mixandClaude Opus 5.5
c171fb5bc7
test / test (push) Canceled after 0s
A message's From: line is held against the application that sends it, under the rule Postfix holds the envelope sender to. OpenDKIM chooses the key by that line, so until now an application could have mail signed as another domain of the server or as the server itself. The check (internal/milter/sender.go) - A role of the panel on a socket of its own (SENDER_CHECK_SOCKET), first in smtpd_milters and strict: default_action=tempfail. The journal milter keeps its socket and stays fail-open. postfix-wrapper waits for the new socket. - It reads no database: what an application may send as comes from Postfix's own sender_login_maps, what the server signs for from OpenDKIM's SigningTable. Both are read again when they change; one that cannot be read defers mail. - One From: field, one address, allowed by the envelope's lookup; then no other name of the SigningTable may appear anywhere in the raw line. Refused: 550 5.7.1 naming the line, reduced to printable ASCII. - A refusal is a send-log row with reason "from" and the header address (migration 0006), written by another goroutine and not waited for. The journal's refusals record their reason too (limit, client), and the notifier takes only a limit's. What it costs (docs/plans/from-header-binding.md, Statistics) - The role marks itself alive every 2 s; at start the gap since the mark is downtime, counted from Postfix's start if later and not at all when supervisord says Postfix is not running. - The log tailer counts the connections Postfix turned away: a warning that names the socket, then milter-reject "Service unavailable" from the same smtpd. Seen on the stand: the client is refused from CONNECT on and leaves at AUTH (454), so no MAIL line is ever written. - sender_check_days, a row per UTC day, kept a year. Pages - Health: the card "Sender check", the socket's row, and the cards layout - boxes numbered by importance in two stacks read in rows; the left stack polls, the three readings of the right one are swapped in by id. - Outbound log: a refused row says why in its tag (wrong From, wrong client, rate-limited); the message's page shows the From: line and what the application may send as. - Help: topic "Sender check", word for word the mockup's. Found by the stand, fixed here: the names for the second look came from the sender bindings, and a domain with a key and no application yet was not among them. e2e: negative_journal_milter_fail_open is gone - it proved that mail passes with the panel down, which is no longer so. In its place sender_check_holds_the_from_line (another domain's From:, the hostname's, a stranger's, an address off the list, another sender in the display name - refused; own addresses - delivered) and panel_down_defers_mail (4xx with the panel stopped, the container alive, mail again after, downtime and one deferred message on Health, the card warning). Test server, this tree before the last cosmetic edits (a fixture row, a fact's size, docs): go vet ok, go test 23 packages ok, make e2e ok (337 s). Locally after them: internal/web/view ok. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
155 lines
6.6 KiB
HTML
155 lines
6.6 KiB
HTML
{{/* The kit page (GET /server/components): every partial of components.html in
|
|
every state, filled from kit.go — the mockup components page rebuilt with
|
|
the real templates. Like any page it is thin: partial calls with structs,
|
|
Bulma layout classes, and the page utilities; the markup of a component is
|
|
written in components.html and nowhere else. */}}
|
|
{{define "content"}}
|
|
{{template "page_head" .Head}}
|
|
|
|
{{template "flash" .Flash}}
|
|
{{template "flash" .FlashError}}
|
|
|
|
{{template "box_open" .Layouts}}
|
|
{{template "body_open"}}
|
|
{{template "facts" .LayoutFacts}}
|
|
{{template "body_close"}}
|
|
{{template "box_close"}}
|
|
|
|
{{template "cards_open"}}
|
|
<div class="column is-6">
|
|
{{template "box_open" .Postmark}}
|
|
{{template "body_open"}}
|
|
<div class="buttons">{{range .Postmarks}}
|
|
{{template "postmark" .}}{{end}}
|
|
</div>
|
|
<p class="sp-muted">Only inside page_head, at most one per page, and only where the page has a verdict to give.</p>
|
|
{{template "body_close"}}
|
|
{{template "box_close"}}
|
|
|
|
{{template "box_open" .StatusTag}}
|
|
<div class="table-container"><table class="table is-fullwidth">
|
|
<thead><tr><th>Status</th><th>Tag</th><th>Bulma classes</th></tr></thead>
|
|
<tbody>{{range .StatusRows}}
|
|
<tr><td>{{.Words}}</td><td>{{template "tag" .Tag}}</td><td class="sp-mono sp-small">{{status_tag .Tag.Status}}</td></tr>{{end}}
|
|
<tr><td>a tag that opens a <code>sheet</code></td><td>{{template "sheet_tag" .Sheet}}</td><td class="sp-mono sp-small">button.tag + sp-sheet (popover)</td></tr>
|
|
</tbody>
|
|
</table></div>
|
|
{{template "box_close"}}
|
|
</div>
|
|
|
|
<div class="column is-6">
|
|
{{template "box_open" .BoxHead}}
|
|
{{template "body_open"}}
|
|
<p class="mb-2">The <i class="ti ti-help-circle"></i> after the end slot is <code>sp-help</code>: an optional link to the section's topic on the Help page. It replaces today's help drawer.</p>
|
|
<p>box_body — padded content. A <code>table</code> or a run of <code>sp-record</code> blocks sits directly in the box, without box_body.</p>
|
|
{{template "body_close"}}
|
|
{{template "box_foot" .BoxFoot}}
|
|
{{template "box_close"}}
|
|
|
|
{{template "box_open" .DangerZone}}
|
|
{{template "body_open"}}
|
|
<p>For destructive confirmations and the "delete" entry of a settings page. The number may be an icon when the box is not part of a sequence.</p>
|
|
{{template "body_close"}}
|
|
{{template "box_close"}}
|
|
|
|
{{template "box_open" .Credential}}
|
|
{{template "body_open"}}
|
|
<p>Only for a secret the panel will never show again.</p>
|
|
{{template "body_close"}}
|
|
{{template "box_close"}}
|
|
</div>
|
|
{{template "cards_close"}}
|
|
|
|
{{template "box_open" .HealthCard}}
|
|
{{template "health_cards" .HealthCards}}
|
|
{{template "box_close"}}
|
|
|
|
<div class="columns">
|
|
<div class="column is-7">
|
|
{{template "box_open" .DNSRecord}}
|
|
{{range .Records}}{{template "dns_record" .}}
|
|
{{end}}{{template "box_close"}}
|
|
|
|
{{template "box_open" .Tables}}
|
|
<div class="table-container"><table class="table is-fullwidth is-hoverable">
|
|
<thead><tr><th>Time, UTC</th><th>Name</th><th>sp-clip</th><th>Status</th><th></th></tr></thead>
|
|
<tbody>
|
|
<tr><td class="sp-mono sp-muted sp-nowrap sp-small">09-21 14:01:52</td><td><a href="#"><strong>the row's link</strong></a></td><td class="sp-clip">A long subject is clipped with an ellipsis instead of wrapping the row</td><td><span class="{{status_tag "sent"}}">sent</span></td><td class="sp-actions"><a href="#">Details</a>{{template "row_action" .RowAction}}</td></tr>
|
|
</tbody>
|
|
</table></div>
|
|
{{template "box_foot" .TablesFoot}}
|
|
{{template "box_close"}}
|
|
|
|
{{template "box_open" .LogPane}}
|
|
{{template "log_pane" .LogLines}}
|
|
{{template "box_close"}}
|
|
</div>
|
|
|
|
<div class="column is-5">
|
|
{{template "box_open" .Facts}}
|
|
{{template "body_open"}}
|
|
{{template "facts" .FactList}}
|
|
{{template "body_close"}}
|
|
{{template "box_close"}}
|
|
|
|
{{template "box_open" .Timeline}}
|
|
{{template "body_open"}}
|
|
{{template "timeline" .Steps}}
|
|
{{template "body_close"}}
|
|
{{template "box_close"}}
|
|
|
|
{{template "box_open" .EmptyState}}
|
|
{{template "empty_state" .Empty}}
|
|
{{template "box_close"}}
|
|
|
|
{{template "box_open" .ConfirmList}}
|
|
{{template "body_open"}}
|
|
{{template "confirm_list" .Confirm}}
|
|
{{template "body_close"}}
|
|
{{template "box_close"}}
|
|
</div>
|
|
</div>
|
|
|
|
<div class="columns">
|
|
<div class="column is-3">
|
|
{{template "side_menu" .SideMenu}}
|
|
</div>
|
|
<div class="column is-9">
|
|
{{template "box_open" .FormRows}}
|
|
{{template "body_open"}}
|
|
<div class="sp-form">
|
|
<div class="sp-row">
|
|
<div class="field"><label class="label">sp-row — a wide field</label><div class="control"><input class="input" value="host"></div></div>
|
|
<div class="field"><label class="label">and a short one</label><div class="control"><input class="input" value="25"></div></div>
|
|
</div>
|
|
<div class="sp-pair">
|
|
<div class="field"><label class="label">sp-pair — two equal fields</label><div class="control"><input class="input" type="password"></div></div>
|
|
<div class="field"><label class="label">Repeat</label><div class="control"><input class="input" type="password"></div><p class="help">Help text lives in Bulma's <code>help</code>.</p></div>
|
|
</div>
|
|
</div>
|
|
{{template "route" .Route}}
|
|
{{template "body_close"}}
|
|
{{template "help_topic" .HelpTopic}}
|
|
{{template "box_close"}}
|
|
</div>
|
|
</div>
|
|
|
|
{{template "box_open" .Shell}}
|
|
{{template "body_open"}}
|
|
{{template "facts" .ShellFacts}}
|
|
{{template "body_close"}}
|
|
{{template "box_close"}}
|
|
|
|
{{template "box_open" .TypeScale}}
|
|
<div class="table-container"><table class="table is-fullwidth">
|
|
<thead><tr><th>Size</th><th>Looks like</th><th>Used for</th></tr></thead>
|
|
<tbody>
|
|
<tr><td class="sp-mono sp-small">body · 16px</td><td>The quick brown fox, 203.0.113.25</td><td class="sp-muted">Text, table cells, inputs, selects, buttons, menus and their dropdowns</td></tr>
|
|
<tr><td class="sp-mono sp-small">--sp-fs-s · 14px</td><td class="sp-small">The quick brown fox, <span class="sp-mono">203.0.113.25</span></td><td class="sp-muted">Supporting text: labels, <code>help</code>, notes in a box head or foot, mono values (<code>sp-small</code>), logs, the footer</td></tr>
|
|
<tr><td class="sp-mono sp-small">--sp-fs-xs · 13px</td><td>{{template "kicker" .KickerSample}} <span class="tag is-light">tag</span></td><td class="sp-muted">Upper-case mono micro-labels (kicker, table head, <code>dt</code>, box title) and tags — nothing else</td></tr>
|
|
</tbody>
|
|
</table></div>
|
|
{{template "box_foot" .TypeScaleFoot}}
|
|
{{template "box_close"}}
|
|
{{end}}
|