Hi,

On 2015-04-0 at 22:17 Muhammad Yousuf Khan wrote:

smtp      inet  n       -       -       -       -       smtpd
#smtp      inet  n       -       -       -       1       postscreen
#smtpd     pass  -       -       -       -       -       smtpd
#dnsblog   unix  -       -       -       -       0       dnsblog
#tlsproxy  unix  -       -       -       -       0       tlsproxy
#submission inet n       -       -       -       -       smtpd
   -o syslog_name=postfix/submission
   -o smtpd_tls_security_level=encrypt
   -o smtpd_sasl_auth_enable=yes
#  -o smtpd_client_restrictions=permit_sasl_authenticated,reject
   -o milter_macro_daemon_name=ORIGINATING

Here you go - due to the way how you commented out options you have set smtpd_tls_security_level=encrypt for smtpd (port 25), thus all clients on that port have to use STARTTLS to deliver mail.

Typically admins tend to configure options in main.cf that are common for all postfix daemons and then override some options in master.cf.

For example, in most setups no encryption is enforced on port 25 and enforce it for submission (or smtps).

I recommend to comment again the lines below submission and reload postfix.

Cheers,
Mathias

Reply via email to