39

Hey fellow self-horders!

I built mailcheck — a free, open-source tool that checks all 6 email authentication protocols (SPF, DKIM, DMARC, MTA-STS, TLS-RPT, BIMI) for any domain and gives you a 0–100 deliverability score.

Try it: https://korpo.pro/ — type any domain and get instant results.

Self-host it: It's MIT licensed with a FastAPI backend. pip install mailcheck or clone from our Forgejo repo.

CLI: mailcheck example.com — great for CI/CD integration (exit code 2 on critical issues).

API: curl https://korpo.pro/api/v1/check/example.com — no auth needed, 100 req/hr.

Batch mode: mailcheck --file domains.txt

I found that many well-known domains have misconfigurations — even big crypto projects. The tool helped me fix my own domain's email auth setup.

Would love feedback from email/infra folks!

top 7 comments
sorted by: hot top new old
[-] savvywolf@pawb.social 10 points 5 months ago

The problem with tools like this is that they don't actually check that the mail is sent correctly. You can define security keys, but they don't mean anything if your mail server doesn't use them correctly.

For testing, I use https://www.mail-tester.com/ which you send an email to and it does more thorough tests on the server and email itself.

[-] Dultas@lemmy.world 1 points 5 months ago

Yeah and I'm not seeing any mention of blocklist checking. I was sending email for months with no issue then the ISP apparently updated their PBL.

[-] ikidd@lemmy.dbzer0.com 5 points 5 months ago

Yah, I don't think this is working. It's failing spf and dkim records that have worked for years

[-] wilo108@lemmy.ml 3 points 5 months ago

Shows a failure if the DKIM selector isn't on an arbitrary list? What's going on there?

[-] pHr34kY@lemmy.world 3 points 5 months ago

Interesting. I'm getting full marks on mxtoolbox but failing the same tests on this one.

[-] irmadlad@lemmy.world 2 points 5 months ago

Firefox 149.0.2 (64-bit), Linux Mint, using VPN. I must have settings that are blocking the processing of the domain for whatever reason. I've tried multiple domains including well known domains. No joy. Sorry about that.

[-] Decronym@lemmy.decronym.xyz 1 points 5 months ago* (last edited 5 months ago)

Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I've seen in this thread:

Fewer Letters More Letters
SSL Secure Sockets Layer, for transparent encryption
TLS Transport Layer Security, supersedes SSL
VPN Virtual Private Network

1 acronyms in this thread; the most compressed thread commented on today has 6 acronyms.

[Thread #256 for this comm, first seen 26th Apr 2026, 04:30] [FAQ] [Full list] [Contact] [Source code]

this post was submitted on 26 Apr 2026
39 points (91.5% liked)

Selfhosted

62749 readers
605 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

  1. Be civil.

  2. No spam.

  3. Posts are to be related to self-hosting.

  4. Don't duplicate the full text of your blog or readme if you're providing a link.

  5. Submission headline should match the article title.

  6. No trolling.

  7. Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.

  8. AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS