Quoting J. Fahrner (jf@???):

> Your are right, but also wrong. ;-) I'm rejecting in postfix
> header_checks BEFORE acceptance.

Excellent. Thank you for using best practices.