From b5ff8b5952fc3aa3140448c7a066bd2cae6d5243 Mon Sep 17 00:00:00 2001
From: mdecimus <11444311+mdecimus@users.noreply.github.com>
Date: Mon, 16 Feb 2026 17:51:48 +0000
Subject: [PATCH] MTA: Do not include list expansions in RCPT counts

---
 crates/smtp/src/inbound/rcpt.rs | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/crates/smtp/src/inbound/rcpt.rs b/crates/smtp/src/inbound/rcpt.rs
index a39a0975..dbd7cf96 100644
--- a/crates/smtp/src/inbound/rcpt.rs
+++ b/crates/smtp/src/inbound/rcpt.rs
@@ -46,7 +46,8 @@ impl<T: SessionStream> Session<T> {
                 SpanId = self.data.session_id,
             );
             return self.write(b"503 5.5.1 MAIL is required first.\r\n").await;
-        } else if self.data.rcpt_to.len() >= self.params.rcpt_max {
+        } else if std::cmp::min(self.data.rcpt_to.len(), self.data.rcpt_oks) >= self.params.rcpt_max
+        {
             trc::event!(
                 Smtp(SmtpEvent::TooManyRecipients),
                 SpanId = self.data.session_id,