> On Aug 22, 2017, at 11:52 AM, yodel...@yepmail.net wrote:
>
> I just want to make sure I understand per-site domain policy maps' priority.
>
> If I set up an outbound postfix instance with
>
> -o smtp_tls_security_level=may
> -o smtp_tls_policy_maps=lmdb:/etc/postfix/tls_policy_outbound
>
> the way that works is that both are used, right?
The global security level set via "smtp_tls_security_level" is
optionally preëmpted by the per-destination policy table (which
can also override selected additional TLS settings).
> In other words, the DEFAULT policy will =may, and will be OVERRIDDEN by
> matches in tls_policy_outbound?
Yes.
--
Viktor.
