I can send it to everyone like spoofing

,

This is the NethServer sender policy: once authenticated the client can set any sender.

I don’t think this is related to the sender policy

The sender policy didn’t change since 7.3!

Could you provide an example with some maillog excerpts? Maybe I didn’t understand your issue!

They seem two distinct issues