Thanks for the feedback!
Thought I posted a reply but dont see it here so here I go again:
resolvectl status
Global
Protocols: -LLMNR -mDNS -DNSOverTLS DNSSEC=no/unsupported
resolv.conf mode: foreign
DNS Servers: 127.0.0.1 ::1
Fallback DNS Servers: 1.1.1.1...
Thanks LD,
Yes I have added the lines as recommended to Postfix config. Seems to work but Spamhaus now wants $600 per year......
How can you make sure the system us using it's own bind DNS server. Thought this was standard in Plesk but appearantly not so.
We are using the paid version of Plesk Security Extension Pro and want to use Spamhaus in the BL settings.
I dont see a way to enter the mandatory DQS key and can't find anything online about it.
Spamhaus suggests to add lines to the postfix config but I am not sure this will remain after...