Wietse Venema <wie...@porcupine.org> wrote: > I can use some additional information, off-list email preferred.
Ok the following configuration is identical at both servers (besides hostname). > Complete output from: > > postconf -n autoresponder_destination_recipient_limit = 1 command_directory = /usr/local/sbin compatibility_level = 3.6 confirm_delay_cleared = yes daemon_directory = /usr/local/libexec/postfix data_directory = /var/db/postfix delay_warning_time = 2h disable_vrfy_command = yes enable_long_queue_ids = yes header_checks = pcre:/usr/local/etc/postfix/header_checks html_directory = /usr/local/share/doc/postfix inet_protocols = all lmtp_generic_maps = $smtp_generic_maps lmtp_header_checks = $header_checks lmtp_tls_ciphers = $smtp_tls_ciphers lmtp_tls_exclude_ciphers = $smtp_tls_exclude_ciphers lmtp_tls_loglevel = $smtp_tls_loglevel lmtp_tls_mandatory_ciphers = $smtp_tls_mandatory_ciphers lmtp_tls_mandatory_exclude_ciphers = $smtp_tls_mandatory_exclude_ciphers lmtp_tls_mandatory_protocols = $smtp_tls_mandatory_protocols lmtp_tls_note_starttls_offer = $smtp_tls_note_starttls_offer lmtp_tls_protocols = $smtp_tls_protocols mail_owner = postfix mailbox_size_limit = 0 mailq_path = /usr/local/bin/mailq manpage_directory = /usr/local/man masquerade_domains = enfer-du-nord.net ellael.org kaan-bock.net mer-waases.net mescht-mer.net message_size_limit = 51200000 meta_directory = /usr/local/libexec/postfix milter_default_action = accept milter_protocol = 6 mydestination = localhost myhostname = mx2.enfer-du-nord.net mynetworks = 10.1.1.0/24 10.2.2.0/24 [fd00:a:a:a::0]/64 [fd00:b:b:b::0]/64 myorigin = enfer-du-nord.net newaliases_path = /usr/local/bin/newaliases postscreen_access_list = permit_mynetworks cidr:/usr/local/etc/postfix/postscreen_access_list postscreen_dnsbl_action = enforce postscreen_dnsbl_sites = zen.spamhaus.org dnsbl-1.uceprotect.net bl.mailspike.net all.spamrats.com list.dnswl.org*-10 postscreen_dnsbl_threshold = 2 postscreen_greet_action = enforce queue_directory = /var/spool/postfix readme_directory = /usr/local/share/doc/postfix recipient_canonical_maps = pcre:/usr/local/etc/postfix/canonical_recipients respectful_logging = no sample_directory = /usr/local/etc/postfix sender_bcc_maps = hash:/usr/local/etc/postfix/sender_bcc_maps sender_canonical_maps = pcre:/usr/local/etc/postfix/canonical_sender sendmail_path = /usr/local/sbin/sendmail setgid_group = maildrop shlib_directory = /usr/local/lib/postfix show_user_unknown_table_name = no smtp_dns_support_level = dnssec smtp_generic_maps = hash:/usr/local/etc/postfix/smtp_generic_maps smtp_tls_ciphers = medium smtp_tls_exclude_ciphers = aNULL, MD5 smtp_tls_loglevel = 1 smtp_tls_mandatory_ciphers = high smtp_tls_mandatory_exclude_ciphers = aNULL, MD5 smtp_tls_mandatory_protocols = >=TLSv1.2 smtp_tls_note_starttls_offer = yes smtp_tls_policy_maps = hash:/usr/local/etc/postfix/smtp_tls_policy_maps smtp_tls_protocols = $smtp_tls_mandatory_protocols smtp_tls_security_level = dane smtpd_discard_ehlo_keyword_address_maps = cidr:/usr/local/etc/postfix/smtpd_discard_ehlo_keyword_address_maps smtpd_milters = unix:/var/run/rspamd/milter.sock smtpd_recipient_restrictions = check_recipient_access hash:/usr/local/etc/postfix/access_recipient_rfc reject_non_fqdn_sender reject_non_fqdn_recipient reject_unknown_recipient_domain reject_unauth_pipelining reject_invalid_helo_hostname check_recipient_access hash:/usr/local/etc/postfix/access_recipient_blacklist check_recipient_access hash:/usr/local/etc/postfix/access_recipient_whitelist check_sender_access hash:/usr/local/etc/postfix/access_sender_blacklist reject_unlisted_recipient reject_unverified_recipient check_client_access hash:/usr/local/etc/postfix/access_client_whitelist check_sender_access hash:/usr/local/etc/postfix/access_sender_whitelist reject_unknown_sender_domain reject_unknown_reverse_client_hostname reject_rhsbl_helo dbl.spamhaus.org warn_if_reject reject_rhsbl_reverse_client dbl.spamhaus.org, reject_rhsbl_sender dbl.spamhaus.org permit smtpd_relay_restrictions = permit_sasl_authenticated reject_unauth_destination smtpd_sasl_auth_enable = yes smtpd_sasl_path = private/auth smtpd_sasl_security_options = noanonymous,noplaintext smtpd_sasl_tls_security_options = noanonymous smtpd_sasl_type = dovecot smtpd_tls_auth_only = yes smtpd_tls_cert_file = /usr/local/etc/certs/mta.enfer-du-nord.net/fullchain.pem smtpd_tls_ciphers = medium smtpd_tls_exclude_ciphers = aNULL, MD5 smtpd_tls_key_file = /usr/local/etc/certs/mta.enfer-du-nord.net/privkey.pem smtpd_tls_loglevel = 1 smtpd_tls_mandatory_ciphers = high smtpd_tls_mandatory_exclude_ciphers = aNULL, MD5 smtpd_tls_mandatory_protocols = >=TLSv1.2 smtpd_tls_protocols = $smtpd_tls_mandatory_protocols smtpd_tls_received_header = yes smtpd_tls_security_level = may soft_bounce = no tls_preempt_cipherlist = yes tls_ssl_options = NO_COMPRESSION transport_maps = hash:/usr/local/etc/postfix/transport_maps virtual_alias_maps = hash:/usr/local/etc/postfix/virtual_alias_maps virtual_gid_maps = static:vmail virtual_mailbox_base = /var/mail/.maildirs virtual_mailbox_domains = hash:/usr/local/etc/postfix/virtual_mailbox_domains virtual_mailbox_limit = 0 virtual_mailbox_maps = hash:/usr/local/etc/postfix/virtual_mailbox_maps virtual_minimum_uid = 4999 virtual_transport = lmtp:unix:private/dovecot-lmtp virtual_uid_maps = static:vmail > postconf -P relay/unix/smtp_fallback_relay = submission/inet/milter_macro_daemon_name = ORIGINATING submission/inet/smtp_tls_CAfile = /usr/local/share/certs/ca-root-nss.crt submission/inet/smtpd_client_restrictions = permit_sasl_authenticated,reject submission/inet/smtpd_recipient_restrictions = permit_sasl_authenticated,reject submission/inet/smtpd_sasl_auth_enable = yes submission/inet/smtpd_tls_cert_file = /usr/local/etc/certs/mail.enfer-du-nord.net/fullchain.pem submission/inet/smtpd_tls_key_file = /usr/local/etc/certs/mail.enfer-du-nord.net/privkey.pem submission/inet/smtpd_tls_security_level = encrypt submission/inet/syslog_name = postfix/submission HTH, and please feel free to ask for additional information, Michael
