Amazon and Google will EHLO again after STARTTLS.  This was not handled and was responding with an error code to the second EHLO.  This is now fixed.  (For EHLO only, not HELO.)