This guide is about the DMARC policy and the optional security reports sent by email that can be activated or deactivated upon request.

Optional DMARC reports

The DMARC reports are optional and provide the following information:

1. Third-party senders or servers that send emails on behalf of your domain.
2. The percentage of messages from your domain that successfully pass the DMARC verification process.
3. The servers or services that send emails failing DMARC verifications.
4. The DMARC actions performed by the receiving server for unauthenticated messages from your domain (none, quarantine, or reject).

When the reports indicate that most emails successfully pass DMARC verifications, it is recommended to strengthen your DMARC settings by enforcing stricter measures. This will enhance the protection of your domain against spoofing.

The written report is delivered as a ZIP archive containing the report in XML format. It is sent by email to the address you specify in the configuration, and will come from dmarc@infomaniak.com or other providers such as Microsoft, Google, Yahoo, etc.:

It is also possible to receive copies of problematic emails.

Analyzing a DMARC report

Infomaniak is neither able to analyze your potential DMARC reports and records, nor able to comment on the validity or compliance of these, as this is entirely your responsibility.

It is recommended to use an external service to analyze a DMARC report, such as https://dmarcadvisor.com/dmarc-analyzer/.

Deactivating a DMARC report…

… from a Mail Service

To deactivate the sending of a DMARC report if you still have a Mail Service (otherwise, see below):

1. Click here to access the management of your product on the Infomaniak Manager (need help?).
2. Click directly on the name assigned to the product concerned.
3. Click on Global Security in the left sidebar.
4. Click on Edit (in the DMARC section).
5. Remove the registered addresses and validate at the bottom of the page to Apply the changes:
   

... from the DNS zone of a domain

If the Mail Service is no longer in use but you continue to receive email reports, you need to act directly on the domain name and delete the dmarc record from its DNS zone (or simply edit it to completely remove the 2 tags rua and ruf):

The difference between RUA and RUF

It is important to understand what you are disabling by removing ruf:

• RUA (Aggregate): a daily summary (explained above); it provides statistics: "Yesterday, 50 emails were successful, 10 failed."
• RUF (Forensic/Failure): an email sent instantly as soon as a single message fails the DMARC tests; it often contains the original content of the email (subject, body).