4 ms·

Question for HN: how do you handle DMARC reports? We have an email where those are just pulling up in a S3 bucket. I was hoping to find an easy solution that un

by a1371 5y ago

Question for HN: how do you handle DMARC reports? We have an email where those are just pulling up in a S3 bucket. I was hoping to find an easy solution that unzips them, aggregates, visualizes, and alerts us (if necessary). In the meantime, I'm hoping to avoid yet another subscription service. Any suggestions?

khorne 5y ago
I have been using https://domainaware.github.io/parsedmarc/ https://domainaware.github.io/parsedmarc/ and throw the DMARC reports into elasticsearch.
illuminated 5y ago
I'm trying to find out a similar solution these days and the best write-up on the topic I have found is here: https://debricked.com/blog/analyze-and-visualize-dmarc-report/ https://debricked.com/blog/analyze-and-visualize-dmarc-repor...
remus 5y ago
It definitely fails the "avoid another subscription service" criteria but I've found dmarcian works pretty well for me https://dmarcian.com/ https://dmarcian.com/ I was considering setting something up myself but it just seemed like a lot of hassle.
- technion 5y ago
  That's the service I generally recommend but you're looking at $199 per month for even small businesses.
  - akvadrako 5y ago
    There is a rather limited free version too. That's what I use for my personal domain.
  - remus 5y ago
    Does depends on usage, there's a free tier and a $20 / month tier.
freddieleeman 5y ago
Have a look at https://URIports.com/dmarc https://URIports.com/dmarc ; while it is subscription-based, it is not expensive and starts at just $12/year.
- klausjensen 5y ago
  Clickable uri to the right page: https://www.uriports.com/dmarc https://www.uriports.com/dmarc :)
LeonM 5y ago
Try https://www.mailhardener.com https://www.mailhardener.com which includes (amongst many other features) DMARC and SMTP TLS report aggregation. You can use it for free for personal (non-commercial) domains. Paid tiers (starting at 19 EUR/month) also offer additional services such as MTA-STS policy hosting and BIMI asset hosting. Disclosure: I'm the founder of Mailhardener.
mindsuck 5y ago
We have started using OnDMARC recently https://redsift.com/products/ondmarc https://redsift.com/products/ondmarc which is unfortunately a subscription service, but does add value to us through their "Dynamic DMARC" and other email health goodies, not only reporting.
ivanr 5y ago
Postmark have a free service: https://dmarc.postmarkapp.com https://dmarc.postmarkapp.com It's simple, but works well for what it is. They added a separate commercial service fairly recently.
yread 5y ago
we use https://easydmarc.com/pricing https://easydmarc.com/pricing and fit in the free tier. I've found that not that many MTAs actually report to the DMARC URLs when they decide to discard the email so it's not as useful as it could be.
garaetjjte 5y ago
Common technique is to specify address for reports that bounces. Bonus points when bounce comes from the same domain and generates another report, engaging in eternal ping-pong every 24h. /s
brightball 5y ago
dmarcian.com is great! The CEO is the primary author of the spec itself. Lots of great insight into the data that’s kept up to date.
j3th9n 5y ago
I use https://github.com/domainaware/parsedmarc https://github.com/domainaware/parsedmarc

by a1371 5y ago

khorne 5y ago

I have been using https://domainaware.github.io/parsedmarc/ https://domainaware.github.io/parsedmarc/ and throw the DMARC reports into elasticsearch.

illuminated 5y ago

I'm trying to find out a similar solution these days and the best write-up on the topic I have found is here: https://debricked.com/blog/analyze-and-visualize-dmarc-report/ https://debricked.com/blog/analyze-and-visualize-dmarc-repor...

remus 5y ago

It definitely fails the "avoid another subscription service" criteria but I've found dmarcian works pretty well for me https://dmarcian.com/ https://dmarcian.com/ I was considering setting something up myself but it just seemed like a lot of hassle.

technion 5y ago
That's the service I generally recommend but you're looking at $199 per month for even small businesses.
- akvadrako 5y ago
  There is a rather limited free version too. That's what I use for my personal domain.
- remus 5y ago
  Does depends on usage, there's a free tier and a $20 / month tier.

freddieleeman 5y ago

Have a look at https://URIports.com/dmarc https://URIports.com/dmarc ; while it is subscription-based, it is not expensive and starts at just $12/year.

klausjensen 5y ago
Clickable uri to the right page: https://www.uriports.com/dmarc https://www.uriports.com/dmarc :)

LeonM 5y ago

Try https://www.mailhardener.com https://www.mailhardener.com which includes (amongst many other features) DMARC and SMTP TLS report aggregation. You can use it for free for personal (non-commercial) domains. Paid tiers (starting at 19 EUR/month) also offer additional services such as MTA-STS policy hosting and BIMI asset hosting. Disclosure: I'm the founder of Mailhardener.

mindsuck 5y ago

We have started using OnDMARC recently https://redsift.com/products/ondmarc https://redsift.com/products/ondmarc which is unfortunately a subscription service, but does add value to us through their "Dynamic DMARC" and other email health goodies, not only reporting.

ivanr 5y ago

Postmark have a free service: https://dmarc.postmarkapp.com https://dmarc.postmarkapp.com It's simple, but works well for what it is. They added a separate commercial service fairly recently.

yread 5y ago

we use https://easydmarc.com/pricing https://easydmarc.com/pricing and fit in the free tier. I've found that not that many MTAs actually report to the DMARC URLs when they decide to discard the email so it's not as useful as it could be.

garaetjjte 5y ago

Common technique is to specify address for reports that bounces. Bonus points when bounce comes from the same domain and generates another report, engaging in eternal ping-pong every 24h. /s

brightball 5y ago

dmarcian.com is great! The CEO is the primary author of the spec itself. Lots of great insight into the data that’s kept up to date.

j3th9n 5y ago

I use https://github.com/domainaware/parsedmarc https://github.com/domainaware/parsedmarc