#dmarc

Hi

I am new here. A sysadmin / dev in Switzerland. Some self promotion of a new project I made for DMARC analysis.

Marcan, a selfhosted dmarc analyzer. Single container (rust, sqlite, web ui built in), reads the aggregate reports from an imap mailbox and recomputes spf / dkim alignment itself instead of trusting the reporter. It splits into 4 categories

• DMARC pass
• Blocked by policy
• Forwarded
• Delivered failures And lets you analyze the actual failure reasons / failing senders.

I made it cuz I had the task to get ahold of our email-security (disaster) and found existing tools lacked the sort of small scale MSP toolset I needed, and paid tools were to expensive for what is needed.

It has been in development now for over 2 months, AI assisted, but also continuously tested on the entire set of domains.

https://marcan.kaitiaki.tech source: https://github.com/mavgit1/marcan-dmarc

#introduction #SelfHosted #DMARC #EmailSecurity #security

Unsere OneSystems Toolbox hat ein grosses Update erhalten: SMTP-Diagnose mit SPF/DKIM/DMARC sowie Tools für DNS, WHOIS/RDAP, GeoIP, TLS, Ping, Traceroute und mehr. Keine Auswertung der Eingaben. Testberichte werden nach 24h gelöscht. Matomo nutzen wir nur auf unserer öffentlichen Instanz. Open Source · MIT · amd64/arm64 · Docker https://tools.onesystems.ch #SelfHosting #OpenSource #Docker #DMARC

🔒 Neues Wissen, mehr Sicherheit! 🎓 Ich habe die Masterclass „DomainSecurity“ der InterNexum GmbH erfolgreich absolviert! 🎉 📌 Was wurde gelernt? ✔ Grundlagen Domainmanagement & DNS ✔ E-Mail-Authentisierung (SPF, DKIM, DMARC) ✔ E-Mail-Transport-Sicherheit (MTA-STS, TLS-RPT, DANE) ✔ DNS-Sicherheit (DNSSEC, CAA, TLSA) ✔ BIMI für vertrauenswürdige E-Mails 💡 Und das Beste? Dieses Wissen wird bei Zempel IT Security bereits eingesetzt, um den eigenen E-Mail-Verkehr bestmöglich abzusichern – für mehr Schutz vor Phishing, Spoofing & Co.! 🚀 Sicherheit ist kein Zufall, sondern das Ergebnis von Wissen und Umsetzung. https://zempel-itsecurity.de/home/zis-blog/33-neues-wissen,-mehr-sicherheit-bj%C3%B6rn-zempel-erfolgreich-in-domainsecurity-zertifiziert #DomainSecurity #EmailSecurity #ZempelITSecurity #Cybersecurity #DNS #DMARC #ITSecurity #KnowledgeIsPower

Tired of DMARC checker tools that demand dashboard logins or charge per domain? We've compared 4 alternatives to help you pick the right one for your needs. Check it out: https://www.sealedmail.co.uk/resources/dmarc-checker-4-alternatives/ #DMARC

New by me: CybersecKyle Security How-To Series: Power User and Small Team, Part 2 - Email Security with SPF, DKIM, and DMARC https://www.kylereddoch.me/blog/cyberseckyle-security-how-to-series-power-user-and-small-team-part-2-email-security-with-spf-dkim-and-dmarc/ #Cybersecurity #InfoSec #EmailSecurity #DMARC #CybersecKyleHowTo

Hey, I missed that the updated DMARC RFCs are out! Notable: p=reject discouraged for general user-side mailboxes, in favor of p=quarantine (and reject will effectively be treated like quarantine)Removed: pct -- replaced by t (testing mode)New: np -- policy for non-existent domainsstill v=DMARC1and more Good commentary: https://www.dmarctrust.com/blog/dmarcbis-rfc-9989-9990-9991 Links to the full RFCs: https://datatracker.ietf.org/doc/html/rfc9989 https://datatracker.ietf.org/doc/html/rfc9990 https://datatracker.ietf.org/doc/html/rfc9991 Of course, it will take some time for support to ripple outward. #DMARC