I think you'd normally expect the Sender field to be the same as the MAIL FROM:<...>. If the error is detected actually during the SMTP reception (rather than later), the notification must be returned to the MAIL FROM:<...> address (since you don't have the message to look at!)