FW: Validation failure signature crypto failed
j.backus at bugworks.com
Tue Jan 24 15:44:29 UTC 2017
I have a FreeBSD server with Unbound .1.5.7 as a resolver.
I use Postfix for mail and postfix-policyd-spf-perl to check spf.
My problem is, that mail from a certain domain is refused.
When I test, I see this:
# perl /usr/local/libexec/postfix-policyd-spf-perl
sender=j.doe at acme.com
recipient=me at company.com
action=DEFER_IF_PERMIT SPF-Result=mail.acme.com: 'SERVFAIL' error on DNS 'TXT' lookup of 'mail.acme.com'
This is in unbound.log:
Reason for the SERVFAIL:
Jan 24 13:44:25 unbound[487:0] info: response for mail.acme.com. TXT IN
Jan 24 13:44:25 unbound[487:0] info: reply from <acme.com.> 220.127.116.11#53
Jan 24 13:44:25 unbound[487:0] info: query response was ANSWER
Jan 24 13:44:25 unbound[487:0] info: Validate: message contains bad rrsets
Jan 24 13:44:25 unbound[487:0] info: validation failure <mail.acme.com. TXT IN>: signature crypto failed from 18.104.22.168
Is this a valid SERVFAIL?
Could some help me? Thanks.
With kind regards,
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Unbound-users