Confgured MTA and MSA

sendmail.mc

@@ -43,5 +43,28 @@ define(`confCACERT',      `/etc/ssl/ca-bundle.pem')dnl
 define(`confSERVER_CERT', `/etc/ssl/private/server.pem')dnl
 define(`confSERVER_KEY',  `/etc/ssl/private/server.pem')dnl
 
+dnl ----------------------------------------------------------------------------
+dnl MTA and MSA.
+dnl
+dnl The MTA allows connections from everywhere for inbound mail.
+dnl
+dnl MSA only accepts authenticated connections. Finally, the SMTP over SSL
+dnl MSA (MSA-SSL) is needed, because some MUAs do not support STARTTLS.
+dnl
+dnl For reference, here are the Modifiers parameter options
+dnl   a require SMTP authentication
+dnl   b bind to interface through which mail has been received for outgoing message
+dnl   c perform hostname canonification
+dnl   f require fully qualified hostname
+dnl   h use name of interface for outgoing HELO command
+dnl   s enable SMTP over SSL
+dnl   C don't perform hostname canonification
+dnl   E disallow ETRN (see RFC 2476)
+dnl ----------------------------------------------------------------------------
+FEATURE(`no_default_msa')dnl
+DAEMON_OPTIONS(`Family=inet, Name=MTA,     Port=smtp,       Modifiers=cfE')dnl
+DAEMON_OPTIONS(`Family=inet, Name=MSA,     Port=submission, Modifiers=acfE')dnl
+DAEMON_OPTIONS(`Family=inet, Name=MSA-SSL, Port=465,        Modifiers=acsfE')dnl
+
 MAILER(local)dnl
 MAILER(smtp)dnl