feat(smtp_relay): ingest probe_forwarded as probe_relay bounty

Adds probe_forwarded to meaningful event kinds and stores it in the
bounty table as bounty_type=probe_relay with forwarded=true/false, so
the dashboard shows whether the upstream actually accepted the test email.
This commit is contained in:
2026-04-30 11:32:14 -04:00
parent 9a4fe2677b
commit 24cdef9246
2 changed files with 19 additions and 0 deletions

View File

@@ -41,6 +41,10 @@ INTERACTION_EVENT_TYPES: frozenset[str] = frozenset({
"rcpt_to",
"rcpt_denied",
"message_accepted",
# probe_forwarded fires when we actually relay the test email upstream
# so the attacker can verify receipt. forwarded=1 means the upstream
# accepted it; forwarded=0 means it failed (but the attacker still got 250).
"probe_forwarded",
# File / payload activity
"file_captured",
"upload",