A. Schulze:
Should I remove "smtpd_tls_mandatory_exclude_ciphers = 3DES" and look how the cipher use change over the next days ?
immediately after I removed "smtpd_tls_mandatory_exclude_ciphers = 3DES"some servers fail to establish TLS. At least one was a Exchange 2010 Version 14.03...
:-)