On Mon, 27 Jan 2020, Charles Amstutz wrote:
>>> Can someone explain what this actually means and maybe provide an
>>> example?
>>>
>>> Rule Name: FROM_MISSP_DYNIP
>>> Rule Definition: misspaced + dynamic rDNS
>>>
>>> Getting a high score on this and having trouble finding an actual real
>>> definition and example. I get the dynamic rDNS I believe, but not sure
>>> about the misspaced meaning for sure.
>>
>> It means that there is no space between the display name and the '<', e.g.
>>
>> From: John Smith<js@example.com>
>>
>> If you are seeing anything very different?
>
> Thanks, however, I do see a space between the name and the '<'
>
> This is what it looks like:
>
> From: =?UTF-8?Q?Name?= <from@email.com>
I do not see that hit __FROM_RUNON (the component rule) in my test
environment. I suspect that whatever you copied that from has "helpfully"
cleaned it up for you. We would need to see the raw message header that
your mail system processed, not what your mail client displays to you.
I wager that if you were able to see the raw original message header, you
would not see a space there.
*Presuming* this is a legitimate email you do wish to receive, the
solution is to contact the sender and tell them to fix the configuration
of their mail client (or bulk mail tool if it's a bulk mail).
--
John Hardin KA7OHZ
http://www.impsec.org/~jhardin/ jhardin@impsec.org FALaholic #11174 pgpk -a jhardin@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
Are you a mildly tech-literate politico horrified by the level of
ignorance demonstrated by lawmakers gearing up to regulate online
technology they don't even begin to grasp? Cool. Now you have a
tiny glimpse into a day in the life of a gun owner. -- Sean Davis
-----------------------------------------------------------------------
Today: the 34th anniversary of the loss of STS-51L Challenger