Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Gracefully handle MX records that do not resolve to an A record #117

Merged
merged 4 commits into from May 16, 2019

Conversation

jsf9k
Copy link
Member

@jsf9k jsf9k commented May 14, 2019

In some cases (epa.gov is one) a domain may have some MX records that do not resolve to any A record. The corresponding mail server is IPv6-only. Unfortunately our scanning apparatus is IPv4-only. This case was resulting in an unhandled exception being thrown.

With this change we now gracefully handle an MX record that does not resolve to an IPv4 address.
Note that we are giving credit for STARTTLS for the mail server, since we cannot evaluate it.

jsf9k added 2 commits May 14, 2019 10:40
Note that we are giving credit for STARTTLS for such a case, since we
cannot evaluate it.
@jsf9k jsf9k requested review from bjb28 and a team May 14, 2019 15:54
@jsf9k jsf9k self-assigned this May 14, 2019
Copy link
Member

@dav3r dav3r left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This looks good to me. It fits with how we have handled similar cases where we are unable to make a determination, so we give them the benefit of the doubt. Fine work @jsf9k! 🦅

@jsf9k jsf9k merged commit b1a50f0 into develop May 16, 2019
@jsf9k jsf9k deleted the bugfix/ipv6_only_mail_servers_not_handled_gracefully branch May 16, 2019 13:17
jsf9k added a commit to cisagov/lambda_functions that referenced this pull request May 16, 2019
The latest version of trustymail more gracefully handles mail servers
that only support IPv6.  See here for details:
cisagov/trustymail#117
jsf9k added a commit to 18F/domain-scan that referenced this pull request May 16, 2019
The latest version of trustymail more gracefully handles mail servers
that only support IPv6.  See cisagov/trustymail#117 for more details.
mcdonnnj added a commit that referenced this pull request Jan 23, 2023
…-length_rules

Update the `line-length` configuration for `yamllint`
mcdonnnj added a commit that referenced this pull request Jan 23, 2023
…ttributions

Add ignore directives to the dependabot configuration
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants