Mailman - The GNU Mailing List Management System
Copyright (C) 1998-2004 by the Free Software Foundation, Inc.
59 Temple Place - Suite 330, Boston, MA 02111-1307, USA

SECURITY NOTE

    You may be tempted to set the DELIVERY_MODULE configuration
    variable in mm_cfg.py to `Sendmail' when using the Sendmail MTA.
    Don't.  The Sendmail.py module is misnamed -- it's really a
    command line based message handoff scheme as opposed to the SMTP
    scheme used in SMTPDirect (the default).  Sendmail.py has known
    security holes and is provided as a proof-of-concept only.  If you
    are having problems using SMTPDirect.py please fix those instead
    of using Sendmail.py, or you may open your system up to security
    exploits.


SENDMAIL `smrsh' COMPATIBILITY

    Many newer versions of Sendmail come with a restricted execution
    utility called "smrsh", which limits the executables that Sendmail
    will allow to be used as mail filter programs.  You need to
    explicitly allow Mailman's wrapper program to be used with smrsh
    or Mailman will not work.  If mail is not getting delivered to
    Mailman's wrapper program and you're getting an "operating system
    error" in your mail syslog, this could be your problem.

    One good way of doing this is to:

        - Find out where your Sendmail executes its smrsh wrapper

           % grep smrsh /etc/mail/sendmail.cf

        - Figure out where smrsh expects symlinks for allowable filter
          programs.  At the very beginning of the following output you will
          see a full path to some directory, e.g. /var/adm/sm.bin or similar:

          % strings $path_to_smrsh | less

        - cd into /var/adm/sm.bin, or where ever it happens to reside on your
          system, such as /etc/smrsh, /var/smrsh or /usr/local/smrsh.

          % cd /var/adm/sm.bin

        - create a symbolic link to Mailman's wrapper program

          % ln -s /usr/local/mailman/mail/mailman mailman


INTEGRATING SENDMAIL AND MAILMAN

    David Champion has contributed a recipe for more closely
    integrating Sendmail and Mailman, such that Sendmail will
    automatically recognize and deliver to new mailing lists as they
    are created, without having to manually edit alias tables.

    In the contrib directory, you will find four files

    mm-handler.readme - an explanation of how to set everything up
    mm-handler        - the mail delivery agent (MDA)
    mailman.mc        - a toy configuration file sample
    virtusertable     - a sample for RFC 2142 address exceptions


PERFORMANCE NOTES

    One of the surest performance killers for Sendmail users is when
    Sendmail is configured to synchronously verify the recipient's
    host via DNS.  If it does this for messages posted to it from
    Mailman, you will get horrible performance.  Since Mailman usually
    connects via localhost (i.e. 127.0.0.1) to the SMTP port of
    Sendmail, you should be sure to configure Sendmail /not/ to do DNS
    verification synchronously for localhost connections.



Local Variables:
mode: text
indent-tabs-mode: nil
End: