David,

so now I do understand your issue, I believe.
The running sendmail allows local process to inject emails
without further credentials via the binary, but not via TCP.

Thanks for explaning it.

I check if we can integrate your patch. Do you think it would need
some more documentation somewhere? What happens in case that the
sendmail binary return an error? Is this case handled well enought?

Bernhard