20 Jan
2015
20 Jan
'15
1:51 p.m.
Andreas Schulze skrev den 2015-01-20 13:08:
Am 20.01.2015 11:48 schrieb Frank Fiene:
dig gives me the ad flag so my resolving chain should be fine. But if i send an email to the list, i still get no „Verified“ in my postfix log.
smtp_dns_support_level = dnssec ? smtp_tls_security_level = dane ?
and in named.conf
dnssec-enable yes; dnssec-lookaside auto; dnssec-validation auto;
2 last options must not be yes, this will disable dane, with auto dane works
in resolv.conf only have nameserver 127.0.0.1
and bind9 must not have any forwarders !