https://github.com/domainaware/checkdmarc

A parser for SPF and DMARC DNS records
https://github.com/domainaware/checkdmarc

cli dmarc dns email python security spf

Last synced: 17 days ago
JSON representation

A parser for SPF and DMARC DNS records

• Host: GitHub
• URL: https://github.com/domainaware/checkdmarc
• Owner: domainaware
• License: apache-2.0
• Created: 2017-12-10T17:42:57.000Z (almost 8 years ago)
• Default Branch: master
• Last Pushed: 2025-10-17T20:39:49.000Z (20 days ago)
• Last Synced: 2025-10-18T19:05:48.874Z (19 days ago)
• Topics: cli, dmarc, dns, email, python, security, spf
• Language: Python
• Homepage: https://domainaware.github.io/checkdmarc
• Size: 8.36 MB
• Stars: 292
• Watchers: 13
• Forks: 89
• Open Issues: 9
• Metadata Files:
  • Readme: README.md
  • Changelog: CHANGELOG.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-opensource-email - checkdmarc - A parser for SPF and DMARC DNS records - `Apache License version 2.0`, `Python` (Security / DMARC)
• jimsghstars - domainaware/checkdmarc - A parser for SPF and DMARC DNS records (Python)

README

          
# checkdmarc

[![Python tests](https://github.com/domainaware/checkdmarc/actions/workflows/python-tests.yaml/badge.svg)](https://github.com/domainaware/checkdmarc/actions/workflows/python-tests.yaml)

[![PyPI](https://img.shields.io/pypi/v/checkdmarc)](https://pypi.org/project/checkdmarc/)

[![PyPI - Downloads](https://img.shields.io/pypi/dm/checkdmarc?color=blue)](https://pypistats.org/packages/checkdmarc)

A Python module, command line utility, and [web application](https://github.com/domainaware/checkdmarc-web-frontend) for validating SPF and DMARC DNS records.

## Features

- API, CLI, and web interfaces

- Can test multiple domains at once

- CLI output in JSON or CSV format

- DNSSEC validation

- SPF

  - Record validation

  - Counting of DNS lookups and void lookups

  - Counting of lookups per mechanism

- DMARC

  - Validation and parsing of DMARC records

  - Shows warnings when the DMARC record is made ineffective by `pct` or `sp` values

  - Checks for authorization records on reporting email addresses

- BIMI

  - Validation of the mark format and certificate

  - Parsing of the mark certificate

- MX records

  - Preference

  - IPv4 and IPv6 addresses

  - Checks for STARTTLS

  - Use of DNSSEC/TLSA/DANE to pin certificates

- MTA-STS

- SMTP TLS reporting

  - Record and policy parsing and validation

- SOA record parsing

- Nameserver listing