Templates / Parse DMARC reports, save them in database and notify on DKIM or SPF error

Parse DMARC reports, save them in database and notify on DKIM or SPF error

Ready for 3.0

by Łukasz ✓ · 3,705 views · created 2024-07-29 · SecOps

Ready for 3.0. This template uses no nodes that n8n 3.0 removes. No removed nodes, versions or helpers found. Static check, last run 2026-10-19.

What this workflow does

This workflow has 15 nodes and runs when a new email arrives over IMAP. Along the way it connects MySQL and Slack.

How it runs

Trigger: When a new email arrives over IMAP.

  1. Unzip File (Compression): uses Compression
  2. Extract XML data (Extract from File): extracts data from a file (xml)
  3. Parse XML data to JSON (XML): converts between XML and JSON
  4. If: checks a condition and branches into true / false
  5. Split Out: splits a list into separate items
  6. Rename column for consistency (Edit Fields (Set)): sets 1 field: fbr
  7. Rename Keys: uses Rename Keys
  8. Map fields for DB input and parse (Edit Fields (Set)): sets 13 fields: full_data, org_name, date_range_begin…
  9. Begin format date (Date & Time): formats or calculates dates
  10. End date format (Date & Time): formats or calculates dates

…plus 4 more steps. See the full node list below.

Services it uses

MySQLSlack

Before you upgrade to n8n 3.0

Nothing in this workflow is removed in n8n 3.0, so it should import and run after the upgrade.

Nodes used (12)

From the author

Who is it for If you are a postmaster or you manage email server, you can set up DKIM and SPF records to ensure that spoofing your email address is hard. On your domain you can also set up DMARC record to receive XML reports from email providers (rua tag).…

Excerpt from Łukasz's description on n8n.io.

View the original on n8n.io → Check your own copy

Get the weekly “what broke” email

New templates, newly broken ones, and n8n release changes. One short email a week.

Form not loading? Subscribe here.