Blacklist POSTFIX_CLIENTS_DENIED not working

I added a bunch of networks to POSTFIX_CLIENTS_DENIED, but I still can connect from those networks and send mail:

POSTFIX_CLIENTS_DENIED="10.163.72.0/22 10.170.72.0/22 10.163.40.0/24 10.170.40.0/24 10.163.98.0/24 10.170.98.0/24 10.163.248.0/21 10.163.228.0/22 10.163.240.0/24 10.170.228.0/22 10.170.240.0/23 153.96.207.0/24 153.97.135.0/24"

Jun 02 11:24:25 lav0010ap postfix/master[216]: daemon started -- version 3.9.3, configuration /etc/postfix
Jun 02 11:24:26 lav0010ap postfix/postfix-script[234]: the Postfix mail system is running: PID: 216
Jun 02 11:24:39 lav0010ap postfix/smtpd[235]: connect from XXXXXX.ad.iwks.fraunhofer.de[10.163.72.211]
Jun 02 11:25:21 lav0010ap postfix/smtpd[235]: 23CE9436A: client=XXXXXX.ad.iwks.fraunhofer.de[10.163.72.211]
Jun 02 11:25:39 lav0010ap postfix/cleanup[241]: 23CE9436A: warning: header subject:test nach blacklisting from XXXXXX.ad.iwks.fraunhofer.de[10.163.72.211]; from=<XXXXXX@iwks.fraunhofer.de> to=<XXXXXX@iwks.fraunhofer.de> proto=SMTP helo=<wws0036ap>
Jun 02 11:25:39 lav0010ap postfix/cleanup[241]: 23CE9436A: message-id=<>
Jun 02 11:25:39 lav0010ap postfix/qmgr[218]: 23CE9436A: from=<XXXXXX@iwks.fraunhofer.de>, size=270, nrcpt=1 (queue active)
Jun 02 11:25:40 lav0010ap postfix/relay/smtp[242]: Untrusted TLS connection established to mail-mtaka26.fraunhofer.de[153.96.1.26]:25: TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256
Jun 02 11:25:40 lav0010ap postfix/relay/smtp[242]: 23CE9436A: to=<XXXXXX@iwks.fraunhofer.de>, relay=mail-mtaka26.fraunhofer.de[153.96.1.26]:25, delay=41, delays=41/0.02/0.64/0.18, dsn=2.0.0, status=sent (250 ok:  Message 23882822 accepted)
Jun 02 11:25:40 lav0010ap postfix/qmgr[218]: 23CE9436A: removed