Re: Last Call: draft-klensin-rfc2821bis

Keith Moore <moore@network-heretics.com> Wed, 26 March 2008 20:58 UTC

Return-Path: <ietf-bounces@ietf.org>
X-Original-To: ietfarch-ietf-archive@core3.amsl.com
Delivered-To: ietfarch-ietf-archive@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 75AEE28C7B0; Wed, 26 Mar 2008 13:58:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -100.574
X-Spam-Level:
X-Spam-Status: No, score=-100.574 tagged_above=-999 required=5 tests=[AWL=-0.137, BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_ORG=0.611, RDNS_NONE=0.1, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XR+Br-Ah3rzG; Wed, 26 Mar 2008 13:58:22 -0700 (PDT)
Received: from core3.amsl.com (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C80EA28C3B2; Wed, 26 Mar 2008 13:58:22 -0700 (PDT)
X-Original-To: ietf@core3.amsl.com
Delivered-To: ietf@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 635D928C3B2 for <ietf@core3.amsl.com>; Wed, 26 Mar 2008 13:58:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wZYKArn5Gn0d for <ietf@core3.amsl.com>; Wed, 26 Mar 2008 13:58:20 -0700 (PDT)
Received: from m1.imap-partners.net (m1.imap-partners.net [64.13.152.131]) by core3.amsl.com (Postfix) with ESMTP id 2E6EA28C37B for <ietf@ietf.org>; Wed, 26 Mar 2008 13:58:20 -0700 (PDT)
Received: from lust.indecency.org (user-119b1dm.biz.mindspring.com [66.149.133.182]) by m1.imap-partners.net (MOS 3.8.4-GA) with ESMTP id APD38768 (AUTH admin@network-heretics.com) for ietf@ietf.org; Wed, 26 Mar 2008 13:56:00 -0700 (PDT)
Message-ID: <47EAB859.1000105@network-heretics.com>
Date: Wed, 26 Mar 2008 16:55:53 -0400
From: Keith Moore <moore@network-heretics.com>
User-Agent: Thunderbird 2.0.0.12 (Macintosh/20080213)
MIME-Version: 1.0
To: Frank Ellermann <hmdmhdfmhdjmzdtjmzdtzktdkztdjz@gmail.com>
Subject: Re: Last Call: draft-klensin-rfc2821bis
References: <01MSSXWZKKZ800007A@mauve.mrochek.com> <fs9blg$9in$1@ger.gmane.org><20080325133807.GA12616@boreas.isi.edu><fsb3lo$gsd$1@ger.gmane.org> <20080326023117.GA26917@boreas.isi.edu><fsdek6$ep5$1@ger.gmane.org> <47EA412C.3040606@network-heretics.com><fsdk2t$4pa$1@ger.gmane.org> <47EA8BCD.8030001@network-heretics.com> <fseat6$7qh$1@ger.gmane.org>
In-Reply-To: <fseat6$7qh$1@ger.gmane.org>
Cc: ietf@ietf.org
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: IETF Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: ietf-bounces@ietf.org
Errors-To: ietf-bounces@ietf.org


Frank Ellermann wrote:
> Keith Moore wrote:
>  
>> you're assuming lots of conditions there that don't apply
>> in the general case...
> 
> The cases involving MX queries are not unusual, a good part
> of 2821bis explains how this works.  MTAs know if they are
> an inbound "border MTA" or not depending on the client.
> 
>> e.g. single-hop internal routing for inbound mail and yet
>> the MTA can't detect that the mail is nondeliverable until
>> after it has accepted it
> 
> If it has no SPF PASS or a similar indication that sending
> an NDR "to the originator of the undeliverable mail (as
> indicated by the reverse-path)" should work it is forced to
> violate a MUST in 2821 or 2821bis.  NDRs are not OPTIONAL.

nobody is expected to pay any attention to SPF as a matter of compliance 
with 2821.  SPF is pretty much a joke.

>> one way to look at it is that the border for inbound mail
>> may be different than the border for outbound mail.
> 
> Most likely it is, but the admins are supposed to know what
> their outbound MTAs can do.  If they can't send NDRs to XXX
> they better don't accept mail from XXX, otherwise they run
> into problems with the MUST.

yes, but "can't send NDRs to XXX" is not the same thing as only having 
an IPv6 path.  because any sane mail admin will know that having a way 
to deliver mail via IPv4 (and for that matter, to accept mail via IPv4) 
is a practical necessity.

>> often, the inbound MTA for a domain lacks reliable knowledge
>> of whether either the sender or recipient address is actually
>> valid.  it appears that you would have the inbound MTA drop
>> mail based on a very dubious presumption.
> 
> NAK, I think it should REJECT mail if it has no clue what to
> do with it if all else fails.  Your proposal, accept and pray,
> could result in dropped mails silently vanishing in /dev/null,
> or what is known as "misdirected bounces".

yes, it could.  but the particular case you are arguing is specious.

_______________________________________________
IETF mailing list
IETF@ietf.org
https://www.ietf.org/mailman/listinfo/ietf