Verify DMARC with dig and Online Tools
Last updated
Verifying DMARC with dig
The dig tool is a good way to verify your DMARC record is being returned correctly by DNSimple’s name servers. To learn more about dig, see How To Use dig.
To verify the DMARC record, query for the TXT record at _dmarc followed by your domain.
For example, on the domain example.com:
dig +short _dmarc.example.com TXT
This will return a result like:
"v=DMARC1; p=quarantine; rua=mailto:aggrep@example.com; sp=reject; aspf=r;"
If no result is returned, verify that you added the TXT record with the name _dmarc. The Name field in DNSimple should not include your domain name, otherwise it creates a record at _dmarc.example.com.example.com.
Verifying your DMARC with an online tool
Verify your DMARC with an online tool like this one from MX Toolbox. This verifies that you have set up a DMARC record, lets you know which tags and values your record contains, and alerts you to any problems with your record.
Monitoring DMARC
Mail providers that receive your email send aggregate reports, usually daily, to the address in the rua tag. The reports are XML files and can be difficult to read, so we recommend a free tool, like Postmark’s reporting, to provide a weekly, human-readable report.
If your DMARC record is published correctly but messages are still failing, the problem is often an alignment issue. See Troubleshoot Email Authentication for how to diagnose alignment failures and other common causes.
Technical details
DMARC is defined in RFC 9989, which replaced RFC 7489.
Have more questions?
If you have additional questions or need any assistance with your DNS records, just contact support, and we will be happy to help. You can also read more about DNS hosting at DNSimple.