DMARC
DMARC is an email specific policy. It's brought into effect using DNS TXT records.
The DMARC policy defines what recipient mail servers should do if DKIM and SPF checks fail, and how this should be reported.
Consequently DMARC relies on DKIM and SPF records being in place. If you haven't already deployed DKIM and SPF records you'll need to do so.
DKIM and SPF records can be deployed using the "Email deliverability" section of your cPanel.
For all of these records to be deployed from within your cPanel, your domain needs to be using our nameservers, and you need to have your mailboxes hosted with us. This doesn't mean you should change your domain's namservers to ours, or migrate your mail services, what it means is:
If your domain IS using our nameservers, AND your mailboxes are held with us, you can use the Zone Editor and the Email Deliverability facilities in your cPanel to deploy DKIM, SPF and DMARC records.
If your domain is NOT using our nameservers but your mailboxes ARE held with us, you'll need to use the Zone Editor and the Email Deliverability facilities in your cPanel to create DKIM, SPF and DMARC records, but you'll then need to copy these records from the Zone Editor in your cPanel, in to the DNS management area specific to the nameservers your domain uses.
If your mailboxes are NOT held with us but your domain IS using our nameservers, you'll need to obtain SPF and DKIM records from your mail provider and then deploy them in the Zone Editor in your cPanel before you can add a DMARC record.
If your mailboxes are NOT held with us but your domain IS NOT using our nameservers, we're not involved with this situation. You'll need to liaise with your mail provider and the party that manages your domain's DNS.
Creating a DMARC record
There are numerous online tools that you can use to create a DMARC records:
https://mxtoolbox.com/DMARCRecordGenerator.aspx
https://dmarcian.com/dmarc-record-wizard/
https://easydmarc.com/tools/dmarc-record-generator
https://dmarcly.com/tools/dmarc-generator
The net result if using one of these tools is that you'll be provided with a DMARC record that looks something like this (this record is purely an example, don't actually deploy this record). The record that you generate will vary according to the policy you define when using the tools above:
v=DMARC1; p=quarantine; rua=mailto:you@yourwebsite.com; sp=none; fo=0;
Once you have obtained this record, copy it to your computer's clipboard or a plain text editor, then log in to your cPanel and then click on "Zone Editor":
And then click on "Manage" as the same line as the domain to which you're adding the DMARC record:
Then click on "+Add record":
The add the following:
Name: dmarc_.yourdomain.com (replacing the yourdomain.com part with your actual domain)
TTL: 1440
Type: TXT
Record: This is where you put the record you obtained when using one of the tolls above
Then click "Save Record":
As with all DNS records, this change is subject to propagation, so it could take up to 24 hours to fully come in to effect.
