How to block mail with different domain into TO and REPLY-TO fields - ORF Forums

Hello Andrey,

I am not quite sure if I understand your question, but I assume you are referring to the phenomenon when the email addresses in the "From" and "Reply-To" header fields are different. The email address in the "To" field identifies the recipient of the email, not the sender, thus usually it is different from the "Reply-To" address - so you do not have to worry about this. The "From" and "Reply-To" addresses might be different in many cases too: There are many legitimate reasons to change the Reply-To address, for example a business may need to redirect responses of customers to a central address (e.g. ) instead of sending their reply to the individual who contacted them in the first place (e.g. ).

I would strongly suggest that you do *not* blacklist such emails, as you might end up blocking a lot of legitimate emails (e.g. from automated newsletter and support services, etc.).

If you want to mitigate the risk of receiving spam and phishing emails with spoofed (i.e. forged) sender addresses, make sure that 1) the SPF Test is always enabled in ORF (http://vamsoft.com/support/docs/orf-help/5.4/adm-spf) and 2) that your domain has a published - and valid - SPF record (https://en.wikipedia.org/wiki/Sender_Policy_Framework & http://www.openspf.org/FAQ/Examples).

I hope the above proves helpful to you, but please let me know if you have further questions.