package FromAndReplyToIsNotSameDomain;
use Mail::SpamAssassin::Plugin;

our @ISA = qw(Mail::SpamAssassin::Plugin);

sub new {
    my ( $class, $mailsa ) = @_;

    # the usual perlobj boilerplate to create a subclass object
    $class = ref($class) || $class;
    my $self = $class->SUPER::new($mailsa);
    bless( $self, $class );

    # then register an eval rule, if desired...
    $self->register_eval_rule("check_for_from_and_reply_to_is_not_same_domain");

    # and return the new plugin object
    return $self;
}

sub check_for_from_and_reply_to_is_not_same_domain {
    my ( $self, $msg ) = @_;
    my $check_from = lc( $msg->get('From:addr') );
    $check_from =~ s/.*@//;

    my $check_replyTo = lc( $msg->get('Reply-To:addr') );
    $check_replyTo =~ s/.*@//;

    Mail::SpamAssassin::Plugin::dbg(
        "FromAndReplyToIsNotSameDomain: Comparing '$check_from'/'$check_replyTo"
    );

    if ( ( $check_from eq '' ) || ( $check_replyTo eq '' ) ) {
        return 0;    #PASS, empty from or reply to
    }

    my ( @check_fromParts, @check_replyToParts );

    #short-circuit logic
    if ( $check_from ne $check_replyTo ) {

        #create arrays to make life easier
        @check_fromParts    = split( /\./, $check_from );
        @check_replyToParts = split( /\./, $check_replyTo );

        if ( ( $#check_fromParts ge 1 ) && ( $#check_fromParts ge 1 ) ) {
            if ( $check_fromParts[-1] ne $check_replyToParts[-1] ) {
                return 1;    #fail, not the same .tld
            }
            if ( $check_fromParts[-2] ne $check_replyToParts[-2] ) {
                return 1;    #fail, not the same domain.tld / tld.tld
            }
        }
        if ( ( $#check_fromParts ge 3 ) && ( $#check_fromParts ge 3 ) ) {
            if ( $check_fromParts[-3] ne $check_replyToParts[-3] ) {
                return 1;    #fail,not the same sub.domain.tld / domain.tld.tld
            }
        }
        if ( ( $#check_fromParts ge 4 ) && ( $#check_fromParts ge 4 ) ) {
            if ( ( $#check_fromParts gt 4 ) || ( $#check_fromParts gt 4 ) ) {
                if ( $check_fromParts[-4] ne $check_replyToParts[-4] ) {
                    return
                      1
                      ; #fail,not the same domain sub.sub.sub.domain.tld / sub.sub.domain.tld.tld
                }
            }
            else {
                if ( $check_fromParts[-3] ne $check_replyToParts[-3] ) {
                    return
                      1
                      ; #fail,not the same domain sub.sub.domain.tld / sub.domain.tld.tld
                }
            }
        }
    }
    return 0;           #PASS
}

# This ;1 is importa

# Domain does not match Reply-To domain
loadplugin FromAndReplyToIsNotSameDomain /etc/spamassassin/plugins/FromAndReplyToIsNotSameDomain.pm
header FROM_NOT_REPLYTO_SAME_DOMAIN eval:check_for_from_and_reply_to_is_not_same_domain()
score FROM_NOT_REPLYTO_SAME_DOMAIN 10.1
describe FROM_NOT_REPLYTO_SAME_DOMAIN From domain does not match Reply-To domain

header   __PDS_FROM_NAME_TO_DOMAIN  ALL =~ /From: ["']?([a-z0-9\.-]+\.[0-9a-z\.-]+)["']? [^\n]+\n+To:[^\n]+\@\1/ism
meta     PDS_FROM_NAME_TO_DOMAIN __PDS_FROM_NAME_TO_DOMAIN
score    PDS_FROM_NAME_TO_DOMAIN 10.1
describe PDS_FROM_NAME_TO_DOMAIN From:name looks like To:domain

# Body Checks
body BODY_CHECKS_RULE_01 /\CANNABIS|viagra|free.hr\b/i
body BODY_CHECKS_RULE_02 /\ZENTIVA|velko-mix.cz\b/i
meta BODY_CHECKS_RULE (( BODY_CHECKS_RULE_01 + BODY_CHECKS_RULE_02 ))
score BODY_CHECKS_RULE 10.1

# Blacklist Top-Level-Domains
header   TLD_BLOCK From =~ /@([a-zA-Z0-9-]+\.)?(top|shop|live|io|biz)\b/i
describe TLD_BLOCK Blacklisted TLDs
score    TLD_BLOCK 10.1

header DOMAINE_FROM_01 From =~ /\@badguys\.de|\@badguys\.com/i
header DOMAINE_FROM_02 From =~ /\@badguys\.es|\@badguys\.net/i
meta DOMAINE_FROM (( DOMAINE_FROM_01 + DOMAINE_FROM_02 ))
score DOMAINE_FROM  10.1

if header :contains "X-Spam-Level" "**********" {
    discard;
    stop;
}