healthcheck
healthcheck copied to clipboard
gophish
A service to test mail servers for best practices.
GSuite allows administrators to enable protections for [various settings](https://support.google.com/a/answer/7577854?hl=en). It would be good to offer this as a recommended test suite if we determine the MX records for a domain...
This is more of a reminder, but we'll want to make sure that each test is performed on every server listed in the domain's MX records. ([source](https://twitter.com/chadloder/status/1035001756495691777))
I would like to verify if the mail server notifies the sender that the user isn't a valid recipient.
Does the receiving server accept messages over TLS. There could also be a check if the certificate presented is a "trusted" cert, however that would require maintaining a trusted CA...
We should check and see if the mail server supports the VRFY command, as this could lead to unintended information disclosure.
When it comes to more advanced validation of a mail receiver I would like to check how the server handles the following SPF results. - Pass - Fail - SoftFail...
It would be nice to be able to validate if the recipient mail server allows open mail relaying.
It would be interesting to determine how a mail receiver behaves to a SPF record that contains macros. The main test should be how a receiver handles a message that...