Steve: > DNS for local queries. It's wierd that it only happens with reverse > lookups from Postfix. I can't see why nothing else does this, just > postfix and PTR.
You have turned on the "chroot" feature for smtpd in master.cf, but you have not provided the proper name service files in the /var/spool/postfix jail. Postfix as distributed from postfix.org does not chroot any Postfix services.