> On second thought what we needed is similar, but probably:
>
> SENDER_HEADERS = ('from')
>
> Would there be problems "from" this?
Yes; anybody who can reach your MTA can very easily spoof an internal
address in from, although even the envelope sender is not hard to
spoof (as you already have experienced).