Définition
Domain-based Message Authentication, Reporting & Conformance (DMARC) is an email authentication protocol that builds on SPF and DKIM to protect email domains from spoofing, phishing, and other abuse. DMARC allows domain owners to publish policies specifying how receivers should handle emails that fail authentication, and provides reporting to monitor email authentication results.
Exemples
DMARC Record Example
A typical DMARC DNS record.
; DMARC DNS Record (TXT)
_dmarc.example.com. IN TXT "v=DMARC1; p=quarantine; rua=mailto:dmarc@example.com; ruf=mailto:dmarc@example.com; sp=reject; adkim=s; aspf=s"
; Breakdown:
; v=DMARC1 - DMARC version
; p=quarantine - Policy for failures (none/quarantine/reject)
; rua= - Aggregate report recipient
; ruf= - Forensic report recipient
; sp=reject - Subdomain policy
; adkim=s - Strict DKIM alignment
; aspf=s - Strict SPF alignmentCas d'usage
Preventing email spoofing
Protecting brand reputation
Email deliverability improvement
Compliance requirements
Bonnes pratiques
- Start with p=none to monitor without blocking
- Gradually move to p=quarantine then p=reject
- Monitor DMARC reports regularly
- Ensure SPF and DKIM are configured correctly first
FAQ
Mettez vos connaissances sur DMARC en pratique
Commencez à surveiller votre infrastructure avec WizStatus.
Aucune carte de crédit requise • 20 monitors gratuits pour toujours