An organization must create a DMARC file and publish it to the Internet to receive DMARC aggregate reports. An organization will receive DMARC aggregate reports from any ISP that supports DMARC after publishing a DMARC record. These aggregate reports can be used for domain protection.
This article explains what DMARC aggregate reports are, how to request them, and what they contain.
What is a DMARC aggregate Report?
RUA DMARC aggregate reports (Domain-based Message Authentication Reporting and Conformance) provide information about the authentication status for messages sent by a domain. An organization can view which emails are authenticating against DKIM and SPF (Sender Policy Framework) with the help of these reports. It is also possible to see which emails aren't authenticating.
An aggregate report does not contain information about individual emails. The DMARC aggregate reports include information about the message's source, the domain used to send these messages, and the sending IP. They also contain the DKIM/SPF domain sending the message, the DKIM/SPF authentication results, and the DMARC result. An organization can use this information to identify who is sending emails on behalf of it, whether a sender has permission to send emails on its behalf, and verify that the messages have been authenticated. An organization can also see who is sending malicious email. An organization can eventually stop malicious emails from reaching its inbox by enforcing a DMARC rejection policy.
Aggregate Reports (RUA).
- Sent daily
- An overview of email traffic
- XML file format
How do I receive DMARC Aggregate Reports?
The first step is to create a DMARC record. A DMARC record allows DMARC reporting organizations to send DMARC aggregate reports back to the sender. The record contains an RUA tag (tag: rua=mailto:firstname.lastname@example.org). This email address is the destination for the DMARC reporting agency to send the DMARC aggregate reports to.
Do you need help in creating a DMARC record that is personalized?
DMARC Analyzer offers an easy-to-use setup guide that guides organizations through creating a personal DMARC record. More information on How do I create a DMARC record?
Once the RUA tag has been set, an organization will start receiving DMARC aggregate reports. These reports are typically sent daily by participating DMARC reporting organizations.