[kaetemi]

Is there any service that can process DMARC report e-mails? Those mails with zips with indecipherable XMLs inside them are a bit useless. Something that takes the junk, gives a nice human readable dashboard, and informs me if something is wrong, would be nice.

[donmcronald]

The DMARC industry is nuts. Most services charge a lot for what amounts to retrieving emails and doing a little XML parsing. It’s mostly transient data too, so it’s not like paying for a ton of redundancy is worth it.

IMHO, they’ve taken something that should be simple and turned it into a complex system that needs a ton of infrastructure because they all want a SaaS business. Everyone pays for the cost of scaling when simple sharding would do for most users.

I’d love to have a simple, self hosted DMARC analyzer running on something like PocketBase.

[rbut]

Postmark have a free DMARC service [1] that emails you a report once a week. I use it for all my domains. Note that they also have a paid offering, but this one is free.

[1] https://dmarc.postmarkapp.com

[kaetemi]

This looks very easy to set up, thanks. I'll try it tomorrow.

[linuxalien]

Mailhardener and dmarcdigests are 2 that I've used. Dmarcdigests also has a free version through postmark that sends you a summary email weekly instead of a dashboard. I personally like mailhardener, I felt the dashboard was better and easier to understand.

[hannob]

Not a service, but I can offer an opensource script to give a basic summary: https://github.com/hannob/rpter

If there's demand, I could start a SaaS business for it :-)

[wetoastfood]

I’ve been using DMARC Digests for a year and haven’t had any issues. Was quick to set up.

[reddalo]

I tried EasyDMARC in the past [1], it's easy to use but the free plan is very limited and the cheapest plan is a bit too pricey for me.

[1] https://easydmarc.com/

[snowwrestler]

Dmarcian, I think.

[freddieleeman]

https://URIports.com/dmarc offers services starting at just $1 monthly for up to 3 domains. It's GDPR compliant and includes features like notifications, hosted MTA-STS for protection against Man-in-the-Middle (MiTM) downgrade attacks, and much more.