Help with TLSA lookup error when sending emails.

apintocr

Hello,
I’ve been having an increase in emails being returned with:

: TLSA lookup error for subdomain.domain.tld:25--

The subdomain.domain.tld is NOT my domain, it’s the destination.

Adding the exception to TLS policy maps in the Configuration menu works.
However I find strange that I’m getting quite a LOT of them.

Is there anything I can do?

Thank you!

Horus

I am making the same experience. Could you go into details what TLS policy map exactly you added?

Having errors like:

May 25 21:30:12 b779b8dac633 postfix/smtp[78442]: warning: DANE TLSA lookup problem: Host or domain name not found. Name service error for name=_25._tcp.mail3.dbtg.de type=TLSA: Host not found, try again
May 25 21:30:12 b779b8dac633 postfix/smtp[78442]: warning: TLS policy lookup for bundestag.de/mail3.dbtg.de: TLSA lookup error for mail3.dbtg.de:25

I added a policy for .dbtg.de with policy may (tried also none). However, the error stays.

Thanks!

apintocr

Horus the policy I added was ENCRYPT.

That’s exactly the issue I’m having.

accolon

Are you using Docker 24.0.0? This version has DNS lookup issues, see:
mailcow/mailcow-dockerized5247
mailcow/mailcow-dockerized5239

You should update Docker to 24.0.1 which fixes those problems.

apintocr

Oh! Thank you so much that fixed the issue.

Updating docker to 24.0.2 actually (probably they released another minor updated).
It also fixed another issue with failing DNS lookups, thanks!