DMARC

DMARC is used to protect your email from email spoofing. DMARC use SPF and DKIM record to validate your email.

DMARC is a TXT record added in your domain DNS.

DMARC record look like

v=DMARC1;p=POLICY_HERE;pct=100;rua=mailto:[email protected];ruf=mailto:[email protected];rf=afrf

p=POLICY_HERE

This specifies what to do with incoming email that fails DMARC.

Valid options are none, quarantine and reject.

p=none – used for monitoring. If DMARC fails, the remote mail server will send a mail to “rua” or “ruf” tags specified in the DMARC record.

p=quarantine – tell the recipient mail server to put the message in the SPAM folder if DMARC fails.

p=reject – reject mail if DMARC fails.

rf=afrf – Specify the type of report you will get.

Reject Emails that fail DKIM/SPF check

v=DMARC1; p=reject; rua=mailto:[email protected]

Filter and Reject Only 95% mails

v=DMARC1; p=reject; pct=95; rua=mailto:[email protected]

v=DMARC1; p=quarantine; rua=mailto:[email protected]

Back to Mail