Package: dmarc-cat
Version: 0.12.0-1
Severity: important

Dear Maintainer,

when using dmarc-cat to parse DMARC rua reports, IP addresses are not shown,
nor their reverse look-up.  This seems a bug in upstream version 0.12, which is
already corrected in version 0.14.

Since the main goal of the RUA email and dmarc-cat is to identify the servers
that are sending mail and their DKIM/SPF result, this bug just allows checking
for "fail" output, which users would then have to review in the XML, as the IP
address or hostname is not shown in dmarc-cat output.

As an example, the output of the packaged version of dmarc-cat shows:

------------------------------------------------
dmarc-cat 0.12.0,parallel/j8 by Ollivier Robert

Reporting by: google.com — [email protected]
From 2020-07-20 02:00:00 +0200 CEST to 2020-07-21 01:59:59 +0200 CEST

Domain: alternativaslibres.es
Policy: p=none; dkim=s; spf=s

Reports(8):
IP                        Count   From                   RFrom
RDKIM   RSPF
                          36      alternativaslibres.es alternativaslibres.es
pass    pass
                          32      alternativaslibres.es alternativaslibres.es
pass    pass
11.mo35.mail-out.ovh.net. 1       alternativaslibres.es alternativaslibres.es
pass
                          1       alternativaslibres.es alternativaslibres.es
pass
                          1       alternativaslibres.es alternativaslibres.es
pass    fail
                          1       alternativaslibres.es alternativaslibres.es
pass
                          1       alternativaslibres.es alternativaslibres.es
pass
                          1       alternativaslibres.es alternativaslibres.es
pass

------------------------------------------------

Upstream version 0.14 seems to have this corrected, as the output of running it
against the same file shows:

------------------------------------------------
Reports(8):
IP                                                   Count   From
RFrom                  RDKIM   RSPF
43.mo35.mail-out.ovh.net.                            36
alternativaslibres.es alternativaslibres.es   pass    pass
pal.alternativaslibres.es.                           32
alternativaslibres.es alternativaslibres.es   pass    pass
15.mo35.mail-out.ovh.net.                            1
alternativaslibres.es alternativaslibres.es           pass
6.mo14.mail-out.ovh.net.                             1
alternativaslibres.es alternativaslibres.es           pass
pal.alternativaslibres.es.                           1
alternativaslibres.es alternativaslibres.es   pass    fail
11.mo14.mail-out.ovh.net.                            1
alternativaslibres.es alternativaslibres.es           pass
11.mo35.mail-out.ovh.net.                            1
alternativaslibres.es alternativaslibres.es           pass
mail-dm6nam12lp2170.outbound.protection.outlook.com. 1
alternativaslibres.es alternativaslibres.es           pass
------------------------------------------------




-- System Information:
Debian Release: bullseye/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.7.0-1-amd64 (SMP w/8 CPU threads)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, 
TAINT_UNSIGNED_MODULE
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_GB:en
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages dmarc-cat depends on:
ii  libc6       2.31-1
ii  libgpgme11  1.13.1-9

dmarc-cat recommends no packages.

dmarc-cat suggests no packages.

-- no debconf information

Reply via email to