On Tue, Feb 14, 2023 at 10:26:59AM -0700, D. R. Evans wrote: > E-mail from @arrl.net is to be relayed to pobox.com for them to handle. > > pobox.com has a page telling how to configure postfix: > https://www.pobox.help/hc/en-us/articles/1500000193782-Postfix > but of course that assumes that all traffic is going to be sent to pobox, so > global parameters are truly global, and not confined to traffic from > @arrl.net. > > The first thing that the above page tells me to do is: > smtp_tls_security_level = encrypt
See https://www.postfix.org/TLS_README.html#client_tls_policy main.cf: indexed = ${default_database_type}:${config_directory}/ smtp_tls_policy_maps = ${indexed}tls-policy tls-policy: # Note: The lookup key must match the verbatim nexthop # Why no authentication? pobox.com encrypt or: master.cf: pobox unix ... smtp -o smtp_tls_security_level=encrypt and use "pobox" as the (sender-dependent) transport for arrl.net -- Viktor.
