Skip to content

Commit

Permalink
more minor changes
Browse files Browse the repository at this point in the history
  • Loading branch information
juliebin committed May 8, 2024
1 parent fd65939 commit 43de084
Show file tree
Hide file tree
Showing 5 changed files with 16 additions and 18 deletions.
8 changes: 4 additions & 4 deletions content/momentum/4/config/mta-sts/enable-mta-sts.md
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@ enable_mta_sts — specify whether Momentum should apply MTA-STS policies on out

This option is only effective when [use_mta_sts](/momentum/4/config/mta-sts/use-mta-sts) is `true`
for a recipient domain.
This option specified whether Momentum should try to apply the retrieved MTA-STS policies when sending
This option specifies whether Momentum should try to apply the retrieved MTA-STS policy when sending
emails to a remote site. See [MTA-STS support in Momentum](/momentum/4/mta-sts) for more details.


Expand All @@ -27,12 +27,12 @@ When this option is `true`, the MTA-STS policy mode will be considered along wit
values for `TLS` and `TLS_Verify`, Momentum will enforce TLS (equivalent to `TLS = required`) and
will fail the delivery upon a failed certificate validation (equivalent to `TLS_Verify = host`).

When the MTA-STS policy mode is `testing`, Momentum will apply `TLS = ifavailable` (unless
When the MTA-STS policy mode is `testing`, Momentum will apply `TLS = ifavailable` (unless
`TLS = required` is specified) and `TLS_Verify = optional` (unless `TLS_Verify = host` is
specified).

When the MTA-STS policy mode is `none`, the configuration values for `TLS` and `TLS_Verify` will be
respected.
When the MTA-STS policy mode is `none`, the policy will be ignored and the configuration values for
`TLS` and `TLS_Verify` will be respected.

The default value is `true` when the domain level `use_mta_sts` is `true`.

Expand Down
6 changes: 2 additions & 4 deletions content/momentum/4/config/mta-sts/mta-sts-policy-store.md
Original file line number Diff line number Diff line change
Expand Up @@ -7,17 +7,15 @@ description: "the location to store the MTA-STS policy"
<a name="config.mta-sts-policy-store"></a>
## Name

mta_sts_policy_store — specifies how many continous cname lookups are allowed when doing DNS
lookups for MTA-STS TXT record for a domain. Exceeding the configured value will be treated as a DNS
lookup failure, which will be further treated as no MTA-STS policy available.
mta_sts_policy_store — specifies the location to keep the MTA-STS policy details for the domains.

## Synopsis

`mta_sts_policy_store = "/var/spool/ecelerity/mtasts"`

## Description

Momentum stores MTA-STS policy for a domain in file on disk, and accesses the HTTPS endpoint to refresh the
Momentum stores MTA-STS policy for a domain in a file on disk, and accesses the HTTPS endpoint to refresh the
policy once every 24 hours. This config option specifies the directory where the policies are stored
on the disk.

Expand Down
4 changes: 2 additions & 2 deletions content/momentum/4/config/mta-sts/use-mta-sts.md
Original file line number Diff line number Diff line change
Expand Up @@ -15,8 +15,8 @@ use_mta_sts — specify whether Momentum should do MTA-STS policy fetching for a

## Description

This option specified whether Momentum shall attempt to discover the recipient domain's MTA-STS
policy (via a DNS lookup to retrieve the MTA-STS policy ID and a HTTPS lookup to retrieve the
This option specifies whether Momentum shall attempt to discover the recipient domain's MTA-STS
policy (via a DNS TXT lookup to retrieve the MTA-STS policy ID and a HTTPS lookup to retrieve the
MTA-STS policy)

The default value is `false`.
Expand Down
8 changes: 4 additions & 4 deletions content/momentum/4/console-commands/mta-sts.md
Original file line number Diff line number Diff line change
Expand Up @@ -19,15 +19,15 @@ mta_sts - commands for MTA-STS related data

## Description

**mta_sts list all** list all the active domains which have MTA-STS policies
**mta_sts list all** - lists all the active domains which have MTA-STS policies

```
15:42:38 /tmp/2025> mta_sts list all
gmail.com
Total domains: 1
```

**mta-sts show domain { domain name }** show MTA-STS TXT record and policy details of a given domain.
**mta-sts show domain { domain name }** - shows MTA-STS TXT record and policy details of a given domain.
The same content will show in [domain](/momentum/4/console-commands/domain) command output also if
available.

Expand All @@ -43,8 +43,8 @@ Domain 'gmail.com' has MTA-STS TXT and a TTL of 185 seconds
gmail-smtp-in.l.google.com
```

**mta-sts refresh policy {domain name}** force to fetch MTA-STS policy from the HTTPS endpoint for a
given domain
**mta-sts refresh policy {domain name}** - forces MTA-STS policy refresh by fetching the policy
from the HTTPS endpoint for a given domain


```
Expand Down
8 changes: 4 additions & 4 deletions content/momentum/4/mta-sts.md
Original file line number Diff line number Diff line change
Expand Up @@ -18,9 +18,9 @@ domain's MX if and only if the following conditions are satisfied:
policy
- connection to remote site can be encrypted (via the use of STARTTLS)
- Momentum can authenticate both - the certificate chain presented by the server on the connection
and server name in the certificate
and the server name in the certificate

For verifying certificates, Momentum use the configured CA for outbound email defined by
For verifying certificates, Momentum uses the configured CA for outbound email defined by
[TLS_CA](/momentum/4/config/tls-ca).
Momentum does not currently check for certificate revocation via the Online Certificate Status
Protocol (RFC 6960).
Expand All @@ -31,7 +31,7 @@ refresh the cached policy once every 24 hours.
Momentum does not currently implement SMTP TLS Reporting (RFC 8460).

The examples below illustrate a few cases describing how Momentum implements MTA-STS.
For all examples the recipient domain would be domain.com.
For all examples the recipient domain would be `domain.com`.

### Example 1: Recipient domain enforces MTA-STS and MX is allowed as per the MTA-STS policy

Expand Down Expand Up @@ -96,4 +96,4 @@ MX patterns defined in the MTA-STS policy since the policy mode is not `enforce`
- MTA_STS

## ec_console commands
- [mta_sts](/momentum/4/console-commands/mta-sts
- [mta_sts](/momentum/4/console-commands/mta-sts)

0 comments on commit 43de084

Please sign in to comment.