Question 1

Where do I get DMARC XML reports?

Accepted Answer

DMARC XML aggregate reports are sent daily by major email providers (Gmail, Outlook, Yahoo, etc.) to the RUA email address configured in your DMARC record. For example: rua=mailto:dmarc-reports@yourdomain.com. Check that inbox for .zip or .gz attachments containing XML files.

Question 2

What should I look for in a DMARC report?

Accepted Answer

Look for: (1) Unknown sending IPs you don't recognize — these could be unauthorized senders or missed ESPs. (2) High failure rates from known legitimate IPs — indicates SPF or DKIM alignment misconfiguration. (3) The 'disposition' field — if you're on p=none, no enforcement is happening.

Question 3

Are my DMARC reports processed securely?

Accepted Answer

Yes. The DMARC report analyzer on dnsfyi processes all XML files entirely in your browser (client-side). No report data is uploaded to or stored on dnsfyi servers.