id like to limit people from: field as their own or at least my domains.

zimbraAllowAnyFromAddress FALSE seems to work only from webmail. When an account is compromised my domain score suffers :/