Add a report address to the DMARC record

Why it matters

Without rua you receive no reports about who sends mail as your domain, which makes it hard to move to an enforcing policy safely. The reports are the main reason DMARC is deployed in stages.

The fix

1. Create a mailbox (or use a DMARC report service) to receive the daily aggregate reports. They are compressed XML and arrive from many receivers.
2. Add only rua=mailto:address to the existing record. Keep your current p= value and every other tag as they are. For several addresses, separate them by commas.
3. If the address is on a different domain, that domain must publish a TXT record authorising it (name yourdomain._report._dmarc.otherdomain, value v=DMARC1), or receivers will not send the reports.

; add only rua; keep your current p= and other tags (p=none is shown as an example)
_dmarc.example.com.  IN TXT  "v=DMARC1; p=none; rua=mailto:[email protected]"

The examples use example.com. Replace it with your own domain.

Read the documentation ↗(opens in a new tab)

Related

• Reported by the DMARC policy check
• Publish a DMARC record, starting in monitoring mode
• Keep only one DMARC record
• Fix the invalid DMARC record
• Move DMARC from monitoring to quarantine, then reject
• Move DMARC from quarantine to reject
• Remove the pct tag from the DMARC record
• Remove the t=y test flag from the DMARC record
• Make the DMARC subdomain policy match the main policy
• Remove or fix the invalid tags in the DMARC record