Re: Better phish detection

[Dave Warren]

On 3/16/2012 1:11 PM, Joseph Brennan wrote:
--On Thursday, March 15, 2012 19:21 -0700 sporkman <sp...@bway.net> 
wrote:

-envelope-from is not from our domain, From: line in the message is, 
being
able to clobber that pattern would be quite helpful by itself.

Imagine one of your users sending mail to a list that another of your
users subscribes to.

This can largely be negated by skipping this test if there are any 
typical List-headers (List-ID, List-Unsubscribe, Mailing-List, etc)