https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6781
Mark Martinec <[email protected]> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|Undefined |3.4.0 --- Comment #5 from Mark Martinec <[email protected]> --- I'm seeing these messages too, and some of them are sneaking in. The RFC 5322 section 3.6.2 states: If the originator of the message can be indicated by a single mailbox and the author and transmitter are identical, the "Sender:" field SHOULD NOT be used. Otherwise, both fields SHOULD appear. As these spam messages currently do not have a Sender present, it should be safe to do: header __HAS_SENDER exists:Sender header MULTI_FROM_ADDR From =~ /\@.*,.*\@/ describe MULTI_FROM_ADDR Multiple addresses in a From header field score MULTI_FROM_ADDR 1 meta MULTI_FROM_BAD MULTI_FROM_ADDR && !__HAS_SENDER describe MULTI_FROM_BAD Multiple addresses in From, but no Sender score MULTI_FROM_BAD 6 (btw, we should be adding some of the missing '__HAS_* exists:*' rules for completeness anyway, they come handy with other official or local metarules) -- You are receiving this mail because: You are the assignee for the bug.
