DMARC Record Construction
At the beginning of the record, v=DMARC1 identifies this as a DMARC record. The following components define the policy and action if failed. Create a TXT record with _dmarc as the host.
Example
v=DMARC1; p=quarantine; rua=mailto:<DMARC Report Address>; ruf=mailto:<DMARC Failure Report Address>; adkim=r; aspf=r; fo=0; sp=reject; pct=100; ri=604800
| Tag | TagValue | Name | Description |
|---|---|---|---|
| v | DMARC1 | Version | Identifies the record retrieved as a DMARC record. It must be the first tag in the list. |
| p | quarantine | Policy | Policy to apply to email that fails the DMARC test. Valid values can be 'none', 'quarantine', or 'reject'. |
| rua | mailto:<DMARC Report Address> | Receivers | Addresses to which aggregate feedback is to be sent. Comma separated plain-text list of DMARC URIs. |
| ruf | mailto:<DMARC Failure Report Address> | Forensic Receivers | Addresses to which message-specific failure information is to be reported. Comma separated plain-text list of DMARC URIs. |
| adkim | r | Alignment Mode DKIM | Indicates whether strict or relaxed DKIM Identifier Alignment mode is required by the Domain Owner. Valid values can be 'r' (relaxed) or 's' (strict mode). |
| aspf | r | Alignment Mode SPF | Indicates whether strict or relaxed SPF Identifier Alignment mode is required by the Domain Owner. Valid values can be 'r' (relaxed) or 's' (strict mode). |
| fo | 0 | Forensic Reporting | Provides requested options for generation of failure reports. Valid values are any combination of characters '01ds' seperated by ':'. |
| sp | reject | Sub-domain Policy | Requested Mail Receiver policy for all subdomains. Valid values can be 'none', 'quarantine', or 'reject'. |
| pct | 100 | Percentage | Percentage of messages from the Domain Owner's mail stream to which the DMARC policy is to be applied. Valid value is an integer between 0 to 100. |
| ri | 604800 | Reporting Interval | Indicates a request to Receivers to generate aggregate reports separated by no more than the requested number of seconds. Valid value is a 32-bit unsigned integer. |
NEXT STEPS
Configure SPF Policy
Configure DKIM Signature