I have found that this is the easiest combination that allows you to serve Virtual Domains, and Users. With this it's also very easy to implement webmail systems like SquirrelMail.
acl daemon in python, syntax similiar to squid
deny mail to unknown vhost-users