Re: Reject mails with two different mail addresses in From Header

>On 12/3/2022 1:34 π.μ., Nikolaos Milas wrote:
>>different mail addresses in the From header (regardless whether 
>>there is an encrypted zip attachment or not)?
>>...

On 12.03.22 18:21, Nikolaos Milas wrote:
>Regarding the above, I understand I could probably simply raise the 
>score for the PDS_FROM_2_EMAILS rule in 
>/etc/mail/spamassassin/local.cf, like:
>
>   score PDS_FROM_2_EMAILS 4.0
>
>However, it strikes me that incoming mail like the one I originally 
>referred to, with a header field like:
>
>From: "<John Doe> [email protected]" <[email protected]>
>
>does NOT mention any scoring by this rule:
>
>X-Spam-Status: Yes, score=4.693 tagged_above=-999 required=3.4
>    tests=[BAYES_50=0.8, DATE_IN_FUTURE_12_24=3.199, DKIM_SIGNED=0.1,
>    DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1,
>    HTML_MESSAGE=0.001, MIME_HTML_ONLY=0.1, MISSING_MID=0.497,
>    RCVD_IN_MSPIKE_H2=-0.4, RDNS_NONE=0.793, SPF_HELO_NONE=0.001,
>    SPF_PASS=-0.1, TVD_SPACE_RATIO=0.001, URIBL_BLOCKED=0.001]
>    autolearn=disabled

this is because PDS_FROM_2_EMAILS has some exceptions, which is why I 
advised you to use something different.

-- 
Matus UHLAR - fantomas, [email protected] ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -- Benjamin Franklin, 1759