On Tue, 15 Sep 2009 16:05:42 +0100, Mark Goodge <m...@good-stuff.co.uk> wrote: > wiskbr...@hotmail.com wrote: >> >> >> I am seeing a few spams coming through with a from address (seen on my >> postfix logs) that does not match the "From" address shown on my users >> Outlook. In fact my users are seeing a "From" address as their own, >> something that my postfix server currently does not allow using >> mynetworks and permitting this using smtpd_recipient_restrictions. > > Does it possibly have a From line that looks like this: > > From: "real.addr...@yourcompany.tld" <spammer.addr...@forged.tld> > > Postfix will (correctly) consider the address in angle brackets as the > actual address, but Outlook (and many other mail clients) will hide that > and display the part in quotes, as it will interpret that as the > sender's name.
Postfix will not consider the address in the FROM header. It will look at the address in the MAIL FROM address in the smtp stage. These addresses can be different. > > Mark
