P.S. Sorry, correction: the reason I suspect is
"require verify = recipient" before "accept...relay_from_hosts"
and "accept authenticated". The "require verify = sender" should be
before, only "require verify = recipient" after:
acl_check_rcpt:
accept hosts = :
deny message = Restricted characters in address
domains = +local_domains
local_parts = ^[.] : ^.*[@%!/|]
deny message = Restricted characters in address
domains = !+local_domains
local_parts = ^[./|] : ^.*[@] : ^.*/\\.\\./
accept local_parts = postmaster : abuse
domains = +local_domains
require verify = sender
accept hosts = +relay_from_hosts
control = submission
accept authenticated = *
control = submission
require message = relay not permitted
domains = +local_domains : +relay_to_domains
require verify = recipient
