From e35fccc90c5e39037fb330d2e01465165efa7b5c Mon Sep 17 00:00:00 2001 From: "A. Schippers" Date: Fri, 8 May 2020 08:35:45 +0200 Subject: [PATCH] Update management/dns_update.py Co-authored-by: Daniel Mabbett --- management/dns_update.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/management/dns_update.py b/management/dns_update.py index 92a40509..fd53b4da 100755 --- a/management/dns_update.py +++ b/management/dns_update.py @@ -320,7 +320,7 @@ def build_zone(domain, all_domains, additional_records, www_redirect_domains, en response = check_certificate(env['PRIMARY_HOSTNAME'], get_prim_cert['certificate'],get_prim_cert['private-key']) # we don't want those records on the primary hostname # and we only want these records if the certificate is valid - if response[0] == 'OK': + if response[0] == 'OK' and domain in get_mail_domains(env): mta_sts_records = [ ("mta-sts", "A", env["PUBLIC_IP"], "Provides MTA-STS support"), ("mta-sts", "AAAA", env.get('PUBLIC_IPV6'), "Provides MTA-STS support"),