# pmdf configure mta
PMDF Configuration File Creation Utility, V6.8
This utility creates an initial PMDF configuration file
(/pmdf/table/pmdf.cnf), an initial PMDF aliases file
(/pmdf/table/aliases), an initial PMDF security configuration file
(/pmdf/table/security.cnf) and an initial PMDF mappings file
(/pmdf/table/mappings). Normally this is done just after
PMDF has been installed. However, it is possible to run this
procedure at any time.
For best results the various network products PMDF is going to be
attached to should be installed and operational when this procedure
is run. This is by no means required, but the defaults provided by
this procedure cannot be selected intelligently without having
various software packages available to interrogate.
Important note: No changes are made to existing PMDF configuration
information until all questions have been answered. This utility
can be aborted at any prompt by entering CTRL/C. The files
output by this utility may optionally be redirected to a different
location so they will have no impact on the existing PMDF
configuration.
You have a history file from a previous run of the configuration utility.
Do you want to use answers from the previous run as defaults [N]? [RETURN]
Do you wish to continue [Y]? [RETURN]
Do you wish to have a detailed explanation printed before each question [N]? y
Part One: TCP/IP networking.
Is your system set up to:
(1) Do host lookups with MX records (name server required)
(2) Do host lookups without MX records
MX (Mail eXchange) records are special entries in the TCP/IP
Domain Name Service database that redirect mail destined for
systems not directly attached to the TCP/IP network to an
intermediate gateway system that is directly attached.
If you are on the Internet, you should answer 1 as mandated by
RFC1123 (Internet Host Requirements). Otherwise if your site
has special requirements to ignore MX records then answer 2 if
you have a name server available. Answer 3 if no name server
is available.
Choose one of the above options [1]? [RETURN]
This system has one or more names it is known by on TCP/IP.
Enter the most 'official' of these names, preferably a
name the system is registered under in the Domain Name System.
Name of this system on TCP/IP [naples]? naples.example.com
PMDF needs to know the IP addresses for all the interfaces used
by TCP/IP on this system. These addresses are needed so that
PMDF can recognize domain literals references to this system.
Such recognition is mandated by RFC1123.
Enter each IP address separately in a.b.c.d format, pressing CR
between each one. When you've entered them all just enter a CR
by itself to end the list.
IP addresses for this system [RETURN if no more]? 192.168.1.1
IP addresses for this system [RETURN if no more]? [RETURN]
Answer YES if this system is attached to the Internet via TCP/IP.
Answer YES even if you have to go through a firewall.
Answer NO if this system is not attached to the Internet in this
way. Note that a UUCP or any other indirect connection to the
Internet is not a real connection; answer NO if this is the
only type of connection you have.
Is this system connected to the Internet via TCP/IP [Y]? [RETURN]
PMDF has the ability to automatically convert shortform names
appearing on the right hand side of the at sign in an address
into fully qualified domain names. These addresses are then
routed to TCP/IP automatically. This convenience is especially
appropriate when a system is only connected via TCP/IP and not
via other networks. For example, if you were to specify a default
domain of CLAREMONT.EDU and the address USER@SIGURD was used, where
SIGURD has no other special meaning, this address will be rewritten
as USER@SIGURD.CLAREMONT.EDU and routed via TCP/IP. Enter nothing
if you don't want to have shortform addresses handled in this way.
Default domain to attach to shortform host names [none]? example.com
Answer YES if this system is behind a firewall and needs to route
Internet mail to the firewall first. Answer NO if no such firewall
exists or if this PMDF system is acting as the firewall.
Does this system need to route mail to a firewall [N]? [RETURN]
PMDF needs to know about internal TCP/IP usage. For instance, this
information is used to segregate incoming messages from internal vs.
external sources. Your configuration file will automatically contain
the rules necessary to reach external Internet domains, so it is not
necessary to tell PMDF about external Internet systems.
If your site satisfies any of the following conditions:
(+) POP or IMAP users,
(+) other internal TCP/IP systems,
(+) connect to non-Internet TCP/IP systems,
then you will need to answer YES. If you do answer YES, you will then
be asked for the names of these systems or domains so that they can be
added to your configuration and mappings files. Answer NO if there is
no internal TCP/IP use.
Are there any internal or non-Internet systems reachable via TCP/IP [N]? y
TCP/IP networks typically provide access to one or more systems
or entire domains. This should only include systems or domains
that are accessible via TCP/IP from the PMDF-MTA machine. For example
if the PMDF-MTA machine is acting as a firewall to the Internet, the
non-Internet systems or domains need to be listed here.
Enter each system or domain specification (e.g. systems names such as
'doofus.company.com' or domains such as '.mycollege.edu') separately,
pressing CR between each one. When you've entered them all just
enter a CR by itself to end the list.
Internal system or domain reachable via TCP/IP [RETURN if no more]? example.com
Internal system or domain reachable via TCP/IP [RETURN if no more]? vaxa.otherco.com
Internal system or domain reachable via TCP/IP [RETURN if no more]? [RETURN]
PMDF needs to know the IP address of each internal system or subnet,
including those of internal POP or IMAP client systems.
For instance, this information is used to distinguish between
internal and external systems for doing SMTP relay blocking.
Enter each IP address separately in a.b.c.d, or a.b.0.0
or a.b.c.0 format, pressing CR between each one. When you've
entered them all just enter a CR by itself to end the list.
IP addresses for your internal systems or network [RETURN if no more]? 192.168.1.0
IP addresses for your internal systems or network [RETURN if no more]? [RETURN]
Part Two: Determining local host's name(s).
Enter the 'most official' name for this system. This should be
the official domain name in most cases. This is the name that
will appear in mail addresses on this system, among other things.
Official local host name [naples.example.com]? [RETURN]
Enter the domain or subdomain your systems are part of, if there
is one and it is consistent. For example, if your system's domain
name is HMCVAX.CLAREMONT.EDU, and in general all your systems are
part of the .CLAREMONT.EDU domain, enter '.CLAREMONT.EDU'. If your
system is not part of a domain or if your use of domain name is
not consistent, just press CR.
Default domain or subdomain for this system [none]? .example.com
Enter any aliases for the local host; these names are rewritten
to the official local host name with rewrite rules.
Any other aliases for the local host [RETURN if no more]? [RETURN]
Enter a valid user@host type of address for the local Postmaster.
This address will receive notifications of bounced or deferred
mail as well as various other types of status and error reports.
This address is also the one that will receive user queries about
electronic mail.
A user@host style address for the local Postmaster [root@naples.example.com]?
postmaster@naples.example.com
Part Three: Security Configuration.
Enter YES if you would like to check passwords against LDAP source
and NO if you do not.
Do you want to check passwords against LDAP [N]? [RETURN]
Enter YES if you would like to check passwords against MessageStore/
popstore user profiles, which is the fastest, and NO if you do not.
Do you want to check passwords against MessageStore/popstore user profiles [Y]? [RETURN]
Enter YES if you would like to check passwords against PMDF
password database and NO if you do not.
Do you want to check passwords against PMDF password database [Y]? [RETURN]
Enter YES if you would like to check passwords against the
operating system one (e.g. /etc/passwd), and NO if you do not.
Do you want to check passwords against operating system [Y]? [RETURN]
Enter YES if you would like to allow unprotected passwords
for internal users and NO if you do not.
Do you want to allow unprotected password for internal users [Y]? [RETURN]
Enter YES if you would like to allow unprotected passwords
for external users and NO if you do not.
Do you want to allow unprotected password for external users [N]? [RETURN]
Enter YES if you would like to allow external users to submit
mail using password and NO if you do not.
Do you want to allow external users to submit mail using password [Y]? [RETURN]
Enter YES if you would like to support for pre-standard unprotected
password submission used by Outlook Express and Netscape 4.0x and
NO if you do not.
Do you want to support pre-standard unprotected password submission used by
Outlook Express and Netscape 4.0x [N]? y
Part Four: Process and write files
Enter the name of the configuration file you wish to have
output. The default action is to produce a real configuration
file; you may wish to choose another file name if you are
not sure you have properly answered all the questions in the
preceding dialogue.
Configuration file to output [/pmdf/table/pmdf.cnf]? [RETURN]
Enter the name of the aliases file you wish to have output.
This file contains system-wide local address aliases PMDF will
recognize; special aliases are required for proper operation
of some channels. The default action is to produce a real alias
file; you may wish to choose another file name if you are
not sure you have properly answered all the questions in the
preceding dialogue, or if you wish to preserve an existing
aliases file.
Alias file to output [/pmdf/table/aliases]? [RETURN]
Enter the name of the mapping file you wish to have output.
The default action is to create a real mapping file;
you may wish to choose another file name if you are
not sure you have properly answered all the questions in the
preceding dialogue.
Mapping file to output [/pmdf/table/mappings]? [RETURN]
Enter the name of the security configuration file you wish to have
output. The default action is to create a real security.cnf file;
you may wish to choose another file name if you are
not sure you have properly answered all the questions in the
preceding dialogue.
Security configuration file to output [/pmdf/table/security.cnf]? [RETURN]
This procedure generates a checklist file that contains the list of
steps you must perform in order to complete your PMDF configuration.
This procedure does *NOT* perform these steps itself; you must do
them manually.
PMDF checklist file name [/pmdf/table/pmdf.checklist]? [RETURN]
All configuration questions have been answered.
This question gives you a last chance to change your mind
before any files are written. Answer NO if you are not sure
you want to generate the configuration you have specified. Answer
YES if you do.
Do you wish to generate the configuration files [Y]? [RETURN]
Generating the PMDF configuration file...
Generating the PMDF mapping file
Generating the PMDF aliases file...
Generating the PMDF security configuration file...
Generating the PMDF checklist...
***********************************************************************
*
* To complete your PMDF configuration, carry out the steps
* detailed in the checklist file ./pmdf.checklist.
*
***********************************************************************
Enter YES if you want to see the checklist now. You can still type
the file out later if you say NO.
Do you want to see the checklist now [Y]? [RETURN]
Checklist for completing the setup of your PMDF configuration.
Written by root, Thu Nov 17 16:02:30 EST 2011
This file was created by the PMDF configuration generator V6.8
(1) Be sure to configure the PMDF Dispatcher, using the
command:
pmdf configure dispatcher
(2) Make sure to perform the remaining post-installation
tasks as described in the PMDF Installation Guide &
Release Notes.
|