From 88fd775ec41b65afc0ed12657d4ecb9ba80af03f Mon Sep 17 00:00:00 2001 From: Mechiel Lukkien Date: Mon, 22 May 2023 14:46:20 +0200 Subject: [PATCH] if we encounter an error fetching an mta-sts policy as part of a delivery attempt, properly continue with delivery with strict tls checking --- queue/queue.go | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/queue/queue.go b/queue/queue.go index 5dbf46c..e01be77 100644 --- a/queue/queue.go +++ b/queue/queue.go @@ -540,10 +540,9 @@ func deliver(resolver dns.Resolver, m Msg) { // No need to refuse to deliver if we have some mtasts error. qlog.Infox("mtasts failed, continuing with strict tls requirement", err, mlog.Field("domain", effectiveDomain)) tlsModeDefault = smtpclient.TLSStrict - return } // note: policy can be nil, if a domain does not implement MTA-STS or its the first - // time we fetch the policy and it we encountered an error. + // time we fetch the policy and if we encountered an error. } // We try delivery to each record until we have success or a permanent failure. So