Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Feature] support TLS via IDNA2008 aware mail servers #4919

Open
Nuadh opened this issue Apr 10, 2024 · 0 comments
Open

[Feature] support TLS via IDNA2008 aware mail servers #4919

Nuadh opened this issue Apr 10, 2024 · 0 comments

Comments

@Nuadh
Copy link

Nuadh commented Apr 10, 2024

Summary

Mails having utf8(e|)smtps received headers are marked with symbol RCVD_NO_TLS_LAST, or lacking RCVD_TLS_ALL, as rspamd does not seem to understand what protocol this is. Exim compiled with SUPPORT_I18N and libidn2, and gmail (at least) adds the string utf8 (lower or upper case) before the protocol in the received headers if client uses SMTPUTF8.

Motivation

Clearly labeling emails received with TLS as such, even when it's made with SMTPUTF8, would be nice for correctly rating email.

Describe alternatives you've considered

A custom protocol checker could probably do away with the issue, but as this feels like something more of a core feature (correctly categorizing the protocol), I feel it's better to fix this in the "correct" end.

manual page for exim and their handling of this case: https://www.exim.org/exim-html-current/doc/html/spec_html/ch-internationalisation.html

A couple of examples of such received headers, as a result of using the go-smtp library to send a mail:

Received: from smtp-out.smokepit.net (smtp-out.smokepit.net. [18.200.56.156])
        by mx.google.com with UTF8SMTPS id o15-20020a5d47cf000000b0033ce06c303esi7826704wrc.186.2024.04.10.12.14.51
        for <[email protected]>
        (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
        Wed, 10 Apr 2024 12:14:51 -0700 (PDT)
Received: from ti0005a400-2645.bb.online.no ([80.212.255.98] helo=smokepit.net) by smtp-out.smokepit.net with utf8esmtpsa
  (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.93) (envelope-from <[email protected]>) id 1rudPG-000gZ6-MY for [email protected]; Wed, 10 Apr 2024 19:14:50 +0000
Received: from gitea.lan.smokepit.net ([10.0.3.115]) by smokepit.net with utf8esmtpsa
  (TLS1.3) tls TLS_AES_128_GCM_SHA256 (Exim 4.97.1 (FreeBSD)) (envelope-from <[email protected]>) id 1rudPF-000000004j8-3T9A for [email protected]; Wed, 10 Apr 2024 21:14:50 +0200

This mail was marked with RCVD_NO_TLS_LAST after first step "with utf8esmtpsa (TLS1.3)"

vstakhov added a commit that referenced this issue Apr 19, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant