DMARC
From Freephile Wiki
TLDR[edit | edit source]
You need to have SPF and DKIM properly established first.
(assuming your domain is 'example.com') Publish a DNS TXT record with this label[1]:
_dmarc.example.com
and this value
v=DMARC1; p=none; rua=mailto:postmaster@example.com;
try http://kitterman.com/dmarc/assistant.html
Background[edit | edit source]
IETF Specification[edit | edit source]
https://tools.ietf.org/html/rfc7489
Vendors[edit | edit source]
Dmarcian[edit | edit source]
https://dmarcian.com/ is a place where you can get your reports nicely aggregated and reported. See their
- video about DMARC benefits
- Their project deployment process is spot on. It's a great example of how deploying technology into an organization is more about the people, process and cross-functional training plus 'wiki' knowledge left at the end of the process than it is about the technology alone.
- deployment checklist
- Inspector: https://dmarcian.com/dmarc-inspector/equality-tech.com
- Mission Control is their account 'dashboard'
Tools[edit | edit source]
dig any _dmarc.example.com +trace
See Also[edit | edit source]
Add a DMARC record in Google support
References[edit source]
- ↑ Namecheap has a particular quirk where the 'label' (or host) portion of the TXT record should just be '_dmarc' and their system will append the domain for you.
