Use reject_authenticated_sender_login_mismatch (on the port 25 service or post-milter).
reject_authenticated_sender_login_mismatch
Enforces the reject_sender_login_mismatch restriction for au-
thenticated clients only. This feature is available in Postfix
version 2.1 and later.
Wietse
