DMARC validation check

None

Mail.

All nameserver IP addresses.

Every 5 minutes.

None.

None.

Purpose

DMARC stands for Domain-based Message Authentication, Reporting, and Conformance.

The DMARC record describes how an unauthenticated email should be handled and how it should be reported. An email message can be authenticated using either DKIM or SPF. Because the DMARC record is published in the DNS, it can be easily deciphered by any mail transfer agent. 

This check ensures that the DMARC record has not changed since the last time domain monitoring was configured.

Event severities and messages

DMARC record match.
No detected changes to the DMARC TXT record.

No DMARC record is configured for the zone.
Without a DMARC record the MTA’s cannot decipher what to do with unauthenticated emails.

Expected: {DMARC string}, Received from query: {Response}.
The DMARC record string has changed since the zone was last configured for monitoring. If this is intentional, please update the domain configuration by selecting the Reconfigure option in the Domain tab to update the monitoring database.

No DMARC record found when it should be.
The DMARC record string has been removed since the zone was last configured for monitoring. If this was done intentionally, please update the domain configuration by selecting the Reconfigure option in the Domain tab to update the monitoring database.

Received RCODE from server.
Please see the Generic DNS response code page for further information.

Solutions, tips & tricks