доброе время суток!

имеется сервер с postfix на борту, все работало, но на днях начали жаловаться, что не приходят письма. в ходе поисков причины, пришел к выводу, что если внешний mta после подключения запрашивает starttls - письмо не передается и падает в очередь на подключающемся mta. если работа идет по не шифрованному каналу - письма приходят. в конфигах ничего не менялось, поэтому весьма странная ситуация.

main.cf

2bounce_notice_recipient = postmaster@mydomain.ru 
alias_maps = hash:/etc/aliases, ldap:/etc/postfix/ldapalias_maps_member.cf, ldap:/etc/postfix/ldapalias_maps.cf 
bounce_notice_recipient = postmaster@mydomain.ru 
canonical_maps = hash:/etc/postfix/canonical 
command_directory = /usr/sbin 
config_directory = /etc/postfix 
daemon_directory = /usr/lib/postfix 
debug_peer_level = 3 
debug_peer_list = ip.ip.ip.ip 
defer_transports = lmtp 
delay_notice_recipient = postmaster@mydomain.ru 
error_notice_recipient = postmaster@mydomain.ru 
home_mailbox = 
html_directory = /usr/share/doc/packages/postfix/html 
inet_interfaces = all 
inet_protocols = ipv4 
local_recipient_maps = $alias_maps, ldap:/etc/postfix/ldaplocal_recipient_maps.cf 
mailbox_size_limit = 0 
mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp 
mailq_path = /usr/bin/mailq 
manpage_directory = /usr/share/man 
maximal_queue_lifetime = 14d 
message_size_limit = 20971520 
mydestination = $myhostname, localhost.$mydomain, $mydomain, ldap:/etc/postfix/ldapmydestination.cf 
mydomain = mydomain.ru 
myhostname = mail.mydomain.ru 
mynetworks = 127.0.0.0/8, 192.168.10.0/24 
myorigin = $mydomain 
newaliases_path = /usr/bin/newaliases 
proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $transport_maps $mynetworks $sender_bcc_maps $recipient_bcc_maps $smtp_generic_maps $lmtp_generic_maps $smtpd_sender_login_maps 
readme_directory = /usr/share/doc/packages/postfix/README_FILES 
sample_directory = /usr/share/doc/packages/postfix/samples 
sender_canonical_maps = hash:/etc/postfix/sender_canonical 
sendmail_path = /usr/sbin/sendmail 
setgid_group = maildrop 
smtp_enforce_tls = no 
smtp_sasl_auth_enable = no 
smtp_sasl_security_options = noanonymous 
smtp_tls_enforce_peername = no 
smtp_tls_loglevel = 1 
smtp_tls_per_site = ldap:/etc/postfix/ldapsmtp_tls_per_site.cf 
smtp_use_tls = no 
smtpd_banner = mail.mydomain.ru 
smtpd_client_restrictions = permit_mynetworks permit_sasl_authenticated reject_unknown_reverse_client_hostname reject_rbl_client bl.spamcop.net reject_rbl_client zen.spamhaus.org permit 
smtpd_data_restrictions = permit_mynetworks permit_sasl_authenticated reject_unauth_pipelining permit 
smtpd_delay_reject = yes 
smtpd_end_of_data_restrictions = permit_mynetworks permit_sasl_authenticated reject_multi_recipient_bounce permit 
smtpd_helo_required = yes 
smtpd_helo_restrictions = check_helo_access hash:$config_directory/hello_access permit_mynetworks permit_sasl_authenticated reject_invalid_helo_hostname reject_non_fqdn_helo_hostname reject_unknown_helo_hostname permit 
smtpd_recipient_restrictions = permit_mynetworks permit_sasl_authenticated reject_unauth_pipelining reject_non_fqdn_recipient reject_unknown_recipient_domain reject_unauth_destination reject_unlisted_recipient permit 
smtpd_sasl_auth_enable = no 
smtpd_sender_restrictions = ldap:/etc/postfix/ldapaccess.cf permit_mynetworks reject_non_fqdn_sender reject_unknown_sender_domain reject_sender_login_mismatch permit_sasl_authenticated permit 
smtpd_tls_CApath = /etc/ssl/certs 
smtpd_tls_auth_only = no 
smtpd_tls_cert_file = /etc/ssl/servercerts/servercert.pem 
smtpd_tls_key_file = /etc/ssl/servercerts/serverkey.pem 
smtpd_tls_loglevel = 1 
smtpd_use_tls = yes 
tls_random_source = dev:/dev/urandom 
transport_maps = ldap:/etc/postfix/ldaptransport_maps.cf 
unknown_local_recipient_reject_code = 550 
virtual_alias_domains = hash:/etc/postfix/virtual 
virtual_alias_maps = ldap:/etc/postfix/ldapvirtual_alias_maps.cf, ldap:/etc/postfix/ldaplocal_recipient_maps.cf 
virtual_mailbox_limit = 0 
virtual_transport = lmtp:unix:/var/lib/imap/socket/lmtp

лог

Dec 26 15:28:13 pdc postfix/smtpd[11918]: connect from mail.home.ru[ip.ip.ip.ip] 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: match_hostname: mail.home.ru ~? 127.0.0.0/8 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: match_hostaddr: ip.ip.ip.ip ~? 127.0.0.0/8 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: match_hostname: mail.home.ru ~? 192.168.10.0/24 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: match_hostaddr: ip.ip.ip.ip ~? 192.168.10.0/24 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: match_list_match: mail.home.ru: no match 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: match_list_match: ip.ip.ip.ip: no match 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: auto_clnt_open: connected to private/anvil 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: event_enable_read: fd 19 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: event_extend: fd 19 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: send attr request = connect 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: send attr ident = smtp:ip.ip.ip.ip 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: vstream_fflush_some: fd 19 flush 41 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: vstream_buf_get_ready: fd 19 got 25 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: private/anvil: wanted attribute: status 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: input attribute name: status 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: input attribute value: 0 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: private/anvil: wanted attribute: count 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: input attribute name: count 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: input attribute value: 1 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: private/anvil: wanted attribute: rate 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: input attribute name: rate 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: input attribute value: 1 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: private/anvil: wanted attribute: (list terminator) 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: input attribute name: (end) 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: > mail.home.ru[ip.ip.ip.ip]: 220 mail.mydomain.ru 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: watchdog_pat: 0x8004c1b0 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: vstream_fflush_some: fd 18 flush 21 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: vstream_buf_get_ready: fd 18 got 18 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: < mail.home.ru[ip.ip.ip.ip]: EHLO mail.home.ru 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: > mail.home.ru[ip.ip.ip.ip]: 250-mail.mydomain.ru 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: > mail.home.ru[ip.ip.ip.ip]: 250-PIPELINING 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: > mail.home.ru[ip.ip.ip.ip]: 250-SIZE 20971520 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: > mail.home.ru[ip.ip.ip.ip]: 250-VRFY 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: > mail.home.ru[ip.ip.ip.ip]: 250-ETRN 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: match_list_match: mail.home.ru: no match 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: match_list_match: ip.ip.ip.ip: no match 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: > mail.home.ru[ip.ip.ip.ip]: 250-STARTTLS 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: > mail.home.ru[ip.ip.ip.ip]: 250-ENHANCEDSTATUSCODES 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: > mail.home.ru[ip.ip.ip.ip]: 250-8BITMIME 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: > mail.home.ru[ip.ip.ip.ip]: 250 DSN 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: watchdog_pat: 0x8004c1b0 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: vstream_fflush_some: fd 18 flush 138 
Dec 26 15:28:13 pdc postfix/smtpd[11919]: connect from unknown[151.16.147.211] 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: vstream_buf_get_ready: fd 18 got 10 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: < mail.home.ru[ip.ip.ip.ip]: STARTTLS 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: > mail.home.ru[ip.ip.ip.ip]: 220 2.0.0 Ready to start TLS 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: vstream_fflush_some: fd 18 flush 30 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: setting up TLS connection from mail.home.ru[ip.ip.ip.ip] 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: event_request_timer: reset 0xb7eb7668 0x80048a40 5 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: send attr request = seed 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: send attr size = 32 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: vstream_fflush_some: fd 9 flush 22 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: vstream_buf_get_ready: fd 9 got 60 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: private/tlsmgr: wanted attribute: status 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: input attribute name: status 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: input attribute value: 0 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: private/tlsmgr: wanted attribute: seed 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: input attribute name: seed 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: input attribute value: oZb8dvLDcx+shAJS5mAcx8wjRfgtArKem+dKv2LzckA= 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: private/tlsmgr: wanted attribute: (list terminator) 
Dec 26 15:28:13 pdc postfix/smtpd[11918]: input attribute name: (end) 
Dec 26 15:28:15 pdc postfix/master[11669]: warning: process /usr/lib/postfix/smtpd pid 11918 exit status 127 
Dec 26 15:28:15 pdc postfix/master[11669]: warning: /usr/lib/postfix/smtpd: bad command startup -- throttling 

лог с другого сервера, откуда пытаюсь отправить письмо(с gmail/mail/etc так же не приходят):

Dec 26 15:29:07 home postfix/smtp[5477]: smtp_stream_setup: maxtime=300 enable_deadline=0 
Dec 26 15:29:07 home postfix/smtp[5477]: < mail.mydomain.ru[ip.ip.ip.ip]:25: 220 mail.mydomain.ru 
Dec 26 15:29:07 home postfix/smtp[5477]: > mail.mydomain.ru[ip.ip.ip.ip]:25: EHLO mail.home.ru 
Dec 26 15:29:07 home postfix/smtp[5477]: < mail.mydomain.ru[ip.ip.ip.ip]:25: 250-mail.mydomain.ru 
Dec 26 15:29:08 home postfix/smtp[5477]: < mail.mydomain.ru[ip.ip.ip.ip]:25: 250-PIPELINING 
Dec 26 15:29:08 home postfix/smtp[5477]: < mail.mydomain.ru[ip.ip.ip.ip]:25: 250-SIZE 20971520 
Dec 26 15:29:08 home postfix/smtp[5477]: < mail.mydomain.ru[ip.ip.ip.ip]:25: 250-VRFY 
Dec 26 15:29:08 home postfix/smtp[5477]: < mail.mydomain.ru[ip.ip.ip.ip]:25: 250-ETRN 
Dec 26 15:29:08 home postfix/smtp[5477]: < mail.mydomain.ru[ip.ip.ip.ip]:25: 250-STARTTLS 
Dec 26 15:29:08 home postfix/smtp[5477]: < mail.mydomain.ru[ip.ip.ip.ip]:25: 250-ENHANCEDSTATUSCODES 
Dec 26 15:29:08 home postfix/smtp[5477]: < mail.mydomain.ru[ip.ip.ip.ip]:25: 250-8BITMIME 
Dec 26 15:29:08 home postfix/smtp[5477]: < mail.mydomain.ru[ip.ip.ip.ip]:25: 250 DSN 
Dec 26 15:29:08 home postfix/smtp[5477]: server features: 0x901f size 20971520 
Dec 26 15:29:08 home postfix/smtp[5477]: Using ESMTP PIPELINING, TCP send buffer size is 21720, PIPELINING buffer size is 4096 
Dec 26 15:29:08 home postfix/smtp[5477]: smtp_stream_setup: maxtime=300 enable_deadline=0 
Dec 26 15:29:08 home postfix/smtp[5477]: > mail.mydomain.ru[ip.ip.ip.ip]:25: STARTTLS 
Dec 26 15:29:08 home postfix/smtp[5477]: < mail.mydomain.ru[ip.ip.ip.ip]:25: 220 2.0.0 Ready to start TLS 
Dec 26 15:29:08 home postfix/smtp[5477]: auto_clnt_open: connected to private/tlsmgr 
Dec 26 15:29:08 home postfix/smtp[5477]: send attr request = lookup 
Dec 26 15:29:08 home postfix/smtp[5477]: send attr cache_type = smtp 
Dec 26 15:29:09 home postfix/smtp[5477]: send attr cache_id = smtp:ip.ip.ip.ip:25:mail.mydomain.ru&p=1&c=aNULL:-aNULL:ALL:+RC4:@STRENGTH:!kEDH+aRSA&l=268435631 
Dec 26 15:29:09 home postfix/smtp[5477]: private/tlsmgr: wanted attribute: status 
Dec 26 15:29:09 home postfix/smtp[5477]: input attribute name: status 
Dec 26 15:29:09 home postfix/smtp[5477]: input attribute value: 0 
Dec 26 15:29:09 home postfix/smtp[5477]: private/tlsmgr: wanted attribute: session 
Dec 26 15:29:09 home postfix/smtp[5477]: input attribute name: session 
Dec 26 15:29:09 home postfix/smtp[5477]: input attribute value: MHECAQECAgMBBAIAOgQgHHeNwHEhAT/5bswVokNlgQkQ9A7/bwfrvyaGM6BECg4EMHS5IQV02M/T4A1hXHlca/ocOSWiL/nqr8PCUovVI3yI2PsJi6UR5MzDCFSYa++vZ6EGAgRQ2t85ogQCAgEspAIEAA==
Dec 26 15:29:09 home postfix/smtp[5477]: private/tlsmgr: wanted attribute: (list terminator) 
Dec 26 15:29:09 home postfix/smtp[5477]: input attribute name: (end) 
Dec 26 15:29:09 home postfix/smtp[5477]: send attr request = seed 
Dec 26 15:29:09 home postfix/smtp[5477]: send attr size = 32 
Dec 26 15:29:09 home postfix/smtp[5477]: private/tlsmgr: wanted attribute: status 
Dec 26 15:29:09 home postfix/smtp[5477]: input attribute name: status 
Dec 26 15:29:09 home postfix/smtp[5477]: input attribute value: 0 
Dec 26 15:29:09 home postfix/smtp[5477]: private/tlsmgr: wanted attribute: seed 
Dec 26 15:29:09 home postfix/smtp[5477]: input attribute name: seed 
Dec 26 15:29:09 home postfix/smtp[5477]: input attribute value: J4wRWR1Py2nxJP4lwf+QPjWKKJ92nv1W0WYYZIbCVtY= 
Dec 26 15:29:09 home postfix/smtp[5477]: private/tlsmgr: wanted attribute: (list terminator) 
Dec 26 15:29:10 home postfix/smtp[5477]: input attribute name: (end) 
Dec 26 15:29:10 home postfix/smtp[5477]: send attr request = update 
Dec 26 15:29:10 home postfix/smtp[5477]: send attr cache_type = smtp 
Dec 26 15:29:10 home postfix/smtp[5477]: send attr cache_id = smtp:ip.ip.ip.ip:25:mail.mydomain.ru&p=1&c=aNULL:-aNULL:ALL:+RC4:@STRENGTH:!kEDH+aRSA&l=268435631 
Dec 26 15:29:10 home postfix/smtp[5477]: send attr session = [data 115 bytes] 
Dec 26 15:29:10 home postfix/smtp[5477]: private/tlsmgr: wanted attribute: status 
Dec 26 15:29:10 home postfix/smtp[5477]: input attribute name: status 
Dec 26 15:29:10 home postfix/smtp[5477]: input attribute value: 0 
Dec 26 15:29:10 home postfix/smtp[5477]: private/tlsmgr: wanted attribute: (list terminator) 
Dec 26 15:29:10 home postfix/smtp[5477]: input attribute name: (end) 
Dec 26 15:29:10 home postfix/smtp[5477]: Untrusted TLS connection established to mail.mydomain.ru[ip.ip.ip.ip]:25: TLSv1 with cipher ADH-AES256-SHA (256/256 bits) 
Dec 26 15:29:10 home postfix/smtp[5477]: smtp_stream_setup: maxtime=300 enable_deadline=0 
Dec 26 15:29:10 home postfix/smtp[5477]: > mail.mydomain.ru[ip.ip.ip.ip]:25: EHLO mail.home.ru 
Dec 26 15:29:10 home postfix/smtp[5477]: smtp_get: EOF 
Dec 26 15:29:10 home postfix/smtp[5477]: connect to subsystem private/defer 
Dec 26 15:29:10 home postfix/smtp[5477]: send attr nrequest = 0 
Dec 26 15:29:10 home postfix/smtp[5477]: send attr flags = 0 
Dec 26 15:29:10 home postfix/smtp[5477]: send attr queue_id = 1A372E8621 
Dec 26 15:29:10 home postfix/smtp[5477]: send attr original_recipient = user@mydomain.ru 
Dec 26 15:29:10 home postfix/smtp[5477]: send attr recipient = user@mydomain.ru 
Dec 26 15:29:10 home postfix/smtp[5477]: send attr offset = 648 
Dec 26 15:29:10 home postfix/smtp[5477]: send attr dsn_orig_rcpt = rfc822;user@mydomain.ru 
Dec 26 15:29:11 home postfix/smtp[5477]: send attr notify_flags = 0 
Dec 26 15:29:11 home postfix/smtp[5477]: send attr status = 4.4.2 
Dec 26 15:29:11 home postfix/smtp[5477]: send attr diag_type = 
Dec 26 15:29:11 home postfix/smtp[5477]: send attr diag_text = 
Dec 26 15:29:11 home postfix/smtp[5477]: send attr mta_type = 
Dec 26 15:29:11 home postfix/smtp[5477]: send attr mta_mname = 
Dec 26 15:29:11 home postfix/smtp[5477]: send attr action = delayed 
Dec 26 15:29:11 home postfix/smtp[5477]: send attr reason = lost connection with mail.mydomain.ru[ip.ip.ip.ip] while performing the EHLO handshake 
Dec 26 15:29:11 home postfix/smtp[5477]: private/defer socket: wanted attribute: status 
Dec 26 15:29:11 home postfix/smtp[5477]: input attribute name: status 
Dec 26 15:29:11 home postfix/smtp[5477]: input attribute value: 0 
Dec 26 15:29:11 home postfix/smtp[5477]: private/defer socket: wanted attribute: (list terminator) 
Dec 26 15:29:11 home postfix/smtp[5477]: input attribute name: (end) 
Dec 26 15:29:11 home postfix/smtp[5477]: 1A372E8621: to=<user@mydomain.ru>, relay=mail.mydomain.ru[ip.ip.ip.ip]:25, delay=3, delays=0.18/0/2.8/0, dsn=4.4.2, status=deferred (lost connection with mail.mydomain.ru[ip.ip.ip.ip] while performing the EHLO handshake) 
Dec 26 15:29:11 home postfix/smtp[5477]: flush_add: site mydomain.ru id 1A372E8621 
Dec 26 15:29:11 home postfix/smtp[5477]: match_hostname: mydomain.ru ~? localhost 
Dec 26 15:29:11 home postfix/smtp[5477]: match_hostname: mydomain.ru ~? mail.home.ru 
Dec 26 15:29:11 home postfix/smtp[5477]: match_hostname: mydomain.ru ~? localhost.mail.home.ru 
Dec 26 15:29:11 home postfix/smtp[5477]: match_hostname: mydomain.ru ~? localhost.home.ru 
Dec 26 15:29:11 home postfix/smtp[5477]: match_list_match: mydomain.ru: no match 
Dec 26 15:29:11 home postfix/smtp[5477]: flush_add: site mydomain.ru id 1A372E8621 status 4 
Dec 26 15:29:11 home postfix/smtp[5477]: name_mask: resource 
Dec 26 15:29:11 home postfix/smtp[5477]: name_mask: software