Postfix Users - EDNS / DANE trouble with Microsoft mail.protection.outlook.com.
EDNS / DANE trouble with Microsoft mail.protection.outlook.com.
certain domains, for instance [hidden email].
SERVFAIL and caused the lookup to fail.
But that's obviously not the right solution.
anything changed on our side.) Running postfix 3.1.0-3 (Ubuntu Xenial) here.
EDNS, is this issue something postfix should handle?
- Should postfix retry the query without EDNS on unexpected errors?
- Should the default smtp_tls_dane_insecure_mx_policy be set to 'dane'?
cause this kind of miscommunication?
Re: EDNS / DANE trouble with Microsoft mail.protection.outlook.com.
> domains, for instance [hidden email].
local resolver. What resolver is that? And how is it configured?
> caused the lookup to fail.
resolver is expected to fall back to non-EDNS queries.
resolver, it does control the options on the next hop query.
> flag and that killed our interoperability with the Microsoft Office 365 DNS.
> is this issue something postfix should handle?
The problem is your resolver.
> - Should postfix retry the query without EDNS on unexpected errors?
Awesome Viktor! Thanks for your speedy response.
>> domains, for instance [hidden email].
> local resolver. What resolver is that? And how is it configured?
> query for TLSA records.
@remote-dns in the example was merely to clarify.
powerdns recursor, version 4.0.0~alpha2 if I'm not mistaken.
> >local resolver. What resolver is that? And how is it configured?
> >query for TLSA records.
> @remote-dns in the example was merely to clarify.
> powerdns recursor, version 4.0.0~alpha2 if I'm not mistaken.
> hasn't been fixed already.
are expected to behave in the manner you observed with bind9.
>> powerdns recursor, version 4.0.0~alpha2 if I'm not mistaken.
>> hasn't been fixed already.
> are expected to behave in the manner you observed with bind9.
indeed a bug in pdns-recursor 4.0.0~alpha2-2 on Ubuntu/Xenial.
It looks like of Debian and Ubuntu, only Ubuntu/Xenial (LTS) is affected.
9d534f2a and the former didn't appear affected by this).