{"id":560,"date":"2021-07-05T20:21:06","date_gmt":"2021-07-05T20:21:06","guid":{"rendered":"https:\/\/prodmarc.com\/blog\/?p=560"},"modified":"2022-07-28T06:12:24","modified_gmt":"2022-07-28T06:12:24","slug":"dmarc-in-3-easy-steps","status":"publish","type":"post","link":"https:\/\/testblog.prodmarc.com\/index.php\/2021\/07\/05\/dmarc-in-3-easy-steps\/","title":{"rendered":"How to setup DMARC in 3 easy steps"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"560\" class=\"elementor elementor-560\">\n\t\t\t\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-61840abb elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"61840abb\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-1459eaea\" data-id=\"1459eaea\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-4ee500db elementor-widget elementor-widget-text-editor\" data-id=\"4ee500db\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.6.8 - 27-07-2022 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#818a91;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#818a91;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t\t\t<!-- wp:image {\"id\":561,\"sizeSlug\":\"large\",\"linkDestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><\/figure>\n<!-- \/wp:image --><!-- wp:image {\"id\":562,\"sizeSlug\":\"large\",\"linkDestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" class=\"aligncenter wp-image-562\" src=\"http:\/\/localhost\/blogs\/wordpress\/wp-content\/uploads\/2021\/07\/setup-1.png\" alt=\"\" width=\"624\" height=\"312\" \/><\/figure>\n<!-- \/wp:image --><!-- wp:paragraph -->\n<p><strong>DMARC <\/strong>(Domain-based Message Authentication, Reporting, and Conformance) is a method of ensuring the authenticity of an email sent from a specific domain.<\/p>\n<!-- \/wp:paragraph --><!-- wp:paragraph -->\n<p>Regrettably, this critical email security feature is not enabled by default for every domain, web host, or email server. Organizations and email administrators must establish and set up policies for DMARC.<\/p>\n<!-- \/wp:paragraph --><!-- wp:paragraph -->\n<p>We&#8217;ll go over how to set up a simple DMARC configuration on your own domain in this blog. The process includes 3 simple steps to optimally configure your email server to send signed emails.<\/p>\n<!-- \/wp:paragraph --><!-- wp:heading -->\n<h2>Step 1. Generate a DMARC record<\/h2>\n<!-- \/wp:heading --><!-- wp:paragraph -->\n<p>A DMARC record is a short snippet of code that is published to the DNS to tell the mailbox service provider how to handle an incoming email that fails authentication, based on the results of the SPF and DKIM checks.<\/p>\n<!-- \/wp:paragraph --><!-- wp:paragraph -->\n<p>DMARC records are text (TXT) resource records (RR) that are published in the DNS and tell an email receiver what to do with non-aligned emails it receives.<\/p>\n<!-- \/wp:paragraph --><!-- wp:paragraph -->\n<p>Consider an example DMARC record for the domain \u201csender.exampledomain.com\u201d that reads: <strong>v=DMARC1;p=reject;pct=100;rua=mailto:postmaster@exampledomain.com<\/strong><\/p>\n<!-- \/wp:paragraph --><!-- wp:paragraph -->\n<p>Log in to the <strong>DMARC<\/strong> dashboard to create a DMARC record for your secured company domain. Then navigate to<strong> DNS Records<\/strong> -&gt; <strong>Publish DMARC Record<\/strong> and copy the excerpt displayed in orange on the page.\u00a0<\/p>\n<!-- \/wp:paragraph --><!-- wp:paragraph -->\n<p>For the test domain DMARC site, here&#8217;s a sample DMARC entry:<\/p>\n<!-- \/wp:paragraph --><!-- wp:paragraph -->\n<p><strong>v=DMARC1; p=quarantine; rua=mailto:reports@dmarc.site; ruf=mailto:reports@dmarc.site; adkim=r; aspf=r; rf=afrf<\/strong><\/p>\n<!-- \/wp:paragraph --><!-- wp:list -->\n<ul>\n<li>For email whose breaches policies should be handled, the \u201cp\u201d option provides three options: none, quarantine, or reject.<\/li>\n<li>The adkim and aspf parameters specify how stringent the DKIM and SPF policies should be implemented, with \u2018s&#8217; denoting strict and \u2018r&#8217; denoting relaxed.<\/li>\n<li>The RUA provides an address for aggregate data reports, while the RUF provides an address for forensic reports<\/li>\n<\/ul>\n<!-- \/wp:list --><!-- wp:heading -->\n<h2>Step 2. Publish the DMARC record to DNS<\/h2>\n<!-- \/wp:heading --><!-- wp:paragraph -->\n<p>Now that you have the DMARC record, publish it to the DNS so that email service providers can use it to run DMARC checks.<\/p>\n<!-- \/wp:paragraph --><!-- wp:paragraph -->\n<p>To do so, go to your DNS management interface and choose the domain for which you want to publish the DMARC record, such as mydomain.com.<\/p>\n<!-- \/wp:paragraph --><!-- wp:paragraph -->\n<p>Create a TXT entry with the following settings on mydomain.com:<\/p>\n<!-- \/wp:paragraph --><!-- wp:paragraph -->\n<p><strong>Type: TXT<\/strong><\/p>\n<!-- \/wp:paragraph --><!-- wp:paragraph -->\n<p><strong>Host: _dmarc<\/strong><\/p>\n<!-- \/wp:paragraph --><!-- wp:paragraph -->\n<p><strong>TXT Value: (DMARC record generated above)<\/strong><\/p>\n<!-- \/wp:paragraph --><!-- wp:paragraph -->\n<p><strong>TTL: 1 hour<\/strong><\/p>\n<!-- \/wp:paragraph --><!-- wp:paragraph -->\n<p>For instance, here is how it appears in GoDaddy&#8217;s DNS administration console:<\/p>\n<!-- \/wp:paragraph --><!-- wp:image {\"id\":563,\"sizeSlug\":\"large\",\"linkDestination\":\"none\"} -->\n<figure class=\"wp-block-image size-large\"><img class=\"wp-image-563\" src=\"http:\/\/localhost\/blogs\/wordpress\/wp-content\/uploads\/2021\/07\/records-1.png\" alt=\"\" \/><\/figure>\n<!-- \/wp:image --><!-- wp:paragraph -->\n<p>It can take up to an hour for the <strong>DMARC record <\/strong>to become accessible after it has been published (usually much faster). You can then use the <strong>DMARC Checker<\/strong> tool to double-check if it was correctly published.<\/p>\n<!-- \/wp:paragraph --><!-- wp:heading -->\n<h2>Step 3. Analyze aggregate reports<\/h2>\n<!-- \/wp:heading --><!-- wp:paragraph -->\n<p>Every day, many email service providers send out aggregate reports. This means you might get aggregate reports the day the<strong> DMARC record <\/strong>is published.<\/p>\n<!-- \/wp:paragraph --><!-- wp:paragraph -->\n<p>However, your first aggregate reports could take up to 72 hours to come. Once you get the information, you must utilize it to correct your email streams.<\/p>\n<!-- \/wp:paragraph --><!-- wp:heading {\"level\":1} -->\n<h1>Conclusion<\/h1>\n<!-- \/wp:heading --><!-- wp:paragraph -->\n<p>Large enterprises have been able to reduce phishing-based brand impersonations to near nil utilizing automated <strong>DMARC implementation <\/strong>tools like <a href=\"https:\/\/prodmarc.com\/\">ProDMARC<\/a>.\u00a0<br \/>This not only protects the brand&#8217;s reputation and the effectiveness of revenue-generating email campaigns, but it also protects employees, customers, partners, and the general public from expensive email frauds. <a href=\"https:\/\/prodmarc.com\/contact.html\">Get in touch<\/a> with us to discover our email authentication solutions.<\/p>\n<!-- \/wp:paragraph -->\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>DMARC (Domain-based Message Authentication, Reporting, and Conformance) is a method of ensuring the authenticity of an email sent from a specific domain. Regrettably, this critical email security feature is not enabled by default for every domain, web host, or email server. Organizations and email administrators must establish and set up policies for DMARC. We&#8217;ll go [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":894,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_mi_skip_tracking":false},"categories":[1],"tags":[11,19,25,34,45],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/testblog.prodmarc.com\/index.php\/wp-json\/wp\/v2\/posts\/560"}],"collection":[{"href":"https:\/\/testblog.prodmarc.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/testblog.prodmarc.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/testblog.prodmarc.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/testblog.prodmarc.com\/index.php\/wp-json\/wp\/v2\/comments?post=560"}],"version-history":[{"count":4,"href":"https:\/\/testblog.prodmarc.com\/index.php\/wp-json\/wp\/v2\/posts\/560\/revisions"}],"predecessor-version":[{"id":932,"href":"https:\/\/testblog.prodmarc.com\/index.php\/wp-json\/wp\/v2\/posts\/560\/revisions\/932"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/testblog.prodmarc.com\/index.php\/wp-json\/wp\/v2\/media\/894"}],"wp:attachment":[{"href":"https:\/\/testblog.prodmarc.com\/index.php\/wp-json\/wp\/v2\/media?parent=560"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/testblog.prodmarc.com\/index.php\/wp-json\/wp\/v2\/categories?post=560"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/testblog.prodmarc.com\/index.php\/wp-json\/wp\/v2\/tags?post=560"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}