Christian Rößner:
This server already has two ip addresses and routing can not be done
on answer decisions. That exactly is the problem here.
And the main MTA on port 25 enforces a policy.
As you told in a previus message you run multiple instances on one host.
I assume you have a clean setup about which instance use which ip address.
-> inet_interfaces = ${myhostname}
In that case I suggest to setup a secondary address on the loopback interface.
The "main MTA" could listen there with a separate smtp instance
(without policy)
and the "relay MTA" could use that IP replaced by the DNS filter
Wietse mentioned.
Andreas