TLS-RPT Inspector

Inspect TLS reporting (TLS-RPT) DNS records for SMTP TLS failure reporting.

DNS lookups and policy retrieval run from the PacketWizard server with SSRF protections and timeout handling.

What is TLS-RPT Inspector?

TLS-RPT publishes where SMTP TLS failure reports should be sent, complementing MTA-STS with visibility into transport problems.

How it works

Enter a domain. PacketWizard inspects the TLS-RPT DNS record and validates report destination syntax.

Common issues

  • Reports never arrive

    Confirm the rua mailto/https destination can receive reports and that DNS TTL changes have propagated.

Frequently asked questions

Do I need TLS-RPT without MTA-STS?

TLS-RPT is most valuable with MTA-STS, but you can publish reporting early to observe TLS issues.

Continue with these related PacketWizard tools for adjacent diagnostics.