Foundation
What is DMARC? A plain-language guide
New to DMARC? Start with this illustrated guide to what it does, why your business needs it and what a managed service does.
Technical guides
DMARC, SPF and DKIM guides
Practical guidance for teams responsible for customer domains. Start with the foundations, then move into policy progression, reporting and troubleshooting. Standards-specific articles link to the relevant primary RFC or provider documentation.
Foundations
Foundation
SPF Records Explained: Syntax, Alignment and Lookup Limits
A practical explanation of SPF records, mechanisms, qualifiers, DMARC alignment, forwarding limitations, and common DNS mistakes.
Updated
Foundation
DKIM Setup Guide for MSPs Managing Multiple Domains
A practical DKIM guide for MSPs covering selectors, provider setup, CNAME patterns, validation, rotation, and common configuration mistakes.
Updated
Operate and progress
Operations
DMARC for MSPs: A Service Delivery Guide
A practical MSP workflow for assessing, onboarding, monitoring, and progressing DMARC across customer domains.
Updated
Operations
DMARC Policy Progression: From None to Reject Safely
Use DMARC aggregate-report evidence to move from monitoring towards quarantine and reject while reducing risk to legitimate mail.
Updated
Operations
Understanding DMARC Aggregate and Failure Reports
Read DMARC XML with a worked example: distinguish authentication from alignment, investigate sending sources and choose the next action.
Updated
Operations
How to Identify Unknown Senders in DMARC Reports
Identify unknown senders in DMARC reports using source, authentication and ownership evidence without mistaking an unfamiliar IP for proof.
Published
Operations
SPF Flattening and the 10-Lookup Limit
Understand SPF's DNS-lookup limit, how flattening works, its maintenance risks, and safer options for reducing an oversized SPF dependency chain.
Updated
Troubleshoot
Troubleshooting
How to Read DMARC Checker Results
Understand DMARC, SPF, DKIM, MX, and DNS findings from a point-in-time checker and decide what to investigate next.
Updated
Troubleshooting
Why Your DMARC Reports Are Empty
No DMARC reports arriving? Work through DNS, external rua authorisation, test-message evidence and mail ingestion with commands and expected observations.
Updated
Troubleshooting
DMARC Fail but Delivered: Understanding ARC Overrides
Learn why a receiver may deliver a DMARC-failing message after validating ARC, how local-policy results appear, and when to investigate.
Updated
Provider and standards context
Provider context
Managed DMARC for WISPs: Scope, Workflow and Boundaries
A practical WISP guide to managed DMARC scope, customer responsibilities, DNS change control, report review, policy progression, and service boundaries.
Updated
Provider context
DMARC RFC Updates: Production Impact for Operators
Review the operational impact of RFC 9989, RFC 9990, and RFC 9991 on policy discovery, reports, privacy, and managed-DMARC workflows.
Updated
Provider context
POPIA, Email Security and DMARC: A Technical Perspective
A careful look at how DMARC can support an email-security programme under POPIA without being a compliance certificate or a substitute for legal advice.
Updated
Provider context
Why your business needs DMARC
Evaluate the business case and the limits of domain authentication.
Provider context
DMARC in South Africa
A practical provider-led path for South African organisations.