Monitoring DMARC

DMARC enables admins to receive external SPF, DKIM and DMARC evaluations on request.

DMARC Reporting types

You can request two types of report.

1. Aggregate Feedback Report: Contains DMARC related data for a time
2. Failure Report: Reports on forensic data for every email that failed a DMARC check

Failure reports generally should be avoided, the main reason being that whilst useful they can contain a lot of personal data.

DMARC Reporting tags

To request reports, you should simply implement tags into your DMARC records.

ri - Time interval between aggregate reports, in seconds. rua - DMARC URIs to send aggregate feedback reports to ruf - DANGER - Triggers failure reports!

DMARC URIs

To correctly format an rua tag you should use mailto: followed by an email address.

You must use percent-encoding required for commas (%2C) and exclamation marks (%21) You can also trail an exclamation mark to specify a maximum report size.

Examples

• v=DMARC1; p=none; rua=mailto:reports@red.example.net
• v=DMARC1; p=reject; aspf=s; adkim=s;rua=mailto:dmarc_rua@debigare.com!25m