Sender not equal From Spam - ORF Forums

Sender not equal From Spam RSS Back to forum

1

Hello, how to check for sender equal from?
Keyword Blacklist is configured for internal domains, but spam from external domains is not filtered.

example
Sender -
From -

message
To: <>
Subject: Subject
X-PHP-Originating-Script: 10111:system_m.php
From: <>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------15701468085D9689F8D6229"
X-PPP-Message-ID: <>
X-PPP-Vhost: vilabike.com

Log ORF

-------------------------------------------------------------------------------

-- EVENT SUMMARY --
Time: 10/4/2019 2:53:31 AM GMT+0300 GTB Daylight Time
Sender Email:
Recipient Email:
Related IP: 185.136.91.175
Action: (not available)
Email Subject: Subject

-- EVENT MESSAGE --
SPF check done for domain "vilabike.com". Result: SPF "pass".

-- EVENT DETAILS --
Filtering Point: On Arrival
Event Class: System Message
Severity: Information
Server: MySMTPServer
Event Source: SMTPSVC-1
HELO Domain: (not available)
Message ID: (not available)
Log Mode: Verbose
ORF Version: 5.4.1 REGISTERED

-------------------------------------------------------------------------------

by Aleksei 5 years ago
2

@Aleksei: message
To: ""
Subject: Subject
X-PHP-Originating-Script: 10111:system_m.php
From: ""

by Aleksei 5 years ago
(in reply to this post)

3

@Aleksei: Hello Aleksei,

You cannot force ORF to blacklist the email when the envelope sender (aka. RFC5321.MailFrom) address and the display From (aka. RFC5322.From) address is different. It is absolutely legal to use different envelope and display From addresses in the email. The Bcc: addressing, mailing lists, CRM software and other systems with automatic bounce-handling also often take advantage of this: just think of the automated mail services that need to display user-friendly “From” addresses in Outlook e.g. , and hide the real STMP envelope sender address e.g. .

If you want to minimalize the number of fraudulent emails that might get through filtering, make sure you enable SPF, DKIM and DMARC Test in the ORF Administration Tool. These three tests are designed specifically against emails with forged email addresses.

by Daniel Novak (Vamsoft) 5 years ago
(in reply to this post)

4

With which version are the DKIM and DMARC Test available in ORF Fusion?
Our employees company has a very bad attitude towards spam and I want to see this opportunity in the future.

by Aleksei 5 years ago
5

@Aleksei: The DKIM and DMARC Tests are available in version 6.0 and above. You can download the 42-day trial from: https://vamsoft.com/trial-version-download

by Daniel Novak (Vamsoft) 5 years ago
(in reply to this post)

New comment

Fill in the form below to add a new comment. All fields are required. If you are a registered user on our site, please sign in first.

It will not be published.
hnp1 | hnp2