Skip to content

Commit

Permalink
SPF Policy
Browse files Browse the repository at this point in the history
Signed-off-by: Ben Rockwood <[email protected]>
  • Loading branch information
benr committed Aug 24, 2023
1 parent d5be522 commit a3c7335
Showing 1 changed file with 4 additions and 12 deletions.
16 changes: 4 additions & 12 deletions community/email-security.mql.yaml
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
policies:
- uid: email-security-policy
name: Email Security Policy (SPF, DKIM, DMARC)
version: "0.0.1"
- uid: email-security-policy-spf

Check failure

Code scanning / cnspec

Policy has no checks assigned Error

Policy email-security-policy-spf is missing checks
name: Email Security Policy (SPF)
version: "0.0.2"
authors:
- name: Ben Rockwood
email: [email protected]
Expand All @@ -12,7 +12,7 @@ policies:
desc: |
## Overview
This policy bundle checks for best practices and common misconfigurations of SPF, DKIM, and DMARC records in DNS.
This policy bundle checks for best practices and common misconfigurations of SPF records in DNS.
### Running the Policy
Expand Down Expand Up @@ -133,11 +133,3 @@ queries:
refs:
- title: DNS SPF Records
url: https://en.wikipedia.org/wiki/Sender_Policy_Framework#DNS_SPF_Records


###
# In the future, add DMARC Checks
# dig -t txt _dmarc.mondoo.com
# DMARC 1:"v=DMARC1; p=quarantine; rua=mailto:[email protected]; ruf=mailto:[email protected]; sp=quarantine; pct=100; fo=1;"
#
# Also, _mta-ts.mondoo.com and _smtp._tls.mondoo.com

0 comments on commit a3c7335

Please sign in to comment.