[Rspamd-Users] Now: spf & reject forged From: headers

[Tim Harman]

On 18/05/2019 1:02 am, Sophie Loewenthal wrote:
<snip>
> Rspamd didn't seem to complain, but forged From headers still make it
> though so this rule do not score any messages. Is this rule still
> valid and should it have worked and if not why not?
> Cheers all.

SPF checks Envelope From, not Header From.
DMARC is the "fix" for spoofed Header From messages.

Tim