See how DMARC, SPF, and DKIM work interactively

Re:See how DMARC, SPF, and DKIM work interactively by a1371 on Monday January 10, 2022 @03:42AM (#29871996)

Question for HN: how do you handle DMARC reports? We have an email where those are just pulling up in a S3 bucket. I was hoping to find an easy solution that unzips them, aggregates, visualizes, and alerts us (if necessary).

In the meantime, I'm hoping to avoid yet another subscription service. Any suggestions?

[ Parent | on HN ]

Re:See how DMARC, SPF, and DKIM work interactively by ivanr on Monday January 10, 2022 @04:59AM (#29872552)

Postmark have a free service: https://dmarc.postmarkapp.com It's simple, but works well for what it is. They added a separate commercial service fairly recently.

[ Parent | on HN ]

Re:See how DMARC, SPF, and DKIM work interactively by remus on Monday January 10, 2022 @04:22AM (#29872269)

It definitely fails the "avoid another subscription service" criteria but I've found dmarcian works pretty well for me https://dmarcian.com/ I was considering setting something up myself but it just seemed like a lot of hassle.

[ Parent | on HN ]

Re:See how DMARC, SPF, and DKIM work interactively by technion on Monday January 10, 2022 @04:37AM (#29872393)

That's the service I generally recommend but you're looking at $199 per month for even small businesses.

[ Parent | on HN ]

Re:See how DMARC, SPF, and DKIM work interactively by akvadrako on Monday January 10, 2022 @05:26AM (#29872748)

There is a rather limited free version too. That's what I use for my personal domain.

[ Parent | on HN ]

Re:See how DMARC, SPF, and DKIM work interactively by remus on Monday January 10, 2022 @10:18AM (#29876118)

Does depends on usage, there's a free tier and a $20 / month tier.

[ Parent | on HN ]

Re:See how DMARC, SPF, and DKIM work interactively by LeonM on Monday January 10, 2022 @04:46AM (#29872456)

Try https://www.mailhardener.com which includes (amongst many other features) DMARC and SMTP TLS report aggregation.

You can use it for free for personal (non-commercial) domains. Paid tiers (starting at 19 EUR/month) also offer additional services such as MTA-STS policy hosting and BIMI asset hosting.

Disclosure: I'm the founder of Mailhardener.

[ Parent | on HN ]

Re:See how DMARC, SPF, and DKIM work interactively by khorne on Monday January 10, 2022 @03:55AM (#29872094)

I have been using https://domainaware.github.io/parsedmarc/ and throw the DMARC reports into elasticsearch.

[ Parent | on HN ]

Re:See how DMARC, SPF, and DKIM work interactively by j3th9n on Monday January 10, 2022 @11:11AM (#29876977)

I use https://github.com/domainaware/parsedmarc

[ Parent | on HN ]

Re:See how DMARC, SPF, and DKIM work interactively by illuminated on Monday January 10, 2022 @04:01AM (#29872137)

I'm trying to find out a similar solution these days and the best write-up on the topic I have found is here: https://debricked.com/blog/analyze-and-visualize-dmarc-repor...

[ Parent | on HN ]

Re:See how DMARC, SPF, and DKIM work interactively by freddieleeman on Monday January 10, 2022 @04:23AM (#29872281)

Have a look at https://URIports.com/dmarc ; while it is subscription-based, it is not expensive and starts at just $12/year.

[ Parent | on HN ]

Re:See how DMARC, SPF, and DKIM work interactively by klausjensen on Monday January 10, 2022 @04:38AM (#29872399)

Clickable uri to the right page: https://www.uriports.com/dmarc :)

[ Parent | on HN ]

Re:See how DMARC, SPF, and DKIM work interactively by garaetjjte on Monday January 10, 2022 @08:44AM (#29874632)

Common technique is to specify address for reports that bounces. Bonus points when bounce comes from the same domain and generates another report, engaging in eternal ping-pong every 24h. /s

[ Parent | on HN ]

Re:See how DMARC, SPF, and DKIM work interactively by yread on Monday January 10, 2022 @07:09AM (#29873570)

we use https://easydmarc.com/pricing and fit in the free tier. I've found that not that many MTAs actually report to the DMARC URLs when they decide to discard the email so it's not as useful as it could be.

[ Parent | on HN ]

Re:See how DMARC, SPF, and DKIM work interactively by mindsuck on Monday January 10, 2022 @04:58AM (#29872536)

We have started using OnDMARC recently https://redsift.com/products/ondmarc which is unfortunately a subscription service, but does add value to us through their "Dynamic DMARC" and other email health goodies, not only reporting.

[ Parent | on HN ]

Re:See how DMARC, SPF, and DKIM work interactively by brightball on Monday January 10, 2022 @10:00AM (#29875801)

dmarcian.com is great! The CEO is the primary author of the spec itself. Lots of great insight into the data that’s kept up to date.

[ Parent | on HN ]