How To Setup DMARC
Domain-based Message Authentication, Reporting and Conformance (DMARC) is a validation system for email that is used to detect and prevent email spoofing.
What Is DMARC?
DMARC ensures that legitimate email is properly authenticated with previously established DKIM and SPF standards. By doing this it will block fraudulent activity appearing to come from domains under the organization’s control, whether they are active sending domains or not.
How To Set DMARC?
To set a DMARC record you’ll need to add a TXT record to your DNS zone. In cPanel, you can create/edit DNS records by using the Zone Editor. Alternatively, you can add DNS records through your client area on our website by using the Manage Domains menu to get to the DNS Zone interface. The following example will illustrate how a DMARC record can look, and the different fields that are available. (Links to online DMARC record generators listed at the bottom)
v=DMARC1; p=reject; rua=mailto:email@example.com
Change the “mailto:firstname.lastname@example.org” address to the email address that reports should be sent to.
TXT Data This field will determine how remote servers will process any of your domain’s emails that don’t pass SPF/DKIM validation. The following options are available:
None: “v=DMARC1; p=none; sp=none; rf=afrf; pct=100; ri=86400”
Reject: “v=DMARC1; p=reject; sp=none; rf=afrf; pct=100; ri=86400”
Quarantine: “v=DMARC1; p=quarantine; sp=none; rf=afrf; pct=100; ri=86400”By adding an email address, you can get email reports when DMARC validations fail:None: “v=DMARC1; p=none; sp=none; ruf=mailto:email@example.com; rf=afrf; pct=100; ri=86400″
Reject: “v=DMARC1; p=reject; sp=none; rf=afrf; pct=100; ruf=mailto:firstname.lastname@example.org; ri=86400″
Quarantine: “v=DMARC1; p=quarantine; sp=none; ruf=mailto:email@example.com; rf=afrf; pct=100; ri=86400″
Looking for a DMARC record generator?
Here are a couple of links to online DMARC record generators that can be used to create the TXT record that can then be copied and pasted into the DNS Zone editor.
DKIM & DMARC