On Mon, 24 Feb 2014, Marcin Mirosław wrote:

Sorry for silly question. I'd like to know if mentioned rules catches all email address or only user part?

It's not a silly question. All of the TO_EQ_FROM rules compare the full email address.

I'd like to catch such spam:

From: Charlene Torres <zawod...@johnnywinslow.com>
To: zawodynn <zawod...@bielin.pl>

Where user part in header From: and To: is the same (and SPF_FAIL and SPF_SOFTFAIL etc). My tests shows that __TO_EQ_FROM doesn't catch it. If rules catches all email I'd like to vote for creating rule for caching pasted example:)

I will take a look at it. Thanks for the suggestion.

--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhar...@impsec.org    FALaholic #11174     pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  Perfect Security and Absolute Safety are unattainable; beware
  those who would try to sell them to you, regardless of the cost,
  for they are trying to sell you your own slavery.
-----------------------------------------------------------------------
 634 days since the first successful private support mission to ISS (SpaceX)

Reply via email to