Parsing DMARC reports using free software

Поделиться
HTML-код
  • Опубликовано: 3 окт 2024
  • This lesson about how to parse your DMARC records on your Ubuntu Linux computer is included in "Taming Google G Suite - A Complete Administrator's Guide" course found on Udemy. taming.tech/GS...
    We go in-depth on how to secure Gmail, the G Suite Calendars and Drive and Docs. If you are a person in charge of G Suite, this course is for you.
    The "Complete Administrator’s Guide to Google G Suite" walks you through the step by step process of setting up G Suite (Google Apps for Your Domain or Google Apps for Education) as fast as possible. I focus on the best practices and explain why each step and setting is important. I also take you through real-life scenarios you may encounter and show you how to address each one.
    **********************************
    In this lesson, we look at how to parse your DMARC records for free without using a paid service like Dmarcian, MXToolbox or others.
    • Docker Tutorial for Be... Docker Tutorial for Beginners - Install Docker on Windows 10
    github.com/dom... on GitHub
    debricked.com/... Analyse and Visualize DMARC Results using Open-Source Tools
    us.dmarcian.co... DMARC XML to Human Converter
    **********************************
    Commands for Ubuntu
    Run each of these lines one at a time
    docs.google.co...
    **********************************
    Other courses that can help you with your Google G Suite Administration.
    Google Apps Script Complete Course - Beginner to Advanced bit.ly/2ZsGctv
    Google Script Apps Email From Spreadsheet list bit.ly/37ep1OS
    The Complete Google Sheets Course: Beginner to Advanced! bit.ly/39kmCUH
    **********************************
    SiteGround is the best hosting and DNS provider for you and your business. bit.ly/TamingSi...
    Do you need a more powerful WordPress website host? Then WP Engine is the best you can get.
    bit.ly/TamingWP...
    The cheapest domain registrar with the best service. bit.ly/TamingNa...
    The best software to record and edit your screen recordings Camtasia by TechSmith. taming.tech/Te...
    **********************************
    Do you like this tutorial? I hope so, you can find the rest of this 11-hour course on Udemy. Click here taming.tech/ta...
    Sign up for our newsletter on www.taming.tech
    Follow us on Twitter / tamingdottech
    Follow Paul Ogier on Twitter / paulogier
    #remotework #gsuite #smallbusiness #googlecloud #productivity

Комментарии • 29

  • @TamingTech
    @TamingTech  4 года назад +1

    "Taming Google G Suite - A Complete Administrator's Guide" course can be found on Udemy. taming.tech/GSuiteAdminCourse

  • @TreeSmoker2010
    @TreeSmoker2010 4 года назад +1

    Sadly this no longer works. Fantastic write up and adding the commands is very helpful, however youtube truncating your hyperlinks was frustrating! The issue I've run into is when trying to install docker-compose via terminal, it's as if that version doesn't exist anymore so it doesn't pull and compile the files needed for the following command: docker-compose up errors out with the following output:
    : not foundbin/docker-compose: 1: /usr/local/bin/docker-compose:
    /usr/local/bin/docker-compose: 2: /usr/local/bin/docker-compose: cannot open html: No such file
    /usr/local/bin/docker-compose: 3: /usr/local/bin/docker-compose: cannot open head: No such file
    /usr/local/bin/docker-compose: 4: /usr/local/bin/docker-compose: cannot open meta: No such file
    /usr/local/bin/docker-compose: 5: /usr/local/bin/docker-compose: middot: not found
    /usr/local/bin/docker-compose: 5: /usr/local/bin/docker-compose: cannot open /title: No such file
    /usr/local/bin/docker-compose: 5: /usr/local/bin/docker-compose: GitHub: not found
    /usr/local/bin/docker-compose: 6: /usr/local/bin/docker-compose: cannot open meta: No such file
    /usr/local/bin/docker-compose: 7: /usr/local/bin/docker-compose: cannot open style: No such file
    /usr/local/bin/docker-compose: 8: /usr/local/bin/docker-compose: /usr/local/bin/docker-compose: 5: /usr/local/bin/docker-compose: body: not found
    cannot open title: No such file
    /usr/local/bin/docker-compose: 9: /usr/local/bin/docker-compose: background-color:: not found
    /usr/local/bin/docker-compose: 10: /usr/local/bin/docker-compose: /usr/local/bin/docker-compose: 5: /usr/local/bin/docker-compose: Syntax error: "(" unexpectedrequest: not found

    • @TamingTech
      @TamingTech  4 года назад +1

      Hi Jack, it should still work. I am sorry about the truncating of the links, here is a text doc so that you can see the full instructions. docs.google.com/document/d/1RixTU4V-kaXkn-qkHGsFQJc29PuXSa5xehjWLMalgek/edit?usp=sharing Please test and advise?

    • @skcdcremotefun521
      @skcdcremotefun521 3 года назад

      I Just installed without an issue but used Win10

  • @philipvikstrom4447
    @philipvikstrom4447 8 месяцев назад

    Hey! I followed every step in this video. But the .zip files doesnt move to output_files. Something wrong with ES?

  • @skrrromlett5815
    @skrrromlett5815 Год назад

    hey, im trying to do this on a Ubuntu VM on virtualbox, so far so good, only problem is that the first half of the page doesnt show anything, it has a big "!" on the top left corner of every graph, it says
    "invalid interval specified, must be non-null and non-empty", i dont know how to solve this, would u help me?

  • @laveriqfna9737
    @laveriqfna9737 2 года назад +1

    Hey someone know hol to fix the Grafana error „Templating variable Service failed Support For Elasticsearch Version After Ende-of-Life (currentliy Version

    • @TamingTech
      @TamingTech  2 года назад

      Hey Laveriq, I would open a issue here github.com/domainaware/parsedmarc/issues

  • @dzevadturcalo6801
    @dzevadturcalo6801 3 года назад

    Hello, nice work.
    I'm trying to read data directly from inbox. Can you help with it? What should be defined in docker-compose.yml instead of - ./files:/input:ro to read from inbox?

    • @TamingTech
      @TamingTech  3 года назад

      Hi Dzevad, I am not completely sure as I haven't done this. Please see this article github.com/domainaware/parsedmarc and look at the example where it is read from a IMAP and see if that helps?

  • @charlespctech
    @charlespctech 4 года назад +1

    I'm going to try this, thanks!

  • @mrtesla2457
    @mrtesla2457 2 года назад

    If you could by chance help me with the current setup on how to do this I would really appreciate it. I have followed your video and many different things on many different sites. I'm just having no luck at all. I'm guessing my issue may be the elasticsearch being dated. Any help or links would GREATLY be appreciated. I've read though the comments and checked the links you have posted in the reply but no instructions and one git hub just leads to parsedmarc instead of the dmarc-visualizer shown in the video. Thanks in advance!

    • @TamingTech
      @TamingTech  2 года назад

      Hey, I would open an issue here github.com/domainaware/parsedmarc/issues as this is an old video that needs to be updated when the new code is released.

  • @marabalyan763
    @marabalyan763 3 года назад

    Hello.
    You helped me a lot, thank you.
    I have a question, where can I download the zip files in the fils folder?

    • @TamingTech
      @TamingTech  3 года назад

      Hey Mara. Glad to have helped. What files are you looking for? All the files are listed below the video in the description.

  • @alex75hgft
    @alex75hgft 3 года назад

    Can you make the web interface access password protected with different access levels and perhaps make it a multitenant setup, so you can have multiple different customers each receiving their own dmarc reports?

    • @TamingTech
      @TamingTech  3 года назад +1

      Hey Alex. This is really for a simple parsing of your dmarc records for your own company. If you want to do more exciting things could I suggest signing up for a free account here easydmarc.com/

    • @alex75hgft
      @alex75hgft 3 года назад +1

      @@TamingTech Ok, I'll have a look. I'm after a solution for SMBs. Thanks!

  • @jonydupre
    @jonydupre 3 года назад

    Hi, thanks for the video! I'm running parsedmarc on a ubuntu server with elastisearch and kibana to visualize it. I want to add the geolocations in the dashboard, but when I try to add a layer and choose "dmarc_forensic*" or "dmarc_aggregate*" it says index parttern does not contain any geospatial fields.. Any idea on what to do or how to enable it in my situation? Since I'm not running docker.. Not sure on which file I need to edit to enable it and how to install GeoLite2. I made an account, generated a key and downloaded a .CSV file. But where on the ubuntu server do i paste it?
    Thanks!

    • @TamingTech
      @TamingTech  3 года назад

      Hi Jony! Thanks for the comment. Have you checked this documentation domainaware.github.io/parsedmarc/ Start by registering for a free GeoLite2 account, and signing in. Then, navigate the to the License Keys page under your account, and create a new license key for the version of geoipupdate that was installed.

    • @jonydupre
      @jonydupre 3 года назад

      @@TamingTech hi Taming, thanks for taking the time to anwser! I registered and created a license. I also downloaded the csv of all the locations. I did this on my own pc. But what do i do next on the dmarc machine? Do i add the account details and csv somewhere for it to work? Thanks!

  • @seshalock4749
    @seshalock4749 2 года назад

    Is it safe, I am just looking for a solution to read my DMARC reports in XML file. Is it safe to use this solution and the searches/results aren't getting public?

    • @TamingTech
      @TamingTech  2 года назад

      Hey Sesha, I am not a developer of this software but have used it for a couple of clients. As far as I can see, it is very secure. It doesn't share any reports with anyone.

  • @sushantrimal3080
    @sushantrimal3080 2 года назад

    Hi, Do you have a tutorial on how to install parsedmarc? It would be so helpful. Thanks

    • @TamingTech
      @TamingTech  2 года назад

      Sorry, we don't. We normally use the full docker container. I would read the docs here github.com/domainaware/parsedmarc#readme

    • @sushantrimal3080
      @sushantrimal3080 2 года назад

      @@TamingTech where do i get those zipped dmarc files?

    • @TamingTech
      @TamingTech  2 года назад

      @@sushantrimal3080 If you add a dmarc record that emails it to your email address, then the zip files are emailed to you.

    • @sushantrimal3080
      @sushantrimal3080 2 года назад

      @@TamingTech I got this error when i ran 'sudo docker-compose up' command. Any idea how to resolve it?
      error: subprocess-exited-with-error

      × python setup.py bdist_wheel did not run successfully.
      │ exit code: 1
      ╰─> [56 lines of output]
      Package libffi was not found in the pkg-config search path.
      Perhaps you should add the directory containing `libffi.pc'
      to the PKG_CONFIG_PATH environment variable
      Package 'libffi', required by 'virtual:world', not found
      Package libffi was not found in the pkg-config search path.
      Perhaps you should add the directory containing `libffi.pc'
      to the PKG_CONFIG_PATH environment variable
      Package 'libffi', required by 'virtual:world', not found
      Package libffi was not found in the pkg-config search path.
      Perhaps you should add the directory containing `libffi.pc'
      to the PKG_CONFIG_PATH environment variable
      Package 'libffi', required by 'virtual:world', not found
      Package libffi was not found in the pkg-config search path.
      Perhaps you should add the directory containing `libffi.pc'
      to the PKG_CONFIG_PATH environment variable
      Package 'libffi', required by 'virtual:world', not found
      Package libffi was not found in the pkg-config search path.
      Perhaps you should add the directory containing `libffi.pc'
      to the PKG_CONFIG_PATH environment variable
      Package 'libffi', required by 'virtual:world', not found
      running bdist_wheel
      running build
      running build_py
      creating build
      creating build/lib.linux-x86_64-3.10
      creating build/lib.linux-x86_64-3.10/cffi
      copying cffi/pkgconfig.py -> build/lib.linux-x86_64-3.10/cffi
      copying cffi/error.py -> build/lib.linux-x86_64-3.10/cffi
      copying cffi/cparser.py -> build/lib.linux-x86_64-3.10/cffi
      copying cffi/verifier.py -> build/lib.linux-x86_64-3.10/cffi
      copying cffi/__init__.py -> build/lib.linux-x86_64-3.10/cffi
      copying cffi/model.py -> build/lib.linux-x86_64-3.10/cffi
      copying cffi/api.py -> build/lib.linux-x86_64-3.10/cffi
      copying cffi/ffiplatform.py -> build/lib.linux-x86_64-3.10/cffi
      copying cffi/commontypes.py -> build/lib.linux-x86_64-3.10/cffi
      copying cffi/lock.py -> build/lib.linux-x86_64-3.10/cffi
      copying cffi/vengine_cpy.py -> build/lib.linux-x86_64-3.10/cffi
      copying cffi/recompiler.py -> build/lib.linux-x86_64-3.10/cffi
      copying cffi/vengine_gen.py -> build/lib.linux-x86_64-3.10/cffi
      copying cffi/setuptools_ext.py -> build/lib.linux-x86_64-3.10/cffi
      copying cffi/cffi_opcode.py -> build/lib.linux-x86_64-3.10/cffi
      copying cffi/backend_ctypes.py -> build/lib.linux-x86_64-3.10/cffi
      copying cffi/_cffi_include.h -> build/lib.linux-x86_64-3.10/cffi
      copying cffi/parse_c_type.h -> build/lib.linux-x86_64-3.10/cffi
      copying cffi/_embedding.h -> build/lib.linux-x86_64-3.10/cffi
      copying cffi/_cffi_errors.h -> build/lib.linux-x86_64-3.10/cffi
      running build_ext
      building '_cffi_backend' extension
      creating build/temp.linux-x86_64-3.10
      creating build/temp.linux-x86_64-3.10/c
      gcc -Wno-unused-result -Wsign-compare -DNDEBUG -g -fwrapv -O3 -Wall -DTHREAD_STACK_SIZE=0x100000 -fPIC -DUSE__THREAD -DHAVE_SYNC_SYNCHRONIZE -I/usr/include/ffi -I/usr/include/libffi -I/usr/local/include/python3.10 -c c/_cffi_backend.c -o build/temp.linux-x86_64-3.10/c/_cffi_backend.o
      c/_cffi_backend.c:15:10: fatal error: ffi.h: No such file or directory
      15 | #include
      | ^~~~~~~
      compilation terminated.
      error: command '/usr/bin/gcc' failed with exit code 1
      [end of output]

      note: This error originates from a subprocess, and is likely not a problem with pip.
      Running setup.py clean for cffi
      ERROR: Failed building wheel for cffi