Wietse Venema:
> Ralf, does this helpl?
Unfortunately, this would be suboptimal when a site has muliple MX hosts
(It may end up making connections to each of them).
Viktor's suggestion to skip the dane cache makes more sense.
Viktor, cache wshould terminate after "postfix reload".
> Wietse
>
> *** ./smtp_connect.c- 2018-06-04 19:21:21.000000000 -0400
> --- ./smtp_connect.c 2018-06-19 13:11:30.000000000 -0400
> ***************
> *** 671,676 ****
> --- 671,677 ----
> * matching sessions. Otherwise, request a dummy "TLS disabled" policy
> * for connection-cache lookup by request nexthop only.
> */
> + return (0);
> #ifdef USE_TLS
> if (!smtp_tls_policy_cache_query(why, state->tls, iter)) {
> msg_warn("TLS policy lookup error for %s/%s: %s",
>
