smtp_tls_security_level = may
smtp_tls_cert_file = /etc/ssl/certs/mymailserver.cert
smtp_tls_key_file = /etc/ssl/private/mymailserve.key
smtp_tls_note_starttls_offer = yes
smtpd_tls_security_level = may
smtpd_tls_cert_file = /etc/ssl/certs/mymailserver.cert
smtpd_tls_key_file = /etc/ssl/private/mymailserver.key

smtpd_sasl_auth_enable = yes
smtpd_sasl_type = cyrus
smtpd_sasl_path = smtpd
broken_sasl_auth_clients = yes
smtpd_sasl_security_options = noplaintext, noanonymous
smtpd_sasl_tls_security_options = noanonymous
smtpd_sender_login_maps = hash:/etc/postfix/controlled_envelope_senders
smtpd_relay_restrictions = permit_mynetworks,
                           reject_sender_login_mismatch, 
                           permit_sasl_authenticated, 
                           defer_unauth_destination