Difference between revisions of "DMARC"
Docs admin (Talk | contribs) |
Docs admin (Talk | contribs) (→How Does DMARC work) |
||
| Line 5: | Line 5: | ||
== How Does DMARC work == | == How Does DMARC work == | ||
| − | DMARC | + | DMARC is based on a DNS TXT record that is added to the _dmarc subdomain of your domain. The format and values of the record defines your DMARC policies as well as where you would like to receive reports. |
| − | + | ||
Acenet recommends setting up a specific email address for the DMARC feedback reports. You can use either "postmaster@" or possibly "dmarc@" your domain as the mailto address in the DNS record below. | Acenet recommends setting up a specific email address for the DMARC feedback reports. You can use either "postmaster@" or possibly "dmarc@" your domain as the mailto address in the DNS record below. | ||
Revision as of 18:59, 21 March 2018
DMARC (Domain-based Message Authentication, Reporting and Conformance) is a standard that allows you to set policies on who can send email for your domain based on DKIM and SPF. If you are new to email authentication, we recommend first reading about SPF and DKIM. In combination with SPF and DKIM, a DMARC policy in DNS allows you to set rules to reject or quarantine (junk folder) emails from sources you do not know. Through support from ISPs (Gmail, Yahoo, Microsoft and more) DMARC also allows you to receive reports on sending activity for your domain.
Contents
How Does DMARC work
DMARC is based on a DNS TXT record that is added to the _dmarc subdomain of your domain. The format and values of the record defines your DMARC policies as well as where you would like to receive reports.
Acenet recommends setting up a specific email address for the DMARC feedback reports. You can use either "postmaster@" or possibly "dmarc@" your domain as the mailto address in the DNS record below.
Configuring DMARC in DNS
To enable DMARC, add a TXT record to your domain's DNS zone file.
1) Log into cPanel
2) In the Domains section of cPanel, click Advanced DNS Zone File.
3) Under Select a Domain, select the domain you want to add a record to.
4) Under Add a record, in the Name text box, type _dmarc
5) In the TTL textbox, enter 14400
6) In the Type list box, select TXT
7) In the TXT Data box, enter the DMARC configuration DATA.
Here are some examples of DMARC configuration
- Enable DMARC monitor mode. With this configuration enabled, the specified e-mail address (in the mailto setting) receives daily reports from providers regarding how many messages were received and whether or not they passed policy checks:
v=DMARC1;p=none;rua=mailto:[email protected]
- Instruct the recipient to quarantine all messages (100%) that do not pass policy checks:
v=DMARC1;p=quarantine;pct=100;
- Instruct the recipient to reject half of all messages (50%) that do not pass policy checks. The remainder should be quarantined:
v=DMARC1;p=reject;pct=50;
8) Click Add Record.
Testing your DMARC DNS record
After adding the DNS TXT record for DMARC, please allow a few hours for DNS Propagation.
Microsoft Windows
Type nslookup at a command prompt. At the nslookup> prompt, type the following commands, replacing example.com with the actual domain name.
set type=txt
_dmarc.example.com
You should see output that resembles the following
_dmarc.example.com text =
"v=DMARC1;p=none;rua=mailto:[email protected]"
Linux and MAC OS X
Type the following command at the command prompt. Replace example.com with your own domain name:
dig +short txt _dmarc.example.com
You should see output similar to the following.
"v=DMARC1; p=none; rua=mailto:[email protected]"
