Sendmail Installation and Operation Guide
SMM:08-73
try to drain the same queue since odds are they will be working on different parts
of the queue at the same time. Priority ordering is the default.
QueueTimeout=timeout
[T] A synonym for "Timeout.queuereturn". Use that form instead of the "Queue-
Timeout" form.
RandFile
[no short name] Name of file containing random data or the name of the UNIX
socket if EGD is used. A (required) prefix "egd:" or "file:" specifies the type.
STARTTLS requires this filename if the compile flag HASURANDOMDEV is
not set (see sendmail/README).
ResolverOptions=options
[I] Set resolver options. Values can be set using +flag and cleared using -flag; the
flags can be "debug", "aaonly", "usevc", "primary", "igntc", "recurse", "def-
names", "stayopen", "use_inet6", or "dnsrch". The string "HasWildcardMX"
(without a + or -) can be specified to turn off matching against MX records when
doing name canonifications. The string "WorkAroundBrokenAAAA" (without a
+
or -) can be specified to work around some broken nameservers which return
SERVFAIL (a temporary failure) on T_AAAA (IPv6) lookups. Notice: it might
be necessary to apply the same (or similar) options to submit.cf too.
RequiresDirfsync [no short name] This option can be used to override the compile time flag
REQUIRES_DIR_FSYNC
at runtime by setting it to
false
. If the compile time
flag is not set, the option is ignored. The flag turns on support for file systems that
require to call fsync() for a directory if the meta-data in it has been changed. This
should be turned on at least for older versions of ReiserFS; it is enabled by default
for Linux. According to some information this flag is not needed anymore for
kernel 2.4.16 and newer.
RrtImpliesDsn
[R] If this option is set, a "Return-Receipt-To:" header causes the request of a
DSN, which is sent to the envelope sender as required by RFC 1891, not to the
address given in the header.
RunAsUser=user [no short name] The user parameter may be a user name (looked up in
/etc/passwd) or a numeric user id; either form can have ":group" attached (where
group can be numeric or symbolic). If set to a non-zero (non-root) value, send-
mail will change to this user id shortly after startup
21
. This avoids a certain class
of security problems. However, this means that all ".forward" and ":include:"
files must be readable by the indicated user and all files to be written must be
writable by user Also, all file and program deliveries will be marked unsafe unless
the option DontBlameSendmail=NonRootSafeAddr is set, in which case the
delivery will be done as user. It is also incompatible with the SafeFileEnviron-
ment
option. In other words, it may not actually add much to security on an aver-
age system, and may in fact detract from security (because other file permissions
must be loosened). However, it should be useful on firewalls and other places
where users don't hav e accounts and the aliases file is well constrained.
RecipientFactor=fact
[y] The indicated factor is added to the priority (thus lowering the priority of the
job) for each recipient, i.e., this value penalizes jobs with large numbers of recipi-
ents. Defaults to 30000.
21
When running as a daemon, it changes to this user after accepting a connection but before reading any
SMTP
commands.