Blog

How To Configure DMARC In Azure DNS

November 11, 2024  |  2 min read
DMARC record configuration for Azure DNS

This guide will assist you in adding a Skysnag DMARC CNAME record using Azure DNS. Configuring this record enables Skysnag to manage your DMARC policies, enhancing your domain’s email security and protecting it from phishing attacks and email fraud.

Note: To successfully apply the instructions below, you must have a Skysnag account. If you haven’t created one yet, click here to do so.

Step 1: Log in to Your Azure Account

  1. Navigate to the Azure Portal and sign in with your credentials.
  2. In the left-hand menu, select DNS zones to view your existing DNS zones.

Step 2: Access Your DNS Zone

  1. Choose the DNS zone corresponding to the domain you wish to configure.
  2. Click on the zone to access its details and manage DNS records.

Step 3: Add the CNAME Record for DMARC

  1. Within the DNS zone, select + Record set to add a new record.
  2. In the Add record set pane, input the following details:
  • Name: Enter _dmarc (this is for DMARC purposes).
  • Type: Select CNAME from the dropdown menu.
  • TTL: Set the desired Time-To-Live (TTL) value, e.g., 3600 seconds.
  • Value: Enter {your-domain-name}.protect._d.skysnag.com. Replace {your-domain-name} with your actual domain name, such as example.com.protect._d.skysnag.com.
  • Click OK to create the CNAME record.

Step 4: Verify the CNAME Record

  1. After adding the CNAME record, allow time for DNS propagation, which may take up to 24 hours.
  2. Use tools like nslookup or online DNS checkers to verify the record’s existence.

Step 5: Confirm Skysnag Integration

  1. Log in to your Skysnag dashboard.
  2. Locate the domain where you added the CNAME record.
  3. Click on Verify to confirm the connection between your domain and Skysnag.
  4. Once verified, Skysnag will automatically manage your DMARC policies and provide email security reports.

Troubleshooting Tips

  • CNAME Record Not Propagating? Ensure the record was added correctly and allow up to 24 hours for full DNS propagation.
  • Existing DMARC TXT Record Conflict? If you previously set a DMARC TXT record, consider removing or modifying it to avoid conflicts with the Skysnag CNAME.
  • Need Help? Refer to Azure’s Manage DNS record sets and records with Azure DNS documentation for detailed guidance.

By following these steps, you’ve successfully added the Skysnag DMARC CNAME record to your domain through Azure DNS. Skysnag will now manage your DMARC policies and email security, ensuring your domain is protected from phishing attacks and email fraud.

You might be interested in reading:

"Learn about phishing, a cyber scam where attackers impersonate trusted entities to steal personal information. Discover how phishing works and ways to protect against online security threats."
What is Phishing? October 11, 2023

Check your domain's DMARC security compliance

Enforce DMARC, SPF and DKIM in days - not months

Skysnag helps busy engineers enforce DMARC, responds to any misconfigurations for SPF or DKIM which increases email deliverability, and eliminates email spoofing and identity impersonation.

Start Free Trial