dmarc PROTOCOLHost: NS1 (IBM)Standard: RFC 7489
How to Configure Domain-based Message Authentication, Reporting, and Conformance (DMARC) on NS1 (IBM)
Enforces receiver policy (none, quarantine, reject) when SPF and/or DKIM alignment fails, and generates forensic aggregate reports. Follow this verified implementation guide to deploy standard compliant DMARC DNS records in NS1 (IBM).
Default DMARC Record Syntax
// Authoritative RFC Example
v=DMARC1; p=reject; rua=mailto:dmarc-reports@yourcompany.com; pct=100; aspf=r; adkim=rConfiguration Steps in NS1 (IBM)
- 1Log in to the NS1 Management Portal.
- 2Select "DNS" from the left menu and open your target zone.
- 3Search for the dangling subdomain record name.
- 4Click into the record details view.
- 5Click "Delete Record" and confirm in the modal.
Verification Checklist (RFC 7489)
Query DNS TXT record at _dmarc.yourcompany.com.
Ensure valid "p=" policy exists (transition from p=none to p=quarantine to p=reject).
Verify "rua=" tag points to an authenticated inbox or monitoring service.
Check alignment modes (aspf and adkim default to relaxed "r").
Live Validation Engine
Run Free DNS ValidatorValidate Your NS1 (IBM) DMARC Record
Verify propagation, check syntax formatting, and audit recursive lookups in 60 seconds with SubDomainWatch.