if we encounter an error fetching an mta-sts policy as part of a delivery attempt, properly continue with delivery with strict tls checking

This commit is contained in:
Mechiel Lukkien 2023-05-22 14:46:20 +02:00
parent e81930ba20
commit 88fd775ec4
No known key found for this signature in database

View File

@ -540,10 +540,9 @@ func deliver(resolver dns.Resolver, m Msg) {
// No need to refuse to deliver if we have some mtasts error. // No need to refuse to deliver if we have some mtasts error.
qlog.Infox("mtasts failed, continuing with strict tls requirement", err, mlog.Field("domain", effectiveDomain)) qlog.Infox("mtasts failed, continuing with strict tls requirement", err, mlog.Field("domain", effectiveDomain))
tlsModeDefault = smtpclient.TLSStrict tlsModeDefault = smtpclient.TLSStrict
return
} }
// note: policy can be nil, if a domain does not implement MTA-STS or its the first // note: policy can be nil, if a domain does not implement MTA-STS or its the first
// time we fetch the policy and it we encountered an error. // time we fetch the policy and if we encountered an error.
} }
// We try delivery to each record until we have success or a permanent failure. So // We try delivery to each record until we have success or a permanent failure. So