To make sure you get the most out of Mail Spectator, you'll have to configure your domain. Don't worry, you'll only have to change one DNS record.
If your domain is not configured yet, a warning will show:
Click the info button on the right to view the details. You'll find your domain key which you need in the following steps.
The DMARC check will tell you if you have configured a DMARC record already. If you have one, go to step 1. If you don't, go to step 2.
Step 1: Configure a new DMARC record
You don't have a DMARC record configured right now. The DMARC check will give you an example of a DMARC record which you can apply as shown on the image above. Your DMARC record will look something like this:
v=DMARC1; p=reject; rua=mailto:[ Your domain key ]@dmarc-ingest.securityhive.nl; ruf=mailto:[ Your domain key ]@dmarc-ingest.securityhive.nl
Make sure you replace [ Your domain key ] with your domain key as told in the introduction of this article. You can retrieve your domain key via the info button next to the configured status on the details page.
Go to step 3 for further configuration.
Step 2: Configure an existing DMARC record
You may already have a DMARC record configured but it's not sending reports to SecurityHive right now. Include the following in your existing DMARC record:
rua=mailto:[ Your domain key ]@dmarc-ingest.securityhive.nl; ruf=mailto:[ Your domain key ]@dmarc-ingest.securityhive.nl;
Make sure you replace [ Your domain key ] with your domain key as told in the introduction of this article. You can retrieve your domain key via the info button next to the configured status on the details page.
Go to step 3 for further configuration.
Step 3: Save the DMARC record
Now you'll have to save the DMARC record from step 1 or 2. You'll have to do this at your DNS provider. Not sure who your provider is? Check it at www.intodns.com
A DMARC record is a TXT record. It looks like this:
_dmarc TXT v=DMARC1; p=reject; rua=mailto:[email protected]; ruf=mailto:[email protected]
A DMARC record may have effect on your email traffic. Make sure your email servers are configured in your SPF record.
Step 4: Wait & refresh
Due to its nature, it may take up to 24 hours for DNS changes to be reflected. Wait for some time and hit the refresh button in Mail Spectator to retrieve the latest settings (Mail Spectator also does this automatically every hour).
Your configured status will change to Successful and your first DMARC reports will show up in the next few days.