[Bug 8340] New: DMARC avoidance

https://bz.apache.org/SpamAssassin/show_bug.cgi?id=8340

            Bug ID: 8340
           Summary: DMARC avoidance
           Product: Spamassassin
           Version: 4.0.2
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Private
          Assignee: [email protected]
          Reporter: [email protected]
  Target Milestone: Undefined

On SpamAssassin-4.0.2-rc1 when the e-mail field "From:" contains space DMARC
check doesn't work and the spam/phishing emails are not blocked via
DMARC_REJECT rule.

Here's an example:

The following doesn't trigger the DMARC (note the space between no reply)
From: companyname <no [email protected]>

This works as expected and match DMARC_REJECT 
From: companyname <[email protected]>

Some of the spam/phishing e-mails start to use this technique to avoid the
DMARC.

-- 
You are receiving this mail because:
You are the assignee for the bug.