Re: [Emailcore] Ticket #5: G.5. Remove or deprecate the work-around from code 552 to 452?

Viktor Dukhovni <ietf-dane@dukhovni.org> Thu, 11 March 2021 04:22 UTC

Return-Path: <ietf-dane@dukhovni.org>
X-Original-To: emailcore@ietfa.amsl.com
Delivered-To: emailcore@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D50473A0DA5 for <emailcore@ietfa.amsl.com>; Wed, 10 Mar 2021 20:22:17 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HiOObyZlNuzZ for <emailcore@ietfa.amsl.com>; Wed, 10 Mar 2021 20:22:16 -0800 (PST)
Received: from straasha.imrryr.org (straasha.imrryr.org [100.2.39.101]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6133F3A0DAC for <emailcore@ietf.org>; Wed, 10 Mar 2021 20:22:16 -0800 (PST)
Received: from [192.168.1.177] (unknown [192.168.1.177]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by straasha.imrryr.org (Postfix) with ESMTPSA id 21C5FCB3E2 for <emailcore@ietf.org>; Wed, 10 Mar 2021 23:22:15 -0500 (EST)
Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Mac OS X Mail 14.0 \(3654.60.0.2.21\))
From: Viktor Dukhovni <ietf-dane@dukhovni.org>
In-Reply-To: <CAHej_8ma-kDkVh3Oj11R5Fn6BbwJsWfFpx0Zqv61fPL35CJNUA@mail.gmail.com>
Date: Thu, 11 Mar 2021 02:22:14 -0200
Content-Transfer-Encoding: 7bit
Reply-To: emailcore@ietf.org
Message-Id: <0F2370D0-D04C-45A1-A5A1-8FF1F174FFE5@dukhovni.org>
References: <ca851fda-63ac-8739-c3eb-bde725aa25f3@isode.com> <c188413b-9337-40d8-8062-9c0f58f6cd98@www.fastmail.com> <CAHej_8kHwEOmq5bf49=Tt6ZEVkuidMhy5s4XPu7JC+k22qraZg@mail.gmail.com> <CAHej_8ma-kDkVh3Oj11R5Fn6BbwJsWfFpx0Zqv61fPL35CJNUA@mail.gmail.com>
To: emailcore@ietf.org
X-Mailer: Apple Mail (2.3654.60.0.2.21)
Archived-At: <https://mailarchive.ietf.org/arch/msg/emailcore/oseQYsvppO-1xVlXjRoE7wqff4c>
Subject: Re: [Emailcore] Ticket #5: G.5. Remove or deprecate the work-around from code 552 to 452?
X-BeenThere: emailcore@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: EMAILCORE proposed working group list <emailcore.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/emailcore>, <mailto:emailcore-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/emailcore/>
List-Post: <mailto:emailcore@ietf.org>
List-Help: <mailto:emailcore-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/emailcore>, <mailto:emailcore-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 11 Mar 2021 04:22:18 -0000

> On Mar 8, 2021, at 7:40 PM, Todd Herr <todd.herr@valimail.com> wrote:
> 
> Google: Emits 452, treats 552 as permanent failure
> Microsoft: Emits 550, treats 552 as permanent failure (probably)

Are you sure that Microsoft emits "5XX" for the N+1st recipient
after accepting N == max configured recipients?

For what value of "N" are you observing this?  Is pipelining a
factor and how far ahead of the server is the client willing to
get before the 5XX responses set in?

Hard rejecting recipients when <= 100 (the smallest required rcpt
count servers are expected to support per 5321) would be rather
badly broken.  There's a good reason why the "too many recipients"
code is expected to be 452, if one wants to force envelopes to be
99 recipients or fewer.

At more than 100 recipients, it is still a good idea to reject with
452, but the client is on shakier ground for wanting to go there,
it should split the envelope barring prior knowledge that the server
is willing to accept more.

> Proofpoint MTA: No default configuration for too many recipients,
> so emits whatever admin wants; treats 552 as permanent failure.

Again, 5XX before the 101st recipient just because the envelope
has too many in one go would be wrong.  The way to encourage
the sender to split envelopes is to reject the excess ones with
452.

All that said, the RFC text in question is bogus, no client I
know of honours it.

-- 
	Viktor.