dmarcator 0.1.0 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e13144ffc39b0f47db1c26f65201c05db51af4701cf51ffd2398dcab8011a791
-  data.tar.gz: 7560c54eb55c97de2a841e22f5c1ff4469741b23a2bd3f593934eb24b21c3582
+  metadata.gz: bdd3aafe769b2b0da2829b7247b4c65cd5cb15a28f41f1703e4b198938f43a58
+  data.tar.gz: 22cd8f8dfed8f93c89b329af83b8b057288b15087033f2ee3646f17dbc631a06
 SHA512:
-  metadata.gz: f7966f69b4b9741fad6a84c6f502631137f32891955d81a3f94e3b83fe01810fca1a8a94544dbb4f81f6adbc361b6d6d89374377d435e46f8df44a82e247a37a
-  data.tar.gz: 016b57445827a1c297870e079a148be4c0ce786dabc3f0cb2574a09beb00c8d91742a117b0d03e8095c3b4f4aeeb46a22a88431c3c4b781df948021a77f1bab4
+  metadata.gz: 18710be1b05e3d8c6301654a0ed9a9957d8d67eafa2e873e83cc3d43b0d1d4d2f2551a808b180177d3140cabc2bf3460be61578ae0ecba6d9b9e2ac4a0ad4a29
+  data.tar.gz: e03b01fa23c6981ca858da830e73f08ddc6ca522dc28849d7efc076dbb0f6d319e41e8687522c5ecbe10bfeeda1e8726e9289ed8566711e9abc672e294ffdc54

data/ChangeLog.md

@@ -1,3 +1,8 @@
+### 0.2.0 / 2026-10-13
+
+* Added DMARC XML report parsing, ported from the `dmarc_parser` gem by D Salko.
+* Added `nokogiri` and `bigdecimal` runtime dependencies.
+
 ### 0.1.0 / 2026-10-13
 
 * Forked from the Trail of Bits `dmarc` gem and published as `dmarcator`.

data/LICENSE.txt

@@ -1,6 +1,7 @@
 The MIT License (MIT)
 
 Copyright (c) 2014-2016 Trail of Bits
+Copyright (c) 2020 D Salko
 Copyright (c) 2026 Noah Berman
 
 Permission is hereby granted, free of charge, to any person obtaining a copy of

data/README.md

@@ -11,8 +11,9 @@ DMARCator is a Ruby library for parsing and querying [DMARC] records.
 > a stricter parser. See [Acknowledgments](#acknowledgments) below.
 
 [DMARC] policies are published as DNS TXT records at `_dmarc.<domain>`. This
-library parses those records into a structured `DMARCator::Record` and can query
-them directly through Ruby's `Resolv` DNS client.
+library parses those records into a structured `DMARCator::Record`, queries them
+directly through Ruby's `Resolv` DNS client, and parses the XML aggregate
+reports those policies generate.
 
 ## Installation
 
@@ -92,10 +93,32 @@ record = DMARCator::Record.query("twitter.com")
 # => #<DMARCator::Record ... @p=:reject, @rua=[...], ...>
 ```
 
+## Parsing XML reports
+
+Parse a DMARC aggregate/forensic report:
+
+```ruby
+report = DMARCator::Report.new(xml_string)
+
+report.version
+# => 0.1e0
+
+report.metadata.org_name
+# => "google.com"
+
+report.policy.domain
+# => "opserv.io"
+
+report.records.first.source_ip
+# => "209.85.220.69"
+```
+
 ## Requirements
 
 * [Ruby] >= 3.0.0
 * [parslet] >= 1.0.0, < 3.0.0
+* [nokogiri] >= 1.10
+* [bigdecimal] >= 1.0
 
 ## Testing
 
@@ -129,9 +152,15 @@ This fork renames the `DMARC` module to `DMARCator` (loaded via
 * a DNS query path that selects the `v=DMARC1` TXT record per RFC 7489,
 * hardened packaging and test fixtures.
 
+The DMARC XML report parser is ported from [`dmarc_parser`][dmarc-parser-gem],
+created by D Salko and released under the MIT License.
+
 [DMARC]: https://www.rfc-editor.org/rfc/rfc7489
 [dmarc-gem]: https://rubygems.org/gems/dmarc
+[dmarc-parser-gem]: https://rubygems.org/gems/dmarc_parser
 [Trail of Bits]: https://www.trailofbits.com
 [Ruby]: https://www.ruby-lang.org
 [parslet]: https://kschiess.github.io/parslet/
+[nokogiri]: https://nokogiri.org
+[bigdecimal]: https://github.com/ruby/bigdecimal
 [LICENSE.txt]: LICENSE.txt

data/lib/dmarcator/report/auth_result.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+
+require_relative '../xml_helper'
+
+module DMARCator
+  class Report
+    #
+    # Represents an `auth_results` entry (DKIM/SPF) in a DMARC XML report.
+    #
+    class AuthResult
+      include XmlHelper
+
+      ATTRIBUTES = [:type, :domain, :result, :selector, :scope]
+
+      attr_accessor(*ATTRIBUTES)
+
+      def initialize(node)
+        @node = node
+        self.type = node.name
+        self.domain = get_text('domain')
+        self.result = get_text('result')
+        self.selector = get_text('selector')
+        self.scope = get_text('scope')
+      end
+    end
+  end
+end

data/lib/dmarcator/report/metadata.rb

@@ -0,0 +1,32 @@
+# frozen_string_literal: true
+
+require_relative '../xml_helper'
+
+module DMARCator
+  class Report
+    #
+    # Represents the `report_metadata` element of a DMARC XML report.
+    #
+    class Metadata
+      include XmlHelper
+
+      ATTRIBUTES = [
+        :org_name, :email, :extra_contact_info, :report_id,
+        :begin_at, :end_at, :errors
+      ]
+
+      attr_accessor(*ATTRIBUTES)
+
+      def initialize(node)
+        @node = node
+        self.org_name = get_text('feedback/report_metadata/org_name')
+        self.email = get_text('feedback/report_metadata/email')
+        self.extra_contact_info = get_text('feedback/report_metadata/extra_contact_info')
+        self.report_id = get_text('feedback/report_metadata/report_id')
+        self.begin_at = get_timestamp('feedback/report_metadata/date_range/begin')
+        self.end_at = get_timestamp('feedback/report_metadata/date_range/end')
+        self.errors = @node.xpath('feedback/report_metadata/error').map(&:text)
+      end
+    end
+  end
+end

data/lib/dmarcator/report/policy.rb

@@ -0,0 +1,28 @@
+# frozen_string_literal: true
+
+require_relative '../xml_helper'
+
+module DMARCator
+  class Report
+    #
+    # Represents the `policy_published` element of a DMARC XML report.
+    #
+    class Policy
+      include XmlHelper
+
+      ATTRIBUTES = [:domain, :adkim, :aspf, :p, :sp, :pct, :fo]
+
+      attr_accessor(*ATTRIBUTES)
+
+      def initialize(node)
+        @node = node
+
+        ATTRIBUTES.each do |attr|
+          self.public_send("#{attr}=", get_text("feedback/policy_published/#{attr}"))
+        end
+
+        self.pct = self.pct && !self.pct.empty? ? self.pct.to_i : nil
+      end
+    end
+  end
+end

data/lib/dmarcator/report/reason.rb

@@ -0,0 +1,24 @@
+# frozen_string_literal: true
+
+require_relative '../xml_helper'
+
+module DMARCator
+  class Report
+    #
+    # Represents a `reason` element of a DMARC XML report record.
+    #
+    class Reason
+      include XmlHelper
+
+      ATTRIBUTES = [:type, :comment]
+
+      attr_accessor(*ATTRIBUTES)
+
+      def initialize(node)
+        @node = node
+        self.type = get_text('type')
+        self.comment = get_text('comment')
+      end
+    end
+  end
+end

data/lib/dmarcator/report/record.rb

@@ -0,0 +1,42 @@
+# frozen_string_literal: true
+
+require_relative '../xml_helper'
+require_relative 'auth_result'
+require_relative 'reason'
+
+module DMARCator
+  class Report
+    #
+    # Represents a single `record` element of a DMARC XML report.
+    #
+    class Record
+      include XmlHelper
+
+      ATTRIBUTES = [
+        :source_ip, :count, :disposition, :dkim, :spf,
+        :envelope_to, :envelope_from, :header_from,
+        :auth_results, :reasons
+      ]
+
+      attr_accessor(*ATTRIBUTES)
+
+      def initialize(node)
+        @node = node
+        self.source_ip = get_text('row/source_ip')
+        self.count = get_int('row/count')
+        self.disposition = get_text('row/policy_evaluated/disposition')
+        self.dkim = get_text('row/policy_evaluated/dkim')
+        self.spf = get_text('row/policy_evaluated/spf')
+        self.reasons = node.xpath('row/policy_evaluated/reason').map do |reason_node|
+          Reason.new(reason_node)
+        end
+        self.envelope_to = get_text('identifiers/envelope_to')
+        self.envelope_from = get_text('identifiers/envelope_from')
+        self.header_from = get_text('identifiers/header_from')
+        self.auth_results = node.xpath('auth_results/*').map do |auth_results_node|
+          AuthResult.new(auth_results_node)
+        end
+      end
+    end
+  end
+end

data/lib/dmarcator/report.rb

@@ -0,0 +1,75 @@
+# frozen_string_literal: true
+
+require 'nokogiri'
+require 'bigdecimal'
+require 'bigdecimal/util'
+
+require_relative 'xml_helper'
+require_relative 'report/metadata'
+require_relative 'report/policy'
+require_relative 'report/record'
+
+module DMARCator
+  #
+  # Represents a parsed DMARC aggregate/forensic XML report.
+  #
+  # Nokogiri's default parse options are used, which do not resolve external
+  # entities or fetch network resources; treat report XML as untrusted input.
+  #
+  class Report
+    include XmlHelper
+
+    #
+    # Initializes the report from an XML string.
+    #
+    # @param [String] xml
+    #   The raw DMARC XML report.
+    #
+    def initialize(xml)
+      @xml = xml
+      @node = Nokogiri::XML(xml)
+      @node.remove_namespaces!
+    end
+
+    #
+    # The report version.
+    #
+    # @return [BigDecimal, nil]
+    #
+    def version
+      @version ||= begin
+        value = get_text('feedback/version')
+        BigDecimal(value) if value && !value.empty?
+      end
+    end
+
+    #
+    # The report metadata.
+    #
+    # @return [Report::Metadata]
+    #
+    def metadata
+      @metadata ||= Metadata.new(@node)
+    end
+
+    #
+    # The published DMARC policy.
+    #
+    # @return [Report::Policy]
+    #
+    def policy
+      @policy ||= Policy.new(@node)
+    end
+
+    #
+    # The report records.
+    #
+    # @return [Array<Report::Record>]
+    #
+    def records
+      @records ||= @node.xpath('feedback/record').map do |node|
+        Record.new(node)
+      end
+    end
+  end
+end

data/lib/dmarcator/version.rb

@@ -1,4 +1,4 @@
 module DMARCator
   # dmarcator version
-  VERSION = '0.1.0'
+  VERSION = '0.2.0'
 end

data/lib/dmarcator/xml_helper.rb

@@ -0,0 +1,49 @@
+# frozen_string_literal: true
+
+require 'nokogiri'
+
+module DMARCator
+  #
+  # Internal helper for extracting values from parsed DMARC XML reports.
+  #
+  module XmlHelper
+    #
+    # Returns the text of the first node matching the XPath expression.
+    #
+    # @param [String] xpath
+    #   The XPath expression to match.
+    #
+    # @return [String, nil]
+    #   The node text, or `nil` if no node matched.
+    #
+    def get_text(xpath)
+      @node.at_xpath(xpath)&.text
+    end
+
+    #
+    # Returns a Unix timestamp as a `Time`.
+    #
+    # @param [String] xpath
+    #   The XPath expression to match.
+    #
+    # @return [Time, nil]
+    #
+    def get_timestamp(xpath)
+      value = get_text(xpath)
+      value && !value.empty? ? Time.at(value.to_i) : nil
+    end
+
+    #
+    # Returns an integer value.
+    #
+    # @param [String] xpath
+    #   The XPath expression to match.
+    #
+    # @return [Integer, nil]
+    #
+    def get_int(xpath)
+      value = get_text(xpath)
+      value && !value.empty? ? value.to_i : nil
+    end
+  end
+end

data/lib/dmarcator.rb

@@ -2,4 +2,5 @@ require 'dmarcator/exceptions'
 require 'dmarcator/query'
 require 'dmarcator/record'
 require 'dmarcator/parser'
+require 'dmarcator/report'
 require 'dmarcator/version'

data/spec/report_spec.rb

@@ -0,0 +1,80 @@
+# frozen_string_literal: true
+
+require 'spec_helper'
+require 'dmarcator/report'
+require 'bigdecimal'
+
+RSpec.describe DMARCator::Report do
+  let(:example_path) { File.join(__dir__, 'support', 'complete.xml') }
+  let(:google_path)  { File.join(__dir__, 'support', 'google.xml') }
+
+  let(:xml_report)    { File.read(example_path) }
+  let(:google_report) { File.read(google_path) }
+
+  it 'has a version number' do
+    expect(DMARCator::VERSION).not_to be_nil
+  end
+
+  it 'reads report version if available' do
+    report = described_class.new(xml_report)
+    expect(report.version).to eq(BigDecimal('0.1'))
+
+    google = described_class.new(google_report)
+    expect(google.version).to be_nil
+  end
+
+  it 'reads report metadata' do
+    report = described_class.new(xml_report)
+
+    expect(report.metadata.org_name).to eq('google.com')
+    expect(report.metadata.email).to eq('noreply-dmarc-support@google.com')
+    expect(report.metadata.extra_contact_info).to eq('https://support.google.com/a/answer/2466580')
+    expect(report.metadata.report_id).to eq('3114726731964606297')
+    expect(report.metadata.begin_at).to eq(Time.at(1_593_648_000))
+    expect(report.metadata.end_at).to eq(Time.at(1_593_734_399))
+    expect(report.metadata.errors).to eq(['some error', 'another error'])
+  end
+
+  it 'reads policy published' do
+    report = described_class.new(xml_report)
+
+    expect(report.policy.domain).to eq('opserv.io')
+    expect(report.policy.adkim).to eq('r')
+    expect(report.policy.aspf).to eq('r')
+    expect(report.policy.p).to eq('none')
+    expect(report.policy.sp).to eq('none')
+    expect(report.policy.pct).to eq(100)
+    expect(report.policy.fo).to eq('1')
+  end
+
+  it 'reads report records' do
+    report = described_class.new(xml_report)
+    record = report.records.first
+
+    expect(record.source_ip).to eq('209.85.220.69')
+    expect(record.count).to eq(96)
+    expect(record.disposition).to eq('none')
+    expect(record.dkim).to eq('fail')
+    expect(record.spf).to eq('fail')
+
+    expect(record.reasons.count).to eq(2)
+    expect(record.reasons.first.type).to eq('local_policy')
+    expect(record.reasons.first.comment).to eq('arc=pass')
+    expect(record.reasons.last.type).to eq('other')
+    expect(record.reasons.last.comment).to eq('dkim=pass')
+
+    expect(record.envelope_to).to eq('envelope-to.io')
+    expect(record.envelope_from).to eq('envelope-from.io')
+    expect(record.header_from).to eq('opserv.io')
+
+    expect(record.auth_results.count).to eq(2)
+    expect(record.auth_results.first.type).to eq('dkim')
+    expect(record.auth_results.first.domain).to eq('condenast-com-tw.20150623.gappssmtp.com')
+    expect(record.auth_results.first.result).to eq('pass')
+    expect(record.auth_results.first.selector).to eq('20150623')
+    expect(record.auth_results.last.type).to eq('spf')
+    expect(record.auth_results.last.domain).to eq('condenast.com.tw')
+    expect(record.auth_results.last.result).to eq('neutral')
+    expect(record.auth_results.last.scope).to eq('mfrom')
+  end
+end

data/spec/support/complete.xml

@@ -0,0 +1,364 @@
+<?xml version="1.0" encoding="UTF-8" ?>
+<feedback xmlns="urn:ietf:params:xml:ns:dmarc-2.0">
+  <version>0.1</version>
+  <report_metadata>
+    <org_name>google.com</org_name>
+    <email>noreply-dmarc-support@google.com</email>
+    <extra_contact_info>https://support.google.com/a/answer/2466580</extra_contact_info>
+    <report_id>3114726731964606297</report_id>
+    <date_range>
+      <begin>1593648000</begin>
+      <end>1593734399</end>
+    </date_range>
+    <error>some error</error>
+    <error>another error</error>
+  </report_metadata>
+  <policy_published>
+    <domain>opserv.io</domain>
+    <adkim>r</adkim>
+    <aspf>r</aspf>
+    <p>none</p>
+    <sp>none</sp>
+    <pct>100</pct>
+    <fo>1</fo>
+  </policy_published>
+  <record>
+    <row>
+      <source_ip>209.85.220.69</source_ip>
+      <count>96</count>
+      <policy_evaluated>
+        <disposition>none</disposition>
+        <dkim>fail</dkim>
+        <spf>fail</spf>
+        <reason>
+          <type>local_policy</type>
+          <comment>arc=pass</comment>
+        </reason>
+        <reason>
+          <type>other</type>
+          <comment>dkim=pass</comment>
+        </reason>
+      </policy_evaluated>
+    </row>
+    <identifiers>
+      <envelope_to>envelope-to.io</envelope_to>
+        <envelope_from>envelope-from.io</envelope_from>
+      <header_from>opserv.io</header_from>
+    </identifiers>
+    <auth_results>
+      <dkim>
+        <domain>condenast-com-tw.20150623.gappssmtp.com</domain>
+        <result>pass</result>
+        <selector>20150623</selector>
+      </dkim>
+      <spf>
+        <domain>condenast.com.tw</domain>
+        <result>neutral</result>
+        <scope>mfrom</scope>
+      </spf>
+    </auth_results>
+  </record>
+  <record>
+    <row>
+      <source_ip>167.89.100.132</source_ip>
+      <count>11</count>
+      <policy_evaluated>
+        <disposition>none</disposition>
+        <dkim>pass</dkim>
+        <spf>pass</spf>
+      </policy_evaluated>
+    </row>
+    <identifiers>
+      <header_from>opserv.io</header_from>
+    </identifiers>
+    <auth_results>
+      <dkim>
+        <domain>opserv.io</domain>
+        <result>pass</result>
+        <selector>s1</selector>
+      </dkim>
+      <dkim>
+        <domain>sendgrid.info</domain>
+        <result>pass</result>
+        <selector>smtpapi</selector>
+      </dkim>
+      <spf>
+        <domain>alert.opserv.io</domain>
+        <result>pass</result>
+      </spf>
+    </auth_results>
+  </record>
+  <record>
+    <row>
+      <source_ip>167.89.100.13</source_ip>
+      <count>96</count>
+      <policy_evaluated>
+        <disposition>none</disposition>
+        <dkim>pass</dkim>
+        <spf>pass</spf>
+      </policy_evaluated>
+    </row>
+    <identifiers>
+      <header_from>opserv.io</header_from>
+    </identifiers>
+    <auth_results>
+      <dkim>
+        <domain>opserv.io</domain>
+        <result>pass</result>
+        <selector>s1</selector>
+      </dkim>
+      <dkim>
+        <domain>sendgrid.info</domain>
+        <result>pass</result>
+        <selector>smtpapi</selector>
+      </dkim>
+      <spf>
+        <domain>alert.opserv.io</domain>
+        <result>pass</result>
+      </spf>
+    </auth_results>
+  </record>
+  <record>
+    <row>
+      <source_ip>167.89.100.13</source_ip>
+      <count>161</count>
+      <policy_evaluated>
+        <disposition>none</disposition>
+        <dkim>pass</dkim>
+        <spf>pass</spf>
+      </policy_evaluated>
+    </row>
+    <identifiers>
+      <header_from>opserv.io</header_from>
+    </identifiers>
+    <auth_results>
+      <dkim>
+        <domain>opserv.io</domain>
+        <result>pass</result>
+        <selector>s1</selector>
+      </dkim>
+      <spf>
+        <domain>alert.opserv.io</domain>
+        <result>pass</result>
+      </spf>
+    </auth_results>
+  </record>
+  <record>
+    <row>
+      <source_ip>50.31.60.236</source_ip>
+      <count>28</count>
+      <policy_evaluated>
+        <disposition>none</disposition>
+        <dkim>pass</dkim>
+        <spf>pass</spf>
+      </policy_evaluated>
+    </row>
+    <identifiers>
+      <header_from>opserv.io</header_from>
+    </identifiers>
+    <auth_results>
+      <dkim>
+        <domain>opserv.io</domain>
+        <result>pass</result>
+        <selector>s1</selector>
+      </dkim>
+      <spf>
+        <domain>alert.opserv.io</domain>
+        <result>pass</result>
+      </spf>
+    </auth_results>
+  </record>
+  <record>
+    <row>
+      <source_ip>50.31.60.236</source_ip>
+      <count>13</count>
+      <policy_evaluated>
+        <disposition>none</disposition>
+        <dkim>pass</dkim>
+        <spf>pass</spf>
+      </policy_evaluated>
+    </row>
+    <identifiers>
+      <header_from>opserv.io</header_from>
+    </identifiers>
+    <auth_results>
+      <dkim>
+        <domain>opserv.io</domain>
+        <result>pass</result>
+        <selector>s1</selector>
+      </dkim>
+      <dkim>
+        <domain>sendgrid.info</domain>
+        <result>pass</result>
+        <selector>smtpapi</selector>
+      </dkim>
+      <spf>
+        <domain>alert.opserv.io</domain>
+        <result>pass</result>
+      </spf>
+    </auth_results>
+  </record>
+  <record>
+    <row>
+      <source_ip>209.85.220.41</source_ip>
+      <count>3</count>
+      <policy_evaluated>
+        <disposition>none</disposition>
+        <dkim>pass</dkim>
+        <spf>fail</spf>
+      </policy_evaluated>
+    </row>
+    <identifiers>
+      <header_from>opserv.io</header_from>
+    </identifiers>
+    <auth_results>
+      <dkim>
+        <domain>opserv.io</domain>
+        <result>pass</result>
+        <selector>s1</selector>
+      </dkim>
+      <spf>
+        <domain>hta.gr</domain>
+        <result>pass</result>
+      </spf>
+    </auth_results>
+  </record>
+  <record>
+    <row>
+      <source_ip>209.85.220.69</source_ip>
+      <count>10</count>
+      <policy_evaluated>
+        <disposition>none</disposition>
+        <dkim>fail</dkim>
+        <spf>fail</spf>
+        <reason>
+          <type>local_policy</type>
+          <comment>arc=pass</comment>
+        </reason>
+      </policy_evaluated>
+    </row>
+    <identifiers>
+      <header_from>opserv.io</header_from>
+    </identifiers>
+    <auth_results>
+      <dkim>
+        <domain>unicstay-com.20150623.gappssmtp.com</domain>
+        <result>pass</result>
+        <selector>20150623</selector>
+      </dkim>
+      <spf>
+        <domain>unicstay.com</domain>
+        <result>pass</result>
+      </spf>
+    </auth_results>
+  </record>
+  <record>
+    <row>
+      <source_ip>209.85.220.41</source_ip>
+      <count>3</count>
+      <policy_evaluated>
+        <disposition>none</disposition>
+        <dkim>pass</dkim>
+        <spf>fail</spf>
+      </policy_evaluated>
+    </row>
+    <identifiers>
+      <header_from>opserv.io</header_from>
+    </identifiers>
+    <auth_results>
+      <dkim>
+        <domain>opserv.io</domain>
+        <result>pass</result>
+        <selector>s1</selector>
+      </dkim>
+      <dkim>
+        <domain>sendgrid.info</domain>
+        <result>pass</result>
+        <selector>smtpapi</selector>
+      </dkim>
+      <spf>
+        <domain>gmail.com</domain>
+        <result>pass</result>
+      </spf>
+    </auth_results>
+  </record>
+  <record>
+    <row>
+      <source_ip>167.89.100.132</source_ip>
+      <count>31</count>
+      <policy_evaluated>
+        <disposition>none</disposition>
+        <dkim>pass</dkim>
+        <spf>pass</spf>
+      </policy_evaluated>
+    </row>
+    <identifiers>
+      <header_from>opserv.io</header_from>
+    </identifiers>
+    <auth_results>
+      <dkim>
+        <domain>opserv.io</domain>
+        <result>pass</result>
+        <selector>s1</selector>
+      </dkim>
+      <spf>
+        <domain>alert.opserv.io</domain>
+        <result>pass</result>
+      </spf>
+    </auth_results>
+  </record>
+  <record>
+    <row>
+      <source_ip>209.85.220.69</source_ip>
+      <count>6</count>
+      <policy_evaluated>
+        <disposition>none</disposition>
+        <dkim>fail</dkim>
+        <spf>fail</spf>
+        <reason>
+          <type>local_policy</type>
+          <comment>arc=pass</comment>
+        </reason>
+      </policy_evaluated>
+    </row>
+    <identifiers>
+      <header_from>opserv.io</header_from>
+    </identifiers>
+    <auth_results>
+      <dkim>
+        <domain>sportskeeda.com</domain>
+        <result>pass</result>
+        <selector>google</selector>
+      </dkim>
+      <spf>
+        <domain>sportskeeda.com</domain>
+        <result>pass</result>
+      </spf>
+    </auth_results>
+  </record>
+  <record>
+    <row>
+      <source_ip>209.85.220.41</source_ip>
+      <count>66</count>
+      <policy_evaluated>
+        <disposition>none</disposition>
+        <dkim>pass</dkim>
+        <spf>fail</spf>
+      </policy_evaluated>
+    </row>
+    <identifiers>
+      <header_from>opserv.io</header_from>
+    </identifiers>
+    <auth_results>
+      <dkim>
+        <domain>opserv.io</domain>
+        <result>pass</result>
+        <selector>s1</selector>
+      </dkim>
+      <spf>
+        <domain>mmprojects.co.uk</domain>
+        <result>pass</result>
+      </spf>
+    </auth_results>
+  </record>
+</feedback>

data/spec/support/google.xml

@@ -0,0 +1,353 @@
+<?xml version="1.0" encoding="UTF-8" ?>
+<feedback>
+  <report_metadata>
+    <org_name>google.com</org_name>
+    <email>noreply-dmarc-support@google.com</email>
+    <extra_contact_info>https://support.google.com/a/answer/2466580</extra_contact_info>
+    <report_id>3114726731964606297</report_id>
+    <date_range>
+      <begin>1593648000</begin>
+      <end>1593734399</end>
+    </date_range>
+  </report_metadata>
+  <policy_published>
+    <domain>opserv.io</domain>
+    <adkim>r</adkim>
+    <aspf>r</aspf>
+    <p>none</p>
+    <sp>none</sp>
+    <pct>100</pct>
+  </policy_published>
+  <record>
+    <row>
+      <source_ip>209.85.220.69</source_ip>
+      <count>96</count>
+      <policy_evaluated>
+        <disposition>none</disposition>
+        <dkim>fail</dkim>
+        <spf>fail</spf>
+        <reason>
+          <type>local_policy</type>
+          <comment>arc=pass</comment>
+        </reason>
+      </policy_evaluated>
+    </row>
+    <identifiers>
+      <header_from>opserv.io</header_from>
+    </identifiers>
+    <auth_results>
+      <dkim>
+        <domain>condenast-com-tw.20150623.gappssmtp.com</domain>
+        <result>pass</result>
+        <selector>20150623</selector>
+      </dkim>
+      <spf>
+        <domain>condenast.com.tw</domain>
+        <result>neutral</result>
+      </spf>
+    </auth_results>
+  </record>
+  <record>
+    <row>
+      <source_ip>167.89.100.132</source_ip>
+      <count>11</count>
+      <policy_evaluated>
+        <disposition>none</disposition>
+        <dkim>pass</dkim>
+        <spf>pass</spf>
+      </policy_evaluated>
+    </row>
+    <identifiers>
+      <header_from>opserv.io</header_from>
+    </identifiers>
+    <auth_results>
+      <dkim>
+        <domain>opserv.io</domain>
+        <result>pass</result>
+        <selector>s1</selector>
+      </dkim>
+      <dkim>
+        <domain>sendgrid.info</domain>
+        <result>pass</result>
+        <selector>smtpapi</selector>
+      </dkim>
+      <spf>
+        <domain>alert.opserv.io</domain>
+        <result>pass</result>
+      </spf>
+    </auth_results>
+  </record>
+  <record>
+    <row>
+      <source_ip>167.89.100.13</source_ip>
+      <count>96</count>
+      <policy_evaluated>
+        <disposition>none</disposition>
+        <dkim>pass</dkim>
+        <spf>pass</spf>
+      </policy_evaluated>
+    </row>
+    <identifiers>
+      <header_from>opserv.io</header_from>
+    </identifiers>
+    <auth_results>
+      <dkim>
+        <domain>opserv.io</domain>
+        <result>pass</result>
+        <selector>s1</selector>
+      </dkim>
+      <dkim>
+        <domain>sendgrid.info</domain>
+        <result>pass</result>
+        <selector>smtpapi</selector>
+      </dkim>
+      <spf>
+        <domain>alert.opserv.io</domain>
+        <result>pass</result>
+      </spf>
+    </auth_results>
+  </record>
+  <record>
+    <row>
+      <source_ip>167.89.100.13</source_ip>
+      <count>161</count>
+      <policy_evaluated>
+        <disposition>none</disposition>
+        <dkim>pass</dkim>
+        <spf>pass</spf>
+      </policy_evaluated>
+    </row>
+    <identifiers>
+      <header_from>opserv.io</header_from>
+    </identifiers>
+    <auth_results>
+      <dkim>
+        <domain>opserv.io</domain>
+        <result>pass</result>
+        <selector>s1</selector>
+      </dkim>
+      <spf>
+        <domain>alert.opserv.io</domain>
+        <result>pass</result>
+      </spf>
+    </auth_results>
+  </record>
+  <record>
+    <row>
+      <source_ip>50.31.60.236</source_ip>
+      <count>28</count>
+      <policy_evaluated>
+        <disposition>none</disposition>
+        <dkim>pass</dkim>
+        <spf>pass</spf>
+      </policy_evaluated>
+    </row>
+    <identifiers>
+      <header_from>opserv.io</header_from>
+    </identifiers>
+    <auth_results>
+      <dkim>
+        <domain>opserv.io</domain>
+        <result>pass</result>
+        <selector>s1</selector>
+      </dkim>
+      <spf>
+        <domain>alert.opserv.io</domain>
+        <result>pass</result>
+      </spf>
+    </auth_results>
+  </record>
+  <record>
+    <row>
+      <source_ip>50.31.60.236</source_ip>
+      <count>13</count>
+      <policy_evaluated>
+        <disposition>none</disposition>
+        <dkim>pass</dkim>
+        <spf>pass</spf>
+      </policy_evaluated>
+    </row>
+    <identifiers>
+      <header_from>opserv.io</header_from>
+    </identifiers>
+    <auth_results>
+      <dkim>
+        <domain>opserv.io</domain>
+        <result>pass</result>
+        <selector>s1</selector>
+      </dkim>
+      <dkim>
+        <domain>sendgrid.info</domain>
+        <result>pass</result>
+        <selector>smtpapi</selector>
+      </dkim>
+      <spf>
+        <domain>alert.opserv.io</domain>
+        <result>pass</result>
+      </spf>
+    </auth_results>
+  </record>
+  <record>
+    <row>
+      <source_ip>209.85.220.41</source_ip>
+      <count>3</count>
+      <policy_evaluated>
+        <disposition>none</disposition>
+        <dkim>pass</dkim>
+        <spf>fail</spf>
+      </policy_evaluated>
+    </row>
+    <identifiers>
+      <header_from>opserv.io</header_from>
+    </identifiers>
+    <auth_results>
+      <dkim>
+        <domain>opserv.io</domain>
+        <result>pass</result>
+        <selector>s1</selector>
+      </dkim>
+      <spf>
+        <domain>hta.gr</domain>
+        <result>pass</result>
+      </spf>
+    </auth_results>
+  </record>
+  <record>
+    <row>
+      <source_ip>209.85.220.69</source_ip>
+      <count>10</count>
+      <policy_evaluated>
+        <disposition>none</disposition>
+        <dkim>fail</dkim>
+        <spf>fail</spf>
+        <reason>
+          <type>local_policy</type>
+          <comment>arc=pass</comment>
+        </reason>
+      </policy_evaluated>
+    </row>
+    <identifiers>
+      <header_from>opserv.io</header_from>
+    </identifiers>
+    <auth_results>
+      <dkim>
+        <domain>unicstay-com.20150623.gappssmtp.com</domain>
+        <result>pass</result>
+        <selector>20150623</selector>
+      </dkim>
+      <spf>
+        <domain>unicstay.com</domain>
+        <result>pass</result>
+      </spf>
+    </auth_results>
+  </record>
+  <record>
+    <row>
+      <source_ip>209.85.220.41</source_ip>
+      <count>3</count>
+      <policy_evaluated>
+        <disposition>none</disposition>
+        <dkim>pass</dkim>
+        <spf>fail</spf>
+      </policy_evaluated>
+    </row>
+    <identifiers>
+      <header_from>opserv.io</header_from>
+    </identifiers>
+    <auth_results>
+      <dkim>
+        <domain>opserv.io</domain>
+        <result>pass</result>
+        <selector>s1</selector>
+      </dkim>
+      <dkim>
+        <domain>sendgrid.info</domain>
+        <result>pass</result>
+        <selector>smtpapi</selector>
+      </dkim>
+      <spf>
+        <domain>gmail.com</domain>
+        <result>pass</result>
+      </spf>
+    </auth_results>
+  </record>
+  <record>
+    <row>
+      <source_ip>167.89.100.132</source_ip>
+      <count>31</count>
+      <policy_evaluated>
+        <disposition>none</disposition>
+        <dkim>pass</dkim>
+        <spf>pass</spf>
+      </policy_evaluated>
+    </row>
+    <identifiers>
+      <header_from>opserv.io</header_from>
+    </identifiers>
+    <auth_results>
+      <dkim>
+        <domain>opserv.io</domain>
+        <result>pass</result>
+        <selector>s1</selector>
+      </dkim>
+      <spf>
+        <domain>alert.opserv.io</domain>
+        <result>pass</result>
+      </spf>
+    </auth_results>
+  </record>
+  <record>
+    <row>
+      <source_ip>209.85.220.69</source_ip>
+      <count>6</count>
+      <policy_evaluated>
+        <disposition>none</disposition>
+        <dkim>fail</dkim>
+        <spf>fail</spf>
+        <reason>
+          <type>local_policy</type>
+          <comment>arc=pass</comment>
+        </reason>
+      </policy_evaluated>
+    </row>
+    <identifiers>
+      <header_from>opserv.io</header_from>
+    </identifiers>
+    <auth_results>
+      <dkim>
+        <domain>sportskeeda.com</domain>
+        <result>pass</result>
+        <selector>google</selector>
+      </dkim>
+      <spf>
+        <domain>sportskeeda.com</domain>
+        <result>pass</result>
+      </spf>
+    </auth_results>
+  </record>
+  <record>
+    <row>
+      <source_ip>209.85.220.41</source_ip>
+      <count>66</count>
+      <policy_evaluated>
+        <disposition>none</disposition>
+        <dkim>pass</dkim>
+        <spf>fail</spf>
+      </policy_evaluated>
+    </row>
+    <identifiers>
+      <header_from>opserv.io</header_from>
+    </identifiers>
+    <auth_results>
+      <dkim>
+        <domain>opserv.io</domain>
+        <result>pass</result>
+        <selector>s1</selector>
+      </dkim>
+      <spf>
+        <domain>mmprojects.co.uk</domain>
+        <result>pass</result>
+      </spf>
+    </auth_results>
+  </record>
+</feedback>

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: dmarcator
 version: !ruby/object:Gem::Version
-  version: 0.1.0
+  version: 0.2.0
 platform: ruby
 authors:
 - Noah Berman
@@ -30,6 +30,34 @@ dependencies:
     - - "<"
       - !ruby/object:Gem::Version
         version: 3.0.0
+- !ruby/object:Gem::Dependency
+  name: nokogiri
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '1.10'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '1.10'
+- !ruby/object:Gem::Dependency
+  name: bigdecimal
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '1.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '1.0'
 description: A hardened DMARC record parser and query client, forked from the Trail
   of Bits 'dmarc' gem.
 email:
@@ -47,13 +75,23 @@ files:
 - lib/dmarcator/parser.rb
 - lib/dmarcator/query.rb
 - lib/dmarcator/record.rb
+- lib/dmarcator/report.rb
+- lib/dmarcator/report/auth_result.rb
+- lib/dmarcator/report/metadata.rb
+- lib/dmarcator/report/policy.rb
+- lib/dmarcator/report/reason.rb
+- lib/dmarcator/report/record.rb
 - lib/dmarcator/uri.rb
 - lib/dmarcator/version.rb
+- lib/dmarcator/xml_helper.rb
 - spec/data/alexa.csv
 - spec/dmarcator_spec.rb
 - spec/parser_spec.rb
 - spec/record_spec.rb
+- spec/report_spec.rb
 - spec/spec_helper.rb
+- spec/support/complete.xml
+- spec/support/google.xml
 - spec/uri_spec.rb
 homepage: https://github.com/bermannoah/dmarc
 licenses:
@@ -84,5 +122,8 @@ test_files:
 - spec/dmarcator_spec.rb
 - spec/parser_spec.rb
 - spec/record_spec.rb
+- spec/report_spec.rb
 - spec/spec_helper.rb
+- spec/support/complete.xml
+- spec/support/google.xml
 - spec/uri_spec.rb