On Fri, 11 Jul 2014 16:00:57 -0700 Quanah Gibson-Mount wrote: > --On Friday, July 11, 2014 4:44 PM -0700 John Hardin > <jhar...@impsec.org> wrote: > > > Prod also misses DKIM_SIGNED and SPF_HELO_PASS. Network tests > > disabled, maybe? > > Nope. Found the issue however. > > On my prod servers, I had the following set: > > dns_available test: 10.110.0.108 10.110.0.109 10.210.0.166 > > which are the IP addresses for my DNS servers.
Those are supposed to domains to look-up as a test, not the IP addresses of DNS servers. > Unfortunately, with > this line, SA always decides I don't have DNS for reasons that are > beyond me, It's clearly documented on the man page.