Skip to main content

DMARC Record Construction

At the beginning of the record, v=DMARC1 identifies this as a DMARC record. The following components define the policy and action if failed. Create a TXT record with _dmarc as the host.


Example

v=DMARC1; p=quarantine; rua=mailto:<DMARC Report Address>; ruf=mailto:<DMARC Failure Report Address>; adkim=r; aspf=r; fo=0; sp=reject; pct=100; ri=604800


Tag TagValue Name Description
v DMARC1 Version Identifies the record retrieved as a DMARC record. It must be the first tag in the list.
p quarantine Policy Policy to apply to email that fails the DMARC test. Valid values can be 'none', 'quarantine', or 'reject'.
rua mailto:<DMARC Report Address> Receivers Addresses to which aggregate feedback is to be sent. Comma separated plain-text list of DMARC URIs.
ruf mailto:<DMARC Failure Report Address> Forensic Receivers Addresses to which message-specific failure information is to be reported. Comma separated plain-text list of DMARC URIs.
adkim r Alignment Mode DKIM Indicates whether strict or relaxed DKIM Identifier Alignment mode is required by the Domain Owner. Valid values can be 'r' (relaxed) or 's' (strict mode).
aspf r Alignment Mode SPF Indicates whether strict or relaxed SPF Identifier Alignment mode is required by the Domain Owner. Valid values can be 'r' (relaxed) or 's' (strict mode).
fo 0 Forensic Reporting Provides requested options for generation of failure reports. Valid values are any combination of characters '01ds' seperated by ':'.
sp reject Sub-domain Policy Requested Mail Receiver policy for all subdomains. Valid values can be 'none', 'quarantine', or 'reject'.
pct 100 Percentage Percentage of messages from the Domain Owner's mail stream to which the DMARC policy is to be applied. Valid value is an integer between 0 to 100.
ri 604800 Reporting Interval Indicates a request to Receivers to generate aggregate reports separated by no more than the requested number of seconds. Valid value is a 32-bit unsigned integer.


NEXT STEPS

Configure SPF Policy

Configure DKIM Signature