Postfix Configuration

I have followed the tutorial http://www.howtoforge.com/hardening-postfix-for-ispconfig-3 to setup Postfix.

Now i have a doubt related with this comment http://www.howtoforge.com/hardening-postfix-for-ispconfig-3#comment-33930

What will be the correct order:

1. as suggested in tutorial?
   
   Code:

   #smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, check_recipient_access mysql:/etc/postfix/mysql-virtual_recipient.cf, reject_unauth_destination

2. as suggested in the comment?
   
   Code:

   smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination, check_recipient_access mysql:/etc/postfix/mysql-virtual_recipient.cf, reject_unknown_recipient_domain, check_policy_service unix:private/policy-spf, check_policy_service inet:127.0.0.1:10023