smtp-in: New session e4b7d0cc2d27eb19 from host p4FF96FBA.dip0.t-ipconnect.de [79.249.111.186]
debug: lka: looking up pki "mail.franziska-kellermann.de"
debug: session_start_ssl: switching to SSL
debug: pony: rsae_priv_enc
smtp-in: Started TLS on session e4b7d0cc2d27eb19: version=TLSv1.2, cipher=ECDHE-RSA-AES128-GCM-SHA256, bits=128
debug: smtp: SIZE in MAIL FROM command
lookup: check "79.249.111.186" as NETADDR in table static:<localhost> -> 0
lookup: check "79.249.111.186" as NETADDR in table static:<anyhost> -> found
lookup: check "pestilenz.org" as DOMAIN in table static:<dynamic:0> -> 0
lookup: check "79.249.111.186" as NETADDR in table static:<localhost> -> 0
no rule matched
smtp-in: Failed command on session e4b7d0cc2d27eb19: "RCPT TO:<ckeen@pestilenz.org>" => 550 Invalid recipient
smtp-in: Received disconnect from session e4b7d0cc2d27eb19
debug: smtp: 0x1e8360c66000: deleting session: disconnected

# smtpd.conf
# tables
table aliases file:/etc/mail/aliases
table virtual-users file:/etc/mail/virtuals
table passwd file:/etc/mail/passwd

# PKI
pki mail.franziska-kellermann.de certificate "/etc/ssl/certs/mail.franziska-kellermann.de.crt"
pki mail.franziska-kellermann.de key "/etc/ssl/private/mail.franziska-kellermann.de.key"

# To accept external mail, replace with: listen on all
listen on lo0
listen on egress port 25 tls pki mail.franziska-kellermann.de
listen on egress port 587 tls-require pki mail.franziska-kellermann.de auth <passwd> tag authenticated                             

accept from local for local alias <aliases> deliver to lmtp "/var/dovecot/lmtp" rcpt-to
accept from any for domain "franziska-kellermann.de" virtual <virtual-users> deliver to lmtp "/var/dovecot/lmtp" rcpt-to
accept from local for any relay
accept tagged authenticated relay

hostname is mail.franziska-kellermann.de