Hello,
i’m trying to setup TLSA DNS record, according to https://community.mailcow.email/d/3366-tlsa-dns-setup expected result (on DNS modal) is green check, i got “0 0 0”
I tried to check DANE on https://www.huque.com/bin/danecheck using settings:
Port: 25
Domain name: {{mailcow_hostname}}
StartTLS app: smtp
Got a success: “DANE Authentication Successful.” “[0] Authentication succeeded for all (2) peers.” (ipv4 + ipv6)
Also tried https://internet.nl/ result is
DANE existence - Verdict: All your mail server domains provide a TLSA record for DANE.
DANE validity close - Verdict: Each of your mailservers has at least one valid DANE fingerprint. This allows sending mail servers that support DANE verification to set up an authenticated encrypted transport connection with your receiving mail servers.
Not sure what is wrong, any suggestions?