Re: [ietf-smtp] Possible cont4ibution to moving forward with RFC5321bis SMTP

Hector Santos <hsantos@isdg.net> Thu, 02 January 2020 17:41 UTC

Return-Path: <hsantos@isdg.net>
X-Original-To: ietf-smtp@ietfa.amsl.com
Delivered-To: ietf-smtp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 230F012009C for <ietf-smtp@ietfa.amsl.com>; Thu, 2 Jan 2020 09:41:36 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.001
X-Spam-Level:
X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=isdg.net header.b=kdxHigm0; dkim=pass (1024-bit key) header.d=beta.winserver.com header.b=sSnqoeWh
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Tf7B1SCBY9dA for <ietf-smtp@ietfa.amsl.com>; Thu, 2 Jan 2020 09:41:34 -0800 (PST)
Received: from mail.winserver.com (mail.santronics.com [76.245.57.69]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 89A5B120071 for <ietf-smtp@ietf.org>; Thu, 2 Jan 2020 09:41:34 -0800 (PST)
DKIM-Signature: v=1; d=isdg.net; s=tms1; a=rsa-sha1; c=simple/relaxed; l=1142; t=1577986889; atps=ietf.org; atpsh=sha1; h=Received:Received:Received:Received:Message-ID:Date:From: Organization:To:Subject:List-ID; bh=l1z+d3aM38/1HP7tDHRru2XbFhs=; b=kdxHigm0i9Zn+s/dp0MeusZ2YU2PFKLY138ugJsxoHNsFobj+8Uwy940XYTIAn 8zlP+O/hTneU0ayxzOQzkR//jTgO3c/phMsQ6+PA10a/OMeFBCl1L14+fE/RanFP hoA1b4TEQtPp6NrhJQKZZgIzMzR8aD5uGc5eFk8jbQpIw=
Received: by winserver.com (Wildcat! SMTP Router v8.0.454.9) for ietf-smtp@ietf.org; Thu, 02 Jan 2020 12:41:29 -0500
Authentication-Results: dkim.winserver.com; dkim=pass header.d=beta.winserver.com header.s=tms1 header.i=beta.winserver.com; dmarc=pass policy=reject author.d=isdg.net signer.d=beta.winserver.com (atps signer);
Received: from beta.winserver.com ([76.245.57.74]) by winserver.com (Wildcat! SMTP v8.0.454.9) with ESMTP id 1599256815.1.8080; Thu, 02 Jan 2020 12:41:29 -0500
DKIM-Signature: v=1; d=beta.winserver.com; s=tms1; a=rsa-sha256; c=simple/relaxed; l=1142; t=1577986711; h=Received:Received: Message-ID:Date:From:Organization:To:Subject:List-ID; bh=7U41tat I2LjI/90xL7i2CtzBI7PqTUJGFVRMlKxH71Q=; b=sSnqoeWhCT1Lt7AcfyF2g9q MAsSf800/vzEWbTcKubRsgzD2mB/wlkXZG0zRuaCsgA57sen0Z4h1/V5gfU34vcG MO6oHH8TxDbCzcf73/DUrC04h5nXB++Mag49vp6VorYiwkT+EOGUUKEbp8taPYT0 NdEUV4OGEnkBPClTpX2o=
Received: by beta.winserver.com (Wildcat! SMTP Router v8.0.454.9) for ietf-smtp@ietf.org; Thu, 02 Jan 2020 12:38:31 -0500
Received: from [192.168.1.68] ([75.26.216.248]) by beta.winserver.com (Wildcat! SMTP v8.0.454.9) with ESMTP id 2161890718.1.6524; Thu, 02 Jan 2020 12:38:29 -0500
Message-ID: <5E0E2B4A.8000700@isdg.net>
Date: Thu, 02 Jan 2020 12:41:30 -0500
From: Hector Santos <hsantos@isdg.net>
Reply-To: hsantos@isdg.net
Organization: Santronics Software, Inc.
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.8.1
MIME-Version: 1.0
To: ietf-smtp@ietf.org
References: <20191230013034.2C3E111D376E@ary.qy> <f894c448-ac91-6d27-98d6-0803de4ea535@network-heretics.com> <alpine.OSX.2.21.99999.374.1912292129450.44159@ary.qy> <d3dc48b0-332b-c2fe-704a-d6dc69eb5424@network-heretics.com> <5E0B8658.2060703@isdg.net> <fc8d4d71-39a4-6ca0-608a-d2113b206c5f@network-heretics.com> <5E0E10AF.30808@isdg.net> <3a106d9d-7be9-f6d4-b6e6-0103372ae227@network-heretics.com>
In-Reply-To: <3a106d9d-7be9-f6d4-b6e6-0103372ae227@network-heretics.com>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 7bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf-smtp/N45mdZkPHXdEhd3FwNGf8CS1XbQ>
Subject: Re: [ietf-smtp] Possible cont4ibution to moving forward with RFC5321bis SMTP
X-BeenThere: ietf-smtp@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Discussion of issues related to Simple Mail Transfer Protocol \(SMTP\) \[RFC 821, RFC 2821, RFC 5321\]" <ietf-smtp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf-smtp>, <mailto:ietf-smtp-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf-smtp/>
List-Post: <mailto:ietf-smtp@ietf.org>
List-Help: <mailto:ietf-smtp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf-smtp>, <mailto:ietf-smtp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 02 Jan 2020 17:41:36 -0000

On 1/2/2020 12:18 PM, Keith Moore wrote:
> On 1/2/20 10:47 AM, Hector Santos wrote:
>
>>
>> With hosted end-users, the false positives seen with NATs has been
>> addressed with the SUBMIT protocol or some other client
>> authentication that raised the SMTP bar and allowed for receiver
>> restrictions.

> In these days of complete IPv4 address space exhaustion, it can not be
> safely assumed that there is no NAT between the MSA and the MX SMTP
> server.

Correct.

My approach is how to deal with the exceptions to a well-defined SMTP 
protocol element.   The good intention exceptions will normally 
address the issue promptly, reports are made, including server 
whitelisting, client authentication, etc. The bad intention exceptions 
don't give a hoot.

So by applying frontend SMTP compliancy-based osmosis filters first, 
you will expect to see fast detection and correction of the good 
stream, leaving behind the bad stream and less complaints.  That is 
exactly what has happen, what I have experienced, my customers have 
experienced, in the 17 years of applying these SMTP compliancy filters.

Thanks

-- 
HLS