[exim] DATA ACLE require verify = header_sender

Hi

I am running exim 4.51 on FreeBSD (compiled myself, not from ports).
In my DATA ACL I have the following

#!!# ACL that is used after the DATA command
check_message:
require verify = header_sender

which is what I think is generating these sorts of rejections:

2005-09-15 07:13:12 1EFtY8-000Hcv-1A H=(knowmad.com) [166.70.252.34]
F=<william@???> rejected after DATA: there is no valid sender
in any header line

However, the rest of the rejection shows

Envelope-from: <william@???>
Envelope-to: <william@???>
P Received: from [166.70.252.34] (helo=knowmad.com)
         by hobbiton.shire.net with esmtps (TLSv1:AES256-SHA:256)
         (Exim 4.51)
         id 1EFtY8-000Hcv-1A
         for william@???; Thu, 15 Sep 2005 07:13:12 -0600
P Received: from knowmad.shire.net ([166.70.252.34] helo=knowmad.com)
         by knowmad.com with smtp (Exim 4.51)
         id 1EFtY7-000Hcp-Fx
         for william@???; Thu, 15 Sep 2005 09:13:11 -0400
   Subject: Thank you for registering your faith organization
   Date: Thu, 15 Sep 2005 09:13:11 -0400
   Mime-Version: 1.0
   Content-Type: text/plain; charset="iso-8859-1"
T To: william@???
   Content-Transfer-Encoding: quoted-printable
F From: meckmin@???

the From: line is a valid sender (and can receive mail and is served
by this same host) as is the Envelope-From: line (also valid and can
receive mail and is served by this host). So I am not sure how to
figure out how to test and figure out what is causing the rejection.

Additionally, as an aside, I would like to only have the require
verify - header_sender be required for "external" SMTP and not for
anyone who connects with an SMTP AUTHorized connection. My previous
attempts (which I no longer have exact copies of since it was a few
months ago) did not work. How would I specify this?

Thanks
Chad

---
Chad Leigh -- Shire.Net LLC
Your Web App and Email hosting provider
chad@???