DMARC checker
Read a domain’s DMARC record tag by tag: its policy for mail that fails, where reports go, how much mail it covers, and whether it only watches.
p=noneWatchMail that fails is delivered as before, and the reports show who sends as the domain.p=quarantineQuarantineMail that fails goes to spam. The step to take once reports show only your own mail.p=rejectRejectMail that fails is refused before anyone sees it.
v=DMARC1- Version
p=reject- Policy for mail that fails
rua=mailto:[email protected]- Where reports go
pct=100- Share of mail it covers
The record sits at _dmarc.example.com. Each step up is taken only when the reports show nothing of yours would fail it.
What does it check?
No rule in the rulebook covers this, so here is what it reads.
- The DMARC record at _dmarc
- Its policy: none, quarantine or reject
- Where reports are sent
- Whether SPF and DKIM line up with the sending domain
Questions
Which DMARC policy should I start with?
p=none, with reports sent to an address you read. Move to quarantine and then reject once the reports show only your own mail.
Do I need DMARC?
Gmail and Yahoo require it of anyone sending them much mail, and it is what stops others sending as your domain.
What are rua reports?
Daily summaries from receivers of the mail that claimed to be from your domain, and whether it passed.
The whole site
One page is one part. A read checks every page against the whole rulebook and says what to fix first.
Read a whole site