Referins Email Authentication - DMARC

DMARC is a validation system for incoming emails. It checks that the domain of the From email address matches the domain the message is actually being sent through. If the domains don’t match, the email fails the DMARC check.

Covered in this article:

What is DMARC

How to fix the email failed from DMARC

What is DMARC?

DMARC stands for domain-based message authentication, reporting, and conformance. It is a protocol that uses SPF and DKIM to determine the authenticity of an email, allowing domain owners to protect their domains from unauthorized use.

DMARC provides instructions to receiving servers about how to handle incoming mail. To get delivered, messages need to pass DKIM and SPF alignment checks according to the requirements set by the DMARC policy. Messages that do not pass DMARC checks can be rejected, reported back to the domain owner, or placed in the spam folder.

Implementing a DMARC policy on your domain can help protect you from spoofing, limiting your brand’s and recipients' exposure to potentially fraudulent and harmful messages.

How to Fix the Email Failed From DMARC?

Referins email system has two types of sending domains.

1. Shared sending domain: 

When you use Referins email systems, all your emails will be sent through Referins shared domains mg.msgsndr.net and mg.msgsndr.org

Note: DMARC is not required to send emails from the shared domains on the Referins email system. 

The error message says:

"The domain in your from address ([email protected]) has a p=reject DMARC policy. Most inbox providers will reject your messages without a dedicated sending domain configured, resulting in elevated bounces. To avoid elevated bounces, use company emails."

Your actual DMARC record is: v=DMARC1; p=reject"

Note: To fix the issue, Temporarily change your DMARC record with your DNS to have a p=none policy

The DMARC error message above has a p=reject or p=quarantine. This will prevent emails that fail DMARC to be sent to the Inbox folder. To make sure messages are delivered even if DMARC fails, you will want to change the policy in your DMARC to p=none with your DNS provider. Moving to a more relaxed policy is not recommended so this change should be temporary.

2. Dedicated sending domain

In order to be DMARC compliant, you need to connect a dedicated sending domain to your account that matches the domain in your sender email address (i.e. your from address). For example, if you send an email using [email protected] as the from-address and test.com is protected by DMARC, your account will need to use a dedicated sending domain like mg.test.com to meet DMARC requirements.

For more information, see our article, “How to Set Up DMARC Records for Email”

Pro Tips

1. Use Dedicated Domains for Compliance: To avoid DMARC-related issues, always use a dedicated sending domain that matches your email's "From" address. This ensures compliance with DMARC policies and reduces the risk of emails being rejected or marked as spam.
2. Monitor DMARC Reports: Regularly review DMARC reports to identify and address any authentication issues. This can help you proactively manage and resolve problems related to email deliverability.
3. Implement Gradual Policy Changes: When adjusting DMARC policies, use a gradual approach. Start with p=none to monitor and analyze how emails are being processed before moving to stricter policies like p=quarantine or p=reject.
4. Coordinate with DNS Providers: Ensure that your DNS provider is updated with the correct DMARC settings. Changes to DMARC records can take some time to propagate, so plan adjustments well in advance of critical email campaigns.

FAQ

1. What is DMARC and why is it important?
DMARC (Domain-based Message Authentication, Reporting, and Conformance) is a protocol that helps prevent email spoofing by ensuring that emails align with SPF and DKIM standards. It is important to protect your domain from unauthorized use and improving email deliverability.

2. What should I do if my emails are failing DMARC checks?
If your emails are failing DMARC checks, you may need to adjust your DMARC policy. Temporarily set the policy to p=none to monitor issues without affecting email delivery. Ensure you have a dedicated sending domain that aligns with your email’s "From" address.

3. How do I fix the DMARC error message about a p=reject policy?
To fix a DMARC error with a p=reject policy, temporarily change your DMARC record to p=none with your DNS provider. This will prevent your emails from being rejected and allow you to troubleshoot and resolve alignment issues.

4. How can I set up a dedicated sending domain to meet DMARC requirements?
To set up a dedicated sending domain, configure your email system to use a domain that matches your "From" address. For example, if your email address is [email protected], use a subdomain like mg.test.com for sending emails. This helps meet DMARC requirements and improves deliverability.

5. Where can I find more information on setting up DMARC records?
For detailed instructions on setting up DMARC records, refer to your email system's documentation or consult articles like “How to Set Up DMARC Records for Email” for step-by-step guidance.