Pegasus Mail & Mercury

I'm starting to see an increasing amount of spam get through where the MAIL FROM on the header is a valid local user (usually the same as the RCPT TO).  But the from address within the DATA portion is a different address.  Since the MAIL FROM is a valid local user, I cannot add it to the killfile.  Is it possible to reject these ...