smtpd_relay_restrictions = permit_mynetworks,
  permit_sasl_authenticated,
  defer_unauth_destination

smtpd_recipient_restrictions =
  permit_mynetworks,
  permit_sasl_authenticated,
##check_policy_service inet:127.0.0.1:10023,
  reject_non_fqdn_hostname,
  reject_non_fqdn_sender,
  reject_non_fqdn_recipient,
  reject_unauth_pipelining,
  reject_unauth_destination,
#  check_policy_service unix:private/policyd-spf,
  reject_invalid_hostname,
#  reject_rbl_client bl.ipv6.spameatingmonkey.net,
#  reject_rbl_client v6.fullbogons.cymru.com,
#  reject_rbl_client virbl.dnsbl.bit.nl,
#  reject_rbl_client list.dsbl.org,
   reject_rbl_client sbl-xbl.spamhaus.org,
#  reject_rbl_client cbl.abuseat.org,
   reject_rbl_client dul.dnsbl.sorbs.net