ifplugin Mail::SpamAssassin::Plugin::FromNameSpoof

fns_ignore_dkim linkedin.com googlegroups.com yahoogroups.com yahoogroups.de
fns_ignore_headers List-Id
fns_check 1

header   __PLUGIN_FROMNAME_SPOOF eval:check_fromname_spoof()
reuse    __PLUGIN_FROMNAME_SPOOF

header   __PLUGIN_FROMNAME_EQUALS_TO eval:check_fromname_equals_to()
reuse    __PLUGIN_FROMNAME_EQUALS_TO

meta     FROMNAME_SPOOFED_EMAIL  (__PLUGIN_FROMNAME_SPOOF && !__VIA_ML && !__VIA_RESIGNER && !__RP_MATCHES_RCVD)
describe FROMNAME_SPOOFED_EMAIL From:name looks like a spoofed email
score    FROMNAME_SPOOFED_EMAIL 0.3
tflags   FROMNAME_SPOOFED_EMAIL publish
reuse    FROMNAME_SPOOFED_EMAIL

meta     FROMNAME_EQUALS_TO __PLUGIN_FROMNAME_EQUALS_TO
describe FROMNAME_EQUALS_TO From:name matches To:
score    FROMNAME_EQUALS_TO 1.0
tflags   FROMNAME_EQUALS_TO publish
reuse    FROMNAME_EQUALS_TO

endif