This plugin was introduced in Spamassassin 3.4.2.
This plugin performs various tests to detect spoof attempts using the From: header name section.
_FNSFNAMEADDR_ Detected spoof address from From:name header
_FNSFNAMEDOMAIN_ Detected spoof domain from From:name header
_FNSFNAMEOWNER_ Detected spoof owner from From:name header
_FNSFADDRADDR_ Actual From:addr address
_FNSFADDRDOMAIN_ Actual From:addr domain
_FNSFADDROWNER_ Actual From:addr detected owner| Area | Test name | Description | Default scores |
|---|---|---|---|
| header | FROMNAME_SPOOF_EQUALS_TO |
From:name is spoof to look like To: address | 1.2 |