Does anybody know open-source or, at least, free way to process DMARC reports?
I have several e-mail domains with SPF, DKIM and DMARC enabled, and it works, but I have two annoying problems with DMARC:
(1) Some sites like to send DMARC reports which says "you send us 3 messages, everything is OK, all checks are passed, you are clear".
(2) Sometimes my domains are used to (try to) send spam via other servers and I got DMARC reports like "this <IP> tired to spam with your domain in HELO/FROM and we killed it, as checks failed".
Both reports are of no use for me: I don't want to know, that my users send mail to @gmail.com and @mail.ru (first reports) and I can do nothing about second case, as these <IP>s are not <IP>s of my server, so what should I do?
Some filter or dashboard will be very useful, as unpacking & checking XMLs by hands are very cumbersome.
Here's a script I wrote for myself:
https://github.com/hannob/rpter
It gives a summary of reports, and details for failures. Not super sophisticated, but should be simple enough to extend. Also parses SMTP-TLS reporting.
Comments
Does anybody know open-source or, at least, free way to process DMARC reports?
I have several e-mail domains with SPF, DKIM and DMARC enabled, and it works, but I have two annoying problems with DMARC:
(1) Some sites like to send DMARC reports which says "you send us 3 messages, everything is OK, all checks are passed, you are clear".
(2) Sometimes my domains are used to (try to) send spam via other servers and I got DMARC reports like "this <IP> tired to spam with your domain in HELO/FROM and we killed it, as checks failed".
Both reports are of no use for me: I don't want to know, that my users send mail to @gmail.com and @mail.ru (first reports) and I can do nothing about second case, as these <IP>s are not <IP>s of my server, so what should I do?
Some filter or dashboard will be very useful, as unpacking & checking XMLs by hands are very cumbersome.
Here's a script I wrote for myself: https://github.com/hannob/rpter It gives a summary of reports, and details for failures. Not super sophisticated, but should be simple enough to extend. Also parses SMTP-TLS reporting.
parsedmarc (https://github.com/domainaware/parsedmarc) is the one I've had starred to look at, but no first-hand use yet.
dmarcian have a free "personal" tier: https://dmarcian.com/pricing/