What is DMARC?
DMARC stands for "Domain-based Message Authentication, Reporting & Conformance". It is a security protocol that tells email servers what to do after checking the validity of a domain's SPF and DKIM records.
Prerequisites
Before you add your DMARC record, ensure you have SPF and DKIM correctly set up.
How do I add a DMARC record to my domain?
- Log in to your Drae Ockenden Hosting account.
- Click on 'Domains'.
- Select the domain you wish to add the record to.
- Click 'DNS Management' from the collapsable menu on the left. (If you do not see this option enable DNS Management)
- Click the green '+' Icon to add a new record (appends to the bottom).
- Use the details below to set a standard DMARC record with relaxed security protocols.
Host Name: _dmarc.yourdomain.com
Address/Content: v=DMARC1; p=reject; adkim=r; aspf=r; sp=reject;
Type: TXT
TTL: 3600
Be sure to replace 'yourdomain.com' with the domain you are adding this to.
What does this all mean?
- v is equal to the protocol version (always DMARC1)
- p is equal to the policy for the domain name
- pct is equal to the percentage of messages that should be subject to filtering
- rua determines where any reports should be sent to (aggregated reports).
There are a couple of more advanced options, that are not included in this simplified example.
- ruf determines where “forensic reports” should be sent to.
- sp is the policy for sub-domains
- adkim sets the alignment mode for DKIM
