Flag messages where reply-to is different from the sender?

John Wilcock john at wilcock.fr
Thu Mar 5 15:04:51 UTC 2020

It can be done in various ways in Spamassassin, but beware that there 
are plenty of legitimate uses with different Reply-to:, such as this:  

> From: Remco Barendse <mailscanner at barendse.to>
> Reply-To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
> Sender: "MailScanner" 
> <mailscanner-bounces+john=wilcock.fr at lists.mailscanner.info>


On 2020-03-05 15:16, Remco Barendse wrote:

> Hi list!
> Is there any way to raise a red flag for emails where the reply-to 
> address is different from the original sender ?
> See this being used for fraud attempts.....
> Thanks!
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.

More information about the MailScanner mailing list