ACL_check_rcpt:
  deny   local_parts = ^.*[@%!|] : ^\\.

  accept hosts       = @[]

  accept local_parts = postmaster
         domains     = +local_domains : +relay_to_domains

  accept domains = +local_domains
         endpass
         message = unknown user
         verify  = recipient

  accept domains = +relay_to_domains
         endpass
         message = Undeliverable Address.
         verify  = recipient/callout=5s,defer_ok

  accept hosts  = +relay_from_hosts
         #verify = recipient/callout=5s,defer_ok

  accept authenticated = *

  deny message = relay not permitted