FromNameSpoof

This plugin was introduced in Spamassassin 3.4.2.

This plugin performs various tests to detect spoof attempts using the From: header name section.

Tags

_FNSFNAMEADDR_ Detected spoof address from From:name header
_FNSFNAMEDOMAIN_ Detected spoof domain from From:name header
_FNSFNAMEOWNER_ Detected spoof owner from From:name header
_FNSFADDRADDR_ Actual From:addr address
_FNSFADDRDOMAIN_ Actual From:addr domain
_FNSFADDROWNER_ Actual From:addr detected owner

Tests

Area Test name Description Default scores
header FROMNAME_SPOOF_EQUALS_TO From:name is spoof to look like To: address 1.2