On Mon, Sep 30, 2024 at 09:38:46AM -0400, Steve Matzura via Postfix-users wrote:
> When I do it, I get:
>
> posttls-finger: warning: DNSSEC validation may be unavailable
> posttls-finger: warning: reason: dnssec_probe 'ns:.' received a response
> that is not DNSSEC validated
Your DNS resolver (as configured in /etc/resolv.conf or equivalent) is
not a DNSSEC-validating resolver. Either install a validating local
resolver and configure 127.0.0.1 as the only IP in /etc/resolv.conf,
or, otherwise set:
smtp_dns_support_level = enabled
smtp_tls_security_level = may
rather than:
smtp_dns_support_level = dnssec
smtp_tls_security_level = dane
--
Viktor.
_______________________________________________
Postfix-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
