Hello,
I'm trying to figure out how to write a rule that looks for matches of certain names against the display name, and then insuring its from a list of valid email addresses. So a phishing email come in from "Boss Man<boss...@gmail.com>" So I want to check if the display name is "Boss Man" and if so, make sure the sending email address is boss...@realcompany.com or boss...@company2.com, otherwise score it with 10. Also, would there be a way to forward that email to a specific user, not send it to the original recipient? Thanks -- Thanks! Joey
