On Sat, Feb 16, 2019 at 11:46:12PM +0300, Andrey Repin wrote: > > submission inet n - n - - smtpd > > -o syslog_name=postfix/submission > > -o smtpd_tls_security_level=encrypt > > This is NOT right. > submission (port 587/tcp) is a plan connection. Unencrypted. > You should use default "may" here and leave "encrypt" for submissions (port > 465/tcp).
The OP should ignore this erroneous advice. The configuration is both correct and best current practice as written. -- Viktor.