Skip to main content
dmarc PROTOCOLHost: DigitalOcean DNSStandard: RFC 7489

How to Configure Domain-based Message Authentication, Reporting, and Conformance (DMARC) on DigitalOcean DNS

Enforces receiver policy (none, quarantine, reject) when SPF and/or DKIM alignment fails, and generates forensic aggregate reports. Follow this verified implementation guide to deploy standard compliant DMARC DNS records in DigitalOcean DNS.

Default DMARC Record Syntax

// Authoritative RFC Example
v=DMARC1; p=reject; rua=mailto:dmarc-reports@yourcompany.com; pct=100; aspf=r; adkim=r

Configuration Steps in DigitalOcean DNS

  1. 1Log into the DigitalOcean Control Panel.
  2. 2Go to "Networking" -> "Domains" and click your domain name.
  3. 3Locate the dangling record under "DNS Records".
  4. 4Click "More" (...) on the right side of the row.
  5. 5Select "Delete" and confirm.

Verification Checklist (RFC 7489)

Query DNS TXT record at _dmarc.yourcompany.com.
Ensure valid "p=" policy exists (transition from p=none to p=quarantine to p=reject).
Verify "rua=" tag points to an authenticated inbox or monitoring service.
Check alignment modes (aspf and adkim default to relaxed "r").
Live Validation Engine

Validate Your DigitalOcean DNS DMARC Record

Verify propagation, check syntax formatting, and audit recursive lookups in 60 seconds with SubDomainWatch.

Run Free DNS Validator