ajacoutot 480e2acd60 Enable queuing by default (up to 10 msgs).
Rework and document the way mimedefang+spamassassin work wrt bayes.
Add a note on using mfs(8) for the spool directory.
Take maintainer.

ok okan@ (former maintainer)
2013-03-28 14:27:19 +00:00
..

$OpenBSD: README,v 1.6 2013/03/28 14:27:19 ajacoutot Exp $

+-----------------------------------------------------------------------
| Running ${FULLPKGNAME} on OpenBSD
+-----------------------------------------------------------------------

Post-installation steps
=======================
Register the mimedefang milter with sendmail(8) by adding the following
to your .mc file:

    INPUT_MAIL_FILTER(`mimedefang', \
        `S=local:/var/spool/MIMEDefang/mimedefang.sock, \
        F=T, T=C:15m;S:4m;R:4m;E:10m')dnl

Then re-generate your .cf file.

When using administrator notifications, it is advised to add the
"_mdefang" user to the list of users that are allowed to set their
envelope "from" address to a different user. This is done in:
    /etc/mail/trusted-user

Improving performance
---------------------
On a busy mail server, it is advised to have the spool directory in
virtual memory (i.e. ramdisk). This can be achieve by adding the
following line to fstab(5):
swap /var/spool/MIMEDefang mfs rw,nodev,nosuid,noatime,-s=512000 0 0

This will create a 256M mfs(8) filesystem under /var/spool/MIMEDefang.

SpamAssassin
------------
SpamAssassin can be used my mimedefang(8) in which case some maintenance
tasks are required and cron(8) jobs must be setup in root's crontab(5):

- Automating SpamAssassin rule updates:
0	0	*	*	*	PATH=${PATH}:${LOCALBASE}/bin; ${LOCALBASE}/bin/sa-update && ${RCDIR}/mimedefang_multiplexor reload >/dev/null

- Synchronizing the journal data into the Bayes databases:
30	0	*	*	*	PATH=${PATH}:${LOCALBASE}/bin; su -s /bin/sh _mdefang -c "${LOCALBASE}/bin/sa-learn --force-expire >/dev/null"

IP validation header
====================
To retain relay's IP address information between Mail eXchangers, an
identical ${SYSCONFDIR}/mail/mimedefang-ip-key must be installed on all
relays. The content of this file is generated using:
    # ${PREFIX}/share/examples/gen-ip-validator.pl

Start-up order
==============
Be sure to start mimedefang_multiplexor before mimedefang in rc.local(8).