It's less confusing for users if we say something like "your DNS is
broken" rather than just "message rejected".
${lookup{$local_part}lsearch{/var/lib/misc/$primary_hostname/mail-callout}{$local_part}{}}
!hosts = +debianhosts : WHITELIST
!verify = sender/callout=90s,maxwait=300s
${lookup{$local_part}lsearch{/var/lib/misc/$primary_hostname/mail-callout}{$local_part}{}}
!hosts = +debianhosts : WHITELIST
!verify = sender/callout=90s,maxwait=300s
+ message = "Sender verification failed: $acl_verify_message"
<%- end -%>
<%- if scope.lookupvar('site::nodeinfo')['mailrelay'] -%>
<%- end -%>
<%- if scope.lookupvar('site::nodeinfo')['mailrelay'] -%>