#!/usr/bin/env python3
"""
DMARC Record Checker - Email Policy Validator
Validates DMARC policies for email authentication
"""
import dns.resolver
import re

def check_dmarc_record(domain):
    """Check DMARC record for a domain"""
    try:
        dmarc_domain = f'_dmarc.{domain}'
        txt_records = dns.resolver.resolve(dmarc_domain, 'TXT')

        for record in txt_records:
            txt = ''.join([s.decode() if isinstance(s, bytes)
                          else s for s in record.strings])
            if txt.startswith('v=DMARC1'):
                # Parse DMARC record
                policy = re.search(r'p=([^;]+)', txt)
                sp = re.search(r'sp=([^;]+)', txt)
                pct = re.search(r'pct=([^;]+)', txt)
                rua = re.search(r'rua=([^;]+)', txt)
                ruf = re.search(r'ruf=([^;]+)', txt)

                return {
                    'domain': domain,
                    'status': 'VALID',
                    'dmarc_record': txt,
                    'policy': policy.group(1) if policy else 'none',
                    'subdomain_policy': sp.group(1) if sp else None,
                    'percentage': pct.group(1) if pct else '100',
                    'aggregate_reports': rua.group(1) if rua else None,
                    'forensic_reports': ruf.group(1) if ruf else None
                }

        return {'domain': domain, 'status': 'MISSING',
                'error': 'No DMARC record found'}
    except dns.resolver.NXDOMAIN:
        return {'domain': domain, 'status': 'MISSING',
                'error': 'DMARC record not found'}
    except Exception as e:
        return {'domain': domain, 'status': 'ERROR',
                'error': str(e)}

if __name__ == '__main__':
    domain = input('Enter domain: ')
    result = check_dmarc_record(domain)
    print(f"Domain: {result['domain']}")
    print(f"Status: {result['status']}")
    if 'policy' in result:
        print(f"Policy: {result['policy']}")
        print(f"Percentage: {result['percentage']}%")