DMARC Analyzer
Analyze DMARC policy records with syntax validation and report destination checks.
DNS lookups and policy retrieval run from the PacketWizard server with SSRF protections and timeout handling.
What is DMARC Analyzer?
A DMARC analyzer reviews a domain’s DMARC TXT record — policy, subdomain policy, percentage rollout, and reporting URIs — so you can assess spoofing protection and monitor readiness.
How it works
Enter a domain. PacketWizard fetches _dmarc.<domain>, validates tags, and explains how receivers are instructed to treat failed authentication.
Common issues
p=none forever
Monitor mode is a starting point. Without moving toward quarantine/reject, spoofed mail can still inbox for many receivers.
Invalid rua destinations
External report addresses may require DNS authorization records at the receiving organization. Broken rua values silently drop aggregate reports.
Frequently asked questions
What DMARC policy should I use?
Start with p=none and rua reporting, fix SPF/DKIM alignment sources, then advance to quarantine and reject as coverage allows.
Do I need SPF and DKIM for DMARC?
DMARC passes when SPF or DKIM passes and aligns. In practice you want both for resilient deliverability.
Related tools
Continue with these related PacketWizard tools for adjacent diagnostics.