Protect your domain name from phishing and spoofing: DMARC

In addition to SPF and DKIM, you should create DMARC to receive regular reports from email servers that get email from your domain. You must regularly monitor all email activity (create dedicated email box like dmarc-protection@yourdomainhere).

DMARC reports tell you:

What servers or third-party senders are sending mail for your domain;

What percent of messages from your domain pass DMARC;

Which servers or services are sending messages that fail DMARC;

What DMARC actions the receiving server takes on unauthenticated messages from your domain: none, quarantine, or reject.

How to create DMARC record within WHM/cPanel. 

1. Please login to cPanel then create email box dmarc-protection@yourdomainhere.

2. Login to WHM then navigate "DNS functions". There you need to edit DNS zone for your domain. In the right side corner, please find "+Add record" then select "DMARC" from drop down list:

3. Under DMARC table, please select "Policy: none" then click "optional parameters". Please add your email address to "Send Aggregate Mail Reports To" and also "Send Failure Reports To".

4. Save record. It will take about 2 hours to propagate. 

Example of raw DMARC record (with "NONE", non-restrictive policy):

_dmarc.yourdomainnamehere. 14400 TXT v=DMARC1; p=none; rua=mailto:dmarc-protection@yourdomainnamehere; ruf=mailto:dmarc-protection@yourdomainnamehere; fo=1

As you understand your organization’s mail flow and authentication, update your DMARC record enforcement options to be more strict ("DMARC policy" and "DKIM MODE"/"SPF MODE").

How to understand/read DMARC report in XML format.

If you need any assistance with your DMARC record, please contact NYHOST at any time! We'll be happy to assist you!