> On Oct 22, 2018, at 1:05 PM, Emmanuel Jaep <emmanuel.j...@gmail.com> wrote: > > You are also right that openrelay.customer.com has a non-working STARTTLS. > They actually have neither authentication nor encryption. This is actually my > current 'challenge': how to set this relay up without encryption and > authentication while keeping our current config for other relays (encryption > + authentication).
You can configure a separate transport for this destination. In the master.cf entry for that transport (clone of "smtp unix" under a different name) you can change the SASL options as needed for that destination. As for TLS, you can, if needed, use smtp_tls_policy_maps to change the TLS security level for that domain, or make the change in the dedicated transport in master.cf. -- Viktor.