[exim] acl problem : unexpected deny in acl_check_smtp_rcpt:

The follow is from exim -bh . It results in a 'deny" yet shouldn't
another host on the same subnet and domain "home.hanaden.com" sends mail
fine. Anyone have ideas as to what is going on and why this is
failing/how to fix?


====== config rules
acl_check_smtp_rcpt:
accept hosts = :

  accept  domains       = +local_domains
       local_parts   = postmaster

  deny  message   = "HELO/EHLO required by SMTP RFC"
       condition = ${if eq{$sender_helo_name}{}{yes}{no}}
       deny  message   = "Invalid domain or IP given in HELO/EHLO"
       !condition = ${if match{$sender_helo_name}{\\\.}{yes}{no}}

======= transcript

250 cognition.home.hanaden.com Hello frontal-lobe.home.hanaden.com
[10.1.1.30]
mail from: <hanasaki@???>
>>> using ACL "acl_check_smtp_mail"
>>> processing "accept"
>>> accept: condition test succeeded
250 OK
rcpt to: hanasaki@???
>>> using ACL "acl_check_smtp_rcpt"
>>> processing "accept"
>>> check hosts = :
>>> host in ":"? no (end of list)
>>> accept: condition test failed
>>> processing "accept"
>>> check domains = +local_domains
>>> hanaden.com in "@:localhost:hanaden.com:home.hanaden.com"? yes
(matched "hanaden.com")

>>> hanaden.com in "+local_domains"? yes (matched "+local_domains")
>>> check local_parts = postmaster
>>> hanasaki in "postmaster"? no (end of list)
>>> accept: condition test failed
>>> processing "deny"
>>> check condition = ${if eq{$sender_helo_name}{}{yes}{no}}
>>>                 = no
>>> deny: condition test failed
>>> processing "deny"
>>> check !condition = ${if match{$sender_helo_name}{\\\.}{yes}{no}}
>>>                  = no
>>> deny: condition test succeeded

550 "Invalid domain or IP given in HELO/EHLO"
LOG: H=frontal-lobe.home.hanaden.com (localhost) [10.1.1.30]
F=<hanasaki@???> rejected RCPT hanasaki@???: "Invalid
domain or IP given in HELO/EHLO"
LOG: SMTP command timeout on connection from
frontal-lobe.home.hanaden.com (localhost) [10.1.1.30]
421 cognition.home.hanaden.com: SMTP command timeout - closing connection