DMARC Generator
Generate and validate DMARC (Domain-based Message Authentication, Reporting & Conformance) records.
Generate and validate DMARC (Domain-based Message Authentication, Reporting & Conformance) records.
生成并验证 DMARC(基于域名的消息认证、报告与一致性)记录。
Percentage of emails to which the DMARC policy applies
DMARC 结果的每日聚合报告
Individual failure reports (may contain sensitive data)
了解 DMARC 记录与邮件认证
DMARC (Domain-based Message Authentication, Reporting, and Conformance) is an email authentication protocol that builds upon SPF and DKIM to provide domain owners with the ability to protect their domain from unauthorized use.
指定如何处理未通过 DMARC 认证的邮件:
p=none - 仅监控,不执行任何操作(建议初始部署时使用)p=quarantine - 将可疑邮件移至垃圾邮件/广告邮件文件夹p=reject - 拒收未通过认证的邮件子域的可选策略,取值与主策略相同:
sp=none - 监控子域sp=quarantine - 隔离子域邮件sp=reject - 拒收子域邮件应用策略的邮件百分比(1-100):
pct=25 - 对 25% 的邮件应用策略pct=100 - 对所有邮件应用策略(默认)检查域名对齐的严格程度:
aspf=r - 宽松的 SPF 对齐(默认,允许子域)aspf=s - 严格的 SPF 对齐(完全匹配域名)adkim=r - 宽松的 DKIM 对齐(默认)adkim=s - 严格的 DKIM 对齐接收 DMARC 报告的邮箱地址:
rua=mailto:dmarc@example.com - 汇总报告(每日摘要)ruf=mailto:forensic@example.com - 取证报告(单个失败详情)v=DMARC1; p=none; rua=mailto:dmarc@example.com先使用此记录进行监控,不影响邮件投递
v=DMARC1; p=quarantine; pct=25; rua=mailto:dmarc@example.com; ruf=mailto:forensic@example.com在监控的同时隔离 25% 的失败邮件
v=DMARC1; p=reject; sp=reject; aspf=s; adkim=s; rua=mailto:dmarc@example.com对主域和子域采用严格对齐,提供最大保护