DMARC Monitoring

DMARC (Domain-based Message Authentication, Reporting, and Conformance) protects email domains through a multi-step process.

First, it leverages SPF and/or DKIM authentication to establish alignment. When emails pass these checks, receiving servers generate reports as specified in the DMARC record. These reports, sent to a designated address, provide valuable insights into domain usage across the internet, revealing both legitimate and potentially malicious activities.

INKY's DMARC Monitoring solution streamlines this process by offering a dedicated reporting address to collect these reports. The service then aggregates and analyzes the data, presenting it in an intuitive dashboard. This empowers administrators to quickly identify issues and take appropriate action, ensuring robust email security and maintaining domain integrity.

Open

INKY’s DMARC Aggregate Report Data

Getting Started

Once entitled, getting started is easy, navigate to https://app.inkyphishfence.com/dmarc-monitoring to view the DMARC Monitoring overview page. You’ll notice a Sender Authentication Configuration (DMARC, SPF, & DKIM Records) section. Expand the section using the ^ icon if not already dropped down. You’ll notice that your teams domains are already waiting for configuration.

Open

Each domain will show the current configuration for DMARC, SPF, and DKIM - do not be alarmed if you’re not passing checks as it may take 24 hours to sync after setting up the DMARC record, further, DKIM will not turn green until after receiving the first DMARC report. Depending on your current DMARC configuration, follow the below process that best fits your use case.

Domain does not have any DMARC record currently configured

If the domain you want monitored by INKY does not have a current DMARC record the follow the below steps.

1. Select the “Cog” icon on the row of the domain that needs DMARC configured.

2. DMARC Setup Instructions will appear with the following information

   1. DNS Record Domain: _dmarc.{domain}.com Value: v=DMARC1; p=none; rua=mailto:reports@reports-sg.inkydmarc.com; TTL: 3600

   2. Navigate to your DNS Hosting (e.g., GoDaddy, Cloudflare, Namecheap, etc.) provider and add the appropriate information for your domain as a TXT record.

3. Complete the same steps for all of the domains in your domain list that you want monitored by INKY.

Domain is already configured with DMARC, but you want INKY to Monitor

If the domain you want monitored by INKY already has a DMARC record that you utilize and now you want INKY to aggregate reports for you, you can simply add INKY’s rua address to your record. This can be done in addition to what’s already configured or replace it.

v=DMARC1; p=reject; rua=mailto:reports@reports-sg.inkydmarc.com, mailto:dmarc-reports@polvocapital.com;

The record above is part of polvocapital.com DMARC record. You’ll notice that it has two RUA addresses. DMARC allows multiple addresses within the RUA section if they’re separated with a comma.

If you’re already aggregating reports to another location and want to maintain that location, you can simply add a comma and mailto:reports@reports-sg.inkydmarc.com to your current DMARC record and INKY will receive reports, in addition to your already configured address.

Or you can replace the current address with INKY’s mailto:reports@reports-sg.inkydmarc.com which ever works for your use case.

Confirm Configuration

Navigate back to https://app.inkyphishfence.com/dmarc-monitoring and for the domains configured you should see green checks with the DMARC column.

If you click on one of the green checks it’ll bring up your record and a statement saying that it appears to be properly setup to send aggregate DMARC reports to INKY. Again, please give it up to 24 hours for INKY to receive your first aggregate report.