access: for 'any' domain combined list, don't process when org_domain empty

and skip ipv4 literals during HELO