Conversation

Hi

I am new here. A sysadmin / dev in Switzerland. Some self promotion of a new project I made for DMARC analysis.

Marcan, a selfhosted dmarc analyzer. Single container (rust, sqlite, web ui built in), reads the aggregate reports from an imap mailbox and recomputes spf / dkim alignment itself instead of trusting the reporter. It splits into 4 categories
- DMARC pass
- Blocked by policy
- Forwarded
- Delivered failures
And lets you analyze the actual failure reasons / failing senders.

I made it cuz I had the task to get ahold of our email-security (disaster) and found existing tools lacked the sort of small scale MSP toolset I needed, and paid tools were to expensive for what is needed.

It has been in development now for over 2 months, AI assisted, but also continuously tested on the entire set of domains.

https://marcan.kaitiaki.tech
source: https://github.com/mavgit1/marcan-dmarc

#introduction #SelfHosted #DMARC #EmailSecurity #security

other features: live dns checks (spf, dkim, dmarc, mta-sts, tls-rpt, bimi), shows when a domain is ready to go from p=none to quarantine / reject, alerts and a monthly mail per client (both still experimental, sent through ur own smtp).

on my own ~40 domains it already found a customer's iot device sending failing mail en masse due to a misconfig, and a dkim break after a dns migration.

no login in the app, it sits behind a proxy (caddy / authelia / oauth2-proxy). license is agpl plus the the condition to notify clients about free nature of software. maybe will switch it to pure agplv3 later.