We want to get our smarthosts off the backscatterer.org lists, but still needs to let our users send from addresses not under our control, so I was thinking of maybe of forcing all users that wants to send email from not-our-addresses to sasl-authenticate and hopefully postfix can then set envelope sender = sasl-authenticated user.
Or maybe set envelope sender = sasl-authenticated user *if* the sender isn't found in the smtpd_sender_login_maps. Is this feasible ? -jf