Warn recipient when MAIL-FROM and FROM Header are different

[REJR77]

Hi community,

I had a request recently. How can we warn end user recipient when receiving mail with MAIL-FROM (envelope sender) is different from the From header. (I am not talking about Spoofing the internal domain)

I was thinking of adding a content filter or message filter: if $envelopefrom != header("from"), but found comparison is not possible with ESA.

This was confirmed with this feature enhancement CSCvb97836 / CSCzv12332 .

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCzv12332

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvb97836

Thant said, I was thinking of an alternative to check whether the sender email and the header are different or not

Any idea?

Thank you

[UdupiKrishna · Accepted solution]

This is still not possible. ESA has capability to use regex to match patterns like how grep works line by line, but it cant compare two different values.

The idea of the enhancement is to see if there's a way to include this behaviour but its very unlikely to be implemented any time soon as far as i know