Add a report address to the DMARC record on Cloudflare

Why it matters

Without rua you receive no reports about who sends mail as your domain, which makes it hard to move to an enforcing policy safely. The reports are the main reason DMARC is deployed in stages.

The fix

1. In the Cloudflare dashboard open DNS > Records, edit the TXT record named _dmarc and add rua=mailto:your-address after the p= tag, then save. Keep the existing p value and other tags as they are.
2. Cloudflare DMARC Management (Email > DMARC Management) can collect and display the reports if you prefer not to read them yourself.

Type:     TXT
Name:     _dmarc.example.com
Content:  v=DMARC1; p=none; rua=mailto:dmarc-reports@example.com

# add only rua; keep your current p= and other tags (p=none is shown as an example)

The examples use example.com. Replace it with your own domain.

Read the documentation ↗(opens in a new tab)

Related

• Reported by the DMARC policy check
• Publish a DMARC record, starting in monitoring mode
• Keep only one DMARC record
• Fix the invalid DMARC record
• Move DMARC from monitoring to quarantine, then reject
• Move DMARC from quarantine to reject
• Remove the pct tag from the DMARC record
• Remove the t=y test flag from the DMARC record
• Make the DMARC subdomain policy match the main policy
• Remove or fix the invalid tags in the DMARC record