On Wed, 29 Mar 2017, Alex wrote:
Would I need to create one ALL rule for each user involved?
Probably not, the username part could be something like (?:user1|user2|user3)@example\.com
I don't understand how ALL would help here.
You can't incorporate matches in one rule into a different rule, so it would need to be an ALL headers rule that matched two headers (the Received: with the envelope to address and the To:/CC: header) to detect an address mismatch. See the TO_EQ_FROM rules for an example.
-- John Hardin KA7OHZ http://www.impsec.org/~jhardin/ jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 ----------------------------------------------------------------------- You are in a maze of twisty little protocols, all written by Microsoft. ---------------------------------------------------------------------- 3 days until April Fools' day
