Something

smtpd_recipient_restrictions =
            permit_sasl_authenticated,
            permit_mynetworks,
            reject_invalid_hostname,
            reject_non_fqdn_sender,
            reject_non_fqdn_recipient,
            reject_unknown_recipient_domain,
            reject_unauth_destination,
#            check_client_access    hash:/usr/local/etc/postfix/host_whitelist,
            reject_non_fqdn_hostname,
            reject_unknown_sender_domain,
            reject_unlisted_sender,
            reject_rbl_client dul.dnsbl.sorbs.net,
#            check_client_access    hash:/usr/local/etc/postfix/policyd_weight_client_whitelist,
#            check_recipient_access hash:/usr/local/etc/postfix/policyd_weight_recipient_whitelist,
            reject_rbl_client sbl-xbl.spamhaus.org,
            # reject_rbl_client relays.ordb.org,      # use policy instead
# old policyd-weight #      check_policy_service unix:private/policy,
            check_policy_service inet:127.0.0.1:12525
            permit