Hello,
I’ve been having an increase in emails being returned with:

: TLSA lookup error for subdomain.domain.tld:25--

The subdomain.domain.tld is NOT my domain, it’s the destination.

Adding the exception to TLS policy maps in the Configuration menu works.
However I find strange that I’m getting quite a LOT of them.

Is there anything I can do?

Thank you!

I am making the same experience. Could you go into details what TLS policy map exactly you added?

Having errors like:

May 25 21:30:12 b779b8dac633 postfix/smtp[78442]: warning: DANE TLSA lookup problem: Host or domain name not found. Name service error for name=_25._tcp.mail3.dbtg.de type=TLSA: Host not found, try again
May 25 21:30:12 b779b8dac633 postfix/smtp[78442]: warning: TLS policy lookup for bundestag.de/mail3.dbtg.de: TLSA lookup error for mail3.dbtg.de:25

I added a policy for .dbtg.de with policy may (tried also none). However, the error stays.

Thanks!

    Have something to say?

    Join the community by quickly registering to participate in this discussion. We'd like to see you joining our great moo-community!

    Horus the policy I added was ENCRYPT.

    That’s exactly the issue I’m having.

      Oh! Thank you so much that fixed the issue.

      Updating docker to 24.0.2 actually (probably they released another minor updated).
      It also fixed another issue with failing DNS lookups, thanks!

      No one is typing