On Fri, 12 Jul 2024, Peter wrote:

Hi,

I have been getting spam from outlook.com (surprise) and a defining feature
is that the same emnail address is used as the To: and CC: address.

Is there a way for Spamassassin to detect that?

Thanks.

There are rules for To equals From, they can be fairly easily modified.

It would be easier to verify them if actual samples were available.

It would be best if you don't try to obfuscate the email addresses. If you have some where you want to keep the email addresses private you can post them temporarily to pastebin as unlisted and send me the links directly rather than providing the pastebin links publicly here on the list.


--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhar...@impsec.org                         pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
 3 days until the 79th anniversary of the dawn of the Atomic Age

Reply via email to