Unable to send e-mail to a specific domain

[isaqellari]

Hello,

I am unable to send emails to a specific domain, exactly to domain name domain2.com.
In exim mainlog I found the some error messages as below:

" 2020-09-18 12:19:44 1kJDUU-00007b-SW H=$domain1.com [ip.add.re.ss]: DANE error: tlsa lookup DEFER
2020-09-18 12:19:44 1kJDUU-00007b-SW H=$domain1.com [ip.add.re.ss]: DANE error: tlsa lookup DEFER
2020-09-18 12:19:44 1kJDUU-00007b-SW H=$domain1.com [ip.add.re.ss]: DANE error: tlsa lookup DEFER
2020-09-18 12:19:44 1kJDUU-00007b-SW H=$sub.domain1.com [ip.add.re.ss]: DANE error: tlsa lookup DEFER
2020-09-18 12:19:44 1kJDUU-00007b-SW H=$sub.domain1.com [ip.add.re.ss]: DANE error: tlsa lookup DEFER
2020-09-18 12:19:44 1kJDUU-00007b-SW == [email protected]$domain2.com <[email protected]$domain2.com> R=dkim_lookuphost T=dkim_remote_smtp defer (-36): DANE error: tlsa lookup DEFER "

Can someone please help me ?

BR,
Ilir

[Moderator note: removed identifying information.]

 

[cPSamuelM]

Hello @isaqellari

It appears your message is not able to be delivered because the recipient expects there to be a TLSA record for the HELO name your server uses when sending mail. cPanel and WHM currently do not include official support for generating or managing TLSA records, but they can be created manually.

You might find the following 3rd party tools helpful for generating the required TLSA record:

https://www.huque.com/bin/gen_tlsa
https://ssl-tools.net/tlsa-generator

After installing your TLSA record, the following 3rd party tool can be used to validate the record:

https://dane.sys4.de/

I hope you find this helpful.

Note, we have an open feature request to incorporate native ability to generate and install TLSA records. I encourage you to express your interest here:

https://features.cpanel.net/topic/dane-and-tlsa