Package: opensmtpd
Version: 7.6.0p1-1
Severity: important
Tags: ipv6 upstream

Dear Maintainer,

A typo in upstream source code (PF_INET6 expected but PF_INET written)
causes IPv6 address parsing failure in OpenSMTPD Portable 7.6.0p0.
When /etc/smtpd.conf is configured with a src table with an IPv6
address, OpenSMTPD will fail to parse that source address, generate a
TempFail saying "No valid route to destination", which causes delivery
failure to IPv6-only MX and increase latency to dual-stack MX due to
the requeuing and retries.

See https://github.com/OpenSMTPD/OpenSMTPD/pull/1275 for details.

Steps to reproduce:

1. Set up an IPv6-only MX for receiving emails.

2. Configure an OpenSMTPD relay action with a src table where an IPv6
   addressess is specified on another host, e.g.,

   table addrs { "[2001:db8::1]", "203.0.113.1" }
   action outbound relay src <addrs>

3. Send an email to the IPv6-only MX from the OpenSMTPD MTA.

4. Check OpenSMTPD's log with journalctl.  You will find some errors
   like this:

   Dec 10 09:00:00 mailer smtpd[12345]: warn: Failed to get source
   address for [relay:example.com,smtp,sourcetable=addrs]
   Dec 10 09:00:00 mailer smtpd[12345]: 0000000000000000 mta delivery
   evpid=aa12926d7ede2a40 from=<[email protected]> to=<[email protected]>
   rcpt=<-> source="-" relay="example.com" delay=0s result="TempFail"
   stat="No valid route to destination"

This bug has been fixed in upstream v7.8.0, but no minor upstream
version with the fix is released.  Thus, I suggest we backport this fix
as a Debian patch to 7.6.0 so that the current stable Debian trixie
could benefit from it.


-- System Information:
Debian Release: 13.2
 APT prefers stable-updates
 APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 6.12.57+deb13-amd64 (SMP w/1 CPU thread; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages opensmtpd depends on:
ii  adduser                3.152
ii  debconf [debconf-2.0]  1.5.91
ii  ed                     1.21.1-1
ii  init-system-helpers    1.69~deb13u1
ii  libc6                  2.41-12
ii  libcrypt1              1:4.4.38-1
ii  libdb5.3t64            5.3.28+dfsg2-9
ii  libevent-2.1-7t64      2.1.12-stable-10+b1
ii  libpam0g               1.7.0-5
ii  libssl3t64             3.5.4-1~deb13u1
ii  zlib1g                 1:1.3.dfsg+really1.3.1-1+b1

opensmtpd recommends no packages.

Versions of packages opensmtpd suggests:
ii  ca-certificates               20250419
ii  opensmtpd-filter-dkimsign     0.5-2.1
ii  opensmtpd-filter-rspamd       0.1.8-1+b10
pn  opensmtpd-filter-senderscore  <none>
pn  opensmtpd-table-ldap          <none>
pn  opensmtpd-table-mysql         <none>
pn  opensmtpd-table-passwd        <none>
pn  opensmtpd-table-postgres      <none>
pn  opensmtpd-table-redis         <none>
pn  opensmtpd-table-socketmap     <none>
pn  opensmtpd-table-sqlite        <none>

-- Configuration Files:
/etc/smtpd.conf changed [not included]

-- debconf information excluded

Reply via email to