On 3 Dec 2015, at 8:33, Koko Wijatmoko wrote:
[...]
submission inet n - n - - smtpd
-o smtpd_tls_security_level=encrypt
-o syslog_name=postfix/submission
-o smtpd_tls_security_level=encrypt
-o smtpd_milters=inet:127.0.0.1:8891
smtp unix - - n - - smtp
465 inet n - n - - smtpd
-o smtpd_tls_wrappermode=yes
-o smtpd_sasl_auth_enable=yes
-o smtpd_client_restrictions=permit_sasl_authenticated,reject
move this part to "submission" above, and disable/delete
"465" service..
DO NOT move the '-o smtpd_tls_wrappermode=yes' line to the section for
the submission service. That is ONLY for the deprecated port 465 (SMTP
inside SSL) service. If you put it on port 587 for submission,
submission will not work.