SMTP denying ALL (local, postfixadmin, rainloop, from gmail, etc) incoming mails

Classification

[X] Question

Reproducibility

[X] Not applicable

Docker information
$ docker info
Containers: 10
 Running: 10
 Paused: 0
 Stopped: 0
Images: 35
Server Version: 18.03.1-ce
Storage Driver: overlay2
 Backing Filesystem: extfs
 Supports d_type: true
 Native Overlay Diff: true
Logging Driver: json-file
Cgroup Driver: cgroupfs
Plugins:
 Volume: local
 Network: bridge host macvlan null overlay
 Log: awslogs fluentd gcplogs gelf journald json-file logentries splunk syslog
Swarm: active
 NodeID: ----------------------------------------
 Is Manager: true
 ClusterID: -----------------------------------------
 Managers: 1
 Nodes: 1
 Orchestration:
  Task History Retention Limit: 5
 Raft:
  Snapshot Interval: 10000
  Number of Old Snapshots to Retain: 0
  Heartbeat Tick: 1
  Election Tick: 10
 Dispatcher:
  Heartbeat Period: 5 seconds
 CA Configuration:
  Expiry Duration: 3 months
  Force Rotate: 0
 Autolock Managers: false
 Root Rotation In Progress: false
 Node Address: <IP_ADDRESS>
 Manager Addresses:
  <IP_ADDRESS>:XXXX
Runtimes: runc
Default Runtime: runc
Init Binary: docker-init
containerd version: 773c489c9c1b21a6d78b5c538cd395416ec50f88
runc version: 4fc53a81fb7c994640722ac585fa9ca548971871
init version: 949e6fa
Security Options:
 seccomp
  Profile: default
Kernel Version: 3.10.0-862.2.3.el7.x86_64
Operating System: CentOS Linux 7 (Core)
OSType: linux
Architecture: x86_64
CPUs: 1
Total Memory: 3.608GiB
Name: cesticom.com
ID: RDAX:NARA:Q6AT:WW7Y:6IPW:SVZ6:XZW3:UWPP:KRQT:AJ4E:EFMF:PF4I
Docker Root Dir: /var/lib/docker
Debug Mode (client): false
Debug Mode (server): false
Registry: https://index.docker.io/v1/
Labels:
Experimental: false
Insecure Registries:
 <IP_ADDRESS>/8
Live Restore Enabled: false

$ docker images hardware/mailserver --digests --filter "dangling=false"
REPOSITORY            TAG                 DIGEST                                                                    IMAGE ID            CREATED             SIZE
hardware/mailserver   1.1-stable          sha256:0b5041064609521474dda5d2d2cb4e9f2d77a06ffbc7b75bbaecb3215eec9143   b7a234ab28df        2 days ago          363MB

Description
Every mail sended by any (localhost, postfixadmin, rainloop) gets a "Relay access denied" as shows here:
smtp; 554 5.7.1<EMAIL_ADDRESS>Relay access denied
Steps to reproduce

Set up server (my requirements was to work with the traefik+nginx+php7-fpm that was running before, in other docker-compose.yml)
Set up DNS regs (in my domain provider dashboard)
Set up email server
Send messages from inside or outside of the VPS, example: from<EMAIL_ADDRESS>to<EMAIL_ADDRESS>Wait for results

Expected results
Mail delivered to user (postmaster is alias of that user)
Actual results
smtp; 554 5.7.1<EMAIL_ADDRESS>Relay access denied
Debugging information
netstat -tulpn | grep -E -w '25|80|110|143|443|465|587|993|995'
tcp6       0      0 :::993                  :::*                    LISTEN      9405/docker-proxy
tcp6       0      0 :::995                  :::*                    LISTEN      9395/docker-proxy
tcp6       0      0 :::587                  :::*                    LISTEN      9415/docker-proxy
tcp6       0      0 :::110                  :::*                    LISTEN      9445/docker-proxy
tcp6       0      0 :::143                  :::*                    LISTEN      9435/docker-proxy
tcp6       0      0 :::80                   :::*                    LISTEN      9481/docker-proxy
tcp6       0      0 :::465                  :::*                    LISTEN      9425/docker-proxy
tcp6       0      0 :::25                   :::*                    LISTEN      9455/docker-proxy
tcp6       0      0 :::443                  :::*                    LISTEN      9471/docker-proxy

docker logs mailserver
[INFO] Search for SSL certificates generated by Traefik
[INFO] acme.json found with ACME v2 format, dumping into pem files
[INFO] Let's encrypt live directory found
[INFO] Using /etc/letsencrypt/live/mail.cesticom.com folder
[INFO] Found DKIM key pair for domain cesticom.com - skip creation
[INFO] Custom Postfix configuration file loaded
[INFO] MariaDB/PostgreSQL hostname not found in /etc/hosts
[INFO] Container IP found, adding a new record in /etc/hosts
[INFO] Redis hostname not found in /etc/hosts
[INFO] Container IP found, adding a new record in /etc/hosts
[INFO] ClamAV is disabled, service will not start
[INFO] Fetchmail forwarding is enabled
[INFO] Automatic GPG encryption is disabled
[INFO] ManageSieve protocol is enabled
[INFO] DKIM/ARC signing is enabled
[INFO] Greylisting policy is enabled
[INFO] Ratelimiting policy is enabled
[INFO] POP3 protocol is enabled
[INFO] Unbound DNS resolver is enabled
[INFO] clamav-unofficial-sigs is disabled (user configuration not found)
2018-05-29T15:22:12.500957+00:00 mail root: s6-supervise : spawning unbound process
2018-05-29T15:22:12.504955+00:00 mail root: s6-supervise : spawning postfix process
2018-05-29T15:22:12.552309+00:00 mail root: s6-supervise : spawning dovecot process
2018-05-29T15:22:12.574289+00:00 mail root: s6-supervise : spawning rspamd process
2018-05-29T15:22:12.607218+00:00 mail root: s6-supervise : spawning cron process
2018-05-29T15:22:12.660285+00:00 mail dovecot: master: Dovecot v2.2.27 (c0f36b0) starting up for imap, lmtp, sieve, pop3
2018-05-29T15:22:12.888501+00:00 mail dovecot: config: Warning: service auth { client_limit=1000 } is lower than required under max. load (1400)
2018-05-29T15:22:12.888548+00:00 mail dovecot: config: Warning: service anvil { client_limit=1000 } is lower than required under max. load (1203)
2018-05-29T15:22:13.747377+00:00 mail postfix/postfix-script[631]: starting the Postfix mail system
2018-05-29T15:22:13.780125+00:00 mail postfix/master[633]: daemon started -- version 3.1.8, configuration /etc/postfix
2018-05-29T15:22:14.589279+00:00 mail root: s6-supervise : (_parent) all my wonderful children have started, i can die in peace :)
2018-05-29T15:22:14.595495+00:00 mail root: s6-supervise : stopping _parent process
[INFO] Search for SSL certificates generated by Traefik
[INFO] acme.json found with ACME v2 format, dumping into pem files
[INFO] Let's encrypt live directory found
[INFO] Using /etc/letsencrypt/live/mail.cesticom.com folder
[INFO] Found DKIM key pair for domain cesticom.com - skip creation
[INFO] Custom Postfix configuration file loaded
[INFO] MariaDB/PostgreSQL hostname not found in /etc/hosts
[INFO] Container IP found, adding a new record in /etc/hosts
[INFO] Redis hostname not found in /etc/hosts
[INFO] Container IP found, adding a new record in /etc/hosts
[INFO] ClamAV is disabled, service will not start
[INFO] Fetchmail forwarding is enabled
[INFO] Automatic GPG encryption is disabled
[INFO] ManageSieve protocol is enabled
[INFO] DKIM/ARC signing is enabled
[INFO] Greylisting policy is enabled
[INFO] Ratelimiting policy is enabled
[INFO] POP3 protocol is enabled
[INFO] Unbound DNS resolver is enabled
[INFO] clamav-unofficial-sigs is disabled (user configuration not found)
2018-05-29T16:00:24.978388+00:00 mail root: s6-supervise : spawning unbound process
2018-05-29T16:00:25.004096+00:00 mail root: s6-supervise : spawning postfix process
2018-05-29T16:00:25.046006+00:00 mail root: s6-supervise : spawning dovecot process
2018-05-29T16:00:25.062394+00:00 mail root: s6-supervise : spawning rspamd process
2018-05-29T16:00:25.085133+00:00 mail root: s6-supervise : spawning cron process
2018-05-29T16:00:25.121639+00:00 mail dovecot: master: Warning: Corrected permissions for login directory /var/run/dovecot/login
2018-05-29T16:00:25.122043+00:00 mail dovecot: master: Warning: Corrected permissions for login directory /var/run/dovecot/token-login
2018-05-29T16:00:25.122164+00:00 mail dovecot: master: Warning: Corrected permissions for empty directory /var/run/dovecot/empty
2018-05-29T16:00:25.146353+00:00 mail dovecot: master: Dovecot v2.2.27 (c0f36b0) starting up for imap, lmtp, sieve, pop3, sieve, pop3
2018-05-29T16:00:25.352772+00:00 mail dovecot: config: Warning: service auth { client_limit=1000 } is lower than required under max. load (1400)
2018-05-29T16:00:25.352783+00:00 mail dovecot: config: Warning: service anvil { client_limit=1000 } is lower than required under max. load (1203)
2018-05-29T16:00:25.893558+00:00 mail postfix/postfix-script[605]: starting the Postfix mail system
2018-05-29T16:00:25.906686+00:00 mail postfix/master[607]: daemon started -- version 3.1.8, configuration /etc/postfix
2018-05-29T16:00:27.055513+00:00 mail root: s6-supervise : (_parent) all my wonderful children have started, i can die in peace :)
2018-05-29T16:00:27.060648+00:00 mail root: s6-supervise : stopping _parent process
2018-05-29T17:01:23.986420+00:00 mail postfix/anvil[638]: statistics: max connection rate 1/60s for (smtp:XXX.X.XXX.XX) at May 29 16:54:49
2018-05-29T17:01:23.986450+00:00 mail postfix/anvil[638]: statistics: max connection count 1 for (smtp:XXX.X.XXX.XX) at May 29 16:54:49
2018-05-29T17:01:23.986463+00:00 mail postfix/anvil[638]: statistics: max cache size 2 at May 29 16:57:03
2018-05-29T18:28:03.649007+00:00 mail postfix/smtpd[674]: connect from mail-yb0-f173.google.com[<IP_ADDRESS>]
2018-05-29T18:28:03.785928+00:00 mail postfix/smtpd[674]: Anonymous TLS connection established from mail-yb0-f173.google.com[<IP_ADDRESS>]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
2018-05-29T18:28:03.971284+00:00 mail postfix/smtpd[674]: NOQUEUE: reject: RCPT from mail-yb0-f173.google.com[<IP_ADDRESS>]: 554 5.7.1<EMAIL_ADDRESS>Relay access denied<EMAIL_ADDRESS><EMAIL_ADDRESS>proto=ESMTP helo=<mail-yb0-f173.google.com>
2018-05-29T18:28:04.027548+00:00 mail postfix/smtpd[674]: disconnect from mail-yb0-f173.google.com[<IP_ADDRESS>] ehlo=2 starttls=1 mail=1 rcpt=0/1 data=0/1 quit=1 commands=5/7

Configuration (docker-compose.yml, traefik.toml...etc)
First, our folders structure (simplified):
/mnt/CesticomVPS/
----- ./nginx/
----- ./php/
----- ./traefik/
------------ ./acme/
-------------------- ./acme.json
------------ ./traefik.toml
----- ./mail.server/
------------ ./mail/
------------ ./rainloop/
------------ ./db/
----------------- ./redis/
----------------- ./mysql/
------------ ./docker-compose.yml   <<--- mailserver, db, etc (mailhosting)
------------ ./.env
----- ./docker-compose.yml   <<--- traefik, nginx, php, etc (webhosting)
----- ./.env
/mnt/CesticomVPS/docker-compose.yml
docker-compose.txt
/mnt/CesticomVPS/mail.server/docker-compose.yml
docker-compose.txt
.envs:
UID2VIRT=XXX (not root)
GID2VIRT=XXX (not root)
MAILSERVER_DOMAIN=cesticom.com
MAILSERVER_HOSTNAME=mail
MAILSERVER_DOCKER_TAG=1.1-stable
VOLUMES_ROOT_PATH=/mnt/CesticomVPS
RESTART_MODE=unless-stopped

Postfix must be misconfigured, check your environment variables and your postfix configuration. Try without an .env file.
docker exec mailserver cat /etc/postfix/main.cf
docker exec mailserver cat /etc/postfix/master.cf
docker exec mailserver postconf
docker exec mailserver /bin/bash -c "egrep -R -I "{{.*}}" /etc/postfix"

Hello!, thanks for replying. I was trying to use different DNS settings, in case that was the problem, but I did not get errors, I forgot to mention it before, but I used the test pages shown in readme.md before creating this thread, and the results were good, example: https://www.mail-tester.com/web-m02mv
About the configuration, I wrote the .env vars in the .yml file, the results:
docker exec mailserver cat /etc/postfix/main.cf
#######################
## GENERALS SETTINGS ##
#######################

smtpd_banner         = $myhostname ESMTP $mail_name
compatibility_level  = 2
biff                 = no
append_dot_mydomain  = no
readme_directory     = no
allow_percent_hack   = no
delay_warning_time   = 4h
mailbox_command      = procmail -a "$EXTENSION"
recipient_delimiter  = +
disable_vrfy_command = yes
message_size_limit   = 502400000
mailbox_size_limit   =<PHONE_NUMBER>

inet_interfaces = all
inet_protocols = all

myhostname    = mail.cesticom.com
myorigin      = mail.cesticom.com
mydestination = localhost localhost.$mydomain
mynetworks    = <IP_ADDRESS>/8 [::ffff:<IP_ADDRESS>]/104 [::1]/128 <IP_ADDRESS>/16 <IP_ADDRESS>/12 <IP_ADDRESS>/8

alias_maps = hash:/etc/aliases

###############
## SMTP/UTF8 ##
###############

smtputf8_enable = yes

# The default is to enable "SMTPUTF8 required" autodetection
# only for Postfix sendmail command-line submissions and address
# verification probes.
# https://github.com/hardware/mailserver/issues/166
# smtputf8_autodetect_classes = all

###################
## RATE LIMITING ##
###################

# Allow to avoid 421 error when send bulk mail
default_destination_rate_delay = 1s
default_destination_recipient_limit = 10

# concurrency_limit has no effect when rate_delay is turned on.
# It specifies a delay BETWEEN deliveries, meaning the deliveries
# cannot be in parallel.
# default_destination_concurrency_limit=2

####################
## TLS PARAMETERS ##
####################

# Smtp ( OUTGOING )
smtp_tls_loglevel            = 1
smtp_tls_security_level      = dane
smtp_dns_support_level       = dnssec
smtp_tls_CAfile              = /etc/letsencrypt/live/mail.cesticom.com/chain.pem
smtp_tls_protocols           = !SSLv2, !SSLv3
smtp_tls_mandatory_protocols = !SSLv2, !SSLv3
smtp_tls_mandatory_ciphers   = medium
smtp_tls_note_starttls_offer = yes

# Smtpd ( INCOMING )
smtpd_tls_loglevel            = 1
smtpd_tls_auth_only           = yes
smtpd_tls_security_level      = may
smtpd_tls_received_header     = yes
smtpd_tls_protocols           = !SSLv2, !SSLv3
smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3
smtpd_tls_mandatory_ciphers   = medium
smtpd_tls_exclude_ciphers     = aNULL,eNULL,EXPORT,DES,3DES,RC2,RC4,MD5,PSK,SRP,DSS,AECDH,ADH
smtpd_tls_CAfile              = $smtp_tls_CAfile
smtpd_tls_cert_file           = /etc/letsencrypt/live/mail.cesticom.com/cert.pem
smtpd_tls_key_file            = /etc/letsencrypt/live/mail.cesticom.com/privkey.pem
smtpd_tls_dh1024_param_file   = /etc/postfix/ffdhe2048.pem

tls_preempt_cipherlist = yes
tls_random_source      = dev:/dev/urandom

smtp_tls_session_cache_database  = btree:${data_directory}/smtp_scache
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
lmtp_tls_session_cache_database  = btree:${data_directory}/lmtp_scache

#####################
## SASL PARAMETERS ##
#####################

smtpd_sasl_auth_enable          = yes
smtpd_sasl_type                 = dovecot
smtpd_sasl_path                 = private/auth
smtpd_sasl_security_options     = noanonymous
smtpd_sasl_tls_security_options = $smtpd_sasl_security_options
smtpd_sasl_local_domain         = $mydomain
smtpd_sasl_authenticated_header = yes

smtpd_sender_login_maps  = proxy:mysql:/etc/postfix/sql/sender-login-maps.cf
broken_sasl_auth_clients = yes

##############################
## VIRTUALS MAPS PARAMETERS ##
##############################

virtual_uid_maps        = static:UID  # not going to show UID or GID
virtual_gid_maps        = static:GID
virtual_minimum_uid     = UID
virtual_mailbox_base    = /var/mail
virtual_transport       = lmtp:unix:private/dovecot-lmtp
virtual_mailbox_domains = proxy:mysql:/etc/postfix/sql/virtual-mailbox-domains.cf
virtual_mailbox_maps    = proxy:mysql:/etc/postfix/sql/virtual-mailbox-maps.cf,
                          proxy:mysql:/etc/postfix/sql/virtual-alias-domain-mailbox-maps.cf
virtual_alias_maps      = proxy:mysql:/etc/postfix/sql/virtual-alias-maps.cf,
                          proxy:mysql:/etc/postfix/sql/virtual-alias-domain-maps.cf,
                          proxy:mysql:/etc/postfix/sql/virtual-alias-domain-catchall-maps.cf,
                          hash:/etc/postfix/virtual

######################
## ERRORS REPORTING ##
######################

# notify_classes = bounce, delay, resource, software
notify_classes = resource, software

error_notice_recipient     =<EMAIL_ADDRESS># delay_notice_recipient   =<EMAIL_ADDRESS># bounce_notice_recipient  =<EMAIL_ADDRESS># 2bounce_notice_recipient =<EMAIL_ADDRESS>
##################
## RESTRICTIONS ##
##################

##
# Access restrictions for mail relay control that the Postfix SMTP server applies
# in the context of the RCPT TO command, before smtpd_recipient_restrictions
##

# * permit_mynetworks : Permit the request when the client IP address matches any trusted network
# * permit_sasl_authenticated : Permit the request when the client is successfully authenticated
# * reject_unauth_destination : No one else, reject all others relaying requests

smtpd_relay_restrictions=
    permit_mynetworks,
    permit_sasl_authenticated,
    reject_unauth_destination

##
# Restrictions that the Postfix SMTP server applies in the context
# of a client MAIL FROM command
##

# * reject_non_fqdn_sender : Reject when the MAIL FROM address is not in fully-qualified domain form
# * reject_unknown_sender_domain : Reject when the MAIL FROM domain has no DNS MX, no DNS A record or a malformed MX record
# * reject_sender_login_mismatch: Reject when the client is not (SASL) logged in as that MAIL FROM address owner or when the client is (SASL) logged in, but the client login name doesn't own the MAIL FROM address
# * reject_rhsbl_sender : Reject when the MAIL FROM domain is blacklisted in dbl.spamhaus.org

smtpd_sender_restrictions=
    reject_non_fqdn_sender,
    reject_unknown_sender_domain,
    reject_sender_login_mismatch,
    reject_rhsbl_sender dbl.spamhaus.org

##
# Restrictions that the Postfix SMTP server applies in the context
# of a client RCPT TO command, after smtpd_relay_restrictions
##

# * permit_mynetworks : Permit the request when the client IP address matches any trusted network
# * permit_sasl_authenticated : Permit the request when the client is successfully authenticated
# * reject_unknown_recipient_domain : Reject when the RCPT TO domain has no DNS MX or no DNS A record or a malformed MX record
# * reject_non_fqdn_recipient : Reject when the RCPT TO address is not in fully-qualified domain form
# * reject_unlisted_recipient : Reject when the RCPT TO address is not listed in the list of valid recipients for its domain
# * reject_rbl_client : Reject connections from IP addresses blacklisted in zen.spamhaus.org

smtpd_recipient_restrictions=
    permit_mynetworks,
    permit_sasl_authenticated,
    reject_unknown_recipient_domain,
    reject_non_fqdn_recipient,
    reject_unlisted_recipient,
    reject_rbl_client zen.spamhaus.org

##
# Restrictions that the Postfix SMTP server applies in the context of a client HELO command
##

# Fully enforce helo restriction
# without "smtpd_helo_required = yes", a client can simply skip
# smtpd_helo_restrictions by not sending HELO or EHLO
smtpd_helo_required = yes

# * permit_mynetworks : Permit the request when the client IP address matches any trusted network
# * permit_sasl_authenticated : Permit the request when the client is successfully authenticated
# * reject_invalid_helo_hostname : Reject the request when the HELO or EHLO hostname is malformed
# * reject_non_fqdn_helo_hostname : Reject the request when the HELO or EHLO hostname is not in fully-qualified domain

smtpd_helo_restrictions =
    permit_mynetworks,
    permit_sasl_authenticated,
    reject_invalid_helo_hostname,
    reject_non_fqdn_helo_hostname

############
## RSPAMD ##
############

milter_protocol       = 6
milter_default_action = accept
smtpd_milters         = inet:localhost:11332
non_smtpd_milters     = inet:localhost:11332

############
## ZEYPLE ##
############

#content_filter = zeyple

#######################
## YOUR CUSTOM RULES ##
#######################

docker exec mailserver cat /etc/postfix/master.cf
#
# Postfix master process configuration file.  For details on the format
# of the file, see the master(5) manual page (command: "man 5 master").
#
# Do not forget to execute "postfix reload" after editing this file.
#
# ==========================================================================
# service type  private unpriv  chroot  wakeup  maxproc command + args
#               (yes)   (yes)   (yes)   (never) (100)
# ==========================================================================
smtp      inet  n       -       -       -       -       smtpd

submission inet n       -       -       -       -       smtpd
  -o syslog_name=postfix/submission
  -o smtpd_tls_security_level=encrypt
  -o smtpd_tls_ciphers=high
  -o smtpd_client_restrictions=permit_sasl_authenticated,reject
  -o cleanup_service_name=authclean

smtps     inet  n       -       -       -       -       smtpd
  -o syslog_name=postfix/smtps
  -o smtpd_tls_wrappermode=yes
  -o smtpd_tls_ciphers=high
  -o smtpd_client_restrictions=permit_sasl_authenticated,reject
  -o cleanup_service_name=authclean

authclean unix  n       -       -       -       0       cleanup
  -o syslog_name=postfix/authclean
  -o header_checks=pcre:/etc/postfix/header_checks

pickup    fifo  n       -       -       60      1       pickup
  -o content_filter=
  -o receive_override_options=no_header_body_checks

cleanup   unix  n       -       -       -       0       cleanup
qmgr      fifo  n       -       n       300     1       qmgr
tlsmgr    unix  -       -       -       1000?   1       tlsmgr
rewrite   unix  -       -       -       -       -       trivial-rewrite
bounce    unix  -       -       -       -       0       bounce
defer     unix  -       -       -       -       0       bounce
trace     unix  -       -       -       -       0       bounce
verify    unix  -       -       -       -       1       verify
flush     unix  n       -       -       1000?   0       flush
proxymap  unix  -       -       n       -       -       proxymap
proxywrite unix -       -       n       -       1       proxymap
smtp      unix  -       -       -       -       -       smtp
relay     unix  -       -       -       -       -       smtp
showq     unix  n       -       -       -       -       showq
error     unix  -       -       -       -       -       error
retry     unix  -       -       -       -       -       error
discard   unix  -       -       -       -       -       discard
local     unix  -       n       n       -       -       local
virtual   unix  -       n       n       -       -       virtual
lmtp      unix  -       -       -       -       -       lmtp
anvil     unix  -       -       -       -       1       anvil
scache    unix  -       -       -       -       1       scache

zeyple    unix  -       n       n       -       -       pipe
  user=zeyple argv=/usr/local/bin/zeyple.py ${recipient}

<IP_ADDRESS>:10026 inet  n       -       -       -       10      smtpd
  -o content_filter=
  -o receive_override_options=no_unknown_recipient_checks,no_header_body_checks,no_milters
  -o smtpd_helo_restrictions=
  -o smtpd_client_restrictions=
  -o smtpd_sender_restrictions=
  -o smtpd_recipient_restrictions=permit_mynetworks,reject
  -o mynetworks=<IP_ADDRESS>/8,[::1]/128
  -o smtpd_authorized_xforward_hosts=<IP_ADDRESS>/8,[::1]/128

docker exec mailserver postconf
2bounce_notice_recipient = postmaster
access_map_defer_code = 450
access_map_reject_code = 554
address_verify_cache_cleanup_interval = 12h
address_verify_default_transport = $default_transport
address_verify_local_transport = $local_transport
address_verify_map = btree:$data_directory/verify_cache
address_verify_negative_cache = yes
address_verify_negative_expire_time = 3d
address_verify_negative_refresh_time = 3h
address_verify_pending_request_limit = 5000
address_verify_poll_count = ${stress?{1}:{3}}
address_verify_poll_delay = 3s
address_verify_positive_expire_time = 31d
address_verify_positive_refresh_time = 7d
address_verify_relay_transport = $relay_transport
address_verify_relayhost = $relayhost
address_verify_sender = $double_bounce_sender
address_verify_sender_dependent_default_transport_maps = $sender_dependent_default_transport_maps
address_verify_sender_dependent_relayhost_maps = $sender_dependent_relayhost_maps
address_verify_sender_ttl = 0s
address_verify_service_name = verify
address_verify_transport_maps = $transport_maps
address_verify_virtual_transport = $virtual_transport
alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
allow_mail_to_commands = alias, forward
allow_mail_to_files = alias, forward
allow_min_user = no
allow_percent_hack = no
allow_untrusted_routing = no
alternate_config_directories =
always_add_missing_headers = no
always_bcc =
anvil_rate_time_unit = 60s
anvil_status_update_time = 600s
append_at_myorigin = yes
append_dot_mydomain = no
application_event_drain_time = 100s
authorized_flush_users = static:anyone
authorized_mailq_users = static:anyone
authorized_submit_users = static:anyone
backwards_bounce_logfile_compatibility = yes
berkeley_db_create_buffer_size = 16777216
berkeley_db_read_buffer_size = 131072
best_mx_transport =
biff = no
body_checks =
body_checks_size_limit = 51200
bounce_notice_recipient = postmaster
bounce_queue_lifetime = 5d
bounce_service_name = bounce
bounce_size_limit = 50000
bounce_template_file =
broken_sasl_auth_clients = yes
canonical_classes = envelope_sender, envelope_recipient, header_sender, header_recipient
canonical_maps =
cleanup_service_name = cleanup
command_directory = /usr/sbin
command_execution_directory =
command_expansion_filter =<PHONE_NUMBER>!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ
command_time_limit = 1000s
compatibility_level = 2
config_directory = /etc/postfix
confirm_delay_cleared = no
connection_cache_protocol_timeout = 5s
connection_cache_service_name = scache
connection_cache_status_update_time = 600s
connection_cache_ttl_limit = 2s
content_filter =
cyrus_sasl_config_path =
daemon_directory = /usr/lib/postfix/sbin
daemon_table_open_error_is_fatal = no
daemon_timeout = 18000s
data_directory = /var/lib/postfix
debug_peer_level = 2
debug_peer_list =
debugger_command =
default_database_type = hash
default_delivery_slot_cost = 5
default_delivery_slot_discount = 50
default_delivery_slot_loan = 3
default_delivery_status_filter =
default_destination_concurrency_failed_cohort_limit = 1
default_destination_concurrency_limit = 20
default_destination_concurrency_negative_feedback = 1
default_destination_concurrency_positive_feedback = 1
default_destination_rate_delay = 1s
default_destination_recipient_limit = 10
default_extra_recipient_limit = 1000
default_filter_nexthop =
default_minimum_delivery_slots = 3
default_privs = nobody
default_process_limit = 100
default_rbl_reply = $rbl_code Service unavailable; $rbl_class [$rbl_what] blocked using $rbl_domain${rbl_reason?; $rbl_reason}
default_recipient_limit = 20000
default_recipient_refill_delay = 5s
default_recipient_refill_limit = 100
default_transport = smtp
default_transport_rate_delay = 0s
default_verp_delimiters = +=
defer_code = 450
defer_service_name = defer
defer_transports =
delay_logging_resolution_limit = 2
delay_notice_recipient = postmaster
delay_warning_time = 4h
deliver_lock_attempts = 20
deliver_lock_delay = 1s
destination_concurrency_feedback_debug = no
detect_8bit_encoding_header = yes
disable_dns_lookups = no
disable_mime_input_processing = no
disable_mime_output_conversion = no
disable_verp_bounces = no
disable_vrfy_command = yes
dns_ncache_ttl_fix_enable = no
dnsblog_reply_delay = 0s
dnsblog_service_name = dnsblog
dont_remove = 0
double_bounce_sender = double-bounce
duplicate_filter_limit = 1000
empty_address_default_transport_maps_lookup_key = <>
empty_address_recipient = MAILER-DAEMON
empty_address_relayhost_maps_lookup_key = <>
enable_long_queue_ids = no
enable_original_recipient = yes
error_delivery_slot_cost = $default_delivery_slot_cost
error_delivery_slot_discount = $default_delivery_slot_discount
error_delivery_slot_loan = $default_delivery_slot_loan
error_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
error_destination_concurrency_limit = $default_destination_concurrency_limit
error_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
error_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
error_destination_rate_delay = $default_destination_rate_delay
error_destination_recipient_limit = $default_destination_recipient_limit
error_extra_recipient_limit = $default_extra_recipient_limit
error_initial_destination_concurrency = $initial_destination_concurrency
error_minimum_delivery_slots = $default_minimum_delivery_slots
error_notice_recipient =<EMAIL_ADDRESS>error_recipient_limit = $default_recipient_limit
error_recipient_refill_delay = $default_recipient_refill_delay
error_recipient_refill_limit = $default_recipient_refill_limit
error_service_name = error
error_transport_rate_delay = $default_transport_rate_delay
execution_directory_expansion_filter =<PHONE_NUMBER>!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ
expand_owner_alias = no
export_environment = TZ MAIL_CONFIG LANG
fallback_transport =
fallback_transport_maps =
fast_flush_domains = $relay_domains
fast_flush_purge_time = 7d
fast_flush_refresh_time = 12h
fault_injection_code = 0
flush_service_name = flush
fork_attempts = 5
fork_delay = 1s
forward_expansion_filter =<PHONE_NUMBER>!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ
forward_path = $home/.forward${recipient_delimiter}${extension}, $home/.forward
frozen_delivered_to = yes
hash_queue_depth = 1
hash_queue_names = deferred, defer
header_address_token_limit = 10240
header_checks =
header_size_limit = 102400
helpful_warnings = yes
home_mailbox =
hopcount_limit = 50
html_directory = /usr/share/doc/postfix/html
ignore_mx_lookup_error = no
import_environment = MAIL_CONFIG MAIL_DEBUG MAIL_LOGTAG TZ XAUTHORITY DISPLAY LANG=C
in_flow_delay = 1s
inet_interfaces = all
inet_protocols = all
initial_destination_concurrency = 5
internal_mail_filter_classes =
invalid_hostname_reject_code = 501
ipc_idle = 5s
ipc_timeout = 3600s
ipc_ttl = 1000s
line_length_limit = 2048
lmdb_map_size = 16777216
lmtp_address_preference = any
lmtp_address_verify_target = rcpt
lmtp_assume_final = no
lmtp_bind_address =
lmtp_bind_address6 =
lmtp_body_checks =
lmtp_cname_overrides_servername = no
lmtp_connect_timeout = 0s
lmtp_connection_cache_destinations =
lmtp_connection_cache_on_demand = yes
lmtp_connection_cache_time_limit = 2s
lmtp_connection_reuse_count_limit = 0
lmtp_connection_reuse_time_limit = 300s
lmtp_data_done_timeout = 600s
lmtp_data_init_timeout = 120s
lmtp_data_xfer_timeout = 180s
lmtp_defer_if_no_mx_address_found = no
lmtp_delivery_slot_cost = $default_delivery_slot_cost
lmtp_delivery_slot_discount = $default_delivery_slot_discount
lmtp_delivery_slot_loan = $default_delivery_slot_loan
lmtp_delivery_status_filter = $default_delivery_status_filter
lmtp_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
lmtp_destination_concurrency_limit = $default_destination_concurrency_limit
lmtp_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
lmtp_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
lmtp_destination_rate_delay = $default_destination_rate_delay
lmtp_destination_recipient_limit = $default_destination_recipient_limit
lmtp_discard_lhlo_keyword_address_maps =
lmtp_discard_lhlo_keywords =
lmtp_dns_reply_filter =
lmtp_dns_resolver_options =
lmtp_dns_support_level =
lmtp_enforce_tls = no
lmtp_extra_recipient_limit = $default_extra_recipient_limit
lmtp_fallback_relay =
lmtp_generic_maps =
lmtp_header_checks =
lmtp_host_lookup = dns
lmtp_initial_destination_concurrency = $initial_destination_concurrency
lmtp_lhlo_name = $myhostname
lmtp_lhlo_timeout = 300s
lmtp_line_length_limit = 998
lmtp_mail_timeout = 300s
lmtp_mime_header_checks =
lmtp_minimum_delivery_slots = $default_minimum_delivery_slots
lmtp_mx_address_limit = 5
lmtp_mx_session_limit = 2
lmtp_nested_header_checks =
lmtp_per_record_deadline = no
lmtp_pix_workaround_delay_time = 10s
lmtp_pix_workaround_maps =
lmtp_pix_workaround_threshold_time = 500s
lmtp_pix_workarounds = disable_esmtp,delay_dotcrlf
lmtp_quit_timeout = 300s
lmtp_quote_rfc821_envelope = yes
lmtp_randomize_addresses = yes
lmtp_rcpt_timeout = 300s
lmtp_recipient_limit = $default_recipient_limit
lmtp_recipient_refill_delay = $default_recipient_refill_delay
lmtp_recipient_refill_limit = $default_recipient_refill_limit
lmtp_reply_filter =
lmtp_rset_timeout = 20s
lmtp_sasl_auth_cache_name =
lmtp_sasl_auth_cache_time = 90d
lmtp_sasl_auth_enable = no
lmtp_sasl_auth_soft_bounce = yes
lmtp_sasl_mechanism_filter =
lmtp_sasl_password_maps =
lmtp_sasl_path =
lmtp_sasl_security_options = noplaintext, noanonymous
lmtp_sasl_tls_security_options = $lmtp_sasl_security_options
lmtp_sasl_tls_verified_security_options = $lmtp_sasl_tls_security_options
lmtp_sasl_type = cyrus
lmtp_send_dummy_mail_auth = no
lmtp_send_xforward_command = no
lmtp_sender_dependent_authentication = no
lmtp_skip_5xx_greeting = yes
lmtp_skip_quit_response = no
lmtp_starttls_timeout = 300s
lmtp_tcp_port = 24
lmtp_tls_CAfile =
lmtp_tls_CApath =
lmtp_tls_block_early_mail_reply = no
lmtp_tls_cert_file =
lmtp_tls_ciphers = medium
lmtp_tls_dcert_file =
lmtp_tls_dkey_file = $lmtp_tls_dcert_file
lmtp_tls_eccert_file =
lmtp_tls_eckey_file = $lmtp_tls_eccert_file
lmtp_tls_enforce_peername = yes
lmtp_tls_exclude_ciphers =
lmtp_tls_fingerprint_cert_match =
lmtp_tls_fingerprint_digest = md5
lmtp_tls_force_insecure_host_tlsa_lookup = no
lmtp_tls_key_file = $lmtp_tls_cert_file
lmtp_tls_loglevel = 0
lmtp_tls_mandatory_ciphers = medium
lmtp_tls_mandatory_exclude_ciphers =
lmtp_tls_mandatory_protocols = !SSLv2, !SSLv3
lmtp_tls_note_starttls_offer = no
lmtp_tls_per_site =
lmtp_tls_policy_maps =
lmtp_tls_protocols = !SSLv2, !SSLv3
lmtp_tls_scert_verifydepth = 9
lmtp_tls_secure_cert_match = nexthop
lmtp_tls_security_level =
lmtp_tls_session_cache_database = btree:${data_directory}/lmtp_scache
lmtp_tls_session_cache_timeout = 3600s
lmtp_tls_trust_anchor_file =
lmtp_tls_verify_cert_match = hostname
lmtp_tls_wrappermode = no
lmtp_transport_rate_delay = $default_transport_rate_delay
lmtp_use_tls = no
lmtp_xforward_timeout = 300s
local_command_shell =
local_delivery_slot_cost = $default_delivery_slot_cost
local_delivery_slot_discount = $default_delivery_slot_discount
local_delivery_slot_loan = $default_delivery_slot_loan
local_delivery_status_filter = $default_delivery_status_filter
local_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
local_destination_concurrency_limit = 2
local_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
local_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
local_destination_rate_delay = $default_destination_rate_delay
local_destination_recipient_limit = 1
local_extra_recipient_limit = $default_extra_recipient_limit
local_header_rewrite_clients = permit_inet_interfaces
local_initial_destination_concurrency = $initial_destination_concurrency
local_minimum_delivery_slots = $default_minimum_delivery_slots
local_recipient_limit = $default_recipient_limit
local_recipient_maps = proxy:unix:passwd.byname $alias_maps
local_recipient_refill_delay = $default_recipient_refill_delay
local_recipient_refill_limit = $default_recipient_refill_limit
local_transport = local:$myhostname
local_transport_rate_delay = $default_transport_rate_delay
luser_relay =
mail_name = Postfix
mail_owner = postfix
mail_release_date = 20180127
mail_spool_directory = /var/mail
mail_version = 3.1.8
mailbox_command = procmail -a "$EXTENSION"
mailbox_command_maps =
mailbox_delivery_lock = fcntl, dotlock
mailbox_size_limit =<PHONE_NUMBER>
mailbox_transport =
mailbox_transport_maps =
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
maps_rbl_domains =
maps_rbl_reject_code = 554
masquerade_classes = envelope_sender, header_sender, header_recipient
masquerade_domains =
masquerade_exceptions =
master_service_disable =
max_idle = 100s
max_use = 100
maximal_backoff_time = 4000s
maximal_queue_lifetime = 5d
message_drop_headers = bcc, content-length, resent-bcc, return-path
message_reject_characters =
message_size_limit = 502400000
message_strip_characters =
meta_directory = /etc/postfix
milter_command_timeout = 30s
milter_connect_macros = j {daemon_name} v
milter_connect_timeout = 30s
milter_content_timeout = 300s
milter_data_macros = i
milter_default_action = accept
milter_end_of_data_macros = i
milter_end_of_header_macros = i
milter_header_checks =
milter_helo_macros = {tls_version} {cipher} {cipher_bits} {cert_subject} {cert_issuer}
milter_macro_daemon_name = $myhostname
milter_macro_defaults =
milter_macro_v = $mail_name $mail_version
milter_mail_macros = i {auth_type} {auth_authen} {auth_author} {mail_addr} {mail_host} {mail_mailer}
milter_protocol = 6
milter_rcpt_macros = i {rcpt_addr} {rcpt_host} {rcpt_mailer}
milter_unknown_command_macros =
mime_boundary_length_limit = 2048
mime_header_checks = $header_checks
mime_nesting_limit = 100
minimal_backoff_time = 300s
multi_instance_directories =
multi_instance_enable = no
multi_instance_group =
multi_instance_name =
multi_instance_wrapper =
multi_recipient_bounce_reject_code = 550
mydestination = localhost localhost.$mydomain
mydomain = cesticom.com
myhostname = mail.cesticom.com
mynetworks = <IP_ADDRESS>/8 [::ffff:<IP_ADDRESS>]/104 [::1]/128 <IP_ADDRESS>/16 <IP_ADDRESS>/12 <IP_ADDRESS>/8
mynetworks_style = ${{$compatibility_level} < {2} ? {subnet} : {host}}
myorigin = mail.cesticom.com
nested_header_checks = $header_checks
newaliases_path = /usr/bin/newaliases
non_fqdn_reject_code = 504
non_smtpd_milters = inet:localhost:11332
notify_classes = resource, software
openssl_path = openssl
owner_request_special = yes
parent_domain_matches_subdomains = debug_peer_list,fast_flush_domains,mynetworks,permit_mx_backup_networks,qmqpd_authorized_clients,relay_domains,smtpd_access_maps
permit_mx_backup_networks =
pickup_service_name = pickup
pipe_delivery_status_filter = $default_delivery_status_filter
plaintext_reject_code = 450
postmulti_control_commands = reload flush
postmulti_start_commands = start
postmulti_stop_commands = stop abort drain quick-stop
postscreen_access_list = permit_mynetworks
postscreen_bare_newline_action = ignore
postscreen_bare_newline_enable = no
postscreen_bare_newline_ttl = 30d
postscreen_blacklist_action = ignore
postscreen_cache_cleanup_interval = 12h
postscreen_cache_map = btree:$data_directory/postscreen_cache
postscreen_cache_retention_time = 7d
postscreen_client_connection_count_limit = $smtpd_client_connection_count_limit
postscreen_command_count_limit = 20
postscreen_command_filter =
postscreen_command_time_limit = ${stress?{10}:{300}}s
postscreen_disable_vrfy_command = $disable_vrfy_command
postscreen_discard_ehlo_keyword_address_maps = $smtpd_discard_ehlo_keyword_address_maps
postscreen_discard_ehlo_keywords = $smtpd_discard_ehlo_keywords
postscreen_dnsbl_action = ignore
postscreen_dnsbl_max_ttl = ${postscreen_dnsbl_ttl?{$postscreen_dnsbl_ttl}:{1}}h
postscreen_dnsbl_min_ttl = 60s
postscreen_dnsbl_reply_map =
postscreen_dnsbl_sites =
postscreen_dnsbl_threshold = 1
postscreen_dnsbl_timeout = 10s
postscreen_dnsbl_whitelist_threshold = 0
postscreen_enforce_tls = $smtpd_enforce_tls
postscreen_expansion_filter = $smtpd_expansion_filter
postscreen_forbidden_commands = $smtpd_forbidden_commands
postscreen_greet_action = ignore
postscreen_greet_banner = $smtpd_banner
postscreen_greet_ttl = 1d
postscreen_greet_wait = ${stress?{2}:{6}}s
postscreen_helo_required = $smtpd_helo_required
postscreen_non_smtp_command_action = drop
postscreen_non_smtp_command_enable = no
postscreen_non_smtp_command_ttl = 30d
postscreen_pipelining_action = enforce
postscreen_pipelining_enable = no
postscreen_pipelining_ttl = 30d
postscreen_post_queue_limit = $default_process_limit
postscreen_pre_queue_limit = $default_process_limit
postscreen_reject_footer = $smtpd_reject_footer
postscreen_tls_security_level = $smtpd_tls_security_level
postscreen_upstream_proxy_protocol =
postscreen_upstream_proxy_timeout = 5s
postscreen_use_tls = $smtpd_use_tls
postscreen_watchdog_timeout = 10s
postscreen_whitelist_interfaces = static:all
prepend_delivered_header = command, file, forward
process_id = 667
process_id_directory = pid
process_name = postconf
propagate_unmatched_extensions = canonical, virtual
proxy_interfaces =
proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $transport_maps $mynetworks $smtpd_sender_login_maps $sender_bcc_maps $recipient_bcc_maps $smtp_generic_maps $lmtp_generic_maps $alias_maps $smtpd_client_restrictions $smtpd_helo_restrictions $smtpd_sender_restrictions $smtpd_relay_restrictions $smtpd_recipient_restrictions
proxy_write_maps = $smtp_sasl_auth_cache_name $lmtp_sasl_auth_cache_name $address_verify_map $postscreen_cache_map
proxymap_service_name = proxymap
proxywrite_service_name = proxywrite
qmgr_clog_warn_time = 300s
qmgr_daemon_timeout = 1000s
qmgr_fudge_factor = 100
qmgr_ipc_timeout = 60s
qmgr_message_active_limit = 20000
qmgr_message_recipient_limit = 20000
qmgr_message_recipient_minimum = 10
qmqpd_authorized_clients =
qmqpd_client_port_logging = no
qmqpd_error_delay = 1s
qmqpd_timeout = 300s
queue_directory = /var/spool/postfix
queue_file_attribute_count_limit = 100
queue_minfree = 0
queue_run_delay = 300s
queue_service_name = qmgr
rbl_reply_maps =
readme_directory = no
receive_override_options =
recipient_bcc_maps =
recipient_canonical_classes = envelope_recipient, header_recipient
recipient_canonical_maps =
recipient_delimiter = +
reject_code = 554
reject_tempfail_action = defer_if_permit
relay_clientcerts =
relay_delivery_slot_cost = $default_delivery_slot_cost
relay_delivery_slot_discount = $default_delivery_slot_discount
relay_delivery_slot_loan = $default_delivery_slot_loan
relay_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
relay_destination_concurrency_limit = $default_destination_concurrency_limit
relay_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
relay_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
relay_destination_rate_delay = $default_destination_rate_delay
relay_destination_recipient_limit = $default_destination_recipient_limit
relay_domains = ${{$compatibility_level} < {2} ? {$mydestination} : {}}
relay_domains_reject_code = 554
relay_extra_recipient_limit = $default_extra_recipient_limit
relay_initial_destination_concurrency = $initial_destination_concurrency
relay_minimum_delivery_slots = $default_minimum_delivery_slots
relay_recipient_limit = $default_recipient_limit
relay_recipient_maps =
relay_recipient_refill_delay = $default_recipient_refill_delay
relay_recipient_refill_limit = $default_recipient_refill_limit
relay_transport = relay
relay_transport_rate_delay = $default_transport_rate_delay
relayhost =
relocated_maps =
remote_header_rewrite_domain =
require_home_directory = no
reset_owner_alias = no
resolve_dequoted_address = yes
resolve_null_domain = no
resolve_numeric_domain = no
retry_delivery_slot_cost = $default_delivery_slot_cost
retry_delivery_slot_discount = $default_delivery_slot_discount
retry_delivery_slot_loan = $default_delivery_slot_loan
retry_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
retry_destination_concurrency_limit = $default_destination_concurrency_limit
retry_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
retry_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
retry_destination_rate_delay = $default_destination_rate_delay
retry_destination_recipient_limit = $default_destination_recipient_limit
retry_extra_recipient_limit = $default_extra_recipient_limit
retry_initial_destination_concurrency = $initial_destination_concurrency
retry_minimum_delivery_slots = $default_minimum_delivery_slots
retry_recipient_limit = $default_recipient_limit
retry_recipient_refill_delay = $default_recipient_refill_delay
retry_recipient_refill_limit = $default_recipient_refill_limit
retry_transport_rate_delay = $default_transport_rate_delay
rewrite_service_name = rewrite
sample_directory = /etc/postfix
send_cyrus_sasl_authzid = no
sender_bcc_maps =
sender_canonical_classes = envelope_sender, header_sender
sender_canonical_maps =
sender_dependent_default_transport_maps =
sender_dependent_relayhost_maps =
sendmail_fix_line_endings = always
sendmail_path = /usr/sbin/sendmail
service_throttle_time = 60s
setgid_group = postdrop
shlib_directory = /usr/lib/postfix
show_user_unknown_table_name = yes
showq_service_name = showq
smtp_address_preference = any
smtp_address_verify_target = rcpt
smtp_always_send_ehlo = yes
smtp_bind_address =
smtp_bind_address6 =
smtp_body_checks =
smtp_cname_overrides_servername = no
smtp_connect_timeout = 30s
smtp_connection_cache_destinations =
smtp_connection_cache_on_demand = yes
smtp_connection_cache_time_limit = 2s
smtp_connection_reuse_count_limit = 0
smtp_connection_reuse_time_limit = 300s
smtp_data_done_timeout = 600s
smtp_data_init_timeout = 120s
smtp_data_xfer_timeout = 180s
smtp_defer_if_no_mx_address_found = no
smtp_delivery_slot_cost = $default_delivery_slot_cost
smtp_delivery_slot_discount = $default_delivery_slot_discount
smtp_delivery_slot_loan = $default_delivery_slot_loan
smtp_delivery_status_filter = $default_delivery_status_filter
smtp_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
smtp_destination_concurrency_limit = $default_destination_concurrency_limit
smtp_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
smtp_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
smtp_destination_rate_delay = $default_destination_rate_delay
smtp_destination_recipient_limit = $default_destination_recipient_limit
smtp_discard_ehlo_keyword_address_maps =
smtp_discard_ehlo_keywords =
smtp_dns_reply_filter =
smtp_dns_resolver_options =
smtp_dns_support_level = dnssec
smtp_enforce_tls = no
smtp_extra_recipient_limit = $default_extra_recipient_limit
smtp_fallback_relay = $fallback_relay
smtp_generic_maps =
smtp_header_checks =
smtp_helo_name = $myhostname
smtp_helo_timeout = 300s
smtp_host_lookup = dns
smtp_initial_destination_concurrency = $initial_destination_concurrency
smtp_line_length_limit = 998
smtp_mail_timeout = 300s
smtp_mime_header_checks =
smtp_minimum_delivery_slots = $default_minimum_delivery_slots
smtp_mx_address_limit = 5
smtp_mx_session_limit = 2
smtp_nested_header_checks =
smtp_never_send_ehlo = no
smtp_per_record_deadline = no
smtp_pix_workaround_delay_time = 10s
smtp_pix_workaround_maps =
smtp_pix_workaround_threshold_time = 500s
smtp_pix_workarounds = disable_esmtp,delay_dotcrlf
smtp_quit_timeout = 300s
smtp_quote_rfc821_envelope = yes
smtp_randomize_addresses = yes
smtp_rcpt_timeout = 300s
smtp_recipient_limit = $default_recipient_limit
smtp_recipient_refill_delay = $default_recipient_refill_delay
smtp_recipient_refill_limit = $default_recipient_refill_limit
smtp_reply_filter =
smtp_rset_timeout = 20s
smtp_sasl_auth_cache_name =
smtp_sasl_auth_cache_time = 90d
smtp_sasl_auth_enable = no
smtp_sasl_auth_soft_bounce = yes
smtp_sasl_mechanism_filter =
smtp_sasl_password_maps =
smtp_sasl_path =
smtp_sasl_security_options = noplaintext, noanonymous
smtp_sasl_tls_security_options = $smtp_sasl_security_options
smtp_sasl_tls_verified_security_options = $smtp_sasl_tls_security_options
smtp_sasl_type = cyrus
smtp_send_dummy_mail_auth = no
smtp_send_xforward_command = no
smtp_sender_dependent_authentication = no
smtp_skip_5xx_greeting = yes
smtp_skip_quit_response = yes
smtp_starttls_timeout = 300s
smtp_tls_CAfile = /etc/letsencrypt/live/mail.cesticom.com/chain.pem
smtp_tls_CApath =
smtp_tls_block_early_mail_reply = no
smtp_tls_cert_file =
smtp_tls_ciphers = medium
smtp_tls_dane_insecure_mx_policy = dane
smtp_tls_dcert_file =
smtp_tls_dkey_file = $smtp_tls_dcert_file
smtp_tls_eccert_file =
smtp_tls_eckey_file = $smtp_tls_eccert_file
smtp_tls_enforce_peername = yes
smtp_tls_exclude_ciphers =
smtp_tls_fingerprint_cert_match =
smtp_tls_fingerprint_digest = md5
smtp_tls_force_insecure_host_tlsa_lookup = no
smtp_tls_key_file = $smtp_tls_cert_file
smtp_tls_loglevel = 1
smtp_tls_mandatory_ciphers = medium
smtp_tls_mandatory_exclude_ciphers =
smtp_tls_mandatory_protocols = !SSLv2, !SSLv3
smtp_tls_note_starttls_offer = yes
smtp_tls_per_site =
smtp_tls_policy_maps =
smtp_tls_protocols = !SSLv2, !SSLv3
smtp_tls_scert_verifydepth = 9
smtp_tls_secure_cert_match = nexthop, dot-nexthop
smtp_tls_security_level = dane
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
smtp_tls_session_cache_timeout = 3600s
smtp_tls_trust_anchor_file =
smtp_tls_verify_cert_match = hostname
smtp_tls_wrappermode = no
smtp_transport_rate_delay = $default_transport_rate_delay
smtp_use_tls = no
smtp_xforward_timeout = 300s
smtpd_authorized_verp_clients = $authorized_verp_clients
smtpd_authorized_xclient_hosts =
smtpd_authorized_xforward_hosts =
smtpd_banner = $myhostname ESMTP $mail_name
smtpd_client_auth_rate_limit = 0
smtpd_client_connection_count_limit = 50
smtpd_client_connection_rate_limit = 0
smtpd_client_event_limit_exceptions = ${smtpd_client_connection_limit_exceptions:$mynetworks}
smtpd_client_message_rate_limit = 0
smtpd_client_new_tls_session_rate_limit = 0
smtpd_client_port_logging = no
smtpd_client_recipient_rate_limit = 0
smtpd_client_restrictions =
smtpd_command_filter =
smtpd_data_restrictions =
smtpd_delay_open_until_valid_rcpt = yes
smtpd_delay_reject = yes
smtpd_discard_ehlo_keyword_address_maps =
smtpd_discard_ehlo_keywords =
smtpd_dns_reply_filter =
smtpd_end_of_data_restrictions =
smtpd_enforce_tls = no
smtpd_error_sleep_time = 1s
smtpd_etrn_restrictions =
smtpd_expansion_filter = \t\40!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~
smtpd_forbidden_commands = CONNECT GET POST
smtpd_hard_error_limit = ${stress?{1}:{20}}
smtpd_helo_required = yes
smtpd_helo_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_invalid_helo_hostname, reject_non_fqdn_helo_hostname
smtpd_history_flush_threshold = 100
smtpd_junk_command_limit = ${stress?{1}:{100}}
smtpd_log_access_permit_actions =
smtpd_milters = inet:localhost:11332
smtpd_noop_commands =
smtpd_null_access_lookup_key = <>
smtpd_peername_lookup = yes
smtpd_per_record_deadline = ${stress?{yes}:{no}}
smtpd_policy_service_default_action = 451 4.3.5 Server configuration problem
smtpd_policy_service_max_idle = 300s
smtpd_policy_service_max_ttl = 1000s
smtpd_policy_service_policy_context =
smtpd_policy_service_request_limit = 0
smtpd_policy_service_retry_delay = 1s
smtpd_policy_service_timeout = 100s
smtpd_policy_service_try_limit = 2
smtpd_proxy_ehlo = $myhostname
smtpd_proxy_filter =
smtpd_proxy_options =
smtpd_proxy_timeout = 100s
smtpd_recipient_limit = 1000
smtpd_recipient_overshoot_limit = 1000
smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unknown_recipient_domain, reject_non_fqdn_recipient, reject_unlisted_recipient, reject_rbl_client zen.spamhaus.org
smtpd_reject_footer =
smtpd_reject_unlisted_recipient = yes
smtpd_reject_unlisted_sender = no
smtpd_relay_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination
smtpd_restriction_classes =
smtpd_sasl_auth_enable = yes
smtpd_sasl_authenticated_header = yes
smtpd_sasl_exceptions_networks =
smtpd_sasl_local_domain = $mydomain
smtpd_sasl_path = private/auth
smtpd_sasl_security_options = noanonymous
smtpd_sasl_service = smtp
smtpd_sasl_tls_security_options = $smtpd_sasl_security_options
smtpd_sasl_type = dovecot
smtpd_sender_login_maps = proxy:mysql:/etc/postfix/sql/sender-login-maps.cf
smtpd_sender_restrictions = reject_non_fqdn_sender, reject_unknown_sender_domain, reject_sender_login_mismatch, reject_rhsbl_sender dbl.spamhaus.org
smtpd_service_name = smtpd
smtpd_soft_error_limit = 10
smtpd_starttls_timeout = ${stress?{10}:{300}}s
smtpd_timeout = ${stress?{10}:{300}}s
smtpd_tls_CAfile = $smtp_tls_CAfile
smtpd_tls_CApath =
smtpd_tls_always_issue_session_ids = yes
smtpd_tls_ask_ccert = no
smtpd_tls_auth_only = yes
smtpd_tls_ccert_verifydepth = 9
smtpd_tls_cert_file = /etc/letsencrypt/live/mail.cesticom.com/cert.pem
smtpd_tls_ciphers = medium
smtpd_tls_dcert_file =
smtpd_tls_dh1024_param_file = /etc/postfix/ffdhe2048.pem
smtpd_tls_dh512_param_file =
smtpd_tls_dkey_file = $smtpd_tls_dcert_file
smtpd_tls_eccert_file =
smtpd_tls_eckey_file = $smtpd_tls_eccert_file
smtpd_tls_eecdh_grade = strong
smtpd_tls_exclude_ciphers = aNULL,eNULL,EXPORT,DES,3DES,RC2,RC4,MD5,PSK,SRP,DSS,AECDH,ADH
smtpd_tls_fingerprint_digest = md5
smtpd_tls_key_file = /etc/letsencrypt/live/mail.cesticom.com/privkey.pem
smtpd_tls_loglevel = 1
smtpd_tls_mandatory_ciphers = medium
smtpd_tls_mandatory_exclude_ciphers =
smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3
smtpd_tls_protocols = !SSLv2, !SSLv3
smtpd_tls_received_header = yes
smtpd_tls_req_ccert = no
smtpd_tls_security_level = may
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtpd_tls_session_cache_timeout = 3600s
smtpd_tls_wrappermode = no
smtpd_upstream_proxy_protocol =
smtpd_upstream_proxy_timeout = 5s
smtpd_use_tls = no
smtputf8_autodetect_classes = sendmail, verify
smtputf8_enable = yes
soft_bounce = no
stale_lock_time = 500s
stress =
strict_7bit_headers = no
strict_8bitmime = no
strict_8bitmime_body = no
strict_mailbox_ownership = yes
strict_mime_encoding_domain = no
strict_rfc821_envelopes = no
strict_smtputf8 = no
sun_mailtool_compatibility = no
swap_bangpath = yes
syslog_facility = mail
syslog_name = ${multi_instance_name?{$multi_instance_name}:{postfix}}
tcp_windowsize = 0
tls_append_default_CA = no
tls_daemon_random_bytes = 32
tls_dane_digest_agility = on
tls_dane_digests = sha512 sha256
tls_dane_trust_anchor_digest_enable = yes
tls_disable_workarounds =
tls_eecdh_strong_curve = prime256v1
tls_eecdh_ultra_curve = secp384r1
tls_export_cipherlist = aNULL:-aNULL:HIGH:MEDIUM:LOW:EXPORT:+RC4:@STRENGTH
tls_high_cipherlist = aNULL:-aNULL:HIGH:@STRENGTH
tls_legacy_public_key_fingerprints = no
tls_low_cipherlist = aNULL:-aNULL:HIGH:MEDIUM:LOW:+RC4:@STRENGTH
tls_medium_cipherlist = aNULL:-aNULL:HIGH:MEDIUM:+RC4:@STRENGTH
tls_null_cipherlist = eNULL:!aNULL
tls_preempt_cipherlist = yes
tls_random_bytes = 32
tls_random_exchange_name = ${data_directory}/prng_exch
tls_random_prng_update_period = 3600s
tls_random_reseed_period = 3600s
tls_random_source = dev:/dev/urandom
tls_session_ticket_cipher = aes-256-cbc
tls_ssl_options =
tls_wildcard_matches_multiple_labels = yes
tlsmgr_service_name = tlsmgr
tlsproxy_enforce_tls = $smtpd_enforce_tls
tlsproxy_service_name = tlsproxy
tlsproxy_tls_CAfile = $smtpd_tls_CAfile
tlsproxy_tls_CApath = $smtpd_tls_CApath
tlsproxy_tls_always_issue_session_ids = $smtpd_tls_always_issue_session_ids
tlsproxy_tls_ask_ccert = $smtpd_tls_ask_ccert
tlsproxy_tls_ccert_verifydepth = $smtpd_tls_ccert_verifydepth
tlsproxy_tls_cert_file = $smtpd_tls_cert_file
tlsproxy_tls_ciphers = $smtpd_tls_ciphers
tlsproxy_tls_dcert_file = $smtpd_tls_dcert_file
tlsproxy_tls_dh1024_param_file = $smtpd_tls_dh1024_param_file
tlsproxy_tls_dh512_param_file = $smtpd_tls_dh512_param_file
tlsproxy_tls_dkey_file = $smtpd_tls_dkey_file
tlsproxy_tls_eccert_file = $smtpd_tls_eccert_file
tlsproxy_tls_eckey_file = $smtpd_tls_eckey_file
tlsproxy_tls_eecdh_grade = $smtpd_tls_eecdh_grade
tlsproxy_tls_exclude_ciphers = $smtpd_tls_exclude_ciphers
tlsproxy_tls_fingerprint_digest = $smtpd_tls_fingerprint_digest
tlsproxy_tls_key_file = $smtpd_tls_key_file
tlsproxy_tls_loglevel = $smtpd_tls_loglevel
tlsproxy_tls_mandatory_ciphers = $smtpd_tls_mandatory_ciphers
tlsproxy_tls_mandatory_exclude_ciphers = $smtpd_tls_mandatory_exclude_ciphers
tlsproxy_tls_mandatory_protocols = $smtpd_tls_mandatory_protocols
tlsproxy_tls_protocols = $smtpd_tls_protocols
tlsproxy_tls_req_ccert = $smtpd_tls_req_ccert
tlsproxy_tls_security_level = $smtpd_tls_security_level
tlsproxy_use_tls = $smtpd_use_tls
tlsproxy_watchdog_timeout = 10s
trace_service_name = trace
transport_maps =
transport_retry_time = 60s
trigger_timeout = 10s
undisclosed_recipients_header =
unknown_address_reject_code = 450
unknown_address_tempfail_action = $reject_tempfail_action
unknown_client_reject_code = 450
unknown_helo_hostname_tempfail_action = $reject_tempfail_action
unknown_hostname_reject_code = 450
unknown_local_recipient_reject_code = 550
unknown_relay_recipient_reject_code = 550
unknown_virtual_alias_reject_code = 550
unknown_virtual_mailbox_reject_code = 550
unverified_recipient_defer_code = 450
unverified_recipient_reject_code = 450
unverified_recipient_reject_reason =
unverified_recipient_tempfail_action = $reject_tempfail_action
unverified_sender_defer_code = 450
unverified_sender_reject_code = 450
unverified_sender_reject_reason =
unverified_sender_tempfail_action = $reject_tempfail_action
verp_delimiter_filter = -=+
virtual_alias_address_length_limit = 1000
virtual_alias_domains = $virtual_alias_maps
virtual_alias_expansion_limit = 1000
virtual_alias_maps = proxy:mysql:/etc/postfix/sql/virtual-alias-maps.cf, proxy:mysql:/etc/postfix/sql/virtual-alias-domain-maps.cf, proxy:mysql:/etc/postfix/sql/virtual-alias-domain-catchall-maps.cf, hash:/etc/postfix/virtual
virtual_alias_recursion_limit = 1000
virtual_delivery_slot_cost = $default_delivery_slot_cost
virtual_delivery_slot_discount = $default_delivery_slot_discount
virtual_delivery_slot_loan = $default_delivery_slot_loan
virtual_delivery_status_filter = $default_delivery_status_filter
virtual_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
virtual_destination_concurrency_limit = $default_destination_concurrency_limit
virtual_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
virtual_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
virtual_destination_rate_delay = $default_destination_rate_delay
virtual_destination_recipient_limit = $default_destination_recipient_limit
virtual_extra_recipient_limit = $default_extra_recipient_limit
virtual_gid_maps = static:GID
virtual_initial_destination_concurrency = $initial_destination_concurrency
virtual_mailbox_base = /var/mail
virtual_mailbox_domains = proxy:mysql:/etc/postfix/sql/virtual-mailbox-domains.cf
virtual_mailbox_limit = 51200000
virtual_mailbox_lock = fcntl, dotlock
virtual_mailbox_maps = proxy:mysql:/etc/postfix/sql/virtual-mailbox-maps.cf, proxy:mysql:/etc/postfix/sql/virtual-alias-domain-mailbox-maps.cf
virtual_minimum_delivery_slots = $default_minimum_delivery_slots
virtual_minimum_uid = UID
virtual_recipient_limit = $default_recipient_limit
virtual_recipient_refill_delay = $default_recipient_refill_delay
virtual_recipient_refill_limit = $default_recipient_refill_limit
virtual_transport = lmtp:unix:private/dovecot-lmtp
virtual_transport_rate_delay = $default_transport_rate_delay
virtual_uid_maps = static:UID
zeyple_delivery_slot_cost = $default_delivery_slot_cost
zeyple_delivery_slot_discount = $default_delivery_slot_discount
zeyple_delivery_slot_loan = $default_delivery_slot_loan
zeyple_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit
zeyple_destination_concurrency_limit = $default_destination_concurrency_limit
zeyple_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback
zeyple_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback
zeyple_destination_rate_delay = $default_destination_rate_delay
zeyple_destination_recipient_limit = $default_destination_recipient_limit
zeyple_extra_recipient_limit = $default_extra_recipient_limit
zeyple_initial_destination_concurrency = $initial_destination_concurrency
zeyple_minimum_delivery_slots = $default_minimum_delivery_slots
zeyple_recipient_limit = $default_recipient_limit
zeyple_recipient_refill_delay = $default_recipient_refill_delay
zeyple_recipient_refill_limit = $default_recipient_refill_limit
zeyple_time_limit = $command_time_limit
zeyple_transport_rate_delay = $default_transport_rate_delay

docker exec mailserver /bin/bash -c "egrep -R -I "{{.*}}" /etc/postfix"
zsh: no matches found: egrep -R -I {{.*}} /etc/postfix
docker exec -ti mailserver bash
root@mail:/# egrep -R -I "{{.*}}" /etc/postfix

egrep shows nothing

I must add that I tried to send an email again and it did not work, as for the internal configuration of the email server, it was as close as possible to the default (the GIDs and UIDs put them to keep the user that they provided me with). Should I show the DNS records? Or will you see the records that are currently in operation?

Do you use a clustering system like Docker Swarm or k8s ?

Docker swarm is active but not in use (Im new in docker, never learned k8s), the swarm was activated in a test on the server, but the docker-compose up -d is the command we use to start the service (that does not start the services in the swarm), - RELAY_NETWORKS=<IP_ADDRESS>/16 <IP_ADDRESS>/12 <IP_ADDRESS>/8 in the uploaded file /mnt/CesticomVPS/mail.server/docker-compose.yml should have done this, AND that doesn't explain why even messages from postfixadmin, rainloop, openssl sessions openssl s_client -connect mail.cesticom.com:587 -starttls smtp -tlsextdebug, or localhost (mailserver localhost) can't reach the server users inbox.

Sorry I do not see where is the problem.
Can you test with the simplest configuration possible ? No clustering directives, only one docker-compose.yml, default env variables, exactly like in the readme.

Sorry about the delayed response, I'm abit sick now and is difficult to put myself to rewrite all.
About testing with the default style, I'm working on setup the mailserver since March, I started with the default configs and they trow me the same errors, + the old error with HOSTNAME var in the .env, so my coworkers and boss insisted that they needed the website (traefik, php and nginx) working before. I got to setup everything before the mailserver, them started testing the compatibility and rainloop, postfixadmin and rspamd works nicely with this structure, the .env are working fine before our latest modifications, the problems are still the same.. even with the port 25, 465, and 587 open in the firewall, and being directly bridged to docker, the mailserver always shows relay errors, even with user accounts instead of the alias.
I will use the default files in the readme.md, deactivate the swarm mode, get down the website with compose down and use the /mnt/docker/ directory to setup the test. and show the results here. But before I need to ask how I can show you all those configs/logs?, can you give me the commands to show the configs or logs you need to read?.
About Openssl command (openssl from my pc to the server):
openssl s_client -connect mail.cesticom.com:587 -starttls smtp -tlsextdebug
CONNECTED(00000003)
TLS server extension "renegotiation info" (id=65281), len=1
0001 - <SPACES/NULS>
TLS server extension "EC point formats" (id=11), len=4
0000 - 03 00 01 02                                       ....
TLS server extension "session ticket" (id=35), len=0
depth=2 O = Digital Signature Trust Co., CN = DST Root CA X3
verify return:1
depth=1 C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3
verify return:1
depth=0 CN = cesticom.com
verify return:1
---
Certificate chain
 0 s:/CN=cesticom.com
   i:/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3
 1 s:/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3
   i:/O=Digital Signature Trust Co./CN=DST Root CA X3
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=/CN=cesticom.com
issuer=/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3
---
No client certificate CA names sent
Peer signing digest: SHA512
Server Temp Key: ECDH, P-256, 256 bits
---
SSL handshake has read 4227 bytes and written 466 bytes
---
New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Server public key is 4096 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES256-GCM-SHA384
    Session-ID: 76E03FE394BDCB222E1573CC1D436CFFD5564B78FB84FB70BA62433CF561018F
    Session-ID-ctx:
    Master-Key: 66F222D1C4826E6BD3DD2A98E2B39BFC0CB9EB7B5B7112E9E8F06F40CFF292ABD2DF425B34D1941A3276858224F32B5C
    Key-Arg   : None
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 7200 (seconds)
    TLS session ticket:
    0000 - 12 e4 79 38 26 30 07 ad-c5 7c a8 ba d4 59 6e a9   ..y8&0...|...Yn.
    0010 - 4d a7 e4 42 4f 1c 14 d1-ed d3 c0 ce 8f 86 4b b7   M..BO.........K.
    0020 - 9f f1 7b 35 09 67 0d fa-73 bf 15 c4 b1 11 e0 4b   ..{5.g..s......K
    0030 - dd f6 09 f0 37 43 c7 f4-ad bf b0 0e e1 34 47 59   ....7C.......4GY
    0040 - 36 d2 85 4e 27 07 4c a6-e0 1c a4 d5 14 f1 3d 0e   6..N'.L.......=.
    0050 - 0a 61 da 5a 0d 97 64 c9-e0 80 63 bc f7 6a 65 29   .a.Z..d...c..je)
    0060 - 2e 07 b2 35 93 b7 ed 34-cb 08 7e e9 5a 8b da bc   ...5...4..~.Z...
    0070 - a1 2f ba dd 89 19 3d a8-72 fd 48 dd ef f6 e1 0e   ./....=.r.H.....
    0080 - 09 4c e8 5c a1 24 be ef-40 c9 af c9 4b 35 aa b3<EMAIL_ADDRESS>    0090 - 3c af 73 c7 f6 33 63 37-7b b6 ed c0 35 35 e6 a3   <.s..3c7{...55..

    Start Time:<PHONE_NUMBER>
    Timeout   : 300 (sec)
    Verify return code: 0 (ok)
---
250 SMTPUTF8
ehlo cesticom.com
250-mail.cesticom.com
250-PIPELINING
250-SIZE 502400000
250-ETRN
250-AUTH PLAIN LOGIN
250-AUTH=PLAIN LOGIN
250-ENHANCEDSTATUSCODES
250-8BITMIME
250-DSN
250 SMTPUTF8
AUTH PLAIN<EMAIL_ADDRESS>235 2.7.0 Authentication successful
ehlo cesticom.com
250-mail.cesticom.com
250-PIPELINING
250-SIZE 502400000
250-ETRN
250-AUTH PLAIN LOGIN
250-AUTH=PLAIN LOGIN
250-ENHANCEDSTATUSCODES
250-8BITMIME
250-DSN
250 SMTPUTF8
mail from<EMAIL_ADDRESS>250 2.1.0 Ok
rcpt to<EMAIL_ADDRESS>250 2.1.5 Ok
data
354 End data with <CR><LF>.<CR><LF>
From<EMAIL_ADDRESS>To<EMAIL_ADDRESS>Subject: Test ESMTP Auth LOGIN
palabras variadas aqui.
.
250 2.0.0 Ok: queued as 3A9223F4E2
quit
221 2.0.0 Bye
closed

docker-compose logs mailserver shows:
2018-06-02T19:52:45.355667+00:00 mail postfix/anvil[728]: statistics: max cache size 1 at Jun  2 19:49:24
mailserver      | [INFO] Search for SSL certificates generated by Traefik
mailserver      | [INFO] acme.json found with ACME v2 format, dumping into pem files
mailserver      | [INFO] Let's encrypt live directory found
mailserver      | [INFO] Using /etc/letsencrypt/live/mail.cesticom.com folder
mailserver      | [INFO] Found DKIM key pair for domain cesticom.com - skip creation
mailserver      | [INFO] Custom Postfix configuration file loaded
mailserver      | [INFO] MariaDB/PostgreSQL hostname not found in /etc/hosts
mailserver      | [INFO] Container IP found, adding a new record in /etc/hosts
mailserver      | [INFO] Redis hostname not found in /etc/hosts
mailserver      | [INFO] Container IP found, adding a new record in /etc/hosts
mailserver      | [INFO] ClamAV is disabled, service will not start
mailserver      | [INFO] Fetchmail forwarding is enabled
mailserver      | [INFO] Automatic GPG encryption is disabled
mailserver      | [INFO] ManageSieve protocol is enabled
mailserver      | [INFO] DKIM/ARC signing is enabled
mailserver      | [INFO] Greylisting policy is enabled
mailserver      | [INFO] Ratelimiting policy is enabled
mailserver      | [INFO] POP3 protocol is enabled
mailserver      | [INFO] Unbound DNS resolver is enabled
mailserver      | [INFO] clamav-unofficial-sigs is disabled (user configuration not found)
mailserver      | 2018-06-02T20:00:24.682563+00:00 mail root: s6-supervise : spawning unbound process
mailserver      | 2018-06-02T20:00:24.710083+00:00 mail root: s6-supervise : spawning postfix process
mailserver      | 2018-06-02T20:00:24.755384+00:00 mail root: s6-supervise : spawning dovecot process
mailserver      | 2018-06-02T20:00:24.783308+00:00 mail root: s6-supervise : spawning rspamd process
mailserver      | 2018-06-02T20:00:24.837742+00:00 mail dovecot: master: Warning: Corrected permissions for login directory /var/run/dovecot/login
mailserver      | 2018-06-02T20:00:24.840226+00:00 mail root: s6-supervise : spawning cron process
mailserver      | 2018-06-02T20:00:24.864331+00:00 mail dovecot: master: Warning: Corrected permissions for login directory /var/run/dovecot/token-login
mailserver      | 2018-06-02T20:00:24.864479+00:00 mail dovecot: master: Warning: Corrected permissions for empty directory /var/run/dovecot/empty
mailserver      | 2018-06-02T20:00:24.868950+00:00 mail dovecot: master: Dovecot v2.2.27 (c0f36b0) starting up for imap, lmtp, sieve, pop3, sieve, pop3, sieve, pop3, sieve, pop3, sieve, pop3, sieve, pop3, sieve, pop3, sieve, pop3, sieve, pop3
mailserver      | 2018-06-02T20:00:25.070988+00:00 mail dovecot: config: Warning: service auth { client_limit=1000 } is lower than required under max. load (1400)
mailserver      | 2018-06-02T20:00:25.071000+00:00 mail dovecot: config: Warning: service anvil { client_limit=1000 } is lower than required under max. load (1203)
mailserver      | 2018-06-02T20:00:25.600101+00:00 mail postfix/postfix-script[605]: starting the Postfix mail system
mailserver      | 2018-06-02T20:00:25.612962+00:00 mail postfix/master[607]: daemon started -- version 3.1.8, configuration /etc/postfix
mailserver      | 2018-06-02T20:00:26.795807+00:00 mail root: s6-supervise : (_parent) all my wonderful children have started, i can die in peace :)
mailserver      | 2018-06-02T20:00:26.801496+00:00 mail root: s6-supervise : stopping _parent process
mailserver      | 2018-06-02T20:22:15.395728+00:00 mail postfix/submission/smtpd[626]: connect from MYIPplsnohacks.dyn.dsl.cantv.net[MYIPplsnohacks]
mailserver      | 2018-06-02T20:22:16.237947+00:00 mail postfix/submission/smtpd[626]: Anonymous TLS connection established from MYIPplsnohacks.dyn.dsl.cantv.net[MYIPplsnohacks]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
mailserver      | 2018-06-02T20:26:47.345398+00:00 mail postfix/smtpd[631]: connect from researchscan431.eecs.umich.edu[<IP_ADDRESS>]
mailserver      | 2018-06-02T20:26:47.456224+00:00 mail postfix/smtpd[631]: Anonymous TLS connection established from researchscan431.eecs.umich.edu[<IP_ADDRESS>]: TLSv1.2 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)
mailserver      | 2018-06-02T20:26:47.477104+00:00 mail postfix/smtpd[631]: disconnect from researchscan431.eecs.umich.edu[<IP_ADDRESS>] ehlo=1 starttls=1 quit=1 commands=3
mailserver      | 2018-06-02T20:28:47.088120+00:00 mail postfix/submission/smtpd[626]: timeout after AUTH from MYIPplsnohacks.dyn.dsl.cantv.net[MYIPplsnohacks]
mailserver      | 2018-06-02T20:28:47.479633+00:00 mail postfix/submission/smtpd[626]: disconnect from MYIPplsnohacks.dyn.dsl.cantv.net[MYIPplsnohacks] ehlo=2 starttls=1 auth=1 commands=4
mailserver      | 2018-06-02T20:30:32.227149+00:00 mail postfix/submission/smtpd[635]: connect from MYIPplsnohacks.dyn.dsl.cantv.net[MYIPplsnohacks]
mailserver      | 2018-06-02T20:30:33.449278+00:00 mail postfix/submission/smtpd[635]: Anonymous TLS connection established from MYIPplsnohacks.dyn.dsl.cantv.net[MYIPplsnohacks]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
mailserver      | 2018-06-02T20:31:01.746027+00:00 mail postfix/submission/smtpd[635]: lost connection after AUTH from MYIPplsnohacks.dyn.dsl.cantv.net[MYIPplsnohacks]
mailserver      | 2018-06-02T20:31:01.746349+00:00 mail postfix/submission/smtpd[635]: disconnect from MYIPplsnohacks.dyn.dsl.cantv.net[MYIPplsnohacks] ehlo=1 starttls=1 auth=0/1 commands=2/3
mailserver      | 2018-06-02T20:31:05.278285+00:00 mail postfix/submission/smtpd[635]: connect from MYIPplsnohacks.dyn.dsl.cantv.net[MYIPplsnohacks]
mailserver      | 2018-06-02T20:31:06.468618+00:00 mail postfix/submission/smtpd[635]: Anonymous TLS connection established from MYIPplsnohacks.dyn.dsl.cantv.net[MYIPplsnohacks]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
mailserver      | 2018-06-02T20:32:15.348157+00:00 mail postfix/anvil[629]: statistics: max connection rate 2/60s for (submission:MYIPplsnohacks) at Jun  2 20:31:05
mailserver      | 2018-06-02T20:32:15.348186+00:00 mail postfix/anvil[629]: statistics: max connection count 1 for (submission:MYIPplsnohacks) at Jun  2 20:22:15
mailserver      | 2018-06-02T20:32:15.348199+00:00 mail postfix/anvil[629]: statistics: max cache size 2 at Jun  2 20:26:47
mailserver      | 2018-06-02T20:32:29.240141+00:00 mail postfix/submission/smtpd[635]: 3A9223F4E2: client=MYIPplsnohacks.dyn.dsl.cantv.net[MYIPplsnohacks], sasl_method=PLAIN<EMAIL_ADDRESS>mailserver      | 2018-06-02T20:35:11.683476+00:00 mail postfix/authclean/cleanup[639]: 3A9223F4E2: replace: header Received: from cesticom.com (MYIPplsnohacks.dyn.dsl.cantv.net [MYIPplsnohacks])??(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))??(No client certificate requested)??(Authenticat from MYIPplsnohacks.dyn.dsl.cantv.net[MYIPplsnohacks]<EMAIL_ADDRESS><EMAIL_ADDRESS>proto=ESMTP helo=<cesticom.com>: Received: from authenticated-user (mail.cesticom.com [<IP_ADDRESS>])??(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))??(No client certificate requested)??(Authenticated sender: lfreites@cesticom.com)??by mail.cesticom.com (Postfix) with ESMTPSA id 3A9223F4E2??for<EMAIL_ADDRESS>Sat,  2 Jun 2018 20:32:10 +0000 (UTC)
mailserver      | 2018-06-02T20:35:11.683548+00:00 mail postfix/authclean/cleanup[639]: 3A9223F4E2: message-id=<>
mailserver      | 2018-06-02T20:35:11.893119+00:00 mail postfix/qmgr[609]: 3A9223F4E2<EMAIL_ADDRESS>size=475, nrcpt=1 (queue active)
mailserver      | 2018-06-02T20:35:12.081682+00:00 mail postfix/smtpd[641]: connect from unknown[<IP_ADDRESS>]
mailserver      | 2018-06-02T20:35:12.083082+00:00 mail postfix/smtp[640]: warning: host mail.cesticom.com[<IP_ADDRESS>]:25 greeted me with my own hostname mail.cesticom.com
mailserver      | 2018-06-02T20:35:12.083587+00:00 mail postfix/smtp[640]: warning: host mail.cesticom.com[<IP_ADDRESS>]:25 replied to HELO/EHLO with my own hostname mail.cesticom.com
mailserver      | 2018-06-02T20:35:12.098762+00:00 mail postfix/smtp[640]: 3A9223F4E2<EMAIL_ADDRESS>relay=mail.cesticom.com[<IP_ADDRESS>]:25, delay=182, delays=182/0.02/0.17/0, dsn=5.4.6, status=bounced (mail for cesticom.com loops back to myself)
mailserver      | 2018-06-02T20:35:12.111627+00:00 mail postfix/smtpd[641]: disconnect from unknown[<IP_ADDRESS>] ehlo=1 quit=1 commands=2
mailserver      | 2018-06-02T20:35:12.129688+00:00 mail postfix/cleanup[643]: 1C5563F635<EMAIL_ADDRESS>mailserver      | 2018-06-02T20:35:12.132467+00:00 mail postfix/qmgr[609]: 1C5563F635: from=<>, size=4294, nrcpt=1 (queue active)
mailserver      | 2018-06-02T20:35:12.133112+00:00 mail postfix/bounce[642]: 3A9223F4E2: sender non-delivery notification: 1C5563F635
mailserver      | 2018-06-02T20:35:12.134721+00:00 mail postfix/qmgr[609]: 3A9223F4E2: removed
mailserver      | 2018-06-02T20:35:13.149157+00:00 mail postfix/smtpd[641]: connect from unknown[<IP_ADDRESS>]
mailserver      | 2018-06-02T20:35:13.150030+00:00 mail postfix/smtp[640]: warning: host mail.cesticom.com[<IP_ADDRESS>]:25 greeted me with my own hostname mail.cesticom.com
mailserver      | 2018-06-02T20:35:13.150533+00:00 mail postfix/smtp[640]: warning: host mail.cesticom.com[<IP_ADDRESS>]:25 replied to HELO/EHLO with my own hostname mail.cesticom.com
mailserver      | 2018-06-02T20:35:13.153853+00:00 mail postfix/smtp[640]: 1C5563F635<EMAIL_ADDRESS>relay=mail.cesticom.com[<IP_ADDRESS>]:25, delay=1.1, delays=0.03/1/0.01/0, dsn=5.4.6, status=bounced (mail for cesticom.com loops back to myself)
mailserver      | 2018-06-02T20:35:13.154795+00:00 mail postfix/qmgr[609]: 1C5563F635: removed
mailserver      | 2018-06-02T20:35:13.155723+00:00 mail postfix/smtpd[641]: disconnect from unknown[<IP_ADDRESS>] ehlo=1 quit=1 commands=2
mailserver      | 2018-06-02T20:35:41.401603+00:00 mail postfix/submission/smtpd[635]: disconnect from MYIPplsnohacks.dyn.dsl.cantv.net[MYIPplsnohacks] ehlo=3 starttls=1 auth=1 mail=1 rcpt=1 data=1 quit=1 unknown=0/1 commands=9/10
mailserver      | 2018-06-02T20:36:58.258596+00:00 mail postfix/scache[644]: statistics: start interval Jun  2 20:35:13
mailserver      | 2018-06-02T20:36:58.258615+00:00 mail postfix/scache[644]: statistics: domain lookup hits=0 miss=1 success=0%

Try RELAY_NETWORKS=<IP_ADDRESS>/12 <IP_ADDRESS>/12 <IP_ADDRESS>/12.

Ok, with those relay_networks:
docker logs mailserver
[INFO] Search for SSL certificates generated by Traefik
[INFO] acme.json found with ACME v2 format, dumping into pem files
[INFO] Let's encrypt live directory found
[INFO] Using /etc/letsencrypt/live/mail.cesticom.com folder
[INFO] Found DKIM key pair for domain cesticom.com - skip creation
[INFO] Custom Postfix configuration file loaded
[INFO] MariaDB/PostgreSQL hostname not found in /etc/hosts
[INFO] Container IP found, adding a new record in /etc/hosts
[INFO] Redis hostname not found in /etc/hosts
[INFO] Container IP found, adding a new record in /etc/hosts
[INFO] ClamAV is disabled, service will not start
[INFO] Fetchmail forwarding is enabled
[INFO] Automatic GPG encryption is disabled
[INFO] ManageSieve protocol is enabled
[INFO] DKIM/ARC signing is enabled
[INFO] Greylisting policy is enabled
[INFO] Ratelimiting policy is enabled
[INFO] POP3 protocol is enabled
[INFO] Unbound DNS resolver is enabled
[INFO] clamav-unofficial-sigs is disabled (user configuration not found)
2018-06-02T21:19:33.361304+00:00 mail root: s6-supervise : spawning unbound process
2018-06-02T21:19:33.388980+00:00 mail root: s6-supervise : spawning postfix process
2018-06-02T21:19:33.431135+00:00 mail root: s6-supervise : spawning dovecot process
2018-06-02T21:19:33.460488+00:00 mail root: s6-supervise : spawning rspamd process
2018-06-02T21:19:33.479192+00:00 mail root: s6-supervise : spawning cron process
2018-06-02T21:19:33.535847+00:00 mail dovecot: master: Dovecot v2.2.27 (c0f36b0) starting up for imap, lmtp, sieve, pop3
2018-06-02T21:19:33.677751+00:00 mail dovecot: config: Warning: service auth { client_limit=1000 } is lower than required under max. load (1400)
2018-06-02T21:19:33.677762+00:00 mail dovecot: config: Warning: service anvil { client_limit=1000 } is lower than required under max. load (1203)
2018-06-02T21:19:34.265504+00:00 mail postfix/postfix-script[631]: starting the Postfix mail system
2018-06-02T21:19:34.277250+00:00 mail postfix/master[633]: daemon started -- version 3.1.8, configuration /etc/postfix
2018-06-02T21:19:35.472021+00:00 mail root: s6-supervise : (_parent) all my wonderful children have started, i can die in peace :)
2018-06-02T21:19:35.477140+00:00 mail root: s6-supervise : stopping _parent process
2018-06-02T21:19:36.809791+00:00 mail dovecot: imap-login: Login<EMAIL_ADDRESS>method=PLAIN, rip=<IP_ADDRESS>, lip=<IP_ADDRESS>, mpid=542, TLS, session=<gS30Qa9tiJ6sEgAB>
2018-06-02T21:19:36.845765+00:00 mail dovecot: imap(lfreites@cesticom.com): Logged out in=89 out=935
2018-06-02T21:20:36.873860+00:00 mail dovecot: imap-login: Login<EMAIL_ADDRESS>method=PLAIN, rip=<IP_ADDRESS>, lip=<IP_ADDRESS>, mpid=646, TLS, session=<5LaIRa9tpp6sEgAB>
2018-06-02T21:20:36.896836+00:00 mail dovecot: imap(lfreites@cesticom.com): Logged out in=335 out=1386
2018-06-02T21:21:08.574420+00:00 mail postfix/smtpd[654]: connect from mail-yb0-f171.google.com[<IP_ADDRESS>]
2018-06-02T21:21:08.574465+00:00 mail postfix/smtpd[654]: warning: smtpd_client_event_limit_exceptions: non-null host address bits in "<IP_ADDRESS>/12", perhaps you should use "<IP_ADDRESS>/12" instead
2018-06-02T21:21:08.722163+00:00 mail postfix/smtpd[654]: Anonymous TLS connection established from mail-yb0-f171.google.com[<IP_ADDRESS>]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
2018-06-02T21:21:08.793792+00:00 mail postfix/smtpd[654]: warning: mynetworks: non-null host address bits in "<IP_ADDRESS>/12", perhaps you should use "<IP_ADDRESS>/12" instead
2018-06-02T21:21:08.793837+00:00 mail postfix/smtpd[654]: NOQUEUE: reject: RCPT from mail-yb0-f171.google.com[<IP_ADDRESS>]: 451 4.3.0 <mail-yb0-f171.google.com>: Temporary lookup failure<EMAIL_ADDRESS><EMAIL_ADDRESS>proto=ESMTP helo=<mail-yb0-f171.google.com>
2018-06-02T21:21:08.886843+00:00 mail postfix/smtpd[654]: warning: smtpd_client_event_limit_exceptions: non-null host address bits in "<IP_ADDRESS>/12", perhaps you should use "<IP_ADDRESS>/12" instead
2018-06-02T21:21:08.887346+00:00 mail postfix/smtpd[654]: disconnect from mail-yb0-f171.google.com[<IP_ADDRESS>] ehlo=2 starttls=1 mail=1 rcpt=0/1 data=0/1 quit=1 commands=5/7
2018-06-02T21:21:38.326396+00:00 mail dovecot: imap-login: Login<EMAIL_ADDRESS>method=PLAIN, rip=<IP_ADDRESS>, lip=<IP_ADDRESS>, mpid=652, TLS, session=<a2oySa9tzJ6sEgAB>
2018-06-02T21:21:38.348273+00:00 mail dovecot: imap(lfreites@cesticom.com): Logged out in=89 out=935

docker network ls
NETWORK ID          NAME                           DRIVER              SCOPE
65a475aa1b5c        bridge                         bridge              local
ea48869c7b7c        cesticomvps_cesticom_network   bridge              local
6e215e0b47b9        docker_gwbridge                bridge              local
42acd5326658        host                           host                local
e5fad85e2a49        http_network                   bridge              local
f94db79fac8d        mailserver_mail_network        bridge              local
aeea2cdd6e77        none                           null                local

docker network inspect bridge
[
    {
        "Name": "bridge",
        "Id": "65a475aa1b5c63d28305618ac386e9bf4bbef96bd7b65014914f5e90cf7839b5",
        "Created": "2018-06-02T16:00:06.216961236-04:00",
        "Scope": "local",
        "Driver": "bridge",
        "EnableIPv6": false,
        "IPAM": {
            "Driver": "default",
            "Options": null,
            "Config": [
                {
                    "Subnet": "<IP_ADDRESS>/16",
                    "Gateway": "<IP_ADDRESS>"
                }
            ]
        },
        "Internal": false,
        "Attachable": false,
        "Ingress": false,
        "ConfigFrom": {
            "Network": ""
        },
        "ConfigOnly": false,
        "Containers": {},
        "Options": {
            "com.docker.network.bridge.default_bridge": "true",
            "com.docker.network.bridge.enable_icc": "true",
            "com.docker.network.bridge.enable_ip_masquerade": "true",
            "com.docker.network.bridge.host_binding_ipv4": "<IP_ADDRESS>",
            "com.docker.network.bridge.name": "docker0",
            "com.docker.network.driver.mtu": "1500"
        },
        "Labels": {}
    }
]

docker network inspect cesticomvps_cesticom_network
[
    {
        "Name": "cesticomvps_cesticom_network",
        "Id": "ea48869c7b7c2d894b18928621c8675bb16a0b2c734aebd098af9d5ecd50494a",
        "Created": "2018-05-18T15:34:56.037390035-04:00",
        "Scope": "local",
        "Driver": "bridge",
        "EnableIPv6": false,
        "IPAM": {
            "Driver": "default",
            "Options": null,
            "Config": [
                {
                    "Subnet": "<IP_ADDRESS>/16",
                    "Gateway": "<IP_ADDRESS>"
                }
            ]
        },
        "Internal": false,
        "Attachable": true,
        "Ingress": false,
        "ConfigFrom": {
            "Network": ""
        },
        "ConfigOnly": false,
        "Containers": {},
        "Options": {},
        "Labels": {
            "com.docker.compose.network": "cesticom_network",
            "com.docker.compose.project": "cesticomvps",
            "com.docker.compose.version": "1.21.2"
        }
    }
]

docker network inspect mailserver_mail_network
[
    {
        "Name": "mailserver_mail_network",
        "Id": "f94db79fac8df7e49cb31877b156ca2aaefa9e6517db96fac2e97997fd5a56a4",
        "Created": "2018-06-02T17:19:16.220395421-04:00",
        "Scope": "local",
        "Driver": "bridge",
        "EnableIPv6": false,
        "IPAM": {
            "Driver": "default",
            "Options": null,
            "Config": [
                {
                    "Subnet": "<IP_ADDRESS>/16",
                    "Gateway": "<IP_ADDRESS>"
                }
            ]
        },
        "Internal": false,
        "Attachable": true,
        "Ingress": false,
        "ConfigFrom": {
            "Network": ""
        },
        "ConfigOnly": false,
        "Containers": {
            "3e4ead14d6d25b7afcf2f4ec2fe5d5fe43ab4a997b2432281f15a1879c6f5570": {
                "Name": "rainloop",
                "EndpointID": "3c76ffe02a7f111d8cf2700f373c36758651684cab57586666b57e0978a48bd2",
                "MacAddress": "02:42:ac:15:00:06",
                "IPv4Address": "<IP_ADDRESS>/16",
                "IPv6Address": ""
            },
            "69518fb5147a645588dccc579e3622ffaa406790d6c762c137a9f17248afa2f0": {
                "Name": "postfixadmin",
                "EndpointID": "5d11a7413bc7c7ffa008634721b8ddec3115f048c2eed8c731da3d2e91af7dcc",
                "MacAddress": "02:42:ac:15:00:05",
                "IPv4Address": "<IP_ADDRESS>/16",
                "IPv6Address": ""
            },
            "7e63b8eab4f341eb1c3893d3e943707767362b9ef38f0d65830660e1a7b44576": {
                "Name": "mailserver",
                "EndpointID": "529f4aee5870ec64ae103ac037d7a5657e8fd2763d1c5d369ba005bcc6595c52",
                "MacAddress": "02:42:ac:15:00:04",
                "IPv4Address": "<IP_ADDRESS>/16",
                "IPv6Address": ""
            },
            "a88a3c34a0ae84560be7da7154f875c0de1bce71ae438a7d52b5f9d647a47e61": {
                "Name": "mailredis",
                "EndpointID": "e793ec8c278d9c590473829effbc9e515448cdaad2a82ffdc064021d8ac1b470",
                "MacAddress": "02:42:ac:15:00:03",
                "IPv4Address": "<IP_ADDRESS>/16",
                "IPv6Address": ""
            },
            "da2e2cbd679cc465f90ed6556bddd5fa3fc5f1c7859d65a928c35a4be029d01c": {
                "Name": "mailmariadb",
                "EndpointID": "7cab555678949a1cc4a6af9a1f00979562315b7ecc792e2e8d2b9c0734525e19",
                "MacAddress": "02:42:ac:15:00:02",
                "IPv4Address": "<IP_ADDRESS>/16",
                "IPv6Address": ""
            }
        },
        "Options": {},
        "Labels": {
            "com.docker.compose.network": "mail_network",
            "com.docker.compose.project": "mailserver",
            "com.docker.compose.version": "1.21.2"
        }
    }
]

docker network inspect docker_gwbridge
[
    {
        "Name": "docker_gwbridge",
        "Id": "6e215e0b47b957130b03f1ffcf6c9e746b23ef24c3e7f9c20a2780e374490958",
        "Created": "2018-05-18T15:59:10.32658613-04:00",
        "Scope": "local",
        "Driver": "bridge",
        "EnableIPv6": false,
        "IPAM": {
            "Driver": "default",
            "Options": null,
            "Config": [
                {
                    "Subnet": "<IP_ADDRESS>/16",
                    "Gateway": "<IP_ADDRESS>"
                }
            ]
        },
        "Internal": false,
        "Attachable": false,
        "Ingress": false,
        "ConfigFrom": {
            "Network": ""
        },
        "ConfigOnly": false,
        "Containers": {},
        "Options": {
            "com.docker.network.bridge.enable_icc": "false",
            "com.docker.network.bridge.enable_ip_masquerade": "true",
            "com.docker.network.bridge.name": "docker_gwbridge"
        },
        "Labels": {}
    }
]

docker network inspect host
[
    {
        "Name": "host",
        "Id": "42acd5326658071690ebddba0249855293e6b10bc8587ebe4fe859030a8e510a",
        "Created": "2017-12-11T08:40:45.871436174-05:00",
        "Scope": "local",
        "Driver": "host",
        "EnableIPv6": false,
        "IPAM": {
            "Driver": "default",
            "Options": null,
            "Config": []
        },
        "Internal": false,
        "Attachable": false,
        "Ingress": false,
        "ConfigFrom": {
            "Network": ""
        },
        "ConfigOnly": false,
        "Containers": {},
        "Options": {},
        "Labels": {}
    }
]

docker network inspect http_network
[
    {
        "Name": "http_network",
        "Id": "e5fad85e2a4906d3ef9a75a9d59ae8f7c03d45c3c194066dc24baba70062dda2",
        "Created": "2018-05-14T01:44:23.148019707-04:00",
        "Scope": "local",
        "Driver": "bridge",
        "EnableIPv6": false,
        "IPAM": {
            "Driver": "default",
            "Options": {},
            "Config": [
                {
                    "Subnet": "<IP_ADDRESS>/16",
                    "Gateway": "<IP_ADDRESS>"
                }
            ]
        },
        "Internal": false,
        "Attachable": false,
        "Ingress": false,
        "ConfigFrom": {
            "Network": ""
        },
        "ConfigOnly": false,
        "Containers": {
            "3e4ead14d6d25b7afcf2f4ec2fe5d5fe43ab4a997b2432281f15a1879c6f5570": {
                "Name": "rainloop",
                "EndpointID": "6af6c230aa1ffff2288bc3f12e1ed40da6df2e49cc02d7a8d8a2110af7bbadd2",
                "MacAddress": "02:42:ac:12:00:05",
                "IPv4Address": "<IP_ADDRESS>/16",
                "IPv6Address": ""
            },
            "69518fb5147a645588dccc579e3622ffaa406790d6c762c137a9f17248afa2f0": {
                "Name": "postfixadmin",
                "EndpointID": "262fe1c44786d8e14abbd3b23cd97ae5749408e82a6361f74b95efa1444b3fa1",
                "MacAddress": "02:42:ac:12:00:04",
                "IPv4Address": "<IP_ADDRESS>/16",
                "IPv6Address": ""
            },
            "7e63b8eab4f341eb1c3893d3e943707767362b9ef38f0d65830660e1a7b44576": {
                "Name": "mailserver",
                "EndpointID": "93f1c704a68c0a0eafd99bb104be2ee37d1305c568d7e8924ffe4f9f085b7540",
                "MacAddress": "02:42:ac:12:00:03",
                "IPv4Address": "<IP_ADDRESS>/16",
                "IPv6Address": ""
            },
            "a4775c273749fea4790993aaf1ad4672a922bde18d2488b9f017d7f4d6a17703": {
                "Name": "cestihost",
                "EndpointID": "82aa483c4237f3a256dc5f43a6537a9220f0b05267810b1f9600f828979949b9",
                "MacAddress": "02:42:ac:12:00:02",
                "IPv4Address": "<IP_ADDRESS>/16",
                "IPv6Address": ""
            },
            "ba7df5180440c81f3712646c752a2c696874b8947f3e088f30e33bdaeae6205f": {
                "Name": "traefik",
                "EndpointID": "efd657dcc3e717991bc2f6012ef41e811b9a75dec795970c20d7983e8636e806",
                "MacAddress": "02:42:ac:12:00:06",
                "IPv4Address": "<IP_ADDRESS>/16",
                "IPv6Address": ""
            }
        },
        "Options": {},
        "Labels": {}
    }
]

docker network inspect none
[
    {
        "Name": "none",
        "Id": "aeea2cdd6e77a4b58a984b8b175eda5c1c900f7b4a7681d820e410ca1e6e1c2a",
        "Created": "2017-12-11T08:40:45.782159456-05:00",
        "Scope": "local",
        "Driver": "null",
        "EnableIPv6": false,
        "IPAM": {
            "Driver": "default",
            "Options": null,
            "Config": []
        },
        "Internal": false,
        "Attachable": false,
        "Ingress": false,
        "ConfigFrom": {
            "Network": ""
        },
        "ConfigOnly": false,
        "Containers": {},
        "Options": {},
        "Labels": {}
    }
]

Add all needed networks in RELAY_NETWORKS (<IP_ADDRESS>/16, <IP_ADDRESS>/16...etc), and everything should work.

I need a little bit of time to setup the mailserver from 0 again, but the old one says:
Final-Recipient: rfc822<EMAIL_ADDRESS>Action: failed
Status: 5.7.1
Remote-MTA: dns; mail.cesticom.com. (<IP_ADDRESS>, the server for the domain cesticom.com.)
Diagnostic-Code: smtp; 554 5.7.1<EMAIL_ADDRESS>Relay access denied
Last-Attempt-Date: Sat, 02 Jun 2018 15:03:12 -0700 (PDT)

"uR n0 rElAY hUsT" insert spongebob mimic meme here
docker-compose logs mailserver
mailserver      | [INFO] Search for SSL certificates generated by Traefik
mailserver      | [INFO] acme.json found with ACME v2 format, dumping into pem files
mailserver      | [INFO] Let's encrypt live directory found
mailserver      | [INFO] Using /etc/letsencrypt/live/mail.cesticom.com folder
mailserver      | [INFO] Found DKIM key pair for domain cesticom.com - skip creation
mailserver      | [INFO] Custom Postfix configuration file loaded
mailserver      | [INFO] MariaDB/PostgreSQL hostname not found in /etc/hosts
mailserver      | [INFO] Container IP found, adding a new record in /etc/hosts
mailserver      | [INFO] Redis hostname not found in /etc/hosts
mailserver      | [INFO] Container IP found, adding a new record in /etc/hosts
mailserver      | [INFO] ClamAV is disabled, service will not start
mailserver      | [INFO] Fetchmail forwarding is enabled
mailserver      | [INFO] Automatic GPG encryption is disabled
mailserver      | [INFO] ManageSieve protocol is enabled
mailserver      | [INFO] DKIM/ARC signing is enabled
mailserver      | [INFO] Greylisting policy is enabled
mailserver      | [INFO] Ratelimiting policy is enabled
mailserver      | [INFO] POP3 protocol is enabled
mailserver      | [INFO] Unbound DNS resolver is enabled
mailserver      | [INFO] clamav-unofficial-sigs is disabled (user configuration not found)
mailserver      | 2018-06-02T22:02:09.261519+00:00 mail root: s6-supervise : spawning unbound process
mailserver      | 2018-06-02T22:02:09.286329+00:00 mail root: s6-supervise : spawning postfix process
mailserver      | 2018-06-02T22:02:09.338676+00:00 mail root: s6-supervise : spawning dovecot process
mailserver      | 2018-06-02T22:02:09.350105+00:00 mail root: s6-supervise : spawning rspamd process
mailserver      | 2018-06-02T22:02:09.391162+00:00 mail root: s6-supervise : spawning cron process
mailserver      | 2018-06-02T22:02:09.437654+00:00 mail dovecot: master: Dovecot v2.2.27 (c0f36b0) starting up for imap, lmtp, sieve, pop3
mailserver      | 2018-06-02T22:02:09.605639+00:00 mail dovecot: config: Warning: service auth { client_limit=1000 } is lower than required under max. load (1400)
mailserver      | 2018-06-02T22:02:09.605649+00:00 mail dovecot: config: Warning: service anvil { client_limit=1000 } is lower than required under max. load (1203)
mailserver      | 2018-06-02T22:02:10.147426+00:00 mail postfix/postfix-script[631]: starting the Postfix mail system
mailserver      | 2018-06-02T22:02:10.159535+00:00 mail postfix/master[633]: daemon started -- version 3.1.8, configuration /etc/postfix
mailserver      | 2018-06-02T22:02:11.360503+00:00 mail root: s6-supervise : (_parent) all my wonderful children have started, i can die in peace :)
mailserver      | 2018-06-02T22:02:11.367812+00:00 mail root: s6-supervise : stopping _parent process
mailserver      | 2018-06-02T22:02:43.317347+00:00 mail dovecot: imap-login: Login<EMAIL_ADDRESS>method=PLAIN, rip=<IP_ADDRESS>, lip=<IP_ADDRESS>, mpid=545, TLS, session=<liMf3K9tjKOsEgAB>
mailserver      | 2018-06-02T22:02:43.357332+00:00 mail dovecot: imap(lfreites@cesticom.com): Logged out in=335 out=1386
mailserver      | 2018-06-02T22:03:11.734142+00:00 mail postfix/smtpd[648]: connect from mail-yb0-f181.google.com[<IP_ADDRESS>]
mailserver      | 2018-06-02T22:03:11.874434+00:00 mail postfix/smtpd[648]: Anonymous TLS connection established from mail-yb0-f181.google.com[<IP_ADDRESS>]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
mailserver      | 2018-06-02T22:03:12.049684+00:00 mail postfix/smtpd[648]: NOQUEUE: reject: RCPT from mail-yb0-f181.google.com[<IP_ADDRESS>]: 554 5.7.1<EMAIL_ADDRESS>Relay access denied<EMAIL_ADDRESS><EMAIL_ADDRESS>proto=ESMTP helo=<mail-yb0-f181.google.com>
mailserver      | 2018-06-02T22:03:12.106622+00:00 mail postfix/smtpd[648]: disconnect from mail-yb0-f181.google.com[<IP_ADDRESS>] ehlo=2 starttls=1 mail=1 rcpt=0/1 data=0/1 quit=1 commands=5/7
mailserver      | 2018-06-02T22:03:44.000786+00:00 mail dovecot: imap-login: Login<EMAIL_ADDRESS>method=PLAIN, rip=<IP_ADDRESS>, lip=<IP_ADDRESS>, mpid=646, TLS, session=<WwW9369tuKOsEgAB>
mailserver      | 2018-06-02T22:03:44.026392+00:00 mail dovecot: imap(lfreites@cesticom.com): Logged out in=89 out=935
mailserver      | 2018-06-02T22:05:43.997623+00:00 mail dovecot: imap-login: Login<EMAIL_ADDRESS>method=PLAIN, rip=<IP_ADDRESS>, lip=<IP_ADDRESS>, mpid=655, TLS, session=<j/3j5q9t8KOsEgAB>
mailserver      | 2018-06-02T22:05:44.039810+00:00 mail dovecot: imap(lfreites@cesticom.com): Logged out in=89 out=935
mailserver      | 2018-06-02T22:06:32.303402+00:00 mail postfix/anvil[651]: statistics: max connection rate 1/60s for (smtp:<IP_ADDRESS>) at Jun  2 22:03:11
mailserver      | 2018-06-02T22:06:32.303431+00:00 mail postfix/anvil[651]: statistics: max connection count 1 for (smtp:<IP_ADDRESS>) at Jun  2 22:03:11

Hello, I'm sorry for my delay in the response, sickness got me down a couple of days.
But here are the results of the tests with a default configs with just a copy of the documents as show in the readme.md (just added pop3, traefik ssl certs, and disabled clamav). But it still gift me 554 5.7.1<EMAIL_ADDRESS>Relay access denied for incoming email from anywhere to my domain.
/mnt/docker/docker-compose.yml
version: "3"

# IPv4 only
# docker network create http_network

# IPv4/IPv6 network
# docker network create http_network --ipv6 --subnet "fd00:0000:0000:0000::/64"
# Refer to https://github.com/hardware/mailserver/#ipv6-support for more information.

networks:
  http_network:
    external: true
  mail_network:
    external: false

services:
  traefik:
    image: traefik:1.6-alpine
    container_name: traefik
    restart: ${RESTART_MODE}
    ports:
      - "80:80"
      - "443:443"
    labels:
      - traefik.enable=true
      - traefik.frontend.rule=Host:mail.${MAILSERVER_DOMAIN}
      - traefik.port=8080
      - traefik.docker.network=http_network
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - ${VOLUMES_ROOT_PATH}/traefik/traefik.toml:/traefik.toml:ro
      - ${VOLUMES_ROOT_PATH}/traefik/acme:/etc/traefik/acme
    networks:
      - http_network

  mailserver:
    image: hardware/mailserver:${MAILSERVER_DOCKER_TAG}
    container_name: mailserver
    restart: ${RESTART_MODE}
    domainname: ${MAILSERVER_DOMAIN}                    # Mail server A/MX/FQDN & reverse PTR = mail.domain.tld.
    hostname: ${MAILSERVER_HOSTNAME}
    labels:
      - traefik.enable=true
      - traefik.frontend.rule=Host:spam.${MAILSERVER_DOMAIN}
      - traefik.port=11334
      - traefik.docker.network=http_network
    # extra_hosts:                          - Required for external database (on other server or for local databases on host without docker)
    #  - "mariadb:xx.xx.xx.xx"              - Replace with IP address of MariaDB server
    #  - "redis:xx.xx.xx.xx"                - Replace with IP address of Redis server
    ports:
      - "25:25"       # SMTP                - Required
      - "110:110"     # POP3       STARTTLS - Optional - For webmails/desktop clients
      - "143:143"     # IMAP       STARTTLS - Optional - For webmails/desktop clients
      - "465:465"     # SMTPS      SSL/TLS  - Optional - Enabled for compatibility reason, otherwise disabled
      - "587:587"     # Submission STARTTLS - Optional - For webmails/desktop clients
      - "993:993"     # IMAPS      SSL/TLS  - Optional - For webmails/desktop clients
      - "995:995"     # POP3S      SSL/TLS  - Optional - For webmails/desktop clients
      - "4190:4190"   # SIEVE      STARTTLS - Optional - Recommended for mail filtering
    environment:
      - DBPASS=${DATABASE_USER_PASSWORD}       # MariaDB database password (required)
      - RSPAMD_PASSWORD=${RSPAMD_PASSWORD}     # Rspamd WebUI password (required)
      - RELAY_NETWORKS=<IP_ADDRESS>/12 <IP_ADDRESS>/16 <IP_ADDRESS>/16 <IP_ADDRESS>/16 <IP_ADDRESS>/16 <IP_ADDRESS>/16
    # - ADD_DOMAINS=aa.tld, www.bb.tld...      # Add additional domains separated by commas (needed for dkim keys etc.)
      - ENABLE_POP3=true                       # Enable POP3 protocol
      - DISABLE_CLAMAV=true                    # Disable virus scanning
    # - ENABLE_FETCHMAIL=true                  # Enable fetchmail forwarding
    # - DISABLE_SIGNING=true                   # Disable DKIM/ARC signing
    # - DISABLE_GREYLISTING=true               # Disable greylisting policy
    # - DISABLE_RATELIMITING=true              # Disable ratelimiting policy
    #
    # Full list : https://github.com/hardware/mailserver#environment-variables
    #
    volumes:
      - ${VOLUMES_ROOT_PATH}/mail:/var/mail
      - ${VOLUMES_ROOT_PATH}/traefik/acme:/etc/letsencrypt/acme
    depends_on:
      - mariadb
      - redis
    networks:
      - mail_network
      - http_network

  # Administration interface
  # https://github.com/hardware/postfixadmin
  # http://postfixadmin.sourceforge.net/
  # Configuration : https://github.com/hardware/mailserver/wiki/Postfixadmin-initial-configuration
  postfixadmin:
    image: hardware/postfixadmin
    container_name: postfixadmin
    restart: ${RESTART_MODE}
    domainname: ${MAILSERVER_DOMAIN}
    hostname: ${MAILSERVER_HOSTNAME}
    labels:
      - traefik.enable=true
      - traefik.frontend.rule=Host:postfixadmin.${MAILSERVER_DOMAIN}
      - traefik.port=8888
      - traefik.docker.network=http_network
    environment:
      - DBPASS=${DATABASE_USER_PASSWORD}
    depends_on:
      - mailserver
      - mariadb
    networks:
      - mail_network
      - http_network

  # Webmail (Optional)
  # https://github.com/hardware/rainloop
  # https://www.rainloop.net/
  # Configuration : https://github.com/hardware/mailserver/wiki/Rainloop-initial-configuration
  rainloop:
    image: hardware/rainloop
    container_name: rainloop
    restart: ${RESTART_MODE}
    labels:
      - traefik.enable=true
      - traefik.port=8888
      - traefik.frontend.rule=Host:webmail.${MAILSERVER_DOMAIN}
      - traefik.docker.network=http_network
    volumes:
      - ${VOLUMES_ROOT_PATH}/rainloop:/rainloop/data
    depends_on:
      - mailserver
      - mariadb
    networks:
      - mail_network
      - http_network

  # Authoritative DNS server (Optional)
  # https://github.com/hardware/nsd-dnssec
  # https://www.nlnetlabs.nl/projects/nsd/
  # Configuration : https://github.com/hardware/mailserver/wiki/NSD-initial-configuration
  # nsd:
  #   image: hardware/nsd-dnssec
  #   container_name: nsd
  #   restart: ${RESTART_MODE}
  #   ports:
  #     - "53:53"
  #     - "53:53/udp"
  #   volumes:
  #     - ${VOLUMES_ROOT_PATH}/nsd/conf:/etc/nsd
  #     - ${VOLUMES_ROOT_PATH}/nsd/zones:/zones
  #     - ${VOLUMES_ROOT_PATH}/nsd/db:/var/db/nsd

  # Database
  # https://github.com/docker-library/mariadb
  # https://mariadb.org/
  mariadb:
    image: mariadb:10.2
    container_name: mariadb
    restart: ${RESTART_MODE}
    # Info : These variables are ignored when the volume already exists (if databases was created before).
    environment:
    # - MYSQL_RANDOM_ROOT_PASSWORD=yes
      - MYSQL_ROOT_PASSWORD=${DATABASE_USER_PASSWORD}
      - MYSQL_DATABASE=postfix
      - MYSQL_USER=postfix
      - MYSQL_PASSWORD=${DATABASE_USER_PASSWORD}
    volumes:
      - ${VOLUMES_ROOT_PATH}/mysql/db:/var/lib/mysql
    networks:
      - mail_network

  # Database
  # https://github.com/docker-library/redis
  # https://redis.io/
  redis:
    image: redis:4.0-alpine
    container_name: redis
    restart: ${RESTART_MODE}
    command: redis-server --appendonly yes
    volumes:
      - ${VOLUMES_ROOT_PATH}/redis/db:/data
    networks:
      - mail_network

/mnt/docker/.env
# This file is used to define environment variables to be used
# for variable substitution in your docker compose file.
# https://docs.docker.com/compose/env-file/

#
# MANDATORY
# /!\ if this variables are unset, the mail server will not start.
#

# Your domain name (eg. domain.tld)
MAILSERVER_DOMAIN=cesticom.com

# MariaDB/PostgreSQL database password
DATABASE_USER_PASSWORD=secret

# Rspamd WebUI and controller password
RSPAMD_PASSWORD=secret

#
# NOT MANDATORY
#

# Your mailserver hostname (eg. mail for mail.domain.tld)
MAILSERVER_HOSTNAME=mail

# Mailserver version
# 1.1-stable : Stable version (v1.1-stable github branch)
# 1.1-latest : Latest development build (master github branch)
# Latest development builds have been validated through
# the CI automation system but they are not meant for
# deployment in production.
# 1.1-stable and 1.1-latest are rebuilt weekly on the docker hub but if you
# have any problem with a new build you can switch to 1.1-stable-fallback
# The fallback tag is rebuilt monthly.
MAILSERVER_DOCKER_TAG=1.1-stable

# Docker volumes parent folder
VOLUMES_ROOT_PATH=/mnt/docker

# Docker containers restart mode
# https://docs.docker.com/compose/compose-file/#restart
RESTART_MODE=unless-stopped

Can you dump your postfix database and attach here?
docker exec mariadb mysqldump --password=my-secret-pw postfix| gzip > dump.sql.gz

Table 'postfix.alias' doesn't exist - postfix database failed

@navossoc and @denji Nope, docker-compose exec mariadb mysql -u postfix -p shows the databases and, tables.
docker-compose exec mariadb mysqldump --no-data postfix alias domain -p     (got to be carefull with the info)
-- MySQL dump 10.16  Distrib 10.2.15-MariaDB, for debian-linux-gnu (x86_64)
--
-- Host: localhost    Database: postfix
-- ------------------------------------------------------
-- Server version       10.2.15-MariaDB-10.2.15+maria~jessie

/*!40101 SET @OLD_CHARACTER_SET_CLIENT=@@CHARACTER_SET_CLIENT */;
/*!40101 SET @OLD_CHARACTER_SET_RESULTS=@@CHARACTER_SET_RESULTS */;
/*!40101 SET @OLD_COLLATION_CONNECTION=@@COLLATION_CONNECTION */;
/*!40101 SET NAMES utf8 */;
/*!40103 SET @OLD_TIME_ZONE=@@TIME_ZONE */;
/*!40103 SET TIME_ZONE='+00:00' */;
/*!40014 SET @OLD_UNIQUE_CHECKS=@@UNIQUE_CHECKS, UNIQUE_CHECKS=0 */;
/*!40014 SET @OLD_FOREIGN_KEY_CHECKS=@@FOREIGN_KEY_CHECKS, FOREIGN_KEY_CHECKS=0 */;
/*!40101 SET @OLD_SQL_MODE=@@SQL_MODE, SQL_MODE='NO_AUTO_VALUE_ON_ZERO' */;
/*!40111 SET @OLD_SQL_NOTES=@@SQL_NOTES, SQL_NOTES=0 */;

--
-- Table structure for table `alias`
--

DROP TABLE IF EXISTS `alias`;
/*!40101 SET @saved_cs_client     = @@character_set_client */;
/*!40101 SET character_set_client = utf8 */;
CREATE TABLE `alias` (
  `address` varchar(255) NOT NULL,
  `goto` text NOT NULL,
  `domain` varchar(255) NOT NULL,
  `created` datetime NOT NULL DEFAULT '2000-01-01 00:00:00',
  `modified` datetime NOT NULL DEFAULT '2000-01-01 00:00:00',
  `active` tinyint(1) NOT NULL DEFAULT 1,
  PRIMARY KEY (`address`),
  KEY `domain` (`domain`)
) ENGINE=InnoDB DEFAULT CHARSET=latin1 COMMENT='Postfix Admin - Virtual Aliases';
/*!40101 SET character_set_client = @saved_cs_client */;

--
-- Table structure for table `domain`
--

DROP TABLE IF EXISTS `domain`;
/*!40101 SET @saved_cs_client     = @@character_set_client */;
/*!40101 SET character_set_client = utf8 */;
CREATE TABLE `domain` (
  `domain` varchar(255) NOT NULL,
  `description` varchar(255) CHARACTER SET utf8 NOT NULL,
  `aliases` int(10) NOT NULL DEFAULT 0,
  `mailboxes` int(10) NOT NULL DEFAULT 0,
  `maxquota` bigint(20) NOT NULL DEFAULT 0,
  `quota` bigint(20) NOT NULL DEFAULT 0,
  `transport` varchar(255) NOT NULL,
  `backupmx` tinyint(1) NOT NULL DEFAULT 0,
  `created` datetime NOT NULL DEFAULT '2000-01-01 00:00:00',
  `modified` datetime NOT NULL DEFAULT '2000-01-01 00:00:00',
  `active` tinyint(1) NOT NULL DEFAULT 1,
  PRIMARY KEY (`domain`)
) ENGINE=InnoDB DEFAULT CHARSET=latin1 COMMENT='Postfix Admin - Virtual Domains';
/*!40101 SET character_set_client = @saved_cs_client */;
/*!40103 SET TIME_ZONE=@OLD_TIME_ZONE */;

/*!40101 SET SQL_MODE=@OLD_SQL_MODE */;
/*!40014 SET FOREIGN_KEY_CHECKS=@OLD_FOREIGN_KEY_CHECKS */;
/*!40014 SET UNIQUE_CHECKS=@OLD_UNIQUE_CHECKS */;
/*!40101 SET CHARACTER_SET_CLIENT=@OLD_CHARACTER_SET_CLIENT */;
/*!40101 SET CHARACTER_SET_RESULTS=@OLD_CHARACTER_SET_RESULTS */;
/*!40101 SET COLLATION_CONNECTION=@OLD_COLLATION_CONNECTION */;
/*!40111 SET SQL_NOTES=@OLD_SQL_NOTES */;

-- Dump completed on 2018-06-05 18:58:31

@Ratafari
Well, not sure why you need to be so careful with the info, since it not working at all 😝, but I understand you 👍
The database is there, but postfix won't see it.
I think you should take a look at etc/postfix/sql on the mailserver container:
https://github.com/hardware/mailserver/tree/master/rootfs/etc/postfix/sql
Inspect the content of that files and see if it looks like something like this:
cat /etc/postfix/sql/virtual-alias-domain-mailbox-maps.cf
hosts    = mariadb:3306
user     = postfix
password = somepassword
dbname   = postfix

option_group = client

query = SELECT maildir FROM mailbox, alias_domain WHERE alias_domain.alias_domain = '%d' AND mailbox.username = CONCAT('%u', '@', alias_domain.target_domain) AND mailbox.active = TRUE AND alias_domain.active = TRUE

Since the error was:
mysql query failed: Table 'postfix.alias' doesn't exist
It seems connected to somewhere and doesn't look like user permissions.

@Ratafari Postfix user in mysql has read access to these tables?

@navossoc
Lets say I used some quirks of language as my passwords that help them to be secure (I'm not using 12345 or admin... not now...)
The file got the the data, and docker-compose exec mailserver postmap -q<EMAIL_ADDRESS>proxy:mysql:/etc/postfix/sql/virtual-mailbox-maps.cf shows the file *just rigth meme here*
example:
docker-compose exec mailserver postmap -q<EMAIL_ADDRESS>proxy:mysql:/etc/postfix/sql/virtual-mailbox-maps.cf
cesticom.com/lfreites/

@denji docker-compose exec mariadb mysql -u postfix -p showed the same output as doing it with the root user (with some select * from alias; and select * from domain), I'm sure that those errors was before postfixadmin initial setup as I wrote before. (and the log timestamps help me with that)
If it could be error with database, the postmap will show it.

Well, now I see you have edited it and put:

Those messages where before the postfixadmin initial setup

I think you should backup your databases, drop them and start again...
Just to see if it works.
If it works, then my last bet is: Check the data on postfix database.
The last time I had a similar problem, it was when I inserted a domain and somehow a line break (0x0A) got appended at the end of the string.

I edited it long before his replys (yours was almost at the same time of the edit), because I forgot to add it at the beginning. I will do that one last time and put the output again here. I got nothing to lose on those databases.
drops the databass!

Ok, its working... the mails are being coming to my mail, but the only difference is that I didn't change the default aliases or make alias for my mail this time. So maybe the problem are in the alias management of postfixadmin.
I will take this service down and try to make the other one work (traefik and mailserver in multiple docker-compose files as show at the start), make it work like that and close the thread.
Can anyone re-create the bug by editing the postmaster alias or others? if thats what causes the error, then it should be some warnings on the readme (I got low knowledge of dockered mailserver, but in my manually installed postfix I always send postmaster mail to my mail)
How can I read<EMAIL_ADDRESS>mails without touching the alias?

@navossoc I think that "somehow a line break (0x0A) got appended at the end of the string" is happening.
3 months of nightmares... (by that and because I'm a stubborn that didn't wanted help before)

Can anyone re-create the bug by editing the postmaster alias or others? if thats what causes the error, then it should be some warnings on the readme (I got low knowledge of dockered mailserver, but in my manually installed postfix I always send postmaster mail to my mail)

Well, I'm using PostgreSQL so, not sure if it will trigger the same bug, but no, it didn't happen this time.
Anyway, I'm glad it worked 😀

Ok, the test with the my modified configs (multiple compose files and custom .env) works, nicely. I'm still configuring the users, but<EMAIL_ADDRESS>already exists, so I will need to find or modify the aliases without postfixadmin or without destroying the server mail inbox.
Still the problem is solved, and I thanks everyone here for all your help, if I can help anyone here with something just write, at least a custom icon (like my icon) or spanish translations if the project needs it.

Still the problem is solved, and I thanks everyone here for all your help, if I can help anyone here

Can you describe the solution of your problem in the readme ? :)

I deleted my db files with rm and reinstalled postfixadmin, so is not a real solution, I supposes it can be solved by deleting/setting the values manually in the postfix database (table alias) using SQL code, or just use Postgresql like @navossoc did.
What did I do? RM!!:

setup postfixadmin.
created<EMAIL_ADDRESS>edited alias<EMAIL_ADDRESS>-><EMAIL_ADDRESS>only
ERROR 554 5.7.1 shows on each incoming mail (server trows all mail, even these error don't reach user inbox, only foreign accounts like my gmail received them).
docker-compose down
rm -Rvf /mnt/CesticomVPS/db/mysql/* /mnt/CesticomVPS/db/redis/*
docker-compose up -d
setup postfixadmin.
created<EMAIL_ADDRESS>do not edit any aliases
enjoy!

NOTE:
if you follow the readme with the default document root and volumes use:
rm -Rvf /mnt/docker/mysql/db/* /mnt/docker/redis/db/*

I did not test with postgresql or other possibles solutions, and I can't right now (only got one vps to test it), when I can shutdown this server for test I will try them on the default test directory created in mnt and write here the results, and do a little better writing to use it on the readme.

Oh hello! Is good to see this issue can be helpful to others, I wanted to come back to communicate that I got the opportunity to re-implement this docker image in other server with a different domain name, but after some test in the postfix admin and with the mysql command in shell, I couldn't replicate the error 554 with mail income (outgoing not tested). So I decided to risk a little and redo the alias edits for postmaster, webmaster, abuse, and hostmaster (defaults) all to refer to<EMAIL_ADDRESS>All of these alias worked nicely and even in the other server.
For technical details I got to add a<EMAIL_ADDRESS>alias with postfixadmin, and everything worked fine even leaving the default newline character at the end of the textarea. When the query was submitted, a use postfix; and select * from alias; on mysql-cli showed the destination column clean and escaped.
So if any other user got this error, should do try those SQL query's to find if there is a database error before deleting the folder. Thanks everyone for the help with this issue.