pki "server" cert "/etc/ssl/servercert.pem"
pki "server" key  "/etc/ssl/serverkey.pem"

table creds file:/etc/smtpd/creds

listen on eth0 port 587 tls-require pki "server" auth <creds> hostname smtprelay.codehal.de

action "relay" relay

match from auth for any action "relay"