NAME

Mail::DMARC::opendmarc - Perl extension wrapping OpenDMARC's libopendmarc library

SYNOPSIS

  use Mail::DMARC::opendmarc;

  my $dmarc = Mail::DMARC::opendmarc->new();

  # Get spf and dkim auth results from Authentication-Results (RFC5451) header
  # Store them into the dmarc object together with from domain and let object
  # query DNS too
  $dmarc->query_and_store_auth_results(
        'mlu.contactlab.it',  # From: domain
        'example.com',  # envelope-from domain
        Mail::DMARC::opendmarc::DMARC_POLICY_SPF_OUTCOME_NONE, # SPF check result
        'neutral', # human-readable SPF check result
        'mlu.contactlab.it', # DKIM domain
        Mail::DMARC::opendmarc::DMARC_POLICY_DKIM_OUTCOME_PASS, # DKIM check result
        'ok' # human-readable DKIM check result
                );
                
  my $result = $dmarc->verify();
  
  # result is a hashref with the following attributes:
  #             'spf_alignment' 
  #             'dkim_alignment'
  #             'policy'
  #             'human_policy' 
  #             'utilized_domain'

  print "DMARC check result: " . $result->{human_policy} . "\n";
  print "DMARC domain used for policy evaluation: " . $result->{utilized_domain} . "\n";
  (warning: utilized_domain is only reliable if you have libopendmarc 1.1.3+)
  
  # Diagnostic output of internal libopendmarc structure via this handy function:
  print $dmarc->dump_policy() if ($debug);
  # Use it often. Side-effects on the library's internal structure might
  # interfere if you're trying to optimize call sequences.
  
  if ($result->{policy} == Mail::DMARC::opendmarc::DMARC_POLICY_PASS)
                ...

DESCRIPTION

A very thin layer wrapping Trusted Domain Project's libopendmarc. Please refer to http://www.trusteddomain.org/opendmarc.html for more information on opendmarc

Look into the test suite for more usage examples.

METHODS

Basic housekeeping

new

        # $dmarc will hold a reference to a Mail::DMARC::opendmarc instance
        my $dmarc = Mail::DMARC::opendmarc->new();
        

Initializes a new object to interact with libopendmarc

DESTROY

Performs libopendmarc cleanup when objects goes out of scope. Automatically invoked by Perl as needed.

Utility methods

policy_status_to_str

Wraps: opendmarc_policy_status_to_str. Returns a human-readable string for libopendmarc status codes (OPENDMARC_STATUS_T)

        # Will print "Success. No errors"
        print $dmarc->policy_status_to_str(0);

dump_policy

Wraps opendmarc_policy_to_buf. Dumps the values of libopendmarc's DMARC_POLICY_T opaque struct, the per-message library context. Useful for debugging and learning DMARC.

DMARC policy retrieval / parsing

query

Performs a DNS lookup for $domain's DMARC policy. Initializes the object's internal structure for later handling. Returns a status code (0 is success - see policy_status_to_str)

        my $rcode = $dmarc->query('example.com');

store

Wraps: opendmarc_policy_store_dmarc Stores a DMARC policy and initializes the object's internal structure for later handling. Doesn't perform DNS queries to retrieve the DMARC policy - you pass the domain, policy record and organization domain to store (and parse). Returns a status code (0 is success - see policy_status_to_str)

        my $rcode = $dmarc->store($dmarc_policy_record, $domain, $organizational_domain);
        my $rcode = $dmarc->store('v=DMARC1;p=none','mail.example.com','example.com');

parse

Wraps: opendmarc_policy_parse_dmarc Parses a DMARC policy and initializes the object's internal structure for later handling. Doesn't perform DNS queries to retrieve the DMARC policy - you pass the policy to parse. You should use store() instead of parse(). Returns a status code (0 is success - see policy_status_to_str)

        my $rcode = $dmarc->parse($domain, $dmarc_policy_record);
        my $rcode = $dmarc->parse('example.com', 'v=DMARC1;p=none");

Information storage methods

store_from_domain

Wraps: opendmarc_policy_store_from_domain Tell the policy evaluator the From domain of the message to be evaluated

        my $rcode = $dmarc->store_from_domain($domain);
        my $rcode = $dmarc->store_from_domain('example.com');

store_dkim

Wraps: opendmarc_policy_store_dkim Tell the policy evaluator the domain DKIM-signing the message and the result of the DKIM signature verification. my $rcode = $dmarc->store_dkim($domain, $result, $human_result); my $rcode = $dmarc->store_dkim('example.com', Mail::DMARC::opendmarc::DMARC_POLIY_DKIM_OUTCOME_PASS, 'DKIM pass');

The following symbols are available for result mapping: Mail::DMARC::opendmarc::DMARC_POLICY_DKIM_OUTCOME_FAIL Mail::DMARC::opendmarc::DMARC_POLICY_DKIM_OUTCOME_PASS Mail::DMARC::opendmarc::DMARC_POLICY_DKIM_OUTCOME_TMPFAIL Mail::DMARC::opendmarc::DMARC_POLICY_DKIM_OUTCOME_NONE

store_spf

Wraps: opendmarc_policy_store_spf Tell the policy evaluator the domain DKIM-signing the message and the result of the DKIM signature verification.

        my $rcode = $dmarc->store_spf($domain, $result, $origin, $human_result);
        my $rcode = $dmarc->store_spf('example.com', 
                Mail::DMARC::opendmarc::DMARC_POLIY_SPF_OUTCOME_PASS, 
                Mail::DMARC::opendmarc::DMARC_POLIY_SPF_ORIGIN_MAILFROM,
                'SPF passed');

The following symbols are available for result mapping: Mail::DMARC::opendmarc::DMARC_POLICY_SPF_OUTCOME_FAIL Mail::DMARC::opendmarc::DMARC_POLICY_SPF_OUTCOME_PASS Mail::DMARC::opendmarc::DMARC_POLICY_SPF_OUTCOME_TMPFAIL Mail::DMARC::opendmarc::DMARC_POLICY_SPF_OUTCOME_NONE The following symbols are available for SPF origin mapping: Mail::DMARC::opendmarc::DMARC_POLICY_SPF_ORIGIN_MAILFROM Mail::DMARC::opendmarc::DMARC_POLICY_SPF_ORIGIN_HELO

Do-it-all-at-once convenience methods

query_and_store_auth_results

Perform DMARC policy retrieval *and* store authentication results for the current message at the same time. Implies SPF authentication is performed against "mail from" and not "helo". Returns a status code.

        my $rcode = $dmarc->query_and_store_auth_results(
                $from_domain,
                $spf_domain,
                $spf_result,
                $spf_human_result,
                $dkim_domain,
                $dkim_result,
                $dkim_human_result);

store_auth_results

Like query_and_store_results but does not perform a DMARC policy retrieval - use "store" to initialize the DMARC policy instead. Implies SPF authentication is performed against "mail from" and not "helo". Returns a status code.

        my $rcode = $dmarc->store_auth_results(
                $from_domain,
                $spf_domain,
                $spf_result,
                $spf_human_result,
                $dkim_domain,
                $dkim_result,
                $dkim_human_result);

DMARC evaluation result methods

verify

Process the incoming message context information against the DMARC policy. Returns a hash with the following keys:

        'utilized_domain': the domain the policy comes from; either the from_domain or the organizational domain
        'spf_alignment': result of the DMARC SPF alignment check. Possible values:
                Mail::DMARC::opendmarc::DMARC_POLICY_SPF_ALIGNMENT_PASS 
                Mail::DMARC::opendmarc::DMARC_POLICY_SPF_ALIGNMENT_FAIL
        'dkim_alignment': result of the DMARC DKIM alignment check: Possible values:
                Mail::DMARC::opendmarc::DMARC_POLICY_DKIM_ALIGNMENT_PASS 
                Mail::DMARC::opendmarc::DMARC_POLICY_DKIM_ALIGNMENT_FAIL
        'policy': the recommended policy to apply to the current message
                Mail::DMARC::opendmarc::DMARC_POLICY_ABSENT 
                Mail::DMARC::opendmarc::DMARC_POLICY_NONE 
                Mail::DMARC::opendmarc::DMARC_POLICY_PASS 
                Mail::DMARC::opendmarc::DMARC_POLICY_QUARANTINE 
                Mail::DMARC::opendmarc::DMARC_POLICY_REJECT
        'human_policy': human-readable description of the policy
        
        $dmarc->query_and_store_auth_results(...);
        my $result = $dmarc->verify();
        print "What should we do with this message: " . $result->{human_policy} . "\n";
        if ($result->{policy} == Mail::DMARC::opendmarc::DMARC_POLICY_REJECT) {
                # processing for messages who failed the DMARC check...

get_policy_to_enforce

Get the result of the policy evaluation. Returns one of: Mail::DMARC::opendmarc::DMARC_POLICY_ABSENT Mail::DMARC::opendmarc::DMARC_POLICY_NONE Mail::DMARC::opendmarc::DMARC_POLICY_PASS Mail::DMARC::opendmarc::DMARC_POLICY_QUARANTINE Mail::DMARC::opendmarc::DMARC_POLICY_REJECT

get_policy

Returns a hash containing individual elements of the policy after parsing.

        'policy': same as get_policy_to_enforce (for a given message)
        'p'
        'sp'
        'pct'
        'adkim'
        'aspf'
        'spf_aligment'
        'dkim_aligment'
        'fo'
        'rf'
        'ruf' NOT IMPLENTED YET
        'rua' NOT IMPLEMENTED YET
        

Please refer to DMARC specs for an explanation of the hash elements and their meaning.

SEE ALSO

About DMARC: http://www.opendmarc.org

Abount opendmarc and libopendmarc: http://www.trusteddomain.org/opendmarc.html

AUTHOR

Davide Migliavacca, <shari@cpan.org>

COPYRIGHT AND LICENSE

Copyright (C) 2012, 2013 by Davide Migliavacca and ContactLab

This library is free software; you can redistribute it and/or modify it under the same terms as Perl itself, either Perl version 5.14.2 or, at your option, any later version of Perl 5 you may have available.

This license is not covering the required libopendmarc package from http://www.trusteddomain.org/opendmarc.html. Please refer to appropriate license details for the package.

THis license is not covering the bundled "effective TLD list file" from http://mxr.mozilla.org, which is licensed under the Mozilla Public License 2.0

Please try to have the appropriate amount of fun.

cpanm Mail::DMARC::opendmarc

perl -MCPAN -e shell
install Mail::DMARC::opendmarc