Free DMARC management from Cloudflare

liuch / dmarc-srg

A php parser, viewer and summary report generator for incoming DMARC reports.

GNU General Public License v3.0

223 stars 33 forks source link

Free DMARC management from Cloudflare #79

Open mayall opened 1 year ago

mayall commented 1 year ago

DMARC-SRG is terrific and I rely on it.

Cloudflare now provides free DMARC management to anyone who hosts DNS there:

https://developers.cloudflare.com/dmarc-management/

Like other services they provide, the DMARC management is nicely implemented. If you have DNS hosted at Cloudflare, I suggest you add it to your DMARC records to supplement the DMARC-SRG reports.

There are a couple features I suggest considering for DMARC-SRG:

Graphs. This is by far the biggest addition since it gives immediate visual information.
Summaries by source sender (Google, AWS, etc.) and IP. This is useful to find IP addresses that should be authorized for sending.

williamdes commented 1 year ago

Yeah, I also have cloudflare DMARC setup. But it's 90% less fun than dmarc srg Let's add nice graphs to this tool and it will rock and kill all other tools haha

@liuch any opinions about new js libraries for this project? Only pure JS ones maybe?

liuch commented 1 year ago

@mayall , I don't have a DNS hosted at Cloudflare and the link you gave only has general information. Charts are good. I already thought about it. Unfortunately, I have no experience in drawing graphs on JS yet, and I do not plan to use external libraries, because the project will immediately cease to be small and light, as it was originally intended. Thanks for the info, I'll think about it again.

Summaries by source sender (Google, AWS, etc.) and IP. This is useful to find IP addresses that should be authorized for sending.

What do you mean exactly?

liuch commented 1 year ago

@williamdes Unfortunately I don't have time to dig into any new JS libraries and I don't tend to plug external code thoughtlessly. Except for the fact that I don't like external dependencies.

liuch commented 1 year ago

To avoid misunderstandings: JavaScript is not my primary programming language. It's not even on the list of my favorite languages. In any case, I will try to improve UI.

mayall commented 1 year ago

The charting package I've used is Chart.js. I have little JS experience but found it easy to use. It seems to be popular and well supported:

https://www.chartjs.org/

Summaries by source sender (Google, AWS, etc.) and IP. This is useful to find IP addresses that should be authorized for sending.

Attached is an example Cloudflare DMARC report. Clicking through on a source gives you IPs and more info.

Will Mayall

liuch commented 1 year ago

Thank you!

andrewhenke commented 9 months ago

The charting package I've used is Chart.js. I have little JS experience but found it easy to use. It seems to be popular and well supported:

https://www.chartjs.org/

Summaries by source sender (Google, AWS, etc.) and IP. This is useful to find IP addresses that should be authorized for sending.

Attached is an example Cloudflare DMARC report. Clicking through on a source gives you IPs and more info.

Will Mayall

I have experience in ChartJS and would be more than happy to help with designing charts, if it would be of help! Please feel free to bring to a new issue @liuch and we can work on it! :)

Shnoulle commented 5 months ago

I really like to have a light tools. Adding chartjs (or any other js lib) are not really needed.

Maybe add a plugin system ?

andrewhenke commented 3 months ago

I'm curious what you think about moving to a laravel or framework based system for the project? I feel like this would potentially allow for easier integration/development of plugins/third party integrations.

liuch commented 2 months ago

No, I'm not planning moving to any framework. On the one hand increased convenience, but on the other hand less control over the code that will run on my servers and more compute resource consumption.