This is an example of what DNS digest looks like. Sign up to see your own domain's digest.
samplecorp.com
Outbound Email

DMARC (1)

A DMARC record is read by a recipient email server whenever it receives email with a displayed "from" address of @samplecorp.com (or a subdomain like @hello.samplecorp.com). DMARC tells the server two main things:

  • What to do if an email appears suspicious (e.g. SPF and DKIM checks fail)
  • Where to send reports about emails sent from your domain
_dmarc.samplecorp.com
"v=DMARC1; p=reject; sp=reject; pct=100;fo=1; ri=3600; rua=mailto:[email protected]; ruf=mailto:[email protected]"
?
When is this DMARC policy enforced?

When email's displayed "From" address is samplecorp.com or a subdomain of samplecorp.com.

?
How does DMARC validation work?
  • If email passes both SPF authentication/relaxed alignment.
    Pass!
  • If email passes both DKIM authentication/relaxed alignment.
    Pass!
  • Otherwise...
    Fail.
?
If DMARC fails…

Do not deliver the email to the recipient.

?
Aggregate reports settings

Send every 1 hour to [email protected].

?
Failure reports settings

When either SPF authentication/alignment or DKIM authentication/alignment fail send reports to [email protected].

DnsDigest doesn't work on smaller browser widths.

I get it. It's 2025. You should be able to do anything on your phone or tablet that you can do on your laptop.

Except this site. I think the design is best left for wider screens. Besides who wants to look at DNS records on a tiny screen?

So rest easy for now and load us up when you're back at your desk!

Ka Wai Cheung
Creator of DnsDigest

Helpful?
Try DnsDigest for more!