http://www.pendragon.org/mywiki/SpamAssassin

smtpd_restriction_classes = secure
secure = check_client_access hash:/usr/local/etc/postfix/blacklist/clients,
        check_client_access hash:/usr/local/etc/postfix/whitelist/
whitelist_ip,
        check_sender_access hash:/usr/local/etc/postfix/whitelist/
whitelist_senders_names,
        check_recipient_access hash:/usr/local/etc/postfix/whitelist/
whitelist_recipients_names,
        check_recipient_access hash:/usr/local/etc/postfix/blacklist/
recipients,
        check_helo_access hash:/usr/local/etc/postfix/blacklist/helo_checks,
        reject_non_fqdn_recipient,
        reject_unknown_recipient_domain,
        permit_mynetworks,
        permit_sasl_authenticated,
        reject_unauth_destination,
        reject_invalid_hostname,
        reject_unknown_hostname,
        reject_non_fqdn_hostname,
        reject_rbl_client t1.dnsbl.net.au 
        reject_rbl_client dynablock.njabl.org
        reject_rhsbl_sender dsn.rfc-ignorant.org
        reject_rbl_client bl.spamcop.net
        reject_rbl_client dnsbl.sorbs.net
        reject_rbl_client sbl-xbl.spamhaus.org
        reject_rbl_client cbl.abuseat.org
        reject_rbl_client dnsbl.tqmcube.com
        reject_rbl_client psbl.surriel.com
# klejnot koronny POSTFIKSA
        warn_if_reject reject_unverified_sender,
        check_policy_service inet:127.0.0.1:10023