This article covers how to setup DMARC Records and what they are. DMARC (Domain-based Message Authentication, Reporting & Conformance) is an email validation system designed to protect your domain from being used in phishing attacks or email spoofing. It works alongside SPF and DKIM to ensure only authorised servers can send mail on your domain name’s behalf.

With Domains.co.za’s hosting and cPanel, adding a DMARC record is easy, giving you peace of mind that your domain emails are protected and your reputation is safe.

How To Setup DMARC Records In cPanel

1. Login to your Domains.co.za account.

2. Open the Manage Services dropdown menu, select your hosting plan from the list, then click Manage next to your domain.

• Click Login next to Control Panel to access cPanel.

• Scroll down to the Domains section and click Zone Editor.

• Find the domain you want to protect and click Manage.

• Click +MX Record under actions.
• Choose TXT as the record type.
• In the Name field, enter _dmarc (this becomes _dmarc.yourdomain.co.za).
• In the TTL field, leave the default (e.g., 14400).
• In the Record field, enter your DMARC policy. Example:

v=DMARC1; p=quarantine; rua=mailto:dmarc-reports@yourdomain.co.za; ruf=mailto:forensics@yourdomain.co.za; fo=1

• Click Save Record.

Additional Information

Receive Daily DMARC Reports

To receive daily DMARC XML reports from mail servers detailing authentication results, specify a reporting email address:

EXAMPLE:
dmarc-reports@yourdomain.co.za

Review DMARC reports regularly to identify unknown senders or misconfigured systems using your domain to send emails.

Information About DMARC Analyzer & Records

• DMARC is a DNS TXT record that helps protect your domain from email spoofing, phishing attacks, and unauthorised use by verifying sending sources.
• It works in combination with SPF and DKIM to authenticate legitimate email senders and ensure your domain’s emails are trusted by recipients.
• First, you must have valid SPF and DKIM records configured, as DMARC relies on these protocols to evaluate email legitimacy.
• Start with a “none” policy to monitor how your emails perform before enforcing stricter policies – this helps avoid accidental blocking of legitimate mail.
• Use online tools like DMARC Analyzer, Postmark, or MXToolbox to visualise and interpret DMARC reports for easier analysis.
• Update SPF and DKIM records when changing email services, as outdated authentication records can cause valid emails to fail DMARC checks.
• Only one DMARC record is allowed per domain, so ensure your TXT entry is correctly formatted and doesn’t duplicate existing entries.
• Incorrect DMARC syntax can break your policy, so double-check for typos and formatting errors using DMARC testing tools.
• Implementing DMARC significantly improves your email deliverability, ensuring legitimate emails reach inboxes instead of being marked as spam.
• Email providers like Google, Microsoft, and Yahoo recommend or require DMARC to enhance trust and protect domain reputation.