A DMARC record is used to validate emails in order to prevent email spoofing. DMARC -which stands for Domain-based Message Authentication and Conformance- is a record that is defined in the DNS records associated with your domain name. The DMARC record contains a set of rules that work with SPF and DKIM records to best provide security for your email. The record also lets mail service providers like Gmail or Yahoo! know that the domain is using DMARC rules. The following tutorial will guide you through the setup of a DMARC record using the cPanel Zone Editor.
Note that cPanel creation is no longer unlimited. For more information, please see cPanel Pricing Changes. You can see the pricing that now applies to cPanel licenses. To learn more about the change, please see our FAQ on cPanel Pricing.
Setting up a DMARC Record
- Login to cPanel.
- Click on Zone Editor under Domains.
- You will see a list of domains that are being managed by your cPanel account. Click on Manage next to the domain for which you will add the DMARC record.
- You will then a page with the Zone records associated with the domain you have selected. Click on the blue button labeled Add Record.
- You will see a blue-highlighted field where you can add a record. Click on the drop-down arrow under the column labeled Type. Select TXT.
- The default value of TTL should be left at 14400. Click on the field labeled Valid zone name. Type in _dmarc and then hit your tab key. This will auto-fill the zone name and it will look like this: _dmarc.example1.com. The table below lists all of the settings in the record.
Field Setting Name _dmarc TTL 14400 Type TXT TXT Data In this field you must choose how you want recipient servers to handle email from your domain that fails SPF/DKIM validation. Options are outlined below in red:
v=DMARC1; p=none; sp=none; rf=afrf; pct=100; ri=86400
v=DMARC1; p=reject; sp=none; rf=afrf; pct=100; ri=86400
v=DMARC1; p=quarantine; sp=none; rf=afrf; pct=100; ri=86400
Alternately, you can request an email report of failed DMARC validations by adding a valid email address, such as the following:
v=DMARC1; p=none; sp=none; ruf=mailto:[email protected]; rf=afrf; pct=100; ri=86400
v=DMARC1; p=reject; sp=none; rf=afrf; pct=100; ruf=mailto:[email protected]; ri=86400
v=DMARC1; p=quarantine; sp=none; ruf=mailto:[email protected]; rf=afrf; pct=100; ri=86400
- Click Add Record to save your record. You will then see your entry listed in the Zone Records for the domain.
Congratulations! You have completed the steps on how to add a DMARC record to your domain’s DNS records.
As per the note at the beginning of this tutorial, the DMARC record can be generated from a number of places. For more information on DMARC, check out the DMARC.ORG page. They provide history, an in depth explanation of DMARC and a list of resources that can help you properly deploy it.
Are you a small business? Then you know that having your emails successfully delivered to the recipients is only half the battle with email marketing. InMotion’s Shared Business Hosting plans include a number of helpful tools to take your email marketing game to the next level.