On Fri, Oct 24, 2014 at 09:14:59AM +0200, Patrik B?t wrote: > Another question, if I do the lookup of transport in transport_maps, I > can't use the domain in tls_policy_map?
As documented, the lookup key for TLS policy is the smtp nexthop. Sometimes the nexthop is the recipient domain, other times it is some override from the transport table. Regardless the lookup key is the nexthop. When the nexthop is an unadorned domain (no [] and no ":port"), parent domain lookups are also performed. http://www.postfix.org/postconf.5.html#smtp_tls_policy_maps -- Viktor.