>>> That will disable postgrey, but isn't enough to enable postscreen. There >>> are a couple of daemons you have to enable in master.cf (steps 2 through 6): >>> >>> http://www.postfix.org/POSTSCREEN_README.html#enable >>> >>> That README refers to lines that are commented-out in master.cf; of >>> course, if you've upgraded from an earlier of postfix, you won't have them. >> >> Don't you let etc-update add them for you? > > Well, etc-update offers to overwrite the old one with the new, but that > would be bad since we have a few custom services. I do try to patch the > new comments into my configuration files when possible, but my master.cf > is so far away from upstream's that the patch file is basically, > > - Everything old > + Everything new
Yeah, I try to keep mine as close to default as possible (comments and all) so etc-update does an easy "interactive" merge. - Grant > These days I'm almost ready to claim that I actually understand how > postfix works, so I'm not afraid to maintain main.cf and master.cf by > hand anymore. > > >> Working now, thanks a lot. I should only need the tlsproxy line if my >> users connect to port 25 to send mail, correct? > > You should enable it anyway: many remote MTAs will use encryption if you > let them.
