Under the smtpd_recipient_restrictions you could have something like check_sender_access hash:/opt/zimbra/conf/validdomains and within that file you would have
Code:
service.domain.com OK
and then as the zimbra user execute postmap /opt/zimbra/conf/validdomains. You will want that access map to execute before reject_unknown_hostname.