TLS Required: How to bounce immediately on TLS error

cryptochrome · ‎02-03-2020

Hi,

we have some destinations in the destination controls that are set to "TLS required". Is there any way we can immediately bounce mails if TLS for these destinations is unavailable?

We tried using a custom bounce profile for that, but that bounce profile does act on other error conditions with the destinations as well (e.g. they are greylisting us, host is down, etc.). So that's not an option.

Any recommendations?

Thanks!

marc.luescherFRE · ‎02-03-2020

I dont think there are other options available to achieve this beside the bounce profile, but will reach out to my "gang" top find out.

cryptochrome · ‎02-03-2020

Thanks. I would really appreciate it.

ppreenja · ‎02-10-2020

Hello ,

Below similar enhancement is in place:

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvj87101

Please add yourself to the notification so that you get an update as soon as some fix is in place.

Cheers,
Pratham

cryptochrome · ‎02-10-2020

Hi,

thanks @ppreenja - While this would be a welcome addition, it's not quite what I was looking for. Let me re-iterate:

Domain abc.local is on TLS Required list. If email delivery to abc.local fails for any other reason than TLS issue (for example, host is down), keep trying. If mail delivery fails because of TLS issue, immediately bounce.

Unfortunately, bounce profiles don't allow to make decisions based on error condition. There should be a way to have different bounce and queue/retry bahavior based on error condition.

Thanks

Sascha

ppreenja · ‎02-11-2020

Hi Sascha,

I believe that below enhancement request is the one closest to your requirement to immediately alert without any delay as per bounce profile configuration:

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvp12215

You can add yourself to the notifications for this enhancement request.

Cheers,

Pratham

cryptochrome · ‎02-11-2020

It would be close, but still not really what we require. We don't want any delay at all when TLS issues occur. TLS issues (and only TLS issues) should bounce immediately, everything else should be delayed.