On Sun, Aug 23, 2015 at 06:06:03PM +0300, Elod G wrote: > I am trying to configure opportunistic DANE for the SMTP client on an Ubuntu > 14.04 box. The problem is I cannot get 'Verified' status for any of the > servers I tried connecting to.
Configure and use a DNSSEC validating resolver on 127.0.0.1 as
your sole nameserver in /etc/resolv.conf (and chroot copy).
> smtp_dns_support_level = dnssec
The iterative resolver needs to support DNSSEC.
--
Viktor.
