How to block certain tld's

4 msg	Client sporadically unknown
2 msg	disappearing admin mail
1 msg	Virtual mailing list from SQL query
13 msg	the most popular domainkey signer?
2 msg	Alias to nonexistent user
8 msg	Configuration... any issues or suggestions?
3 msg	Script to 'click' on a URL in an e-mail?
2 msg	Lots of Connection Refused messages
4 msg	Get rid of messages in Cyrillic?
6 msg	Disabling cleanup of messages?
4 msg	domain name not appending for internal messages
2 msg	OT: help with understanding domain key implicat...
7 msg	rejecting spam that doesn't include the recipie...
4 msg	Question: rejecting email normally, then callin...
3 msg	deny sender
7 msg	Postfix SMTP service unavailable
4 msg	controlling spamming using sender_access file
2 msg	address not listed for hostname
3 msg	Best method to handle invalid HELO hostnames?

How to block certain tld's
\ Jack Raats (16 Mar 2008)
. \ Justin Piszcz (16 Mar 2008)
. \ mouss (16 Mar 2008)

Subject:	How to block certain tld's
Group:	Postfix-users
From:	Jack Raats
Date:	16 Mar 2008

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I want to block certain tld's and somehow it doesn't work.

In main.cf I have

smtpd_recipient_restrictions =
....
permit_mynetworks,
permit_sasl_authenticated,
reject_unauth_destination,
....
check_client_access hash:/postfix/tables/blacklist,
...

In /postfix/tables/blacklist
.biz REJECT
.gov REJECT
.pro REJECT
.cn REJECT

Still I receive a lot of chinese spam.
Can anyone give me some clues?

and how to do the opposite?
To receive mail from only three tld's like .net, .com and .org?

Thanks for your time
Jack

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (MingW32) - GPGrelay v0.959

iD8DBQFH3ODgPh5RwW/NzC4RAjfXAJ0bnaKHNpQIwy9Q+LF2/5NEWLT9tgCfSHGS
Ep7TmsWOGIRAqB/DvBTh+Lc=
=LED9
-----END PGP SIGNATURE-----