{"id":2846,"date":"2021-03-18T11:25:06","date_gmt":"2021-03-18T11:25:06","guid":{"rendered":"https:\/\/prodmarc.com\/knowledge\/?p=172"},"modified":"2021-03-18T11:25:06","modified_gmt":"2021-03-18T11:25:06","slug":"how-to-create-dmarc-record-2","status":"publish","type":"post","link":"https:\/\/knowledge.progist.net\/index.php\/2021\/03\/18\/how-to-create-dmarc-record-2\/","title":{"rendered":"How to create DMARC record?"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"2846\" class=\"elementor elementor-2846\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-23a8cfdd elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"23a8cfdd\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-dee4c9d\" data-id=\"dee4c9d\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-38505a92 elementor-widget elementor-widget-text-editor\" data-id=\"38505a92\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\nA DMARC record is the record where the DMARC rulesets are defined. The DMARC record contains the policy. The DMARC record should be placed in your DNS. The TXT record name should be \u201c_dmarc.example.com.\u201d where \u201cexample.com\u201d is replaced with your actual domain name (or subdomain). Common tags used in DMARC TXT records:<br><p><table style='width:100%; border: 1px solid lightgrey;'><tr><th style='border:1px solid lightgrey'>Tag<\/th><th style='border:1px solid lightgrey'>Default<\/th><th style='border:1px solid lightgrey'>Translation<\/th><\/tr><tr><td style='border:1px solid lightgrey;'>v<\/td><td style='border:1px solid lightgrey;'>DMARC 1<\/td><td style='border:1px solid lightgrey;'>The DMARC version should always be &#8216;DMARC1&#8217;. Note: A wrong, or absent DMARC version tag would cause the entire record to be ignored.<\/td><\/tr><tr><td style='border:1px solid lightgrey;'>p<\/td><td style='border:1px solid lightgrey;'>none<\/td><td style='border:1px solid lightgrey;'>Policy applied to emails that fails the DMARC check. Authorized values: &#8216;none&#8217;, &#8216;quarantine&#8217;, or &#8216;reject&#8217;. &#8216;none&#8217; is used to collect feedback and gain visibility into email streams without impacting existing flows. \u201cquarantine\u201d allows Mail Receivers to treat email that fails the DMARC check as suspicious. Most of the time, they will end up in your SPAM folder.\u201creject\u201d outright rejects all emails that fail the DMARC check<\/td><\/tr><tr><td style='border:1px solid lightgrey;'>adkim<\/td><td style='border:1px solid lightgrey;'>r<\/td><td style='border:1px solid lightgrey;'>Specifies &#8216;Alignment Mode&#8217; for DKIM signatures. Authorized values: &#8216;r&#8217;, &#8216;s&#8217;. &#8216;r&#8217;, or &#8216;Relaxed Mode&#8217;, allows Authenticated DKIM d= domains that share a common Organizational Domain with an email\u2019s \u201cheader-From:\u201d domain to pass the DMARC check. &#8216;s&#8217;, or &#8216;Strict Mode&#8217; requires exact matching between the DKIM d= domain and an email\u2019s \u201cheader-From:\u201d domain.<\/td><\/tr><tr><td style='border:1px solid lightgrey;'>aspf<\/td><td style='border:1px solid lightgrey;'>r<\/td><td style='border:1px solid lightgrey;'>Specifies &#8216;Alignment Mode&#8217; for SPF. Authorized values: &#8216;r&#8217;, &#8216;s&#8217;. &#8216;r&#8217;, or &#8216;Relaxed Mode&#8217; allows SPF Authenticated domains that share a common Organizational Domain with an email\u2019s &#8216;header-From:&#8217; domain to pass the DMARC check. &#8216;s&#8217;, or &#8216;Strict Mode&#8217; requires exact matching between the SPF domain and an email\u2019s \u201cheader-From:\u201d domain.<\/td><\/tr><tr><td style='border:1px solid lightgrey;'>sp<\/td><td style='border:1px solid lightgrey;'>p = value<\/td><td style='border:1px solid lightgrey;'>Policy to apply to email from a sub-domain of this DMARC record that fails the DMARC check. Authorized values: &#8216;none&#8217;, &#8216;quarantine&#8217;, or  &#8216;eject&#8217;. This tag allows domain owners to explicitly publish a \u201cwildcard\u201d sub-domain policy.<\/td><\/tr><tr><td style='border:1px solid lightgrey;'>fo<\/td><td style='border:1px solid lightgrey;'>0<\/td><td style='border:1px solid lightgrey;'>Forensic reporting options. Authorized values: &#8216;0&#8217;, &#8216;1&#8217;, &#8216;d&#8217;, or &#8216;s&#8217;. &#8216;0&#8217; generates reports if all underlying authentication mechanisms fail to produce a DMARC pass result, &#8216;1&#8217; generates reports if any mechanisms fail, &#8216;d&#8217; generates reports if DKIM signature failed to verify, &#8216;s&#8217; generates reports if SPF failed<\/td><\/tr><tr><td style='border:1px solid lightgrey;'>ruf<\/td><td style='border:1px solid lightgrey;'>none<\/td><td style='border:1px solid lightgrey;'>The list of URIs for receivers to send Forensic reports to. Note: This is not a list of email addresses, as DMARC requires a list of URIs of the form &#8216;mailto:address@example.org&#8217;.<\/td><\/tr><tr><td style='border:1px solid lightgrey;'>rua<\/td><td style='border:1px solid lightgrey;'>none<\/td><td style='border:1px solid lightgrey;'>The list of URIs for receivers to send XML feedback to. Note: This is not a list of email addresses, as DMARC requires a list of URIs of the form &#8216;mailto:address@example.org&#8217;.<\/td><\/tr><tr><td style='border:1px solid lightgrey;'>rf<\/td><td style='border:1px solid lightgrey;'>afrf<\/td><td style='border:1px solid lightgrey;'>The reporting format for individual Forensic reports. Authorized values: &#8216;afrf&#8217;, &#8216;iodef&#8217;.<\/td><\/tr><tr><td style='border:1px solid lightgrey;'>pct<\/td><td style='border:1px solid lightgrey;'>100<\/td><td style='border:1px solid lightgrey;'>The percentage tag tells receivers to only apply policy against email that fails the DMARC check x amount of the time. For example, &#8216;pct=25&#8217; tells receivers to apply the &#8216;p=&#8217; policy 25% of the time against email that fails the DMARC check. Note: The policy must be &#8216;quarantine&#8217; or &#8216;reject&#8217; for the percentage tag to be applied<\/td><\/tr><tr><td style='border:1px solid lightgrey;'>ri<\/td><td style='border:1px solid lightgrey;'>86400<\/td><td style='border:1px solid lightgrey;'>The reporting interval for how often you\u2019d like to receive aggregate XML reports. You\u2019ll most likely receive reports once a day regardless of this setting.<\/td><\/tr><\/table><\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>A DMARC record is the record where the DMARC rulesets are defined. The DMARC record contains the policy. The DMARC record should be placed in your DNS. The TXT record<\/p>\n<p><a href=\"https:\/\/knowledge.progist.net\/index.php\/2021\/03\/18\/how-to-create-dmarc-record-2\/\" class=\"more-link\">Continue Reading<span class=\"screen-reader-text\">How to create DMARC record?<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_eb_attr":"","om_disable_all_campaigns":false,"footnotes":""},"categories":[7],"tags":[35,56,60,61,62],"class_list":["post-2846","post","type-post","status-publish","format-standard","hentry","category-dmarc","tag-create-dmarc-record","tag-dmarc","tag-dmarc-record","tag-dmarc-record-tags","tag-dmarc-txt-record"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/knowledge.progist.net\/index.php\/wp-json\/wp\/v2\/posts\/2846","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/knowledge.progist.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/knowledge.progist.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/knowledge.progist.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/knowledge.progist.net\/index.php\/wp-json\/wp\/v2\/comments?post=2846"}],"version-history":[{"count":0,"href":"https:\/\/knowledge.progist.net\/index.php\/wp-json\/wp\/v2\/posts\/2846\/revisions"}],"wp:attachment":[{"href":"https:\/\/knowledge.progist.net\/index.php\/wp-json\/wp\/v2\/media?parent=2846"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/knowledge.progist.net\/index.php\/wp-json\/wp\/v2\/categories?post=2846"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/knowledge.progist.net\/index.php\/wp-json\/wp\/v2\/tags?post=2846"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}