DNS guides

DMARCWorks, should be fixed

DMARC without rua: add an address to receive reports

Your DMARC record has no rua= tag, so nobody receives reports on who sends as your domain. Add one.

What it means

rua= lists where receivers send aggregate reports: daily XML summaries of every server that sent mail as your domain and whether it passed SPF and DKIM.

Without it, the policy still applies, but you can't see what's failing.

Why it matters for cold email

Reports are how you find a sending tool with broken authentication, or someone spoofing your domain, before it shows up as worse inbox placement.

How to fix it

  1. Pick a mailbox for reports, or sign up for a DMARC report service that turns the XML into charts.
  2. Add rua=mailto:<address> to your existing record.
  3. If the address is on a different domain, that domain must publish a record authorising reports for yours (report services set this up).

Adding a report address

Before

v=DMARC1; p=none

After

v=DMARC1; p=none; rua=mailto:[email protected]

Questions

What about ruf=?

ruf asks for per-message failure reports. Many receivers don't send them, and they can contain personal data, so aggregate reports (rua) are what most domains use.

Related problems

Last checked 2026-10-21 against RFC 7208 (SPF), RFC 6376 (DKIM) and RFC 7489 (DMARC). Full setup guide

Sending cold email? Outsquid re-checks these records for every sending domain every hour, so a broken one doesn't go unnoticed. How deliverability works