14 "github.com/prometheus/client_golang/prometheus"
15 "github.com/prometheus/client_golang/prometheus/promauto"
17 "github.com/mjl-/bstore"
19 "github.com/mjl-/mox/dns"
20 "github.com/mjl-/mox/dsn"
21 "github.com/mjl-/mox/message"
22 "github.com/mjl-/mox/mlog"
23 "github.com/mjl-/mox/mox-"
24 "github.com/mjl-/mox/smtp"
25 "github.com/mjl-/mox/smtpclient"
26 "github.com/mjl-/mox/store"
30 metricDMARCReportFailure = promauto.NewCounter(
31 prometheus.CounterOpts{
32 Name: "mox_queue_dmarcreport_failure_total",
33 Help: "Permanent failures to deliver a DMARC report.",
38// todo: rename function, perhaps put some of the params in a delivery struct so we don't pass all the params all the time?
39func fail(ctx context.Context, qlog mlog.Log, msgs []*Msg, dialedIPs map[string][]net.IP, backoff time.Duration, remoteMTA dsn.NameIP, err error) {
40 // todo future: when we implement relaying, we should be able to send DSNs to non-local users. and possibly specify a null mailfrom.
../rfc/5321:1503
41 // todo future: when we implement relaying, and a dsn cannot be delivered, and requiretls was active, we cannot drop the message. instead deliver to local postmaster? though
../rfc/8689:383 may intend to say the dsn should be delivered without requiretls?
42 // todo future: when we implement smtp dsn extension, parameter RET=FULL must be disregarded for messages with REQUIRETLS.
../rfc/8689:379
46 var smtpLines []string
47 var cerr smtpclient.Error
49 var errmsg = err.Error()
52 if errors.As(err, &cerr) {
54 smtpLines = append([]string{cerr.Line}, cerr.MoreLines...)
56 permanent = cerr.Permanent
58 secodeOpt = cerr.Secode
61 slog.Bool("permanent", permanent),
62 slog.Int("code", code),
63 slog.String("secode", secodeOpt),
66 ids := make([]int64, len(msgs))
67 for i, m := range msgs {
71 if permanent || m0.MaxAttempts == 0 && m0.Attempts >= 8 || m0.MaxAttempts > 0 && m0.Attempts >= m0.MaxAttempts {
72 for _, m := range msgs {
73 qmlog := qlog.With(slog.Int64("msgid", m.ID), slog.Any("recipient", m.Recipient()))
74 qmlog.Errorx("permanent failure delivering from queue", err)
75 deliverDSNFailure(ctx, qmlog, *m, remoteMTA, secodeOpt, errmsg, smtpLines)
77 if err := queueDelete(context.Background(), ids...); err != nil {
78 qlog.Errorx("deleting messages from queue after permanent failure", err)
83 // All messages should have the same DialedIPs, so we can update them all at once.
84 qup := bstore.QueryDB[Msg](context.Background(), DB)
86 if _, xerr := qup.UpdateNonzero(Msg{LastError: errmsg, DialedIPs: dialedIPs}); err != nil {
87 qlog.Errorx("storing delivery error", xerr, slog.String("deliveryerror", errmsg))
91 // We've attempted deliveries at these intervals: 0, 7.5m, 15m, 30m, 1h, 2u.
92 // Let sender know delivery is delayed.
94 retryUntil := m0.LastAttempt.Add((4 + 8 + 16) * time.Hour)
95 for _, m := range msgs {
96 qmlog := qlog.With(slog.Int64("msgid", m.ID), slog.Any("recipient", m.Recipient()))
97 qmlog.Errorx("temporary failure delivering from queue, sending delayed dsn", err, slog.Duration("backoff", backoff))
98 deliverDSNDelay(ctx, qmlog, *m, remoteMTA, secodeOpt, errmsg, smtpLines, retryUntil)
101 for _, m := range msgs {
102 qlog.Errorx("temporary failure delivering from queue", err,
103 slog.Int64("msgid", m.ID),
104 slog.Any("recipient", m.Recipient()),
105 slog.Duration("backoff", backoff),
106 slog.Time("nextattempt", m0.NextAttempt))
111func deliverDSNFailure(ctx context.Context, log mlog.Log, m Msg, remoteMTA dsn.NameIP, secodeOpt, errmsg string, smtpLines []string) {
112 const subject = "mail delivery failed"
113 message := fmt.Sprintf(`
114Delivery has failed permanently for your email to:
118No further deliveries will be attempted.
120Error during the last delivery attempt:
123`, m.Recipient().XString(m.SMTPUTF8), errmsg)
124 if len(smtpLines) > 0 {
125 message += "\nFull SMTP response:\n\n\t" + strings.Join(smtpLines, "\n\t") + "\n"
128 deliverDSN(ctx, log, m, remoteMTA, secodeOpt, errmsg, smtpLines, true, nil, subject, message)
131func deliverDSNDelay(ctx context.Context, log mlog.Log, m Msg, remoteMTA dsn.NameIP, secodeOpt, errmsg string, smtpLines []string, retryUntil time.Time) {
132 // Should not happen, but doesn't hurt to prevent sending delayed delivery
133 // notifications for DMARC reports. We don't want to waste postmaster attention.
138 const subject = "mail delivery delayed"
139 message := fmt.Sprintf(`
140Delivery has been delayed of your email to:
144Next attempts to deliver: in 4 hours, 8 hours and 16 hours.
145If these attempts all fail, you will receive a notice.
147Error during the last delivery attempt:
150`, m.Recipient().XString(false), errmsg)
151 if len(smtpLines) > 0 {
152 message += "\nFull SMTP response:\n\n\t" + strings.Join(smtpLines, "\n\t") + "\n"
155 deliverDSN(ctx, log, m, remoteMTA, secodeOpt, errmsg, smtpLines, false, &retryUntil, subject, message)
158// We only queue DSNs for delivery failures for emails submitted by authenticated
162func deliverDSN(ctx context.Context, log mlog.Log, m Msg, remoteMTA dsn.NameIP, secodeOpt, errmsg string, smtpLines []string, permanent bool, retryUntil *time.Time, subject, textBody string) {
163 kind := "delayed delivery"
168 qlog := func(text string, err error) {
169 log.Errorx("queue dsn: "+text+": sender will not be informed about dsn", err, slog.String("sender", m.Sender().XString(m.SMTPUTF8)), slog.String("kind", kind))
172 msgf, err := os.Open(m.MessagePath())
174 qlog("opening queued message", err)
177 msgr := store.FileMsgReader(m.MsgPrefix, msgf)
180 log.Check(err, "closing message reader after queuing dsn")
182 headers, err := message.ReadHeaders(bufio.NewReader(msgr))
184 qlog("reading headers of queued message", err)
188 var action dsn.Action
205 if len(smtpLines) > 0 {
206 smtpDiag = "smtp; " + strings.Join(smtpLines, " ")
209 dsnMsg := &dsn.Message{
210 SMTPUTF8: m.SMTPUTF8,
211 From: smtp.Path{Localpart: "postmaster", IPDomain: dns.IPDomain{Domain: mox.Conf.Static.HostnameDomain}},
214 MessageID: mox.MessageIDGen(false),
215 References: m.MessageID,
218 ReportingMTA: mox.Conf.Static.HostnameDomain.ASCII,
219 ArrivalDate: m.Queued,
220 FutureReleaseRequest: m.FutureReleaseRequest,
222 Recipients: []dsn.Recipient{
224 FinalRecipient: m.Recipient(),
227 StatusComment: errmsg,
228 RemoteMTA: remoteMTA,
229 DiagnosticCode: smtpDiag,
230 LastAttemptDate: *m.LastAttempt,
231 WillRetryUntil: retryUntil,
237 msgData, err := dsnMsg.Compose(log, m.SMTPUTF8)
239 qlog("composing dsn", err)
243 prefix := []byte("Return-Path: <" + dsnMsg.From.XString(m.SMTPUTF8) + ">\r\n" + "Delivered-To: " + m.Sender().XString(m.SMTPUTF8) + "\r\n")
244 msgData = append(prefix, msgData...)
247 senderAccount := m.SenderAccount
249 // senderAccount should already by postmaster, but doesn't hurt to ensure it.
250 senderAccount = mox.Conf.Static.Postmaster.Account
252 acc, err := store.OpenAccount(log, senderAccount)
254 acc, err = store.OpenAccount(log, mox.Conf.Static.Postmaster.Account)
256 qlog("looking up postmaster account after sender account was not found", err)
259 mailbox = mox.Conf.Static.Postmaster.Mailbox
263 log.Check(err, "queue dsn: closing account", slog.String("sender", m.Sender().XString(m.SMTPUTF8)), slog.String("kind", kind))
266 msgFile, err := store.CreateMessageTemp(log, "queue-dsn")
268 qlog("creating temporary message file", err)
271 defer store.CloseRemoveTempFile(log, msgFile, "dsn message")
273 msgWriter := message.NewWriter(msgFile)
274 if _, err := msgWriter.Write(msgData); err != nil {
275 qlog("writing dsn message", err)
279 msg := &store.Message{
280 Received: time.Now(),
281 Size: msgWriter.Size,
286 // If this is a DMARC report, deliver it as seen message to a submailbox of the
287 // postmaster mailbox. We mark it as seen so it doesn't waste postmaster attention,
288 // but we deliver them so they can be checked in case of problems.
290 mailbox = fmt.Sprintf("%s/dmarc", mox.Conf.Static.Postmaster.Mailbox)
292 metricDMARCReportFailure.Inc()
293 log.Info("delivering dsn for failure to deliver outgoing dmarc report")
296 acc.WithWLock(func() {
297 if err := acc.DeliverMailbox(log, mailbox, msg, msgFile); err != nil {
298 qlog("delivering dsn to mailbox", err)