I want to whitelist certain domains for the reject_unknown_reverse_client_hostname restriction, but still checking the following restrictions in this restriction class (check_policy_service, reject_rbl_client,...)

I suppose the first one is incorrect, but the 2nd would work. Can someone verify this, or is there a better way to do it?

smtpd_recipient_restrictions =
 reject_invalid_helo_hostname,
 reject_non_fqdn_sender,
 reject_non_fqdn_recipient,
 reject_unknown_sender_domain,
 reject_unknown_recipient_domain,
 reject_multi_recipient_bounce,
 permit_mynetworks,
 permit_sasl_authenticated,
 reject_unauth_destination,
 check_client_access hash:/etc/postfix/checks/whitelist
 reject_unknown_reverse_client_hostname,
 check_policy_service inet:127.0.0.1:10031,
 check_client_access pcre:/etc/postfix/checks/client_restrictions.pcre,
 reject_rbl_client rbldnsd-virbl.dnsbl.bit.nl.dnsbl,
 reject_rbl_client sbl.spamhaus.org.dnsbl,
 reject_rbl_client xbl.spamhaus.org.dnsbl,
 reject_rbl_client list.dsbl.org.dnsbl,
 reject_rbl_client multihop.dsbl.org.dnsbl,
 permit

cat /etc/postfix/checks/whitelist
xxx.xxx.xxx.xxx		DUNNO	# whitelisted ip 1
xxx.xxx.xxx.xxy		DUNNO	# whitelisted ip 2




smtpd_recipient_restrictions =
 reject_invalid_helo_hostname,
 reject_non_fqdn_sender,
 reject_non_fqdn_recipient,
 reject_unknown_sender_domain,
 reject_unknown_recipient_domain,
 reject_multi_recipient_bounce,
 permit_mynetworks,
 permit_sasl_authenticated,
 reject_unauth_destination,
 check_client_access pcre:/etc/postfix/checks/reject_unknown_reverse_client_hostname,
 check_policy_service inet:127.0.0.1:10031,
 check_client_access pcre:/etc/postfix/checks/client_restrictions.pcre,
 reject_rbl_client rbldnsd-virbl.dnsbl.bit.nl.dnsbl,
 reject_rbl_client sbl.spamhaus.org.dnsbl,
 reject_rbl_client xbl.spamhaus.org.dnsbl,
 reject_rbl_client list.dsbl.org.dnsbl,
 reject_rbl_client multihop.dsbl.org.dnsbl,
 permit

cat /etc/postfix/checks/reject_unknown_reverse_client_hostname
/xxx\.xxx\.xxx\.xxx/	DUNNO	# whitelisted ip 1
/xxx\.xxx\.xxx\.xxy/	DUNNO	# whitelisted ip 2
/.*/			reject_unknown_reverse_client_hostname