smtpd_restriction_classes = permit_bad_helo
permit_bad_helo = reject_unauth_destination, permit

smtpd_etrn_restrictions = permit_mynetworks,
    reject

smtpd_helo_restrictions = permit_sasl_authenticated,
    permit_mynetworks,
    check_client_access cdb:/etc/postfix/helo_exceptions.hosts,
    check_helo_access cdb:/etc/postfix/helo_checks,
    check_helo_access pcre:/etc/postfix/helo_checks.pcre,
    reject_unknown_helo_hostname,
    reject_invalid_helo_hostname,
    reject_non_fqdn_helo_hostname,

smtpd_client_restrictions = permit_sasl_authenticated,
    permit_mynetworks

smtpd_recipient_restrictions = reject_unknown_recipient_domain,
    reject_non_fqdn_recipient,
    reject_non_fqdn_sender,
    reject_unknown_sender_domain,
#   check_recipient_access pcre:/etc/postfix/recipient_checks.pcre,
    check_sender_mx_access cidr:/etc/postfix/bogus_mx,
    check_recipient_mx_access cidr:/etc/postfix/bogus_mx,
    permit_sasl_authenticated,
    check_recipient_access cdb:/etc/postfix/blocked_recipients,
    permit_mynetworks,
    reject_unauth_destination,
    check_client_access cdb:/etc/postfix/access_permit,
    check_client_access cdb:/etc/postfix/access_deny,
    check_client_access cdb:/etc/spam_check/blocklist/block_list.txt,
    check_sender_access cdb:/etc/postfix/access_senders,
    check_policy_service unix:private/policy,
    check_policy_service inet:127.0.0.1:60000,
    check_sender_access cdb:/etc/postfix/no_verify_sender,
    reject_unverified_sender

smtpd_data_restrictions = reject_unauth_pipelining,
    check_policy_service inet:127.0.0.1:60000,
    reject_multi_recipient_bounce