Of course nobody has ever observed my rule.
Doesn't make it a bad rule...
21–30 of 51 posts
Of course nobody has ever observed my rule.
Doesn't make it a bad rule...
If "my users" might receive test emails, that means I'm using real user email addresses in my test data, therfore my test SMTP server should not be a random system on the internet but something I fully control.
hugged to death? anyway - i got a great 429 back with a suggested try-after -time. it made me smile in appreciation! well done!
That's the wrong status code The HTTP 429 Too Many Requests response status code indicates the user has sent too many requests in a given amount of time ("rate limiting"). Unless the server believes you as an individual user were sending too many it should not have been a 429 If the server was unable to handle the volume of requests more generally it should have been a 503 which also supports Retry-After
Call it a very dynamic rate limit that autoscales all the way down to zero.
I prefer self-hosting MailHog: https://github.com/mailhog/MailHog
- https://github.com/maildev/maildev
- https://github.com/Nilhcem/FakeSMTP
I have used tools like these for nearly a decade and find them invaluable. My current favourite is Mailpit [1]. The “OG” I would consider Mailcatcher [2] from my Rails days [1] https://github.com/axllent/mailpit [2] https://mailcatcher.me/
Add https://mailsnag.com to the list. You can share email samples with others for the review and it also allows receiving emails for your prod env - send emails to your app and process them in it.
hugged to death? anyway - i got a great 429 back with a suggested try-after -time. it made me smile in appreciation! well done!
That's the wrong status code The HTTP 429 Too Many Requests response status code indicates the user has sent too many requests in a given amount of time ("rate limiting"). Unless the server believes you as an individual user were sending too many it should not have been a 429 If the server was unable to handle the volume of requests more generally it should have been a 503 which also supports Retry-After
Despite what "Too many requests" suggests, people writing/configuring software are (accidentally) sending this error in response to requests based on quality not quantity.
In each case where I have received it, I was able to make the error go away by changing something about the request.
You really want, whenever possible, to test everything using real tools. Doubly so, using tools you'll use it PROD. However, at least postfix is de-facto standard.
apt-get install postfix, postfix-pcre bsd-mailx, config and done.
Here's an example redirecting ALL outgoing emails, UNLESS they are to your OK domains. Redirects are sent to an alias in /etc/aliases, which you can point to anything. (Easier for DEVs to modify when required)...
/etc/postfix/header_checks (adds a header with original TO)
/^(.*)@((?:(?![^\.]+.corp-domain1.com|anotherdomain.ca|localhost).)*)$/ PREPEND DEV-ENV-REDIRECT: ${1}@${2}
This MUST be the same as the above regex, so that the TO preservation + redirect are both done in tandem.. /etc/postfix/recipient_canonical_map
/^(.*)@((?:(?![^\.]+.corp-domain1.com|anotherdomain.ca|localhost).)*)$/ externalredirect@localhost
Then in main.cf # added
recipient_canonical_classes = envelope_recipient
recipient_canonical_maps = pcre:/etc/postfix/recipient_canonical_map
local_header_rewrite_clients = permit_mynetworks
#
header_checks = pcre:/etc/postfix/header_checks
Then in /etc/aliases: #
externalredirect: dev
# dev's email.. (default unless set)
dev: /dev/null
Preserving the original TO as another header ensures you can debug if required, whilst preserving 100% the original mail body.Using a second redirect in aliases, allows you do something such as:
/etc/aliases:
#
externalredirect: dev, another_email_address_for_logs
# dev's email.. (default unless set)
dev: /dev/null
So it's super easy for a dev to just change: dev: /dev/null
to dev: dev@corp.com
Without the need to worry about overall redirect stuff.NOTE that if you don't have a unique email for your company's DEVs to use, this won't work, HOWEVER... you can redirect with more refined controls above.
That is, instead of saying "if it's not to a company domain, then redirect this DEV TEST email!", you can "If not to this specific email address, then redirect to this specific email address".
The reason I have this setup to redirect of not corp domain, is that the env I have this deployed in is byte per byte 100% identical to PROD deployment, with only very, very, very, minor tweaks. About 20 bytes or so.
That way, all tests done in DEV are 100% identical to configs in PROD. You eliminate PROD deploy bugs more aptly this way. And so if local MTAs are postfix in PROD, then you can keep all of your PROD postfix configs, with these minor changes to lock down DEV. And, you can keep the all the config files, all the config, and just have empty header_checks, recipient_canonical_map files.
But this means that alert emails that might get send from PROD have genericized domains, so in such envs it's easier to NOT redirect corp dest emails carte blanche, and then send everything else to a redirect dest.
That way monitoring / emerg emails get through unvarnished.
I too have one, but it is very barebones. No GUI, no API. I suspect it would fail in many cases that the others handle, but it is fine for my test environment. That environment is basically a bunch of services from work that in production run on separate servers all shoved into one test VM with a firewall that blocks most outgoing connections to keep things from escaping.
The firewall reroutes any attempted outgoing port 25 connections to localhost port 2000, which my fake SMTP server listens on. When something connections it creates a timestamped file, sends them a "220 hello" message, and then loops reading what they send. Everything they send is copied to the file.
If they send a "quit" command it sends back "221 bye" and disconnects and closed the output file.
If they send a "data" command it sends back "354 send the message" and then loops until they send a "." line. When they send that it sends back "250 OK".
If they send anything else it just says "250 OK".
That ridiculously small subset of SMTP turns out to be fine in my environment.
Here it is in case anyone might actually find it useful [1]. Building and running is simple. It's a single Java file, SmtpSink.java. Put that somewhere, "mkdir msgs" there, "javac SmtpSink.java", and then "java SmtpSink". The data for each connection will be in the msgs directory.