This article describes how to block spoofed "From" names when the email address isn't from your own domain. The following sections are covered:
Applies to the following Sophos products and versions Sophos Email Appliance
In this example, mail from Joe Smith is "spoofed" so that in Outlook his name is displayed as the sender. This is done to fool Tracy into purchasing something and sending it to the scammer. But when checking the actual From address, it is a valid external address.
From: Joe Smith <mgt001@GiveMeMoney.com> To: Tracy Barker <Tracy.Barker@ValidCompany.com>
This rule will quarantine any email coming in with the display name Joe Smith if it is not also from the domain validcompany.com.
Sign up to the Sophos Support SMS Notification Service to get the latest product release information and critical issues.
If you've spotted an error or would like to provide feedback on this article, please use the section below to rate and comment on the article. This is invaluable to us to ensure that we continually strive to give our customers the best information possible.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. For technical support post a question to the community. Or click here for new feature/product improvements. Alternatively for paid/licensed products open a support ticket.