Victor Duchovni wrote: > >>> The policy table lookup key does not match the destination nexthop, or >>> > > > > That's exactly the problem. > > > I think you should be able to figure this out, even without reading the > below, but if you are in a hurry try the documentation: > > http://www.postfix.org/postconf.5.html#smtp_tls_policy_maps > > http://www.postfix.org/TLS_README.html#client_tls_policy >
Ah so - since there was a transport entry for that domain, I had to include even the brackets surrounding the transport entry, when adding it to tls_policy_maps. With the brackets added to the tls_policy_maps entry, the TLS session was set up as one would expect. Thanks for the clue. Joe