Re: How to relay specific domain over TLS and rest all other without TLS ?

[Viktor Dukhovni]

On Thu, Feb 18, 2016 at 08:16:12PM +0530, Jayesh Shinde wrote:

> How to relay only specific  domain's email on over TLS and rest all other on
> port 25 as normal i.e without TLS ?

Postfix 2.3 .. 2.10:

    main.cf:
        indexed = ${default_database_type}:${config_directory}/
        smtp_tls_security_level = none
        smtp_tls_policy_maps = ${indexed}tls-policy
        smtp_tls_CAfile = ${config_directory}/CA_Bundle.pem

    tls-policy:
        example.com     secure match=nexthop:dot-nexthop

Postfix 2.11+:

    main.cf:
        indexed = ${default_database_type}:${config_directory}/
        smtp_tls_security_level = none
        smtp_tls_policy_maps = ${indexed}tls-policy

    tls-policy:
        example.com     secure match=nexthop:dot-nexthop 
tafile=/etc/postfix/CA_Bundle.pem

-- 
        Viktor.