DANE error: tlsa lookup DEFER

reddot

• March 04, 2020 21:09

I am getting quite a number of emails that cannot be sent since 26 Feb 2020. In exim_mainlog, the error is shown as "DANE error: tlsa lookup DEFER". When I check the domain using DANE SMTP Validator, it says no TLSA records. Even for a domain with TLSA record, my server still cannot send to it. Please advise what could be wrong.

• 

  cPanelLauren

  • March 05, 2020 23:33

  Hello, This is a DNS record that you'd need to add, cPanel does not presently have support for these records to be added through the Zone Editor. There is a feature request here:

  0
• 

  chengkinhung

  • March 24, 2020 10:07

  Hi, reddot, did you solve this issue ? I have encounter this issue too. I notice this issure only happen in one cPanel server, I have not idea why Exim try to check the DNSSEC, by default it should not.

  0
• 

  chengkinhung

  • March 24, 2020 10:44

  Hi, sorry, my mistake. Exim did not do this checking, but DNS resolver do this checking. In my case, I am using google DNS 8.8.4.4, and since from 20130506, google DNS enabled the DNSSEC. so for me, this issue solved, as my recipient domain indeed failed DNSSEC checking. Thanks.

  0
• 

  Alternative Hosting

  • July 10, 2022 16:26

  Hello, This is a DNS record that you'd need to add, cPanel does not presently have support for these records to be added through the Zone Editor. There is a feature request here:

  0
• 

  cPRex Jurassic Moderator

  • July 11, 2022 16:05

  @Alternative Hosting - I see the manager of the Domains development area replied to the other thread just a few minutes ago, so it's likely best to keep the discussion there to avoid confusion.

  0
• 

  anton_latvia

  • April 03, 2025 06:32

  We need a way to add TLSA records.

  0
• 

  cPRex Jurassic Moderator

  • April 03, 2025 15:28

  We've received several requests for TLSA records so I've created case CPANEL-46601 so our team can look into adding this functionality!

  0

Please sign in to leave a comment.