On Fri, 12 Jul 2024, Peter wrote:
Hi,
I have been getting spam from outlook.com (surprise) and a defining feature
is that the same emnail address is used as the To: and CC: address.
Is there a way for Spamassassin to detect that?
Thanks.
There are rules for To equals From, they can be fairly easily modified.
It would be easier to verify them if actual samples were available.
It would be best if you don't try to obfuscate the email addresses. If you
have some where you want to keep the email addresses private you can post
them temporarily to pastebin as unlisted and send me the links directly
rather than providing the pastebin links publicly here on the list.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
3 days until the 79th anniversary of the dawn of the Atomic Age