mhildebr wrote:
> Is there a way to have Spamassassin look for spoofed email addresses being
> used as the sender's address (myname@mydomain.com) but using a different
> user name (Viagra instead of myname)? It seems like it would be simple to
> check the user name and filter results from that. Thanks for any help.
>


if you have the list of all valid display names, then you can write
rules for that. something like

header __FROM_MARK From =~ //
header __REALLY_FROM_MARK From =~ /.*milderbr.*/

meta FAKE_FROM_MARK (__FROM_MARK && !_REALLY_FROM_MARK)
score FAKE_FROM_MARK 0.1

but this does not scale. Instead, look for other patterns that catch
this spam. you can show (or use pastebin...) a sample if you want hints.