Connect DMARC reports

Receiving mail servers send DMARC aggregate reports to the addresses in your DMARC record's rua= tag. Adding Mailglo's address there is how Mailglo learns which services send as your domain and whether their mail passes.

Add Mailglo's address

1. Open the domain in Domains. The setup panel shows the exact rua= value to publish, with your current recipients kept.
2. Edit the _dmarc TXT record at your DNS provider and set its rua= tag to that value. If you have no DMARC record yet, v=DMARC1; p=none; rua=... starts in monitoring mode, which changes nothing about delivery.
3. Or prepare a reviewed DMARC change from the domain's Authentication settings with “Add Mailglo as a report recipient”.

After you publish

Mailglo checks the record. Reports usually arrive within a day or two. Until then the domain shows “Waiting for first report”. Coverage shows which receivers reported and when, so a gap is visible instead of looking healthy.

Failure reports

A failure report describes one message that failed DMARC: which server sent it, which check failed and what the receiver did with it. Receivers send them to the addresses in your DMARC record's ruf= tag. Many receivers never send them, so they add detail to aggregate reports rather than replace them.

Failure reports are off until you turn them on:

1. Open the domain's Authentication settings and prepare a DMARC change with “Send failure reports to Mailglo”. Recipients already in ruf= stay.
2. Approve and publish the change. Mailglo receives failure reports for the domain from then on. A report about mail that arrived before then or while failure reports were off, or about a domain that is not yours, is set aside unread.
3. To turn them off, prepare a DMARC change that removes Mailglo's failure-report address.

What Mailglo keeps from each report: the reporting organization, when the message arrived, the sending IP address, the failed check, the delivery result, and the domains involved (the reported domain, the From domain, the DKIM domain and selector, the SPF domain and the domain of the return address). It also keeps a fingerprint of the message ID, so a report sent twice counts once.

What Mailglo never keeps: the message body, its subject, its recipients, any email address or any other header. The original report email stays in Mailglo's restricted mail archive and no screen or API shows it.

Mailglo does not delete failure reports on a schedule. Like other reports, the list shows those inside your plan's report history, described below. To have them deleted, ask support, as Leaving the service describes. Anyone who can see a domain's report details can see its failure reports, under the domain's Reports tab.

Reports and history

The free plan shows 90 days of processed report history; trial and paid plans show one year. Older reports are kept, not deleted, and return when your plan shows them.