It's known that users can provide any email in From: field. I need to prevent it by rewriting it to email used in authorization procedure. Is it possible to do in postfix? Or may be other MTA?
You can also mix and match, but do so with caution and proper testing
Depending how your clients are setup you may need to set
Additional examples: http://www.postfix.org/SASL_README.html#server_sasl_authz