Flag messages where reply-to is different from the sender?
john at wilcock.fr
Thu Mar 5 15:04:51 UTC 2020
It can be done in various ways in Spamassassin, but beware that there
are plenty of legitimate uses with different Reply-to:, such as this:
> From: Remco Barendse <mailscanner at barendse.to>
> Reply-To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
> Sender: "MailScanner"
> <mailscanner-bounces+john=wilcock.fr at lists.mailscanner.info>
On 2020-03-05 15:16, Remco Barendse wrote:
> Hi list!
> Is there any way to raise a red flag for emails where the reply-to
> address is different from the original sender ?
> See this being used for fraud attempts.....
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
More information about the MailScanner