[ Don't know if it got announced, but Arife added me to the ris-int list today. Yay! ] Lorenzo Colitti wrote:
Rene Wilhelm wrote:
... myASn can use reply-to address forwarded to /dev/null
Are we sure we want that? How often does it happen? Shouldn't there be follow by a risopsy when a notification fails to be delivered? (for permanent failures, either try to get in touch with representatives of the AS to correct the address, or deconfigure the alarm???)
What about setting the Return-Path: and Reply-To: headers to different values? When mail bounces it goes to the address specified in Return-Path, but when a human replies, the mail goes to the address specified in Reply-To (or From if Reply-To is not present).
So it could be:
Return-Path: <bitbucket@ripe.net> [...] From: myASn <myasn@ripe.net> Reply-To: risops@ripe.net
or something like that.
If you want automatic bounce unsubscription, you could set the Return-Path to something like
Return-Path: <myasn-bounce-colitti=dia.uniroma3.it@ripe.net>
where "colitti=dia.uniroma3.it" is the address that the notification was sent to. Then you can hook up a script to all myasn-bounce-*@ripe.net mailboxes that automatically unsubscribes after one or more bounces.
Interesting idea, although we need to take a bit of care security-wise. If we do an automatic unsubscribe, we'd need to: - Make the bound address non-predictable (hash with a secret would work): $ echo 'dia.uniroma3.it@ripe.net LotsOfRoutes' | md5sum 61081c9ee3097365710e7a0881f79e70 Return-Path <myasn-bounce-colitti=61081c9ee3097365710e7a0881f79e70@ripe.net> That way I couldn't unsubscribe you by sending to your bounce address, since I won't be able to guess what your bounce auto-unsubscribe is. It can still be found by anyone who can read your mail, but there's not much we can do about that. - Track this information so that the user can be notified when they log in that their alarms are no disabled, and for what reason, and what they can do about it. Also, what about temporary delays? Do those go to the "Return-Path:"? I'd hate for someone to get unsubscribed because they exceeded their disk quota and had a bounce that made it through 30 minutes later. -- Shane Kerr RIPE NCC