Well, you can guard against too stringent settings by doing a few things. (I'm not sure you could actually misconfigure DMARC, unless you do something like enter the wrong email address to receive reports.)
You basically want to start running DMARC in monitor mode, which means it doesn't actually take any action on emails (like quarantining or rejecting). And you can have either individual reports or a summary aggregate report (recommended) sent to you so you can see who's having problems with your SPF/DKIM records, who's trying to send on your behalf, etc. A monitor mode DMARC record *might* look something like this: "v=DMARC1;p=none;rua=mailto:[email protected]"; The "p=" part is what tells DMARC the policy to enact; "none" equates to monitor mode. And the "rua=" is the email address to send aggregate reports to. Once you have the aggregate reports, all you have to do is decipher the XML reports Google, Hotmail, and others send you. Cheers. ----- Original Message ----- From: PLUG-discuss [mailto:[email protected]] On Behalf Of [email protected] Sent: Tue, 2017 Aug 15 13:11 To: Main PLUG discussion list Subject: Re: looking for a dmarc expert You guys make it sound easy, and it probably is. So what happens if one makes a mistake and configures the Dmarc incorrectly? Newsletters are bounced? ----- Original Message ----- From: PLUG-discuss [mailto:[email protected]] On Behalf Of Rusty Ramser Sent: Sat, 2017 Aug 12 09:15 To: Main PLUG discussion list Subject: RE: looking for a dmarc expert Hi, Keith. I’m not exactly sure what you’re asking for. But implementing DMARC (with SPF and DKIM, of course) is a pretty straightforward process. Are you only talking about deciphering the DMARC reports that mail services send? Because even that isn’t a huge deal. I’ve written a script before that parses the XML reports, pulls out the failure reports and presents the information in an easier to digest format. (Script I wrote was in PowerShell, but I reckon it wouldn’t be difficult to do in any language of preference.) Can’t imagine you’d actually need to hire someone specifically for this task; there’s not really that much to it. Cheers. -Rusty ----- Original Message ----- From: PLUG-discuss [mailto:[email protected]] On Behalf Of [email protected] Sent: Sat, 2017 Aug 12 07:05 To: Main PLUG discussion list Subject: looking for a dmarc expert Hello!! Hey I have been tasked with configuring dmarc. I only have a vague idea what it does and that boils down to stopping fraudulent emails. I receive 2 or 3 reports a day and lack the time and understanding to decipher them. It is my understanding there are "experts" and "software" that can help. Anyone know of an expert? If so I would like to talk with them about potentially being hired to do this project. Thank you so much in advance!! Keith --------------------------------------------------- PLUG-discuss mailing list - [email protected] To subscribe, unsubscribe, or to change your mail settings: http://lists.phxlinux.org/mailman/listinfo/plug-discuss
