smtpd_delay_reject = yes
smtpd_helo_required = yes
smtpd_helo_restrictions =
   permit_mynetworks,
warn_if_reject,
   reject_non_fqdn_hostname,
warn_if_reject,
   reject_invalid_hostname,
   permit
smtpd_sender_restrictions =
   permit_sasl_authenticated,
   permit_mynetworks,
warn_if_reject,
   reject_non_fqdn_sender,
warn_if_reject,
   reject_unknown_sender_domain,
   permit
smtpd_recipient_restrictions =
warn_if_reject,
  reject_unauth_pipelining,
warn_if_reject,
  reject_non_fqdn_recipient,
warn_if_reject,
  reject_unknown_recipient_domain,
  permit_mynetworks,
  permit_sasl_authenticated,
warn_if_reject,
  reject_unauth_destination,
warn_if_reject,
  reject_rbl_client relays.ordb.org,
warn_if_reject,
  reject_rbl_client list.dsbl.org,
warn_if_reject,
  reject_rbl_client sbl-xbl.spamhaus.org,
warn_if_reject,
  check_policy_service unix:private/spfpolicy
warn_if_reject,
  check_policy_service inet:127.0.0.1:10023
  permit