Blacklist filter by Reply To field

New ideas and constructive comments go here.

Moderator: Moderators

Post Reply
Posts: 1
Joined: Tue Jul 08, 2014 12:06 pm

Blacklist filter by Reply To field

Post by JonathanS » Tue Jul 08, 2014 12:15 pm

Recently, I have noticed a pattern of receiving spam emails with the From address that seemed legitimate, but the Reply To field questionable. For example,

Reply To:

Please add Blacklist filter by Reply To address, or combined filter of From + Reply To field. If any field matches my filter input, I want to reject that email.

Site Admin
Posts: 304
Joined: Sun Aug 30, 2009 10:44 pm
Location: Nevada

Re: Blacklist filter by Reply To field

Post by Seth » Mon Jul 21, 2014 9:56 am

Both of "From" and "Reply-To" are header fields from the content (the DATA portion). The blacklist works on SMTP session (stuff before DATA, like MAIL FROM), it doesn't look at the actual content of the message. This is not to say it's impossible to check the headers in the body, just that it will require a separate blacklist implementation, not something we can quickly add to the existing blacklist as options.

The "From" field is very often, but not always, the same value as the SMTP session MAIL FROM value. The most common time they won't be the same is with mailing lists where the MAIL FROM is some kind of unique address (typically for bounce identification) and the From header is a "friendly" value.
Seth Mattinen, Roller Network LLC

Post Reply