Mark Alan: > This issue is not present without postscreen. Could it be related to it or >- with the tlsproxy service?
Perhaps surprisingly, both smtpd and tlsproxy specify the same parameters to OPENSSL (*). If you tweek them, then you may see differences. Wietse (*) I can't imagine why I would spend precious time to intentionally create incompatibility between the two programs and confuse the hell out of people who try to use Postfix.