If the domain has strict identity alignment set up, then From: body must match MAIL FROM, which must match the SPF record.
postfix.org have no spf record, not my fault
Thats why you need to replace or encapsulate the From: aswell, incase the sender domain has strict identity aligment set up.
no no no and no, cc to you so you see your error
