HostSEO Blog

Stories and News from IT Industry, Reviews & Tips | Technology Blog


How to configure DMARC

DMARC (Domain-based Message Authentication, Reporting and Conformance) is an e-mail authentication method designed to help reduce e-mail abuse, such as spam. It builds upon the SPF (Sender Policy Framework) and DKIM (DomainKeys Identified Mail) authentication methods to provide e-mail senders and recipients a more reliable way to exchange messages.

You can use cPanel's DNS Zone Editor to add DMARC settings to your DNS records. You can also use cPanel to configure your mailing lists to be compatible with DMARC.

The easy process (What we do here at hostseo.com)

Just create the TXT record for "_dmarc.hostseo.com" > TXT > "v=DMARC1; p=quarantine; rua=mailto:dmarc_report@hostseo.com; pct=100; sp=quarantine" in cPanel. Replace the email address dmarc_report@hostseo.com with own domain name and hostseo.com DNS entries with own record. So your domain is now fully DMARC protected. Now come to the explanation part....

CONFIGURING A DMARC TXT RECORD IN DNS

To enable DMARC for your domain, you must add a TXT record to your domain's DNS entries that contains the DMARC configuration data. To do this, follow these steps:

  1. Log in to cPanel.
  2. In the Domains section of the cPanel home screen, click Advanced DNS Zone Editor.
  3. Under Select a Domain, select the domain you want to modify.
    Usually, this is your primary domain.
  4. Under Add a Record, in the Name text box, type _dmarc.
    When your cursor leaves this text box, cPanel automatically adds the domain name to _dmarc, for example, _dmarc.example.com.
  5. In the TTL text box, type 14400.
  6. In the Type list box, select TXT.
  7. In the TXT Data text box, type the DMARC configuration line.
    DMARC is not yet a fully standardized protocol. As a result, different providers handle DMARC policies in different ways. You may have to experiment with various DMARC configurations to find the one that works best for your domain. Here are some example DMARC configurations:
    • Enable DMARC “monitor mode”. With this configuration enabled, the specified e-mail address (in the mailto setting) receives daily reports from providers regarding how many messages were received and whether or not they passed policy checks:

      v=DMARC1;p=none;rua=mailto:postmaster@example.com
    • Instruct the recipient to quarantine all messages (100%) that do not pass policy checks:

      v=DMARC1;p=quarantine;pct=100;
    • Instruct the recipient to reject half of all messages (50%) that do not pass policy checks. The remainder should be quarantined:

      v=DMARC1;p=reject;pct=50;
  8. Click Add Record. cPanel adds the TXT record for DMARC.
Testing the new DMARC DNS record

After you add the DMARC TXT record and allow time for DNS propagation, you should test that the record is correctly configured. Follow the appropriate procedure below for your computer's operating system.

MICROSOFT WINDOWS

If you are using Microsoft Windows, type the following command at the command prompt:

nslookup

At the nslookup > prompt, type the following commands. Replace example.com with your own domain name:

set type=txt
_dmarc.example.com

You should see output that resembles the following (the exact text varies based on your own settings):

_dmarc.example.com       text =
     "v=DMARC1;p=none;rua=mailto:postmaster@example.com"
LINUX AND MAC OS X

If you are using Linux or Mac OS X, type the following command at the command prompt. Replace example.com with your own domain name:

dig +short txt _dmarc.example.com

You should see output that resembles the following (the exact text varies based on your own settings):

"v=DMARC1\; p=none\; rua=mailto:postmaster@example.com"
The backslashes are not part of the actual TXT record. They are an escape sequence added by the dig command.
 

CONFIGURING MAILING LISTS (MAILMAN) FOR DMARC

If you administer a mailing list, you may encounter problems such as:

  • Mailing list messages are marked as spam.
  • Mailing list messages do not reach recipients at all.

To help improve the likelihood of mailing list messages arriving at their correct destination, you can configure a mailman setting in cPanel to make your list DMARC-compatible with other providers.

You must have version 11.42.1 or newer of cPanel to change this setting.

To do this, follow these steps:

  1. Log in to cPanel.
  2. In the Email section of the cPanel home screen, click Mailing Lists.
  3. Under Current Lists, locate the mailing list you want to configure, and then click Manage. The mailman General Options page appears.
  4. Under General list personality, locate the Edit from_is_list setting.
  5. You will probably need to send some test messages to determine the optimal setting for your mailing list:
    • Try the Wrap Message option first, click Submit Your Changes, and then send some test messages.
    • If the messages are rejected by the recipient or marked as spam, try the Munge From option, and then click Submit Your Changes.
     

MORE INFORMATION

To view the official DMARC web site, please visit http://dmarc.org.

Subscribe Now

10,000 successful online businessmen like to have our content directly delivered to their inbox. Subscribe to our newsletter!

Archive Calendar

SatSunMonTueWedThuFri
 1
2345678
9101112131415
16171819202122
23242526272829
30 

Born in 2004 ... Trusted By Clients n' Experts

SEO Stars

They never made me feel silly for asking questions. Help me understand how to attract more people and improve my search engine ranking.

Read More

Emily Schneller Manager at Sabre Inc
SEO Stars

Took advantage of Hostseo's superb tech support and I must say, it is a very perfect one. It is very fast, servers reliability is incredible.

Read More

Leena Mäkinen Creative producer
SEO Stars

We're operating a worldwide network of servers with high quality standards requirements, we’ve choose hostseo to be our perfect partner.

Read More

Ziff Davis CEO at Mashable
SEO Stars

It’s very comfortable to know I can rely about all technical issues on Hostseo and mostly that my website and emails are safe and secured here.

Read More

Isaac H. Entrepreneur
SEO Stars

With hostseo as a hosting partner we are more flexible and save money due to the better packages with great pricing, free SEO n' free SSL too!

Read More

Madeline E. Internet Professional