Mailing List Archive

pinning MX hosts in the absence of DANE/DNSSEC
Hi all,
I have DNSSEC/DANE validation set up, but there are a number of domains I send to quite a bit that are not DNSSEC-signed. For a small subset of these domains (like gmail.com) I'd like to manually pin the MX hosts. Is there a good way to do this in Exim? Something functionally equivalent to Postfix's smtp_tls_policy_maps option.
--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/
Re: pinning MX hosts in the absence of DANE/DNSSEC [ In reply to ]
On 25/01/2019 19:15, sqit via Exim-users wrote:
> I have DNSSEC/DANE validation set up, but there are a number of domains I send to quite a bit that are not DNSSEC-signed. For a small subset of these domains (like gmail.com) I'd like to manually pin the MX hosts. Is there a good way to do this in Exim?

A manualroute router, before your general external-domains dnslookup
router.
--
Cheers,
Jeremy

--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/