https://bugzilla.redhat.com/show_bug.cgi?id=1848125
--- Comment #1 from dan@islenet.com --- This is a bit more complex that I thought. In trying to move the receive/send functions from 10026/10027 to 10036/10037 I was still being blocked by policy until I added:
semanage port -a -t amavisd_recv_port_t -p tcp 10036 semanage port -a -t amavisd_send_port_t -p tcp 10037