Each of my domain's are listed as unable to properly resolve in the TLS/SSL status page. They resolve "mail.n7cky.com" to the local server ip of 10.0.0.41. Which is correct for internal queries. But I think it wants to see the NAT'ed IP instead? Not sure why, because the internal MIAB server could not use that IP anyway, as it is behind the firewall doing the NAT (hair pinning NAT isn't allowed).
My DNS for each domain is run on separate BIND name servers, so I am technically not using MIAB for internal or external resultion, but the BOX ought to beable to provide itself with proper answers I would think? (Since it is asking itself)
I asked a few times before but looks like if I get no replies in 7 days it auto closes, so this has been ongoing, and is my precursor task to getting Let's Encrypt auomagically set up