serain/mailspoof

Scans SPF and DMARC records for issues that could allow email spoofing.

mailspoof's Issues

Check if should scan aspf and adkim issues

Are there vulns worth tracking here?

adkim:  (plain-text; OPTIONAL; default is "r".)  Indicates whether
      strict or relaxed DKIM Identifier Alignment mode is required by
      the Domain Owner.  See Section 3.1.1 for details.  Valid values
      are as follows:

      r: relaxed mode

      s: strict mode

   aspf:  (plain-text; OPTIONAL; default is "r".)  Indicates whether
      strict or relaxed SPF Identifier Alignment mode is required by the
      Domain Owner.  See Section 3.1.2 for details.  Valid values are as
      follows:

      r: relaxed mode

      s: strict mode

https://tools.ietf.org/html/rfc7489

"The DNS response does not contain an answer to the question"

Getting the following error:
"dns.resolver.NoAnswer: The DNS response does not contain an answer to the question: [DOMAIN.COM]. IN TXT"

Happening with multiple domains in a list. Domains exist and are registered but are not being found. A catch would also be nice to continue on resolving other domains and see results.

Doesn't find the DNS server

Traceback (most recent call last):
File "./mailspoof", line 10, in
sys.exit(main())
File "/opt/local/Library/Frameworks/Python.framework/Versions/3.7/lib/python3.7/site-packages/mailspoof/init.py", line 42, in main
'issues': spoof_check(domain)
File "/opt/local/Library/Frameworks/Python.framework/Versions/3.7/lib/python3.7/site-packages/mailspoof/scanners.py", line 249, in call
return self.spf_check(domain) + self.dmarc_check(domain)
File "/opt/local/Library/Frameworks/Python.framework/Versions/3.7/lib/python3.7/site-packages/mailspoof/scanners.py", line 40, in call
spf_record = self.fetch(domain)
File "/opt/local/Library/Frameworks/Python.framework/Versions/3.7/lib/python3.7/site-packages/mailspoof/scanners.py", line 225, in call
txt_records = self.resolver.query(domain, 'TXT')
File "/opt/local/Library/Frameworks/Python.framework/Versions/3.7/lib/python3.7/site-packages/dns/resolver.py", line 1041, in query
timeout = self._compute_timeout(start)
File "/opt/local/Library/Frameworks/Python.framework/Versions/3.7/lib/python3.7/site-packages/dns/resolver.py", line 858, in _compute_timeout
raise Timeout(timeout=duration)
dns.exception.Timeout: The DNS operation timed out after 5.004148006439209 seconds

Travis should build/push to PyPi on tagged commits

Dockerize and push to Dockerhub on tagged commit

Recurse SPF check breaks if no TXT response to included domain

Traceback (most recent call last):
  File "/usr/local/lib/python3.6/site-packages/dns/resolver.py", line 215, in __init__
    rdclass, rdtype)
  File "/usr/local/lib/python3.6/site-packages/dns/message.py", line 352, in find_rrset
    raise KeyError
KeyError

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/local/lib/python3.6/site-packages/dns/resolver.py", line 225, in __init__
    dns.rdatatype.CNAME)
  File "/usr/local/lib/python3.6/site-packages/dns/message.py", line 352, in find_rrset
    raise KeyError
KeyError

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/local/bin/mailspoof", line 11, in <module>
    sys.exit(main())
  File "/usr/local/lib/python3.6/site-packages/mailspoof/__init__.py", line 42, in main
    'issues': spoof_check(domain)
  File "/usr/local/lib/python3.6/site-packages/mailspoof/scanners.py", line 249, in __call__
    return self.spf_check(domain) + self.dmarc_check(domain)
  File "/usr/local/lib/python3.6/site-packages/mailspoof/scanners.py", line 65, in __call__
    included_domains, nb_lookups = self._get_include_domains(domain)
  File "/usr/local/lib/python3.6/site-packages/mailspoof/scanners.py", line 129, in _get_include_domains
    _recurse(domain)
  File "/usr/local/lib/python3.6/site-packages/mailspoof/scanners.py", line 127, in _recurse
    _recurse(include)
  File "/usr/local/lib/python3.6/site-packages/mailspoof/scanners.py", line 101, in _recurse
    spf_record = self.fetch(domain)
  File "/usr/local/lib/python3.6/site-packages/mailspoof/scanners.py", line 225, in __call__
    txt_records = self.resolver.query(domain, 'TXT')
  File "/usr/local/lib/python3.6/site-packages/dns/resolver.py", line 1053, in query
    raise_on_no_answer)
  File "/usr/local/lib/python3.6/site-packages/dns/resolver.py", line 234, in __init__
    raise NoAnswer(response=response)
dns.resolver.NoAnswer: The DNS response does not contain an answer to the question: mail.ciphr247.com. IN TXT```

Add debug logging

There's bound to be issues and there's no logging to facilitate debugging.