I make postfix relay recipient via ldap and I want an exception email addresses can not look up but have not been successful, my configuration

server_host = 1.1.1.1.1
ldap_search_base = o = example, c = com
bind = no
query_filter = (| (mail =% s) (mailAlternateAddress =% s)) (! (mail = group@example.com)))
result_attribute = mail

I want group@example.com can not look up, but have not been successful, how correct configuration?