Re: [Emailcore] Ticket #5: G.5. Remove or deprecate the work-around from code 552 to 452?

Todd Herr <todd.herr@valimail.com> Thu, 11 March 2021 16:52 UTC

Return-Path: <todd.herr@valimail.com>
X-Original-To: emailcore@ietfa.amsl.com
Delivered-To: emailcore@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3B3F13A1394 for <emailcore@ietfa.amsl.com>; Thu, 11 Mar 2021 08:52:20 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.097
X-Spam-Level:
X-Spam-Status: No, score=-2.097 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=valimail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mePFWM_up8kb for <emailcore@ietfa.amsl.com>; Thu, 11 Mar 2021 08:52:18 -0800 (PST)
Received: from mail-qk1-x72b.google.com (mail-qk1-x72b.google.com [IPv6:2607:f8b0:4864:20::72b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2C38B3A132E for <emailcore@ietf.org>; Thu, 11 Mar 2021 08:52:18 -0800 (PST)
Received: by mail-qk1-x72b.google.com with SMTP id d20so21313136qkc.2 for <emailcore@ietf.org>; Thu, 11 Mar 2021 08:52:18 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=valimail.com; s=google2048; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=FCfAK2ORujj8CnOWcUYDb7V3H2DbCdWRA/MvH/YD9ug=; b=aenonbWBekMNHzQKZxcbxlAdbSxnc6P1HGx/VhFkpOTxaROVNVdk7kp6OTdzZj4iWH m6I82jatNg9gRqqMio7qSVcoHks1/zWAESUQkreLLpMGUiBe7UczFr18f0uFWCqPL7oH UMvm2cWYYDMZFhU5UNqcv3XuMyC8PC98rJfHpImn+TfemUIFxAywAOlp2A82aMzh1bw1 7SeBwDDA4oeqOb+yXxtgkYXuH8xxC8WSlRDnzywpPzAJCXE4VU1WNTK7OhrR/hxw9gXz nIm7sEx6RWRoDC/UZCeOMxhp3j+lU1W1h7cc6ox+db+TgwrOeRsQfQiCHcx2QbTp5S0A dzUg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=FCfAK2ORujj8CnOWcUYDb7V3H2DbCdWRA/MvH/YD9ug=; b=GNgqe0RToa00twN7j/FDLSCqyOys2yJD3GCAEWJC3dhp8IT0Tn4AaXbSecveVwjEOd GsBQscVDzjJespytWON+vK+hAV+ep1Z18+SWV9WheT6nZTiqztnM4y00CLIGcyvU36rV dZb04ijEmyXdzchw1dlR2IZhQD4Y2yNIlTLPWm0M7NQNDLI7Y1Bw19HmXX+xUiqkWfz3 bGVcco9sw/nSGsEmdnZODPyv0dj6VNSzXLpkZznHDwFm1ot525Z7IVd2nJ1cad29SOai cRyp2jGGXkM94UQR5P9vTYcSLjtBoguQ2RqykQuytVchGYTMT/2x/6jGchJzG+naMtMh Vxew==
X-Gm-Message-State: AOAM531o0hn+fX6UUZTqouNF5odvM+hBMZs9u43C6Ed+0jQBOvzy+b6J p7wgW6FDuYt112HKlV3eRSNoPjMEYkYa68yC+39VnKFEz6GxsA==
X-Google-Smtp-Source: ABdhPJyNdYTM4IhqHUfmphbTFk2G2JfoLCFHDS0CHwrV3Rlz9VGa4DmVGjXhbEFWSJdAFeDeO7zNMNrOZJiIqa1H1s8=
X-Received: by 2002:a05:620a:954:: with SMTP id w20mr8512286qkw.208.1615481535855; Thu, 11 Mar 2021 08:52:15 -0800 (PST)
MIME-Version: 1.0
References: <ca851fda-63ac-8739-c3eb-bde725aa25f3@isode.com> <c188413b-9337-40d8-8062-9c0f58f6cd98@www.fastmail.com> <CAHej_8kHwEOmq5bf49=Tt6ZEVkuidMhy5s4XPu7JC+k22qraZg@mail.gmail.com> <CAHej_8ma-kDkVh3Oj11R5Fn6BbwJsWfFpx0Zqv61fPL35CJNUA@mail.gmail.com> <0F2370D0-D04C-45A1-A5A1-8FF1F174FFE5@dukhovni.org>
In-Reply-To: <0F2370D0-D04C-45A1-A5A1-8FF1F174FFE5@dukhovni.org>
From: Todd Herr <todd.herr@valimail.com>
Date: Thu, 11 Mar 2021 11:52:00 -0500
Message-ID: <CAHej_8=deJU1CW2AzDBu5ji3Uir+_zF6Gp59Z-hHRmRipz8Osw@mail.gmail.com>
To: emailcore@ietf.org
Content-Type: multipart/alternative; boundary="00000000000016105b05bd459b08"
Archived-At: <https://mailarchive.ietf.org/arch/msg/emailcore/1Bn56usKAb0Cm7wjI75n_uly2gE>
Subject: Re: [Emailcore] Ticket #5: G.5. Remove or deprecate the work-around from code 552 to 452?
X-BeenThere: emailcore@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: EMAILCORE proposed working group list <emailcore.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/emailcore>, <mailto:emailcore-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/emailcore/>
List-Post: <mailto:emailcore@ietf.org>
List-Help: <mailto:emailcore-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/emailcore>, <mailto:emailcore-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 11 Mar 2021 16:52:20 -0000

On Wed, Mar 10, 2021 at 11:22 PM Viktor Dukhovni <ietf-dane@dukhovni.org>
wrote:

> > On Mar 8, 2021, at 7:40 PM, Todd Herr <todd.herr@valimail.com> wrote:
> >
> > Google: Emits 452, treats 552 as permanent failure
> > Microsoft: Emits 550, treats 552 as permanent failure (probably)
>
> Are you sure that Microsoft emits "5XX" for the N+1st recipient
> after accepting N == max configured recipients?
>
> For what value of "N" are you observing this?  Is pipelining a
> factor and how far ahead of the server is the client willing to
> get before the 5XX responses set in?
>

I'm sure of nothing. In the context of this working group's work on this
ticket, I asked folks who work at various mailbox providers and commercial
MTA vendors the following questions:

   1. Does your MTA emit status code 552 in response to RCPT TO when there
   are too many recipients for the current message?
   2. If your MTA encounters 552 in response to issuing a RCPT TO command
   as a client, does it treat it like a 452 code (TEMPFAIL) or 552 (PERMFAIL)?

(I also made a point of recommending that they subscribe to this mailing
list and participate in the working group's activities.)

The answers I received to my questions were reported in my previous post to
this thread.


> Hard rejecting recipients when <= 100 (the smallest required rcpt
> count servers are expected to support per 5321) would be rather
> badly broken.  There's a good reason why the "too many recipients"
> code is expected to be 452, if one wants to force envelopes to be
> 99 recipients or fewer.
>
> At more than 100 recipients, it is still a good idea to reject with
> 452, but the client is on shakier ground for wanting to go there,
> it should split the envelope barring prior knowledge that the server
> is willing to accept more.
>
> > Proofpoint MTA: No default configuration for too many recipients,
> > so emits whatever admin wants; treats 552 as permanent failure.
>
> Again, 5XX before the 101st recipient just because the envelope
> has too many in one go would be wrong.  The way to encourage
> the sender to split envelopes is to reject the excess ones with
> 452.
>

I'm just the messenger...

>
> All that said, the RFC text in question is bogus, no client I
> know of honours it.
>
>
I believe that's where we landed during the discussion on Wednesday.

-- 

*Todd Herr* | Sr. Technical Program Manager
*e:* todd.herr@valimail.com
*m:* 703.220.4153

`

This email and all data transmitted with it contains confidential and/or
proprietary information intended solely for the use of individual(s)
authorized to receive it. If you are not an intended and authorized
recipient you are hereby notified of any use, disclosure, copying or
distribution of the information included in this transmission is prohibited
and may be unlawful. Please immediately notify the sender by replying to
this email and then delete it from your system.