[Mimedefang] detect may be forged in email

[Lucas Albers]

I've suddenly started getting a lot of messages indicating they may have a
forged domain.

Dec 22 19:18:32 mailserver sendmail[24795]: hBN2IUhc024795:
from=<SpecialDeals at great-deal001.com>, size=0, class=0, nrcpts=0,
proto=SMTP, daemon=MTA, relay=mail6.poriadok.com [213.248.53.6] (may be
forged)


How do you access the "may be forged" information to either up the sa
score or do whatever I wish to do...
--Luke