Christian Krakau-Louis
99 lines
3.6 KiB
Markdown
99 lines
3.6 KiB
Markdown
# Managing Domains
|
|
|
|
This guide explains how to add, configure, and manage domains in DMARQ.
|
|
|
|
## Adding a New Domain
|
|
|
|
To add a new domain for DMARC monitoring in DMARQ:
|
|
|
|
1. Navigate to **Domains** in the main navigation
|
|
2. Click the **Add Domain** button
|
|
3. Enter your domain name (e.g., `example.com`)
|
|
4. Click **Verify** to ensure the domain is valid
|
|
5. Click **Add Domain** to confirm
|
|
|
|
DMARQ will add the domain to your account and begin monitoring for DMARC reports related to this domain.
|
|
|
|
## Domain Settings
|
|
|
|
For each domain, you can configure several settings:
|
|
|
|
### DMARC Policy Configuration
|
|
|
|
DMARQ allows you to view and optionally manage your DMARC policy:
|
|
|
|
- **Current Policy**: View your active DMARC policy (none, quarantine, reject)
|
|
- **Policy History**: Track changes to your DMARC policy over time
|
|
- **Policy Recommendations**: Get suggestions for improving your DMARC implementation based on your compliance rate
|
|
|
|
### DNS Record Management
|
|
|
|
If you've enabled Cloudflare integration, you can manage your email authentication DNS records directly from DMARQ:
|
|
|
|
- **View Current Records**: See all SPF, DKIM, DMARC, and BIMI records
|
|
- **Update Records**: Modify existing records as your email infrastructure changes
|
|
- **Add New Records**: Create new records like additional DKIM selectors
|
|
|
|
To update a record:
|
|
|
|
1. Find the record you want to change in the DNS Records section
|
|
2. Click **Edit**
|
|
3. Make your changes in the record editor
|
|
4. Click **Save** to apply the changes to your DNS
|
|
|
|
### Report Delivery Settings
|
|
|
|
Configure where and how DMARC reports are delivered:
|
|
|
|
- **RUA Email**: The email address receiving aggregate reports
|
|
- **RUF Email**: The email address receiving forensic reports
|
|
- **Report Frequency**: How often you want to receive reports
|
|
|
|
## Domain Health Check
|
|
|
|
DMARQ provides a health check feature for each domain:
|
|
|
|
1. Navigate to the domain details page
|
|
2. Click **Run Health Check** to analyze your domain's email authentication setup
|
|
3. Review the results, which include:
|
|
- SPF record validation
|
|
- DKIM selector verification
|
|
- DMARC record syntax check
|
|
- MTA-STS TXT and HTTPS policy validation
|
|
- MX record confirmation
|
|
- BIMI record validation (if applicable)
|
|
|
|
### MTA-STS Posture
|
|
|
|
The domain detail page checks `_mta-sts.<domain>` and fetches the policy from `https://mta-sts.<domain>/.well-known/mta-sts.txt`.
|
|
|
|
DMARQ marks the check healthy when the TXT record contains `v=STSv1` with an `id`, the HTTPS policy is reachable, and the policy includes `version`, `mode`, `mx`, and `max_age`. Findings include the DNS record, policy URL, mode, MX patterns, and actionable guidance for missing records, fetch failures, invalid policies, or non-enforcing `testing`/`none` modes.
|
|
|
|
MTA-STS posture uses the same cached DNS refresh behavior as the existing DNS health checks. Use the DNS refresh action when you publish or update a policy and need DMARQ to re-check immediately.
|
|
|
|
## Domain Groups
|
|
|
|
If you manage multiple domains, you can organize them into groups:
|
|
|
|
1. Go to the **Domains** page
|
|
2. Click **Manage Groups**
|
|
3. Create a new group and give it a name
|
|
4. Drag and drop domains into the group
|
|
|
|
Groups allow you to:
|
|
- View aggregate statistics across multiple related domains
|
|
- Apply settings changes to multiple domains at once
|
|
- Organize domains by business unit, client, or purpose
|
|
|
|
## Removing a Domain
|
|
|
|
To remove a domain from DMARQ:
|
|
|
|
1. Navigate to the **Domains** page
|
|
2. Find the domain you wish to remove
|
|
3. Click the **Options** menu (three dots)
|
|
4. Select **Remove Domain**
|
|
5. Confirm the removal
|
|
|
|
Note that removing a domain will delete all stored DMARC reports for that domain.
|