Difference between revisions of "DMARC"

From Freephile Wiki
Jump to navigation Jump to search
(expand section on dmarcian)
 
(One intermediate revision by the same user not shown)
Line 2: Line 2:
 
You '''need''' to have [[SPF]] and [[DKIM]] properly established first.
 
You '''need''' to have [[SPF]] and [[DKIM]] properly established first.
  
(assuming your domain is 'example.com') Publish a DNS TXT record with this label:<br />
+
(assuming your domain is 'example.com') Publish a DNS TXT record with this label<ref>Namecheap has a particular quirk where the 'label' (or host) portion of the TXT record should just be '_dmarc' and their system will append the domain for you.</ref>:<br />
 
<code>_dmarc.example.com</code><br />
 
<code>_dmarc.example.com</code><br />
 
and this value<br />
 
and this value<br />
 
<code>v=DMARC1; p=none; rua=mailto:postmaster@example.com;</code>
 
<code>v=DMARC1; p=none; rua=mailto:postmaster@example.com;</code>
 +
 +
try http://kitterman.com/dmarc/assistant.html
  
 
== Background ==
 
== Background ==
Line 16: Line 18:
  
 
== Vendors ==
 
== Vendors ==
 +
=== Dmarcian ===
 
https://dmarcian.com/ is a place where you can get your reports nicely aggregated and reported.
 
https://dmarcian.com/ is a place where you can get your reports nicely aggregated and reported.
 +
See their
 +
* [https://space.dmarcian.com/video-dmarc-benefits/ video about DMARC benefits]
 +
* Their [https://www.youtube.com/watch?v=4jUcAvTMp0Y project deployment process] is spot on. It's a great example of how deploying technology into an organization is more about the people, process and cross-functional training plus 'wiki' knowledge left at the end of the process than it is about the technology alone.
 +
* [https://space.dmarcian.com/deployment/ deployment checklist]
 +
* Inspector: https://dmarcian.com/dmarc-inspector/equality-tech.com
 +
* [https://dmarcian.com/mcontrol/ Mission Control] is their account 'dashboard'
 +
 +
== Tools ==
 +
<code>dig any _dmarc.example.com +trace</code>
  
 
== See Also ==
 
== See Also ==
 
[https://support.google.com/a/answer/2466563 Add a DMARC record] in Google support
 
[https://support.google.com/a/answer/2466563 Add a DMARC record] in Google support
 +
 +
{{References}}
  
 
[[Category:Email]]
 
[[Category:Email]]
 
[[Category:Spam]]
 
[[Category:Spam]]

Latest revision as of 09:02, 5 March 2016

TLDR[edit | edit source]

You need to have SPF and DKIM properly established first.

(assuming your domain is 'example.com') Publish a DNS TXT record with this label[1]:
_dmarc.example.com
and this value
v=DMARC1; p=none; rua=mailto:postmaster@example.com;

try http://kitterman.com/dmarc/assistant.html

Background[edit | edit source]

DMARC-2015-logo-small-202x110.png

https://dmarc.org/

IETF Specification[edit | edit source]

https://tools.ietf.org/html/rfc7489

Vendors[edit | edit source]

Dmarcian[edit | edit source]

https://dmarcian.com/ is a place where you can get your reports nicely aggregated and reported. See their

Tools[edit | edit source]

dig any _dmarc.example.com +trace

See Also[edit | edit source]

Add a DMARC record in Google support

References[edit source]

  1. Namecheap has a particular quirk where the 'label' (or host) portion of the TXT record should just be '_dmarc' and their system will append the domain for you.