When creating an “advanced” Compliance Filter rule, either the visible sender address, also called the Header-From, or the technical or actual sending address, also called the Envelope-From, can be used.

What is the difference between the addresses?

Header-From = visible sender address in the email client

Envelope-From = technical sending address / Return-Path

Header-From: John Doe <john.doe@hornetsecurity.com>
Envelope-From: examplesender@test.com

The Envelope-From address is the technical sending address and can differ from the visible sender address. It is relevant, among other things, for the technical processing of the email.

How do I find the different addresses in the Control Panel?

In the Email Security module > Email Live Tracking, you can retrieve information about an email by clicking the arrow at the end of the email row and then clicking the Email Details button.

The Overview tab shows the most important information about the email. It is divided into the following sections:

(The Header-From is shown in green and the Envelope-From in red)

The Headers tab displays the header of the selected email, and you can view the Envelope-From/To using the following lines.

X-antispameurope-sender: examplesender@test.com | Technical sending address
X-antispameurope-recipient: test@test.de | Recipient

Which address should be entered?

From the example above, we create the following rule: All emails sent from Envelope-From examplesender@test.com to the address test@test.de will be rejected.

WARNING!: A Compliance Filter rule overrides all other booked filter mechanisms. Therefore, create Compliance Filter rules only if you are sure that the rule reflects the desired behaviour.

Note: A newly created Compliance Filter rule usually takes up to 30 minutes to be applied on all Hornetsecurity servers.

For more information about the Compliance Filter, see the manual.