DMARC percentages are now explained

They were always supposed to be, but now they are for real. Thanks to Jason Berry for yet another pull request to fix this stupid mistake I must have added who knows when.

It'll be in PowerShell Gallery tomorrow.

Full Changelog: v1.4.0...v1.4.1

Features! Bug fixes! And more.

Version 1.4.0 (Thursday, April 4, 2024)

• NEW Most cmdlets now have a switch, -DisableDnssecValidation, that does just that.
• NEW Test-DkimRecord will print the full DKIM TXT record to the verbose stream. Thanks to Jason Berry for writing the pull request!
• FIX DNSSEC results are shown even when records are not found, to show proof of non-existence (unless DNSSEC validation is disabled).
• FIX The SPF qualifier is no longer prepended to IPv4 addresses.
• FIX A bug caused Windows PowerShell 5.1 not to parse MTA-STS policy file line endings properly. Thanks to Jason Berry for reporting this and writing another pull request!

To update (if you're using the current version of PowerShell):

Install-PSResource -Name MailPolicyExplainer

Or, older versions:

Install-Module -Name MailPolicyExplainer

Full Changelog: v1.3.4...v1.4.0

It works on Windows PowerShell again

Thanks for Aslan Grealis for finding this bug.

Full Changelog: v1.3.3...v1.3.4

DANE vs. MTA-STS

We've got a few minor bug fixes in this release.

• FIX When no DANE records are present for a domain with a single MX host, Test-DaneRecords would erroneously report the domain name when it should have reported the MX server name.
• FIX Test-MtaStsPolicy no longer misidentifies mta-sts.txt files with the correct CRLF line endings as malformed. This was caused by a regression in version 1.3.1.

Full Changelog: v1.3.1...v1.3.3

Get your copy today!

PS C:\>  Update-PSResource MailPolicyExplainer

Fix all the bugs!

This release cleans up a lot of the codebase, and fixes about a dozen little bugs the team and I have uncovered during our testing.

Update-PSResource MailPolicyExplainer || Update-Module MailPolicyExplainer

Full Changelog: v1.3.0...v1.3.1

Implement recursion to implement recursion

There are two kinds of people in the world: those who understand recursion and those who don't understand that there are two kinds of people in this world: those who understand recursion and those who don't understand that there are two kinds of people in this world...

SPF Recursion Now Supported

The marquee feature of this release is support for recursively evaluating SPF records. The SPF test now supports a new parameter, -CountDnsLookups, to test an SPF record recursively to ensure that no more than ten additional DNS lookups are required to evaluate SPF for a domain. This can be invoked by either Test-SpfRecord -CountDnsLookups or Test-MailPolicy -CountSpfDnsLookups.

(PROTIP: -Recurse is an easy-to-remember alias for both cmdlets.)

In addition, a few bugs have also been squished -- namely, one that prevented conceptual help from being made available.

Full Changelog: v1.2.0...v1.3.0

Updating

Whether you're using the new Microsoft.PowerShell.PSResourceGet (seriously, it's way faster) or the legacy PowerShellGet, this PS7 one-liner will get the job done:

PS C:\>  Update-PSResource MailPolicyExplainer || Update-Module MailPolicyExplainer

Just let IPv4 die!

This is the first update to MailPolicyExplainer. It includes both new features and

How to Update

Update this module like you would update any other module. Syntax varies, depending on whether or not you use the new Microsoft.PowerShell.PSResourceGet or the classic PowerShellGet.

Update-PSResource MailPolicyExplainer || Update-Module MailPolicyExplainer

New Feature

MX records and MTA-STS policy servers are now checked to make sure they are reachable over both IPv4 and IPv6. This will ensure that all Internet users, including those who only have one protocol, can still access your server.

Bug Fixes

• DKIM records may safely omit the v=DKIM1 and k=rsa tokens. This module, however, did not recognize those as valid. These default values are now allowed to be missing, and substituted with appropriate defaults, per the RFC.
• DKIM RSA keys larger than 4,096 bits now generate a warning, as they are not required to be supported by all validators.

Full Changelog: v1.0.0...v1.1.0

Un-complicating email.

This has existed as an idea in my head and a half-baked idea in my filesystems since about 2018. At work, many of my colleagues ask me for help in looking up email-related DNS records, and while I don't mind teaching them how to do it -- in fact, I love it -- I'm not always available, and I'd like to give them the tools they need to do it themselves, and help them learn what all the acronyms mean and do.

Give it a shot. This module can analyze a domain's MX records, SPF record, DKIM selectors, DMARC record, MTA-STS policy and record, DANE records, and even BIMI records!

Using PSResourceGet:

Install-PSResource MailPolicyExplainer

Using PowerShellGet:

Install-Module MailPolicyExplainer