This guide will help you set up DMARC reporting for your domain through the Lupasafe platform.



Step-by-Step Instructions

  1. Access Domain Settings
    • Log in to your Lupasafe account
    • Navigate to "Websites & Routers" in the main menu (You can also follow 'Create' button on Email Stats in Dashboard)
  2. Select Your Domain
    • Choose your existing domain from the list
    • If not yet added, click "Add" to register your domain
  3. Initiate DMARC Configuration
    • Click on "DKIM/DMARC/SPF Scan"
  4. Copy DMARC Settings
    • Use the copy button to copy the displayed DMARC settings, for example (read below to see what the fields mean):
      =DMARC1; p=quarantine; sp=reject; pct=100; rua=mailto:m1fSx8Vw….Cak@lupasafe-dmarcscan.com; ruf=mailto:m1fSx8Vw….GdIPuRCak@lupasafe-dmarcscan.com;
  5. Update DNS Records
    • Log in to your domain hosting provider
    • Locate your DNS management area
    • Find the TXT record with _dmarc prefix
    • If it exists: Update with the new values while preserving any settings you want to keep
    • If it doesn't exist: Create a new TXT record with the copied values
  6. Wait for DNS Propagation
    • DNS changes take time to propagate across the internet
    • This can take anywhere from a few minutes to several hours, depending on your provider
  7. Verify Configuration
    • Return to Lupasafe and click the "Check" button
    • A green message indicates successful configuration
  8. Monitor DMARC Reports
    • DMARC reports will appear in the "DMARC Reports" section
    • Receiving mail servers typically send these reports daily or weekly
    • Once received, the data will be displayed in the overview


Explanation of fields

DMARC1:

This indicates the version of the DMARC protocol being used. It’s always set to DMARC1 as this is the current and only version available.

p=quarantine:

This specifies the policy for handling emails that fail DMARC validation. In this case:

  • Quarantine means suspicious emails should be treated with caution, often moved to the spam folder rather than being outright rejected.




sp=reject:

This sets the policy for subdomains. In this case:

  • Reject means any email from subdomains that fails DMARC validation should be rejected entirely, not delivered to the recipient.

pct=100:

This indicates the percentage of emails that the DMARC policy should apply to.

  • 100% means that the policy (quarantine or reject) is applied to all emails that fail validation.

rua=mailto:

This is the aggregate feedback email address.

  • It’s used to receive DMARC reports that give an overview of how emails from the domain are handled, including which ones passed or failed validation.

  • In your example, reports are sent to m1fSx8Vw….Cak@lupasafe-dmarcscan.com.

ruf=mailto:

This is the forensic feedback email address.

  • It receives detailed reports when an email fails DMARC validation, including information about the failed message itself.

  • Reports are sent to m1fSx8Vw….GdIPuRCak@lupasafe-dmarcscan.com.