WEBVTT

00:00:00.000 --> 00:00:06.000
What should happen when mail fails your domain checks?

00:00:06.000 --> 00:00:13.000
DMARC adds alignment, a published policy and reporting options.

00:00:13.000 --> 00:00:18.000
Understand the policy before changing it.
6 DMARC basics.

00:00:18.000 --> 00:00:30.000
Start with SPF and DKIM
Configure and check your legitimate email sending services.
Mailbox service · Website sender · Other sending tools

00:00:30.000 --> 00:00:42.000
Alignment connects the domains
DMARC compares authentication with the visible From domain.
Visible From domain · Authentication domain · Alignment check

00:00:42.000 --> 00:00:54.000
One aligned pass can be enough
An aligned SPF pass or an aligned DKIM pass can satisfy DMARC.
SPF with alignment · Or DKIM with alignment · DMARC result

00:00:54.000 --> 00:01:06.000
The policy is published in DNS
None, quarantine and reject express different handling requests.
Monitor with none · Quarantine request · Reject request

00:01:06.000 --> 00:01:18.000
Reports help reveal senders
Aggregate reports can show sources and authentication results.
Sending sources · Passing results · Failing results

00:01:18.000 --> 00:01:30.000
Roll out with provider support
Review the reports before moving to a stricter policy.
Legitimate mail checked · Gradual policy change · Ongoing monitoring

00:01:30.000 --> 00:01:39.000
Your checklist
Start with SPF and DKIM · Alignment connects the domains · One aligned pass can be enough · The policy is published in DNS · Reports help reveal senders · Roll out with provider support

00:01:39.000 --> 00:01:47.000
Review legitimate senders before tightening the policy.
jerseyweb.je