Rejecting emails with two @ in the from line

[Fathi]

Hi,
Some emails get passed by pgm while they are spam. These emails look like this: From: "<Full user Name> realuser@realdomain" <diwash.panta@jadeconsult.com.np> (with two @ in the from line) where realuser@realdomain is a real colleague email address, as most mail reading software hide the email address and show only the name. People receiving this kind of email think that they are receiving email from a colleague.
How could i stop emails with two @ characters in the from line passing pgm ?
TIA.
Fathi B;N.

 

[Stoiko Ivanov]

see https://forum.proxmox.com/threads/spam-getting-through.49322/#post-231861
- you need to create a Match field what object for the From header matching two sets of <> or two @

test it thoroughly and keep an eye on your logs - since this could cause false positives.

I hope this helps!

 

[hata_ph]

try match field from=^.*<.*>.*<.*>.*$ or from=^.*UTF-8.*<.*>.*$