mirror of
https://github.com/domainaware/parsedmarc.git
synced 2026-05-01 09:49:27 +00:00
c989f27983
* Cover ASN-fallback path for the Evolus operator family Only evolus-ix.com (the Internet Exchange product) was in the map, so ASN-fallback lookups for IPs without PTR fell through to the raw as_name string with no service type. The bundled IPinfo Lite MMDB stores the same operator's blocks under two other as_domain values: - evolus-it.com (the corporate domain, Evolus IT Solutions GmbH) - evolusfibre.com (their consumer fiber ISP brand) Both resolve to as_name "Evolus IT Solutions GmbH" in the MMDB, confirming they're the same operator. WHOIS on evolus-it.com and the evolusfibre.com homepage both pin the company to Austria. Added both as aliases pointing at the existing (Evolus IX, ISP) entry so all three product brands cluster under one display name, matching the comcast.net / comcast.com pattern documented in AGENTS.md. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> * Add aliases for centrilogic, 1gservers, etherni, globconnex Four additional ASN-domain aliases discovered via coverage-gap analysis against the bundled IPinfo Lite MMDB. None of the four brands are currently represented in the map under any key, so these are new brand entries (not alias-of-existing). - centrilogic.com → Centrilogic, MSP 82 MMDB nets, ~62K IPv4. Homepage describes the company as an "end-to-end I.T. transformation" managed-services provider. - 1gservers.com → 1GServers, Web Host 117 nets, ~23K IPv4. Homepage: bare-metal dedicated servers and Phoenix colocation. - etherni.com → Ethernic, MSP 2 nets, 768 IPv4. Homepage: cloud-migration / cloud-native consulting. Operates its own small ASN under Ethernic LLC. - globconnex.com → Global Connectivity Solutions, ISP 687 nets, ~63K IPv4. Homepage unreachable (self-signed cert); WHOIS privacy-redacted. Classification is inferred from the MMDB as_name "GLOBAL CONNECTIVITY SOLUTIONS LLP" and the routed-network scale. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> --------- Co-authored-by: Sean Whalen <seanthegeek@users.noreply.github.com> Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
parsedmarc
parsedmarc is a Python module and CLI utility for parsing DMARC
reports. When used with Elasticsearch and Kibana (or Splunk), it works
as a self-hosted open-source alternative to commercial DMARC report
processing services such as Agari Brand Protection, Dmarcian, OnDMARC,
ProofPoint Email Fraud Defense, and Valimail.
Note
Domain-based Message Authentication, Reporting, and Conformance (DMARC) is an email authentication protocol.
Sponsors
This is a project is maintained by one developer. Please consider sponsoring my work if you or your organization benefit from it.
Features
- Parses draft and 1.0 standard aggregate/rua DMARC reports
- Parses forensic/failure/ruf DMARC reports
- Parses reports from SMTP TLS Reporting
- Can parse reports from an inbox over IMAP, Microsoft Graph, or Gmail API
- Transparently handles gzip or zip compressed reports
- Consistent data structures
- Simple JSON and/or CSV output
- Optionally email the results
- Optionally send the results to Elasticsearch, Opensearch, and/or Splunk, for use with premade dashboards
- Optionally send reports to Apache Kafka
Python Compatibility
This project supports the following Python versions, which are either actively maintained or are the default versions for RHEL or Debian.
| Version | Supported | Reason |
|---|---|---|
| < 3.6 | ❌ | End of Life (EOL) |
| 3.6 | ❌ | Used in RHEL 8, but not supported by project dependencies |
| 3.7 | ❌ | End of Life (EOL) |
| 3.8 | ❌ | End of Life (EOL) |
| 3.9 | ❌ | Used in Debian 11 and RHEL 9, but not supported by project dependencies |
| 3.10 | ✅ | Actively maintained |
| 3.11 | ✅ | Actively maintained; supported until June 2028 (Debian 12) |
| 3.12 | ✅ | Actively maintained; supported until May 2035 (RHEL 10) |
| 3.13 | ✅ | Actively maintained; supported until June 2030 (Debian 13) |
| 3.14 | ✅ | Supported (requires imapclient>=3.1.0) |