DMARC in education

[Matthew.Black at csulb.edu (Matthew Black)]

Looking at implementing DMARC for my institution. We currently have an SPF record and use DKIM to sign a small subset of messages. Rollout recommendations for DMARC suggest initially creating a "p=none" record to gather information on how a domain is being used. The RUA tag specifies a URI of where to send daily reports.

Trying to get an idea of how many reports to expect a day or two after the dust settles. Does anyone use an aggregator to process their feedback (RUA tag) and/or forensic reports (RUF tag)?

DMARC information.
https://dmarc.org/


See slide 38 of 93 at http://www.slideshare.net/kka7/fighting-email-abuse-with-dmarc?qid=5e90be27-3fc0-41ed-9d71-253978cc6a12&v=default&b=&from_search=2

Everyone's first DMARC record
V=DMARC1; p=none; rua=mailto:aggregate at example.com;


Cheers!

matthew black
information technology services
california state university, long beach