Looking for a cleaner way to do this - like with a list?
warn condition = ${if
match{$h_From:$h_Return-path:$h_Reply-to:$sender_address}{\N\.paypal\.com\N}{yes}{no}}
condition = ${if or
{{!match{$h_Received:}{\N\.paypal.com\N}}{eq{$sender_host_name}{}}}{yes}{no}}
set acl_c2 = Faked Paypal
acl = phishing
warn condition = ${if
match{$h_From:$h_Return-path:$h_Reply-to:$sender_address}{\N\.ebay\.com\N}{yes}{no}}
condition = ${if or
{{!match{$h_Received:}{\N\.ebay\.com\N}}{eq{$sender_host_name}{}}}{yes}{no}}
set acl_c2 = Faked eBay
acl = phishing
warn condition = ${if
match{$h_From:$h_Return-path:$h_Reply-to:$sender_address}{\N\.ebay\.co\.uk\N}{yes}{no}}
condition = ${if or
{{!match{$h_Received:}{\N\.ebay\.co\.uk\N}}{eq{$sender_host_name}{}}}{yes}{no}}
set acl_c2 = Faked eBay UK
acl = phishing
warn condition = ${if
match{$h_From:$h_Return-path:$h_Reply-to:$sender_address}{\N\.amazon\.com\N}{yes}{no}}
condition = ${if or
{{!match{$h_Received:}{\N\.amazon\.com\N}}{eq{$sender_host_name}{}}}{yes}{no}}
set acl_c2 = Faked Amazon
acl = phishing
warn condition = ${if
match{$h_From:$h_Return-path:$h_Reply-to:$sender_address}{\N\.capitalone\.com\N}{yes}{no}}
condition = ${if or
{{!match{$h_Received:}{\N\.capitalone\.com\N}}{eq{$sender_host_name}{}}}{yes}{no}}
set acl_c2 = Faked Capital One
acl = phishing
warn condition = ${if
match{$h_From:$h_Return-path:$h_Reply-to:$sender_address}{\N\.chase\.com\N}{yes}{no}}
condition = ${if or
{{!match{$h_Received:}{\N\.chase\.com\N}}{eq{$sender_host_name}{}}}{yes}{no}}
set acl_c2 = Faked Chase
acl = phishing
warn condition = ${if
match{$h_From:$h_Return-path:$h_Reply-to:$sender_address}{\N\.bankofamerica\.com\N}{yes}{no}}
condition = ${if or
{{!match{$h_Received:}{\N\.bankofamerica\.com\N}}{eq{$sender_host_name}{}}}{yes}{no}}
set acl_c2 = Faked Bank of America
acl = phishing
warn condition = ${if
match{$h_From:$h_Return-path:$h_Reply-to:$sender_address}{\N\.bofa\.com\N}{yes}{no}}
condition = ${if or
{{!match{$h_Received:}{\N\.bofa\.com\N}}{eq{$sender_host_name}{}}}{yes}{no}}
set acl_c2 = Faked Bank of America
acl = phishing
warn condition = ${if
match{$h_From:$h_Return-path:$h_Reply-to:$sender_address}{\N\.usbank\.com\N}{yes}{no}}
condition = ${if or
{{!match{$h_Received:}{\N\.usbank\.com\N}}{eq{$sender_host_name}{}}}{yes}{no}}
set acl_c2 = Faked US Bank
acl = phishing
warn condition = ${if
match{$h_From:$h_Return-path:$h_Reply-to:$sender_address}{\N\.egold\.com\N}{yes}{no}}
condition = ${if or
{{!match{$h_Received:}{\N\.egold\.com\N}}{eq{$sender_host_name}{}}}{yes}{no}}
set acl_c2 = Faked eGold
acl = phishing
warn condition = ${if
match{$h_From:$h_Return-path:$h_Reply-to:$sender_address}{\N\.rbc\.com\N}{yes}{no}}
condition = ${if or
{{!match{$h_Received:}{\N\.rbc\.com\N}}{eq{$sender_host_name}{}}}{yes}{no}}
set acl_c2 = Faked RBC Financial
acl = phishing
warn condition = ${if
match{$h_From:$h_Return-path:$h_Reply-to:$sender_address}{\N\.wellsfargo\.com\N}{yes}{no}}
condition = ${if or
{{!match{$h_Received:}{\N\.wellsfargo\.com\N}}{eq{$sender_host_name}{}}}{yes}{no}}
set acl_c2 = Faked Wells Fargo Bank
acl = phishing
warn condition = ${if
match{$h_From:$h_Return-path:$h_Reply-to:$sender_address}{\N\.mastercard\.com\N}{yes}{no}}
condition = ${if or
{{!match{$h_Received:}{\N\.mastercard\.com\N}}{eq{$sender_host_name}{}}}{yes}{no}}
set acl_c2 = Faked MasterCard
acl = phishing
warn condition = ${if
match{$h_From:$h_Return-path:$h_Reply-to:$sender_address}{\N\.visa\.com\N}{yes}{no}}
condition = ${if or
{{!match{$h_Received:}{\N\.visa\.com\N}}{eq{$sender_host_name}{}}}{yes}{no}}
set acl_c2 = Faked Visa Card
acl = phishing
warn condition = ${if
match{$h_From:$h_Return-path:$h_Reply-to:$sender_address}{\N\.barclays\.com\N}{yes}{no}}
condition = ${if or
{{!match{$h_Received:}{\N\.barclays\.com\N}}{eq{$sender_host_name}{}}}{yes}{no}}
set acl_c2 = Faked Barclays
acl = phishing
warn condition = ${if
match{$h_From:$h_Return-path:$h_Reply-to:$sender_address}{\N\.wamu\.com\N}{yes}{no}}
condition = ${if or
{{!match{$h_Received:}{\N\.wamu\.com\N}}{eq{$sender_host_name}{}}}{yes}{no}}
set acl_c2 = Faked Washington mutual
acl = phishing
warn condition = ${if
match{$h_From:$h_Return-path:$h_Reply-to:$sender_address}{\N\.westernunion\.com\N}{yes}{no}}
condition = ${if or
{{!match{$h_Received:}{\N\.westernunion\.com\N}}{eq{$sender_host_name}{}}}{yes}{no}}
set acl_c2 = Faked Western Union
acl = phishing
warn condition = ${if
match{$h_From:$h_Return-path:$h_Reply-to:$sender_address}{\N\.bancorpsouth\.com\N}{yes}{no}}
condition = ${if or
{{!match{$h_Received:}{\N\.bancorpsouth\.com\N}}{eq{$sender_host_name}{}}}{yes}{no}}
set acl_c2 = Faked Bancorpsouth
acl = phishing
warn condition = ${if
match{$h_From:$h_Return-path:$h_Reply-to:$sender_address}{\N\.wachovia\.com\N}{yes}{no}}
condition = ${if or
{{!match{$h_Received:}{\N\.wachovia\.com\N}}{eq{$sender_host_name}{}}}{yes}{no}}
set acl_c2 = Faked eBay
acl = phishing
warn condition = ${if
match{$h_From:$h_Return-path:$h_Reply-to:$sender_address}{\N\.rbs\.co\.uk\N}{yes}{no}}
condition = ${if or
{{!match{$h_Received:}{\N\.rbs\.co\.uk\N}}{eq{$sender_host_name}{}}}{yes}{no}}
set acl_c2 = Faked Royal Bank of Scotland
acl = phishing
warn condition = ${if
match{$h_From:$h_Return-path:$h_Reply-to:$sender_address}{\N\.ncua.gov\N}{yes}{no}}
condition = ${if or
{{!match{$h_Received:}{\N\.ncua\.gov\N}}{eq{$sender_host_name}{}}}{yes}{no}}
set acl_c2 = Faked NCUA
acl = phishing