Configure outbound DMARC
Email Security provides the ability to participate in DMARC (Domain Message Authentication Reporting and Conformance) for email authentication.
1. You have enabled DKIM for each domain in your account.
2. You have enabled SPF for each domain in your account.
Create a DNS Resource Record of type
TEXT with a record name like
_dmarc(including the underscore).
For example, the Resource Record name for domain
The text content of a simple starter record should be similar to
v=DMARC1; p=none; ruf=mailto:DMARCReports@tonyfrankum.co.uk; aspf=s
aspf=sspecifies "strict" checking of SPF (the default is "relaxed").
ruf=provides the email address to which DMARC failure reports should be sent.
p=nonespecifies a policy of "none" - the recipient should not reject or quarantine any messages simply because they do not align with this DMARC policy. The recipient could of course reject or quarantine the messages for other reasons.
You should start to receive reports to the email address you specified. After reviewing the reports and confirming that valid messages from your domains do pass evaluation, you may then request that recipients act on messages that do not align with the policy, by changing the policy to