Postifx, LDAP Problem mit Rejects von unbekannten Mailadress

max. message size (default is 10MB)
message_size_limit= 102400000
queue_directory= /var/spool/postfix
program_directory= /usr/lib/postfix
command_directory= /usr/sbin
daemon_directory= /usr/lib/postfix
mail_owner= postfix
default_privs= cyrus
myhostname= mail.XYZ.at
myorigin= $mydomain

masquerade_domains= $mydomain
masquerade_exceptions= root

# RECEIVING MAIL
mydestination= $mydomain, $myhostname, localhost.$mydomain, mail.XYZ.at
relayhost= mail2.abcd.at

default_transport= cyrus

mailbox_transport= procmail
canonical_maps= hash:/etc/postfix/canonical
sender_canonical_maps= ldap:ldapcanonical
virtual_maps= hash:/etc/postfix/virtual

relocated_maps= hash:/etc/postfix/relocated
smtpd_sender_restrictions= hash:/etc/postfix/access
smtpd_recipient_restrictions = ldap:ldapmailenab, check_relay_ccerts, permit_mynetworks, check_relay_domains, ldap:ldapmlgrp
transport_maps= hash:/etc/postfix/transport

# ALIAS DATABASE
alias_maps= hash:/etc/aliases, ldap:ldapaliases, ldap:ldapml
alias_database= hash:/etc/aliases


# alias database for SuSE eMail Server
ldapaliases_server_host= localhost
ldapaliases_server_port= 389
ldapaliases_bind= no
ldapaliases_timeout= 20
ldapaliases_search_base= dc=icie,dc=jku,dc=at
ldapaliases_query_filter= (alias=%s)
ldapaliases_result_attribute= uid
ldapaliases_lookup_wildcards= no


# this is used to make a mailinglist out of a cyrus imapd-folder
ldapml_server_host= localhost
ldapml_server_port= 389
ldapml_bind= no
ldapml_timeout= 20
ldapml_search_base= dc=icie,dc=jku,dc=at
ldapml_query_filter= (&(fn=%s)(objectclass=SuSEIMAPFolderObject))
ldapml_result_attribute= mailDeliveryProgram
ldapml_lookup_wildcards= no

# this is used to enable/disable mail reception
ldapmailenab_server_host= localhost
ldapmailenab_server_port= 389
ldapmailenab_bind= no
ldapmailenab_timeout= 20
ldapmailenab_search_base= dc=icie,dc=jku,dc=at
ldapmailenab_query_filter= (mail=%s)
ldapmailenab_result_attribute= mailenabled
ldapmailenab_lookup_wildcards= no

# this is used for client certificate based relaying
ldaprelcert_server_host= localhost
ldaprelcert_server_port= 389
ldaprelcert_bind= no
ldaprelcert_timeout= 20
ldaprelcert_search_base= dc=icie,dc=jku,dc=at
ldaprelcert_query_filter= (relayClientcert=%s)
ldaprelcert_result_attribute= uid
ldaprelcert_lookup_wildcards= no

# this is used for header rewriting
ldapcanonical_server_host= localhost
ldapcanonical_server_port= 389
ldapcanonical_bind= no
ldapcanonical_timeout= 20
ldapcanonical_search_base= dc=icie,dc=jku,dc=at
ldapcanonical_query_filter= (uid=%s)
ldapcanonical_result_attribute= mail
ldapcanonical_lookup_wildcards= no

recipient_delimiter= +


mail_name= Postfix on SuSE eMail Server 2.0
smtpd_banner= $myhostname ESMTP $mail_name

local_destination_concurrency_limit= 2
default_destination_concurrency_limit= 10

debug_peer_level= 2

debugger_command= PATH=/usr/bin:/usr/X11R6/bin
     xxgdb $daemon_directory/$process_name $process_id & sleep 5


smtpd_tls_loglevel= 1

smtpd_tls_received_header= yes

smtpd_tls_ask_ccert= yes

smtpd_tls_req_ccert= yes
smtpd_tls_use_session_cache= no
tls_rand_file_name= /etc/postfix/rand_file
disable_dns_lookups= no
defer_transports = 
relay_clientcerts = ldap:ldaprelcert