Add Spoofable flag and graph - Githubissues

dotBATmanNO / PSGet-Domain-MailInfo

PowerShell script to get domain mail info and control status such as MX, SPF, DKIM, DMARC and StartTLS.

GNU General Public License v3.0

12 stars 2 forks source link

Add Spoofable flag and graph #23

Open dotBATmanNO opened 2 years ago

dotBATmanNO commented 2 years ago

[Feature request proposed by colleague]

Add check to claim that a domain is Spoofable

This test should be on by default, but also be disabled with the flag -CheckSpoofable 0
Output should have a flag for IsSpoofable.
Another graph should be created.

Flag should be True if any of the following conditions are met:

Lack of an SPF or DMARC record
SPF record never specifies ~all, -all
DMARC policy is set to p=none or is nonexistent

bc7c6325-a1e0-41b3-a708-0e4c3fcb4919