Thanks, John. I was a little reluctant to post it to Bugzilla (where I
already have an account) as it looked a bit tricky to redact and it's
got stuff in the headers I'd rather not reveal. (For example, my public
email address goes through some changes (virtusertable and aliases)
before delivering to a local username I don't want to publicly reveal.)
I note that Bugzilla does have "Rules" as a category and there was even
a URI_PHISH bug already registered (and marked wont-fix).
I'll send the two samples privately and let you spot the missing
exemption. Ideally the company can fix their template to avoid the rule.
I do see that it's going through SendGrid from the Return-Path bounce
address but the body doesn't show any evidence of tracking links.
