Bound DNS policy lookups #12

Merged
ober merged 1 commit from security/bounded-dns-policy-checks into main 2026-08-21 13:58:17 -04:00
Owner

Summary

  • add dns_query_timeout_seconds and apply it to resolver calls
  • bound SPF, DKIM, DMARC, DNSBL, FCrDNS, and outbound relay DNS lookups
  • bump VERSION to 0.7.0 and document the new setting

Verification

  • jerboa_check_balance: dns.ss, config.ss, server.ss, relay.ss, tests/config-test.ss, tests/server-test.ss
  • jerboa_verify: dns.ss, config.ss, server.ss, relay.ss, tests/config-test.ss, tests/server-test.ss
  • make binary
  • make test
  • ./jsmtp native-version -> 1
  • ./jsmtp help

Reverse DNS

No PTR or reverse DNS records are changed. FCrDNS remains log-only/off by config.

## Summary - add dns_query_timeout_seconds and apply it to resolver calls - bound SPF, DKIM, DMARC, DNSBL, FCrDNS, and outbound relay DNS lookups - bump VERSION to 0.7.0 and document the new setting ## Verification - jerboa_check_balance: dns.ss, config.ss, server.ss, relay.ss, tests/config-test.ss, tests/server-test.ss - jerboa_verify: dns.ss, config.ss, server.ss, relay.ss, tests/config-test.ss, tests/server-test.ss - make binary - make test - ./jsmtp native-version -> 1 - ./jsmtp help ## Reverse DNS No PTR or reverse DNS records are changed. FCrDNS remains log-only/off by config.
Bound DNS policy lookups
All checks were successful
version-policy / required (pull_request) Successful in 2s
required-ci / required (pull_request) Successful in 9m32s
2ef8f4038b
ober scheduled this pull request to auto merge when all checks succeed 2026-08-21 13:58:03 -04:00
ober merged commit a0525bdb75 into main 2026-08-21 13:58:17 -04:00
ober referenced this pull request from a commit 2026-08-21 13:58:18 -04:00
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
ober/jerboa-smtp!12
No description provided.