See my blog post for description and installation. https://iomarmochtar.wordpress.com/2017/09/13/zimbra-prevent-user-customizing-from-header/
iomarmochtar/zmbr_check_sender
This is my workaround for zimbra's postfix issue for preventing authenticated user can modify FROM: in email address
PythonGPL-2.0