SHSelfHostIndex
OP

OpenDMARC

DMARC policy enforcement filter for mail servers

Mail Servers ★ 140 stars Medium setup BSD-3-Clause

OpenDMARC is a free implementation of the DMARC specification that checks the alignment of SPF and DKIM and enforces sender policies. It produces aggregate reports for domain owners.

Official siteSource code

Key features

  • DMARC policy enforcement
  • SPF and DKIM alignment
  • Aggregate report generation
  • Milter integration

Strengths

  • Released under the BSD-3-Clause license
  • Written in C
  • Tiny footprint — runs in 64 MB RAM

Is OpenDMARC secure?

No confirmed vulnerabilities affect OpenDMARC's latest release (rel-opendmarc-1-4-2). OSV.dev lists 8 advisories for the project and links 3 of them to this release, but their version data doesn't confirm them. No known vulnerabilities is not proof of security: it means none have been publicly catalogued.

3 unconfirmed matches

OSV.dev links these advisories to this release, but their own version data doesn't confirm it: they cover a separately versioned sub-package of the repository, or record the fix only as a commit. They are listed for completeness and not counted in the health score.

Matched by OSV, not confirmed

AdvisorySeveritySummary
CVE-2024-25768HighOpenDMARC 1.4.2 contains a null pointer dereference vulnerability in /OpenDMARC/libopendmarc/opendmarc_policy.c.
CVE-2026-101014MediumTrusted Domain Project OpenDMARC DMARC Record opendmarc_util.c opendmarc_util_cleanup off-by-one
CVE-2026-101281MediumTrusted Domain Project OpenDMARC SPF Macro opendmarc_spf.c opendmarc_sp2_find_mailfrom_domain improper authentication
  • Most recent fixed advisory CVE-2021-34555, published 2021-06-10 (1952 days ago)

Source: OSV.dev, checked 2026-10-14. How this is measured.

OpenDMARC replaces

Self-hosted Proprietary DMARC services alternatives

Health badge

Maintain OpenDMARC? Add its health score to your README. The badge links back to this page.

SelfHostIndex: 62 · good

Markdown
[![SelfHostIndex health score for OpenDMARC](https://selfhostindex.com/badge/opendmarc.svg)](https://selfhostindex.com/app/opendmarc/)
HTML
<a href="https://selfhostindex.com/app/opendmarc/"><img src="https://selfhostindex.com/badge/opendmarc.svg" alt="SelfHostIndex health score for OpenDMARC"></a>
reStructuredText
.. image:: https://selfhostindex.com/badge/opendmarc.svg
   :alt: SelfHostIndex health score for OpenDMARC
   :target: https://selfhostindex.com/app/opendmarc/

The score is recomputed on every nightly rebuild from public repository data — see how it is calculated.

Similar mail servers apps