Guides › DMARC
DMARC aggregate (rua) reports: setup and reading them
Add rua=mailto:address to your DMARC record, and receivers like Google, Microsoft and Yahoo email you daily XML reports (usually zipped). Each row lists a sending IP, the message count, and the SPF/DKIM results and alignment.
Using an address on another domain
If the rua address is on a different domain (for example a reporting service), that domain must publish an authorisation record:
example.com._report._dmarc.reportingservice.com TXT v=DMARC1
Reporting services do this for you. Without it, receivers silently skip sending reports.
What to look for
- Unknown IPs sending large volumes, which suggests spoofing (or a forgotten service).
- Your own services failing alignment: fix their DKIM.
- Forwarders failing SPF but passing DKIM, which is normal.
Check your domain now