smtpd_helo_restrictions not being honored

I've done some searching on this topic, but haven't found a solution to
this (but have located other people with similar issues).

I have in my main.cf:

smtpd_helo_restrictions =
check_helo_access hash:/etc/postfix/helo_access

wherein I have a couple of test entires:

tester.mydomain.com REJECT
192.168.1.3 REJECT

As I understand from the manual pages, if I telnet to port 25 and use
"HELO tester.mydomain.com" it should reject the connection, but it does
not. This is on an internal network, for testing purposes.

However, I may be misunderstanding things - tester.mydomain.com isn't
really in DNS here, it's in /etc/hosts (on the Postfix server).

check_client_access may be more appropriate? The goal here is to block
spam inbound from people claiming to be 127.0.0.x or my.ip.address or
(worse) those claiming to be my own server.




Thanks.