Mailing-List: contact users-help@spamassassin.apache.org; run by ezmlm
Precedence: bulk
Date: Tue, 28 Mar 2017 11:27:36 -0700 (PDT)
From: John Hardin <jhardin@impsec.org>
To: users@spamassassin.apache.org
Subject: Re: Matching To and Received addresses
In-Reply-To: <E4EA93F5-9A16-4B10-AEA9-098C586233AC@lenny.cus.org>
Message-ID: <alpine.LNX.2.00.1703281123340.26112@athena.impsec.org>
References: <CAB1R3sjhUcHm7A8j=rPLYFSWP_SAQvFCLO58PV_m8t+1nN1kZw@mail.gmail.com> <fbdccc5e-00af-1e1b-5a33-cb3f24a45412@clardy.eu> <E4EA93F5-9A16-4B10-AEA9-098C586233AC@lenny.cus.org>
User-Agent: Alpine 2.00 (LNX 1167 2008-08-23)
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed
archived-at: Tue, 28 Mar 2017 18:27:56 -0000

On Tue, 28 Mar 2017, Dominic Benson wrote:

>> On 28 Mar 2017, at 19:04, Markus <markus@clardy.eu> wrote:
>>
>> So you can't compare the "for <mark@example.com>" with "To: dorothy@example.com".

You can do that with a Header ALL rule; it will work more reliably as a 
local rule because you know how your local MTA is annotating the envelope 
recipient address in the headers, where a rule provided as part of the 
base set would be hit-or-miss and hugely complex and would better be done 
in a plugin.

>> How likely is it to be in legitimate mail? Highly unlikely (if ever), 
>> so you'd be pretty safe outright rejecting mail that behaves this way, 
>> to be honest.
>
> On the face of it I would have thought that CC and BCC both seem like quite commonplace ways for this to come up in ham.

Indeed. Markus must not get much email.

If you do develop such a rule for metas, be very careful how you use it.

-- 
  John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
  jhardin@impsec.org    FALaholic #11174     pgpk -a jhardin@impsec.org
  key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
   Ignorance is no excuse for a law.
-----------------------------------------------------------------------
  4 days until April Fools' day