Postfix’ built-in restriction classes are processed in the following order:
regardless of the order in which they’re listed in main.cf. Restrictions (within a restriction class) are evaluated in the order in which they’re listed.
Processing within a restriction class ends on the first match.
Useful link: http://www.postfix.org/RESTRICTION_CLASS_README.html#external