Postfix-Frage

[Benny Pedersen]

Andreas Schulze skrev den 2015-01-20 13:08:
> Am 20.01.2015 11:48 schrieb Frank Fiene:
>> dig gives me the ad flag so my resolving chain should be fine.
>> But if i send an email to the list, i still get no „Verified“ in my 
>> postfix log.
> smtp_dns_support_level = dnssec ?
> smtp_tls_security_level = dane ?

and in named.conf

	dnssec-enable yes;
	dnssec-lookaside auto;
	dnssec-validation auto;

2 last options must not be yes, this will disable dane, with auto dane 
works

in resolv.conf only have nameserver 127.0.0.1

and bind9 must not have any forwarders !