This can be done by using the compliance dictionaries. Under Email - DLP and Dictionaries - Compliance Dictionaries you can create a new entry and have it apply to sender and envelope from to search for each of the fields. Put in the string you are looking for and then you can create a compliance rule to look for that new dictionary and take whatever action you would like. If you need more specifics, technical support can walk you through setting up this rule.
Hope this helps