Sorry, my error. Should be sender_domains instead of domains:
acl_check_rcpt:
accept hosts = :
deny message = Restricted characters in address
domains = +local_domains
local_parts = ^[.] : ^.*[@%!/|]
deny message = Restricted characters in address
domains = !+local_domains
local_parts = ^[./|] : ^.*[@] : ^.*/\\.\\./
accept local_parts = postmaster
domains = +local_domains
require verify = sender
accept hosts = +relay_from_hosts
sender_domains = +sender_domains
control = submission/domain=
accept authenticated = *
sender_domains = +sender_domains
control = submission/domain=
require message = relay not permitted
domains = +local_domains : +relay_to_domains
require verify = recipient
(checking RBLs here)
accept
