Best DMARC record example and explanation

[isscbta]

Here is an example of a strong DMARC (Domain-based Message Authentication, Reporting, and Conformance) record:

Code: Select all

"v=DMARC1; p=reject; sp=none; pct=100; ri=86400; rua=mailto:[email protected];"

Explanation of each tag:
• p=reject: The policy for your domain. It instructs mail servers to reject all emails that fail SPF and DKIM checks.
• sp=none: The policy for subdomains. In this case, no specific action is defined for emails coming from subdomains.
• pct=100: Apply the DMARC policy to 100% of the emails.
• ri=86400: Mail servers should send DMARC aggregate reports every 24 hours (86400 seconds).
• rua=mailto:[email protected]: Specifies the email address where DMARC aggregate reports should be sent.

Important Tip:
If someone is spoofing your domain and you want to avoid rejected (bounced) spoofed emails being sent back to your real users, consider setting p=quarantine; instead of p=reject;
This way, spoofed emails will be placed in the recipient’s spam/junk folder instead of being outright rejected to you.