| ifplugin Mail::SpamAssassin::Plugin::FromNameSpoof |
| |
| fns_ignore_dkim linkedin.com googlegroups.com yahoogroups.com yahoogroups.de |
| fns_ignore_headers List-Id |
| fns_check 1 |
| |
| header __PLUGIN_FROMNAME_SPOOF eval:check_fromname_spoof() |
| reuse __PLUGIN_FROMNAME_SPOOF |
| |
| header __PLUGIN_FROMNAME_EQUALS_TO eval:check_fromname_equals_to() |
| reuse __PLUGIN_FROMNAME_EQUALS_TO |
| |
| meta FROMNAME_SPOOFED_EMAIL (__PLUGIN_FROMNAME_SPOOF && !__VIA_ML && !__VIA_RESIGNER && !__RP_MATCHES_RCVD) |
| describe FROMNAME_SPOOFED_EMAIL From:name looks like a spoofed email |
| score FROMNAME_SPOOFED_EMAIL 0.3 |
| tflags FROMNAME_SPOOFED_EMAIL publish |
| |
| meta FROMNAME_EQUALS_TO __PLUGIN_FROMNAME_EQUALS_TO |
| describe FROMNAME_EQUALS_TO From:name matches To: |
| score FROMNAME_EQUALS_TO 1.0 |
| tflags FROMNAME_EQUALS_TO publish |
| |
| endif |
