Skip to main content
← Back to Docs

DNS Configuration Guide

General guide for setting up DMARC DNS records

DNS Configuration Guide

This guide explains how to set up DMARC DNS records for your domain.

Understanding DNS Records

DMARC works by adding a DNS TXT record to your domain. DNS (Domain Name System) is like the internet’s phonebook—it translates domain names into IP addresses.

What is a TXT Record?

A TXT record is a type of DNS record that contains text. DMARC policies are delivered as TXT records, typically at _dmarc.yourdomain.com.

DMARC Record Format

DMARC records follow this basic format:

v=DMARC1; p=quarantine; rua=mailto:admin@example.com

Here’s what each part means:

  • v=DMARC1 - DMARC version (always “DMARC1”)
  • p=quarantine - Policy (none, quarantine, or reject)
  • rua=mailto:... - Where to send aggregate reports

Policy Options

p=none

  • No action taken
  • Receivers still send reports
  • Good for initial monitoring
  • Recommended for new users

p=quarantine

  • Failed emails go to spam folder
  • Provides protection while monitoring
  • Recommended after 1-2 weeks

p=reject

  • Failed emails are rejected completely
  • Maximum protection
  • Only use after thorough testing

SPF and DKIM

DMARC requires SPF and DKIM to be set up first. These authenticate your mail servers:

  • SPF - Specifies which servers can send mail for your domain
  • DKIM - Digitally signs your emails

DMARC Nerd will help you understand if these need to be configured.

Setting Up Your Record

The exact steps vary by DNS provider, but the general process is:

  1. Log in to your DNS provider
  2. Find the DNS/Records section
  3. Add a new TXT record
  4. Set the host/name to _dmarc
  5. Paste the record provided by DMARC Nerd
  6. Save the changes

Verification

After adding your DNS record:

  1. Wait up to 24 hours for propagation
  2. DMARC Nerd will automatically detect your record
  3. You’ll receive your first report the following Monday

Troubleshooting

DNS record not detected?

  • Check that the host is exactly _dmarc (including underscore)
  • Verify you added it as a TXT record, not an A or CNAME record
  • Wait up to 24 hours for DNS propagation
  • Contact us if you need help

Emails failing DMARC checks?

  • Ensure all your mail servers have proper SPF and DKIM setup
  • Add legitimate senders to your authorized list
  • See Understanding Reports for details

Next Steps

Choose your DNS provider for step-by-step instructions:

Or contact our support team for personalized help!

← Back to Documentation