RBL、SORBSは厳しすぎて（gmailのoutgoingすら排除とは…）、今のところこうなった
smtpd_helo_required = yes
disable_vrfy_command = yes
smtpd_client_restrictions =
permit_mynetworks
reject_unknown_reverse_client_hostname
check_client_access pcre:/etc/postfix/client_access
reject_unknown_client_hostname
smtpd_helo_restrictions =
permit_mynetworks
reject_invalid_helo_hostname
reject_non_fqdn_helo_hostname
#reject_unknown_helo_hostname # vector.co.jp...
smtpd_data_restrictions =
permit_mynetworks
reject_unauth_pipelining
smtpd_sender_restrictions =
permit_mynetworks
reject_non_fqdn_sender
check_sender_access pcre:/etc/postfix/sender_access
reject_unknown_sender_domain
smtpd_relay_restrictions =
permit_mynetworks
defer_unauth_destination
smtpd_recipient_restrictions =
permit_mynetworks
reject_unauth_destination
reject_non_fqdn_recipient
check_recipient_access pcre:/etc/postfix/recipients_access
reject_unknown_recipient_domain
reject_unverified_recipient
reject_rbl_client bl.spamcop.net
#reject_rbl_client dnsbl.sorbs.net # rejects google smtp
reject_rbl_client zen.spamhaus.org
reject_rbl_client b.barracudacentral.org
reject_rhsbl_sender spam.dnsbl.sorbs.net
#reject_rhsbl_sender dbl.spamhaus.org
reject_rhsbl_sender zen.spamhaus.org
address_verify_negative_expire_time = 30d
address_verify_negative_refresh_time = 1d
address_verify_positive_expire_time = 300d
address_verify_positive_refresh_time = 30d
unverified_recipient_reject_code = 550