Re: [mailop] DMARC processing

[Udeme via mailop]

I +1 as well. I’ve used a few services over the years, and it helps a lot.

-Udeme

On Tue, Dec 19, 2023 at 10:47 PM Jesse Thompson via mailop <
mailop@mailop.org> wrote:

> On Tue, Dec 19, 2023, at 7:20 PM, Tara Natanson via mailop wrote:
>
> On Tue, Dec 19, 2023 at 3:29 PM Eduardo Diaz Comellas via mailop <
> mailop@mailop.org> wrote:
>
> Hi all,
>
> Thanks all for the suggestions.  I will give a try to some of them to
> see if they are a good fit for our usage case.
>
> We handle around 300 domains, most of them with 5-10 mailboxes... so the
> volume of reports can get pretty wild.
>
>
> I've been working to bring my corporate domains into compliance over the
> last few years.  We used both Valimail and Dmarcian.  I'd say, if you're
> managing A LOT of domains it is totally worth paying a service to help with
> the parsing.  The dashboards and ability to drill down into things is VERY
> USEFUL. They help you parse out which sources are likely forwards and
> spoofs etc. so you can focus on the sources of legitimate mail and work to
> bring them into compliance.  They can also help you come up with a strategy
> for how to attack the problem.  It is not small, and as you dig it just
> gets bigger.
>
>
> +1
>
> ___
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop
>
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] DMARC processing

[Jesse Thompson via mailop]

On Tue, Dec 19, 2023, at 7:20 PM, Tara Natanson via mailop wrote:
> On Tue, Dec 19, 2023 at 3:29 PM Eduardo Diaz Comellas via mailop 
>  wrote:
>> Hi all,
>> 
>> Thanks all for the suggestions.  I will give a try to some of them to 
>> see if they are a good fit for our usage case.
>> 
>> We handle around 300 domains, most of them with 5-10 mailboxes... so the 
>> volume of reports can get pretty wild.
> 
> I've been working to bring my corporate domains into compliance over the last 
> few years.  We used both Valimail and Dmarcian.  I'd say, if you're managing 
> A LOT of domains it is totally worth paying a service to help with the 
> parsing.  The dashboards and ability to drill down into things is VERY 
> USEFUL. They help you parse out which sources are likely forwards and spoofs 
> etc. so you can focus on the sources of legitimate mail and work to bring 
> them into compliance.  They can also help you come up with a strategy for how 
> to attack the problem.  It is not small, and as you dig it just gets bigger. 

+1
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] DMARC processing

[Tara Natanson via mailop]

On Tue, Dec 19, 2023 at 3:29 PM Eduardo Diaz Comellas via mailop <
mailop@mailop.org> wrote:

> Hi all,
>
> Thanks all for the suggestions.  I will give a try to some of them to
> see if they are a good fit for our usage case.
>
> We handle around 300 domains, most of them with 5-10 mailboxes... so the
> volume of reports can get pretty wild.
>
>
I've been working to bring my corporate domains into compliance over the
last few years.  We used both Valimail and Dmarcian.  I'd say, if you're
managing A LOT of domains it is totally worth paying a service to help with
the parsing.  The dashboards and ability to drill down into things is VERY
USEFUL. They help you parse out which sources are likely forwards and
spoofs etc. so you can focus on the sources of legitimate mail and work to
bring them into compliance.  They can also help you come up with a strategy
for how to attack the problem.  It is not small, and as you dig it just
gets bigger.

Tara Natanson
Constant Contact


> Best regards.
>
> El 19/12/23 a las 18:16, Slavko via mailop escribió:
> > Dňa 19. decembra 2023 15:29:43 UTC používateľ Mark Alley via mailop <
> mailop@mailop.org> napísal:
> >> Is that on Github somewhere? I'd be glad to add it to the list.
> > Thanks, but no, it is not published (officially).
> >
> > But if someone (small/personal/family domains) is interested,
> > i can share it.
> >
> > regards
> >
> >
> --
> Eduardo Díaz Comellas
> Ultreia Comunicaciones, S.L.
>
> ___
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop
>
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] DMARC processing

[Eduardo Diaz Comellas via mailop]

Hi all,

Thanks all for the suggestions.  I will give a try to some of them to 
see if they are a good fit for our usage case.


We handle around 300 domains, most of them with 5-10 mailboxes... so the 
volume of reports can get pretty wild.


Best regards.

El 19/12/23 a las 18:16, Slavko via mailop escribió:

Dňa 19. decembra 2023 15:29:43 UTC používateľ Mark Alley via mailop 
 napísal:

Is that on Github somewhere? I'd be glad to add it to the list.

Thanks, but no, it is not published (officially).

But if someone (small/personal/family domains) is interested,
i can share it.

regards



--
Eduardo Díaz Comellas
Ultreia Comunicaciones, S.L.

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] DMARC processing

[Slavko via mailop]

Dňa 19. decembra 2023 15:29:43 UTC používateľ Mark Alley via mailop 
 napísal:
>Is that on Github somewhere? I'd be glad to add it to the list.

Thanks, but no, it is not published (officially).

But if someone (small/personal/family domains) is interested,
i can share it.

regards


-- 
Slavko
https://www.slavino.sk/
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] DMARC processing

[Bernardo Reino via mailop]

On Tue, 19 Dec 2023, Eduardo Diaz Comellas via mailop wrote:

I'm starting to deploy DMARC records in all our managed domains, but we don't 
have any specific tool to parse and extract meaningful information from the 
reports.


Do you have any recomendations?


I process such reports using a shell script which unpacks, etc. the received 
e-mail/attachment and uses dmarc-cat (https://github.com/keltia/dmarc-cat) to
provide human-readable output, which is then sent to a specific mailbox/folder, 
where I can read/check the reports if/when I want.


For low volume this is OK (IMHO), but if you have lots of reports you want 
something that looks at them automatically and maybe alerts you based on the 
report.


Good luck.
-- Bernardo
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] DMARC processing

[Mark Alley via mailop]

Is that on Github somewhere? I'd be glad to add it to the list.

On 12/19/2023 9:20 AM, Slavko via mailop wrote:

Dňa 19. decembra 2023 15:02:15 UTC používateľ Mark Alley via 
mailop  napísal:

https://dmarcvendors.com/#Self-Hosted_Solutions

I use own python script (piped from exim), which extracts report's
attachment, stores XML in directories (by month) and reports are
shown/parsed by nginx and its autoindex & xslt module.

regards

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] DMARC processing

[Alexandre Schmit-Baverel via mailop]

Here at Sarbacane, we use https://github.com/domainaware/parsedmarc to
parse it in Json, then feed it to an ELK (elastic / Kibana) with a
dashboard we built.
Its basic but convenient as an ESP when you want to control all these data.


[image: Alexandre Schmit-Baverel]

*Alexandre Schmit-Baverel*
Responsable Délivrabilité
03 28 32 80 40
[image: linkedin]

[image:
instagram]

[image:
tiktok]

[image:
youtube]

[image:
facebook]

[image:
twitter]


[image: Campagne notoriéte 2]



Le mar. 19 déc. 2023 à 16:20, 'Peter E. Fry via mailop' via Sarbacane -
Délivrabilité  a écrit :

> On Tuesday 19/12/2023 at 3:12 am, Eduardo Diaz Comellas via mailop wrote:
>
> Hi,
>
> I'm starting to deploy DMARC records in all our managed domains, but we
> don't have any specific tool to parse and extract meaningful information
> from the reports.
>
> Do you have any recomendations?
>
>
> Most (all?) of the reports are compressed.  I just (decompress them and)
> read them in a text editor, but then my volume is small (miniscule).  As an
> initial solution I'd probably just decompress the day's reports and grep
> them for "fail".
> I rarely read them now (only new domains, and there aren't many that send
> reports).
>
> Peter E. Fry
>
> ___
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop
>
>
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] DMARC processing

[Slavko via mailop]

Dňa 19. decembra 2023 15:02:15 UTC používateľ Mark Alley via mailop 
 napísal:
>https://dmarcvendors.com/#Self-Hosted_Solutions

I use own python script (piped from exim), which extracts report's
attachment, stores XML in directories (by month) and reports are
shown/parsed by nginx and its autoindex & xslt module.

regards


-- 
Slavko
https://www.slavino.sk/
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] DMARC processing

[Peter E. Fry via mailop]

On Tuesday 19/12/2023 at 3:12 am, Eduardo Diaz Comellas via mailop  
wrote:

Hi,

I'm starting to deploy DMARC records in all our managed domains, but 
we
don't have any specific tool to parse and extract meaningful 
information

from the reports.

Do you have any recomendations?




Most (all?) of the reports are compressed.  I just (decompress them 
and) read them in a text editor, but then my volume is small 
(miniscule).  As an initial solution I'd probably just decompress the 
day's reports and grep them for "fail".
I rarely read them now (only new domains, and there aren't many that 
send reports).



Peter E. Fry
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] DMARC processing

[Mark Alley via mailop]

https://dmarcvendors.com/#Self-Hosted_Solutions

- Mark Alley

On 12/19/2023 2:47 AM, Eduardo Diaz Comellas via mailop wrote:

Hi,

I'm starting to deploy DMARC records in all our managed domains, but 
we don't have any specific tool to parse and extract meaningful 
information from the reports.


Do you have any recomendations?

Best regards

--
Eduardo Díaz Comellas
Ultreia Comunicaciones, S.L.

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] DMARC processing

[Opti Pub via mailop]

https://github.com/domainaware/parsedmarc


On Tue, Dec 19, 2023 at 9:50 AM Scott Mutter via mailop 
wrote:

> If DMARC reports could be sent in JSON format, they would be more easily
> parseable.
>
> At least, that's my opinion.
>
> On Tue, Dec 19, 2023 at 2:47 AM Eduardo Diaz Comellas via mailop <
> mailop@mailop.org> wrote:
>
>> Hi,
>>
>> I'm starting to deploy DMARC records in all our managed domains, but we
>> don't have any specific tool to parse and extract meaningful information
>> from the reports.
>>
>> Do you have any recomendations?
>>
>> Best regards
>>
>> --
>> Eduardo Díaz Comellas
>> Ultreia Comunicaciones, S.L.
>>
>> ___
>> mailop mailing list
>> mailop@mailop.org
>> https://list.mailop.org/listinfo/mailop
>>
> ___
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop
>
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] DMARC processing

[Scott Mutter via mailop]

If DMARC reports could be sent in JSON format, they would be more easily
parseable.

At least, that's my opinion.

On Tue, Dec 19, 2023 at 2:47 AM Eduardo Diaz Comellas via mailop <
mailop@mailop.org> wrote:

> Hi,
>
> I'm starting to deploy DMARC records in all our managed domains, but we
> don't have any specific tool to parse and extract meaningful information
> from the reports.
>
> Do you have any recomendations?
>
> Best regards
>
> --
> Eduardo Díaz Comellas
> Ultreia Comunicaciones, S.L.
>
> ___
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop
>
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] DMARC processing

[Alessandro Vesely via mailop]

On Tue 19/Dec/2023 09:47:15 +0100 Eduardo Diaz Comellas via mailop wrote:


I'm starting to deploy DMARC records in all our managed domains, but we don't 
have any specific tool to parse and extract meaningful information from the 
reports.


Do you have any recomendations?



The most basic thing is to transform XML reports into HTML tables[*].  That 
lets you glance at messages quickly.  Not so practical if you have hundreds or 
more reports every day.  The next step is to sum up those figures and deliver a 
daily total, or filter them by exception.  However, having an idea of what each 
report generator sends doesn't hurt.


Best
Ale
--

[*] For example, I use this style sheet:
http://www.tana.it/sw/dmarc-xsl/

More tools here:
https://dmarc.org/resources/code-and-libraries/




___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

[mailop] DMARC processing

[Eduardo Diaz Comellas via mailop]

Hi,

I'm starting to deploy DMARC records in all our managed domains, but we 
don't have any specific tool to parse and extract meaningful information 
from the reports.


Do you have any recomendations?

Best regards

--
Eduardo Díaz Comellas
Ultreia Comunicaciones, S.L.

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop