I found why this happened: at some moment policybuilder started to attach "_relaytarget" to domains specified in smtp-policy.mx, while in my old policy.src there was no such tag defined. Apparently if domain is listed with such empty tag, no further checks are done(?). Anyway, once I defined _relaytarget, the problem seized to exist. Eugene