I installed policyd-spf on my postfix server. It works fine for mail that identifies itself in the SMTP connection with MAIL FROM: bla@example.com.
However, it does not work when the "MAIL FROM:" command is accepted, but the "FROM:" header is forged. I can't seem to find any option in the man page about the FROM header.
So, how do I reject mails with a forged FROM header?
Can it even be done properly? Postfix doesn't care about the headers and how are filters like Mailscanner going to check it? Are the received headers enough to determine which server made the incomming connection to the SMTP receiver?