Cloudflare DMARC Setup

Domain-based Message Authentication - Step-by-step configuration guide

Prerequisites

  • 已配置好 SPF 和 DKIM
  • 已准备好接收报告的邮箱

Configuration Steps

1

进入 DNS 管理

Cloudflare → 选择域名 → DNS → Records

2

添加 DMARC 记录

Add record → Type: TXT → Name: _dmarc → Content: DMARC 策略值

3

选择策略级别

建议渐进式部署:先用 p=none 监控 → 确认无误后改为 p=quarantine → 最终升级为 p=reject

rua 是接收聚合报告的邮箱,建议配置以监控邮件认证情况
4

保存

保存记录,DMARC 通常几分钟内生效

Example Configuration

Example DMARC Value

v=DMARC1; p=quarantine; rua=mailto:dmarc-reports@yourdomain.com; pct=100

⚠️ This is an example value. Modify it according to your email service provider's requirements.

Verify Your Configuration

Terminal Command
$ dig TXT _dmarc.yourdomain.com +short

Replace "yourdomain.com" with your actual domain name

Common Mistakes to Avoid

  • Name 写成 _dmarc.yourdomain.com(应该只写 _dmarc)
  • 一开始就用 p=reject 导致正常邮件被拒绝
  • 没有配置 rua 邮箱,无法收到报告

Verify Your DMARC Configuration

After setting up your DMARC record, use our free checker to verify it's correctly configured.

Check Your Domain Now