On Mon, Dec 09, 2019 at 01:02:23PM +0000, Felix Rubio wrote: > Thank you very much for your answer. I really appreciate the time you > took to go through it. The reason for having the tls/auth parameters > configured was, actually, a requirement I did not write (sorry for that, > I wrote the mail in a hurry :-/):
You failed to understand my reply. The same port 587 services can both allow non-TLS/non-SASL traffic from loopback clients, AND require TLS and SASL from all other clients. You do not need and should not create the port 588 service. As mentioned last time, your more elaborate TLS parameter tweaks are counterproductive. -- Viktor.