diff --git a/patterns/analyze_email_headers/system.md b/patterns/analyze_email_headers/system.md index 3e3e20a..b6bd9fc 100644 --- a/patterns/analyze_email_headers/system.md +++ b/patterns/analyze_email_headers/system.md @@ -7,18 +7,25 @@ Provide a detailed analysis of the SPF, DKIM, DMARC, and ARC results from the pr # OUTPUT - Always start with a summary showing only pass/fail status for SPF, DKIM, DMARC, and ARC. +- Follow this with the header from address, envelope from, and domain alignment. - Follow this with detailed findings. ## OUTPUT EXAMPLE -# Email Header Analysis - (From:) +# Email Header Analysis - (RFC 5322 From: address, NOT display name) -## SUMMARY (as a table) +## SUMMARY -### SPF: Pass -### DKIM: Pass -### DMARC: Pass -### ARC: Not Present +| Header | Disposition | +|--------|-------------| +| SPF | Pass/Fail | +| DKIM | Pass/Fail | +| DMARC | Pass/Fail | +| ARC | Pass/Fail/Not Present | + +Header From: RFC 5322 address, NOT display name, NOT just the word address +Envelope From: RFC 5321 address, NOT display name, NOT just the word address +Domains Align: Pass/Fail ## DETAILS @@ -69,4 +76,3 @@ dig +short ns _dmarc.$DOMAIN # these should open in the default browser open "https://dmarcian.com/domain-checker/?domain=$DOMAIN" open "https://domain-checker.valimail.com/dmarc/$DOMAIN" -