Default config: reject on too many bad RCPT