Am 02.02.2016 um 18:14 schrieb Benny Pedersen: >> $ dig _25._tcp.mailrelay1.bonn.postbank.de tlsa >> >> ... >> ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 20811 >> ;_25._tcp.mailrelay1.bonn.postbank.de. IN TLSA > > why serv fail here ? > > i dont use unbound
a feature in unbound called "0x20 capitalisation" was the reason we now add an exeption to unbound and get also NXDOMAIN see https://unbound.net/pipermail/unbound-users/2016-February/004192.html unbound.conf: server: caps-whitelist: postbank.de (require unbound-1.5.4 or newer) -- A. Schulze DATEV eG
