DMARC DNS Records for Mail Services

Sample DMARC:

v=DMARC1; p=quarantine; sp=quarantine; pct=100; ri=86400; rua=mailto:dmarc@yourdomain.com

The sample above means that the DMARC policy is set to ‘Quarantine’ (p=quarantine). This offers moderate protection against spoofing. Enhance your policy to ‘Reject’ (p=reject) for stronger enforcement by regularly monitoring legitimate email senders through DMARC Aggregate Reports.

The subdomain’s DMARC policy is set to “Quarantine” (sp=quarantine). This offers moderate protection against spoofing. Enhance your subdomain’s policy to “Reject” (sp=reject) for stronger enforcement by regularly monitoring legitimate email senders through DMARC Aggregate Reports.

Above is a sample DMARC record which you can customize as you see fit to your organization.

The DMARC is a DNS TXT record:

_dmarc.yourdomain.com (Type: TXT)

Core Record Fields

• Host / Name: Enter _dmarc (the leading underscore is required, and your DNS host will automatically append your domain name).
• Type: Select TXT.
• Value / Content: The configuration string containing your DMARC tags. [1, 2, 3, 4]

Key Tags Explained

• v=DMARC1: Identifies the record as DMARC version 1 (must be uppercase and placed first). [1, 2]
• p=: The policy for handling failing emails:
  • p=none: Monitor and gather reports without blocking mail (recommended for initial testing).
  • p=quarantine: Send failing emails to the spam/junk folder.
  • p=reject: Block failing emails entirely. [1, 2, 3]
• rua=mailto:: The email address where aggregate reporting data is sent. [1, 2]