DMARC Tutorial – How to set up DNS DMARC record | Protect Your Doman

DMARC stands for Domain-Based Message Authentication Reporting & Conformance.

DMARC was first published in 2012; It is a protocol built by Google, Microsoft, Yahoo and PayPal to prevent email abuse. It is supported by all major mail service providers (if not all).

DMARC is used to determine the authenticity of an email message. It lets you control who can send emails using your domain and allows you to set various instructions for the receiving email server

To get started with DMARC, you must have both your SPF and DKIM records set.

Read the full blog post at

DMARC record is a TXT record that defines what an email receiver should do with mail sent on your domain behalf that is not aligned with your domain policy.

The DMARC record is a TXT record that is added to your domain DNS; It basically includes instructions for the receiving email server on how to handle mail sent under your domain that does not align with your Policies.
We can also specify inside our DMARC TXT record, an email address so that we can receive 2 very important reports:
1. DMARC – Aggregate Report (RUA)
2. DMARC – Forensic Report (RUA)

A DMARC aggregate report contains information about the authentication status of messages sent on your domain behalf. Aggregate reports are free reports that are sent to you and contain information such as:
• Source that sent the message
• Domain that was used to send the message
• Sending IP address
• Number of messages sent on a specific date
• DKIM/SPF sending domain
• DKIM/SPF authentication result
• DMARC results

A DMARC Forensic report are generated when the SPF or DKIM do not align with your DMARC.

Forensic reports are free reports sent to you ONLY when an email sent by your domain fails DMARC authentication. It contains information such as:
• The email “to” field.
• The email “from” field. (From address, Mail from address, DKIM from address).
• IP address of the sender.
• The email “Subject” field.
• Authentication Result (SPF, DKIM, DMARC).
• Message ID
• URLs
• Delivery Result
• ISP Information

Emad Zaamout is inviting you to join Wealthsimple. Use this link, and get TWO free stocks to trade ?

Chapters
0:00 Introduction
0:52 What is DMARC?
2:13 What is DMARC Aggregate Report?
2:52 What is DMARC Forensic Report?
3:34 How to create DMARC Record?
3:52 DMARC Record – Syntax
9:34 Validate DMARC Record

source