Header From field check

[chels]

Hello,

Since some time, I have more spam where From SMTP address is different from Header From address.

In MS Outlook Header From is displayed; this address is used to steal identity.

Can I configure Fortimail in order to also check Header From address?

Thank you

(Fortimail 5.4.x)

[Stai]

I'm having the exact same problem and even after explaining to support multiple times they are just not able to help out.

From: someones@domain.com

Header From: myprotected@domain.com

Sender alignment check will just result in a ton of false positives.

I'd go for the RegEx/dictionary check but I don't know what this is supposed to mean:

"set "Search Header" enabled and add it to your antispam profile."

Do I need to create this regex with my domain and if it matches the mail will get blocked? Where exactly do I have to set this up?