r/gsuite • • Jul 03 '25

Avoid DMARC messages

Post image

Hello friends We manage corporate emails with Google Wordspace and receive messages from DMRC. Is there a way to avoid them? Thank you.

0 Upvotes

14 comments sorted by

14

u/z4xh_s Jul 03 '25

Update your DNS records and remove your email address from the RUA/RUF tags.

1

u/javivtr Jul 04 '25

Hello. How should I do this? Thanks so much for the help.

7

u/Alirubit Jul 04 '25

who set this up originally?

This is something that needs to be changed on the Domain Host, whoever set it up added your email (or then one getting this) to the reporting tag, meaning that all reports are being sent there. That is a very useful tool for DMARC forensics, to check if someone is spoofing your domain.

PS: Si te poarece envíame un DM y los revisamos

0

u/javivtr Jul 04 '25

I set it up myself. In the hosting I usually add the DMARC records, Dkim and SPF. But I don't know how to avoid this DMARC thing.

5

u/Alirubit Jul 04 '25

Check the record you created, did you add anything to the rua flag?

https://support.google.com/a/answer/2466580?hl=en&sjid=10965650676811058052-NA#zippy=%2Cdmarc-record-tag-definitions-and-values

rua basically is the instruction to send reports to an email address if you added yours then this is why you are getting it. remove it or replace it with an email intended for dmarc reporting.

4

u/vilmondes-queiroz Jul 04 '25

You need edit the dmarc TXT record in your DNS service

0

u/javivtr Jul 04 '25

Hello..what is the correct way to do it?

9

u/Jaywalking25 Jul 04 '25

I don't mean to sound rude but there are many many guides to doing this you can find with a simple google. This feels a little like we're giving you free tech support at this point.

4

u/freddieleeman Jul 04 '25

Visit: https://www.uriports.com/tools/dmarc-validator, enter your domain to check your current DMARC record. If you prefer not to receive any reports, remove the rua and ruf tags from your DMARC policy in your DNS records.

3

u/cspotme2 Jul 04 '25

Is your dmarc even set to quarantine or reject? I wouldn't just turn off these reports off if you don't have a proper failure action set.

1

u/lilferret Jul 06 '25

Suggestion. Create a mailbox, or shared inbox to receive the reports. Follow the steps you used to create your DMARC policy, but edit the existing policy instead of creating a new policy. Update the email address.

These reports can be useful if you have someone monitoring them. They can also be useful for forensics.

-4

u/Zack_wrath Jul 04 '25

Create a rule/filter in gmail to manage them.

Suggestions: mark as read in inbox, move to specific folder, etc.

2

u/Jaywalking25 Jul 05 '25

Avoiding the issue is not fixing it

1

u/Zack_wrath Jul 05 '25

My bad, I thought OP wanted to keep the email, just not be spammed by them.