smtpd_helo_restrictions =
  check_helo_access pcre:/etc/postfix/checks/helo_checks
  reject_invalid_hostname
  reject_non_fqdn_hostname

smtpd_sender_restrictions =
  permit_mynetworks
  permit_sasl_authenticated
  reject_non_fqdn_sender
  check_sender_access hash:/etc/postfix/checks/pg_whitelist
  check_policy_service inet:127.0.0.1:60000

smtpd_recipient_restrictions =
  permit_mynetworks
  permit_sasl_authenticated
  reject_multi_recipient_bounce
  reject_non_fqdn_recipient
  reject_unknown_recipient_domain
  reject_unauth_destination
  check_recipient_access hash:/etc/postfix/checks/roleaccount_checks
  permit