#smtpd_tls_key_file = /etc/ssl/giorgioravera.it/certs/mail.giorgioravera.it.key
#smtpd_tls_cert_file = /etc/ssl/giorgioravera.it/certs/mail.giorgioravera.it.crt
#smtpd_tls_CAfile = /etc/ssl/giorgioravera.it/ca.crt
-smtpd_tls_cert_file = /etc/letsencrypt/live/server.giorgioravera.it/fullchain.pem
-smtpd_tls_key_file = /etc/letsencrypt/live/server.giorgioravera.it/privkey.pem
+smtpd_tls_cert_file = /etc/ssl/giorgioravera.it/cert.pem
+smtpd_tls_key_file = /etc/ssl/giorgioravera.it/privkey.pem
+smtpd_tls_CAfile = /etc/ssl/giorgioravera.it/chain.pem
#smtpd_tls_loglevel = 2
smtpd_tls_received_header = no
smtpd_tls_session_cache_timeout = 3600s
smtpd_delay_reject = yes
smtpd_helo_required = yes
# Don't talk to mail systems that don't know their own hostname.
-smtpd_helo_restrictions = reject_invalid_helo_hostname,
+smtpd_helo_restrictions = permit_mynetworks,
+ reject_invalid_helo_hostname,
reject_non_fqdn_helo_hostname,
reject_unknown_helo_hostname
# Don't accept mail from domains that don't exist.