DMARC

The printable version is no longer supported and may have rendering errors. Please update your browser bookmarks and please use the default browser print function instead.

TLDR edit

You need to have SPF and DKIM properly established first.

(assuming your domain is 'example.com') Publish a DNS TXT record with this label^[1]:
_dmarc.example.com
and this value
v=DMARC1; p=none; rua=mailto:postmaster@example.com;

try http://kitterman.com/dmarc/assistant.html

Background edit

https://dmarc.org/

IETF Specification edit

https://tools.ietf.org/html/rfc7489

Vendors edit

Dmarcian edit

https://dmarcian.com/ is a place where you can get your reports nicely aggregated and reported. See their

video about DMARC benefits
Their project deployment process is spot on. It's a great example of how deploying technology into an organization is more about the people, process and cross-functional training plus 'wiki' knowledge left at the end of the process than it is about the technology alone.
deployment checklist
Inspector: https://dmarcian.com/dmarc-inspector/equality-tech.com
Mission Control is their account 'dashboard'

Tools edit

dig any _dmarc.example.com +trace

References edit

↑ Namecheap has a particular quirk where the 'label' (or host) portion of the TXT record should just be '_dmarc' and their system will append the domain for you.

[1] Namecheap has a particular quirk where the 'label' (or host) portion of the TXT record should just be '_dmarc' and their system will append the domain for you.

[1]