[bceverly]

Thanks @TronDD!

Here's the smtpd.conf from the internal server running on the high-numbered port:

pki mail.rrr.com certificate "/etc/ssl/mail.rrr.com.crt"
pki mail.rrr.com key "/etc/ssl/private/mail.rrr.com.key"

listen on lo0
listen on egress port 1111 tls pki mail.rrr.com auth-optional
listen on egress port submission tls-require pki mail.rrr.com auth

table aliases db:/etc/mail/aliases.db
table secrets db:/etc/mail/secrets.db
table vusers file:/etc/mail/vusers
table vdomains file:/etc/mail/vdomains

accept for local alias <aliases> deliver to mbox
accept for any relay via tls+auth://gmail@smtp.gmail.com:587 auth <secrets>

accept from any for domain <vdomains> virtual <vusers> deliver to mbox
accept from local for any relay

Here's the smtpd.conf for the relay server in the cloud:

pki mail.rrr.com certificate "/etc/ssl/mail.rrr.com.crt"
pki mail.rrr.com key "/etc/ssl/private/mail.rrr.com.key"

listen on lo0
listen on egress tls pki mail.rrr.com auth-optional
listen on egress port submission tls-require pki mail.rrr.com auth

table aliases db:/etc/mail/aliases.db
table vusers file:/etc/mail/vusers
table vdomains file:/etc/mail/vdomains

#accept for local alias <aliases> deliver to mbox
#accept from any for domain <vdomains> virtual <vusers> deliver to mbox

accept from local for any relay
accept for domain <vdomains> relay via "smtp://11.11.11.11:1111"

If I uncomment the lines from the relay, it gets mail locally just fine.

Thanks in advance for any suggestions.