Postfix not following my access file.

2 msg	Postfix SASL Help
6 msg	Slowing down postfix
2 msg	need help deciphering a line
4 msg	Postfix SMTP server: errors from something.net[...
4 msg	2.5.0-RC and 2.6 should recognize FreeBSD 8

Postfix not following my access file.
\ Yvo van Doorn (22 Jan 2008)
. \ (Wietse Venema) (22 Jan 2008)
. \ Victor Duchovni (22 Jan 2008)
. . \ Yvo van Doorn (22 Jan 2008)
. . \ Guy Story KC5GOI (22 Jan 2008)
. . . \ Duane Hill (22 Jan 2008)
. . . . \ mouss (23 Jan 2008)
. . . . . \ Duane Hill (23 Jan 2008)
. . . \ Victor Duchovni (22 Jan 2008)

3 msg	postfix logs delay, delays, dsn
3 msg	Best way to shutdown postfix prior to servicing...
1 msg	the bounce process hangs a mail (?)
3 msg	messages destined for content_filter stuck in d...
2 msg	Domain in username
5 msg	missing authentication on recipient
5 msg	postfixadmin
5 msg	check_policy_service before reject_rbl_client
9 msg	MXBackup via LDAP
5 msg	header and body check exemptions
5 msg	Relay recipient maps and relocated users
4 msg	mail forwarding loop :: SPAM
3 msg	transport_maps how to match mx's
2 msg	Where/when to insert a missing Message-ID

Subject:	Postfix not following my access file.
Group:	Postfix-users
From:	Yvo van Doorn
Date:	22 Jan 2008

Hey everyone,

I am currently migrating from Sendmail 8.13 to Postfix 2.4.5. In my
current sendmail configuration we block a lot of TLDs that we just
plainly don't want email from. This particular email system should
only see legitimate email traffic from the US and Canada. What seems
to be happening that Postfix is still allowing traffic from emails
with the from address from those TLDs (or hostnames from those TLDs).
I have included my settings below in order to diagnose what I am doing
wrong. After reading the docs I am under the impression that my
configuration should work but alas it does not.

This is an excerpt from the access file I have setup in /etc/postfix/access:
.ad REJECT
.ae REJECT
.af REJECT
.ag REJECT
.ai REJECT
.al REJECT
.am REJECT
.an REJECT
.ao REJECT
.aq REJECT
.ar REJECT
.as REJECT
.at REJECT
.au REJECT
.aw REJECT
.az REJECT
.ba REJECT
.bb REJECT
.bd REJECT
.be REJECT

This is the corresponding configuration part in my main.cf file:
# Maps
relay_recipient_maps =
transport_maps = hash:/etc/postfix/transport
virtual_alias_maps = hash:/etc/postfix/virtual
relay_domains = hash:/etc/postfix/relay_domains

# SMTP config
biff = no
empty_address_recipient = MAILER-DAEMON
queue_minfree = 120000000
smtpd_banner = $myhostname ESMTP
smtpd_delay_reject = yes
parent_domain_matches_subdomains =
debug_peer_list smtpd_access_maps
smtpd_helo_restrictions =
permit_mynetworks, check_helo_access hash:/etc/postfix/access,
reject_unauth_pipelining
smtpd_sender_restrictions =
permit_mynetworks, check_sender_access
hash:/etc/postfix/access, reject_unauth_pipelining
smtpd_recipient_restrictions =
permit_mynetworks, reject_unauth_destination
smtpd_client_restrictions =
permit_mynetworks, check_client_access
hash:/etc/postfix/access, reject_unauth_pipelining

Excerpt from /var/log/maillog allowing mail to be past through (and
yes .tv is in the access table):
Jan 22 11:52:58 uuemx12 postfix/smtpd[8985]: connect from unknown[88.231.29.39]
Jan 22 11:53:00 uuemx12 postfix/smtpd[8985]: 9B7C8191A29:
client=unknown[88.231.29.39]
Jan 22 11:53:02 uuemx12 postfix/cleanup[8979]: 9B7C8191A29:
message-id=<519501c85d30$67ec9370$c0a80102@Stacy>
Jan 22 11:53:04 uuemx12 postfix/qmgr[5151]: 9B7C8191A29:
from=<jramsay>, size=4728, nrcpt=1 (queue active)
Jan 22 11:53:04 uuemx12 postfix/smtp[9004]: 9B7C8191A29:
to=<om_650999979>,
relay=bmx.censored-domain.com[ipiscensored]:25, delay=5.3,
delays=5.2/0.01/0/0.04, dsn=2.0.0, status=sent (250 2.0.0 Ok: queued
as E722E47AF1)
Jan 22 11:53:04 uuemx12 postfix/qmgr[5151]: 9B7C8191A29: removed