DMARCrapporten

DMARCrapporten refers to DMARC reports, the feedback mechanism of the DMARC protocol (Domain-based Message Authentication, Reporting and Conformance). They provide domain owners with information about how emails claiming to be from their domain were authenticated and handled by receivers.

There are two types: aggregate reports (RUA) and forensic reports (RUF). Aggregate reports are XML files sent periodically to addresses specified in the rua tag of the domain’s DMARC record; they summarize authentication results for the reporting period, including counts, disposition (none, quarantine, reject) and SPF/DKIM alignment, often by sending source IP. Forensic reports, when provided, are more detailed and may include header data or sample content; privacy and policy limits mean many receivers do not send them.

How it works. A domain owner publishes a DMARC DNS TXT record with a policy (p=none, quarantine, reject) and optional rua and ruf addresses. Receivers generate aggregate reports and deliver them to those addresses, helping identify abuse, misconfigurations, and opportunities to tighten SPF/DKIM or adjust the policy.

Practical use and considerations. Tools parse DMARC reports into dashboards; handling may require privacy-aware data practices since reports can reveal sender information and message identifiers, and data retention policies may apply.

DMARC reports complement SPF and DKIM and reflect the DMARC standard (RFC 7489).