Hacker News new | past | comments | ask | show | jobs | submit login

Question for HN: how do you handle DMARC reports? We have an email where those are just pulling up in a S3 bucket. I was hoping to find an easy solution that unzips them, aggregates, visualizes, and alerts us (if necessary).

In the meantime, I'm hoping to avoid yet another subscription service. Any suggestions?




Postmark have a free service: https://dmarc.postmarkapp.com It's simple, but works well for what it is. They added a separate commercial service fairly recently.


It definitely fails the "avoid another subscription service" criteria but I've found dmarcian works pretty well for me https://dmarcian.com/ I was considering setting something up myself but it just seemed like a lot of hassle.


That's the service I generally recommend but you're looking at $199 per month for even small businesses.


There is a rather limited free version too. That's what I use for my personal domain.


Does depends on usage, there's a free tier and a $20 / month tier.


Try https://www.mailhardener.com which includes (amongst many other features) DMARC and SMTP TLS report aggregation.

You can use it for free for personal (non-commercial) domains. Paid tiers (starting at 19 EUR/month) also offer additional services such as MTA-STS policy hosting and BIMI asset hosting.

Disclosure: I'm the founder of Mailhardener.


I have been using https://domainaware.github.io/parsedmarc/ and throw the DMARC reports into elasticsearch.



I'm trying to find out a similar solution these days and the best write-up on the topic I have found is here: https://debricked.com/blog/analyze-and-visualize-dmarc-repor...


Have a look at https://URIports.com/dmarc ; while it is subscription-based, it is not expensive and starts at just $12/year.


Clickable uri to the right page: https://www.uriports.com/dmarc :)


Common technique is to specify address for reports that bounces. Bonus points when bounce comes from the same domain and generates another report, engaging in eternal ping-pong every 24h. /s


we use https://easydmarc.com/pricing and fit in the free tier. I've found that not that many MTAs actually report to the DMARC URLs when they decide to discard the email so it's not as useful as it could be.


We have started using OnDMARC recently https://redsift.com/products/ondmarc which is unfortunately a subscription service, but does add value to us through their "Dynamic DMARC" and other email health goodies, not only reporting.


dmarcian.com is great! The CEO is the primary author of the spec itself. Lots of great insight into the data that’s kept up to date.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: