Coming back to my issue with out primary mail relay.
dig gives me the ad flag so my resolving chain should be fine.
; <<>> DiG 9.9.5-3ubuntu0.1-Ubuntu <<>> +dnssec
mail.sys4.de +m
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 56266
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;; ANSWER SECTION:
20150124160722 20150117064917 17338
sys4.de.
Tsl3NL+5vhXz4MOHXwSkJcGPjGJmTOl8Xq4R10nv7gfa
yy9oimSaVsOeVfQ+FWNOFYV7wL1aoOT+Ltlhgp15hEjx
S/RmEL+OHacpD++6cM0f9SiJLi9k+wEHqv+onAEj5tqR
0TpitmXvhBFjEqph+N673gMK3+lNfd/j7kTi1HY= )
But if i send an email to the list, i still get no „Verified“ in my postfix log.