The specification does NOT state that after STARTTLS the MTA must send an
SMFIC_ABORT.
It only states that when SMFIC_ABORT is sent, between emails with the same
connection, to reset everything except the connection information (since its
the same I guess?)
At least that is how I interpret it?
On Sat, 21 Oct 2023 11:03:43 -0400 (EDT) Wietse Venema via Postfix-users
<postfix-users@postfix.org> wrote:
> If the question is about missing 'CONNECT' macros after STARTTLS,
> then that is easily explained.
>
> - After the remote SMTP client connects to Postfix, The Postfix
> SMTP daemon sends 'CONNECT' macros (j, _, {daemon_name}) and
> SMFIC_CONNECT.
>
> - After the remote SMTP client sends STARTTLS, the Postfix SMTP
> daemon sends SMFIC_ABORT to reset Milter state to the state before
> HELO/EHLO.
>
> Quote from milter-protol.txt:
>
> 'A' SMFIC_ABORT Abort current filter checks
> Expected response: NONE
>
> (Resets internal state of milter program to before SMFIC_HELO,
> but keeps the connection open.)
>
> - Most notably, the Postfix SMTP daemon will NOT send SMFIC_CONNECT,
> and will not send the associated 'CONNECT' macros.
>
> So the question becomes:
>
> - Should Postfix send SMFIC_CONNECT (and 'CONNECT' macros) after
> the server sends SMFIC_ABORT? That seems inconsistent with
> milter-protol.txt, which says that SMFIC_ABORT resets the milter
> state to before HELO, not before CONNECT.
>
> - Should the Milter after SMFIC_ABORT remember the info that it
> received with SMFIC_CONNECT? That would be consistent with
> milter-protol.txt.
>
> Now, milter-protol.txt was written after-the-fact, by looking at
> the Sendmail implementation. It was not the authoritative spec from
> which Sendmail was implemented.
>
> Wietse
> _______________________________________________
> Postfix-users mailing list -- postfix-users@postfix.org
> To unsubscribe send an email to postfix-users-le...@postfix.org
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org
