73 lines
2.7 KiB
Python
73 lines
2.7 KiB
Python
from datetime import datetime
|
|
from typing import List, Optional
|
|
|
|
from sqlalchemy import Boolean, Column, DateTime, ForeignKey, Integer, String, Text
|
|
from sqlalchemy.orm import relationship
|
|
|
|
from app.core.database import Base
|
|
|
|
|
|
class DMARCReport(Base):
|
|
"""DMARC Aggregate Report model"""
|
|
|
|
__tablename__ = "dmarc_reports"
|
|
|
|
id = Column(Integer, primary_key=True, index=True)
|
|
domain_id = Column(Integer, ForeignKey("domains.id"), nullable=False)
|
|
|
|
# Report metadata
|
|
report_id = Column(String, index=True, nullable=False)
|
|
org_name = Column(String, nullable=False)
|
|
begin_date = Column(Integer, nullable=False) # Unix timestamp
|
|
end_date = Column(Integer, nullable=False) # Unix timestamp
|
|
source_email = Column(String, nullable=True)
|
|
|
|
# Policy information
|
|
policy = Column(String, nullable=True) # none, quarantine, reject
|
|
subdomain_policy = Column(String, nullable=True)
|
|
adkim = Column(String(1), nullable=True) # r (relaxed) or s (strict)
|
|
aspf = Column(String(1), nullable=True) # r (relaxed) or s (strict)
|
|
percentage = Column(Integer, nullable=True)
|
|
|
|
# Processing metadata
|
|
processed_at = Column(DateTime, default=datetime.utcnow)
|
|
raw_data = Column(Text, nullable=True) # Original XML content (optional)
|
|
|
|
# Relationships
|
|
domain = relationship("Domain", back_populates="reports")
|
|
records = relationship("ReportRecord", back_populates="report", cascade="all, delete-orphan")
|
|
|
|
def __repr__(self):
|
|
return f"<DMARCReport {self.report_id} for {self.domain_id}>"
|
|
|
|
|
|
class ReportRecord(Base):
|
|
"""Individual record within a DMARC report"""
|
|
|
|
__tablename__ = "report_records"
|
|
|
|
id = Column(Integer, primary_key=True, index=True)
|
|
report_id = Column(Integer, ForeignKey("dmarc_reports.id"), nullable=False)
|
|
|
|
# Source information
|
|
source_ip = Column(String, nullable=False, index=True)
|
|
count = Column(Integer, nullable=False, default=0)
|
|
|
|
# Policy evaluation
|
|
disposition = Column(String, nullable=False) # none, quarantine, reject
|
|
dkim = Column(String, nullable=True) # pass, fail
|
|
spf = Column(String, nullable=True) # pass, fail
|
|
|
|
# Identifiers
|
|
header_from = Column(String, nullable=True)
|
|
envelope_from = Column(String, nullable=True)
|
|
|
|
# Authentication details (optional JSON fields)
|
|
dkim_auth_details = Column(Text, nullable=True) # JSON array of DKIM results
|
|
spf_auth_details = Column(Text, nullable=True) # JSON array of SPF results
|
|
|
|
# Relationships
|
|
report = relationship("DMARCReport", back_populates="records")
|
|
|
|
def __repr__(self):
|
|
return f"<ReportRecord {self.id} ({self.source_ip})>" |