DMARC Reports (RUA and RUF)

DMARC reports are messages that receiving mail providers send to addresses listed in a domain's DMARC record. Aggregate reports (RUA) are daily XML summaries of how mail claiming to be from the domain fared on SPF और DKIM; forensic or failure reports (RUF) describe individual messages that failed.

Why it matters

Reports show who is sending mail as your domain: legitimate services you forgot about, misconfigured systems and spoofers. They are the evidence you need before moving a policy from p=none to quarantine or reject without breaking real mail. Aggregate reports are widely sent; forensic reports are sent by few providers because they may contain personal data, so do not rely on receiving them.

Example

A record that requests both:

_dmarc.example.com. IN TXT "v=DMARC1; p=none; rua=mailto:dmarc-agg@example.com; ruf=mailto:dmarc-fail@example.com; fo=1"

Each RUA file is usually a zipped XML document listing source IPs, message counts, the disposition applied and the SPF and DKIM results. Most teams feed them into a parsing service because raw XML is hard to read.

Common mistakes

Publishing p=reject before reading any reports.
Sending reports to a mailbox that fills up, since volume can be large.
Using an external reporting address without the authorisation record its domain must publish.

Get notified when this term updates

Plus occasional practical tips on uptime and monitoring, nothing else. Unsubscribe anytime.

यह पेज सामान्य जानकारी है, जिसे हमारी संपादकीय टीम ने लिखा है और दस्तावेज़ीकरण बदलने पर अपडेट किया जाता है। सर्वर और प्रदाता अलग-अलग होते हैं, इसलिए बदलाव पहले सुरक्षित तरीके से जाँचें। देखें: संपादकीय नीति और अस्वीकरण.