On Tue, Aug 22, 2017, at 09:13 AM, Viktor Dukhovni wrote: > > Is there an inbound per-domain TLS policy map? > > http://www.postfix.org/TLS_README.html#client_tls_limits
Thanks. Okay I get that. But that reads like policy to me. It doesn't sound like it's impossible. The reason that I'm asking is that I'd like to set my inbound policy =may by default, but for specific servers (that I may be working or warring with) sending email to me I want to force policy =encrypt. For infrequent one offs like that, even if I could specify a few sending hosts, by hostname &/or even IP, to force inbound TLS =encrypt policy it'd be useful. But if it can't be done, ok it can't. I get that.