:openstreetmap:257:\000\005\151\163\163\165\145\154\145\164\163\145\156\143\162\171\160\164\056\157\162\147
-# Make the virtual machine the primary MX with Bytemark as backup
+# Make the virtual machine the primary MX
@openstreetmap:212.110.172.32:a:10
@noreply.openstreetmap::a.mx.openstreetmap:10
3a.mx.openstreetmap:200141c9000104000000000000000032
+# Delegate MTA-STS policy for subdomains
+
+Cmta-sts.noreply.openstreetmap:mta-sts.openstreetmap
+Cmta-sts.otrs.openstreetmap:mta-sts.openstreetmap
+Cmta-sts.messages.openstreetmap:mta-sts.openstreetmap
+
# Publish an SPF record indicating that only shenron sends mail
# https://anders.com/projects/sysadmin/djbdnsRecordBuilder/
+shenron.openstreetmap:212.110.172.32
+mail.openstreetmap:212.110.172.32
++mta-sts.openstreetmap:212.110.172.32
+lists.openstreetmap:212.110.172.32
+svn.openstreetmap:212.110.172.32
+trac.openstreetmap:212.110.172.32
+vipertooth.openstreetmap:176.122.99.101
3vipertooth.openstreetmap:2001067c2d4000000000000000000065
+tuatara.openstreetmap:114.23.141.203
+3tuatara.openstreetmap:24061e00b4100c24529a4cfffe79bc3b
+waima.openstreetmap:103.197.61.160
+nidhogg.openstreetmap:130.236.254.221
3nidhogg.openstreetmap:200106b00017f0a000000000000000dd