I'm using postfix as mail transfer agent on my mailgateway to send and receive emails.
Because I'm communicating with sensitive information I'm using the tls options to validate the receivers mx. He changed his certificate so my tls option in /etc/postfix/tls_policy
(domain.de fingerprint match=XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX:XX
)
was wrong and the mail was 3 days in my mail queue before we noticed that the mail was stuck. Is there an option to bounce "TLS mails" hard, if those options cannot be validated?
I searched the postfix config documentation but did not find the wanted solution.