Not specifically client_restrictions but this is the general idea:
main.cf: smtpd_client_restrictions= check_client_access hash:/etc/postfix/reject_by_ip check_client_access hash:/etc/postfix/reject_by_hostname check_client_access hash:/etc/postfix/ok_by_ip check_client_access hash:/etc/postfix/ok_by_hostname Would the above be valid?