Email
LIVE
DMARC Generator
Generate a valid DMARC record with custom policies
usage:
dmarc-gen --policy What is DMARC Generator?
DMARC Generator is an interactive tool for creating valid, customized DMARC records. It allows you to select the policy, configure addresses for aggregate and forensic reports, set the application percentage, and generate a TXT record ready to be inserted into DNS.
Frequently Asked Questions
How does the DMARC Generator work? +
Select the desired options (policy, report emails, percentage, alignment) and the tool automatically generates a syntactically correct DMARC TXT record to insert into DNS.
Which DMARC policy should I choose? +
If starting from scratch, use p=none for monitoring. If you already have SPF and DKIM configured and have analyzed reports, move to p=quarantine. Use p=reject only when you are sure all legitimate email sources are authenticated.
What is the pct parameter? +
The pct (percentage) parameter indicates the percentage of emails to which the policy applies. It allows a gradual rollout: pct=25 applies the policy to only 25% of messages, useful during transition.
Should I specify rua and ruf? +
rua (aggregate reports) is strongly recommended to receive statistics on email traffic. ruf (forensic reports) is optional and not all providers support it, but it provides useful debugging details.
What is SPF and DKIM alignment in DMARC? +
Alignment verifies that the domain in the From header matches the domain authenticated by SPF (aspf) or DKIM (adkim). It can be strict (s, exact match) or relaxed (r, includes subdomains).
Where do I insert the generated DMARC record? +
The record should be inserted as a TXT record in your domain's DNS with the hostname _dmarc.yourdomain.com. Propagation usually takes from a few minutes to 48 hours.