<?xml version="1.0" encoding="UTF-8"?>
<CONTENTFILTER>
  <FILTER>
    <ACTIVE>1</ACTIVE>
    <TITLE>Spoofing rule</TITLE>
    <READONLY>0</READONLY>
    <CONDITION>
      <AND>1</AND>
      <LOGICALNOT>1</LOGICALNOT>
      <HEADERTYPE>28</HEADERTYPE>
      <CONTAINTYPE>8</CONTAINTYPE>
      <MESSAGESIZESMALLER>0</MESSAGESIZESMALLER>
      <FOLDERRECURSIVE>0</FOLDERRECURSIVE>
    </CONDITION>
    <CONDITION>
      <AND>1</AND>
      <LOGICALNOT>1</LOGICALNOT>
      <CONTAINTYPE>8</CONTAINTYPE>
      <CONTAIN>%%Sender_Domain%%</CONTAIN>
      <MESSAGESIZESMALLER>0</MESSAGESIZESMALLER>
      <FOLDERRECURSIVE>0</FOLDERRECURSIVE>
    </CONDITION>
    <CONDITION>
      <AND>1</AND>
      <LOGICALNOT>1</LOGICALNOT>
      <HEADERTYPE>23</HEADERTYPE>
      <CONTAINTYPE>8</CONTAINTYPE>
      <MESSAGESIZESMALLER>0</MESSAGESIZESMALLER>
      <FOLDERRECURSIVE>0</FOLDERRECURSIVE>
    </CONDITION>
    <CONDITION>
      <AND>1</AND>
      <LOGICALNOT>1</LOGICALNOT>
      <EXPRESSION>11</EXPRESSION>
      <CONTAINTYPE>8</CONTAINTYPE>
      <CONTAIN>0</CONTAIN>
      <DUMMYSTRING>SELECT * FROM Senders WHERE (((SndEmail="%%Sender_Email%%" AND (SndOwner="%%Recipient_Email%%" OR SndOwner="%%Recipient_Domain%%" OR SndOwner="*")) OR (SndEmail="%%Sender_Domain%%" AND (SndOwner="%%Recipient_Domain%%" OR SndOwner="*")) OR (SndEmail="%%From_Email%%" AND (SndOwner="%%Recipient_Email%%" OR SndOwner="%%Recipient_Domain%%" OR SndOwner="*")) OR (SndEmail="%%From_Domain%%" AND (SndOwner="%%Recipient_Domain%%" OR SndOwner="*"))) AND SndAuthorized="1")</DUMMYSTRING>
      <MESSAGESIZESMALLER>0</MESSAGESIZESMALLER>
      <FOLDERRECURSIVE>0</FOLDERRECURSIVE>
    </CONDITION>
    <ACCEPT>0</ACCEPT>
    <REJECT>1</REJECT>
    <DELETE>0</DELETE>
    <ENCRYPT>0</ENCRYPT>
    <PRIORITY>0</PRIORITY>
    <FLAGS>0</FLAGS>
    <SCORE>0</SCORE>
    <MARKSPAM>0</MARKSPAM>
    <STOP>0</STOP>
    <EXECUTE>0</EXECUTE>
    <FORWARDASATTACHMENT>0</FORWARDASATTACHMENT>
    <TARPITSENDER>0</TARPITSENDER>
    <FIXRFC822>0</FIXRFC822>
    <SMTPRESPONSE>0</SMTPRESPONSE>
    <STRIPALL>0</STRIPALL>
    <SKIPARCHIVE>0</SKIPARCHIVE>
    <MOVETOARCHIVE>0</MOVETOARCHIVE>
    <COPYTOARCHIVE>0</COPYTOARCHIVE>
  </FILTER>
</CONTENTFILTER>
