Flag messages where reply-to is different from the sender?

[Remco Barendse]

I know, I'd just like it to raise a red flag or banner somewhere. In 
corporate environments, i see reply-to hardly being used

Think it's a similar red flag like 'emails originating outside the 
organization'   (speaking of which can MailScanner flag that at the top of 
an email rather than at the bottom?)



On Thu, 5 Mar 2020, John Wilcock wrote:

> It can be done in various ways in Spamassassin, but beware that there are 
> plenty of legitimate uses with different Reply-to:, such as this:  :-)
>
>>  From: Remco Barendse <mailscanner at barendse.to>
>>  Reply-To: MailScanner Discussion <mailscanner at lists.mailscanner.info>
>>  Sender: "MailScanner"
>>  <mailscanner-bounces+john=wilcock.fr at lists.mailscanner.info>
>
>
> -- 
> John
>
> On 2020-03-05 15:16, Remco Barendse wrote:
>
>>  Hi list!
>>
>>  Is there any way to raise a red flag for emails where the reply-to address
>>  is different from the original sender ?
>>
>>  See this being used for fraud attempts.....
>>
>>  Thanks!
>>
>>  --
>>  This message has been scanned for viruses and
>>  dangerous content by MailScanner, and is
>>  believed to be clean.
>
>
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
> -- 
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
>

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.