Hello Viktor, and all. This is only a partial answer to Viktor last email:
Il giorno lun 10 dic 2018 alle ore 13:56 Viktor Dukhovni <postfix-us...@dukhovni.org> ha scritto: > > -r--------. 1 root root 3546 Dec 7 11:59 fullchain1.pem > > -rw-r--r--. 1 root root 1704 Dec 7 11:59 privkey1.pem > > This looks rather odd. You're keeping your public certificate chain > protected, but making the keys world-readable??? the setting of privkey to 644 comes from one of Alice's answers (I may have misinterpreted it, of course, but that is where it comes from). About all the other suggestions: This afternoon I have urgent family matters to attend, not sure if I will able to test and report before tomorrow afternoon about all the other advice I got so far. Any further comment or tip that comes in the meantime is welcome,of course. Tonight or tomorrow I will print out all the answers, and try to re-apply them from scratch, starting with a new, default configuration file. For now, I want to thank everybody again for all the hand-holding I am requesting, and will likely need for a few more days. In normal circumstances, I would have taken and planned this migration as a nice occasion to refresh, without hurrying, all my sisadmin skills. As it went, the server was literally pulled off under my feet, in a period when, theoretically, I should slow down and focus on non-work matters. But I need to restore email anyway asap, and right now it feels as being forced to solve a puzzle without knowing what it represents... Later, Marco