Mailcow-dockerized: Feature Request: DMARC report parser

[normanu]

It would be nice to have a parser automaticly readout the incoming reports mailbox and work it into a report like at

https://dmarcian.com/dmarc-xml/

[andryyy]

We could indeed add something like that. Not much effort. We would also need to add it to our DNS check.

We could use something like dmarc-reports@MAILCOW_HOSTNAME. A MX record does not need to exist, the A/AAAA record will be used as fallback. We can then parse it through a script and, it is a valid XML report, write it to our database.

[normanu]

I see http://dmarc.postmarkapp.com/ does it for free, but it might be better to keep it on the own server?

[mkuron]

http://dmarc.postmarkapp.com/ only supports a single domain per account. https://www.dmarcanalyzer.com also has a free tier, but it is quite limited. Building something into Mailcow would be nice, but doesn't need to be a super high priority -- one can deploy DMARC just fine without monitoring these reports.

[ntimo]

I just wanted to drop my opinion here too, I would love to have a dmarc analyzer build into mailcow. I currently use http://dmarc.postmarkapp.com/. But using a build in solution would be really great also in terms of privacy.

[ledodev]

Solved that for my personal setup with these:
https://github.com/techsneeze/dmarcts-report-parser
https://github.com/techsneeze/dmarcts-report-viewer
Mailcow-official would be nice :)

[ntimo]

Would it be possible to implement this into Mailcow?
https://github.com/techsneeze/dmarcts-report-parser
https://github.com/techsneeze/dmarcts-report-viewer

[stale[bot]]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

[SomeGeek]

Any updates on this @andryyy ? DMARC and other mail security features (like SRS) are increasingly important these days. It can be integrated individually, however, such important things should be part of the Mailcow core.

It somehow feels these things are not getting the priority it deserves.

[andryyy]

A DMARC parser will gain you security? There are a million services to parse them with nice reports etc. DMARC already is part of mailcow (Rspamd).

I don’t understand how a parser deserves higher priority. :-/ It’s just a nice to have, I guess.

[SomeGeek]

In my opinion DMARC doesn't make sense when you don't have insights in it. Sure, it can be done right now, but it should be a core feature.

[andryyy]

We already use DMARC, we just don't have an analyzer. This is not a core feature. It is a nice-to-have. Rspamd uses DMARC, it is not that we ignore it.

[Clete2]

@SomeGeek @ntimo
I have made a PR to integrate @ntimo 's request to add in the reporter.

https://github.com/mailcow/mailcow-dockerized/pull/2065

[Adorfer]

it would be very helpful to see progress here.

[vain90]

https://hub.docker.com/r/gutmensch/dmarc-report
Sounds pretty good.

[develth]

As i read from #2065 the dmarc report is welcome, but a docker container for that is overload.
So it seems that the goal is to integrate it in the Interface (via PHP).

[dragoangel]

If somebody interested I created dedicated simple docker-compose for this stuff. It uses parsedmarc as parser and elasticsearch as storage and kibana as visualizer. On top it use nginx for basic auth and ssl.
Maybe it will help somebody: https://github.com/dragoangel/parsedmarc-dockerized