Question Postfix/spamassassin/clamav: Prevent RCPT/From: discrepancy

[tkalfaoglu]

Some spam/virus writers set the From: of their emails to something totally different than what was specified in the SMTP's RCPT TO: fields.

Is there a tool that's available that would detect and prevent such emails from reaching the end users? That is: RFC821 versus RFC822 discrepancy..

 

[danami]

Your Spamassassin should have some basic rules for this. Also Spamassassin added a FromNameSpoof plugin in version 3.4.2:
apache/spamassassin