| 1 |
.TH MIX 1 "Mixmaster Version 3.0 beta" |
.TH MIXMASTER 1 "Mixmaster Version 3.0 beta" |
| 2 |
.\" $Id: mix.1,v 1.2 2001/12/12 18:50:59 rabbi Exp $ |
.\" $Id$ |
| 3 |
.SH NAME |
.SH NAME |
| 4 |
mix \- anonymous remailer software |
mixmaster \- anonymous remailer software |
| 5 |
.SH SYNOPSIS |
.SH SYNOPSIS |
| 6 |
.B mix |
.B mixmaster |
| 7 |
[\fB\-hpmdSvT\fR] |
[\fB\-hpmdSvT\fR] |
| 8 |
[\fB\-t \fIuser@host\fR] |
[\fB\-t \fIuser@host\fR] |
| 9 |
[\fB\-g \fInewsgroup\fR] |
[\fB\-g \fInewsgroup\fR] |
| 10 |
[\fB\-s \fIsubject\fR] |
[\fB\-s \fIsubject\fR] |
| 11 |
[\fB\-a \fIfilename\fR] |
[\fB\-a \fIfilename\fR] |
|
[\fB\-n \fInym\fR] |
|
| 12 |
[\fB\-l \fImix1,mix2,mix3,...\fR] |
[\fB\-l \fImix1,mix2,mix3,...\fR] |
| 13 |
[\fB\-c \fInum\fR] |
[\fB\-c \fInum\fR] |
| 14 |
[\fIuser@host\fR] |
[\fIuser@host\fR] |
| 15 |
[\fIfilename\fR] |
[\fIfilename\fR] |
| 16 |
.PP |
.PP |
| 17 |
.B mix |
.B mixmaster |
| 18 |
[\fB\-f\fR[\fBrfg\fR] \fIfilename\fR] |
[\fB\-f\fR[\fBrfg\fR] \fIfilename\fR] |
| 19 |
.PP |
.PP |
| 20 |
.B mix \-\-nym\-config=\fIyournym \fR[\fBname=\fIPseudonym\fR] |
.B mixmaster \fR[\fB\-RGKSP\fR] |
|
[\fBopt=\fInymserver options\fR] [\fB\-\-latency=\fIhours\fR] |
|
|
[\fB\-\-reply\-chain=\fIrem1,rem2,...\fR] |
|
|
.PP |
|
|
.B mix \fR[\fB\-RGKSP\fR] |
|
| 21 |
.SH DESCRIPTION |
.SH DESCRIPTION |
| 22 |
Mixmaster is an anonymous remailer. Remailers provide protection |
Mixmaster is an anonymous remailer. Remailers provide protection |
| 23 |
against traffic analysis and allow sending mail anonymously or |
against traffic analysis and allow sending mail anonymously or |
| 27 |
standard input or from a file. Destination address and input file can |
standard input or from a file. Destination address and input file can |
| 28 |
be specified in the command line. If no address is given in the |
be specified in the command line. If no address is given in the |
| 29 |
command line, the input file is expected to contain a message complete |
command line, the input file is expected to contain a message complete |
| 30 |
with mail headers. Messages to be send under a pseudonym must contain |
with mail headers. |
|
a |
|
|
.I Nym: |
|
|
header rather than |
|
|
.IR From: . |
|
| 31 |
.SH OPTIONS |
.SH OPTIONS |
| 32 |
.TP |
.TP |
| 33 |
.B "\-h, \-\-help" |
.B "\-h, \-\-help" |
| 34 |
Print a summary of command line options. |
Print a summary of command line options. |
| 35 |
.TP |
.TP |
| 36 |
|
.B "\-V, \-\-version" |
| 37 |
|
Print version information. |
| 38 |
|
.TP |
| 39 |
|
.B "\-\-about" |
| 40 |
|
Print authorship and copyright information. |
| 41 |
|
.TP |
| 42 |
|
.B "\-\-config=\fIfilename" |
| 43 |
|
Read configuration from an alternate file. |
| 44 |
|
.TP |
| 45 |
.B "\-t, \-\-to=\fIuser@host" |
.B "\-t, \-\-to=\fIuser@host" |
| 46 |
Add the destination address(es) to the message header. The input file |
Add the destination address(es) to the message header. The input file |
| 47 |
contains the message body without headers. |
contains the message body without headers. |
| 71 |
.I file |
.I file |
| 72 |
to the message. |
to the message. |
| 73 |
.TP |
.TP |
|
.B "\-n, \-\-nym=\fIyournym" |
|
|
Use the given pseudonym to send the message. |
|
|
.TP |
|
| 74 |
.B \-\-encrypt |
.B \-\-encrypt |
| 75 |
Encrypt the message using the OpenPGP format. |
Encrypt the message using the OpenPGP format. |
| 76 |
.TP |
.TP |
| 104 |
Output informational messages. |
Output informational messages. |
| 105 |
.TP |
.TP |
| 106 |
.B "\-f\fR [\fIfile\fR]" |
.B "\-f\fR [\fIfile\fR]" |
| 107 |
Read a mail folder. This function requires ncurses support. |
Read a mail folder or news article. This function requires ncurses support. |
| 108 |
.TP |
.TP |
| 109 |
.B "\-fr\fR [\fIfile\fR]" |
.B "\-fr\fR [\fIfile\fR]" |
| 110 |
Reply to a message. |
Reply to a message. |
| 115 |
.B "\-fg\fR [\fIfile\fR]" |
.B "\-fg\fR [\fIfile\fR]" |
| 116 |
Send a group reply to a message. |
Send a group reply to a message. |
| 117 |
.TP |
.TP |
| 118 |
.B "\-\-nym\-config=\fInym \fR[\fBname=\fIPseudonym\fR] [\fBopt=\fInymserver options\fR]" |
.B "\-\-update-pinger-list" |
| 119 |
Generate a pseudonym. |
Download an updated all pingers list file. |
|
|
|
|
For example, to set up a pseudonym with two mail reply blocks and nym |
|
|
server acknowledgment for successfully remailed messages: |
|
|
.PP |
|
|
mix --nym-config=yournym@nym.alias.net opt=+acksend --to=user@domain |
|
|
--reply-chain=privacy,hr13,hyper --to=user@domain |
|
|
--reply-chain=replay,squirrel,mix |
|
|
|
|
|
To use a message pool: |
|
|
.PP |
|
|
mix --nym-config=yournym@nym.alias.net |
|
|
--post-to=alt.anonymous.messages |
|
|
--subject="secret message" --reply-chain=base |
|
|
.TP |
|
|
.B "\-\-latency=\fIhours" |
|
|
Reply chain latency. |
|
| 120 |
.TP |
.TP |
| 121 |
.B "\-\-reply\-chain=\fIrem1,rem2,..." |
.B "\-\-update-stats\fI[=source\fR]" |
| 122 |
Reply chain for the pseudonym. |
Download updated stats. |
| 123 |
.SS Remailer options: |
.SS Remailer options: |
| 124 |
.TP |
.TP |
| 125 |
|
.B "\-\-config=\fIfilename" |
| 126 |
|
Read configuration from an alternate file. |
| 127 |
|
.TP |
| 128 |
.B \-R, \-\-read\-mail |
.B \-R, \-\-read\-mail |
| 129 |
Read a remailer message from standard input and store it in the pool. |
Read a remailer message from standard input and store it in the pool. |
| 130 |
.TP |
.TP |
| 131 |
|
.B \-I, \-\-store\-mail |
| 132 |
|
Read a remailer message from standard input and store it in the pool |
| 133 |
|
without decrypting it immediately. It will be processed the next time |
| 134 |
|
Mixmaster processes the queue (called with \fP-M\fP or in daemon mode). |
| 135 |
|
.TP |
| 136 |
.B \-P, \-\-pop-mail |
.B \-P, \-\-pop-mail |
| 137 |
Read mail from the POP3 servers listed in |
Read mail from the POP3 servers listed in |
| 138 |
.BR pop3.cfg . |
.BR pop3.cfg . |
| 144 |
.TP |
.TP |
| 145 |
.B \-D, \-\-daemon |
.B \-D, \-\-daemon |
| 146 |
Detach from the console and process the pool, get mail and update the |
Detach from the console and process the pool, get mail and update the |
| 147 |
internal files in regular intervals. |
internal files at regular intervals. |
| 148 |
|
.TP |
| 149 |
|
.B \-\-no-detach |
| 150 |
|
Run as daemon but do not detach from the terminal (This option is |
| 151 |
|
only useful together with \fB--daemon\fP). |
| 152 |
.TP |
.TP |
| 153 |
.B -G, \-\-generate\-key |
.B -G, \-\-generate\-key |
| 154 |
Generate a new remailer key. |
Generate a new remailer key. |
| 167 |
.TP |
.TP |
| 168 |
.B \-\-run\-svc |
.B \-\-run\-svc |
| 169 |
Run the Mixmaster Service on Win32. |
Run the Mixmaster Service on Win32. |
| 170 |
|
.TP |
| 171 |
|
.B \-\-redirect |
| 172 |
|
Read a Mixmaster packet from stdin and route it through a chain given with |
| 173 |
|
.B \-\-no\-ask\-passphrase |
| 174 |
|
Do not ask for the remailer passphrase even if we don't have it compiled in, |
| 175 |
|
don't have it in the config file, don't have it in the environment and we are |
| 176 |
|
on a tty. |
| 177 |
|
\fB\-\-chain\fP. |
| 178 |
|
Note that this may corrupt the packet if there is not enough space in the |
| 179 |
|
headers (that is, if there are more than 20 hops total). This function is |
| 180 |
|
not normaly needed but may come in handy in certain cases. |
| 181 |
.SH CONFIGURATION |
.SH CONFIGURATION |
| 182 |
Mixmaster reads its configuration from the file |
Mixmaster reads its configuration from the file |
| 183 |
.B mix.cfg |
.B mix.cfg |
| 195 |
.PP |
.PP |
| 196 |
All configuration variables can be overridden from the command line, |
All configuration variables can be overridden from the command line, |
| 197 |
e.g. |
e.g. |
| 198 |
.B mix -S --POOLSIZE=0 --RATE=100 |
.B mixmaster -S --POOLSIZE=0 --RATE=100 |
| 199 |
will send all messages currently in the message pool. |
will send all messages currently in the message pool. |
| 200 |
.SS Client configuration: |
.SS Client configuration: |
| 201 |
.TP |
.TP |
| 227 |
.B DISTANCE |
.B DISTANCE |
| 228 |
When selecting random remailers, the chain will contain |
When selecting random remailers, the chain will contain |
| 229 |
.I DISTANCE |
.I DISTANCE |
| 230 |
other remailers between two occurences of the |
other remailers between two occurrences of the |
| 231 |
same remailer in the chain. Default: |
same remailer in the chain. Default: |
| 232 |
.BR 2 . |
.BR 2 . |
| 233 |
.TP |
.TP |
| 244 |
.BR 99 . |
.BR 99 . |
| 245 |
.TP |
.TP |
| 246 |
.B MAXLAT |
.B MAXLAT |
| 247 |
Only select remailers with a latency of maximally |
Only select remailers with a latency of at most |
| 248 |
.IR MAXLAT . |
.IR MAXLAT . |
| 249 |
Default: |
Default: |
| 250 |
.BR 36h . |
.BR 36h . |
| 251 |
.TP |
.TP |
| 252 |
|
.B MINLAT |
| 253 |
|
Only select remailers with a latency of at least |
| 254 |
|
.IR MINLAT . |
| 255 |
|
Default: |
| 256 |
|
.BR 5m . |
| 257 |
|
.TP |
| 258 |
.B PGPPUBRING |
.B PGPPUBRING |
| 259 |
Path to your public PGP key ring. Default: |
Path to your public PGP key ring. Default: |
| 260 |
.BR ~/.pgp/pubring.pgp . |
.BR ~/.pgp/pubring.pkr . |
| 261 |
(Windows default: PGP registry value.) |
(Windows default: PGP registry value.) |
| 262 |
.TP |
.TP |
| 263 |
.B PGPSECRING |
.B PGPSECRING |
| 264 |
Path to your secret PGP key ring. Default: |
Path to your secret PGP key ring. Default: |
| 265 |
.BR ~/.pgp/secring.pgp . |
.BR ~/.pgp/secring.skr . |
| 266 |
(Windows default: PGP registry value.) |
(Windows default: PGP registry value.) |
| 267 |
.SS Remailer configuration: |
.TP |
| 268 |
|
.B CLIENTAUTOFLUSH |
| 269 |
|
If |
| 270 |
|
.B REMAIL |
| 271 |
|
is set to |
| 272 |
|
.BR n |
| 273 |
|
automatically flush the pool every time Mixmaster is run. Default: |
| 274 |
|
.BR n . |
| 275 |
.TP |
.TP |
| 276 |
.B SENDMAIL |
.B SENDMAIL |
| 277 |
Path to the |
Path to the |
| 292 |
.BR sendmail (1). |
.BR sendmail (1). |
| 293 |
.TP |
.TP |
| 294 |
.B HELONAME |
.B HELONAME |
| 295 |
Name used in the SMTP dialogue. |
Host name used in the SMTP dialogue. |
| 296 |
Default: The |
Default: The |
| 297 |
.I ENVFROM |
.I ENVFROM |
| 298 |
host name or the current network name associated with the socket. |
host name or the current network name associated with the socket. |
| 299 |
.TP |
.TP |
| 300 |
|
.B SMTPUSERNAME |
| 301 |
|
Some mail servers require authentication for sending mail. This is |
| 302 |
|
the authenticated SMTP user name. |
| 303 |
|
.B SMTPPASSWORD |
| 304 |
|
Password for authenticated SMTP. |
| 305 |
|
.TP |
| 306 |
.B ENVFROM |
.B ENVFROM |
| 307 |
Envelope from address used in the SMTP dialogue. (When the client is |
Envelope from address used in the SMTP dialogue. (When the client is |
| 308 |
used to send non-anonymous messages, |
used to send non-anonymous messages, |
| 311 |
Default: |
Default: |
| 312 |
.IR ANONADDR . |
.IR ANONADDR . |
| 313 |
.TP |
.TP |
| 314 |
|
.B ALLPINGERSURL |
| 315 |
|
URL from which to download the |
| 316 |
|
.IR ALLPINGERSFILE . |
| 317 |
|
Default: |
| 318 |
|
.BR http://www.noreply.org/allpingers/allpingers.txt . |
| 319 |
|
.TP |
| 320 |
|
.B WGET |
| 321 |
|
Define the http protocol download tool. Default: |
| 322 |
|
.BR wget . |
| 323 |
|
.SS Remailer configuration: |
| 324 |
|
.TP |
| 325 |
.B NEWS |
.B NEWS |
| 326 |
Path to the news posting program, or address of a |
Path to the news posting program, or address of a |
| 327 |
mail-to-news gateway. Default: no news posting. |
mail-to-news gateway. Default: no news posting. |
| 389 |
.B @ |
.B @ |
| 390 |
sign, the message is forwarded to the given address (with an |
sign, the message is forwarded to the given address (with an |
| 391 |
.B X-Loop: |
.B X-Loop: |
| 392 |
header to prevent mail loops), otherwise the message is appended |
header to prevent mail loops). If it ends with a |
| 393 |
|
.B / |
| 394 |
|
it is treated as a Maildir, otherwise the message is appended |
| 395 |
to the given file name or written to standard output if |
to the given file name or written to standard output if |
| 396 |
.B MAIL |
.B MAILBOX |
| 397 |
is |
is |
| 398 |
.BR stdout . |
.BR stdout . |
| 399 |
Default: |
Default: |
| 434 |
Mail folder for bounce messages. Default: |
Mail folder for bounce messages. Default: |
| 435 |
.IR MAILBOX . |
.IR MAILBOX . |
| 436 |
.TP |
.TP |
| 437 |
|
.B MAILIN |
| 438 |
|
If defined an additional mail folder where Mixmaster should read messages from |
| 439 |
|
when processing its pool. If it ends with a |
| 440 |
|
.B / |
| 441 |
|
it is treated as a Maildir, otherwise a standard mbox format file |
| 442 |
|
is expected. All messages are removed from the folder after reading. |
| 443 |
|
.B MAILIN |
| 444 |
|
is not set by default. |
| 445 |
|
It is an incredibly bad idea to set this the same as \fBMAILBOX\fP. |
| 446 |
|
.TP |
| 447 |
.B VERBOSE |
.B VERBOSE |
| 448 |
If |
If |
| 449 |
.B VERBOSE |
.B VERBOSE |
| 450 |
is set to |
is set to |
| 451 |
.BR 0 , |
.BR 0 , |
| 452 |
Mixmaster will log error |
Mixmaster will log error |
| 453 |
messagess only. If it is set to |
messages only. If it is set to |
| 454 |
.BR 1 , |
.BR 1 , |
| 455 |
error message and warnings are logged. If |
error messages and warnings are logged. If |
| 456 |
.B VERBOSE |
.B VERBOSE |
| 457 |
is set to |
is set to |
| 458 |
.BR 2 , |
.BR 2 , |
| 462 |
a log file entry is created whenever a message |
a log file entry is created whenever a message |
| 463 |
enters or leaves the pool. Default: |
enters or leaves the pool. Default: |
| 464 |
.BR 2 . |
.BR 2 . |
| 465 |
|
.TP |
| 466 |
|
.B PASSPHRASE |
| 467 |
|
A passphrase used to protect the remailer secret keys from |
| 468 |
|
casual attackers. This setting overrides the compile-time |
| 469 |
|
defined |
| 470 |
|
.B COMPILEDPASS |
| 471 |
|
which is now deprecated. |
| 472 |
|
This should |
| 473 |
|
.I not |
| 474 |
|
be the same as the client passphrase. |
| 475 |
|
.TP |
| 476 |
|
.B EXTFLAGS |
| 477 |
|
Additional flags you want to set in the remailer's capabilities string. |
| 478 |
|
Defaults to the empty string, which means none. Example: |
| 479 |
|
.BR testing . |
| 480 |
|
.TP |
| 481 |
|
.B PRECEDENCE |
| 482 |
|
Sets the header Precedence: to this value for all outgoing mail. |
| 483 |
|
Defaults to the empty string, which means no such header is added. |
| 484 |
|
Example: |
| 485 |
|
.BR anon . |
| 486 |
|
If you use this you might want to block user supplied precedence |
| 487 |
|
headers in your header block file. |
| 488 |
.PP |
.PP |
| 489 |
The following variables can be set to |
The following variables can be set to |
| 490 |
.B y |
.B y |
| 493 |
.TP |
.TP |
| 494 |
.B REMAIL |
.B REMAIL |
| 495 |
Enable remailer functionality. Default: |
Enable remailer functionality. Default: |
| 496 |
.BR y . |
.BR n . |
| 497 |
.TP |
.TP |
| 498 |
.B MIDDLEMAN |
.B MIDDLEMAN |
| 499 |
Act as an intermediate hop only, forward anonymized |
Act as an intermediate hop only, forward anonymized |
| 500 |
messages to an other remailer. This mode can be used |
messages to another remailer. This mode can be used |
| 501 |
where complaints about anonymous messages must be |
where complaints about anonymous messages must be |
| 502 |
avoided. (The variable |
avoided. (The variable |
| 503 |
.B FORWARDTO |
.B FORWARDTO |
| 504 |
specifies the remailer |
specifies the remailer |
| 505 |
chain to be used; default: |
chain to be used; default: |
| 506 |
.BR * .) |
.BR * .) |
| 507 |
Default: |
Default: |
| 508 |
.BR n . |
.BR n . |
| 539 |
Filter out binary attachments. Default: |
Filter out binary attachments. Default: |
| 540 |
.BR n . |
.BR n . |
| 541 |
.TP |
.TP |
| 542 |
|
.B LISTSUPPORTED |
| 543 |
|
List known remailers and their keys in remailer-conf reply. Default: |
| 544 |
|
.BR y . |
| 545 |
|
.TP |
| 546 |
.B MID |
.B MID |
| 547 |
Use a hash of the message body as Message-ID, to avoid |
Use a hash of the message body as Message-ID, to avoid |
| 548 |
Usenet spam. Default: |
Usenet spam. Default: |
| 561 |
.BR destination-block . |
.BR destination-block . |
| 562 |
Default: |
Default: |
| 563 |
.BR y . |
.BR y . |
| 564 |
|
.TP |
| 565 |
|
.B STATSDETAILS |
| 566 |
|
List statistics on intermediate vs. final delivery in remailer-stats. |
| 567 |
|
Default: |
| 568 |
|
.BR y . |
| 569 |
.PP |
.PP |
| 570 |
The following variables have numeric values: |
The following variables have numeric values: |
| 571 |
.TP |
.TP |
| 572 |
.B POOLSIZE |
.B POOLSIZE |
| 573 |
The size of the Mixmaster reordering pool. Larger sizes |
The size of the Mixmaster reordering pool. Larger sizes |
| 574 |
imply higher security and longer delays. Default: |
imply higher security and longer delays. Remailer default: |
| 575 |
|
.BR 45 . |
| 576 |
|
Client default: |
| 577 |
.BR 0 . |
.BR 0 . |
| 578 |
.TP |
.TP |
| 579 |
.B RATE |
.B RATE |
| 580 |
Percentage of messages from the pool to be sent. Default: |
Percentage of messages from the pool to be sent. Remailer default: |
| 581 |
|
.BR 65 . |
| 582 |
|
Client default: |
| 583 |
.BR 100 . |
.BR 100 . |
| 584 |
Lower values cause the pool to increase in size when |
Lower values cause the pool to increase in size when |
| 585 |
many messages are recieved at a time, reducing the effect |
many messages are received at a time, reducing the effect |
| 586 |
of flooding attacks. |
of flooding attacks. |
| 587 |
.TP |
.TP |
| 588 |
|
.B INDUMMYP |
| 589 |
|
Probability that Mixmaster will generate dummy messages upon |
| 590 |
|
receipt of incoming mail. Larger numbers mean more dummy |
| 591 |
|
messages on average. For instance, |
| 592 |
|
.B 10 |
| 593 |
|
means that on average one in nine incoming messages will trigger |
| 594 |
|
a dummy generation, and |
| 595 |
|
.B 20 |
| 596 |
|
means that one in four will. |
| 597 |
|
.B 0 |
| 598 |
|
means no dummy messages. Remailer default: |
| 599 |
|
.BR 10 . |
| 600 |
|
Client default: |
| 601 |
|
.BR 3 . |
| 602 |
|
.TP |
| 603 |
|
.B OUTDUMMYP |
| 604 |
|
Probability that Mixmaster will generate dummy messages at |
| 605 |
|
.B SENDPOOL |
| 606 |
|
time. If the pool is processed frequently, this should be a lower value |
| 607 |
|
than if there are long intervals between pool processing. Examples: |
| 608 |
|
.B 50 |
| 609 |
|
means on average, one dummy message will be generated per pool |
| 610 |
|
processing. |
| 611 |
|
.B 80 |
| 612 |
|
means four will be generated. |
| 613 |
|
.B 0 |
| 614 |
|
means no dummy messages. Remailer default: |
| 615 |
|
.BR 90 . |
| 616 |
|
Client default: |
| 617 |
|
.BR 3 . |
| 618 |
|
.TP |
| 619 |
.B SIZELIMIT |
.B SIZELIMIT |
| 620 |
Maximal size for anonymous messages in kB. |
Maximum size for anonymous messages in kB. |
| 621 |
.B 0 |
.B 0 |
| 622 |
means no limit. |
means no limit. |
| 623 |
Default: |
Default: |
| 624 |
.BR 0 . |
.BR 0 . |
| 625 |
.TP |
.TP |
| 626 |
.B POP3SIZELIMIT |
.B POP3SIZELIMIT |
| 627 |
Maximal size for incoming messages in kB when using POP3. |
Maximum size for incoming messages in kB when using POP3. |
| 628 |
.B 0 |
.B 0 |
| 629 |
means no limit. |
means no limit. |
| 630 |
Default: |
Default: |
| 636 |
and left on the server otherwise. |
and left on the server otherwise. |
| 637 |
.TP |
.TP |
| 638 |
.B INFLATEMAX |
.B INFLATEMAX |
| 639 |
Maximal size for |
Maximum size for |
| 640 |
.B Inflate: |
.B Inflate: |
| 641 |
padding in kB. |
padding in kB. |
| 642 |
.B 0 |
.B 0 |
| 646 |
.BR kB . |
.BR kB . |
| 647 |
.TP |
.TP |
| 648 |
.B MAXRANDHOPS |
.B MAXRANDHOPS |
| 649 |
Maximal chain length for message forwarding requested by |
Maximum chain length for message forwarding requested by |
| 650 |
.B Rand-Hop |
.B Rand-Hop |
| 651 |
directives. |
directives. |
| 652 |
Default: |
Default: |
| 653 |
.BR 20 . |
.BR 4 . |
| 654 |
|
.TP |
| 655 |
|
.B MAXRECIPIENTS |
| 656 |
|
limits the number of allowed recipients in outgoing mail. Anything that exceeds this |
| 657 |
|
number is dropped silently. Default: |
| 658 |
|
.BR 5 . |
| 659 |
|
.TP |
| 660 |
|
.B TEMP_FAIL |
| 661 |
|
exit with this exit code when a timeskew problem is suspected. Also see |
| 662 |
|
.BR TIMESKEW_BACK |
| 663 |
|
and |
| 664 |
|
.BR TIMESKEW_FORWARD . |
| 665 |
|
The default of |
| 666 |
|
.B 75 |
| 667 |
|
should cause your MTA to requeue the message if you are running |
| 668 |
|
mixmaster from a |
| 669 |
|
.BR .forward |
| 670 |
|
file. |
| 671 |
|
.TP |
| 672 |
|
.B STATSAUTOUPDATE |
| 673 |
|
Set non-zero to enable Daemon stats download mode. Default: |
| 674 |
|
.BR 0 . |
| 675 |
.PP |
.PP |
| 676 |
The following are time variables. They can be given as days, hours, or |
The following are time variables. They can be given as years ( |
| 677 |
minutes. |
.BR y |
| 678 |
|
), months ( |
| 679 |
|
.BR b |
| 680 |
|
), days ( |
| 681 |
|
.BR d |
| 682 |
|
), hours ( |
| 683 |
|
.BR h |
| 684 |
|
), minutes ( |
| 685 |
|
.BR m |
| 686 |
|
), or seconds ( |
| 687 |
|
.BR s |
| 688 |
|
). |
| 689 |
.TP |
.TP |
| 690 |
.B SENDPOOLTIME |
.B SENDPOOLTIME |
| 691 |
How often Mixmaster should check the pool for messages |
How often Mixmaster should check the pool for messages |
| 692 |
to be sent. Default: |
to be sent. Remailer default: |
| 693 |
.BR 1h . |
.BR 15m . |
| 694 |
|
Client default: |
| 695 |
|
.BR 0h . |
| 696 |
.TP |
.TP |
| 697 |
.B POP3TIME |
.B POP3TIME |
| 698 |
How often Mixmaster should check the POP3 accounts |
How often Mixmaster should check the POP3 accounts |
| 702 |
Default: |
Default: |
| 703 |
.BR 1h . |
.BR 1h . |
| 704 |
.TP |
.TP |
| 705 |
|
.B MAILINTIME |
| 706 |
|
How often Mixmaster should read mail from |
| 707 |
|
.BR MAILIN |
| 708 |
|
and process mails fetched via POP3. Processing here means to |
| 709 |
|
answer remailer-xxx requests and decrypt messages to the Mixmaster |
| 710 |
|
and place them in the pool. No other processing of the pool is |
| 711 |
|
done. This action is always performed sending out messages from the pool (at |
| 712 |
|
.BR SENDPOOLTIME |
| 713 |
|
intervals) or receiving mail via POP3 (at |
| 714 |
|
.BR POP3TIME |
| 715 |
|
intervals). Default: |
| 716 |
|
.BR 5m . |
| 717 |
|
.TP |
| 718 |
.B PACKETEXP |
.B PACKETEXP |
| 719 |
How long to store parts of incomplete multipart messages. |
How long to store parts of incomplete multipart messages and other |
| 720 |
|
temporary pool files. |
| 721 |
Default: |
Default: |
| 722 |
.BR 7d . |
.BR 7d . |
| 723 |
.TP |
.TP |
| 733 |
If set to |
If set to |
| 734 |
.BR 0 , |
.BR 0 , |
| 735 |
no log is kept. |
no log is kept. |
| 736 |
|
.TP |
| 737 |
|
.B KEYLIFETIME |
| 738 |
|
Mixmaster sets an expiration date on its remailer keys |
| 739 |
|
.B KEYLIFETIME |
| 740 |
|
after the key creation date. Default: |
| 741 |
|
.BR 13b . |
| 742 |
|
.TP |
| 743 |
|
.B KEYGRACEPERIOD |
| 744 |
|
Mixmaster will continue to decrypt messages encrypted to an expired key |
| 745 |
|
for |
| 746 |
|
.B KEYGRACEPERIOD |
| 747 |
|
period of time after the expiration. This is done to ensure that messages |
| 748 |
|
already injected into the network are allowed to exit. Do not change this |
| 749 |
|
value unless you know what you are doing, or you will risk partitioning |
| 750 |
|
attacks. Default: |
| 751 |
|
.BR 7d . |
| 752 |
|
.TP |
| 753 |
|
.B KEYOVERLAPPERIOD |
| 754 |
|
Mixmaster will generate and advertise a new key |
| 755 |
|
.BR KEYOVERLAPPERIOD |
| 756 |
|
period of time before the expiration of the key. Clients should always use |
| 757 |
|
the most recently created valid key. Clients that deviate from this |
| 758 |
|
recommended behavior risk partitioning attacks. Default: |
| 759 |
|
.BR 7d . |
| 760 |
|
.TP |
| 761 |
|
.B TIMESKEW_BACK |
| 762 |
|
Allow going back up to |
| 763 |
|
.BR TIMESKEW_BACK |
| 764 |
|
in time. If the time moved further back mixmaster will assume |
| 765 |
|
there is a problem with your clock and refuse to start as a remailer. |
| 766 |
|
This is done by comparing the latest timestamp in |
| 767 |
|
.BR time.log |
| 768 |
|
with the current timestamp. If set to |
| 769 |
|
.BR 0 |
| 770 |
|
then this test is skipped. If the system time is indeed correct, simply |
| 771 |
|
remove |
| 772 |
|
.BR time.log . |
| 773 |
|
Default: |
| 774 |
|
.BR 12h . |
| 775 |
|
.TP |
| 776 |
|
.B TIMESKEW_FORWARD |
| 777 |
|
Similar to |
| 778 |
|
.BR TIMESKEW_BACK |
| 779 |
|
but allow jumping this far into the future. |
| 780 |
|
Default: |
| 781 |
|
.BR 2w . |
| 782 |
|
.TP |
| 783 |
|
.B STATSINTERVAL |
| 784 |
|
Time interval between daemon downloads of stats files. Enabled by |
| 785 |
|
.BR STATSAUTOUPDATE . |
| 786 |
|
Default: |
| 787 |
|
.BR 2h . |
| 788 |
.PP |
.PP |
| 789 |
The following strings must be specified at compile-time in |
The following strings must be specified at compile-time in |
| 790 |
.BR config.h . |
.BR config.h . |
| 791 |
Usually it is not necessary to modify any of these: |
It is not usually necessary to modify any of these: |
| 792 |
.TP |
.TP |
| 793 |
.B |
.B |
| 794 |
DISCLAIMER |
DISCLAIMER |
| 811 |
.B fromdscl.txt |
.B fromdscl.txt |
| 812 |
file is available. |
file is available. |
| 813 |
.TP |
.TP |
| 814 |
|
.B MSGFOOTER |
| 815 |
|
A default string to be inserted at the bottom of the message body |
| 816 |
|
of all anonymous messages if no |
| 817 |
|
.B footer.txt |
| 818 |
|
file is available. |
| 819 |
|
.TP |
| 820 |
.B BINDISCLAIMER |
.B BINDISCLAIMER |
| 821 |
A string to replace the body of a binary attachment when |
A string to replace the body of a binary attachment when |
| 822 |
the remailer is configured to filter out binaries. |
the remailer is configured to filter out binaries. |
| 825 |
The character set used for MIME-encoded header lines. |
The character set used for MIME-encoded header lines. |
| 826 |
.TP |
.TP |
| 827 |
.B DESTBLOCK |
.B DESTBLOCK |
| 828 |
A quoted list of files that contain blocked addresses. |
A quoted list of files that contain blocked addresses. |
| 829 |
Files must be separated by one space. Mixmaster will choose |
Files must be separated by one space. Mixmaster will choose |
| 830 |
the first file for writing |
the first file for writing if |
| 831 |
.B AUTOBLOCK |
.B AUTOBLOCK |
| 832 |
is enabled. |
is enabled. |
| 833 |
.PP |
.PP |
| 836 |
or in |
or in |
| 837 |
.BR config.h : |
.BR config.h : |
| 838 |
.TP |
.TP |
| 839 |
.B PASSPHRASE |
.B COMPILEDPASS |
| 840 |
A passphrase used to protect the remailer secret keys from |
A passphrase used to protect the remailer secret keys from |
| 841 |
casual attackers. You can use |
casual attackers. You can use |
| 842 |
.B `make PASS="\fIyour passphrase\fB"' |
.B `make PASS="\fIyour passphrase\fB"' |
| 843 |
to set a passphrase. This should |
to set a passphrase. This should |
| 844 |
.I not |
.I not |
| 845 |
be the same as the client passphrase. |
be the same as the client passphrase. This option is now deprecated in |
| 846 |
|
favor of the configuration file option |
| 847 |
|
.BR PASSPHRASE . |
| 848 |
.TP |
.TP |
| 849 |
.B SPOOL |
.B SPOOL |
| 850 |
Set |
Set |
| 898 |
.BR getdomainname (2) |
.BR getdomainname (2) |
| 899 |
function is available. |
function is available. |
| 900 |
.SH FILES |
.SH FILES |
| 901 |
|
These filenames can be overridden by setting the corresponding configuration |
| 902 |
|
option (given in parentheses). |
| 903 |
.TP |
.TP |
| 904 |
.B mix.cfg |
.B mix.cfg |
| 905 |
Mixmaster configuration file. |
Mixmaster configuration file. |
| 906 |
.TP |
.TP |
| 907 |
.B pubring.asc |
.B pubring.asc |
| 908 |
Type 1 remailer keys. |
Type 1 remailer keys (\fBPGPREMPUBASC\fP). |
| 909 |
.TP |
.TP |
| 910 |
.B pubring.mix |
.B pubring.mix |
| 911 |
Type 2 remailer keys. |
Type 2 remailer keys (\fBPUBRING\fP). |
| 912 |
.TP |
.TP |
| 913 |
.B rlist.txt |
.B rlist.txt |
| 914 |
List of reliable type 1 remailers. |
List of reliable type 1 remailers (\fBTYPE1LIST\fP). |
| 915 |
.TP |
.TP |
| 916 |
.B mlist.txt |
.B mlist.txt |
| 917 |
List of reliable type 2 remailers. |
List of reliable type 2 remailers (\fBTYPE2REL\fP). |
| 918 |
.TP |
.TP |
| 919 |
.B type2.list |
.B type2.list |
| 920 |
List of known type 2 remailers (optional). |
List of known type 2 remailers (optional) (\fBTYPE2LIST\fP). |
| 921 |
|
.TP |
| 922 |
|
.B starex.txt |
| 923 |
|
List of remailers which should not be used in randomly generated |
| 924 |
|
remailer chains (\fBSTAREX\fP). |
| 925 |
.SS Remailer files: |
.SS Remailer files: |
| 926 |
.TP |
.TP |
| 927 |
.B disclaim.txt |
.B disclaim.txt |
| 928 |
A string to be inserted in the header of all anonymous |
A string to be inserted in the header of all anonymous |
| 929 |
messages. |
messages (\fBDISCLAIMFILE\fP). |
| 930 |
.TP |
.TP |
| 931 |
.B fromdscl.txt |
.B fromdscl.txt |
| 932 |
A string to be inserted at the top of the message body |
A string to be inserted at the top of the message body |
| 933 |
if an anonymous message contains a user-supplied |
if an anonymous message contains a user-supplied |
| 934 |
.B From: |
.B From: |
| 935 |
line. |
line (\fBFROMDSCLFILE\fP). |
| 936 |
|
.TP |
| 937 |
|
.TP |
| 938 |
|
.B footer.txt |
| 939 |
|
A string to be inserted at the bottom of the message body |
| 940 |
|
of all anonymous messages (\fBMSGFOOTERFILE\fP). |
| 941 |
.TP |
.TP |
| 942 |
.B help.txt |
.B help.txt |
| 943 |
Help file sent in response to |
Help file sent in response to |
| 944 |
.B remailer-help |
.B remailer-help |
| 945 |
requests. |
requests (\fBHELPFILE\fP). |
| 946 |
.TP |
.TP |
| 947 |
.B adminkey.txt |
.B adminkey.txt |
| 948 |
The PGP key of the remailer operator sent in response to |
The PGP key of the remailer operator sent in response to |
| 949 |
.B remailer-adminkey |
.B remailer-adminkey |
| 950 |
requests. |
requests (\fBADMKEYFILE\fP). |
| 951 |
.TP |
.TP |
| 952 |
.B abuse.txt |
.B abuse.txt |
| 953 |
File sent in response to mail to the |
File sent in response to mail to the |
| 954 |
.I COMPLAINTS |
.I COMPLAINTS |
| 955 |
address if |
address if |
| 956 |
.B AUTOREPLY |
.B AUTOREPLY |
| 957 |
is set. |
is set (\fBABUSEFILE\fP). |
| 958 |
.TP |
.TP |
| 959 |
.B reply.txt |
.B reply.txt |
| 960 |
Help file sent in response to replies to anonymous messages if |
Help file sent in response to replies to anonymous messages if |
| 961 |
.B AUTOREPLY |
.B AUTOREPLY |
| 962 |
is set. |
is set (\fBREPLYFILE\fP). |
| 963 |
.TP |
.TP |
| 964 |
.B usage.txt |
.B usage.txt |
| 965 |
Help file sent in response to non-remailer message sent to |
Help file sent in response to non-remailer message sent to |
| 969 |
is set. If |
is set. If |
| 970 |
.B usage.log |
.B usage.log |
| 971 |
exists, recipients are logged and a reply is sent only once to avoid |
exists, recipients are logged and a reply is sent only once to avoid |
| 972 |
mail loops. |
mail loops (\fBUSAGEFILE\fP). |
| 973 |
.TP |
.TP |
| 974 |
.B blocked.txt |
.B blocked.txt |
| 975 |
Information sent in response to automatically processed blocking requests if |
Information sent in response to automatically processed blocking requests if |
| 976 |
.B AUTOREPLY |
.B AUTOREPLY |
| 977 |
is set. |
is set (\fBBLOCKFILE\fP). |
| 978 |
.TP |
.TP |
| 979 |
.B pop3.cfg |
.B pop3.cfg |
| 980 |
List of POP3 accounts with lines of the form |
List of POP3 accounts with lines of the form |
| 981 |
.I account@host.domain password |
.I account@host.domain password |
| 982 |
to get remailer messages from. The lines may optionally contain the |
to get remailer messages from. The lines may optionally contain the |
| 983 |
keyword "apop" or "pass" to select an authentication method. |
keyword "apop" or "pass" to select an authentication method (\fBPOP3CONF\fP). |
| 984 |
.TP |
.TP |
| 985 |
.B dest.alw |
.B dest.alw |
| 986 |
List of addresses to which Mixmaster will deliver, even in middleman mode. |
List of addresses to which Mixmaster will deliver, even in middleman mode (\fBDESTALLOW\fP). |
| 987 |
|
.TP |
| 988 |
|
.B dest.alw.nonpublished |
| 989 |
|
Similar to |
| 990 |
|
.BR dest.alw , |
| 991 |
|
with the only difference that this list is not published in remailer-conf replies (\fBDESTALLOW2\fP). |
| 992 |
.TP |
.TP |
| 993 |
.B dest.blk |
.B dest.blk |
| 994 |
List of blocked destination addresses. |
List of blocked destination addresses. |
| 995 |
Mixmaster does not send mail to the blocked addresses listed in this file. |
Mixmaster does not send mail to the blocked addresses listed in this file (\fBDESTBLOCK\fP). |
| 996 |
.TP |
.TP |
| 997 |
.B rab.blk |
.B rab.blk |
| 998 |
Identical to |
Identical to |
| 999 |
.BR dest.blk , |
.BR dest.blk , |
| 1000 |
except that Mixmaster will not write to this file. |
except Mixmaster will not write to this file. |
| 1001 |
For use with external remailer abuse blocklists. |
For use with external remailer abuse blocklists. |
| 1002 |
.TP |
.TP |
| 1003 |
.B source.blk |
.B source.blk |
| 1004 |
List of blocked source addresses. If an incoming message originates |
List of blocked source addresses. If an incoming message originates |
| 1005 |
from an address or IP in this in this list, it will be ignored. This |
from an address or IP in this list, it will be ignored. This |
| 1006 |
feature can be used to avoid spam and other abusive mail. |
feature can be used to avoid spam and other abusive mail (\fBSOURCEBLOCK\fP). |
| 1007 |
.TP |
.TP |
| 1008 |
.B header.blk |
.B header.blk |
| 1009 |
List of unwanted header fields. The file is used to delete unwanted |
List of unwanted header fields. The file is used to delete unwanted |
| 1010 |
header lines (e.g. lines that indicate a false identity, or Usenet |
header lines (e.g. lines that indicate a false identity, or Usenet |
| 1011 |
control messages), and do other header filtering. |
control messages), and do other header filtering (\fBHDRFILTER\fP). |
| 1012 |
.PP |
|
| 1013 |
A destination address or header line is left out if it contains a |
A destination address or header line is left out if it contains a |
| 1014 |
search string or matches a regular expression specified in the block |
search string or matches a regular expression specified in the block |
| 1015 |
file. Lines in the block file that begin and end with a slash |
file. Lines in the block file that begin and end with a slash |
| 1023 |
.BR header.blk , |
.BR header.blk , |
| 1024 |
the entire message is deleted. |
the entire message is deleted. |
| 1025 |
|
|
| 1026 |
In addition, regular expressions can be substituted. Backreferences |
In addition, regular expressions can be substituted. Back-references |
| 1027 |
are supported. For example |
are supported. For example |
| 1028 |
|
|
| 1029 |
/^From: *([^@]*) <.*>/From: $1/ |
/^From: *([^@]*) <.*>/From: $1/ |
| 1033 |
would allow user-defined names in the |
would allow user-defined names in the |
| 1034 |
.B From: |
.B From: |
| 1035 |
line, while replacing any given address with the remailer address. |
line, while replacing any given address with the remailer address. |
| 1036 |
|
.TP |
| 1037 |
|
.B allpingers.txt |
| 1038 |
|
Information on all known pingers (\fBALLPINGERSFILE\fP). |
| 1039 |
.SS |
.SS |
| 1040 |
Mixmaster uses the following files internally: |
Mixmaster uses the following files internally: |
| 1041 |
.TP |
.TP |
| 1042 |
.B mixrand.bin |
.B mixrand.bin |
| 1043 |
Random seed file. |
Random seed file (\fBMIXRAND\fP). |
|
.TP |
|
|
.B secrets.mix |
|
|
List of your nyms with configuration data (encrypted). |
|
|
.TP |
|
|
.B nymsec.pgp |
|
|
Your nyms' secret PGP keys (encrypted). |
|
| 1044 |
.TP |
.TP |
| 1045 |
.B secring.pgp |
.B secring.pgp |
| 1046 |
Remailer type 1 secret keys. |
Remailer type 1 secret keys (\fBPGPREMSECRING\fP). |
| 1047 |
.TP |
.TP |
| 1048 |
.B secring.mix |
.B secring.mix |
| 1049 |
Remailer type 2 secret keys. |
Remailer type 2 secret keys (\fBSECRING\fP). |
| 1050 |
.TP |
.TP |
| 1051 |
.B pgpkey.txt |
.B pgpkey.txt |
| 1052 |
The public type 1 remailer key. |
The public type 1 remailer key (\fBPGPKEY\fP). |
| 1053 |
.TP |
.TP |
| 1054 |
.B key.txt |
.B key.txt |
| 1055 |
The public type 2 remailer key. |
The public type 2 remailer key (\fBKEYFILE\fP). |
| 1056 |
.TP |
.TP |
| 1057 |
.B id.log |
.B id.log |
| 1058 |
Log file of messages already processed. |
Log file of messages already processed (\fBIDLOG\fP). |
| 1059 |
.TP |
.TP |
| 1060 |
.B stats.log |
.B stats.log |
| 1061 |
Log file for remailer statistics. |
Log file for remailer statistics (\fBSTATS\fP). |
| 1062 |
|
.TP |
| 1063 |
|
.B stats-src.txt |
| 1064 |
|
File for name of most recent statistics source (\fBSTATSSRC\fP). |
| 1065 |
|
.TP |
| 1066 |
|
.B pgpmaxcount.log |
| 1067 |
|
Log file for PGP Max-Count statistics (\fBPGPMAXCOUNT\fP). |
| 1068 |
.TP |
.TP |
| 1069 |
.B time.log |
.B time.log |
| 1070 |
Time for periodic remailer actions. |
Time for periodic remailer actions (\fBREGULAR\fP). |
| 1071 |
.TP |
.TP |
| 1072 |
.B dhparam.mix |
.B dhparam.mix |
| 1073 |
Public Diffie-Hellman parameters used for El-Gamal key generation. |
Public Diffie-Hellman parameters used for El-Gamal key generation (\fBDHPARAMS\fP). |
| 1074 |
.TP |
.TP |
| 1075 |
.B dsaparam.mix |
.B dsaparam.mix |
| 1076 |
Public DSA parameters used for DSA key generation. |
Public DSA parameters used for DSA key generation (\fBDSAPARAMS\fP). |
| 1077 |
|
.TP |
| 1078 |
|
.B mixmaster.pid |
| 1079 |
|
Pid file in daemon mode (\fBPIDFILE\fP). |
| 1080 |
|
.TP |
| 1081 |
|
.BI pool/ |
| 1082 |
|
Message pool directory (\fBPOOL\fP). |
| 1083 |
.TP |
.TP |
| 1084 |
.BI pool/m * |
.BI pool/m * |
| 1085 |
Message pool. |
Message pool files. |
| 1086 |
.TP |
.TP |
| 1087 |
.BI pool/p * |
.BI pool/p * |
| 1088 |
Partial messages. |
Partial messages. |
| 1107 |
.I MIXPASS |
.I MIXPASS |
| 1108 |
is not set, the client will ask for a passphrase. |
is not set, the client will ask for a passphrase. |
| 1109 |
.SH SEE ALSO |
.SH SEE ALSO |
| 1110 |
|
.BR mpgp (1), |
| 1111 |
.BR pgp (1), |
.BR pgp (1), |
| 1112 |
.BR procmail (1), |
.BR procmail (1), |
| 1113 |
.BR sendmail (8). |
.BR sendmail (8). |
| 1114 |
|
.SH HISTORY |
| 1115 |
|
Mixmaster is an implementation of a Chaumian mix-net system. |
| 1116 |
|
Versions 1.0 through 2.0.3 of the |
| 1117 |
|
.BR mixmaster |
| 1118 |
|
remailer were originally written by Lance Cottrell. Mixmaster was first |
| 1119 |
|
released in 1995. Ulf Moeller collaborated on version 2.0.4, and began an |
| 1120 |
|
entire rewrite of |
| 1121 |
|
.BR mixmaster |
| 1122 |
|
in 1999. This rewrite was released in 2002 as version 2.9.0, with major |
| 1123 |
|
contributions from Janis Jagars, Peter Palfrader, and Len Sassaman. |
| 1124 |
|
Mixmaster 3.0 is based on the 2.9 codebase. Peter Palfrader and Len |
| 1125 |
|
Sassaman are the principal maintainers. For more information on |
| 1126 |
|
contributing authors, please see the file THANKS for details. |
| 1127 |
.SH COPYRIGHT |
.SH COPYRIGHT |
| 1128 |
(C) 1999 Anonymizer Inc. |
(C) 1999 - 2004 Anonymizer Inc. and others. |
| 1129 |
Mixmaster may be redistributed and modified under certain conditions. |
Mixmaster may be redistributed and modified under certain conditions. |
| 1130 |
This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF |
This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF |
| 1131 |
ANY KIND, either express or implied. See the file COPYRIGHT for |
ANY KIND, either express or implied. See the file COPYRIGHT for |