> require verify = recipient/defer_ok/callout=10s/callout_defer_ok
Sorry for replying to myself, this should be
deny domains = +relay_to_domains
!verify = recipient/defer_ok/callout=10s/callout_defer_ok
otherwise the server will run a callout for every recipient.
Nico