[Rtir] ARF reports parsing/handling - DMARC reports

Darren Spruell phatbuckett at gmail.com
Tue Mar 25 03:40:51 EDT 2014

[Apologies - double posting from rt-users group to correct]


Have recently set up capability to receive DMARC aggregate reports
from email providers and I believe they are delivered as zip'd ARF XML
documents. Noticed the following blurb on RTIR features:

"we've written custom parsers to handle DMCA complaints and feedback
loop emails conforming to the Abuse Reporting Format (ARF)."

Wanted to see if there's any of this code in public distribution at
this point, or if anyone that has implemented this in a satisfactory
way had anything they could share about their approach.

Not sure what the possibilities are for handling reports with
automation and finesse, but at the very least I thought it'd be
interesting to automate Incident Report creation on receipt.

Darren Spruell
phatbuckett at gmail.com

More information about the rtir mailing list