DMARC Reporting from ValiMail for Office 365

Enable DMARC on your Office 365 Domain with Reporting from ValiMail

In this blog, I give you the steps on how to enable DMARC en DKIM for your domain. The end also how to activate the DMARC Reporting from ValiMail Many people configure DMARC and DKIM but only to monitor but then don’t do anything with it further because they don’t have a way to monitor what is happening.

At docs.microsoft.com You find a good explanation about how SPF and DMARC work together.

I am using Azure DNS to Host my domain zones, you will have four domain servers for your domain in different IP segments.

Setup DMARC on your Office 365 tenant domain

You have to create a DNS record of the type NS in the zone of your domain like understanding for Valimail. What this will do is that says that Valimail is responsible for the dmarc TXT records for your domain.

DMARC-01
DMARC-01

This is how it looks in DNS Editor of Azure DNS

DMARC-02
DMARC-02

Setup DKIM on your Office 365 tenant domain

When you are using the onmicrosoft.com domain default DKIM is already configured and you have to do nothing. When you are using your custom domain you have to configure the following two records in your domain:

selector1._domainkey.<JOUW DOMEIN> CNAME selector1-contoso-com._domainkey.<JOUW DOMEIN>.onmicrosoft.com.
selector2._domainkey.<JOUW DOMEIN> CNAME selector2-contoso-com._domainkey.<JOUW DOMEIN>.onmicrosoft.com.

so will look something for my domain-like:

DKIM-01
DKIM-01

Go to https://Portal.office.com and then to the Exchange portal.

DKIMOffice365Exchange-01
DKIMOffice365Exchange-01

And then look at your custom domain if it is enabled else enable it.

DKIMOffice365Exchange-02
DKIMOffice365Exchange-02

Activate ValiMail on your Office 365 Tenant domain

Go to the following URL https://go.valimail.com/microsoft.html and register your domain by filling in the form.

DMARC-00
DMARC-00

Overview of Reporting of Valimail

When you did all the above steps and Valimail detects that you did the configuration of the DNS record in your DNS domain they will send you a mail to activate your account.

DMARC-03
DMARC-03

DMARC-04
DMARC-04

DMARC-05
DMARC-05

DMARC-06
DMARC-06

DMARC-07
DMARC-07

DMARC-08
DMARC-08

André van den Berg
André van den Berg
Consultant, Blogger, Speaker, Meetup/Event Attendee, Owner of MyStickerBox

André is widely interested, eager to learn and a DevOps enthusiast. He has experience with various projects in the field of lift and shift of on-premise environments to Azure Cloud, migrating databases and web servers of customers at suppliers to their own Azure environments together with the supplier. In addition, he also set up standard Bicep Blueprints for rolling out Azure resources in a consistent way at multiple customers who were managed by MSP. André likes to share his knowledge and is a real team player. In addition, he can also work well independently and is pleasant to deal with.