What is a DMARC record?

DMARC (Domain-based Message Authentication, Reporting, and Conformance) is a security protocol that builds upon your existing SPF and DKIM records. While SPF and DKIM verify your identity, DMARC tells receiving mail servers exactly what to do if an email fails those checks.

By default, domains registered or parked on mybox and delegated to our DNS servers already include DKIM and SPF records. Adding a DMARC record provides a more restrictive layer of protection, helping to prevent your outgoing mail from being treated as spam or used in phishing attempts.

How it works

DMARC allows you to set a policy for your domain. If an email claiming to be from you fails authentication, the receiving server follows your DMARC instructions:

• None (p=none): The message is delivered normally, but a report is generated. This is typically used for monitoring.
• Quarantine (p=quarantine): The message is sent to the recipient’s spam folder.
• Reject (p=reject): The message is blocked entirely.

Distinction Block

SPF/DKIM vs. DMARC SPF and DKIM are like the ID cards for your email. DMARC is the instruction manual that tells the recipient’s server what to do if the ID card is missing or fake.

How to add a DMARC record in mybox

You can add a DMARC record manually or use the built-in wizard in the mybox panel.

Method 1: Using the DMARC Wizard (Recommended)

1. Log in to your mybox panel and go to the Domains section.
2. Select your domain, go to the Parked tab, and click Manage DNS.
3. In the Actions menu, select DMARC Wizard.
4. Specify the policy action (None, Quarantine, or Reject) and enter your email address to receive reports.
5. Click Add.

Method 2: Manual Entry If you have generated a custom record using a tool like MXToolbox, you can add it as a TXT record:

1. In the Manage DNS section of your domain, click +Add record.
2. Name: _dmarc (must be lowercase).
3. Type: TXT.
4. Value: Paste your DMARC string (e.g., v=DMARC1; p=none; rua=mailto:[email protected]).
5. TTL: 900s (default).
6. Click +Add DNS record.

Practical Implications

• Monitoring First: It is highly recommended to start with a p=none policy. This allows you to receive reports and verify that your legitimate mail is authenticating correctly before moving to a stricter “Reject” policy.
• Reporting: The rua tag in your record directs the server to send aggregate reports to your email. These reports help you identify if any unauthorized servers are trying to send mail using your domain.
• Propagation Time: Like all DNS changes, it can take up to 24 hours for a new DMARC record to propagate across the internet.
• Consistency: Ensure your SPF and DKIM records are healthy before adding DMARC, as DMARC relies entirely on the success of those two checks.

Summary

A DMARC record is the final piece of the email authentication puzzle for your mybox domain. By defining clear rules for how external servers should handle your mail, you protect your brand’s reputation and significantly improve the deliverability of your messages.