DMARC reports arrive as XML attachments, nobody understands what is in them
Aggregate DMARC reports (rua) are daily XML summaries of who sent on behalf of your domain. With a free tool like Postmark DMARC, dmarcian-free or valimail.com you read them as a graph instead of XML.
Try this first
- 1Create a dedicated mailbox dmarc@yourdomain or sub-address and put it in your rua= tag.
- 2Sign up for a free-tier DMARC aggregator (Postmark DMARC, dmarcian, valimail). They parse XML into dashboards.
- 3Per sending IP/host read: mail count, SPF pass, DKIM pass, alignment status. Failing and not-yours is spoofing or a forgotten vendor.
- 4Categorize: legitimate and aligned (green), legitimate but misaligned (vendor needs DKIM), or unknown (candidate for blocking).
- 5Tune SPF and DKIM until all legitimate sources are aligned, then you can move to p=quarantine and later p=reject safely.
When to bring us in
If you want to walk through DMARC reports and identify which senders to align before reject, we can analyze them together.
See also
- Domain expires tomorrow and nobody saw the emailAn expired domain doesn't transfer instantly. There's a redemption window, but you pay extra.
- Unsure whether to enable auto-renewDisabling auto-renew only makes sense for domains you'll truly drop. For anything live, just keep it on.
- New registrar asks for auth code, can't find itEPP code or transfer code is the password to move a domain from registrar A to B.
None of the above fits?
Describe your situation below. We pass your input plus the steps you already saw to our AI and return tailored next-step advice. If it's too risky to DIY, we'll say so.
Or skip the DIY entirely
Our Managed IT clients do not look these things up. One point of contact, a fixed monthly price, resolved within working hours.