The postfix configuration was a bit too permissive with `mynetworks`. This commit: - adds `reject` at the end of `*restrictions` list - adds tests for this feature