Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 3 additions & 2 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,10 +2,11 @@

mxcheck is an info scanner for e-mail servers.

It checks
* DNS records: A, MX, PTR, SPF, MTA-STS, DKIM, DMARC
It checks
* DNS records: A, MX, PTR, SPF, MTA-STS, DKIM, DMARC (fully parsed), TLSRPT, BIMI
* AS Number and AS Country
* the support of StartTLS and the certificate
* TLS certificate details on port 465: expiry date, Subject CN, Issuer CN, SANs
* open ports: 25, 465, 587
* if the service is listed by blacklists
* if it leaks information by server string and VRFY command
Expand Down
5 changes: 3 additions & 2 deletions mxcheck.1
Original file line number Diff line number Diff line change
Expand Up @@ -22,16 +22,17 @@
.\" %%%LICENSE_END


.TH mxcheck 1 "November 2025" "version 1.8.0"
.TH mxcheck 1 "March 2026" "version 1.9.0"


.SH NAME
mxcheck
.SH SYNOPSIS
.B mxcheck [OPTION]
.SH DESCRIPTION
mxcheck is an info scanner for e-mail servers. It checks the following DNS records: A, MX, PTR, SPF, MTA-STS, DKIM and DMARC.
mxcheck is an info scanner for e-mail servers. It checks the following DNS records: A, MX, PTR, SPF, MTA-STS, DKIM, DMARC (all fields parsed), TLSRPT (RFC 8460), and BIMI.
It also checks for StartTLS support and the validity of the certificate, TLS versions, and if the VRFY command is supported.
On port 465 (SMTPS), mxcheck retrieves full TLS certificate details including expiry date, Subject CN, Issuer CN, and Subject Alternative Names.
After scanning the tcp ports 25, 465 and 587 mxcheck checks if the e-mail server is an open relay by trying to send a single message.
It also checks whether the service is blacklisted by querying public blacklist services.

Expand Down
Loading