[BlueOnyx:24018] Re: 5210R wrong envelope-from address in outgoing mails via postfix

[Michael Stauber]

Hi Dirk,

> a customer on a 5210R server has switched to postfix and has now
> determined that NDR mails come back to the wrong address, not to the
> e-mail address specified as "From" address in his mail program, but to
> the address entered in the virtusertable, i.e. accountname at host.domain
> 
> I am concerned that this could cause problems with the delivery of NDR news.

I had tested this before release and I just tested it again.

Let me give an exact example:

Vsite www.kinofreak.com, user "kino". Email to nonexisting account on
another server (asdf at solarspeed.net) results in the following complete
NDR message - here shown with all headers:

----------------------------------------------------------------
Return-Path: <>
X-Original-To: kino at www.kinofreak.com
Delivered-To: kino at jarvis.smd.net
Received: by jarvis.smd.net (Postfix)
	id 0F8FC8380B; Thu, 18 Jun 2020 07:42:10 -0500 (-05)
Date: Thu, 18 Jun 2020 07:42:10 -0500 (-05)
From: MAILER-DAEMON at jarvis.smd.net (Mail Delivery System)
Subject: Undelivered Mail Returned to Sender
To: kino at www.kinofreak.com
Auto-Submitted: auto-replied
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
	boundary="1847783583.1592484130/jarvis.smd.net"
Content-Transfer-Encoding: 8bit
Message-Id: <20200618124210.0F8FC8380B at jarvis.smd.net>

This is a MIME-encapsulated message.

--1847783583.1592484130/jarvis.smd.net
Content-Description: Notification
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit

This is the mail system at host jarvis.smd.net.

I'm sorry to have to inform you that your message could not
be delivered to one or more recipients. It's attached below.

For further assistance, please send mail to postmaster.

If you do so, please include this problem report. You can
delete your own text from the attached returned message.

                   The mail system

<asdf at solarspeed.net>: host mail.solarspeed.net[208.77.221.199] said:
553 5.3.0
    <asdf at solarspeed.net>... No such user here (in reply to RCPT TO command)

--1847783583.1592484130/jarvis.smd.net
Content-Description: Delivery report
Content-Type: message/delivery-status

Reporting-MTA: dns; jarvis.smd.net
X-Postfix-Queue-ID: 1847783583
X-Postfix-Sender: rfc822; kino at www.kinofreak.com
Arrival-Date: Thu, 18 Jun 2020 07:41:54 -0500 (-05)

Final-Recipient: rfc822; asdf at solarspeed.net
Original-Recipient: rfc822;asdf at solarspeed.net
Action: failed
Status: 5.3.0
Remote-MTA: dns; mail.solarspeed.net
Diagnostic-Code: smtp; 553 5.3.0 <asdf at solarspeed.net>... No such user here

--1847783583.1592484130/jarvis.smd.net
Content-Description: Undelivered Message
Content-Type: message/rfc822
Content-Transfer-Encoding: 8bit

Return-Path: <kino at www.kinofreak.com>
Received: from www.kinofreak.com (localhost [IPv6:::1])
	(Authenticated sender: kino)
	by jarvis.smd.net (Postfix) with ESMTPA id 1847783583
	for <asdf at solarspeed.net>; Thu, 18 Jun 2020 07:41:54 -0500 (-05)
MIME-Version: 1.0
Date: Thu, 18 Jun 2020 07:41:54 -0500
From: kino <kino at www.kinofreak.com>
To: asdf at solarspeed.net
Subject: Test NDL
User-Agent: Roundcube Webmail/1.4.4
Message-ID: <fb6cb02f46a361d54cf319a675de9515 at kinofreak.com>
X-Sender: kino at kinofreak.com
Content-Type: text/plain; charset=US-ASCII;
 format=flowed
Content-Transfer-Encoding: 7bit
X-Greylist: Sender succeeded SMTP AUTH, not delayed by
milter-greylist-4.6.2 (jarvis.smd.net [IPv6:::1]); Thu, 18 Jun 2020
07:42:00 -0500 (-05)
X-Spam-Status: No, score=-0.5 required=5.0 tests=ALL_TRUSTED,TXREP
	autolearn=ham autolearn_force=no version=3.4.2
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on jarvis.smd.net

Test NDL

--1847783583.1592484130/jarvis.smd.net--
----------------------------------------------------------------

The Vsite's full name is after all www.kinofreak.com and the *full*
internal email address of the sender therefore is
kino at www.kinofreak.com. So as far as the RFC's go this is perfect.

But yeah, I see that it ain't pretty and we might want to use
sender_canonical maps to rewrite the sender.

I'll look into it right away.

-- 
With best regards

Michael Stauber