Use SMTP port 25 for direct DANE lookups

2026-07-26 19:25:28 +02:00
parent 3957477b16
commit e5caacd837
1 changed files with 18 additions and 10 deletions
@@ -1883,16 +1883,24 @@ ProcessEntry(void *clientp, Connection *conn)
            Remote.isLMTP = FindLMTPTransport(
                &CurrentRecip, Remote.transportHost,
                sizeof(Remote.transportHost), &Remote.transportPort);
-            Remote.conn = Remote.isLMTP
-                ? ConnectLMTP(&CurrentRecip, Remote.transportHost,
-                              Remote.transportPort)
-                : LookupRemoteMX(&CurrentRecip, Remote.transportHost,
-                                 sizeof(Remote.transportHost),
-                                 Remote.canonicalHost,
-                                 sizeof(Remote.canonicalHost),
-                                 Remote.originalNextHopDomain,
-                                 sizeof(Remote.originalNextHopDomain),
-                                 &Remote.mxDnssecAuthenticated);
+            if (Remote.isLMTP) {
+                Remote.conn = ConnectLMTP(
+                    &CurrentRecip, Remote.transportHost,
+                    Remote.transportPort);
+            } else {
+                /* Direct RFC 5321 MX delivery always uses SMTP port 25.
+                 * Preserve it in the transport metadata as well as the
+                 * socket address: DANE TLSA lookups are port-specific. */
+                Remote.transportPort = 25;
+                Remote.conn = LookupRemoteMX(
+                    &CurrentRecip, Remote.transportHost,
+                    sizeof(Remote.transportHost),
+                    Remote.canonicalHost,
+                    sizeof(Remote.canonicalHost),
+                    Remote.originalNextHopDomain,
+                    sizeof(Remote.originalNextHopDomain),
+                    &Remote.mxDnssecAuthenticated);
+            }
            if (!Remote.conn) {
                /* There was an error looking up or connecting to the remote server. */
                continue;