Setting up outbound DMARC (and getting reports)

assuming you got outbound SPF and DKIM up and running already

DNS record in Da Place

;DMARC
_dmarc          IN TXT "v=DMARC1; p=none; rua=mailto:EMAIL,mailto:EMAIL2; ruf=mailto:EMAIL,mailto:EMAIL2; aspf=s; adkim=s"

policies are

p=none
p=quarantine
p=reject

reports are

    rua for aggregate reports
    ruf for forensic reports

you can only obtain reports to emails addresses who’s domain you own – eventually allow reports to be sent there

vi os3.su.db

nethence.com._report._dmarc IN TXT v=DMARC1

vi os3.su.db

os3.su._report._dmarc IN TXT v=DMARC1

Acceptance

inbound

host -t txt _dmarc.nethence.com
host -t txt DOMAIN._report._dmarc.DOMAIN2

outbound

…try to see if you’re doing the checks already? (TODO)

Resources

overview

Domain-based Message Authentication, Reporting and Conformance (DMARC) https://tools.ietf.org/id/draft-kucherawy-dmarc-base-03.html

Frequently Asked Questions https://dmarc.org/wiki/FAQ

Overview https://dmarc.org/overview/

DMARC Technical Specification https://dmarc.org/resources/specification/

Policy Modes: Quarantine vs Reject https://dmarcian.com/policy-modes-quarantine-vs-reject/

tutorials

DMARC DNS Setup: How to Add DMARC at your DNS Provider https://mxtoolbox.com/dmarc/details/how-to-setup-dmarc

How to Set Up and Implement DMARC Email Security https://www.esecurityplanet.com/applications/how-to-set-up-implement-dmarc-email-security.html#DMARC

Follow this guide to setup a DMARC record for your domain(s) in GoDaddy https://www.dmarcanalyzer.com/dmarc/dmarc-record-setup-guides/dmarc-setup-guide-godaddy/

How to set up a DMARC record https://www.esecurityplanet.com/applications/how-to-set-up-implement-dmarc-email-security.html#DMARC

How to create a DMARC record? https://www.dmarcanalyzer.com/dmarc/create-dmarc-record/

How does “External Domain Verification” work https://www.dmarcanalyzer.com/how-does-external-domain-verification-work/

tools

DMARC Check Tool - Check DMARC Records for Errors https://mxtoolbox.com/DMARC.aspx

DMARC record generator https://www.dmarcanalyzer.com/dmarc/dmarc-record-generator/

DMARC Record Check https://www.dmarcanalyzer.com/dmarc/dmarc-record-check/

DMARC Record Checker https://dmarcian.com/dmarc-inspector/

reports

What is the usefulness of choosing ‘iodef’ versus ‘afrf" ? https://dmarc-discuss.dmarc.narkive.com/fPFOrGbH/what-is-the-usefulness-of-choosing-iodef-versus-afrf