Luca vom Bruch via Postfix-users:
> The log message when using postfix-tlspol
> Evaluated policy for "learndmarc.com": dane-only (from cache, 15m2s
> remaining)

postfix-tlspol says that TLSA records must be used. And I can
confirm that they exist. Command:

> And mail log:
> to=<ld-879a626...@learndmarc.com>, relay=none, delay=0.64,
> delays=0.1/0.02/0.51/0, dsn=4.7.5, status=deferred (no TLSA records found)

Apparently you don't have DNSSEC support. Postfix should log a
warning about that. Unfortunately, Some systems log 'info' and
'warning' to different files which complicates trouble shooting.

On the Postfix side, set smtp_dns_support_level = dnssec.

        Wietse
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to