postbank.de / dslbank.de

[Benny Pedersen]

On 2016-02-02 12:43, Andreas Schulze wrote:

> $ postconf smtp_tls_security_level
> smtp_tls_security_level = dane

http://blog.weetech.co/2014/11/implementing-dnssec-and-dane-for-email.html

postconf -e "smtp_dns_support_level = dnssec"
postconf -e "smtp_tls_security_level = dane"

> $ dig _25._tcp.mailrelay1.bonn.postbank.de tlsa
> 
> ...
> ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 20811
> ;_25._tcp.mailrelay1.bonn.postbank.de. IN TLSA

why serv fail here ?

enable lame logs in bind9

i dont use unbound