Viktor Dukhovni:
> On Wed, Sep 03, 2014 at 02:25:06PM +0200, Robert Sander wrote:
>
> > Sep 3 14:18:47 mailout1 postfix/smtp[30772]: warning: DANE TLSA lookup
> > problem: Host or domain name not found. Name service error for
> > name=_25._tcp.mail2.clarion-hotels.cz type=TLSA: Host not found, try again
>
> > $ host -t tlsa _25._tcp.mail2.clarion-hotels.cz
> > _25._tcp.mail2.clarion-hotels.cz is an alias for clarion-hotels.cz.
>
> I don't see a CNAME, I get SERVFAIL:
Actually, this depends on your resolver. Search your favorite
search engine for "DNSSEC wildcard".
Many resolvers don't support this.
Wietse
