Ok Viktor, thanks again.
After set the verbose logging:
debug_peer_list
<http://www.postfix.org/postconf.5.html#debug_peer_list> = 10.1.1.1
(client IP)
and try to send a message with mailx, the log is empty because the
STARTTLS capabilities on port TCP/587 are nor present:
tail -f /var/log/mail.log | grep 10.1.1.1
NOTHING !!!
Before the changes you suggested to me, the STARTTLS was present in a
telnet session.
I attach the output of postconf -n andd postconf -Mf.
On Mon, Mar 13, 2017 at 11:16 PM, Viktor Dukhovni <
postfix-us...@dukhovni.org> wrote:
>
> > On Mar 13, 2017, at 10:07 PM, Jeronimo L. Cabral <jelocab...@gmail.com>
> wrote:
> >
> > Dear Viktor, I apologize for my new interruption....but after follow
> your instructions, the Postfix server doesn't show the STARTTLS support via
> telnet:
>
> http://www.postfix.org/DEBUG_README.html#mail
> http://www.postfix.org/DEBUG_README.html#logging
>
> --
> Viktor.
>
>
smtp inet n - - - - smtpd
submission inet n - - - - smtpd
-o syslog_name=postfix/submission
-o smtpd_tls_security_level=encrypt
-o smtpd_sasl_auth_enable=yes
-o smtpd_client_restrictions=permit_mynetworks,reject
-o smtpd_recipient_restrictions=
-o smtpd_sender_restrictions=
-o smtpd_data_restrictions=
-o smtpd_end_of_data_restrictions=
-o milter_macro_daemon_name=ORIGINATING
pickup fifo n - - 60 1 pickup
cleanup unix n - - - 0 cleanup
qmgr fifo n - n 300 1 qmgr
tlsmgr unix - - - 1000? 1 tlsmgr
rewrite unix - - - - - trivial-rewrite
bounce unix - - - - 0 bounce
defer unix - - - - 0 bounce
trace unix - - - - 0 bounce
verify unix - - - - 1 verify
flush unix n - - 1000? 0 flush
proxymap unix - - n - - proxymap
proxywrite unix - - n - 1 proxymap
smtp unix - - - - - smtp
relay unix - - - - - smtp
showq unix n - - - - showq
error unix - - - - - error
retry unix - - - - - error
discard unix - - - - - discard
local unix - n n - - local
virtual unix - n n - - virtual
lmtp unix - - - - - lmtp
anvil unix - - - - 1 anvil
scache unix - - - - 1 scache
policy unix - n n - - spawn user=nobody
argv=/usr/bin/perl /usr/sbin/postfix-policyd-spf-perl
spamassassin unix - n n - - pipe user=nobody
argv=/usr/bin/spamc --socket=/tmp/spamd.sock -e /usr/sbin/sendmail -oi -f
${sender} ${recipient}
maildrop unix - n n - - pipe flags=DRhu
user=vmail argv=/usr/bin/maildrop -d ${recipient}
uucp unix - n n - - pipe flags=Fqhu
user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)
ifmail unix - n n - - pipe flags=F user=ftn
argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp unix - n n - - pipe flags=Fq.
user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient
scalemail-backend unix - n n - 2 pipe flags=R
user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop}
${user} ${extension}
mailman unix - n n - - pipe flags=FR
user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py ${nexthop}
${user}
smtp-amavis unix - - y - 30 smtp
-o smtp_data_done_timeout=1200s
-o smtp_tls_security_level=none
-o disable_dns_lookups=yes
127.0.0.1:10025 inet n - y - - smtpd
-o content_filter=
-o local_recipient_maps=
-o relay_recipient_maps=
-o smtpd_restriction_classes=
-o smtpd_client_restrictions=
-o smtpd_helo_restrictions=
-o smtpd_sender_restrictions=
-o smtpd_recipient_restrictions=permit_mynetworks,reject
-o mynetworks=127.0.0.0/8alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
anvil_rate_time_unit = 60s
append_dot_mydomain = no
biff = no
config_directory = /etc/postfix
disable_vrfy_command = yes
inet_interfaces = all
mailbox_size_limit = 0
message_size_limit = 15240000
mydestination = relay.provincianet.com.ar, relay.g-bapro.net,
localhost.g-bapro.net, localhost
myhostname = relay.g-bapro.net
mynetworks = 127.0.0.0/8 10.0.0.0/8 192.168.69.0/24 172.16.0.0/12
myorigin = /etc/mailname
readme_directory = no
recipient_delimiter = +
relayhost =
smtp_tls_cert_file =
smtp_tls_key_file =
smtp_tls_loglevel = 1
smtp_tls_security_level = may
smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
smtpd_client_message_rate_limit = 50
smtpd_hard_error_limit = 4
smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks,
reject_invalid_helo_hostname, reject_non_fqdn_helo_hostname,
reject_non_fqdn_sender, reject_unknown_recipient_domain,
reject_unknown_sender_domain, reject_unauth_destination, reject_rbl_client
zombie.dnsbl.sorbs.net, reject_rbl_client opm.blitzed.org, reject_rbl_client
sbl.spamhaus.org, reject_rbl_client pbl.spamhaus.org, reject_rbl_client
cbl.abuseat.org check_policy_service unix:private/policy
smtpd_relay_restrictions = permit_mynetworks, permit_sasl_authenticated,
reject_unauth_destinations
smtpd_tls_cert_file = /etc/postfix/SSL/MailRelay-server-publica.crt
smtpd_tls_key_file = /etc/postfix/SSL/MailRelay-server-privada.pem
smtpd_tls_loglevel = 1
smtpd_tls_security_level = may
transport_maps = hash:/etc/postfix/transport
