DMARC Settings
The DMARC Settings page lets you configure DMARC policy, reporting, and alignment for your domain.
Verification Status
A status indicator at the top of the page shows the current verification state of your domain's DMARC DNS delegation record, along with the date it was last checked. Click Verify to re-check the record immediately, or Setup Instructions to view the DNS records you need to publish.
Note: If your domain is only partially verified, saving your changes shows a warning that they will not take effect until the DMARC record is fully delegated and verified. A partially verified domain only processes DMARC aggregate reports.
Click View Raw DMARC Record to see the raw DMARC DNS record as currently configured, based on the policy and settings below.
Policy Settings
| Policy | Description |
|---|---|
| None | Monitors email without taking action; reports are sent but no messages are blocked or filtered. |
| Quarantine | Suspicious emails are marked and delivered to spam or junk folders. |
| Reject | Emails that fail DMARC are completely blocked and not delivered. |
Apply Different Subdomain Policy
Allows you to specify a different DMARC policy for subdomains. Set to No to have subdomains inherit the parent domain's DMARC policy.
Percentage
Specifies the percentage of emails to which recipient servers should apply the DMARC policy. All other emails have the next lower DMARC policy applied (e.g. if the published policy is Reject and the percentage is 30%, the remaining 70% have Quarantine applied).
Aggregate Reports
Report Interval
How often recipient servers should send aggregate reports.
This setting is usually ignored: most providers report on a 24-hour cycle regardless.
Reports Will be Sent to
Specify the email addresses that should receive the raw RUA DMARC aggregate reports.
Note: Aggregate reports are always also sent to DMARC Manager's unique reporting address so the platform can process them, in addition to any email addresses you add here.
Failure Reports
| Option | Description |
|---|---|
| Disabled | Failure report processing by DMARC Manager is disabled. |
| Enabled | Failure report processing is enabled. |
| Specific Recipients | Send failure reports to specific recipients other than the DMARC Manager platform. |
Note: Switching from Disabled to Enabled shows a confirmation dialog explaining that failure reports may contain personal information, such as email addresses or message content. If your organisation's legal policies prevent you from enabling this, choose Specific Recipients instead and process reports manually.
Note: Choosing Specific Recipients prevents DMARC Manager from capturing failure reports for this domain.
Report Options
| Option | Description |
|---|---|
| SPF or DKIM fail and don't align | Generate a report when SPF or DKIM fails and doesn't align. |
| SPF and DKIM fail and don't align | Generate a report when both SPF and DKIM fail and don't align. |
| DKIM fails regardless of alignment | Generate a report when DKIM fails for any reason. |
| SPF fails regardless of alignment | Generate a report when SPF fails for any reason. |
Alignment Settings
DKIM Alignment Mode
| Mode | Description |
|---|---|
| Relaxed | Allows subdomain matches (e.g. mail.example.com aligns with example.com) |
| Strict | Requires exact domain match |
SPF Alignment Mode
| Mode | Description |
|---|---|
| Relaxed | Allows subdomain matches (e.g. mail.example.com aligns with example.com) |
| Strict | Requires exact domain match |
Related Topics
- What is DMARC?: Introduction to DMARC and its purpose
- How Does DMARC Work?: Technical details about DMARC operation
- Why is DMARC Important?: Benefits and significance of DMARC
- Limitations of DMARC: Current constraints and challenges
- DMARC Syntax: Detailed information about DMARC DNS record fields
- DMARC Reports: Introduction to DMARC reporting, frequency and limitations