Re: forged sender addresses from my domain

[Damian]

reject_sender_login_mismatch can be setup to only allow emails being sent out where the from, not just the envelope-from, has to match the users login credentials

Are you sure? The documentation only mentions the MAIL FROM address.