> I would strongly suggest removing the "noplaintext" keyword during > testing.
Thank you. It worked. > There is no best, there is only what fits your needs. I expect it's > common to specify > smtpd_sasl_security_options = noanonymous > smtpd_sasl_tls_security_options = noanonymous > and then after verifying that SASL works, adding > smtpd_tls_auth_only = yes Does it mean that my session will be encrypted using TLS, but there won't be any encryption inside the tunnel? I assume it's pretty secure for most cases. Could you confirm? Anyway, I'll try to configure a non-plaintext mechanism.