Part of MikeNetworks®

Free tool

Build your DMARC record

Pick a policy and a report address; the record to publish at _dmarc.yourdomain appears below, with notes on the choices. Start with p=none to collect reports, tighten once SPF and DKIM pass for all your real mail.

Percentage of failing mail the policy applies to

100 unless you are rolling out gradually.

Address for aggregate reports

A mailbox you read, or a reporting service. Reports are XML, one per receiver per day.

What this checks

What the tags mean

p is the policy for mail that fails both SPF and DKIM alignment; sp the same for subdomains; pct the share of failing mail the policy is applied to; rua where daily aggregate reports go; adkim and aspf whether the DKIM or SPF domain must match the From domain exactly (strict) or may be a subdomain (relaxed). The record is a single TXT entry at _dmarc.domain; a second one makes receivers ignore DMARC entirely.

Related tools

More in this set

  • Mail DNS check MX, SPF, DKIM, DMARC, MTA-STS and TLS-RPT in one run.
  • SPF check Every mechanism explained, includes followed, lookups counted.
  • DKIM check The key behind a selector: type, length, flags.
  • Email header analyser Hops, delays and authentication results from pasted headers.
  • MTA-STS check The DNS records behind MTA-STS and TLS-RPT.

All tools Glossary

Mailboxes in Luxembourg

Need a mail provider that sets these for you?

NovaNode Mail gives you the MX, SPF, DKIM and DMARC records to copy into your DNS, with mailboxes stored in Luxembourg.

See NovaNode Mail