DNS - Add An Advanced DMARC Record

To make it easier to get in touch with us, from the 24th of March 2016 all support tickets will need to be submitted from your Crucial Control Panel.

This article helps you set up a DMARC record is. For an explaination of what DMARC does and how it works, click here. Before you add a DMARC record make sure you have enabled SPF and DKIM. Click here for a guide on doing that.

NOTE: This guide isn't nessessary for having a DMARC record. You can add just a basic DMARC record. Click here for a guide on doing that.

Step 1 - Login to cPanel and click on the Zone Editor icon

8266f72250b26d5b3fdb5bd13a4a31d0703e72c2?t=b709ef94bfc162d90cb3cc5a2df7fdec


Then click Manage for the domain you want to add the DMARC to

f2cbdfc0497ae2d4c47ab28361289365694d9de1?t=7e7ae468ec1bfda3526e558224dde2b8


Step 2 - Click +Add Record then Add DMARC Record

26c5e1bf1eac63c121269840205a7c011a13dcb0?t=7f8e211b3f35f3ae05ae3c61bf7b19ad

 

Step 3 -

NOTE: Before you click Add Record, click on Optional Parameters to view and edit the advanced options (details at the bottom of this article).

(1) Set the TTL to 900

(2) Select how you want the DMARC record to act

None: Treat failed SPF emails as normal

Quarantine: Send failed SPF emails to a SPAM/Junk folder

Reject: Reject failed SPF emails completely

(3) Click Add Record

ca7803335ff4777e2696688bc65e7e35f887296e?t=ffc4edf671c730c123a972f08ca3f0e2 

e16bdecebbe217bf1b80b68cf77352afc6fa6841?t=a3cb35a49d45f6b6e30c03eba3ae16c9

 

Subdomain Policy: Set how the DMARC record applies to email accounts with subdomains

DKIM and SPF mode: Setting either of these to Relaxed will allow the DKIM/SPF of a subdomain to pass the check if the DKIM/SPF record is for a different subdomain of the primary domain (or the primary domain itself). Setting to Strict means that the DKIM/SPF must match the exact DKIM/SPF of the specific subdomain

a1b1c49fbdf878af298edcfd8f13b38e493c3188?t=37ed6ca3ac1939a528e52446d84d3a29

 

Percentage: Sets the percentage of emails which DMARC will check. It's best to leave this at 100.

55bc1e71e9327ef1644074dfeb71c8d4062f5278?t=b1e3fb6372bab619b514cd142dd4e8cc

 

Generate Failure Reports When: Sets which emails are included in the DMARC failed emails. Select All Checks to only include emails that fail all SPF/DKIM checks. Select Any Check to include emails that fail some, but pass other of the checks

Report Format: It's best to select ARFR here as it has been specifically designed for DMARC reports

6f2dfacd5a0e4275a800688fc21c2e27137a011b?t=d7a5ebec97e410849111fcf7ca657b48

 

Report Interval: Sets how often a report is sent (86400 seconds is default, which is 24hrs)

Send Aggregate Mail Reports To: Set which email accounts recieve complete DMARC reports (including success, failurs and partial failures)

Send Failure Reports To: Set which email accounts recieve reports of emails which failed DMARC

f6de34ba69bc31a510088cd2cbdcab944daec0cc?t=2f6d8411c94661d48001c635956c8587

Was this article helpful?
0 out of 0 found this helpful
Have more questions? Submit a request

Comments

Powered by Zendesk