Bcc		To add an empty Bcc: header.
 8663 					There is a chance that mailers down
 8664 					the line will delete this header,
 8665 					which could cause exposure of Bcc:
 8666 					recipients.
 8667 		The default is NoRecipientAction=None.
 8668 	Truncate (rather than delete) Bcc: lines in the header.  This
 8669 		should prevent later sendmails (at least, those that don't
 8670 		themselves delete Bcc:) from considering this message to
 8671 		be non-conforming -- although it does imply that non-blind
 8672 		recipients can see that a Bcc: was sent, albeit not to whom.
 8673 	Add SafeFileEnvironment option.  If declared, files named as delivery
 8674 		targets must be regular files in addition to the regular
 8675 		checks.  Also, if the option is non-null then it is used as
 8676 		the name of a directory that is used as a chroot(2)
 8677 		environment for the delivery; the file names listed in an
 8678 		alias or forward should include the name of this root.
 8679 		For example, if you run with
 8680 			O SafeFileEnvironment=/arch
 8681 		then aliases should reference "/arch/rest/of/path".  If a
 8682 		value is given, sendmail also won't try to save to
 8683 		/usr/tmp/dead.letter (instead it just leaves the job in the
 8684 		queue as Qfxxxxxx).  Inspired by *Hobbit*'s sendmail patch kit.
 8685 	Support -A flag for alias files; this will comma concatenate like
 8686 		entries.  For example, given the aliases:
 8687 			list: member1
 8688 			list: member2
 8689 		and an alias file declared as:
 8690 			OAhash:-A /etc/aliases
 8691 		the final alias inserted will be "list: member1,member2";
 8692 		without -A you will get an error on the second and subsequent
 8693 		alias for "list".  Contributed by Bryan Costales of ICSI.
 8694 	Line-buffer transcript file.  Suggested by Liudvikas Bukys.
 8695 	Fix a problem that could cause very long addresses to core dump in
 8696 		some special circumstances.  Problem pointed out by Allan
 8697 		Johannesen.
 8698 	(Internal change.)  Change interface to expand() (macro expansion)
 8699 		to be simpler and more consistent.
 8700 	Delete check for funny qf file names.  This didn't really give
 8701 		any extra security and caused some people some problems.
 8702 		(If you -really- want this, define PICKY_QF_NAME_CHECK
 8703 		at compile time.)  Suggested by Kyle Jones of UUNET.
 8704 	(Internal change.)  Change EF_NORETURN to EF_NO_BODY_RETN and
 8705 		merge with DSN code; this is simpler and more consistent.
 8706 		This may affect some people who have written their own
 8707 		checkcompat() routine.
 8708 	(Internal change.)  Eliminate `D' line in qf file.  The df file
 8709 		is now assumed to be the same name as the qf file (with
 8710 		the `q' changed to a `d', of course).
 8711 	Avoid forking for delivery if all recipient mailers are marked as
 8712 		"expensive" -- this can be a major cost on some systems.
 8713 		Essentially, this forces sendmail into "queue only" mode
 8714 		if all it is going to do is queue anyway.
 8715 	Avoid sending a null message in some rather unusual circumstances
 8716 		(specifically, the RCPT command returns a temporary
 8717 		failure but the connection is lost before the DATA
 8718 		command).  Fix from Scott Hammond of Secure Computing
 8719 		Corporation.
 8720 	Change makesendmail to use a somewhat more rational naming scheme:
 8721 		Makefiles and obj directories are named $os.$rel.$arch,
 8722 		where $os is the operating system (e.g., SunOS), $rel is
 8723 		the release number (e.g., 5.3), and $arch is the machine
 8724 		architecture (e.g., sun4).  Any of these can be omitted,
 8725 		and anything after the first dot in a release number can
 8726 		be replaced with "x" (e.g., SunOS.4.x.sun4).  The previous
 8727 		version used $os.$arch.$rel and was rather less general.
 8728 	Change makesendmail to do a "make depend" in the target directory
 8729 		when it is being created.  This involves adding an empty
 8730 		"depend:" entry in most Makefiles.
 8731 	Ignore IDENT return value if the OSTYPE field returns "OTHER",
 8732 		as indicated by RFC 1413.  Pointed out by Kari Hurtta
 8733 		of the Finnish Meteorological Institute.
 8734 	Fix problem that could cause multiple responses to DATA command
 8735 		on header syntax errors (e.g., lines beginning with colons).
 8736 		Problem noted by Jens Thomassen of the University of Oslo.
 8737 	Don't let null bytes in headers cause truncation of the rest of
 8738 		the header.
 8739 	Log Authentication-Warning:s.  Suggested by Motonori Nakamura.
 8740 	Increase timeouts on message data puts to allow time for receivers
 8741 		to canonify addresses in headers on the fly.  This is still
 8742 		a rather ugly heuristic.  From Motonori Nakamura.
 8743 	Add "HasWildcardMX" suboption to ResolverOptions; if set, MX
 8744 		records are not used when canonifying names, and when MX
 8745 		lookups are done for addressing they must be fully
 8746 		qualified.  This is useful if you have a wildcard MX record,
 8747 		although it may cause other problems.  In general, don't use
 8748 		wildcard MX records.  Patch from Motonori Nakamura.
 8749 	Eliminate default two-line SMTP greeting message.  Instead of
 8750 		adding an extra "ESMTP spoken here" line, the word "ESMTP"
 8751 		is added between the first and second word of the first
 8752 		line of the greeting message (i.e., immediately after the
 8753 		host name).  This eliminates the need for the BROKEN_SMTP_PEERS
 8754 		compile flag.  Old sendmails won't see the ESMTP, but that's
 8755 		acceptable because SIZE was the only useful extension that
 8756 		old sendmails understand.
 8757 	Avoid gethostbyname calls on UNIX domain sockets during SIGUSR1
 8758 		invoked state dumps.  From Masaharu Onishi.
 8759 	Allow on-line comments in .forward and :include: files; they are
 8760 		introduced by the string "<LWSP>#@#<LWSP>", where <LWSP>
 8761 		is a space or a tab.  This is intended for native
 8762 		representation of non-ASCII sets such as Japanese, where
 8763 		existing encodings would be unreadable or would lose
 8764 		data -- for example,
 8765 		 <motonori@cs.ritsumei.ac.jp> NAKAMURA Motonori
 8766 					(romanized/less information)
 8767 		 <motonori@cs.ritsumei.ac.jp> =?ISO-2022-JP?B?GyRCQ2ZCPBsoQg==?=
 8768 					      =?ISO-2022-JP?B?GyRCQUdFNRsoQg==?=
 8769 					(with MIME encoding, not human readable)
 8770 		 <motonori@cs.ritsumei.ac.jp> #@# ^[$BCfB<^[(B ^[$BAGE5^[(B
 8771 					(native encoding with ISO-2022-JP)
 8772 		The last form is human readable in the Japanese environment.
 8773 		Based on a fix from (surprise!) Motonori Nakamura.
 8774 	Don't make SMTP error returns on MAIL FROM: line be "sticky" for all
 8775 		messages to that host; these are most frequently associated
 8776 		with addresses rather than the host, with the exception of
 8777 		421 (service shutting down).  The effect was to cause queues
 8778 		to sometimes take an excessive time to flush.  Reported by
 8779 		Robert Sargent of Southern Geographics Technologies and
 8780 		Eric Prestemon of American University.
 8781 	Add Nice=N mailer option to set the niceness at which a mailer will
 8782 		run.  This is actually a relative niceness (that is, an
 8783 		increment on the background value).
 8784 	Log queue runs that are skipped due to high loads.  They are logged
 8785 		at LOG_INFO priority iff the log level is > 8.  Contributed
 8786 		by Bruce Nagel of Data General.
 8787 	Allow the error mailer to accept a DSN-style error status code
 8788 		instead of an sysexits status code in the host part.
 8789 		Anything with a dot will be interpreted as a DSN-style code.
 8790 	Add new mailer flag: F=3 will tell translations to Quoted-Printable
 8791 		to encode characters that might be munged by an EBCDIC system
 8792 		in addition to the set required by RFC 1521.  The additional
 8793 		characters are !, ", #, $, @, [, \, ], ^, `, {, |, }, and ~.
 8794 		(Think of "IBM 360" as the mnemonic for this flag.)
 8795 	Change check for mailing to files to look for a pathname of [FILE]
 8796 		rather than looking for the mailer named *file*.  The mapping
 8797 		of leading slashes still goes to the *file* mailer.  This
 8798 		allows you to implement the *file* mailer as a separate
 8799 		program, for example, to insert a Content-Length: header
 8800 		or do special security policy.  However, note that the usual
 8801 		initial checking for the file permissions is still done, and
 8802 		the program in question needs to be very careful about how
 8803 		it does the file write to avoid security problems.
 8804 	Be able to read ~root/.forward even if the path isn't accessible to
 8805 		regular users.  This is disrecommended because sendmail
 8806 		sometimes does not run as root (e.g., when an unsafe option
 8807 		is specified on the command line), but should otherwise be
 8808 		safe because .forward files must be owned by the user for
 8809 		whom mail is being forwarded, and cannot be a symbolic link.
 8810 		Suggested by Forrest Aldrich of Wang Laboratories.
 8811 	Add new "HostsFile" option that is the pathname to the /etc/hosts
 8812 		file.  This is used for canonifying hostnames when the
 8813 		service type is "files".
 8814 	Implement programs on F (read class from file) line.  The syntax is
 8815 		Fc|/path/to/program to read the output from the program
 8816 		into class "c".
 8817 	Probe the network interfaces to find alternate names for this
 8818 		host.  Requires the SIOCGIFCONF ioctl call.  Code
 8819 		contributed by SunSoft.
 8820 	Add "E" configuration line to set or propagate environment
 8821 		variables into children.  "E<envar>" will propagate
 8822 		the named variable from the environment when sendmail
 8823 		was invoked into any children it calls; "E<envar>=<value>"
 8824 		sets the named variable to the indicated value.  Any
 8825 		variables not explicitly named will not be in the child
 8826 		environment.  However, sendmail still forces an
 8827 		"AGENT=sendmail" environment variable, in part to enforce
 8828 		at least one environment variable, since many programs and
 8829 		libraries die horribly if this is not guaranteed.
 8830 	Change heuristic for rebuilding both NEWDB and NDBM versions of
 8831 		alias databases -- new algorithm looks for the substring
 8832 		"/yp/" in the file name.  This is more portable and involves
 8833 		less overhead.  Suggested by Motonori Nakamura.
 8834 	Dynamically allocate the queue work list so that you don't lose
 8835 		jobs in large queue runs.  The old QUEUESIZE compile parameter
 8836 		is replaced by QUEUESEGSIZE (the unit of allocation, which
 8837 		should not need to be changed) and the MaxQueueRunSize option,
 8838 		which is the absolute maximum number of jobs that will ever
 8839 		be handled in a single queue run.  Based on code contributed
 8840 		by Brian Coan of the Institute for Global Communications.
 8841 	Log message when a message is dropped because it exceeds the maximum
 8842 		message size.  Suggested by Leo Bicknell of Virginia Tech.
 8843 	Allow trusted users (those on a T line or in $=t) to use -bs without
 8844 		an X-Authentication-Warning: added.  Suggested by Mark Thomas
 8845 		of Mark G. Thomas Consulting.
 8846 	Announce state of compile flags on -d0.1 (-d0.10 throws in the
 8847 		OS-dependent defines).  The old semantic of -d0.1 to not
 8848 		run the daemon in background has been moved to -d99.100,
 8849 		and the old 52.5 flag (to avoid disconnect() from closing
 8850 		all output files) has been moved to 52.100.  This makes
 8851 		things more consistent (flags below .100 don't change
 8852 		semantics) and separates out the backgrounding so that
 8853 		it doesn't happen automatically on other unrelated debugging
 8854 		flags.
 8855 	If -t is used but no addresses are found in the header, give an
 8856 		error message rather than just doing nothing.  Fix from
 8857 		Motonori Nakamura.
 8858 	On systems (like SunOS) where the effective gid is not necessarily
 8859 		included in the group list returned by getgroups(), the
 8860 		`restrictmailq' option could sometimes cause an authorized
 8861 		user to not be able to use `mailq'.  Fix from Charles Hannum
 8862 		of MIT.
 8863 	Allow symbolic service names for [IPC] mailers.  Suggested by
 8864 		Gerry Magennis of Logica International.
 8865 	Add DontExpandCnames option to prevent $[ ... $] from expanding CNAMEs
 8866 		when running DNS.  For example, if the name FTP.Foo.ORG is
 8867 		a CNAME for Cruft.Foo.ORG, then when sitting on a machine in
 8868 		the Foo.ORG domain a lookup of "FTP" returns "Cruft.Foo.ORG"
 8869 		if this option is not set, or "FTP.Foo.ORG" if it is set.
 8870 		This is technically illegal under RFC 822 and 1123, but the
 8871 		IETF is moving toward legalizing it.  Note that turning on
 8872 		this option is not sufficient to guarantee that a downstream
 8873 		neighbor won't rewrite the address for you.
 8874 	Add "-m" flag to makesendmail script -- this tells you what object
 8875 		directory and Makefile it will use, but doesn't actually do
 8876 		the make.
 8877 	Do some additional checking on the contents of the qf file to try
 8878 		to detect attacks against the qf file.  In particular,
 8879 		abort on any line beginning "From ", and add an "end of
 8880 		file" line -- any data after that line is prohibited.
 8881 	Always use /etc/sendmail.cf, regardless of the arbitrary vendor
 8882 		choices.  This can be overridden in the Makefile by using
 8883 		either -DUSE_VENDOR_CF_PATH to get the vendor location
 8884 		(to the extent that we know it) or by defining
 8885 		_PATH_SENDMAILCF (which is a "hard override").  This allows
 8886 		sendmail 8 to have more consistent installation instructions.
 8887 	Allow macros on `K' line in config file.  Suggested by Andrew Chang
 8888 		of Sun Microsystems.
 8889 	Improved symbol table hash function from Eric Wassenaar.  This one
 8890 		is at least 50% faster.
 8891 	Fix problem that didn't notice that timeout on file open was a
 8892 		transient error.  Fix from Larry Parmelee of Cornell
 8893 		University.
 8894 	Allow comments (lines beginning with a `#') in files read for
 8895 		classes.  Suggested by Motonori Nakamura.
 8896 	Make SIGINT (usually ^C) in test mode return to the prompt instead
 8897 		of dropping out entirely.  This makes testing some of the
 8898 		name server lookups easier to deal with when there are
 8899 		hung servers.  From Motonori Nakamura.
 8900 	Add new ${opMode} macro that is set to the current operation mode
 8901 		(e.g., `s' for -bs, `t' for -bt, etc.).  Suggested by
 8902 		Claude Marinier <MARINIER@emp.ewd.dreo.dnd.ca>.
 8903 	Add new delivery mode (Odd) that defers all map lookups to queue runs.
 8904 		Kind of like queue-only mode (Odq) except it tries to avoid
 8905 		any external service requests; for dial-on-demand hosts that
 8906 		want to minimize DNS lookups when mail is being queued.  For
 8907 		this to work you will also have to make sure that gethostbyname
 8908 		of your local host name does not do a DNS lookup.
 8909 	Improved handling of "out of space" conditions from John Myers of
 8910 		Carnegie Mellon.
 8911 	Improved security for mailing to files on systems that have fchmod(2)
 8912 		support.
 8913 	Improve "cannot send message for N days" message -- now says "could
 8914 		not send for past N days".  Suggested by Tom Moore of AT&T
 8915 		Global Information Solutions.
 8916 	Less misleading Subject: line on messages sent to postmaster only.
 8917 		From Motonori Nakamura.
 8918 	Avoid duplicate error messages on bad command line flags.  From
 8919 		Motonori Nakamura.
 8920 	Better error message for case where ruleset 0 falls off the end
 8921 		or otherwise does not resolve to a canonical triple.
 8922 	Fix a problem that could cause multiple bounce messages if a bad
 8923 		address was sent along with a good address to an SMTP
 8924 		site where that SMTP site returned a 4yz code in response
 8925 		to the final dot of the data.  Problem reported by David
 8926 		James of British Telecom.
 8927 	Add "volatile" declarations so that gcc -O2 will work.  Patches
 8928 		from Alexander Dupuy of System Management ARTS.
 8929 	Delete duplicates in MX lists -- believe it or not, there are sites
 8930 		that list the same host twice in an MX list.  This deletion
 8931 		only works on adjacent preferences, so an MX list that
 8932 		had A=5, B=10, A=15 would leave both As, but one that had
 8933 		A=5, A=10, B=15 would reduce to A, B.  This is intentional,
 8934 		just in case there is something weird I haven't thought of.
 8935 		Suggested by Barry Shein of Software Tool & Die.
 8936 	SECURITY: .forward files cannot be symbolic links.  If they are,
 8937 		a bad guy can read your private files.
 8939 		Solaris 2 from Rob McMahon <cudcv@csv.warwick.ac.uk>.
 8940 		System V Release 4 from Motonori Nakamura of Ritsumeikan
 8941 			University.  This expands the disk size
 8942 			checking to include all (?) SVR4 configurations.
 8943 		System V Release 4 from Kimmo Suominen -- initgroups(3)
 8944 			and setrlimit(2) are both available.
 8945 		System V Release 4 from sob@sculley.ffg.com -- some versions
 8946 			apparently "have EX_OK defined in other headerfiles."
 8947 		Linux Makefile typo.
 8948 		Linux getusershell(3) is broken in Slackware 2.0 --
 8949 			from Andrew Pam of Xanadu Australia.
 8950 		More Linux tweaking from John Kennedy of California State
 8951 			University, Chico.
 8952 		Cray changes from Eric Wassenaar:  ``On Cray, shorts,
 8953 			ints, and longs are all 64 bits, and all structs
 8954 			are multiples of 64 bits.  This means that the
 8955 			sizeof operator returns only multiples of 8.
 8956 			This requires adaptation of code that really
 8957 			deals with 32 bit or 16 bit fields, such as IP
 8958 			addresses or nameserver fields.''
 8959 		DG/UX 5.4.3 from Mark T. Robinson <mtr@ornl.gov>.  To
 8960 			get the old behavior, use -DDGUX_5_4_2.
 8961 		DG/UX hack: add _FORCE_MAIL_LOCAL_=yes environment
 8962 			variable to fix bogus /bin/mail behavior.
 8963 		Tandem NonStop-UX from Rick McCarty <mccarty@mpd.tandem.com>.
 8964 			This also cleans up some System V Release 4 compile
 8965 			problems.
 8966 		Solaris 2: sendmail.cw file should be in /etc/mail to
 8967 			match all the other configuration files.  Fix
 8968 			from Glenn Barry of Emory University.
 8969 		Solaris 2.3: compile problem in conf.c.  Fix from Alain
 8970 			Nissen of the University of Liege, Belgium.
 8971 		Ultrix: freespace calculation was incorrect.  Fix from
 8972 			Takashi Kizu of Osaka University.
 8973 		SVR4: running in background gets a SIGTTOU because the
 8974 			emulation code doesn't realize that "getpeername"
 8975 			doesn't require reading the file.  Fix from Peter
 8976 			Wemm of DIALix.
 8977 		Solaris 2.3: due to an apparent bug in the socket emulation
 8978 			library, sockets can get into a "wedged" state where
 8979 			they just return EPROTO; closing and re-opening the
 8980 			socket clears the problem.  Fix from Bob Manson
 8981 			of Ohio State University.
 8982 		Hitachi 3050R & 3050RX running HI-UX/WE2: portability
 8983 			fixes from Akihiro Hashimoto ("Hash") of Chiba
 8984 			University.
 8985 		AIX changes to allow setproctitle to work from Rainer Schöpf
 8986 			of Zentrum für Datenverarbeitung der Universität
 8987 			Mainz.
 8988 		AIX changes for load average from Ed Ravin of NASA/Goddard.
 8989 		SCO Unix from Chip Rosenthal of Unicom (code was using the
 8990 			wrong statfs call).
 8991 		ANSI C fixes from Adam Glass (NetBSD project).
 8992 		Stardent Titan/ANSI C fixes from Kate Hedstrom of Rutgers
 8993 			University.
 8994 		DG-UX fixes from Bruce Nagel of Data General.
 8995 		IRIX64 updates from Mark Levinson of the University of
 8996 			Rochester Medical Center.
 8997 		Altos System V (``the first UNIX/XENIX merge the Altos
 8998 			did for their Series 1000 & Series 2000 line;
 8999 			their merged code was licensed back to AT&T and
 9000 			Microsoft and became System V release 3.2'') from
 9001 			Tim Rice <timr@crl.com>.
 9002 		OSF/1 running on Intel Paragon from Jeff A. Earickson
 9003 			<jeff@ssd.intel.com> of Intel Scalable Systems
 9004 			Division.
 9005 		Amdahl UTS System V 2.1.5 (SVr3-based) from Janet Jackson
 9006 			<janet@dialix.oz.au>.
 9007 		System V Release 4 (statvfs semantic fix) from Alain
 9008 			Durand of I.M.A.G.
 9009 		HP-UX 10.x multiprocessor load average changes from
 9010 			Scott Hutton and Jeff Sumler of Indiana University.
 9011 		Cray CSOS from Scott Bolte of Cray Computer Corporation.
 9012 		Unicos 8.0 from Douglas K. Rand of the University of North
 9013 			Dakota, Scientific Computing Center.
 9014 		Solaris 2.4 fixes from Sanjay Dani of Dani Communications.
 9015 		ConvexOS 11.0 from Christophe Wolfhugel.
 9016 		IRIX 4.0.5 from David Ashton-Reader of CADcentre.
 9017 		ISC UNIX from J. J. Bailey.
 9018 		HP-UX 9.xx on the 8xx series machines from Remy Giraud
 9019 			of Meteo France.
 9020 		HP-UX configuration from Tom Lane <tgl@sss.pgh.pa.us>.
 9021 		IRIX 5.2 and 5.3 from Kari E. Hurtta.
 9022 		FreeBSD 2.0 from Mike Hickey of Federal Data Corporation.
 9023 		Sony NEWS-OS 4.2.1R and 6.0.3 from Motonori Nakamura.
 9024 		Omron LUNA unios-b, mach from Motonori Nakamura.
 9025 		NEC EWS-UX/V 4.2 from Motonori Nakamura.
 9026 		NeXT 2.1 from Bryan Costales.
 9027 		AUX patch thanks to Mike Erwin of Apple Computer.
 9028 		HP-UX 10.0 from John Beck of Hewlett-Packard.
 9029 		Ultrix: allow -DBROKEN_RES_SEARCH=0 if you are using a
 9030 			non-DEC resolver.  Suggested by Allan Johannesen.
 9031 		UnixWare 2.0 fixes from Petr Lampa of the Technical
 9032 			University of Brno (Czech Republic).
 9033 		KSR OS 1.2.2 support from Todd Miller of the University
 9034 			of Colorado.
 9035 		UX4800 support from Kazuhisa Shimizu of NEC.
 9036 	MAKEMAP: allow -d flag to allow insertion of duplicate aliases
 9037 		in type ``btree'' maps.  The semantics of this are undefined
 9038 		for regular maps, but it can be useful for the user database.
 9039 	MAKEMAP: lock database file while rebuilding to avoid sendmail
 9040 		lookups while the rebuild is going on.  There is a race
 9041 		condition between the open(... O_TRUNC ...) and the lock
 9042 		on the file, but it should be quite small.
 9043 	SMRSH: sendmail restricted shell added to the release.  This can
 9044 		be used as an alternative to /bin/sh for the "prog" mailer,
 9045 		giving the local administrator more control over what
 9046 		programs can be run from sendmail.
 9047 	MAIL.LOCAL: add this local mailer to the tape.  It is not really
 9048 		part of the release proper, and isn't fully supported; in
 9049 		particular, it does not run on System V based systems and
 9050 		never will.
 9051 	CONTRIB: a patch to rmail.c from Bill Gianopoulos of Raytheon
 9052 		to allow rmail to compile on systems that don't have
 9053 		function prototypes and systems that don't have snprintf.
 9054 	CONTRIB: add the "mailprio" scripts that will help you sort mailing
 9055 		lists by transaction delay times so that addresses that
 9056 		respond quickly get sent first.  This is to prevent very
 9057 		sluggish servers from delaying other peoples' mail.
 9058 		Contributed by Tony Sanders of BSDI.
 9059 	CONTRIB: add the "bsdi.mc" file as contributed by Tony Sanders
 9060 		of BSDI.  This has a lot of comments to help people out.
 9061 	CONFIG: Don't have .mc files include(../m4/cf.m4) -- instead,
 9062 		put this on the m4 command line.  On GNU m4 (which
 9063 		supports the __file__ primitive) you can run m4 in an
 9064 		arbitrary directory -- use either:
 9065 			m4 ${CFDIR}/m4/cf.m4 config.mc > config.cf
 9066 		or
 9067 			m4 -I${CFDIR} m4/cf.m4 config.mc > config.cf
 9068 		On other versions of m4 that don't support __file__, you
 9069 		can use:
 9070 			m4 -D_CF_DIR_=${CFDIR}/ ${CFDIR}/m4/cf.m4 ...
 9071 		(Note the trailing slash on the _CF_DIR_ definition.)
 9072 		Old versions of m4 will default to _CF_DIR_=.. for back
 9073 		compatibility.
 9074 	CONFIG: fix mail from <> so it will properly convert to
 9075 		MAILER-DAEMON on local addresses.
 9076 	CONFIG: fix code that was supposed to catch colons in host
 9077 		names.  Problem noted by John Gardiner Myers of CMU.
 9078 	CONFIG: allow use of SMTP_MAILER_MAX in nullclient configuration.
 9079 		From Paul Riddle of the University of Maryland, Baltimore
 9080 		County.
 9081 	CONFIG: Catch and reject "." as a host address.
 9082 	CONFIG: Generalize domaintable to look up all domains, not
 9083 		just unqualified ones.
 9084 	CONFIG: Delete OLD_SENDMAIL support -- as near as I can tell, it
 9085 		was never used and didn't work anyway.
 9086 	CONFIG: Set flags A, w, 5, :, /, |, and @ on the "local" mailer
 9087 		and d on all mailers in the UUCP class.
 9088 	CONFIG: Allow "user+detail" to be aliased specially: it will first
 9089 		look for an alias for "user+detail", then for "user+*", and
 9090 		finally for "user".  This is intended for forwarding mail
 9091 		for system aliases such as root and postmaster to a
 9092 		centralized hub.
 9093 	CONFIG: add confEIGHT_BIT_HANDLING to set option 8 (see above).
 9094 	CONFIG: add smtp8 mailer; this has the F=8 (just-send-8) flag set.
 9095 		The F=8 flag is also set on the "relay" mailer, since
 9096 		this is expected to be another sendmail.
 9097 	CONFIG: avoid qualifying all UUCP addresses sent via SMTP with
 9098 		the name of the UUCP_RELAY -- in some cases, this is the
 9099 		wrong value (e.g., when we have local UUCP connections),
 9100 		and this can create unreplyable addresses.  From Chip
 9101 		Rosenthal of Unicom.
 9102 	CONFIG: add confRECEIVED_HEADER to change the format of the
 9103 		Received: header inserted into all messages.  Suggested by
 9104 		Gary Mills of the University of Manitoba.
 9105 	CONFIG: Make "notsticky" the default; use FEATURE(stickyhost)
 9106 		to get the old behavior.  I did this upon observing
 9107 		that almost everyone needed this feature, and that the
 9108 		concept I was trying to make happen didn't work with
 9109 		some user agents anyway.  FEATURE(notsticky) still works,
 9110 		but it is a no-op.
 9111 	CONFIG: Add LUSER_RELAY -- the host to which unrecognized user
 9112 		names are sent, rather than immediately diagnosing them
 9113 		as User Unknown.
 9115 		and RELAY_MAILER_ARGS to set the arguments for the
 9116 		indicated mailers.  All default to "IPC $h".  Patch from
 9117 		Larry Parmelee of Cornell University.
 9118 	CONFIG: pop mailer needs F=n flag to avoid "annoying side effects
 9119 		on the client side" and F=P to get an appropriate
 9120 		return-path.  From Kimmo Suominen.
 9121 	CONFIG: add FEATURE(local_procmail) to use the procmail program
 9122 		as the local mailer.  For addresses of the form "user+detail"
 9123 		the "detail" part is passed to procmail via the -a flag.
 9124 		Contributed by Kimmo Suominen.
 9125 	CONFIG: add MAILER(procmail) to add an interface to procmail for
 9126 		use from mailertables.  This lets you execute arbitrary
 9127 		procmail scripts.  Contributed by Kimmo Suominen.
 9128 	CONFIG: add T= fields (MTS type) to local, smtp, and uucp mailers.
 9129 	CONFIG: add OSTYPE(ptx2) for DYNIX/ptx 2.x from Sequent.  From
 9130 		Paul Southworth of CICNet Systems Support.
 9131 	CONFIG: use -a$g as default to UUCP mailers, instead of -a$f.
 9132 		This causes the null return path to be rewritten as
 9133 		MAILER-DAEMON; otherwise UUCP gets horribly confused.
 9134 		From Michael Hohmuth of Technische Universitat Dresden.
 9135 	CONFIG: Add FEATURE(bestmx_is_local) to cause any hosts that
 9136 		list us as the best possible MX record to be treated as
 9137 		though they were local (essentially, assume that they
 9138 		are included in $=w).  This can cause additional DNS
 9139 		traffic, but is easier to administer if this fits your
 9140 		local model.  It does not work reliably if there are
 9141 		multiple hosts that share the best MX preference.
 9142 		Code contributed by John Oleynick of Rutgers.
 9143 	CONFIG: Add FEATURE(smrsh) to use smrsh (the SendMail Restricted
 9144 		SHell) instead of /bin/sh as the program used for delivery
 9145 		to programs.  If an argument is included, it is used as
 9146 		the path to smrsh; otherwise, /usr/local/etc/smrsh is
 9147 		assumed.
 9149 		size of messages to the local and procmail mailers
 9150 		respectively.  Contributed by Brad Knowles of the Defense
 9151 		Information Systems Agency.
 9152 	CONFIG: Handle leading ``phrase:'' and trailing ``;'' as comments
 9153 		(just like text outside of angle brackets) in order to
 9154 		properly deal with ``group: addr1, ... addrN;'' syntax.
 9155 	CONFIG: Require OSTYPE macro (the defaults really don't apply to
 9156 		any real systems any more) and tweak the DOMAIN macro
 9157 		so that it is less likely that users will accidentally use
 9158 		the Berkeley defaults.  Also, create some generic files
 9159 		that really can be used in the real world.
 9160 	CONFIG: Add new configuration macros to set character sets for
 9161 		messages _arriving from_ various mailers: LOCAL_MAILER_CHARSET,
 9163 	CONFIG: Change UUCP_MAX_SIZE to UUCP_MAILER_MAX for consistency.
 9164 		The old name will still be accepted for a while at least.
 9165 	CONFIG: Implement DECNET_RELAY as spec for host to which DECNET
 9166 		mail (.DECNET pseudo-domain or node::user) will be sent.
 9167 		As with all relays, it can be ``mailer:hostname''.  Suggested
 9168 		by Scott Hutton.
 9169 	CONFIG: Add MAILER(mail11) to get DECnet support.  Code contributed
 9170 		by Barb Dijker of Labyrinth Computer Services.
 9171 	CONFIG: change confCHECK_ALIASES to default to False -- it has poor
 9172 		performance for large alias files, and this confused many
 9173 		people.
 9174 	CONFIG: Add confCF_VERSION to append local information to the
 9175 		configuration version number displayed during SMTP startup.
 9176 	CONFIG: fix some.newsgroup.usenet@local.host syntax (previously it
 9177 		would only work when locally addressed.  Fix from
 9178 		Edvard Tuinder of Cistron Internet Services.
 9179 	CONFIG: use ${opMode} to avoid error on .REDIRECT addresses if option
 9180 		"n" (CheckAliases) is set when rebuilding alias database.
 9181 		Based on code contributed by Claude Marinier.
 9182 	CONFIG: Allow mailertable to have values of the form
 9183 		``error:code message''.  The ``code'' is a status code
 9184 		derived from the sysexits codes -- e.g., NOHOST or UNAVAILABLE.
 9185 		Contributed by David James <dwj@agw.bt.co.uk>.
 9186 	CONFIG: add MASQUERADE_DOMAIN(domain list) to extend the list of
 9187 		sender domains that will be replaced with the masquerade name.
 9188 		These domains will not be treated as local, but if mail passes
 9189 		through with sender addresses in those domains they will be
 9190 		replaced by the masquerade name.  These can also be specified
 9191 		in a file using MASQUERADE_DOMAIN_FILE(filename).
 9192 	CONFIG: add FEATURE(masquerade_envelope) to masquerade the envelope
 9193 		as well as the header.  Substantial improvements to this
 9194 		code were contributed by Per Hedeland.
 9195 	CONFIG: add MAILER(phquery) to define a new "ph" mailer; this can be
 9196 		accessed from a mailertable to do CCSO ph lookups.  Contributed
 9197 		by Kimmo Suominen.
 9198 	CONFIG: add MAILER(cyrus) to define a new Cyrus mailer; this can be
 9199 		used to define cyrus and cyrusbb mailers (for IMAP support).
 9200 		Contributed by John Gardiner Myers of Carnegie Mellon.
 9201 	CONFIG: add confUUCP_MAILER to select default mailer to use for
 9202 		UUCP addressing.  Suggested by Tom Moore of AT&T GIS.
 9203 	NEW FILES:
 9204 		cf/cf/cs-hpux10.mc
 9205 		cf/cf/cs-solaris2.mc
 9206 		cf/cf/cyrusproto.mc
 9207 		cf/cf/generic-bsd4.4.mc
 9208 		cf/cf/generic-hpux10.mc
 9209 		cf/cf/generic-hpux9.mc
 9210 		cf/cf/generic-osf1.mc
 9211 		cf/cf/generic-solaris2.mc
 9212 		cf/cf/generic-sunos4.1.mc
 9213 		cf/cf/generic-ultrix4.mc
 9214 		cf/cf/huginn.cs.mc
 9215 		cf/domain/berkeley-only.m4
 9216 		cf/domain/generic.m4
 9217 		cf/feature/bestmx_is_local.m4
 9218 		cf/feature/local_procmail.m4
 9219 		cf/feature/masquerade_envelope.m4
 9220 		cf/feature/smrsh.m4
 9221 		cf/feature/stickyhost.m4
 9222 		cf/feature/use_ct_file.m4
 9223 		cf/m4/cfhead.m4
 9224 		cf/mailer/cyrus.m4
 9225 		cf/mailer/mail11.m4
 9226 		cf/mailer/phquery.m4
 9227 		cf/mailer/procmail.m4
 9228 		cf/ostype/amdahl-uts.m4
 9229 		cf/ostype/bsdi2.0.m4
 9230 		cf/ostype/hpux10.m4
 9231 		cf/ostype/irix5.m4
 9232 		cf/ostype/isc4.1.m4
 9233 		cf/ostype/ptx2.m4
 9234 		cf/ostype/unknown.m4
 9235 		contrib/bsdi.mc
 9236 		contrib/mailprio
 9237 		contrib/rmail.oldsys.patch
 9238 		mail.local/mail.local.0
 9239 		makemap/makemap.0
 9240 		smrsh/README
 9241 		smrsh/smrsh.0
 9242 		smrsh/smrsh.8
 9243 		smrsh/smrsh.c
 9244 		src/Makefiles/Makefile.CSOS
 9245 		src/Makefiles/Makefile.EWS-UX_V
 9246 		src/Makefiles/Makefile.HP-UX.10
 9247 		src/Makefiles/Makefile.IRIX.5.x
 9248 		src/Makefiles/Makefile.IRIX64
 9249 		src/Makefiles/Makefile.ISC
 9250 		src/Makefiles/Makefile.KSR
 9251 		src/Makefiles/Makefile.NEWS-OS.4.x
 9252 		src/Makefiles/Makefile.NEWS-OS.6.x
 9253 		src/Makefiles/Makefile.NEXTSTEP
 9254 		src/Makefiles/Makefile.NonStop-UX
 9255 		src/Makefiles/Makefile.Paragon
 9256 		src/Makefiles/Makefile.SCO.3.2v4.2
 9257 		src/Makefiles/Makefile.SunOS.5.3
 9258 		src/Makefiles/Makefile.SunOS.5.4
 9259 		src/Makefiles/Makefile.SunOS.5.5
 9260 		src/Makefiles/Makefile.UNIX_SV.4.x.i386
 9261 		src/Makefiles/Makefile.uts.systemV
 9262 		src/Makefiles/Makefile.UX4800
 9263 		src/aliases.0
 9264 		src/mailq.0
 9265 		src/mime.c
 9266 		src/newaliases.0
 9267 		src/sendmail.0
 9268 		test/t_seteuid.c
 9270 		cf/cf/alpha.mc =>		cf/cf/s2k-osf1.mc
 9271 		cf/cf/chez.mc =>		cf/cf/chez.cs.mc
 9272 		cf/cf/hpux-cs-exposed.mc =>	cf/cf/cs-hpux9.mc
 9273 		cf/cf/osf1-cs-exposed.mc =>	cf/cf/cs-osf1.mc
 9274 		cf/cf/s2k.mc =>			cf/cf/s2k-ultrix4.mc
 9275 		cf/cf/sunos4.1-cs-exposed.mc =>	cf/cf/cs-sunos4.1.mc
 9276 		cf/cf/ultrix4.1-cs-exposed.mc => cf/cf/cs-ultrix4.mc
 9277 		cf/cf/vangogh.mc =>		cf/cf/vangogh.cs.mc
 9278 		cf/domain/Berkeley.m4 =>	cf/domain/Berkeley.EDU.m4
 9279 		cf/domain/cs-exposed.m4 =>	cf/domain/CS.Berkeley.EDU.m4
 9280 		cf/domain/eecs-hidden.m4 =>	cf/domain/EECS.Berkeley.EDU.m4
 9281 		cf/domain/s2k.m4 =>		cf/domain/S2K.Berkeley.EDU.m4
 9282 		cf/ostype/hpux.m4 =>		cf/ostype/hpux9.m4
 9283 		cf/ostype/irix.m4 =>		cf/ostype/irix4.m4
 9284 		cf/ostype/ultrix4.1.m4 =>	cf/ostype/ultrix4.m4
 9285 		src/Makefile.* =>		src/Makefiles/Makefile.*
 9286 		src/Makefile.AUX =>		src/Makefiles/Makefile.A-UX
 9287 		src/Makefile.BSDI =>		src/Makefiles/Makefile.BSD-OS
 9288 		src/Makefile.DGUX =>		src/Makefiles/Makefile.dgux
 9289 		src/Makefile.RISCos =>		src/Makefiles/Makefile.UMIPS
 9290 		src/Makefile.SunOS.4.0.3 =>	src/Makefiles/Makefile.SunOS.4.0
 9292 		cf/cf/cogsci.mc
 9293 		cf/cf/cs-exposed.mc
 9294 		cf/cf/cs-hidden.mc
 9295 		cf/cf/hpux-cs-hidden.mc
 9296 		cf/cf/knecht.mc
 9297 		cf/cf/osf1-cs-hidden.mc
 9298 		cf/cf/sunos3.5-cs-exposed.mc
 9299 		cf/cf/sunos3.5-cs-hidden.mc
 9300 		cf/cf/sunos4.1-cs-hidden.mc
 9301 		cf/cf/ultrix4.1-cs-hidden.mc
 9302 		cf/domain/cs-hidden.m4
 9303 		contrib/rcpt-streaming
 9304 		src/Makefiles/Makefile.SunOS.5.x
 9306 8.6.13/8.6.12	1996/01/25
 9307 	SECURITY: In some cases it was still possible for an attacker to
 9308 		insert newlines into a queue file, thus allowing access to
 9309 		any user (except root).
 9310 	CONFIG: no changes -- it is not a bug that the configuration
 9311 		version number is unchanged.
 9313 8.6.12/8.6.12	1995/03/28
 9314 	Fix to IDENT code (it was getting the size of the reply buffer
 9315 		too small, so nothing was ever accepted).  Fix from several
 9316 		people, including Allan Johannesen, Shane Castle of the
 9317 		Boulder County Information Services, and Jeff Smith of
 9318 		Warwick University (all arrived within a few hours of
 9319 		each other!).
 9320 	Fix a problem that could cause large jobs to run out of
 9321 		file descriptors on systems that use vfork() rather
 9322 		than fork().
 9324 8.6.11/8.6.11	1995/03/08
 9325 	The ``possible attack'' message would be logged more often
 9326 		than necessary if you are using Pine as a user agent.
 9327 	The wrong host would be reported in the ``possible attack''
 9328 		message when attempted from IDENT.
 9329 	In some cases the syslog buffer could be overflowed when
 9330 		reporting the ``possible attack'' message.  This can
 9331 		cause denial of service attacks.  Truncate the message
 9332 		to 80 characters to prevent this problem.
 9333 	When reading the IDENT response a loop is needed around the
 9334 		read from the network to ensure that you don't get
 9335 		partial lines.
 9336 	Password entries without any shell listed (that is, a null
 9337 		shell) wouldn't match as "ok".  Problem noted by
 9338 		Rob McMahon.
 9339 	When running BIND 4.9.x a problem could occur because the
 9340 		_res.options field is initialized differently than it
 9341 		was historically -- this requires that sendmail call
 9342 		res_init before it tweaks any bits.
 9343 	Fix an incompatibility in openxscript() between the file open mode
 9344 		and the stdio mode passed to fdopen.  This caused UnixWare
 9345 		2.0 to have conniptions.  Fix from Martin Sohnius of
 9346 		Novell Labs Europe.
 9347 	Fix problem with static linking of local getopt routine when
 9348 		using GNU's ld command.  Fix from John Kennedy of
 9349 		Cal State Chico.
 9350 	It was possible to turn off privacy flags.  Problem noted by
 9351 		*Hobbit*.
 9352 	Be more paranoid about writing files.  Suggestions by *Hobbit*
 9353 		and Liudvikas Bukys.
 9354 	MAKEMAP: fixes for 64 bit machines (DEC Alphas in particular)
 9355 		from Spider Boardman.
 9356 	CONFIG: No changes (version number only, to keep it in sync
 9357 		with the binaries).
 9359 8.6.10/8.6.10	1995/02/10
 9360 	SECURITY: Diagnose bogus values to some command line flags that
 9361 		could allow trash to get into headers and qf files.
 9362 	Validate the name of the user returned by the IDENT protocol.
 9363 		Some systems that really dislike IDENT send intentionally
 9364 		bogus information.  Problem pointed out by Michael Bushnell
 9365 		of the Free Software Foundation.  Has some security
 9366 		implications.
 9367 	Fix a problem causing error messages about DNS problems when
 9368 		the host name contained a percent sign to act oddly
 9369 		because it was passed as a printf-style format string.
 9370 		In some cases this could cause core dumps.
 9371 	Avoid possible buffer overrun in returntosender() if error
 9372 		message is quite long.  From Fletcher Mattox of the
 9373 		University of Texas.
 9374 	Fix a problem that would silently drop "too many hops" error
 9375 		messages if and only if you were sending to an alias.
 9376 		From Jon Giltner of the University of Colorado and
 9377 		Dan Harton of Oak Ridge National Laboratory.
 9378 	Fix a bug that caused core dumps on some systems if -d11.2 was
 9379 		set and e->e_message was null.  Fix from Bruce Nagel of
 9380 		Data General.
 9381 	Fix problem that can still cause df files to be left around
 9382 		after "hop count exceeded" messages.  Fix from Andrew
 9383 		Chang and Shau-Ping Lo of SunSoft.
 9384 	Fix a problem that can cause buffer overflows on very long
 9385 		user names (as might occur if you piped to a program
 9386 		with a lot of arguments).
 9387 	Avoid returning an error and re-queueing if the host signature
 9388 		is null; this can occur on addresses like ``user@.''.
 9389 		Problem noted by Wesley Craig and the University of
 9390 		Michigan.
 9391 	Avoid possible calls to malloc(0) if MCI caching is turned
 9392 		off.  Bug fix from Pierre David of the Laboratoire
 9393 		Parallelisme, Reseaux, Systemes et Modelisation (PRiSM),
 9394 		Universite de Versailles - St Quentin, and Jacky
 9395 		Thibault.
 9396 	Make a local copy of the line being sent via senttolist() -- in
 9397 		some cases, buffers could get trashed by map lookups
 9398 		causing it to do unexpected things.  This also simplifies
 9399 		some of the map code.
 9400 	CONFIG: No changes (version number only, to keep it in sync
 9401 		with the binaries).
 9403 8.6.9/8.6.9	1994/04/19
 9404 	Do all mail delivery completely disconnected from any terminal.
 9405 		This provides consistency with daemon delivery and
 9406 		may have some security implications.
 9407 	Make sure that malloc doesn't get called with zero size,
 9408 		since that fails on some systems.  Reported by Ed
 9409 		Hill of the University of Iowa.
 9410 	Fix multi-line values for $e (SMTP greeting message).  Reported
 9411 		by Mike O'Connor of Ford Motor Company.
 9412 	Avoid syserr if no NIS domain name is defined, but the map it
 9413 		is trying to open is optional.  From Win Bent of USC.
 9414 	Changes for picky compilers from Ed Gould of Digital Equipment.
 9415 	Hesiod support for UDB from Todd Miller of the University of
 9416 		Colorado.  Use "hesiod" as the service name in the U
 9417 		option.
 9418 	Fix a problem that failed to set the "authentic" host name (that
 9419 		is, the one derived from the socket info) if you called
 9420 		sendmail -bs from inetd.  Based on code contributed by
 9421 		Todd Miller (this problem was also reported by Guy Helmer
 9422 		of Dakota State University).  This also fixes a related
 9423 		problem reported by Liudvikas Bukys of the University of
 9424 		Rochester.
 9425 	Parameterize "nroff -h" in all the Makefiles so people with
 9426 		variant versions can use them easily.  Suggested by
 9427 		Peter Collinson of Hillside Systems.
 9428 	SMTP "MAIL" commands with multiple ESMTP parameters required two
 9429 		spaces between parameters instead of one.  Reported by
 9430 		Valdis Kletnieks of Virginia Tech.
 9431 	Reduce the number of system calls during message collection by
 9432 		using global timeouts around the collect() loop.  This
 9433 		code was contributed by Eric Wassenaar.
 9434 	If the initial hostname name gathering results in a name
 9435 		without a dot (usually caused by NIS misconfiguration)
 9436 		and BIND is compiled in, directly access DNS to get
 9437 		the canonical name.  This should make life easier for
 9438 		Solaris systems.  If it still can't be resolved, and
 9439 		if the name server is listed as "required", try again
 9440 		in 30 seconds.  If that also fails, exit immediately to
 9441 		avoid bogus "config error: mail loops back to myself"
 9442 		messages.
 9444 		message to explain how much space was available and
 9445 		sound a bit less threatening.  Suggested by Stan Janet
 9446 		of the National Institute of Standards and Technology.
 9447 	If mail is delivered to an alias that has an owner, deliver any
 9448 		requested return-receipt immediately, and strip the
 9449 		Return-Receipt-To: header from the subsequent message.
 9450 		This prevents a certain class of denial of service
 9451 		attack, arguably gives more reasonable semantics, and
 9452 		moves things more towards what will probably become a
 9453 		network standard.  Suggested by Christopher Davis of
 9454 		Kapor Enterprises.
 9455 	Add a "noreceipts" privacy flag to turn off all return receipts
 9456 		without recompiling.
 9457 	Avoid printing ESMTP parameters as part of the error message
 9458 		if there are errors during parsing.  This change is
 9459 		purely cosmetic.
 9460 	Avoid sending out error messages during the collect phase of
 9461 		SMTP; there is an MVS mailer from UCLA that gets
 9462 		confused by this.  Of course, I think it's their bug....
 9463 	Check for the $j macro getting undefined, losing a dot, or getting
 9464 		lost from $=w in the daemon before accepting a connection;
 9465 		if it is, it dumps state, prints a LOG_ALERT message,
 9466 		and drops core for debugging.  This is an attempt to
 9467 		track down a bug that I thought was long since gone.
 9468 		If you see this, please forward the log fragment to
 9469 		sendmail@sendmail.ORG.
 9470 	Change OLD_NEWDB from a #ifdef to a #if so it can be turned off
 9471 		with -DOLD_NEWDB=0 on the command line.  From Christophe
 9472 		Wolfhugel.
 9473 	Instead of trying to truncate the listen queue for the server
 9474 		SMTP port when the load average is too high, just close
 9475 		the port completely and reopen it later as needed.
 9476 		This ensures that the other end gets a quick "connection
 9477 		refused" response, and that the connection can be
 9478 		recovered later.  In particular, some socket emulations
 9479 		seem to get confused if you tweak the listen queue
 9480 		size around and can never start listening to connections
 9481 		again.  The down side is that someone could start up
 9482 		another daemon process in the interim, so you could
 9483 		have multiple daemons all not listening to connections;
 9484 		this could in turn cause the sendmail.pid file to be
 9485 		incorrect.  A better approach might be to accept the
 9486 		connection and give a 421 code, but that could break
 9487 		other mailers in mysterious ways and have paging behavior
 9488 		implications.
 9489 	Fix a glitch in TCP-level debugging that caused flag 16.101 to
 9490 		set debugging on the wrong socket.  From Eric Wassenaar.
 9491 	When creating a df* temporary file, be sure you truncate any
 9492 		existing data in the file -- otherwise system crashes
 9493 		and the like could result in extra data being sent.
 9494 	DOC: Replace the CHANGES-R5-R8 readme file with a paper in the
 9495 		doc directory.  This includes some additional
 9496 		information.
 9497 	CONFIG: change UUCP rules to never add $U! or $k! on the front
 9498 		of recipient envelope addresses.  This should have been
 9499 		handled by the $&h trick, but broke if people were
 9500 		mixing domainized and UUCP addresses.  They should
 9501 		probably have converted all the way over to uucp-uudom
 9502 		instead of uucp-{new,old}, but the failure mode was to
 9503 		loop the mail, which was bad news.
 9504 	Portability fixes:
 9505 		Newer BSDI systems (several people).
 9506 		Older BSDI systems from Christophe Wolfhugel.
 9507 		Intergraph CLIX, from Paul Southworth of CICNet.
 9508 		UnixWare, from Evan Champion.
 9509 		NetBSD from Adam Glass.
 9510 		Solaris from Quentin Campbell of the University of
 9511 			Newcastle upon Tyne.
 9512 		IRIX from Dean Cookson and Bill Driscoll of Mitre
 9513 			Corporation.
 9514 		NCR 3000 from Kevin Darcy of Chrysler Financial Corporation.
 9515 		SunOS (it has setsid() and setvbuf() calls) from
 9516 			Jonathan Kamens of OpenVision Technologies.
 9517 		HP-UX from Tor Lillqvist.
 9518 	New Files:
 9519 		src/Makefile.CLIX
 9520 		src/Makefile.NCR3000
 9521 		doc/changes/Makefile
 9522 		doc/changes/changes.me
 9523 		doc/changes/changes.ps
 9525 8.6.8/8.6.6	1994/03/21
 9526 	SECURITY: it was possible to read any file as root using the
 9527 		E (error message) option.  Reported by Richard Jones;
 9528 		fixed by Michael Corrigan and Christophe Wolfhugel.
 9530 8.6.7/8.6.6	1994/03/14
 9531 	SECURITY: it was possible to get root access by using weird
 9532 		values to the -d flag.  Thanks to Alain Durand of
 9533 		INRIA for forwarding me the notice from the bugtraq
 9534 		list.
 9536 8.6.6/8.6.6	1994/03/13
 9537 	SECURITY: the ability to give files away on System V-based
 9538 		systems proved dangerous -- don't run as the owner
 9539 		of a :include: file on a system that allows giveaways.
 9540 		Unfortunately, this also applies to determining a
 9541 		valid shell.
 9542 	IMPORTANT: Previous versions weren't expiring old connections
 9543 		in the connection cache for a long time under some
 9544 		circumstances.  This could result in resource exhaustion,
 9545 		both at your end and at the other end.  This checks the
 9546 		connections for timeouts much more frequently.  From
 9547 		Doug Anderson of NCSC.
 9548 	Fix a glitch that snuck in that caused programs to be run as
 9549 		the sender instead of the recipient if the mail was
 9550 		from a local user to another local user.  From
 9551 		Motonori Nakamura of Kyoto University.
 9552 	Fix "wildcard" on /etc/shells matching -- instead of looking
 9553 		for "*", look for "/SENDMAIL/ANY/SHELL/".  From
 9554 		Bryan Costales of ICSI.
 9555 	Change the method used to declare the "statfs" availability;
 9556 		instead of HASSTATFS and/or HASUSTAT with a ton of
 9557 		tweaking in conf.c, there is a single #define called
 9558 		SFS_TYPE which takes on one of six values (SFS_NONE
 9559 		for no statfs availability, SFS_USTAT for the ustat(2)
 9560 		syscall, SFS_4ARGS for a four argument statfs(2) call,
 9561 		and SFS_VFS, SFS_MOUNT, or SFS_STATFS for a two argument
 9562 		statfs(2) call with the declarations in <sys/vfs.h>,
 9563 		<sys/mount.h>, or <sys/statfs.h> respectively).
 9564 	Fix glitch in NetInfo support that could return garbage if
 9565 		there was no "/locations/sendmail" property.  From
 9566 		David Meyer of the University of Virginia.
 9567 	Change HASFLOCK from defined/not-defined to a 0/1 definition
 9568 		to allow Linux to turn it off even though it is a
 9569 		BSD-like system.
 9570 	Allow setting of "ident" timeout to zero to turn off the ident
 9571 		protocol entirely.
 9572 	Make 7-bit stripping local to a connection (instead of to a
 9573 		mailer); this allows you to specify that SMTP is a
 9574 		7-bit channel, but revert to 8-bit should it advertise
 9575 		that it supports 8BITMIME.  You still have to specify
 9576 		mailer flag 7 to get this stripping at all.
 9577 	Improve makesendmail script so it handles more cases automatically.
 9578 	Tighten up restrictions on taking ownership of :include: files
 9579 		to avoid problems on systems that allow you to give away
 9580 		files.
 9581 	Fix a problem that made it impossible to rebuild the alias
 9582 		file if it was on a read-only file system.  From
 9583 		Harry Edmon of the University of Washington.
 9584 	Improve MX randomization function.  From John Gardiner Myers
 9585 		of CMU.
 9586 	Fix a minor glitch causing a bogus message to be printed (used
 9587 		%s instead of %d in a printf string for the line number)
 9588 		when a bad queue file was read.  From Harry Edmon.
 9589 	Allow $s to remain NULL on locally generated mail.  I'm not
 9590 		sure this is necessary, but a lot of people have complained
 9591 		about it, and there is a legitimate question as to whether
 9592 		"localhost" is legal as an 822-style domain.
 9593 	Fix a problem with very short line lengths (mailer L= flag) in
 9594 		headers.  This causes a leading space to be added onto
 9595 		continuation lines (including in the body!), and also
 9596 		tries to wrap headers containing addresses (From:, To:,
 9597 		etc) intelligently at the shorter line lengths.  Problem
 9598 		Reported by Lars-Johan Liman of SUNET Operations Center.
 9599 	Log the real user name when logging syserrs, since these can have
 9600 		security implications.  Suggested by several people.
 9601 	Fix address logging of cached connections -- it used to always
 9602 		log the numeric address as zero.  This is a somewhat
 9603 		bogus implementation in that it does an extra system
 9604 		call, but it should be an inexpensive one.  Fix from
 9605 		Motonori Nakamura.
 9606 	Tighten up handling of short syslog buffers even more -- there
 9607 		were cases where the outgoing relay= name was too long
 9608 		to share a line with delay= and mailer= logging.
 9609 	Limit the overhead on split envelopes to one open file descriptor
 9610 		per envelope -- previously the overhead was three
 9611 		descriptors.  This was in response to a problem reported
 9612 		by P{r (Pell) Emanuelsson.
 9613 	Fixes to better handle the case of unexpected connection closes;
 9614 		this redirects the output to the transcript so the info
 9615 		is not lost.  From Eric Wassenaar.
 9616 	Fix potential string overrun if you macro evaluate a string that
 9617 		has a naked $ at the end.  Problem noted by James Matheson
 9618 		<jmrm@eng.cam.ac.uk>.
 9619 	Make default error number on $#error messages 553 (``Requested
 9620 		action not taken: mailbox name not allowed'') instead of
 9621 		501 (``Syntax error in parameters or arguments'') to
 9622 		avoid bogus "protocol error" messages.
 9623 	Strip off any existing trailing dot on names during $[ ... $]
 9624 		lookup.  This prevents it from ending up with two dots
 9625 		on the end of dot terminated names.  From Wesley Craig
 9626 		of the University of Michigan and Bryan Costales of ICSI.
 9627 	Clean up file class reading so that the debugging information is
 9628 		more informative.  It hadn't been using setclass, so you
 9629 		didn't see the class items being added.
 9630 	Avoid core dump if you are running a version of sendmail where
 9631 		NIS is compiled in, and you specify an NIS map, but
 9632 		NIS is not running.  Fix from John Oleynick of
 9633 		Rutgers.
 9634 	Diagnose bizarre case where res_search returns a failure value,
 9635 		but sets h_errno to a success value.
 9636 	Make sure that "too many hops" messages are considered important
 9637 		enough to send an error to the Postmaster (that is, the
 9638 		address specified in the P option).  This fix should
 9639 		help problems that cause the df file to be left around
 9640 		sometimes -- unfortunately, I can't seem to reproduce
 9641 		the problem myself.
 9642 	Avoid core dump (null pointer reference) on EXPN command; this
 9643 		only occurred if your log level was set to 10 or higher
 9644 		and the target account was an alias or had a .forward file.
 9645 		Problem noted by Janne Himanka.
 9646 	Avoid "denial of service" attacks by someone who is flooding your
 9647 		SMTP port with bad commands by shutting the connection
 9648 		after 25 bad commands are issued.  From Kyle Jones of
 9649 		UUNET.
 9650 	Fix core dump on error messages with very long "to" buffers;
 9651 		fmtmsg overflows the message buffer.  Fixed by trimming
 9652 		the to address to 203 characters.  Problem reported by
 9653 		John Oleynick.
 9654 	Fix configuration for HASFLOCK -- there were some spots where
 9655 		a #ifndef was incorrectly #ifdef.  Pointed out by
 9656 		George Baltz of the University of Maryland.
 9657 	Fix a typo in savemail() that could cause the error message To:
 9658 		lists to be incorrect in some places.  From Motonori
 9659 		Nakamura.
 9660 	Fix a glitch that can cause duplicate error messages on split
 9661 		envelopes where an address on one of the lists has a
 9662 		name server failure.  Fix from Voradesh Yenbut of the
 9663 		University of Washington.
 9664 	Fix possible bogus pointer reference on ESMTP parameters that
 9665 		don't have an ``=value'' part.
 9666 	CNAME loops caused an error message to be generated, but also
 9667 		re-queued the message.  Changed to just re-queue the
 9668 		message (it's really hard to just bounce it because
 9669 		of the weird way the name server works in the presence
 9670 		of CNAME loops).  Problem noted by James M.R.Matheson
 9671 		of Cambridge University.
 9672 	Avoid giving ``warning: foo owned process doing -bs'' messages
 9673 		if they use ``MAIL FROM:<foo>'' where foo is their true
 9674 		user name.  Suggested by Andreas Stolcke of ICSI.
 9675 	Change the NAMED_BIND compile flag to be a 0/1 flag so you can
 9676 		override it easily in the Makefile -- that is, you can
 9677 		turn it off using -DNAMED_BIND=0.
 9678 	If a gethostbyname(...) of an address with a trailing dot fails,
 9679 		try it without the trailing dot.  This is because if
 9680 		you have a version of gethostbyname() that falls back
 9681 		to NIS or the /etc/hosts file it will fail to find
 9682 		perfectly reasonable names that just don't happen to
 9683 		be dot terminated in the hosts file.  You don't want to
 9684 		strip the dot first though because we're trying to ensure
 9685 		that country names that match one of your subdomains get
 9686 		a chance.
 9687 	PRALIASES: fix bogus output on non-null-terminated strings.
 9688 		From Bill Gianopoulos of Raytheon.
 9689 	CONFIG: Avoid rewriting anything that matches $w to be $j.
 9690 		This was in code intended to only catch the self-literal
 9691 		address (that is, [], where is your
 9692 		IP address), but the code was broken.  However, it will
 9693 		still do this if $M is defined; this is necessary to
 9694 		get client configurations to work (sigh).  Note that this
 9695 		means that $M overrides :mailname entries in the user
 9696 		database!  Problem noted by Paul Southworth.
 9697 	CONFIG: Fix definition of Solaris help file location.  From
 9698 		Steve Cliffe <steve@gorgon.cs.uow.edu.au>.
 9699 	CONFIG: Fix bug that broke news.group.USENET mappings.
 9700 	CONFIG: Allow declaration of SMTP_MAILER_MAX, FAX_MAILER_MAX,
 9701 		and USENET_MAILER_MAX to tweak the maximum message
 9702 		size for various mailers.
 9703 	CONFIG: Change definition of USENET_MAILER_ARGS to include argv[0]
 9704 		instead of assuming that it is "inews" for consistency
 9705 		with other mailers.  From Michael Corrigan of UC San Diego.
 9706 	CONFIG: When mail is forwarded to a LOCAL_RELAY or a MAIL_HUB,
 9707 		qualify the address in the SMTP envelope as user@{relay|hub}
 9708 		instead of user@$j.  From Bill Wisner of The Well.
 9709 	CONFIG: Fix route-addr syntax in nullrelay configuration set.
 9710 	CONFIG: Don't turn off case mapping of user names in the local
 9711 		mailer for IRIX.  This was different than most every other
 9712 		system.
 9713 	CONFIG: Avoid infinite loops on certainly list:; syntaxes in
 9714 		envelope.  Noted by Thierry Besancon
 9715 		<besancon@excalibur.ens.fr>.
 9716 	CONFIG: Don't include -z by default on uux line -- most systems
 9717 		don't want it set by default.  Pointed out by Philippe
 9718 		Michel of Thomson CSF.
 9719 	CONFIG: Fix some bugs with mailertables -- for example, if your
 9720 		host name was foo.bar.ray.com and you matched against
 9721 		".ray.com", the old implementation bound %1 to "bar"
 9722 		instead of "foo.bar".  Also, allow "." in the mailertable
 9723 		to match anything -- essentially, take over SMART_HOST.
 9724 		This also moves matching of explicit local host names
 9725 		before the mailertable so they don't have to be special
 9726 		cased in the mailertable data.  Reported by Bill
 9727 		Gianopoulos of Raytheon; the fix for the %1 binding
 9728 		problem was contributed by Nicholas Comanos of the
 9729 		University of Sydney.
 9730 	CONFIG: Don't include "root" in class $=L (users to deliver
 9731 		locally, even if a hub or relay exists) by default.
 9732 		This is because of the known bug where definition of
 9733 		both a LOCAL_RELAY and a MAIL_HUB causes $=L to ignore
 9734 		both and deliver into the local mailbox.
 9735 	CONFIG: Move up bitdomain and uudomain handling so that they
 9736 		are done before .UUCP class matching; uudomain was
 9737 		reported as ineffective before.  This also frees up
 9738 		diversion 8 for future use.  Problem reported by Kimmo
 9739 		Suominen.
 9740 	CONFIG: Don't try to convert dotted IP address (e.g., [])
 9741 		into host names.  As pointed out by Jonathan Kamens,
 9742 		these are often used because either the forward or reverse
 9743 		mapping is broken; this translation makes it broken again.
 9744 	DOC: Clarify $@ and $: in the Install & Op Guide.  From Kimmo
 9745 		Suominen.
 9746 	Portability fixes:
 9747 		Unicos from David L. Kensiski of Sterling Software.
 9748 		DomainOS from Don Lewis of Silicon Systems.
 9749 		GNU m4 1.0.3 from Karst Koymans of Utrecht University.
 9750 		Convex from Kimmo Suominen <kim@tac.nyc.ny.us>.
 9751 		NetBSD from Adam Glass <glass@sun-lamp.cs.berkeley.edu>.
 9752 		BSD/386 from Tony Sanders of BSDI.
 9753 		Apollo from Eric Wassenaar.
 9754 		DGUX from Doug Anderson.
 9755 		Sequent DYNIX/ptx 2.0 from Tim Wright of Sequent.
 9756 	NEW FILES:
 9757 		src/Makefile.DomainOS
 9758 		src/Makefile.PTX
 9759 		src/Makefile.SunOS.5.1
 9760 		src/Makefile.SunOS.5.2
 9761 		src/Makefile.SunOS.5.x
 9762 		src/mailq.1
 9763 		cf/ostype/domainos.m4
 9764 		doc/op/Makefile
 9765 		doc/intro/Makefile
 9766 		doc/usenix/Makefile
 9768 8.6.5/8.6.5	1994/01/13
 9769 	Security fix:  /.forward could be owned by anyone (the test
 9770 		to allow root to own any file was backwards).  From
 9771 		Bob Campbell at U.C. Berkeley.
 9772 	Security fix: group ids were not completely set when programs
 9773 		were invoked.  This caused programs to have group
 9774 		permissions they should not have had (usually group
 9775 		daemon instead of their own group).  In particular,
 9776 		Perl scripts would refuse to run.
 9777 	Security: check to make sure files that are written are not
 9778 		symbolic links (at least under some circumstances).
 9779 		Although this does not respond to a specific known
 9780 		attack, it's just a good idea.  Suggested by
 9781 		Christian Wettergren.
 9782 	Security fix: if a user had an NFS mounted home directory on
 9783 		a system with a restricted shell listed in their
 9784 		/etc/passwd entry, they could still execute any
 9785 		program by putting that in their .forward file.
 9786 		This fix prevents that by insisting that their shell
 9787 		appear in /etc/shells before allowing a .forward to
 9788 		execute a program or write a file.  You can disable
 9789 		this by putting "*" in /etc/shells.  It also won't
 9790 		permit world-writable :include: files to reference
 9791 		programs or files (there's no way to disable this).
 9792 		These behaviors are only one level deep -- for
 9793 		example, it is legal for a world-writable :include:
 9794 		file to reference an alias that writes a file, on
 9795 		the assumption that the alias file is well controlled.
 9796 	Security fix: root was not treated suspiciously enough when
 9797 		looking into subdirectories.  This would potentially
 9798 		allow a cracker to examine files that were publicly
 9799 		readable but in a non-publicly searchable directory.
 9800 	Fix a problem that causes an error on QUIT on a cached
 9801 		connection to create problems on the current job.
 9802 		These are typically unrelated, so errors occur in
 9803 		the wrong place.
 9804 	Reset CurrentLA in sendall() -- this makes sendmail queue
 9805 		runs more responsive to load average, and fixes a
 9806 		problem that ignored the load average in locally
 9807 		generated mail.  From Eric Wassenaar.
 9808 	Fix possible core dump on aliases with null LHS.  From
 9809 		John Orthoefer of BB&N.
 9810 	Revert to using flock() whenever possible -- there are just
 9811 		too many bugs in fcntl() locking, particularly over
 9812 		NFS, that cause sendmail to fail in perverse ways.
 9813 	Fix a bug that causes the connection cache to get confused
 9814 		when sending error messages.  This resulted in
 9815 		"unexpected close" messages.  It should fix itself
 9816 		on the following queue run.  Problem noted by
 9817 		Liudvikas Bukys of the University of Rochester.
 9818 	Include $k in $=k as documented in the Install & Op Guide.
 9819 		This seems odd, but it was documented....  From
 9820 		Michael Corrigan of UCSD.
 9821 	Fix problem that caused :include:s from alias files to be
 9822 		forced to be owned by root instead of daemon
 9823 		(actually DefUid).  From Tim Irvin.
 9824 	Diagnose unrecognized I option values -- from Mortin Forssen
 9825 		of the Chalmers University of Technology.
 9826 	Make "error" mailer work consistently when there is no error
 9827 		code associated with it -- previously it returned OK
 9828 		even though there was a real problem.  Now it assumes
 9830 	Fix bug that caused the last header line of messages that had
 9831 		no body and which were terminated with EOF instead of
 9832 		"." to be discarded.  Problem noted by Liudvikas Bukys.
 9833 	Fix core dump on SMTP mail to programs that failed -- it tried
 9834 		to go to a "next MX host" when none existed, causing
 9835 		a core dump.  From der Mouse at McGill University.
 9836 	Change IDENTPROTO from a defined/not defined to a 0/1 switch;
 9837 		this makes it easier to turn it off (using
 9838 		-DIDENTPROTO=0 in the Makefile).  From der Mouse.
 9839 	Fix YP_MASTER_NAME store to use the unupdated result of
 9840 		gethostname() (instead of myhostname(), which tries
 9841 		to fully qualify the name) to be consistent with
 9842 		SunOS.  If your hostname is unqualified, this fixes
 9843 		transfers to slave servers.  Bug noted by Keith
 9844 		McMillan of Ameritech Services, Inc.
 9845 	Fix Ultrix problem: gethostbyname() can return a very large
 9846 		(> 500) h_length field, which causes the sockaddr
 9847 		to be trashed.  Use the size of the sockaddr instead.
 9848 		Fix from Bob Manson of Ohio State.
 9849 	Don't assume "-a." on host lookups if NAMED_BIND is not
 9850 		defined -- this confuses gethostbyname on hosts
 9851 		file lookups, which doesn't understand the trailing
 9852 		dot convention.
 9853 	Log SMTP server subprocesses that die with a signal instead
 9854 		of from a clean exit.
 9855 	If you don't have option "I" set, don't assume that a DNS
 9856 		"host unknown" message is authoritative -- it
 9857 		might still be found in /etc/hosts.
 9858 	Fix a problem that would cause Deferred: messages to be sent
 9859 		as the subject of an error message, even though the
 9860 		actual cause of a message was more severe than that.
 9861 		Problem noted by Chris Seabrook of OSSI.
 9862 	Fix race condition in DBM alias file locking.  From Kyle
 9863 		Jones of UUNET.
 9864 	Limit delivery syslog line length to avoid bugs in some
 9865 		versions of syslog(3).  This adds a new compile time
 9866 		variable SYSLOG_BUFSIZE.  From Jay Plett of Princeton
 9867 		University, which is in turn derived from IDA.
 9868 	Fix quotes inside of comments in addresses -- previously
 9869 		it insisted that they be balanced, but the 822 spec
 9870 		says that they should be ignored.
 9871 	Dump open file state to syslog upon receiving SIGUSR1 (for
 9872 		debugging).  This also evaluates ruleset 89, if set
 9873 		(with the null input), and logs the result.  This
 9874 		should be used sparingly, since the rewrite process
 9875 		is not reentrant.
 9876 	Change -qI, -qR, and -qS flags to be case-insensitive as
 9877 		documented in the Bat Book.
 9878 	If the mailer returned EX_IOERR or EX_OSERR, sendmail did not
 9879 		return an error message and did not requeue the message.
 9880 		Fix based on code from Roland Dirlewanger of
 9881 		Reseau Regional Aquarel, Bordeaux, France.
 9882 	Fix a problem that caused a seg fault if you got a 421 error
 9883 		code during some parts of connection initialization.
 9884 		I've only seen this when talking to buggy mailers on
 9885 		the other end, but it shouldn't give a seg fault in
 9886 		any case.  From Amir Plivatsky.
 9887 	Fix core dump caused by a ruleset call that returns null.
 9888 		Fix from Bryan Costales of ICSI.
 9889 	Full-Name: field was being ignored.  Fix from Motonori Nakamura
 9890 		of Kyoto University.
 9891 	Fix a possible problem with very long input lines in setproctitle.
 9892 		From P{r Emanuelsson.
 9893 	Avoid putting "This is a warning message" out on return receipts.
 9894 		Suggested by Douglas Anderson.
 9895 	Detect loops caused by recursive ruleset calls.  Suggested by
 9896 		Bryan Costales.
 9897 	Initialize non-alias maps during alias rebuilds -- they may be
 9898 		needed for parsing.  Problem noted by Douglas Anderson.
 9899 	Log sender address even if no message was collected in SMTP
 9900 		(e.g., if all RCPTs failed).  Suggested by Motonori
 9901 		Nakamura.
 9902 	Don't reflect the owner-list contents into the envelope sender
 9903 		address if the value contains ", :, /, or | (to avoid
 9904 		illegal addresses appearing there).
 9905 	Efficiency hack for toktype macro -- from Craig Partridge of
 9906 		BB&N.
 9907 	Clean up DNS error printing so that a host name is always
 9908 		included.
 9909 	Remember to set $i during queue runs.  Reported by Stephen
 9910 		Campbell of Dartmouth University.
 9911 	If the environment variable HOSTALIASES is set, use it during
 9912 		canonification as the name of a file with per-user host
 9913 		translations so that headers are properly mapped.  Reported
 9914 		by Anne Bennett of Concordia University.
 9915 	Avoid printing misleading error message if SMTP mailer (not
 9916 		using [IPC]) should die on a core dump.
 9917 	Avoid incorrect diagnosis of "file 1 closed" when it is caused
 9918 		by the other end closing the connection.  From
 9919 		Dave Morrison of Oracle.
 9920 	Improve several of the error messages printed by "mailq"
 9921 		to include a host name or other useful information.
 9922 	Add NetInfo preliminary support for NeXT systems.  From Vince
 9923 		DeMarco.
 9924 	Fix a glitch that sometimes caused :include:s that pointed to
 9925 		NFS filesystems that were down to give an "aliasing/
 9926 		forwarding loop broken" message instead of queueing
 9927 		the message for retry.  Noted by William C Fenner of
 9928 		the NRL Connection Machine Facility.
 9929 	Fix a problem that could cause a core dump if the input sequence
 9930 		had (or somehow acquired) a \231 character.
 9931 	Make sure that route-addrs always have <angle brackets> around
 9932 		them in non-SMTP envelopes (SMTP envelopes already do
 9933 		this properly).
 9934 	Avoid weird headers on unbalanced punctuation of the form:
 9935 		``Joe User <user)'' -- this caused reference to the
 9936 		null macro.  Fix from Rick McCarty of IO.COM.
 9937 	Fix a problem that caused an alias "user: user@local.host" to
 9938 		not have the QNOTREMOTE bit set; this caused configs
 9939 		to act as if FEATURE(notsticky) was defined even when
 9940 		it was not.  The effect of the problem was to make it
 9941 		very hard to to set up satellite sites that had a few
 9942 		local accounts, with everything else forwarded to a
 9943 		corporate hub.  Reported by Detlef Drewanz of the
 9944 		University of Rostock and Mark Frost of NCD.
 9945 	Change queuing to not call rulesets 3, {1 or 2}, 4 on header
 9946 		addresses.  This is more efficient (fewer name server
 9947 		calls) and fixes certain unusual configurations, such
 9948 		as those that have ruleset 4 do something that is
 9949 		non-idempotent unless a mailer-specific ruleset did
 9950 		something else.  Problem reported by Brian J. Coan
 9951 		of the Institute for Global Communications.
 9952 	Fix the "obsolete argument" routine in main to better understand
 9953 		new arguments.  For example, if you used ``sendmail
 9954 		-C config -v -q'' it would choke on the -q because
 9955 		the -C would stop looking for old-format arguments.
 9956 	Fix the code that was intended to allow two users to forward their
 9957 		mail to the same program and have them appear unique.
 9958 	Portability fixes for:
 9959 		SCO UNIX from Murray Kucherawy.
 9960 		SCO Open Server 3.2v4 from Philippe Brand.
 9961 		System V Release 4 from Rick Ellis and others.
 9962 		OSF/1 from Steve Campbell.
 9963 		DG/UX from Ben Mesander of the USGS and Bryan Curnutt
 9964 			of Stoner Associates.
 9965 		Motorola SysV88 from Kevin Johnson of Motorola.
 9966 		Solaris 2.3 from Casper H.S. Dik of the University
 9967 			of Amsterdam and John Caruso of University
 9968 			of Maryland.
 9969 		FreeBSD from Ollivier Robert.
 9970 		NetBSD from Adam Glass.
 9971 		TitanOS from Kate Hedstrom of Rutgers University.
 9972 		Irix from Bryan Curnutt.
 9973 		Dynix from Jim Davis of the University of Arizona.
 9974 		RISC/os.
 9975 		Linux from John Kennedy of California State University
 9976 			at Chico.
 9977 		Solaris 2.x from Tony Boner of the U.S. Air Force.
 9978 		NEXTSTEP 3.x from Vince DeMarco.
 9979 		HP-UX from various people.  NOTA BENE:  the location
 9980 			of the config file has moved to /usr/lib
 9981 			to match the HP-UX version of sendmail.
 9982 	CONFIG: Don't do any recipient rewriting on relay mailer;
 9983 		since this is intended only for internal use, the
 9984 		usual RFC 821/822/1123 rules can be relaxed.  The
 9985 		main point of this is to avoid munging (ugh) UUCP
 9986 		addresses when relaying internally.
 9987 	CONFIG: fix typo in mailer/uucp.m4 that mutilates list:;
 9988 		syntax addresses delivered via UUCP.  Solution
 9989 		provided by Peter Wemm.
 9990 	CONFIG: fix thumb-fumble in default UUCP relaying in ruleset
 9991 		zero; it caused double @ signs in addresses.  From
 9992 		Irving Reid of the University of Toronto.
 9993 	CONFIG: Portability fixes for SCO Unix 3.2 with TCP/IP 1.2.1
 9994 		from Markku Toijala of ICL Personal Systems Oy.
 9995 	CONFIG: Add trailing "." on pseudo-domains for consistency;
 9996 		this fixes a problem (noted by Al Whaley of Sunnyside)
 9997 		that made it hard to recognize your own pseudodomain
 9998 		names.
 9999 	CONFIG: catch "@host" syntax errors (i.e., null local-parts)
10000 		rather than letting them get "local configuration
10001 		error"s.  Problem noted by John Gardiner Myers.
10002 	CONFIG: add uucp-uudom mailer variant, based on code posted
10003 		by Spider Boardman <spider@Orb.Nashua.NH.US>; this
10004 		has uucp-dom semantics but old UUCP syntax.  This
10005 		also permits "uucp-old" as an alias for "uucp" and
10006 		"uucp-new" as a synonym for "suucp" for consistency.
10007 	CONFIG: add POP mailer support (from Kimmo Suominen
10008 		<kim@grendel.lut.fi>).
10009 	CONFIG: drop CSNET_RELAY support -- CSNET is long gone.
10010 	CONFIG: fix bug caused with domain literal addresses (e.g.,
10011 		``[]'') when FEATURE(allmasquerade)
10012 		was set; it would get an additional @masquerade.host
10013 		added to the address.  Problem noted by Peter Wan
10014 		of Georgia Tech.
10015 	CONFIG: make sure that the local UUCP name is in $=w.  From
10016 		Jim Murray of Stratus.
10017 	CONFIG: changes to UUCP rewriting to simulate IDA-style "V"
10018 		mailer flag.  Briefly, if you are sending to host
10019 		"foo", then it rewrites "foo!...!baz" to "...!baz",
10020 		"foo!baz" remains "foo!baz", and anything else has
10021 		the local name prepended.
10022 	CONFIG: portability fixes for HP-UX.
10023 	DOC: several minor problems fixed in the Install & Op Guide.
10024 	MAKEMAP: fix core dump problem on lines that are too long or
10025 		which lack newline.  From Mark Delany.
10026 	MAILSTATS: print sums of columns (total messages & kbytes
10027 		in and out of the system).  From Tom Ferrin of UC
10028 		San Francisco Computer Graphics Lab.
10030 		On HP-UX, /etc/sendmail.cf has been moved to
10031 			/usr/lib/sendmail.cf to match HP sendmail.
10032 		Permissions have been tightened up on world-writable
10033 			:include: files and accounts that have shells
10034 			that are not listed in /etc/shells.  This may
10035 			cause some .forward files that have worked
10036 			before to start failing.
10037 		SIGUSR1 dumps some state to the log.
10038 	NEW FILES:
10039 		src/Makefile.DGUX
10040 		src/Makefile.Dynix
10041 		src/Makefile.FreeBSD
10042 		src/Makefile.Mach386
10043 		src/Makefile.NetBSD
10044 		src/Makefile.RISCos
10045 		src/Makefile.SCO
10046 		src/Makefile.SVR4
10047 		src/Makefile.Titan
10048 		cf/mailer/pop.m4
10049 		cf/ostype/bsdi1.0.m4
10050 		cf/ostype/dgux.m4
10051 		cf/ostype/dynix3.2.m4
10052 		cf/ostype/sco3.2.m4
10053 		makemap/Makefile.dist
10054 		praliases/Makefile.dist
10056 8.6.4/8.6.4	1993/10/31
10057 	Repair core-dump problem (write to read-only memory segment)
10058 		if you fall back to the return-to-Postmaster case in
10059 		savemail.  Problem reported by Richard Liu.
10060 	Immediately diagnose bogus sender addresses in SMTP.  This
10061 		makes quite certain that crackers can't use this
10062 		class of attack.
10063 	Reliability Fix:  check return value from fclose() and fsync()
10064 		in a few critical places.
10065 	Minor problem in initsys() that reversed a condition for
10066 		redirecting the output channel on queue runs.  It's
10067 		not clear this code even does anything.  From Eric
10068 		Wassenaar of the Dutch National Institute for Nuclear
10069 		and High-Energy Physics.
10070 	Fix some problems that caused queue runs to do "too much work",
10071 		such as double-reading the Errors-To: header.  From
10072 		Eric Wassenaar.
10073 	Error messages on writing the temporary file (including the
10074 		data file) were getting suppressed in SMTP -- this
10075 		fix causes them to be properly reported.  From Eric
10076 		Wassenaar.
10077 	Some changes to support AF_UNIX sockets -- this will only
10078 		really become relevant in the next release, but some
10079 		people need it for local patches.  From Michael
10080 		Corrigan of UC San Diego.
10081 	Use dynamically allocated memory (instead of static buffers)
10082 		for macros defined in initsys() and settime(); since
10083 		these can have different values depending on which
10084 		envelope they are in.  From Eric Wassenaar.
10085 	Improve logging to show ctladdr on to= logging; this tells you
10086 		what uid/gid processes ran as.
10087 	Fix a problem that caused error messages to be discarded if
10088 		the sender address was unparseable for some reason;
10089 		this was supposed to fall back to the "return to
10090 		postmaster" case.
10091 	Improve aliaswait backoff algorithm.
10092 	Portability patches for Linux (8.6.3 required another header
10093 		file) (from Karl London) and SCO UNIX.
10094 	CONFIG: patch prog mailer to not strip host name off of envelope
10095 		addresses (so that it matches local again).  From
10096 		Christopher Davis.
10097 	CONFIG: change uucp-dom mailer so that "<>" translates to $n;
10098 		this prevents uux from seeing lines with null names like
10099 		``From   Sat Oct 30 14:55:31 1993''.  From Motonori
10100 		Nakamura of Kyoto University.
10101 	CONFIG: handle <list:;> syntax correctly.  This isn't legal, but
10102 		it shouldn't fail miserably.  From Motonori Nakamura.
10104 8.6.2/8.6.2	1993/10/15
10105 	Put a "successful delivery" message in the transcript for
10106 		addresses that get return-receipts.
10107 	Put a prominent "this is only a warning" message in warning
10108 		messages -- some people don't read carefully enough
10109 		and end up sending the message several times.
10110 	Include reason for temporary failure in the "warning" return
10111 		message.  Currently, it just says "cannot send for
10112 		four hours".
10113 	Fix the "Original message received" time generated for
10114 		returntosender messages.  It was previously listed as
10115 		the current time.  Bug reported by Eric Hagberg of
10116 		Cornell University Medical College.
10117 	If there is an error when writing the body of a message,
10118 		don't send the trailing dot and wait for a response
10119 		in sender SMTP, as this could cause the connection to
10120 		hang up under some bizarre circumstances.  From Eric
10121 		Wassenaar.
10122 	Fix some server SMTP synchronization problems caused when
10123 		connections fail during message collection.  From
10124 		Eric Wassenaar.
10125 	Fix a problem that can cause srvrsmtp to reject mail if the
10126 		name server is down -- it accepts the RCPT but rejects
10127 		the DATA command.  Problem reported by Jim Murray of
10128 		Stratus.
10129 	Fix a problem that can cause core dumps if the config file
10130 		incorrectly resolves to a null hostname.  Reported by
10131 		Allan Johannesen of WPI.
10132 	Non-root use of -C flag, dangerous -f flags, and use of -oQ
10133 		by non-root users were not put into
10134 		X-Authentication-Warning:s as intended because the
10135 		config file hadn't set the PrivacyOptions yet.  Fix
10136 		from Sven-Ove Westberg of the University of Lulea.
10137 	Under very odd circumstances, the alias file rebuild code
10138 		could get confused as to whether a database was
10139 		open or not.
10140 	Check "vendor code" on the end of V lines -- this is
10141 		intended to provide a hook for vendor-specific
10142 		configuration syntax.  (This is a "new feature",
10143 		but I've made an exception to my rule in a belief
10144 		that this is a highly exceptional case.)
10145 	Portability fixes for DG/UX (from Douglas Anderson of NCSC),
10146 		SCO Unix (from Murray Kucherawy), A/UX, and OSF/1
10147 		(from Jon Forrest of UC Berkeley)
10148 	CONFIG: fix ``mailer:host'' form of UUCP relay naming.
10150 8.6.1/8.6	1993/10/08
10151 	Portability fixes for A/UX and Encore UMAX V.
10152 	Fix error message handling -- if you had a name server down
10153 		causing an error during parsing, that message was never
10154 		propagated to the queue file.
10156 8.6/8.6		1993/10/05
10157 	Configuration cleanup: make it easier to undo IDENTPROTO in
10158 		conf.h (other systems have the same bug).
10159 	If HASGETDTABLESIZE and _SC_OPEN_MAX are both defined, assume
10160 		getdtablesize() instead of sysconf(); a disturbingly
10161 		large number of systems defined _SC_OPEN_MAX in the
10162 		header files but don't have the syscall.
10163 	Another patch to really truly ignore MX records in getcanonname
10164 		if trymx == FALSE.
10165 	Fix problem that caused the "250 IAA25499 Message accepted for
10166 		delivery" message to be omitted if there was an error
10167 		in the header of the message (e.g., a bad Errors-To:
10168 		line).  Pointed out by Michael Corrigan of UCSD.
10169 	Announce name of host we are chatting when we get errors; this
10170 		is an IDA-ism suggested by Christophe Wolfhugel.
10171 	Portability fixes for Alpha OSF/1 (from Anthony Baxter of the
10172 		Australian Artificial Intelligence Institute), SCO Unix
10173 		(from Murray Kucherawy of Hookup Communication Corp.),
10174 		NeXT (from Vince DeMarco and myself), Linux (from
10175 		Karl London <karl@borg.demon.co.uk>), BSDI (from
10176 		Christophe Wolfhugel, and SVR4 on Dell (from Kimmo
10177 		Suominen), AUX 3.0 on Macintosh, and ANSI C compilers.
10178 	Some changes to get around gcc optimizer bugs.  From Takahiro
10179 		Kanbe.
10180 	Fix error recovery in queueup if another tf file of the same
10181 		name already exists.  Problem stumbled over by Bill
10182 		Wisner of The Well.
10183 	Output YP_MASTER_NAME and YP_LAST_MODIFIED without null bytes.
10184 		Problem noted by Keith McMillan of Ameritech Services.
10185 	Deal with group permissions properly when opening .forward and
10186 		:include: files.  This relaxes the 8.1C restrictions
10187 		slightly more.  This includes proper setting of groups
10188 		when reading :include: files, allowing you to read some
10189 		files that you should be able to read but have previously
10190 		been denied unless you owned them or they had "other"
10191 		read permission.
10192 	Make certain that $j is in $=w (after the .cf is read) so that
10193 		if the user is forced to override some silly system,
10194 		MX suppression will still work.
10195 	Fix a couple of efficiency problems where newstr was double-
10196 		calling expensive routines.  In at least one case, it
10197 		wasn't guaranteed that they would always return the
10198 		same result.  Problem noted by Christophe Wolfhugel.
10199 	Fix null pointer dereference in putoutmsg -- only on an error
10200 		condition from a non-SMTP mailer.  From Motonori
10201 		Nakamura.
10202 	Macro expand "C" line class definitions before scanning so that
10203 		"CX $Z" works.
10204 	Fix problem that caused error message to be sent while still
10205 		trying to send the original message if the connection
10206 		is closed during a DATA command after getting an error
10207 		on an RCPT command (pretty obscure).  Problem reported
10208 		by John Myers of CMU.
10209 	Fix reply to NOOP to be 250 instead of 200 -- this is a long
10210 		term bug.
10211 	Fix a nasty bug causing core dumps when returning the "warning:
10212 		cannot deliver for N hours -- will keep trying" message;
10213 		it only occurred if you had PostmasterCopy set and
10214 		only on some architectures.  Although sendmail would
10215 		keep trying, it would send error messages on each
10216 		queue interval.  This is an important fix.
10217 	Allow u and g options to take user and group names respectively.
10218 	Don't do a chdir into the queue directory in -bt mode to make
10219 		ruleset testing a bit easier.
10220 	Don't allow users to turn off logging (using -oL) on the command
10221 		line -- command line can only raise, not lower, logging
10222 		level.
10223 	Set $u to the original recipient on the SMTP transaction or on
10224 		the command line.  This is only done if there is exactly
10225 		one recipient.  Technically, this does not meet the
10226 		specs, because it does not guarantee a domain on the
10227 		address.
10228 	Fix a problem that dumped error messages on bad addresses if
10229 		you used the -t flag.  Problem noted by Josh Smith of
10230 		Harvey Mudd College.
10231 	Given an address such as ``<foo> <bar>'', auto-quote the first
10232 		``<foo>'' part, giving ``"<foo>" <bar>''.  This is to
10233 		avoid the problem of people who use angle brackets in
10234 		their full name information.
10235 	Fix a null pointer dereference if you set option "l", have
10236 		an Errors-To: header in the message, and have Errors-To:
10237 		defined in the config file H lines.  From J.R. Oldroyd.
10238 	Put YPCOMPAT on #ifdef NIS instead -- it's one less thing to get
10239 		wrong when compiling.  Suggested by Rick McCarty of TI.
10240 	Fix a problem that could pass negative SIZE parameter if the
10241 		df file got lost; this would cause servers to always
10242 		give a temporary failure, making the problem even worse.
10243 		Problem noted by Allan Johannesen of WPI.
10244 	Add "ident" timeout (one of the "r" option selectors) for IDENT
10245 		protocol timeouts (30s default).  Requested by Murray
10246 		Kucherawy of HookUp Communication Corp. to handle bogus
10247 		PC TCP/IP implementations.
10248 	Change $w default definition to be just the first component of
10249 		the domain name on config level 5.  The $j macro defaults
10250 		to the FQDN; $m remains as before.  This lets well-behaved
10251 		config files use any of the short, long, or subdomain
10252 		names.
10253 	Add makesendmail script in src to try to automate multi-architecture
10254 		builds.  I know, this is sub-optimal, but it is still
10255 		helpful.
10256 	Fix very obscure race condition that can cause a queue run to
10257 		get a queue file for an already completed job.  This
10258 		problem has existed for years.  Problem noted by the
10259 		long suffering Allan Johannesen of WPI.
10260 	Fix a problem that caused the raw sender name to be passed to
10261 		udbsender instead of the canonified name -- this caused
10262 		it to sometimes miss records that it should have found.
10263 	Relax check of name on HELO packet so that a program using -bs
10264 		that claims to be itself works properly.
10265 	Restore rewriting of $: part of address through 2, R, 4 in
10266 		buildaddr -- this requires passing a lot of flags to get
10267 		it right.  Unlike old versions, this ONLY rewrites
10268 		recipient addresses, not sender addresses.
10269 	Fix a bug that caused core dumps in config files that cannot
10270 		resolve /file/name style addresses.  Fix from Jonathan
10271 		Kamens of OpenVision Technologies.
10272 	Fix problem with fcntl locking that can cause error returns to
10273 		be lost if the lock is lost; this required fully
10274 		queueing everything, dropping the envelope (so errors
10275 		would get returned), and then re-reading the queue from
10276 		scratch.
10277 	Fix a problem that caused aliases that redefine an otherwise
10278 		true address to still send to the original address
10279 		if and only if the alias failed in certain bizarre
10280 		ways (e.g, if they pointed at a list:; syntax address).
10281 		Problem pointed out by Jonathan Kamens.
10282 	Remove support for frozen configuration files.  They caused
10283 		more trouble than it was worth.
10284 	Fix problem that can cause error messages to get ignored when
10285 		using both -odb and -t flags.  Problem noted by Rob
10286 		McNicholas at U.C. Berkeley.
10287 	Include all "normal" variations on hostname in $=w.  For example,
10288 		if the host name is vangogh.cs.berkeley.edu, $=w will
10289 		contain vangogh, vangogh.cs, and vangogh.cs.berkeley.edu.
10290 	Add "restrictqrun" privacy flag -- without this, anyone can run
10291 		the queue.
10292 	Reset SmtpPhase global on initial connection creation so that
10293 		messages don't come out with stale information.
10294 	Pass an "ext" argument to lockfile so that error/log messages
10295 		will properly reflect the true filename being locked.
10296 	Put all [...] address forms into $=w -- this eliminates the need
10297 		for MAXIPADDR in conf.h.  Suggested by John Gardiner
10298 		Myers of CMU.
10299 	Fix a bug that can cause qf files to be left around even after
10300 		an SMTP RSET command.  Problem and fix from Michael
10301 		Corrigan.
10302 	Don't send a PostmasterCopy to errors when the Precedence: is
10303 		negative.  Error reports still go to the envelope
10304 		sender address.
10305 	Add LA_SHORT for load averages.
10306 	Lock sendmail.st file when posting statistics.
10307 	Add "SendBufSize" and "RcvBufSize" suboptions to "O" option to
10308 		set the size of the TCP send and receive buffers; if you
10309 		run over a slow slip line you may need to set these down
10310 		(although it would be better to fix the SLIP implementation
10311 		so that it's not necessary to recompile every program
10312 		that does bulk data transfer).
10313 	Allow null defaults on $( ... $) lookups.  Problem reported by
10314 		Amir Plivatsky.
10315 	Diagnose crufty S and V config lines.  This resulted from an
10316 		observation that some people were using the SITE macro
10317 		without the SITECONFIG macro first, which was causing
10318 		bogus config files that were not caught.
10319 	Fix makemap -f flag to turn off case folding (it was turning it
10320 		on instead).  THIS IS A USER VISIBLE CHANGE!!!
10321 	Fix a problem that caused multiple error messages to be sent if
10322 		you used "sendmail -t -oem -odb", your system uses fcntl
10323 		locking, and one of the recipient addresses is unknown.
10324 	Reset uid earlier in include() so that recursive .forwards or
10325 		:include:s don't use the wrong uid.
10326 	If file descriptor 0, 1, or 2 was closed when sendmail was
10327 		called, the code to recover the descriptor was broken.
10328 		This sometimes (only sometimes) caused problems with the
10329 		alias file.  Fix from Motonori Nakamura.
10330 	Fix a problem that caused aliaswait to go into infinite recursion
10331 		if the @:@ metasymbol wasn't found in the alias file.
10332 	Improve error message on newaliases if database files cannot be
10333 		opened or if running with no database format defined.
10334 	Do a better estimation of the size of error messages when NoReturn
10335 		is set.  Problem noted by P{r (Pell) Emanuelsson.
10336 	Fix a problem causing the "c" option (don't connect to expensive
10337 		mailers) to be ignored in SMTP.  Problem noted and the
10338 		solution suggested by Robert Elz of The University of
10339 		Melbourne.
10340 	Improve connection caching algorithm by passing "[host]" to
10341 		hostsignature, which strips the square brackets and
10342 		returns the real name.  This allows mailertable entries
10343 		to match regular entries.
10344 	Re-enable Return-Receipt-To: -- people seem to want this stupid
10345 		feature, even if it doesn't work right.
10346 	Catch and log attempts to try the "wiz" command in server SMTP.
10347 		This also ups the log level from LOG_NOTICE to LOG_CRIT.
10348 	Be more generous at assigning $z to the home directory -- do this
10349 		for programs that are specified through a .forward file.
10350 		Fix from Andrew Chang of Sun Microsystems.
10351 	Always save a fatal error message in preference to a non-fatal
10352 		error message so that the "subject" line of return
10353 		messages is the best possible.
10354 	CONFIG: reduce the number of quotes needed to quote configuration
10355 		parameters with commas: two quotes should work now, e.g.,
10356 		define(ALIAS_FILE, ``/etc/aliases,/etc/aliases.local'').
10357 	CONFIG: class $=Z is a set of UUCP hosts that use uucp-dom
10358 		connections (domain-ized UUCP).
10359 	CONFIG: fix bug in default maps (-o must be before database file
10360 		name).  Pointed out by Christophe Wolfhugel.
10361 	CONFIG: add FEATURE(nodns) to state that we are not relying on
10362 		DNS.  This would presumably be used in UUCP islands.
10363 	CONFIG: add OSTYPE(nextstep) and OSTYPE(linux).
10364 	CONFIG: log $u in Received: line.  This is in technical violation
10365 		of the standards, since it doesn't guarantee a domain
10366 		on the address.
10367 	CONFIG: don't assume "m" in local mailer flags -- this means that
10368 		if you redefine LOCAL_MAILER_FLAGS you will have to include
10369 		the "m" flag should you want it.  Apparently some Solaris 2.2
10370 		installations can't handle multiple local recipients.
10371 		Problem noted by Josh Smith.
10372 	CONFIG: add confDOMAIN_NAME to set $j (if undefined, $j defaults).
10373 	CONFIG: change default version level from 4 to 5.
10374 	CONFIG: add FEATURE(nullclient) to create a config file that
10375 		forwards all mail to a hub without ever looking at the
10376 		addresses in any detail.
10377 	CONFIG: properly strip mailer: information off of relays when
10378 		used to change .BITNET form into %-hack form.
10379 	CONFIG: fix a problem that caused infinite loops if presented
10380 		with an address such as "!foo".
10381 	CONFIG: check for self literal (e.g., []) even if
10382 		the reverse "PTR" mapping is broken.  There's a better
10383 		way to do this, but the change is fairly major and I
10384 		want to hold it for another release.  Problem noted by
10385 		Bret Marquis.
10387 8.5/8.5		1993/07/23
10388 	Serious bug: if you used a command line recipient that was unknown
10389 		sendmail would not send a return message (it was treating
10390 		everything as though it had an SMTP-style client that
10391 		would do the return itself).  Problem noted by Josh Smith.
10392 	Change "trymx" option in getcanonname() to ignore all MX data,
10393 		even during a T_ANY query.  This actually didn't break
10394 		anything, because the only time you called getcanonname
10395 		with !trymx was if you already knew there were no MX
10396 		records, but it is somewhat cleaner.  From Motonori
10397 		Nakamura.
10398 	Don't call getcanonname from getmxrr if you already know there
10399 		are no DNS records matching the name.
10400 	Fix a problem causing error messages to always include "The
10401 		original message was received ... from localhost".
10402 		The correct original host information is now included.
10403 	Previous change to cf/sh/makeinfo.sh doesn't port to Ultrix (their
10404 		version of "test" doesn't have the -x flag).  Change it
10405 		to use -f instead.  From John Myers.
10406 	CONFIG: 8.4 mistakenly set the default SMTP-style mailer to
10407 		esmtp -- it should be smtp.
10408 	CONFIG: send all relayed mail using confRELAY_MAILER (defaults
10409 		to "relay" (a variant of "smtp") if MAILER(smtp) is used,
10410 		else "suucp" if MAILER(uucp) is used, else "unknown");
10411 		this cleans up the configs somewhat.  This fixes a serious
10412 		problem that caused route-addrs to get mistaken as relays,
10413 		pointed out by John Myers.  WARNING: this also causes
10414 		the default on SMART_HOST to change from "suucp" to
10415 		"relay" if you have MAILER(smtp) specified.
10417 8.4/8.4		1993/07/22
10418 	Add option `w'.  If you receive a message that comes to you because
10419 		you are the best (lowest preference) target of an MX, and
10420 		you haven't explicitly recognized the source MX host in
10421 		your .cf file, this option will cause you to try the target
10422 		host directly (as if there were no MX for it at all).  If
10423 		`w' is not set, this case is a configuration error.
10424 		Beware: if `w' is set, senders may get bogus errors like
10425 		"message timed out" or "host unknown" for problems that
10426 		are really configuration errors.  This option is
10427 		disrecommended, provided only for compatibility with
10428 		UIUC sendmail.
10429 	Fix a problem that caused the incoming socket to be left open
10430 		when sendmail forks after the DATA command.  This caused
10431 		calling systems to wait in FIN_WAIT_2 state until the
10432 		entire list was processed and the child closed -- a
10433 		potentially prodigious amount of time.  Problem noted
10434 		by Neil Rickert.
10435 	Fix problem (created in 6.64) that caused mail sent to multiple
10436 		addresses, one of which was a bad address, to completely
10437 		suppress the sending of the message.  This changes
10438 		handling of EF_FATALERRS somewhat, and adds an
10439 		EF_GLOBALERRS flag.  This also fixes a potential problem
10440 		with duplicate error messages if there is a syntax error
10441 		in the header of a message that isn't noticed until late
10442 		in processing.  Original problem pointed out by Josh Smith
10443 		of Harvey Mudd College.  This release includes quite a bit
10444 		of dickering with error handling (see below).
10445 	Back out SMTP transaction if MAIL gets nested 501 error.  This
10446 		will only hurt already-broken software and should help
10447 		humans.
10448 	Fix a problem that broke aliases when neither NDBM nor NEWDB were
10449 		compiled in.  It would never read the alias file.
10450 	Repair unbalanced `)' and `>' (the "open" versions are already
10451 		repaired).
10452 	Logging of "done" in dropenvelope() was incorrect: it would
10453 		log this even when the queue file still existed.  Change
10454 		this to only log "done" (at log level 11) when the
10455 		queue file is actually removed.  From John Myers.
10456 	Log "lost connection" in server SMTP at log level 20 if there
10457 		is no pending transaction.  Some senders just close the
10458 		connection rather than sending QUIT.
10459 	Fix a bug causing getmxrr to add a dot to the end of unqualified
10460 		domains that do not have MX records -- this would cause
10461 		the subsequent host name lookup to fail.  The problem
10462 		only occurred if you had FEATURE(nocanonify) set.
10463 		Problem noted by Rick McCarty of Texas Instruments.
10464 	Fix invocation of setvbuf when passed a -X flag -- I had
10465 		unwittingly used an ANSI C extension, and this caused
10466 		core dumps on some machines.
10467 	Diagnose self-destructive alias loops on RCPT as well as EXPN.
10468 		Previously it just gave an empty send queue, which
10469 		then gave either "Need RCPT (recipient)" at the DATA
10470 		(confusing, since you had given an RCPT command which
10471 		returned 250) or just dropped the email, depending on
10472 		whether you were running VERBose mode.  Now it usually
10473 		diagnoses this case as "aliasing/forwarding loop broken".
10474 		Unfortunately, it still doesn't adequately diagnose
10475 		some true error conditions.
10476 	Add internal concept of "warning messages" using 6xx codes.
10477 		These are not reported only to Postmaster.  Unbalanced
10478 		parens, brackets, and quotes are printed as 653 codes.
10479 		They are always mapped to 5xx codes before use in SMTP.
10480 	Clean up error messages to tell both the actual address that
10481 		failed and the alias they arose from.  This makes it
10482 		somewhat easier to diagnose problems.  Difficulty noted
10483 		by Motonori Nakamura.
10484 	Fix a problem that inappropriately added a ctladdr to addresses
10485 		that shouldn't have had one during a queue run.  This
10486 		caused error messages to be handled differently during
10487 		a queue run than a direct run.
10488 	Don't print the qf name and line number if you get errors during
10489 		the direct run of the queue from srvrsmtp -- this was
10490 		just extra stuff for users to crawl through.
10491 	Put command line flags on second line of pid file so you can
10492 		auto-restart the daemon with all appropriate arguments.
10493 		Use "kill `head -1 /etc/sendmail.pid`" to stop the
10494 		daemon, and "eval `tail -1 /etc/sendmail.pid`" to
10495 		restart it.
10496 	Remove the ``setuid(getuid())'' in main -- this caused the
10497 		IDENT daemon to screw up.  This required that I change
10498 		HASSETEUID to HASSETREUID and complicate the mode
10499 		changing somewhat because both Ultrix and SunOS seem
10500 		to have a bug causing seteuid() to set the saved uid
10501 		as well as the effective.  The program test/t_setreuid.c
10502 		will test to see if your implementation of setreuid(2)
10503 		is appropriately functional.
10504 	The FallBackMX (option V) handling failed to properly identify
10505 		fallback to yourself -- most of the code was there,
10506 		but it wasn't being enabled.  Problem noted by Murray
10507 		Kucherawy of the University of Waterloo.
10508 	Change :include: open timeout from ETIMEDOUT to an internal
10509 		code EOPENTIMEOUT; this avoids adding "during SmtpPhase
10510 		with CurHostName" in error messages, which can be
10511 		confusing.  Reported by Jonathan Kamens of OpenVision
10512 		Technologies.
10513 	Back out setpgrp (setpgid on POSIX systems) call to reset the
10514 		process group id.  The original fix was to get around
10515 		some problems with recalcitrant MUAs, but it breaks
10516 		any call from a shell that creates a process group id
10517 		different from the process id.  I could try to fix
10518 		this by diddling the tty owner (using tcsetpgrp or
10519 		equivalent) but this is too likely to break other
10520 		things.
10521 	Portability changes:
10522 		Support -M as equivalent to -oM on Ultrix -- apparently
10523 			DECnet calls sendmail with -MrDECnet -Ms<HOST> -bs
10524 			instead of using standard flags.  Oh joy.  This
10525 			behavior reported by Jon Giltner of University
10526 			of Colorado.
10527 		SGI IRIX  -- this includes several changes that should
10528 			help other strict ANSI compilers.
10529 		SCO Unix -- from Murray Kucherawy of HookUp Communication
10530 			Corporation.
10531 		Solaris running the Sun C compiler (which despite the
10532 			documentation apparently doesn't define
10533 			__STDC__ by default).
10534 		ConvexOS from Eric Schnoebelen of Convex.
10535 		Sony NEWS workstations and Omron LUNA workstations from
10536 			Motonori Nakamura.
10537 	CONFIG: add confTRY_NULL_MX_LIST to set option `w'.
10538 	CONFIG: delete `C' and `e' from default SMTP mailers flags;
10539 		several people have made a good argument that this
10540 		creates more problems than it solves (although this
10541 		may prove painful in the short run).
10542 	CONFIG: generalize all the relays to accept a "mailer:host"
10543 		format.
10544 	CONFIG: move local processing in ruleset 0 into a new ruleset
10545 		98 (8 on old sendmail).  Domain literal [a.b.c.d]
10546 		addresses are also passed through this ruleset.
10547 	CONFIG: if neither SMART_HOST nor MAILER(smtp) were defined,
10548 		internet-style addresses would "fall off the end" of
10549 		ruleset zero and be interpreted as local -- however,
10550 		the angle brackets confused the recursive call.
10551 		These are now diagnosed as "Unrecognized host name".
10552 	CONFIG: USENET rules weren't included in S0 because of a mistaken
10553 		ifdef(`_MAILER_USENET_') instead of
10554 		ifdef(`_MAILER_usenet_').  Problem found by Rein Tollevik
10555 		of SINTEF RUNIT, Oslo.
10556 	CONFIG: move up LOCAL_RULE_0 processing so that it happens very
10557 		early in ruleset 0; this allows .mc authors to bypass
10558 		things like the "short circuit" code for local addresses.
10559 		Prompted by a comment by Bill Wisner of The Well.
10560 	CONFIG: add confSMTP_MAILER to define the mailer used (smtp or
10561 		esmtp) to send SMTP mail.  This allows you to default
10562 		to esmtp but use a mailertable or other override to
10563 		deal with broken servers.  This logic was pointed out
10564 		to me by Bill Wisner.  Ditto for confLOCAL_MAILER.
10565 	Changes to cf/sh/makeinfo.sh to make it portable to SVR4
10566 		environments.  Ugly as sin.
10568 8.3/8.3		1993/07/13
10569 	Fix setuid problems introduced in 8.2 that caused messages
10570 		like "Cannot create qfXXXXXX: Invalid argument"
10571 		or "Cannot reopen dfXXXXXX: Permission denied".  This
10572 		involved a new compile flag "HASSETEUID" that takes
10573 		the place of the old _POSIX_SAVED_IDS -- it turns out
10574 		that the POSIX interface is broken enough to break
10575 		some systems badly.  This includes some fixes for
10576 		HP-UX.  Also fixes problems where the real uid is
10577 		not reset properly on startup (from Neil Rickert).
10578 	Fix a problem that caused timed out messages to not report the
10579 		addresses that timed out.  Error messages are also more
10580 		"user friendly".
10581 	Drop required bandwidth on connections from 64 bytes/sec to
10582 		16 bytes/sec.
10583 	Further Solaris portability changes -- doesn't require the BSD
10584 		compatibility library.  This also adds a new
10585 		"HASGETDTABLESIZE" compile flag which can be used if
10586 		you want to use getdtablesize(2) instead of sysconf(2).
10587 		These are loosely based on changes from David Meyer at
10588 		University of Oregon.  This now seems to work, at least
10589 		for quick test cases.
10590 	Fix a problem that can cause duplicate error messages to be
10591 		sent if you are in SMTP, you send to multiple addresses,
10592 		and at least one of those addresses is good and points
10593 		to an account that has a .forward file (whew!).
10594 	Fix a problem causing messages to be discarded if checkcompat()
10595 		returned EX_TEMPFAIL (because it didn't properly mark
10596 		the "to" address).  Problem noted by John Myers.
10597 	Fix dfopen to return NULL if the open failed; I was depending
10598 		on fdopen(-1) returning NULL, which isn't the case.  This
10599 		isn't serious, but does result in weird error diagnoses.
10600 		From Michael Corrigan.
10601 	CONFIG: add UUCP_MAX_SIZE M4 macro to set the maximum size of
10602 		messages sent through UUCP-family mailers.  Suggested
10603 		by Bill Wisner of The Well.
10604 	CONFIG: if both MAILER(uucp) and MAILER(smtp) are specified,
10605 		include a "uucp-dom" mailer that uses domain-style
10606 		addressing.  Suggested by Bill Wisner.
10609 		Christophe Wolfhugel.
10610 	CONFIG: Add OSTYPE(aix3).  From Christophe Wolfhugel.
10612 8.2/8.2		1993/07/11
10613 	Don't drop out on config file parse errors in -bt mode.
10614 	On older configuration files, assume option "l" (use Errors-To
10615 		header) for back compatibility.  NOTE:  this DOES NOT
10616 		imply an endorsement of the Errors-To: header in any way.
10617 	Accept -x flag on AIX-3 as well as OSF/1.  Why, why, why???
10618 	Don't log errors on EHLO -- it isn't a "real" error for an old
10619 		SMTP server to give an error on this command, and
10620 		logging it in the transcript can be confusing.  Fix
10621 		from Bill Wisner.
10622 	IRIX compatibility changes provided by Dan Rich
10623 		<drich@sandman.lerc.nasa.gov>.
10624 	Solaris 2 compatibility changes.  Provided by Bob Cunningham
10625 		<bob@kahala.soest.hawaii.edu>, John Oleynick
10626 		<juo@klinzhai.rutgers.edu>
10627 	Debugging: -d17 was overloaded (hostsignature and usersmtp.c);
10628 		move usersmtp (smtpinit and smtpmailfrom) to -d18 to
10629 		match the other flags in that file.
10630 	Flush transcript before fork in mailfile().  From Eric Wassenaar.
10631 	Save h_errno in mci struct and improve error message display.
10632 		Changes from Eric Wassenaar.
10633 	Open /dev/null for the transcript if the create of the xf file
10634 		failed; this avoids at least one possible null pointer
10635 		reference in very weird cases.  From Eric Wassenaar.
10636 	Clean up statistics gathering; it was over-reporting because of
10637 		forks.  From Eric Wassenaar.
10638 	Fix problem that causes old Return-Path: line to override new
10639 		Return-Path: line (conf.c needs H_FORCE to avoid
10640 		re-using old value).  From Motonori Nakamura.
10641 	Fix broken -m flag in K definition -- even if -m (match only)
10642 		was specified, it would still replace the key with the
10643 		value.  Noted by Rick McCarty of Texas Instruments.
10644 	If the name server timed out over several days, no "timed out"
10645 		message would ever be sent back.  The timeout code
10646 		has been moved from markfailure() to dropenvelope()
10647 		so that all such failures should be diagnosed.  Pointed
10648 		out by Christophe Wolfhugel and others.
10649 	Relax safefile() constraints: directories in an include or
10650 		forward path must be readable by self if the controlling
10651 		user owns the entry, readable by all otherwise (e.g.,
10652 		when reading your .forward file, you have to own and
10653 		have X permission in it; everyone needs X permission in
10654 		the root and directories leading up to your home);
10655 		include files must be readable by anyone, but need not
10656 		be owned by you.
10657 	If _POSIX_SAVED_IDS is defined, setuid to the owner before
10658 		reading a .forward file; this gets around some problems
10659 		on NFS mounts if root permission is not exported and
10660 		the user's home directory isn't x'able.
10661 	Additional NeXT portability enhancements from Axel Zinser.
10662 	Additional HP-UX portability enhancements from Brian Bullen.
10663 	Add a timeout around SMTP message writes; this assumes you can
10664 		get throughput of at least 64 bytes/second.  Note that
10665 		this does not impact the "datafinal" default, which
10666 		is separate; this is just intended to work around
10667 		network clogs that will occur before the final dot
10668 		is sent.  From Eric Wassenaar.
10669 	Change map code to set the "include null" flag adaptively --
10670 		it initially tries both, but if it finds anything
10671 		matching without a null it never tries again with a
10672 		null and vice versa.  If -N is specified, it never
10673 		tries without the null and creates new maps with a
10674 		null byte.  If -O is specified, it never tries with
10675 		the null (for efficiency).  If -N and -O are specified,
10676 		you get -NO (get it?) lookup at all, so this would
10677 		be a bad idea.  If you don't specify either -N or -O,
10678 		it adapts.
10679 	Fix recognition of "same from address" so that MH submissions
10680 		will insert the appropriate full name information;
10681 		this used to work and got broken somewhere along the
10682 		way.
10683 	Some changes to eliminate some unnecessary SYSERRs in the
10684 		log.  For example, if you lost a connection, don't
10685 		bother reporting that fact on the connection you lost.
10686 	Add some "extended debugging" flags to try to track down
10687 		why we get occasional problems with file descriptor
10688 		one being closed when execing a mailer; it seems to
10689 		only happen when there has been another error in the
10690 		same transaction.  This requires XDEBUG, defined
10691 		by default in conf.h.
10692 	Add "-X filename" command line flag, which logs both sides of
10693 		all SMTP transactions.  This is intended ONLY for
10694 		debugging bad implementations of other mailers; start
10695 		it up, send a message from a mailer that is failing,
10696 		and then kill it off and examine the indicated log.
10697 		This output is not intended to be particularly human
10698 		readable.  This also adds the HASSETVBUF compile
10699 		flag, defaulted on if your compiler defines __STDC__.
10700 	CONFIG: change SMART_HOST to override an SMTP mailer.  If you
10701 		have a local net that should get direct connects, you
10702 		will need to use LOCAL_NET_CONFIG to catch these hosts.
10703 		See cf/README for an example.
10704 	CONFIG: add LOCAL_MAILER_ARGS (default: `mail -d $u') to handle
10705 		sites that don't use the -d flag.
10706 	CONFIG: hide recipient addresses as well as sender addresses
10707 		behind $M if FEATURE(allmasquerade) is specified; this
10708 		has been requested by several people, but can break
10709 		local aliases.  For example, if you mail to "localalias"
10710 		this will be rewritten as "localalias@masqueradehost";
10711 		although initial delivery will work, replies will be
10712 		broken.  Use it sparingly.
10713 	CONFIG: add FEATURE(domaintable).  This maps unqualified domains
10714 		to qualified domains in headers.  I believe this is
10715 		largely equivalent to the IDA feature of the same name.
10716 	CONFIG: use $U as UUCP name instead of $k.  This permits you