Sender & Recipient Restrictions with Exceptions

Our Postfix server is setup as our email firewall/gateway; relays
email to and from external destinations (Internet) on behalf of
internal Exchange server. However, there are some users who are not
permitted to send email to external destinations. Our current
configuration eliminates that issue, except for a new variable: there
are a couple of internal addresses that are forwarded to external
addresses, so is it possible to create some sort of exception list so
that restricted internal users can email them?

Postfi 2.0.19,1 on FreeBSD 4.9. =20

mx1# postconf -n
alias_database =3D hash:/usr/local/etc/postfix/aliases
alias_maps =3D hash:/usr/local/etc/postfix/aliases
body_checks =3D regexp:/usr/local/etc/postfix/body_checks
bounce_size_limit =3D 65536
command_directory =3D /usr/local/sbin
config_directory =3D /usr/local/etc/postfix
daemon_directory =3D /usr/local/libexec/postfix
debug_peer_level =3D 2
disable_vrfy_command =3D yes
header_checks =3D regexp:/usr/local/etc/postfix/header_checks
header_size_limit =3D 32768
local_recipient_maps =3D hash:/usr/local/etc/postfix/local_recipients_maps
local_transport =3D local
mail_owner =3D postfix
mailq_path =3D /usr/local/bin/mailq
manpage_directory =3D /usr/local/man
message_size_limit =3D 12533760
mime_header_checks =3D regexp:/usr/local/etc/postfix/mime_header_checks
mydestination =3D $myhostname, localhost.$mydomain, $mydomain, mx.$mydomain=
..com
mydomain =3D example.org
myhostname =3D mx1.example.org
mynetworks =3D 127.0.0.0/8, 10.10.10.250, 10.10.10.203
myorigin =3D $mydomain
newaliases_path =3D /usr/local/bin/newaliases
proxy_interfaces =3D 123.123.123.123
queue_directory =3D /var/spool/postfix
readme_directory =3D no
relay_domains =3D hash:/usr/local/etc/postfix/relay_domains
relay_recipient_maps =3D hash:/usr/local/etc/postfix/relay_recipient_maps
sample_directory =3D /usr/local/etc/postfix/samples
sendmail_path =3D /usr/local/sbin/sendmail
setgid_group =3D maildrop
show_user_unknown_table_name =3D no
smtpd_banner =3D $myhostname - ESMTP Mail Server - Attn: UCE trespassers
will be pursued!
smtpd_etrn_restrictions =3D reject
smtpd_recipient_limit =3D 128
smtpd_recipient_restrictions =3D permit_mynetworks,reject_unauth_destinatio=
n
smtpd_sender_restrictions =3D check_sender_access
hash:/usr/local/etc/postfix/restricted_senders
smtpd_timeout =3D 180
strict_rfc821_envelopes =3D yes
transport_maps =3D hash:/usr/local/etc/postfix/transport
unknown_local_recipient_reject_code =3D 550

mx1# cat restricted_senders
localuser@example.org=09=09reject_unauth_destination
localuser2@example.org=09=09reject_unauth_destination

Thank you!

....D