openssh unix dev - Oct 2024 - Developer mailing list delivery issue

I wanted to bring up a security concern, and sent mail to 
openssh at openssh.com
but the mail was not delivered.? I hope that one of the developers is on 
this list
and can make sure this mail delivery problem is seen by the right 
people. (If needed,
please contact me directly.)? My apologies for sending this to the whole 
list...

(FYI, it is not about an urgent security issue, but something I hope the 
developers consider.)


A link at the bottom of messages sent to this mailing list is
https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev
On that page is a link to https://www.openssh.com
 From that page, if you follow the link to Mailing Lists, the page 
<https://www.openssh.com/list.html> states
> Security-related issues may be sent to the private 
> listopenssh at openssh.comwhich is read only by the OpenSSH developers

24 hours after I sent email to that address, I got a DSN
indicating
>
> Generating server: SA1P110MB1533.NAMP110.PROD.OUTLOOK.COM
> Total retry attempts: 4
>
> openssh at openssh.com
> Remote server returned '550 5.4.300 Message expired -> 451 Temporary
> failure, please try again later.'
>
Date in the body of my message was? "Date: Tue, 22 Oct 2024 05:34:52
-0700".
Message-id: <beb4bee3-23df-420c-8069-f97a5cea1fc4 at AI.SRI.COM>
I am presuming that the "Remote server" is the MX server for 
openssh.com, but the
error message only reports the "Generating server".

On 24.10.24 02:06, Mabry Tyson wrote:
> I [...] sent mail to openssh at openssh.com but the mail was not delivered.
> 24 hours after I sent email to that address, I got a DSN indicating
>
>> Remote server returned '550 5.4.300 Message expired -> 451
Temporary
>> failure, please try again later.'
... yeaaahhh whatever it takes to convince the MX that it's *not* 
talking to a spammer, I haven't got it, either ...
> $ host -t mx openssh.com
> openssh.com mail is handled by 5 mail.openbsd.org.
> $ openssl s_client -connect mail.openbsd.org:25 -starttls smtp -servername
mail.openbsd.org -quiet
> Connecting to 199.185.178.25
[...]
> 250 STARTTLS
> EHLO bern.binect.de
> 250 Hello, spam sender. Pleased to be wasting your time.
> MAIL FROM:<jochen.bern at binect.de>
> 250 You are about to try to deliver spam. Your time will be spent, for
nothing.
> rCPT TO:<openssh at openssh.com>
> 250 This is hurting you more than it is hurting me.
> DATA
> 451 Temporary failure, please try again later.
[connection closed by the server side]

Kind regards,
-- 
Jochen Bern
Systemingenieur

Binect GmbH
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4336 bytes
Desc: S/MIME Cryptographic Signature
URL:
<http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20241024/94b3e177/attachment.p7s>