Message filter to test if enveloppe from equals body from

[plb_ge]

Hi,

I would have wanted to write a message filter to test if the enveloppe from was the same as the body from.

I have tried this:

if (mail-from != header('From') ) {

}

But, of course, it doesn't work. 

Do you have any suggestion on how achieve this ???

Thanks by advance,

Pierre-Luc

[UdupiKrishna · Accepted solution]

This has been asked several times in the past. A recent post - https://community.cisco.com/t5/email-security/warn-recipient-when-mail-from-and-from-header-are-different/td-p/4743768

ESA or the regex engine per say doesnt have the capability to compare two different header values