#27 IPv6 mail from Google
Hello,
there is a problem with IPv6 mail coming from Google (sqlgrey 1.8.0). Apparently retries are made by several different servers, not even withint the same /64 subnet... any ideas how to handle this?
Feb 12 18:18:04 new: 2607:f8b0:4001:0c02:0000:0000:0000:0230(2607:f8b0:4001:c02::230), xxx@gmail.com -> mailbox
Feb 12 18:24:09 new: 2607:f8b0:4001:0c02:0000:0000:0000:022b(2607:f8b0:4001:c02::22b), xxx@gmail.com -> mailbox
Feb 12 18:47:28 new: 2607:f8b0:4001:0c02:0000:0000:0000:0229(2607:f8b0:4001:c02::229), xxx@gmail.com -> mailbox
Feb 12 19:11:48 new: 2607:f8b0:4001:0c03:0000:0000:0000:022e(2607:f8b0:4001:c03::22e), xxx@gmail.com -> mailbox
Feb 12 20:01:46 new: 2607:f8b0:4001:0c02:0000:0000:0000:022c(2607:f8b0:4001:c02::22c), xxx@gmail.com -> mailbox
Feb 12 21:03:28 new: 2607:f8b0:4001:0c03:0000:0000:0000:022b(2607:f8b0:4001:c03::22b), xxx@gmail.com -> mailbox
Feb 12 22:20:47 new: 2607:f8b0:4001:0c03:0000:0000:0000:0230(2607:f8b0:4001:c03::230), xxx@gmail.com -> mailbox
Feb 12 23:32:57 new: 2607:f8b0:4001:0c03:0000:0000:0000:0235(2607:f8b0:4001:c03::235), xxx@gmail.com -> mailbox
Feb 13 01:26:09 reconnect ok: 2607:f8b0:4001:0c02:0000:0000:0000:022b(2607:f8b0:4001:c02::22b), xxx@gmail.com -> mailbox (07:02:00)
Google seem to be using at least two /32 blocks, with retries coming from widely separated addresses. We need a CIDR-style whitelist syntax so that I can add:
2a00:1450::/32
2607:f8b0::/32
Google themselves suggest whitelisting by domain:
http://support.google.com/mail/answer/180063?hl=en
so I tried adding these lines to clients_fqdn_whitelist.local but apparently without effect:
gmail.com
*.gmail.com
googlemail.com
*.googlemail.com
googlegroups.com
*.googlegroups.com
Andrew
1.) The problem is not limited to google.com/gmail.com domains. Google now hosts a whole lot of external domains on gmail platform and this problem relates to all of them.
2.) For at least first few retries, mail seem to come from the same /64 subnet. For now I've worked around the problem by treating Non-EUI64 addresses same as EUI64 - treat all addresses within /64 prefix as one. Works fine so far. Patch below.
--- /usr/sbin/sqlgrey.orig 2013-03-07 23:48:40.499074781 +0100
+++ /usr/sbin/sqlgrey 2013-03-07 23:49:37.000145652 +0100
@@ -1037,7 +1037,9 @@
return join(":", (split(/:/, $addr))[0..3]);
} else {
## For Non-EUI64 or Non-Global-Unicast return the address
- return $addr;
+ #return $addr;
+ # this breaks gmail/google, always use prefix/64
+ return join(":", (split(/:/, $addr))[0..3]);
}
}
Ball Gowns Prom Dresses http://www.dressyus.com/prom-dresses-by-type/ball-gowns-prom-dresses.html <a href="http://www.dressyus.com/prom-dresses-by-type/ball-gowns-prom-dresses.html" title="Ball Gowns Prom Dresses">Ball Gowns Prom Dresses</a>