Comment 5 for bug 1154004

No, there is no configuration to require that Sender:, if present, match From:, but I don't understand why just requiring the From: address to be a member and ignoring other headers does not satisfy your requirement.

Note that in your example mail at <https://bugzilla.wikimedia.org/show_bug.cgi?id=46021> the header

Sender: <email address hidden>

was added by Mailman's outgoing mail process. The incoming post almost certainly had no Sender: header, and even if it did, it was almost certainly not the one in the post you received from Mailman.