Cory Coager:
> If I'm reading the documentation correctly, when using
> smtp_tls_policy_maps for specific domains, if no servers are available
> the email will be deferred? Is there a way to change this to a
> permanent failure?
There exists no code to convert a TLS failure into a permanent error.
I suggest that you don't require TLS unless you have verified that
Postfix can inter-operate with the remote host.
Once you know that TLS is supposed to work, a TLS failure is no
different than any other connection failure. Just retry until the
problem is gone or until the mail is too old.
Wietse