On 7/9/2014 9:08 AM, RW wrote:
VERP and similar schemes work on the envelope, so checking the From header should relatively safe.
Not debating that point because it's not really my point. I'm trying to focus on the fact that the existence of the schema he is looking for with the rule looks to me to be likely indicative of simply being from some mailing list and bulkmail providers and hence likely prone to significant FPs.
Regards, KAM