Where do I add the DMARC record?

As a TXT record on host “_dmarc”. For the subdomain shop.example.com the host would be “_dmarc.shop”.

Which policy should I start with?

With “none”. That blocks nothing but collects reports so you can see whether SPF/DKIM are correct for all your senders. Only then move to “quarantine” and “reject”.

What is the rua address for?

Receiving servers send daily aggregate reports (XML) to the rua address. Without it you have no visibility into who sends mail in your name.

DMARC Configurator: create your DMARC record

Start in monitoring mode and tighten the policy gradually later.

Your domain (optional)for host display & checking external report addressesPolicy (p)

Nothing is blocked – you collect reports first.

Report address (rua) – recommended

Advanced options

Forensic reports (ruf, optional)Subdomain policy (sp)Share of mail (pct): 100%

DKIM alignment (adkim)SPF alignment (aspf)

Forensic trigger (fo)

Your DMARC record

Host / name_dmarc

Value (TXT)

v=DMARC1; p=none

p=none only monitors and does not protect yet. Review reports and move to quarantine/reject step by step.

Without a rua address you receive no reports.

What is DMARC?

DMARC builds on SPF and DKIM. The “_dmarc” DNS record tells receiving servers what to do with mail that fails authentication – nothing, move to spam, or reject. You also receive reports about who sends in your name.

How it works

Start with policy “none” and a report address (rua). Review the reports for a few weeks until all legitimate senders pass SPF/DKIM, then gradually move to “quarantine” and “reject”. Add the value as a TXT record on host “_dmarc”.

Frequently asked questions

Where do I add the DMARC record?: As a TXT record on host “_dmarc”. For the subdomain shop.example.com the host would be “_dmarc.shop”.
Which policy should I start with?: With “none”. That blocks nothing but collects reports so you can see whether SPF/DKIM are correct for all your senders. Only then move to “quarantine” and “reject”.
What is the rua address for?: Receiving servers send daily aggregate reports (XML) to the rua address. Without it you have no visibility into who sends mail in your name.

Domain with regfish?

In the regfish DNS editor you save SPF, DMARC and other records in a few clicks – including assistants right in the input form.