diff --git a/templates/main.cf.j2 b/templates/main.cf.j2
index 398ce1f..c344720 100644
--- a/templates/main.cf.j2
+++ b/templates/main.cf.j2
@@ -82,6 +82,19 @@ smtpd_recipient_restrictions =  permit_mynetworks,
                                 {% endif -%}
                                 permit
 
+mua_helo_restrictions = permit_mynetworks,
+                        permit_sasl_authenticated,
+                        reject_invalid_helo_hostname,
+                        reject_non_fqdn_helo_hostname
+
+mua_sender_restrictions = reject_non_fqdn_sender,
+                          reject_unknown_sender_domain,
+                          permit_mynetworks,
+                          permit_sasl_authenticated
+
+mua_client_restrictions = permit_sasl_authenticated,
+                          reject
+
 {%  if ("mailbox_transport" in postfix and postfix.mailbox_transport == "dovecot")
     or postfix.ldap.enable
 %}