diff --git a/postfix/defaults/main.yml b/postfix/defaults/main.yml
index 90d9f6345f7552c53f0d459ebda09a6ecca5987d..98ec6718fbcc74c1ee2080f9ecb79482ae8e52db 100644
--- a/postfix/defaults/main.yml
+++ b/postfix/defaults/main.yml
@@ -35,6 +35,9 @@ postfix_virtual_alias_maps:
 postfix_sender_login_maps:
   - proxy:pcre:/etc/postfix/login_maps.pcre
 
+postfix_smtpd_sender_restrictions:
+  - reject_sender_login_mismatch
+
 postfix_enable_postscreen: true
 postfix_enable_memcached: false
 postfix_login_suffix: ''
diff --git a/postfix/templates/main.cf.j2 b/postfix/templates/main.cf.j2
index 5d9800c17bde4f85702c18086e337a1438e34e53..0df5159db3d83c1f04704379b6b91688f6fbde7c 100644
--- a/postfix/templates/main.cf.j2
+++ b/postfix/templates/main.cf.j2
@@ -27,7 +27,7 @@ mailbox_command = {{ postfix_mailbox_command }}
 {% endif %}
 
 smtpd_sender_login_maps = {{ postfix_sender_login_maps|join(" ") }}
-smtpd_sender_restrictions = reject_sender_login_mismatch
+smtpd_sender_restrictions = {{ postfix_smtpd_sender_restrictions|join(" ") }}
 
 smtpd_sasl_type = dovecot
 smtpd_sasl_path = private/auth