DMARC generator tool

none

With this directive, DMARC doesn't change how email is handled by the receiver. In other words, no action is taken/messages remain unexamined.

quarantine

This policy sets aside questionable emails for further processing, which are usually exiled to the Junk folder.

reject

When emails don't come from your email infrastructure, this designation has the receiver outright reject those messages that fail DMARC authentication.

Aggregate Data Reporting Address

Used to designate an email address or addresses to send DMARC Aggregate Feedback reports to

Forensic Data Reporting Address

Used to specify which email addresses should receive DMARC failure (or forensic) reports. These failure reports are much more detailed than DMARC Aggregate reports.

Percentage of emails to check for authentication

This tag specifies the percentage of messages from a domain's mail stream that will be checked to see if they pass authentication.

Reporting Interval in seconds

It defines the reporting interval between when reports should be sent. If omitted in your protocol, the default report interval value is 86,400 seconds, which equals 24 hours.

Relaxed (default)

In relaxed SPF Alignment, the MailFROM domain and the Header From domain must be an exact match or a parent/child match (i.e. example.com and child.example.com).

Strict

The MailFROM domain and the Header From domain must exactly match.

Relaxed (default)

In relaxed (r) alignment, the DKIM domain and the Header From domain must be an exact match or a parent/child match (i.e. example.com and child.example.com).

Strict

The DKIM domain and the Header From domain must exactly match.

none

With this directive, DMARC doesn't change how email is handled by the receiver. In other words, no action is taken/messages remain unexamined.

quarantine

This policy sets aside questionable emails for further processing, which are usually exiled to the 'Junk' folder.

reject

When emails don't come from your email infrastructure, this designation has the receiver outright reject those messages that fail DMARC authentication.