RFC 6710
Simple Mail Transfer Protocol Extension for Message Transfer Priorities
Internet Engineering Task Force (IETF) A. Melnikov Request for Comments: 6710 Isode Ltd Category: Standards Track K. Carlberg ISSN: 2070-1721 G11 August 2012 Simple Mail Transfer Protocol Extension for Message Transfer PrioritiesAbstract
This memo defines an extension to the SMTP (Simple Mail Transfer Protocol) service whereby messages are given a label to indicate preferential handling, to enable mail handling nodes to take this information into account for onward processing. Status of This Memo This is an Internet Standards Track document. This document is a product of the Internet Engineering Task Force (IETF). It represents the consensus of the IETF community. It has received public review and has been approved for publication by the Internet Engineering Steering Group (IESG). Further information on Internet Standards is available in Section 2 of RFC 5741. Information about the current status of this document, any errata, and how to provide feedback on it may be obtained at http://www.rfc-editor.org/info/rfc6710. Copyright Notice Copyright (c) 2012 IETF Trust and the persons identified as the document authors. All rights reserved. This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (http://trustee.ietf.org/license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Simplified BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the Simplified BSD License.
Table of Contents
1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . . 3 2. Conventions Used in This Document . . . . . . . . . . . . . . 4 3. Definition of the Priority SMTP Extension . . . . . . . . . . 4 4. Handling of Messages Received via SMTP . . . . . . . . . . . . 5 4.1. Handling of the MT-PRIORITY Parameter by the Receiving SMTP Server . . . . . . . . . . . . . . . . . . . . . . . 5 4.2. Relay of Messages to Other Conforming SMTP/LMTP Servers . 6 4.3. Relay of Messages to Non-Conforming SMTP/LMTP Servers . . 7 4.4. Mailing Lists and Aliases . . . . . . . . . . . . . . . . 7 4.5. Gatewaying a Message into a Foreign Environment . . . . . 7 4.6. Interaction with the DSN SMTP Extension . . . . . . . . . 7 5. The Priority Service Extension . . . . . . . . . . . . . . . . 8 5.1. Expedited Transfer . . . . . . . . . . . . . . . . . . . . 9 5.2. Timely Delivery . . . . . . . . . . . . . . . . . . . . . 10 6. Use of MT-PRIORITY with LMTP . . . . . . . . . . . . . . . . . 10 7. Syntax . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 8. Example . . . . . . . . . . . . . . . . . . . . . . . . . . . 12 9. Deployment Considerations . . . . . . . . . . . . . . . . . . 14 9.1. Multiple MX Records . . . . . . . . . . . . . . . . . . . 14 9.2. Priority Assignment Policies . . . . . . . . . . . . . . . 15 10. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 15 10.1. Requirements on Priority Assignment Policy Registrations . . . . . . . . . . . . . . . . . . . . . . 17 10.2. Initial Priority Assignment Policy Registrations . . . . . 18 11. Security Considerations . . . . . . . . . . . . . . . . . . . 18 12. References . . . . . . . . . . . . . . . . . . . . . . . . . . 19 12.1. Normative References . . . . . . . . . . . . . . . . . . . 19 12.2. Informative References . . . . . . . . . . . . . . . . . . 20 Appendix A. Priority Assignment Policy for Military Messaging . . 22 Appendix B. Priority Assignment Policy for MIXER . . . . . . . . 23 Appendix C. Priority Assignment Policy for National Security / Emergency Preparedness (NS/EP) . . . . . . . . . . 24 Appendix D. Possible Implementation Strategies . . . . . . . . . 25 D.1. Probability . . . . . . . . . . . . . . . . . . . . . . . 25 D.2. Preemption of Sessions or Transactions . . . . . . . . . . 25 D.3. Resource Allocation Models . . . . . . . . . . . . . . . . 26 Appendix E. Background on Design Choices . . . . . . . . . . . . 26 Appendix F. Acknowledgements . . . . . . . . . . . . . . . . . . 27
1. Introduction
Where resources for switching or transferring messages are constrained (e.g., bandwidth, round trip time, transition storage, or processing capability), it is desirable to give preferential handling to some messages over others, according to their labeled priority. This is particularly important during emergencies for first responders (Appendix C) and for environments such as military (Appendix A) and aviation (Appendix B) messaging, where messages have high operational significance, and the consequences of extraneous delay can be significant. In order for an SMTP receiver to be able to relay higher-priority messages first, there needs to be a mechanism to communicate (during both Message Submission [RFC6409] and Message Transfer [RFC5321]) the priority of each message. This specification defines this mechanism by specification of an SMTP [RFC5321] extension. In order to permit end-to-end use of this extension across an email infrastructure that does not support it, a companion tunneling mechanism is defined in [PRIORITY-TUNNELING] that uses a new message header field [RFC5322]. This extension provides services to some classes of users in networks with limited available bandwidth or long round trip times, when the actual message transfer over the network can create a significant portion of the overall message delivery time from a sender to a recipient, for example, over a satellite or high-frequency radio link. It is also useful in case of a Mail Transfer Agent (MTA) queue buildup due to the rate of incoming messages being higher than the rate of outgoing messages. When neither of the two conditions mentioned above is true, the use of the MT-PRIORITY SMTP extension will not result in better SMTP service to any user. Also note that while this SMTP extension can help in improving delivery speed for higher-priority messages, it does not provide any guarantees that for two given messages with priorities M and N (M > N) submitted simultaneously, the message with priority M will arrive earlier than the message with priority N. That is, this extension calls for best effort to provide preferential processing. Besides the actions taken at the application level, it can thus be important to deploy priority or precedence mechanisms offered by the network itself to ensure timely delivery of the emails. Examples would be the use of DiffServ [RFC2474], RSVP [RFC2205], and [RFC6401] (an extension to RSVP that prioritizes reservations).
2. Conventions Used in This Document
The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in [RFC2119] when they appear in ALL CAPS. These words also appear in this document in lower case as plain English words, absent their normative meanings. The formal syntax uses the Augmented Backus-Naur Form (ABNF) [RFC5234] notation including the core rules defined in Appendix B of RFC 5234 [RFC5234]. In examples, "C:" and "S:" indicate lines sent by the client and server, respectively. Line breaks that do not start with a new "C:" or "S:" exist for editorial reasons and are not a part of the protocol. This document uses the term "priority" specifically in relation to the internal treatment of a message by the server. Messages with higher priorities may be given expedited handling, and those with lower priorities may be handled only as resources become available.3. Definition of the Priority SMTP Extension
The Priority SMTP service extension is defined as follows: 1. The textual name of this extension is "Priority Message Handling". 2. The EHLO keyword value associated with this extension is "MT-PRIORITY". 3. The EHLO keyword has an OPTIONAL parameter that conveys the name of the Priority Assignment Policy (see Section 9.2) used by the server. (See the <mt-priority-ehlo> ABNF non-terminal in Section 7 for details of its syntax.) Absence of the parameter means that the server is unwilling to disclose its Priority Assignment Policy. Clients can choose to use the MT-PRIORITY SMTP extension even if they don't recognize a particular Priority Assignment Policy name advertised by a server. 4. No additional SMTP verbs are defined by this extension. 5. One optional parameter ("MT-PRIORITY") is added to the MAIL FROM command. The value associated with this parameter is a decimal integer number from -9 to 9 (inclusive) indicating the priority of the email message (see Appendix E for more details on why this range was selected). The syntax of the MT-PRIORITY parameter is
described by the <priority-value> ABNF non-terminal defined in
Section 7. Higher numbers mean higher priority.
6. The maximum length of a MAIL FROM command line is increased by 15
octets by the possible addition of a space, the MT-PRIORITY
keyword, and a priority value.
7. The MT-PRIORITY extension is valid for the submission service
[RFC6409] and the Local Mail Transfer Protocol (LMTP) [RFC2033].
4. Handling of Messages Received via SMTP
This section describes how a conforming SMTP server should handle any
messages received via SMTP.
4.1. Handling of the MT-PRIORITY Parameter by the Receiving SMTP Server
The following rules apply to SMTP transactions in a server that
supports the MT-PRIORITY parameter:
1. If any of the associated <esmtp-value>s (as defined in Section
4.1.2 of [RFC5321]) are not syntactically valid, or if there is
more than one MT-PRIORITY parameter in a particular MAIL FROM
command, the server MUST return an error, for example "501 syntax
error in parameter" (with the 5.5.2 Enhanced Status Code
[RFC2034] [RFC5248]).
2. When inserting a Received header field as specified in Section
4.4 of [RFC5321], the compliant MTA/MSA (Mail Submission Agent)
SHOULD include the "PRIORITY" clause whose syntax is specified in
Section 7.
3. The received MT-PRIORITY parameter value SHOULD be logged as part
of any logging of message transactions.
4. If the sending SMTP client specified the MT-PRIORITY parameter to
the MAIL FROM command, then the value of this parameter is the
message priority.
5. If no priority has been determined by the above, the server may
use its normal policies to set the message's priority. By
default, each message has priority 0.
The SMTP server MUST NOT allow "upgraded" (positive) priorities from
untrusted (e.g., unauthenticated) or unauthorized sources. (One
example of an "unauthorized source" might be an SMTP sender that
successfully authenticated using SMTP AUTH, but that is not
explicitly authorized to use the SMTP MT-PRIORITY service. In case
of MTA-to-MTA transfer, such authorization will usually be done as a bilateral agreement between two domains to honor priorities from each other.) The server MAY, however, allow an untrusted source to lower its own message's priorities -- consider, for example, an email marketer that voluntarily sends its marketing messages at a negative priority. The SMTP server MAY also alter the message priority (to lower or to raise it) in order to enforce some other site policy. (Note that this also includes the case in which the priority is not explicitly specified.) For example, an MSA might have a mapping table that assigns priorities to messages based on authentication credentials. If the SMTP server changes (lowers or raises) the priority of a message, it SHOULD use the X.3.6 Enhanced Status Code [RFC2034] in its response to the MAIL FROM or in the final response to the DATA (or similar) command. The human readable text part after the status code contains the new priority, followed by SP (ASCII space) and explanatory human readable text. Alternatively, an SMTP server that is an MSA MAY reject a message based on the determined priority. In such cases, the MSA SHOULD use the 450 or 550 reply code. The corresponding Enhanced Status Code MUST be X.7.15 [RFC2034] if the determined priority level is below the lowest priority currently acceptable for the receiving SMTP server. Note that this condition might be temporary. In some environments, operational policies might permit periods of operation that relay only higher-priority messages and reject lower priority ones. Such handling choices need to be specified for that operational environment.4.2. Relay of Messages to Other Conforming SMTP/LMTP Servers
The following rules govern the behavior of a conforming MTA (in the role of an SMTP/LMTP client) when relaying a message that was received via the SMTP protocol to an SMTP/LMTP server that supports the MT-PRIORITY extension: 1. An MT-PRIORITY parameter with the value determined by the procedure from Section 4.1 MUST appear in the MAIL FROM command issued when the message is relayed to an MTA/MDA (Mail Delivery Agent) that also supports the MT-PRIORITY extension. (Note that due to site policy, this value might be different from the value received from the SMTP client. See Section 4.1 for details. Also note that this value might be different than the priority level at which the MTA actually handles the request, due to the rounding described in Section 5.)
2. Further processing of the MT-PRIORITY parameter is described in
Section 5.
4.3. Relay of Messages to Non-Conforming SMTP/LMTP Servers
The following rules govern the behavior of a conforming MTA (in the
role of an SMTP/LMTP client) when relaying a message that was
received via the SMTP protocol to an SMTP/LMTP server that does not
support the MT-PRIORITY extension:
1. The MTA relays the message without including the MT-PRIORITY
parameter in the MAIL FROM command.
4.4. Mailing Lists and Aliases
Several types of mechanisms exist to redirect or forward messages to
alternative or multiple addresses [RFC5598]. Examples for this are
aliases and mailing lists [RFC5321].
If a message is subject to such processing, the Mediator node
(Section 2.1 of [RFC5598]) SHOULD retain the MT-PRIORITY parameter
value for all expanded and/or translated addresses.
4.5. Gatewaying a Message into a Foreign Environment
The following rules govern the behavior of a conforming MTA when
gatewaying a message that was received via the SMTP protocol into a
foreign (non-SMTP) environment:
1. If the destination environment is unable to provide an equivalent
of the MT-PRIORITY parameter, the conforming MTA SHOULD behave as
if it is relaying to a non-conformant SMTP server (Section 4.3).
2. If the destination environment is capable of providing an
equivalent of the MT-PRIORITY parameter, the conforming MTA
SHOULD behave as if it is relaying to a conformant SMTP server
(Section 4.2), converting the MT-PRIORITY value to the equivalent
in the destination environment.
4.6. Interaction with the DSN SMTP Extension
An MTA that needs to generate a delivery report (whether for
successful delivery or delayed/failed delivery) for a message it is
processing SHOULD use the priority value of the message as the
priority of the generated delivery report. In particular, this
requirement applies to MTAs that also implement [RFC3461].
For delivery reports (DSNs) received by an MTA for relay, processing rules specified in Section 4.1 apply -- there is no special processing for relayed DSNs. It might seem tempting to try to detect DSNs and process them at an elevated priority under the assumption that failure notices need to get through quickly, even or perhaps especially if the DSN came from an untrusted source. But such a policy can create an exposure to fake DSN attacks by giving untrusted systems a way to inject high-priority messages. Implementation of such a policy also assumes that DSNs can be detected reliably, which may not be the case since some systems use nonstandard DSN formats.5. The Priority Service Extension
The priorities of messages affect the order in which messages are transferred from the client to the server. This is largely independent from the order in which they were originally received by the server. A message priority is a decimal integer in the range from -9 to 9 (inclusive). SMTP servers compliant with this specification are not required to support all 19 distinct priority levels (i.e., to treat each priority value as a separate priority), but they MUST implement all distinct priority levels specified in the Priority Assignment Policy (see Section 9.2) implemented by the server. That is, an implementation that only supports N priority levels (where N < 19) will internally round up a syntactically valid priority value that isn't supported to the next higher supported number (or to the highest supported priority, if the value is higher than any supported priority). For example, an implementation can treat priority values below and including -4 as priority -4, priority -3 as priority -2, and all priorities starting from 5 can be treated as priority 6. (See Section 9.2 for implementation/deployment considerations related to Priority Assignment Policy.) Irrespective of the number of distinct priority levels supported by the SMTP server, when relaying the message to the next hop or delivering it over LMTP, the SMTP server MUST communicate the priority value as determined in Section 4.1. Note: 19 possible priority levels are defined by this specification for extensibility. For example, a particular implementation or deployment environment might need to provide finer-grained control over message transfer priorities. See Appendix E for more details on why the range from -9 to 9 was selected. As per the Priority Assignment Policy, some SMTP servers MAY impose additional maximum message size constraints for different message transfer priorities; for example, messages with priority 6 might not
be larger than 4 Kb. If an SMTP server chooses to reject a message because it is too big for the determined priority, it SHOULD use 552 reply codes together with the X.7.16 Enhanced Status Code [RFC2034]. Implementation Note: If the SMTP server also supports the SMTP SIZE extension [RFC1870], then an SMTP client can use both SIZE= and MT-PRIORITY= parameters on the MAIL FROM command. This allows the server to perform early rejection of a message in case the message size is too big for the specified priority, thus avoiding wasting bandwidth by transferring the message first and then rejecting it due to its size. The Priority Service Extension can be combined with the DELIVERBY [RFC2852] SMTP service extension; however, there is no requirement that both extensions always be implemented together.5.1. Expedited Transfer
The main service provided by the Priority Message Handling SMTP Service Extension is expedited transfer of emails with a higher priority. Therefore, an SMTP client that has more than one email to send at a given time sends those with a higher priority before those with a lower one. Additionally, the retry interval and/or default timeout before a non-delivery report is generated MAY be lower (more aggressive) for messages of higher priority. Lower retry intervals/ default timeouts are controlled by the local MTA policy. Note that as this SMTP extension requires some sort of trust relationship between a sender and a receiver and thus some form of authentication (whether using SMTP AUTH, TLS, IP address whitelist, etc.), so senders using this SMTP extension will not be subject to greylisting [RFC6647], unless they are unauthorized to use this SMTP extension due to an explicit policy decision or a misconfiguration error. However, note that in case of connection-level or SMTP EHLO/ HELO greylisting, SMTP AUTH or TLS authentication options are not available to the server. In order to make implementations of this extension easier, this SMTP extension only allows a single priority for all recipients of the same message. Within a priority level, the MTA uses its normal algorithm (the algorithm used in absence of this SMTP extension) for determining message processing order.
Several possible ways of implementing expedited transfer are described in more details in Appendix D. Note that these sections don't describe all details and pitfalls for each implementation strategy.5.2. Timely Delivery
An important constraint (usually associated with higher-priority levels) in some environments is that messages with high-priority values have some delivery time constraints. In some cases, higher priorities mean a shorter maximum time allowed for delivery. Unextended SMTP does not offer a service for timely delivery, i.e., "deliver this message within X seconds from submission" service. The "Deliver By SMTP Service Extension" (DELIVERBY Extension) defined in [RFC2852] is an example of an SMTP extension providing a service that can be used to implement timely delivery. Note that SMTP DELIVERBY and SMTP MT-PRIORITY extensions are complimentary and can be used together (assuming the SMTP server they are talking to advertises support for both). However, note that use of the DELIVERBY extension alone does not guarantee any priority processing. If the client is using both SMTP DELIVERBY and SMTP MT-PRIORITY at the same time, the client can consider using smaller DELIVERBY timeouts for higher- priority messages.6. Use of MT-PRIORITY with LMTP
An LMTP server can advertise support for the MT-PRIORITY extension if it supports any combination of the following features: 1. The LMTP server is architected in such a way that it can deliver higher-priority messages quicker than lower-priority messages. 2. The LMTP server logs that the MT-PRIORITY extension was used by the previous SMTP hop. 3. The LMTP server is exposing information about the MT-PRIORITY extension to a delivery-time filtering engine such as Sieve [RFC5228].
7. Syntax
priority-value = (["-"] NZDIGIT) / "0" ; Allowed values are from -9 to 9 inclusive NZDIGIT = %x31-39 ; "1"-"9" CFWS = <defined in RFC 5322> ; New "clause" that can be used in the Received header field Pri = CFWS "PRIORITY" FWS priority-value ; Complies with the <Additional-Registered-Clauses> ; non-terminal syntax from RFC 5321. mt-priority-ehlo = "MT-PRIORITY" [SP priority-profile] ; Complies with the <ehlo-line> ABNF production ; from RFC 5321. priority-profile = 1*20(ALPHA / DIGIT / "-" / "_" / ".") ; name of the Priority Assignment Profile advertized in ; the MT-PRIORITY EHLO response. ALPHA = <Defined in RFC 5234> DIGIT = <Defined in RFC 5234>
8. Example
The original submission (from MUA (Mail User Agent) to MSA) might appear as shown below. Note that the example is also making use of the STARTTLS [RFC3207], DELIVERBY [RFC2852], and DSN [RFC3461] SMTP extensions, even though there is no requirement that these other extensions be supported when the MT-PRIORITY SMTP extension is implemented. S: 220 example.com SMTP server here C: EHLO mua.example.com S: 250-example.com S: 250-STARTTLS S: 250-AUTH SCRAM-SHA-1 DIGEST-MD5 S: 250-DSN S: 250-DELIVERBY S: 250-ENHANCEDSTATUSCODES S: 250 MT-PRIORITY MIXER C: AUTH SCRAM-SHA-1 [...authentication exchange...] S: 235 2.7.0 Authentication successful C: MAIL FROM:<eljefe@example.com> BY=125;R ENVID=QQ314159 MT-PRIORITY=3 S: 250 2.1.0 <eljefe@example.com> sender ok C: RCPT TO:<topbanana@example.net> S: 250 2.1.5 <topbanana@example.net> recipient ok C: RCPT TO:<Dana@Ivory.example.net> NOTIFY=SUCCESS,FAILURE ORCPT=rfc822;Dana@Ivory.example.net S: 250 2.1.5 <Dana@Ivory.example.net> recipient ok C: DATA S: 354 okay, send message C: (message goes here) C: . S: 250 2.1.0 message accepted C: QUIT S: 221 2.0.0 goodbye In the above example, the MUA has specified the priority 3 and the server has accepted it. The server is advertising the MIXER Priority Assignment Policy (the default). Another variant of the initial submission might look like:
S: 220 example.com SMTP server here
C: EHLO mua.example.com
S: 250-example.com
S: 250-STARTTLS
S: 250-AUTH SCRAM-SHA-1 DIGEST-MD5
S: 250-DSN
S: 250-DELIVERBY
S: 250-ENHANCEDSTATUSCODES
S: 250 MT-PRIORITY
C: AUTH SCRAM-SHA-1
[...authentication exchange...]
S: 235 2.7.0 Authentication successful
C: MAIL FROM:<eljefe@example.com> BY=125;R ENVID=QQ314159
S: 250 2.1.0 <eljefe@example.com> sender ok
C: RCPT TO:<topbanana@example.net>
S: 250 2.1.5 <topbanana@example.net> recipient ok
C: RCPT TO:<Dana@Ivory.example.net> NOTIFY=SUCCESS,FAILURE
ORCPT=rfc822;Dana@Ivory.example.net
S: 250 2.1.5 <Dana@Ivory.example.net> recipient ok
C: DATA
S: 354 okay, send message
C: (message goes here)
C: .
S: 250 X.3.6 3 is the new priority assigned to the message
C: QUIT
S: 221 2.0.0 goodbye
In the above example, the MUA has not specified any priority, but the
MSA has assigned priority 3 to the message. Also note that the
server is unwilling to adverte the Priority Assignment Policy it
supports in the EHLO response.
The MSA relays the message to the next MTA.
S: 220 example.net SMTP server here
C: EHLO example.com
S: 250-example.net
S: 250-DSN
S: 250-DELIVERBY
S: 250 MT-PRIORITY STANAG4406
C: MAIL FROM:<eljefe@example.com> BY=120;R ENVID=QQ314159
MT-PRIORITY=3
S: 250 <eljefe@example.com> sender ok
C: RCPT TO:<topbanana@example.net>
S: 250 <topbanana@example.net> recipient ok
C: RCPT TO:<Dana@Ivory.example.net> NOTIFY=SUCCESS,FAILURE
ORCPT=rfc822;Dana@Ivory.example.net
S: 250 <Dana@Ivory.example.net> recipient ok
C: DATA
S: 354 okay, send message
C: (message goes here)
C: .
S: 250 message accepted
C: QUIT
S: 221 goodbye
The receiving SMTP server advertises support for the "STANAG4406"
Priority Assignment Policy, which supports 6 priority levels as
described in Appendix A. This means that the server will use the
priority value 4 internally (the next supported priority higher or
equal to 3) and will communicate the priority value 3 when relaying
it to the next hop (if necessary).
9. Deployment Considerations
9.1. Multiple MX Records
If multiple DNS MX records are used to specify multiple servers for a
domain in Section 5 of [RFC5321], it is strongly advised that all of
them support the MT-PRIORITY extension and handle priorities in
exactly the same way. If one or more servers behave differently in
this respect, then it is strongly suggested that none of the servers
support the MT-PRIORITY extension. Otherwise, unexpected differences
in message delivery speed or even rejections can happen during
temporary or permanent failures, which users might perceive as
serious reliability issues.
9.2. Priority Assignment Policies
This document allows up to 19 distinct priority values. In a particular operating environment, independent originators need to assign priority values according to, roughly, the same criteria, so that the same "high priority message" doesn't get associated with the value 3 for one sender and with the value 5 for another, as such messages might unintentionally receive different preferential treatment. In order to achieve consistent behavior in an operating environment, the Priority Assignment Policy (together with possible associated restrictions on maximum message sizes for each priority (if any), default timeouts, etc.) should be documented for the environment. Each SMTP/LMTP server supports a Priority Assignment Policy, whether explicit (advertised in the MT-PRIORITY EHLO response) or implicit (not advertised). The default Priority Assignment Policy (assumed by the client when no Priority Assignment Policy name is advertised in the MT-PRIORITY EHLO response) is specified in Appendix B. Two other policies are specified in Appendix A and Appendix C. Additional policies SHOULD be registered with IANA as specified in Section 10.1. Moreover, all MSAs/MTAs/MDAs within any given Administrative Management Domain has to be configured to use the same Priority Assignment Policy. Otherwise, a differently configured MSA/MTA/MDA can expose the whole domain to possible attacks, like injection of a high-priority fake DSN. When this SMTP extension is deployed across multiple cooperating Administrative Domains, such Administrative Domains need to use the same or at least compatible policies. Again, differences in policies (for example, differences in how users are authenticated or differences in how priorities are handled) can expose an Administrative Domain to weaknesses in a partner domain.10. IANA Considerations
IANA has added the MT-PRIORITY SMTP extension to the "SMTP Service Extensions" registry (http://www.iana.org/assignments/mail-parameters). This extension is suitable for the Submit port. IANA has added the following new Received header field clause to the "Additional-registered-clauses" sub-registry (http://www.iana.org/assignments/mail-parameters) to help with tracing email messages delivered using the MT-PRIORITY SMTP extension:
Clause name: PRIORITY
Description: Records the value of the MT-PRIORITY parameter specified
in the MAIL FROM command
Syntax of the value: See Section 7 of RFC 6710
Reference: RFC 6710
IANA has added the following Enumerated Status Codes to the "Simple
Mail Transfer Protocol (SMTP) Enhanced Status Codes" registry
(http://www.iana.org/assignments/smtp-enhanced-status-codes)
established by [RFC5248]:
1) Code: X.7.15
Sample Text: Priority Level is too low
Associated basic status code: 450, 550 (other 4XX or 5XX codes
are allowed)
Description: The specified priority level is below the lowest
priority acceptable for the receiving SMTP server. This
condition might be temporary, for example the server is
operating in a mode where only higher-priority messages are
accepted for transfer and delivery, while lower-priority
messages are rejected.
Reference: RFC 6710
Submitter: A. Melnikov
Change controller: IESG
2) Code: X.7.16
Sample Text: Message is too big for the specified priority
Associated basic status code: 552 (other 4XX or 5XX codes are
allowed)
Description: The message is too big for the specified priority.
This condition might be temporary, for example the server is
operating in a mode where only higher-priority messages below a
certain size are accepted for transfer and delivery.
Reference: RFC 6710
Submitter: A. Melnikov
Change controller: IESG
3) Code: X.3.6
Sample Text: Requested priority was changed
Associated basic status code: 250 or 251
Description: The message was accepted for relay/delivery, but
the requested priority (possibly the implied default) was not
honored. The human readable text after the status code
contains the new priority, followed by SP (space) and
explanatory human readable text.
Reference: RFC 6710
Submitter: A. Melnikov
Change controller: IESG
IANA has created a new IANA registry called "SMTP PRIORITY Extension
Priority Assignment Policy". Future registrations in this registry
are governed by the "Specification Required" [RFC5226] IANA
registration policy. Requirements on registrations (to be verified
by the Designated Expert) are specified in Section 10.1. Changes to
registrations undergo the same process as initial registrations. In
cases of significant changes to registrations (other than editorial
clarifications), the Designated Expert MAY require registration of a
Priority Assignment Policy with a new name instead of updating the
existing one.
10.1. Requirements on Priority Assignment Policy Registrations
Priority Assignment Policy registrations with IANA are accompanied by
a policy specification document that MUST specify the following
information:
1. The Priority Assignment Policy name, which is a case-insensitive
string of 1 to 20 US-ASCII characters to be advertised as the
MT-PRIORITY EHLO parameter. Allowed characters are: ALPHA,
DIGIT, "-", "_", and "."
2. Number of distinct priority levels supported by all servers
implementing the policy and their respective values.
3. For each supported priority level: default retry timeouts (how
often to retry sending a message if there is a temporary error to
transfer/deliver it). The policy specification can also
explicitly define such information as implementation and/or
deployment specific.
4. For each supported priority level: default expiration timeouts
(how long to attempt transfer/delivery before the message expires
and causes a non-delivery report to be generated). The policy
specification can also explicitly define such information as
implementation and/or deployment specific. Note that a client
can override such default when it uses additional SMTP extensions
(such as the one mentioned in Section 5.2).
5. Maximum message size associated with each priority level. The
policy specification can also explicitly define such information
as implementation and/or deployment specific.
6. Any requirements/restrictions on the kind of SMTP client
authentication required in order for an SMTP server implementing
this policy to accept priority values specified by an SMTP
client. For example, this can limit which Simple Authentication
and Security Layer (SASL) [RFC4422] authentication mechanisms are
to be used, require TLS, etc.
7. Any other information that might affect processing of messages
with different priorities.
8. Note that the policy specification document is not allowed to
redefine the allowed range of priorities specified in Section 5
and other aspects of handling of different priorities, unless
explicitly specified by this document.
10.2. Initial Priority Assignment Policy Registrations
IANA has registered the following initial values in the "SMTP
PRIORITY Extension Priority Assignment Policy" registry:
Initial Priority Assignment Policy Registrations
+-------------+------------------------+----------------+
| Policy Name | Reference | Comment |
+-------------+------------------------+----------------+
| MIXER | Appendix B of RFC 6710 | Default policy |
| STANAG4406 | Appendix A of RFC 6710 | |
| NSEP | Appendix C of RFC 6710 | |
+-------------+------------------------+----------------+
11. Security Considerations
Message Submission Agents ought to only accept message transfer
priorities from users (or only certain groups of such users) who are
authenticated and authorized in some way that's acceptable to the
MSA. As part of this policy, they can also restrict maximum priority
values that different groups of users can request, and can override the priority values specified by MUAs. Similarly, MTAs ought to only accept message transfer priorities from senders (or only certain groups of such senders) who are authenticated and authorized in some way that's acceptable to the MTA. As part of this policy, they can also restrict maximum priority values that different groups of senders can request, and can override the priority values specified by them. In the absence of the policy enforcement mentioned above, an SMTP server (whether an MSA or an MTA) implementing this SMTP extension might be susceptible to a denial-of-service attack. For example, malicious clients (MUAs/MSAs/MTAs) can try to abuse this feature by always requesting priority 9.12. References
12.1. Normative References
[RFC2033] Myers, J., "Local Mail Transfer Protocol", RFC 2033, October 1996. [RFC2034] Freed, N., "SMTP Service Extension for Returning Enhanced Error Codes", RFC 2034, October 1996. [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, March 1997. [RFC3461] Moore, K., "Simple Mail Transfer Protocol (SMTP) Service Extension for Delivery Status Notifications (DSNs)", RFC 3461, January 2003. [RFC5226] Narten, T. and H. Alvestrand, "Guidelines for Writing an IANA Considerations Section in RFCs", BCP 26, RFC 5226, May 2008. [RFC5234] Crocker, D., Ed. and P. Overell, "Augmented BNF for Syntax Specifications: ABNF", STD 68, RFC 5234, January 2008. [RFC5248] Hansen, T. and J. Klensin, "A Registry for SMTP Enhanced Mail System Status Codes", BCP 138, RFC 5248, June 2008. [RFC5321] Klensin, J., "Simple Mail Transfer Protocol", RFC 5321, October 2008.
[RFC5322] Resnick, P., Ed., "Internet Message Format", RFC 5322, October 2008. [RFC6409] Gellens, R. and J. Klensin, "Message Submission for Mail", STD 72, RFC 6409, November 2011.12.2. Informative References
[ACP123] CCEB, "Common Messaging strategy and procedures", ACP 123, May 2009. [PRIORITY-TUNNELING] Melnikov, A. and K. Carlberg, "Tunneling of SMTP Message Transfer Priorities", Work in Progress, July 2012. [RFC1845] Crocker, D., Freed, N., and A. Cargille, "SMTP Service Extension for Checkpoint/Restart", RFC 1845, September 1995. [RFC1870] Klensin, J., Freed, N., and K. Moore, "SMTP Service Extension for Message Size Declaration", STD 10, RFC 1870, November 1995. [RFC2156] Kille, S., "MIXER (Mime Internet X.400 Enhanced Relay): Mapping between X.400 and RFC 822/MIME", RFC 2156, January 1998. [RFC2205] Braden, B., Ed., Zhang, L., Berson, S., Herzog, S., and S. Jamin, "Resource ReSerVation Protocol (RSVP) -- Version 1 Functional Specification", RFC 2205, September 1997. [RFC2474] Nichols, K., Blake, S., Baker, F., and D. Black, "Definition of the Differentiated Services Field (DS Field) in the IPv4 and IPv6 Headers", RFC 2474, December 1998. [RFC2852] Newman, D., "Deliver By SMTP Service Extension", RFC 2852, June 2000. [RFC3207] Hoffman, P., "SMTP Service Extension for Secure SMTP over Transport Layer Security", RFC 3207, February 2002. [RFC4125] Le Faucheur, F. and W. Lai, "Maximum Allocation Bandwidth Constraints Model for Diffserv-aware MPLS Traffic Engineering", RFC 4125, June 2005.
[RFC4127] Le Faucheur, F., Ed., "Russian Dolls Bandwidth Constraints Model for Diffserv-aware MPLS Traffic Engineering", RFC 4127, June 2005. [RFC4190] Carlberg, K., Brown, I., and C. Beard, "Framework for Supporting Emergency Telecommunications Service (ETS) in IP Telephony", RFC 4190, November 2005. [RFC4412] Schulzrinne, H. and J. Polk, "Communications Resource Priority for the Session Initiation Protocol (SIP)", RFC 4412, February 2006. [RFC4422] Melnikov, A., Ed. and K. Zeilenga, Ed., "Simple Authentication and Security Layer (SASL)", RFC 4422, June 2006. [RFC5228] Guenther, P., Ed. and T. Showalter, Ed., "Sieve: An Email Filtering Language", RFC 5228, January 2008. [RFC5598] Crocker, D., "Internet Mail Architecture", RFC 5598, July 2009. [RFC6401] Le Faucheur, F., Polk, J., and K. Carlberg, "RSVP Extensions for Admission Priority", RFC 6401, October 2011. [RFC6647] Kucherawy, M. and D. Crocker, "Email Greylisting: An Applicability Statement for SMTP", RFC 6647, June 2012. [SMTP-PRI-OLD] Schmeing, M., Brendecke, J., and K. Carlberg, "SMTP Service Extension for Priority Message Handling", Work in Progress, August 2006. [STANAG-4406] NATO, "STANAG 4406 Edition 2: Military Message Handling System", STANAG 4406, March 2005.
Appendix A. Priority Assignment Policy for Military Messaging
Military Messaging as specified in ACP 123 [ACP123] (also specified in STANAG 4406 [STANAG-4406]) defines 6 priority ("precedence") values. While ACP 123/STANAG 4406 allow for 32 different priority levels (16 levels are reserved for NATO and an additional 16 are reserved for national use), only 6 are in use in practice. This section specifies the Priority Assignment Policy for Military Messaging and how the MT-PRIORITY parameter can be mapped when gatewaying between SMTP and ACP 123/STANAG 4406 environments. Where SMTP is used to support military messaging, the following mappings SHOULD be used. Recommended Mapping of MT-PRIORITY Values for MMHS +-------------------+----------------------+ | MT-PRIORITY value | MMHS Precedence name | +-------------------+----------------------+ | -4 | Deferred | | -2 | Routine | | 0 | Priority | | 2 | Immediate | | 4 | Flash | | 6 | Override | +-------------------+----------------------+ Table 1 The Priority Assignment Policy registration for Military Messaging is as follows: 1. The Priority Assignment Policy name is "STANAG4406". 2. Number of distinct priority levels: 6, as specified in the table above. 3. Default retry timeouts for each priority level are implementation and/or deployment specific. 4. Default expiration timeouts for each priority level are implementation and/or deployment specific. 5. Maximum message size associated with each priority level is implementation and/or deployment specific. 6. No restrictions on what kind of SMTP client authentication is required.
Appendix B. Priority Assignment Policy for MIXER
MIXER [RFC2156] defines the Priority header field with 3 values. This section specifies the Priority Assignment Policy for MIXER and how the MT-PRIORITY parameter can be mapped when used with MIXER. Where SMTP is used to support MIXER messaging, the following mappings SHOULD be used. Recommended Mapping of MT-PRIORITY Values for MIXER +-------------------+----------------------+ | MT-PRIORITY value | MIXER Priority value | +-------------------+----------------------+ | -4 | non-urgent | | 0 | normal | | 4 | urgent | +-------------------+----------------------+ Table 2 The Priority Assignment Policy registration for MIXER is as follows: 1. The Priority Assignment Policy name is "MIXER". 2. Number of distinct priority levels: 3, as specified in the table above. 3. Default retry timeouts for each priority level are implementation and/or deployment specific. 4. Default expiration timeouts for each priority level are implementation and/or deployment specific. 5. Maximum message size associated with each priority level is implementation and/or deployment specific. 6. No restrictions on what kind of SMTP client authentication is required.Appendix C. Priority Assignment Policy for National Security / Emergency Preparedness (NS/EP)
There are several forms of communication systems used during an emergency or disaster. The most well known form involves the many- to-one model of the general public contacting a public safety access point via 911/999/112 calls through the public telephone network.
Typically, these calls do not require authorization, nor do they invoke any prioritization. Another form of emergency communications involves a set of authorized users or nodes that use prioritized services to help establish and continue communication given limited available resources. [RFC4190] includes descriptions of several systems that have been developed to support National Security / Emergency Preparedness (NS/EP). These deployed systems require a form of authentication and have focused on prioritization of telephony-based services. They have also been designed as a binary form (on/off) of signaled priority communications. [RFC4412] includes examples of a more expansive view of NS/EP communications in which priority migrates from a single on/off bit value to one that comprises 5 priority values. This is shown in the cases of the Emergency Telecommunications Service (ETS) and Wireless Priority Service (WPS) Namespaces. Given a lack of pre-existing NS/EP values assigned for email, we follow the paradigm of the ETS and WPS Namespaces and recommend the 5 ascending values shown in the table below. +-------------------+------------------+ | MT-PRIORITY value | Relational Order | +-------------------+------------------+ | -2 | Lowest Priority | | 0 | ---------- | | 2 | ---------- | | 4 | ---------- | | 6 | Highest Priority | +-------------------+------------------+ The Priority Assignment Policy registration for NS/EP is as follows: 1. The Priority Assignment Policy name is "NSEP". 2. Number of distinct priority levels: 5, as specified in the table above. 3. Default retry timeouts for each priority level are implementation and/or deployment specific. 4. Default expiration timeouts for each priority level are implementation and/or deployment specific. 5. Maximum message size associated with each priority level is implementation and/or deployment specific.
6. No restrictions on what kind of SMTP client authentication is
required.
Appendix D. Possible Implementation Strategies
This appendix suggests some strategies to implement the SMTP
extension defined in this document. The list is not exhaustive.
This appendix and its subsections are Informative.
D.1. Probability
As the name suggests, probability involves increasing the chances of
obtaining resources without adversely affecting previously
established connections. One example would involve requesting
resources set aside for specific priority levels. If these
additional resources are exhausted, then the desired connection is
denied. Queues, new timers, or combinations thereof can be used to
facilitate the higher-priority requests, but the key is that
mechanisms focus on increasing the probability of message transfer.
D.2. Preemption of Sessions or Transactions
Preemption is a type of action that focuses only on a comparison of
priorities to determine if previously established transactions need
to be displaced in favor of higher-priority requests. If no
additional connection is possible, the client aborts a running
session for emails with lower priority no later than directly after
the current transaction. The client can even interrupt an active
transaction, and ought to do so if other constraints, such as
delivery time (as specified in the DELIVERBY SMTP extension
[RFC2852]), would be violated for the email with higher priority.
When interrupting an active transaction, the client ought to take the
total message size and the size of the transferred portion of the
message being interrupted into consideration. This preliminary
termination of sessions or transactions is called preemption.
If preemption of running transactions occurs, the client needs to
choose a transaction with the lowest priority currently processed.
If the client has an option (i.e., it is supported by the next-hop
MTA) to interrupt transactions in a way that allows them to be
restarted at the interruption point later, it ought to deploy it. An
example for a mechanism providing such a service is the "SMTP Service
Extension for Checkpoint/Restart" defined in [RFC1845].
If a client opts for the preemption of sessions instead of transactions, it needs to preempt the next session that reaches the end of a transaction.D.3. Resource Allocation Models
Adding prioritization to a design moves the subject away from a strictly best effort (and a first-come-first-served) model to one that includes admission control and resource allocation models. Over the years, a variety of work has been done within the IETF to specify resource allocations models. Examples include the Maximum Allocation Model [RFC4125], the Russian Dolls Model [RFC4127], and the Priority Bypass Model (Appendix A.3 of [RFC6401]). While we recognize that these various models have been designed for other protocols (i.e., MPLS and RSVP), an understanding of their design characteristics may be beneficial in considering future implementations of a priority SMTP service. In cases where the processing of high-priority messages by an MTA is not considered negligible and exceeds engineered expectations, then operators managing that MTA may be notified in some form (e.g., pushed alarm, polled status).Appendix E. Background on Design Choices
This section provides some background on design choices made during development of the MT-PRIORITY SMTP extension. The priority applies per message, rather than per recipient, in order to keep the protocol simpler and because of the expectation that it will be uncommon to need different priorities for different recipients on the same message. In cases where that is necessary, it can always be achieved by sending separate messages with the same content, segregating the recipients by desired message priority. The choice of the priority range -9 to 9 (as opposed to, say, 1 to 6, or 0 to 9) was made after taking the following into consideration: 1. Clearly, having multiple priority levels is the whole point of this extension. Existing implementations of similar functionality in MTAs are already using 3 levels. One of the use cases motivating this extension requires 6 levels, so at least 6 different values are required.
2. During discussions of this extension, several different use cases
were suggested that required differing numbers of priority
levels. Defining just the 6 priority levels needed in item 1,
above, would limit the extensibility for possible future use
cases. Therefore, this document is defining a wider range, which
allows implementations and deployments to add higher or lower
priority levels and to insert additional priority levels between
the recommended set of 6. This avoids the need to further extend
this extension just to have a few more priority levels.
3. It seems natural to use zero for the "normal" or default
priority, rather than picking some non-zero number and having the
priorities go up or down from there. This way, negative numbers
always represent priorities that are lower than normal, with
positive numbers as higher priorities.
Appendix F. Acknowledgements
This document copies lots of text from "SMTP Service Extension for
Priority Message Handling" [SMTP-PRI-OLD]. Therefore, the authors of
this document would like to acknowledge contributions made by the
authors of that document: Michael Schmeing and Jan-Wilhelm Brendecke.
Many thanks for input provided by Steve Kille, David Wilson, John
Klensin, Dave Crocker, Graeme Lunt, Alessandro Vesely, Barry Leiba,
Bill McQuillan, Murray Kucherawy, SM, Glenn Parsons, Pete Resnick,
Chris Newman, Ned Freed, and Claudio Allocchio.
Special thanks to Barry Leiba for agreeing to shepherd this document.
Authors' Addresses
Alexey Melnikov Isode Ltd 5 Castle Business Village 36 Station Road Hampton, Middlesex TW12 2BX UK EMail: Alexey.Melnikov@isode.com Ken Carlberg G11 1601 Clarendon Blvd, #203 Arlington, VA 22209 USA EMail: carlberg@g11.org.uk