On Thu, May 18, 2023 at 09:22:34PM +0900, Byung-Hee HWANG via Postfix-users wrote: > Byung-Hee HWANG via Postfix-users <postfix-users@postfix.org> writes: > > > Now i added DNSSEC. Currently it is being registra job. 10 minutes ago, > > i did make some DS record at Cloudfalre. > > > > Thanks to Joachim, Patrick and raf ^^^ > > And now i added TLSA record for only *outbond* smtp server, > <<yw-1204.doraji.xyz>>. I read Patrick's blog[1]. Still i'm not sure my > setting is OK. > > And i did update(add) tls_policy: > <quote: /etc/postfix/tls_policy> > debian.org dane > .debian.org dane > postfix.org dane-only > sys4.de dane-only > dukhovni.org dane-only > </quote> > > > [1] https://blog.sys4.de/blog/outbound-dane/ >
Ah now i see log as *OK* signal: <quote> yw-1204 postfix/smtp[27985]: Verified TLS connection established to list.sys4.de[188.68.34.52]:25: TLSv1.3 with ... </quote> Wow! Now i'm DANE user!! And i added <<raf.org>> at tls_policy as dane-only. Thanks, Byung-Hee from South Korea _______________________________________________ Postfix-users mailing list -- postfix-users@postfix.org To unsubscribe send an email to postfix-users-le...@postfix.org
