1000 FAQs, 500 tutorials and explanatory videos. Here, there are only solutions!
Manage DMARC reports
This guide is about the DMARC policy and the optional security reports sent by email that can be activated or deactivated upon request.
Optional DMARC reports
The DMARC reports are optional and provide the following information:
- Third-party senders or servers that send emails on behalf of your domain.
- The percentage of messages from your domain that pass the DMARC verification process.
- The servers or services that send emails failing DMARC verifications.
- The DMARC actions performed by the receiving server for unauthenticated messages from your domain (none, quarantine, or reject).
When the reports indicate that most emails pass DMARC verifications successfully, it is recommended to strengthen your DMARC settings by imposing stricter measures. This will enhance the protection of your domain against spoofing.
The written report is sent by email to the address you specify in the configuration, and will come from dmarc@infomaniak.com or other providers such as Microsoft, Google, Yahoo, etc. It is delivered as a ZIP archive containing the report in XML format:
It is also possible to receive copies of problematic emails.
Analyzing a DMARC report
Infomaniak is neither able to analyze your potential DMARC reports and records, nor able to comment on the validity or compliance of these, as this is entirely your responsibility.
It is recommended to use an external service to analyze a DMARC report, such as e.g. https://dmarcadvisor.com/dmarc-analyzer/.
Deactivating a DMARC report...
...from a Mail Service
To deactivate the sending of a DMARC report if you still have a Mail Service (otherwise, see below):
- Click here to access the management of your product on the Infomaniak Manager (need help?).
- Click directly on the name assigned to the product concerned.
- Click on Global Security in the left sidebar.
- Click on Edit (in the DMARC section).
- Remove the registered addresses and Apply the changes:
... from the DNS zone of a domain
If the Mail Service is no longer in operation but you continue to receive email reports, you need to act directly on the domain name and delete the dmarc record from its DNS zone: