Re: [ietf-smtp] DSNs

Viktor Dukhovni <ietf-dane@dukhovni.org> Sat, 18 April 2020 19:42 UTC

Return-Path: <ietf-dane@dukhovni.org>
X-Original-To: ietf-smtp@ietfa.amsl.com
Delivered-To: ietf-smtp@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 64E363A0A9D for <ietf-smtp@ietfa.amsl.com>; Sat, 18 Apr 2020 12:42:03 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.001
X-Spam-Level:
X-Spam-Status: No, score=0.001 tagged_above=-999 required=5 tests=[SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OFjZrAzd7MHy for <ietf-smtp@ietfa.amsl.com>; Sat, 18 Apr 2020 12:42:01 -0700 (PDT)
Received: from straasha.imrryr.org (straasha.imrryr.org [100.2.39.101]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 762A43A0A9A for <ietf-smtp@ietf.org>; Sat, 18 Apr 2020 12:42:01 -0700 (PDT)
Received: from [192.168.1.161] (unknown [192.168.1.161]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by straasha.imrryr.org (Postfix) with ESMTPSA id 370881A34CE for <ietf-smtp@ietf.org>; Sat, 18 Apr 2020 15:42:00 -0400 (EDT)
Content-Type: text/plain; charset="us-ascii"
Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.80.23.2.2\))
From: Viktor Dukhovni <ietf-dane@dukhovni.org>
In-Reply-To: <20200410090430.GA75736@kiel.esmtp.org>
Date: Sat, 18 Apr 2020 15:41:59 -0400
Content-Transfer-Encoding: 7bit
Reply-To: ietf-smtp@ietf.org
Message-Id: <29104A0F-B9ED-4CD7-99B3-5A042375C68B@dukhovni.org>
References: <20200409230011.F039B17637D0@ary.qy> <693d848e-3a83-c1c8-f806-a129a0ab2713@dcrocker.net> <alpine.OSX.2.22.407.2004091945050.80689@ary.qy> <20200410090430.GA75736@kiel.esmtp.org>
To: ietf-smtp@ietf.org
X-Mailer: Apple Mail (2.3608.80.23.2.2)
Archived-At: <https://mailarchive.ietf.org/arch/msg/ietf-smtp/yJG1E5X7JMJFhJ9BbsurV-u8BRc>
Subject: Re: [ietf-smtp] DSNs
X-BeenThere: ietf-smtp@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Discussion of issues related to Simple Mail Transfer Protocol \(SMTP\) \[RFC 821, RFC 2821, RFC 5321\]" <ietf-smtp.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf-smtp>, <mailto:ietf-smtp-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf-smtp/>
List-Post: <mailto:ietf-smtp@ietf.org>
List-Help: <mailto:ietf-smtp-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf-smtp>, <mailto:ietf-smtp-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 18 Apr 2020 19:42:03 -0000

> On Apr 10, 2020, at 5:04 AM, Claus Assmann <ietf-smtp@esmtp.org> wrote:
> 
> On Thu, Apr 09, 2020, John R Levine wrote:
> 
>> Oh, RFC 3461.  Agreed, it's basically an SMTP level web bug.  Nobody
>> implements that.
> 
> sendmail implemented it too (more than 20 years ago?). I guess it
> should read "nobody enables/uses it"?

And likewise Postfix also implements RFC3461.  It is on by default.
I turn it off on inbound edge systems, and ignore remote "DSN" on
outbound edge systems.  That way, any DSNs are sent within either my
or the remote ADMD, but not across ADMD boundaries.

Bounces are of course delivered in DSN (RFC3462) form regardless of
whether the DSN ESMTP extension is enabled or disabled.  That is,
when DSN is disabled messages sensibly default to "NOTIFY=FAILURE".

A side-effect of entirely disabling DSN inbound is that NOTIFY=NEVER
is no longer honoured, even if supported earlier along the forward
path, when any message I accept from outside ultimately bounces inside
my system.  This is rare enough to not be an issue.  Arguably it should
be possible to advertise just "NOTIFY=NEVER", but there's no mechanism
for that.  Simpler to just use an empty return path.

-- 
	Viktor.