Stalwart's resolver is doing its own DNSSEC validation that no resolver choice disables, and it's wrongly flagging the (legitimate, unsigned) NODATA AAAA as bogus

Issues
1

Issue Description

Stalwart’s resolver is doing its own DNSSEC validation that no resolver choice disables, and it’s wrongly flagging the (legitimate, unsigned) NODATA AAAA as bogus

Stalwart Version

v0.16.x

Installation Method

Binary (Linux)

Database Backend

RocksDB

Blob Storage

RocksDB

Search Engine

Internal

Directory Backend

Internal

I have reviewed the documentation and FAQ and confirm that my issue is NOT addressed there.

on

I have searched this support forum (open and closed topics) and confirm this is not a duplicate.

on

I understand that topics in this category are triaged by a bot first but a human reply will follow up. If I’d prefer a human-only reply, I’ll add the no-ai tag to my topic.

on

2

image
image2382×1522 328 KB

Check image for error

3

Also reported in Not able to send emails to certain domains due to DNSSEC error and noted that 0.16.9 does not have the issue while 0.16.10 does.

4

yes, you’re right, I’ve to use smtp relay ip address instead of hostname to bypass this error.