DMARC

Policy readout, guided generation and validation of report recipients.

Build a policy

RFC default values are not written out: a shorter record reads better and behaves identically.

Handling of unauthenticated messages

p=none — do nothing, just observe — the starting step

p=quarantine — file as spam

p=reject — refuse — the strongest protection

Reports Aggregate report address (rua)

Without it, DMARC teaches you nothing: it is the only way to learn who sends in your name and whether a legitimate sender is failing.

Failure report address (ruf) (optional)

These reports contain extracts of real messages. Few recipients still send them, for that reason.

Fine tuning

DKIM alignment

SPF alignment

Share applied (%)