DMARC stands for Domain-based Message Authentication, Reporting & Conformance. It is designed to protect a domain from being used in compromise attacks, phishing emails, email scams and other cyber threat activities.
DMARC makes it easier to prevent these malicious emails by specifying how email servers should react when they receive an email which does not comply with the SPF and DKIM settings. This way you can make sure emails get quarantined, blocked and reported to you.
Step 1: Configure a new DMARC record
You don't have a DMARC record configured right now. The DMARC check will give you an example of a DMARC record which you can apply as shown on the image below.
You can use the record given via the recommendation to configure your DMARC record. Example:
v=DMARC1; p=reject; rua=mailto:[email protected]; ruf=mailto:[email protected]
The record in the recommendation will include the exact record you can use which also configures your domain to send reports to SecurityHive. It includes a code which is different for each customer.
Step 2: Save the DMARC record
Now you'll have to save the DMARC record from step 1. You'll have to do this at your DNS provider. Not sure who your provider is? Check it at www.intodns.com
A DMARC record is a TXT record. It looks like this:
_dmarc TXT v=DMARC1; p=reject; rua=mailto:[email protected]; ruf=mailto:[email protected]
A DMARC record may have effect on your email traffic. Make sure your email servers are configured in your SPF record.
Step 3: Wait & refresh
Due to its nature, it may take up to 24 hours for DNS changes to be reflected. Wait for some time and hit the refresh button in Mail Spectator to retrieve the latest settings (Mail Spectator also does this automatically every hour).
Your configured status will change to Successful and your first DMARC reports will show up in the next few days.