rm /etc/postfix/main.cf
touch /etc/postfix/main.cf

postconf -e 'virtual_mailbox_domains = mysql:/etc/postfix/mysql-virtual-mailbox-domains.cf'
postconf -e 'virtual_mailbox_base = /home/vmail/'
postconf -e 'virtual_mailbox_maps = mysql:/etc/postfix/mysql-virtual-mailbox-maps.cf'
postconf -e 'virtual_uid_maps = static:5000'
postconf -e 'virtual_gid_maps = static:5000'
postconf -e 'virtual_alias_maps = mysql:/etc/postfix/mysql-virtual-alias-maps.cf'
postconf -e 'smtp_tls_security_level = encrypt'
postconf -e 'smtp_tls_cert_file = /etc/ssl/ashley.cert'
postconf -e 'smtp_tls_key_file = /etc/ssl/ashley.key'
postconf -e 'relay_clientcerts = hash:/etc/ssl/relay_clientcerts'
postconf -e 'smtp_tls_session_cache_database = btree:/var/spool/postfix/smtp_scache'
postconf -e 'smtpd_tls_security_level = encrypt'
postconf -e 'smtpd_tls_cert_file = /etc/ssl/ashley.cert'
postconf -e 'smtpd_tls_key_file = /etc/ssl/ashley.key'
postconf -e 'smtpd_tls_session_cache_database = btree:/var/spool/postfix/smtpd_scache'
postconf -e 'tls_random_source = dev:/dev/urandom'
postconf -e 'virtual_transport = dovecot'
postconf -e 'dovecot_destination_recipient_limit = 1'
postconf -e 'smtpd_sasl_auth_enable = yes'
postconf -e 'smtpd_sasl_type = dovecot'
postconf -e 'smtpd_sasl_path = private/auth'
postconf -e 'smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination'
postconf -e 'smtpd_client_restrictions = permit_mynetworks, permit_sasl_authenticated, permit_tls_clientcerts, reject'
postconf -e 'smtpd_helo_restrictions = permit_mynetworks, reject_unknown_helo_hostname'
postconf -e 'smtpd_sender_restrictions = permit_mynetworks, reject_unknown_sender_domain'
postconf -e 'smtpd_data_restrictions = permit_mynetworks, reject_unauth_pipelining'
postconf -e 'smtpd_banner = $myhostname ESMTP $mail_name ($mail_version)'
postconf -e 'alias_maps = hash:/etc/aliases'
postconf -e 'mynetworks_style = subnet'
postconf -e 'myhostname = ashley.tuxblogger.nl'
postconf -e 'mydestination = ashley.tuxblogger.nl, localhost.tuxblogger.nl, localhost'
postconf -e 'smtpd_tls_loglevel = 0'
postconf -e 'smtp_tls_loglevel = 0'
postconf -e 'content_filter = amavisfeed:[127.0.0.1]:10024'
postconf -e 'mynetworks = 127.0.0.0/8, 192.168.1.0/24'

postfix reload

May 27 21:43:36 ashley postfix/smtpd[15180]: connect from ashley.tuxblogger.nl[84.245.7.46]
May 27 21:43:37 ashley postfix/smtpd[15180]: 3AF75856F: client=ashley.tuxblogger.nl[84.245.7.46], sasl_method=PLAIN, sasl_username=jelle@tuxblogger.nl
May 27 21:43:37 ashley postfix/cleanup[15188]: 3AF75856F: message-id=<4659DFC7.8090509@tuxblogger.nl>
May 27 21:43:37 ashley postfix/qmgr[15177]: 3AF75856F: from=<jelle@tuxblogger.nl>, size=860, nrcpt=1 (queue active)
May 27 21:43:37 ashley postfix/smtp[15190]: 3AF75856F: to=<jelle@tuxblogger.nl>, relay=127.0.0.1[127.0.0.1]:10024, delay=0.44, delays=0.36/0.06/0.02/0, dsn=4.7.4, status=deferred (TLS is required, but was not offered by host 127.0.0.1[127.0.0.1])
May 27 21:43:37 ashley postfix/smtpd[15180]: disconnect from ashley.tuxblogger.nl[84.245.7.46]

postconf | grep restrictionssmtpd_client_restrictions = permit_mynetworks, permit_sasl_authenticated, permit_tls_clientcerts, reject
smtpd_data_restrictions = permit_mynetworks, reject_unauth_pipelining
smtpd_end_of_data_restrictions = 
smtpd_etrn_restrictions = 
smtpd_helo_restrictions = permit_mynetworks, reject_unknown_helo_hostname
smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination
smtpd_sender_restrictions = permit_mynetworks, reject_unknown_sender_domain