Filtering E-Mails with double Addresses in the "From" field

[GeneralFailure]

Hello!

Is there a way to use MSME 8.6 to filter emails with more than one address in the "From" field?

Example:
From: <employee@mydomain.com>, Name <chyepez@lanecuadorsa.com>

The first address should imply that the e-mail comes from an employee. The second address is the real sender address of the spammer.

Normal mails always have only one address in the "From" field, so it is a good idea to filter them and intercept dangerous mails.

I think it would work with regex. Can MSME do this?

Many thanks in advance!

[anuraj_s]

Hi,

As you described generally FROM field contains only one email entry and IF the spammer is adding 2 entries on from field then we can block only using the SPAM module by SPAM submission. Using regex in MSME, we can not block such emails.

-Anuraj

[GeneralFailure]

Hi, thanks for your answer.

Do you mean the "Gateway" option in the Policy Manager? There are a lot of rules like "FROM_EMPTY", "FROM_DRUG_USER" etc., but which one is the right one? And with that I can only increase the spam factor, but not blocking a mail, right?

[anuraj_s]

Hi,  

True, We can not block the email using that option.

-Anuraj