Configure outbound DMARC
Email Security provides the ability to participate in DMARC (Domain Message Authentication Reporting and Conformance) for email authentication.
Below configuring any DMARC DNS entry, you must ensure that the following is true:
1. You have enabled DKIM for each domain in your account.
2. You have enabled SPF for each domain in your account.
1. You have enabled DKIM for each domain in your account.
2. You have enabled SPF for each domain in your account.
Create a DNS Resource Record of type TEXT with a record name like _dmarc.domain.TLD
The record name must start with
_dmarc (including the underscore).For example, the Resource Record name for domain tonyfrankum.co.uk is _dmarc.tonyfrankum.co.uk
The text content of a simple starter record should be similar to
v=DMARC1; p=none; ruf=mailto:DMARCReports@tonyfrankum.co.uk; aspf=s
aspf=sspecifies "strict" checking of SPF (the default is "relaxed").ruf=provides the email address to which DMARC failure reports should be sent.p=nonespecifies a policy of "none" - the recipient should not reject or quarantine any messages simply because they do not align with this DMARC policy. The recipient could of course reject or quarantine the messages for other reasons.
You should start to receive reports to the email address you specified. After reviewing the reports and confirming that valid messages from your domains do pass evaluation, you may then request that recipients act on messages that do not align with the policy, by changing the policy to quarantine or reject.