Control the presence and policy of a field.
Steps….
- Build the name DMARC — Add _dmarc. in front of the domain.
- Query the TXT record — Use Resolve-DnsName with TXT type.
- Check version — L, registration must start with v=DMARC1.
- Read the policy — p=none observation, p=quarantine requests quarantine, p=reject requests rejection according to the DMARC evaluation.
Commands
Resolve-DnsName _dmarc.exemple.fr -Type TXT
Key takeaways
- Start carefully with a compliance policy if you do not yet master all sources of send.
- DMARC depends on SPF and/or DDIM alignment.