Manage DMARC reports

This guide is about the DMARC policy and the optional security reports sent by email that can be enabled or disabled upon request.

Optional DMARC Reports

DMARC reports provide the following information:

1. Third-party senders or servers sending emails on behalf of your domain
2. The percentage of messages from your domain that pass the DMARC verification process
3. Servers or services sending emails failing DMARC checks
4. DMARC actions performed by the receiving server for unauthenticated messages from your domain (none, quarantine, or reject)

When reports indicate that most emails pass DMARC checks successfully, it is recommended to strengthen your DMARC settings by enforcing stricter measures. This will enhance your domain's protection against spoofing.

The written report is sent via email to the address you specify in the configuration and will come from dmarc@infomaniak.com or other providers such as Microsoft, Google, Yahoo, etc. It is delivered as a zip archive containing the report in XML format.

It is also possible to receive copies of problematic emails.

Analyzing a DMARC Report

Infomaniak is neither able to analyze your potential DMARC reports and records, nor able to determine their validity or compliance, as this is entirely your responsibility.

It is recommended to use an external service to analyze a DMARC report, such as https://dmarcadvisor.com/dmarc-analyzer/.

Disabling a DMARC Report

from a Mail Service

To disable sending a DMARC report if you still have a Mail Service (otherwise, read below):
 

1. Log in to the Infomaniak Manager (manager.infomaniak.com) from a web browser like Brave or Firefox
2. Click on the ‍ icon in the top right corner of the interface (or navigate via the left side menu, for example)
3. Select Mail Service (Web & Domain universe)
4. Click on the name of the relevant object in the displayed table
5. Click on Global Security in the left side menu
6. Click on Edit (in the DMARC section)
7. Remove the registered addresses and Apply the changes

from the DNS zone of a domain
 

If the Mail Service is no longer active but you continue to receive reports via email, you need to take action on the domain name directly and remove the dmarc record from its DNS zone: