8a1684d488
fix(smtp): Properly handle bounce messages ( #63 )
...
Closes #58
Signed-off-by: Jagoda Ślązak <jslazak@jslazak.com >
2026-02-23 19:45:21 +01:00
6145be4108
fix(dkim): Accept TXT records with no v= tag ( #62 )
...
Cache at most 3 TXT records instead of trying to find one that includes `DKIM`.
Closes #59
Signed-off-by: Jagoda Ślązak <jslazak@jslazak.com >
2026-02-23 19:44:30 +01:00
54982b1fdd
feat: Save rejected messages to /tmp ( #55 )
2026-02-20 15:38:46 +01:00
94f1b29917
refactor: do not copy the mail in memory for DKIM verification ( #54 )
...
`String::from_utf8_lossy` always copies the data
for the case when it needs to replace invalid UTF-8,
but we don't want invalid UTF-8 anyway as replacing
invalid UTF-8 characters will break DKIM signature.
2026-02-19 19:06:08 +01:00
7d4fac698f
fix(dkim): Make simple header canonicalization work properly ( #53 )
...
Previously header parsing caused leading whitespaces to be
trimmed in HeaderBody, which resulted in incorrect simple
header canonicalization.
Signed-off-by: Jagoda Ślązak <jslazak@jslazak.com >
2026-02-19 14:33:40 +01:00
6e2a37956c
chore(tests): Add a way to disable DKIM for tests ( #50 )
...
Signed-off-by: Jagoda Ślązak <jslazak@jslazak.com >
2026-02-17 13:00:31 +01:00
4837754245
feat: Support addresses using domain literals ( #42 )
...
If the incoming email comes from address that uses
domain literals `[<ipv4>]` or `[IPv6:<ipv6>]`,
skip DKIM verification and instead check IP
alignment with originating IP from XFORWARD
command.
Signed-off-by: Jagoda Ślązak <jslazak@jslazak.com >
2026-02-16 18:25:21 +01:00
a096d0550f
feat!: DKIM verifier ( #35 )
...
* feat!: DKIM verifier
This implements a DKIM verification as well as a strict
DKIM signature alignment check with domain in `From`
header address.
Caches the retrieved RDATA using in-memory LRU.
BREAKING CHANGE: incoming messages now require DKIM signatures
aligned to domain of the `From` header address.
Signed-off-by: Jagoda Ślązak <jslazak@jslazak.com >
* chore(license): License binaries under GPLv3
Signed-off-by: Jagoda Ślązak <jslazak@jslazak.com >
---------
Signed-off-by: Jagoda Ślązak <jslazak@jslazak.com >
2026-02-16 09:50:55 +01:00
cc1604b0b2
feat: Support legacy, pre-OpenPGP packet format ( #44 )
...
Support legacy packet format for compatibility with GnuPG.
Closes : #43
Signed-off-by: Jagoda Ślązak <jslazak@jslazak.com >
2026-02-13 12:31:39 +01:00
0ee1e9924c
refactor: Use a custom, minimal SMTP client instead of lettre ( #33 )
...
This disables the Nagle's algorithm on re-insertion.
Signed-off-by: Jagoda Ślązak <jslazak@jslazak.com >
2026-02-06 11:15:14 +01:00
8d18b73681
refactor: Remove unnecessary Arc ( #36 )
...
`Arc` around handler configs are not needed,
as they are not shared.
Signed-off-by: Jagoda Ślązak <jslazak@jslazak.com >
2026-02-05 16:42:06 +01:00
23231d462c
feat: Configurable rate limiter max burst size ( #28 )
...
Signed-off-by: Jagoda Ślązak <jslazak@jslazak.com >
2026-01-28 17:47:48 +01:00
aa5999cc25
refactor: remove Mutex around rate limiter
...
Rate limiter handles all the necessary locking internally.
2026-01-26 17:59:12 +00:00
3be4c4d5ee
perf: disable Nagle's algorithm and do own buffering on server connections
...
I don't know if Postfix as the client disables delayed ACKs,
but if delayed ACKs are enabled, Nagle's algorithm introduces unnecessary delays.
2026-01-26 14:56:36 +00:00
cab16fc8f1
fix: Make inbound/outbound log messages consistent ( #23 )
...
Signed-off-by: Jagoda Ślązak <jslazak@jslazak.com >
2026-01-22 15:14:28 +01:00
ca6ccd9acf
fix: Set logs required by grafana to INFO ( #21 )
...
Signed-off-by: Jagoda Ślązak <jslazak@jslazak.com >
2026-01-22 14:49:55 +01:00
b5a56a6a4e
perf: Use governor for rate limiting ( #20 )
...
Fixes : #19
Signed-off-by: Jagoda Ślązak <jslazak@jslazak.com >
2026-01-22 14:49:26 +01:00
9eb86b23ce
refactor: Apply more lints ( #17 )
...
Sets lint rules and applies required changes.
Fixes : #16
Signed-off-by: Jagoda Ślązak <jslazak@jslazak.com >
2026-01-21 16:28:24 +01:00
aab39be662
feat: Improve logging ( #13 )
...
Improves logs and reduces verbosity.
Fixes : #8
Signed-off-by: Jagoda Ślązak <jslazak@jslazak.com >
2026-01-21 14:35:52 +01:00
2b4205a60a
fix(config): Set default values for internal SMTP ports and max message size ( #12 )
...
Fixes : #7
Signed-off-by: Jagoda Ślązak <jslazak@jslazak.com >
2026-01-21 14:27:21 +01:00
c010d999f5
fix: Correct a typo in SMTP answer ( #11 )
...
Signed-off-by: Jagoda Ślązak <jslazak@jslazak.com >
2026-01-21 14:26:20 +01:00
f2f7767b71
refactor: get rid of indexing and slicing in check_armored_payload() ( #15 )
...
Indexing can potentially panic, without indexing
it is easier to make sure there will be no crash.
2026-01-21 14:25:40 +01:00
353f1dc77d
fix: Improve address extraction from SMTP commands ( #14 )
...
Prevents extraction failing on SRS.
Fixes : #9
Signed-off-by: Jagoda Ślązak <jslazak@jslazak.com >
2026-01-21 14:06:20 +01:00
6340f479ae
feat: Initial implementation
...
Signed-off-by: Jagoda Ślązak <jslazak@jslazak.com >
2026-01-19 16:49:50 +01:00
Jagoda Estera Ślązak
l
Jagoda Ślązak