Turn on DMARC reporting

Add a rua address so you can see who is sending as your domain.

10 min

why this matters

Without reports, DMARC is blind. You cannot safely enforce a policy because you have no idea which of your own services would break.

1
Create a mailbox for the reports
Use a dedicated address such as dmarc@example.com. Reports are bulky daily XML, so keep them out of a personal inbox.
2
Add rua to the record
You can list more than one address, comma separated. fo=1 also asks for failure samples.
```
v=DMARC1; p=none; rua=mailto:dmarc@example.com; fo=1
```
3
Use a report analyser
Raw XML is unreadable at volume. Point the address at a free DMARC analytics service, or forward a copy to one.
4
Reporting for another domain
If the reports go to a mailbox on a different domain, that domain must authorise it with its own TXT record.
```
Name: example.com._report._dmarc.reports-domain.com
Value: v=DMARC1
```