On Fri, Oct 02, 2026 at 08:14:07AM +0200, Hans-Martin Mosner via mailop wrote:
> Am 02.10.26 um 07:57 schrieb Viktor Dukhovni via mailop:
> > Your log level is too high, levels higher than 1 are not intended for
> > endusers.
>
> :-) I am an admin on that server - and the colleague who set the log level so
> high is even more so.
Apologies, from my Postfix developer perspective, MTA administrators are
(Postfix) endusers. :-)
> But thanks a lot for the detailed info, as I said, I'm not really
> familiar with the specifics of DANE.
In a configuration with:
smtp_dns_support_level = dnssec
smtp_tls_security_level = dane
Valid DNSSEC-signed remote MX host's DANE TLSA records are honoured in a
downgrade-resistant manner, so when they're usable (valid for SMTP) but
wrong, mail delivery tempfails for the MX host in question.
> I believe the basic issue (DANE configuration of magenta.de did not work)
> should be resolved regardless of my incomplete understanding unless it is
> actually a non-issue :-)
Correct, if the MTA operators for "magenta.de" are not on this list,
then you might want to contact them directly, the SOA with the rname
mapped to an email address format is:
magenta.de. IN SOA ns1.telekom-domains.de. [email protected] ...
The web site also lists <[email protected]>. I don't know whether
the contact forms at
<https://www.telekom.de/kontakt/kontaktformular?execution299370=e5s1>
are an effective way to reach someone who can address the issue.
--
Viktor. 🇺🇦 Слава Україні!
_______________________________________________
mailop mailing list
[email protected]
https://list.mailop.org/listinfo/mailop
