# DMARC monitoring URL: https://iblockspam.com/features/dmarc-monitoring Last updated: 2026-10-10 > iBlockSpam collects your DMARC aggregate reports, shows who sends as your domain and what passes, and tells you when to move to quarantine or reject. Receivers send daily DMARC reports about mail that uses your domain. We collect them, turn them into a clear list of who sends as you, and tell you when it's safe to tighten your policy. ## What it shows you When your DMARC record has a `rua=` address, mailbox providers such as Gmail, Outlook.com and Yahoo send a daily aggregate report: which servers sent mail using your domain, how many messages, and whether each one passed SPF, DKIM and DMARC. The reports are XML files, one per receiver per day, and they're hard to read by hand ([RFC 9990](https://www.rfc-editor.org/rfc/rfc9990.html)). Point those reports at us and your portal turns them into answers: - **Who sends as your domain:** every source, grouped by sending service where we can recognise it, with its reverse DNS name and network owner. - **What passes:** the share of reported mail that passes DMARC, with SPF and DKIM alignment for each source. - **What needs fixing:** your own senders that fail, such as a newsletter tool that isn't signing with DKIM for your domain. - **What looks like spoofing:** sources that aren't yours and fail authentication. - **When to tighten your policy:** a recommendation to move from `p=none` to `quarantine`, then `reject`, once your own senders pass consistently. A daily chart shows passing and failing mail over the last 30 days, so you can see whether a fix worked. ## How to turn it on 1. In your portal, open the domain and switch on DMARC monitoring. We publish the small authorisation record that tells receivers our address may receive your reports. 2. Add `rua=mailto:dmarc@iblockspam.com` to your DMARC record. If you already send reports somewhere else, keep that address and add ours with a comma. 3. Wait a day or two. Reports arrive once a day from each receiver that sends them. No DMARC record yet? The free [DMARC Record Generator](https://iblockspam.com/tools/dmarc-generator) builds one, and the [DMARC Checker](https://iblockspam.com/tools/dmarc-checker) confirms it's valid. ## From p=none to reject, safely Most domains start with `p=none`, which asks receivers to report but not act. That's the right first step, but it doesn't stop anyone spoofing you. The reports show which of your services still fail, so you can fix them before receivers start quarantining or rejecting their mail. Our recommendation is based on your own senders' pass rate over the recent reports. When it's high and steady, we suggest `quarantine`; after that runs cleanly, `reject`. You decide when to change the record. Our guide on [moving from p=none to reject](https://iblockspam.com/blog/dmarc-none-to-reject-small-business) covers the steps. ## Honest limits - **It reports; it doesn't block.** Receivers enforce your DMARC policy. Monitoring tells you what's happening and when it's safe to ask them to enforce more. - **Counts are a sample.** Only receivers that send aggregate reports are counted, so totals are lower than the mail you actually send. - **Reports arrive a day late.** Receivers send them about once a day, so today's mail shows up tomorrow. - **Aggregate reports only.** We use the daily summary reports, not per-message failure reports, which few receivers send and which can contain personal data. - **Sender names are best effort.** We recognise common services by their reverse DNS and network owner. An unknown source isn't automatically malicious; it may be a service you forgot about. - **For protected domains.** Monitoring is available for domains that are verified and filtered on your account. ## Free alternatives If you'd rather look at one report yourself, the free [DMARC Report Analyzer](https://iblockspam.com/tools/dmarc-report-analyzer) reads a report file in your browser without uploading it. Our guide on [how to read DMARC reports](https://iblockspam.com/blog/how-to-read-dmarc-reports) explains every field, and [unknown sources in DMARC reports](https://iblockspam.com/blog/unknown-sources-in-dmarc-reports) helps you sort your services from spoofers. DMARC monitoring is included in both plans; see [pricing](https://iblockspam.com/pricing). It works alongside [domain monitoring](https://iblockspam.com/features/domain-monitoring), which alerts you if your DMARC record itself changes, and [Lookalike Domain Watch](https://iblockspam.com/features/lookalike-domain-watch), which looks for impostor domains that DMARC can't cover. ## Frequently asked questions ### What do I add to my DMARC record to use DMARC monitoring? Add our report address to the rua tag: rua=mailto:dmarc@iblockspam.com. You can keep any address you already use by listing both, separated by a comma. Turn monitoring on for the domain in your portal first, so receivers accept our address as a report destination. ### Does DMARC monitoring block spoofed mail? No. It reports; it doesn't block anything by itself. Blocking happens at the receiving mail servers when your DMARC policy is quarantine or reject. Monitoring shows you when your own senders pass reliably enough for you to set that stricter policy. ### Why are the message counts lower than what we actually send? Counts come only from receivers that send aggregate reports. Large mailbox providers do, but many smaller servers don't, so the totals are a sample of your real mail. They are still the best evidence of who sends as your domain and whether it passes. ### How long do you keep DMARC report data? Parsed report data is kept for 13 months, so you can compare this month with the same month last year. The original report files are deleted once they've been read. ### Which plans include DMARC monitoring? Both Protect and Protect Plus include it for each protected domain, at no extra charge. There is no separate DMARC product to buy. --- Source: iBlockSpam, https://iblockspam.com/features/dmarc-monitoring (this is a Markdown copy; the HTML page is canonical). Quote with attribution and a link. Site index for AI assistants: https://iblockspam.com/llms.txt