Skip to main content

DANE error: tlsa lookup DEFER

reddot
I am getting quite a number of emails that cannot be sent since 26 Feb 2020. In exim_mainlog, the error is shown as "DANE error: tlsa lookup DEFER". When I check the domain using DANE SMTP Validator, it says no TLSA records. Even for a domain with TLSA record, my server still cannot send to it. Please advise what could be wrong.

Comments

13 comments

Date Votes
  • cPanelLauren
    Hello, This is a DNS record that you'd need to add, cPanel does not presently have support for these records to be added through the Zone Editor. There is a feature request here:
    0
  • chengkinhung
    Hi, reddot, did you solve this issue ? I have encounter this issue too. I notice this issure only happen in one cPanel server, I have not idea why Exim try to check the DNSSEC, by default it should not.
    0
  • chengkinhung
    Hi, sorry, my mistake. Exim did not do this checking, but DNS resolver do this checking. In my case, I am using google DNS 8.8.4.4, and since from 20130506, google DNS enabled the DNSSEC. so for me, this issue solved, as my recipient domain indeed failed DNSSEC checking. Thanks.
    0
  • Alternative Hosting
    Hello, This is a DNS record that you'd need to add, cPanel does not presently have support for these records to be added through the Zone Editor. There is a feature request here:
    0
  • cPRex Jurassic Moderator
    @Alternative Hosting - I see the manager of the Domains development area replied to the other thread just a few minutes ago, so it's likely best to keep the discussion there to avoid confusion.
    0
  • anton_latvia

    We need a way to add TLSA records.

    0
  • cPRex Jurassic Moderator

    We've received several requests for TLSA records so I've created case CPANEL-46601 so our team can look into adding this functionality!

    1
  • AzeDK

    cPRex any progress on CPANEL-46601 ? as in, are they still doing research, or is it being worked on with a planned ETA? We still get this request more often lately, due to concerns of ongoing security worries.

    0
  • cPRex Jurassic Moderator

    I don't have any updates yet.  I've reached out to the team and I'm hoping to have some better information later this week.

    0
  • cPRex Jurassic Moderator

    Right now it doesn't look like this is a priority with everything being focused on Meridian.  I'm still hopeful we can make this happen at some point sooner than later, but I don't have any concrete timeframe at this point.

    0
  • Anton Aleksandrov

    Superb... Any option to get priority on things we actually need, rather than what designers want? :) Thread was created 6 years ago... cPRex - it would be more honest to just say "no, we don't care"...

    0
  • cPRex Jurassic Moderator

    I wouldn't say it's that we don't -  I'm here everyday fighting for you guys and trying to get things on the development team's radar.  It's just when the total action after 6 years is only a few posts, that isn't going to trigger any priority development.

    What if I made a feature card for this over at features.cpanel.net and we could see if it got more attention that way?

    0
  • Anton Aleksandrov
    • Edited

    Well, it was nothing personal @cpRex, but this is one small thing amongst many other small things which we are not getting. It is really hard to tell how many we ask for, but we have features that we've been asking for and denied, features that we need every week. Instead, we are getting a new user interface, which, honestly, we don't need that much. It makes the cpanel look a little bit more modern, but what we, as a hosting company, need is technical stuff that is made up of many small features.

    It is really sad to hear that you have to fight with the developers instead of developers coming to us, coming to hosting companies, and asking, "Guys, what do you need?" Your developers should be sitting next to me as asking how they could improve my life and make me more happy with their product. That is the crucial difference, because it is us paying for the product, paying for the salary, and actually using the product. It's not about our customers. It's about us - hosting companies, because we are in the middle. We are dealing with problems, technical issues, and configuration stuff.

    If you would know what we miss, you might laugh, because how simple and insignificant those might sound, but these things are what we are dealing with every week. A very bright example is a feature which allows you to convert a domain to a separate account. We use it every week, but we also need, and we've been asking for this feature for years, a feature to combine two accounts into one. Maybe we need to move an add-on domain from one customer to another, or maybe we want to convert a parked domain into an add-on domain without going through the process of deleting the domain, deleting the DNS zone, and recreating everything. Imagine having custom records and having 10 domains for a customer who asks for this.

    If we talk about this particular feature, I would suppose that many of us have never heard about it, but if you read about it, you would say, "Yes, it is something interesting and probably would be useful to have, a pure technical thing that is not seen by most." Since we are dealing with spam and mail, it is important to have it. It is important for you, as a market leader, to give it to us and educate us about new stuff coming in and say to us, "Hey, we have this ready for you. This is something new. This is the future, and we have you covered," rather than, after 6 years, figuring out it's not a priority. If the technology was there for 6 years, come on, what are we talking about? 

    1

Please sign in to leave a comment.

Didn't find what you were looking for?

New post