-.\" $OpenBSD: smtpd.conf.5,v 1.260 2021/04/09 16:43:43 eric Exp $
+.\" $OpenBSD: smtpd.conf.5,v 1.261 2021/08/05 06:33:20 jmc Exp $
.\"
.\" Copyright (c) 2008 Janne Johansson <jj@openbsd.org>
.\" Copyright (c) 2009 Jacek Masiulaniec <jacekm@dobremiasto.net>
.\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
.\"
.\"
-.Dd $Mdocdate: April 9 2021 $
+.Dd $Mdocdate: August 5 2021 $
.Dt SMTPD.CONF 5
.Os
.Sh NAME
.Ar port
is required.
.It smtps
-SMTP session with forced TLS on connection, default port is 465.
+SMTP session with forced TLS on connection.
+The default port is 465.
.El
+.Pp
Unless noted,
.Ar port
defaults to 25.
and permit outgoing mail from authenticated users
(using
.Cm match auth ) .
-It can be used in situations where it is not possible to listen on a separate port
+It can be used in situations
+where it is not possible to listen on a separate port
(usually the submission port, 587)
for users to authenticate.
.It Ic ca Ar caname
.It Ic srs Cm ttl Ar delay
Set the time-to-live delay for SRS envelopes.
After this delay,
-a bounce reply to the SRS address will be discarded to limit risks of forged addresses.
+a bounce reply to the SRS address will be discarded
+to limit risks of forged addresses.
The default is four days
.Pq 4d .
.It Ic table Ar name Oo Ar type : Oc Ns Ar pathname
.Ed
.Pp
In this second example,
-the aim is to permit mail delivery and relaying only for users that can authenticate
+the aim is to permit mail delivery and relaying
+only for users that can authenticate
(using their normal login credentials).
An RSA certificate must be provided to prove the server's identity.
The mail server listens on all interfaces the default routes point to.