Domain health (DMARC reports)
What Google, Microsoft and other providers report about the emails sent on behalf of your domain.
Once a day, Google, Microsoft, Yahoo and other providers send DMARC reports: how many emails they received on behalf of your domain, from which servers, and whether they passed authentication (SPF and DKIM). Hermod receives these reports and shows everything in Domain health.
How to read it
- Hermod's sends: should show as passing (DKIM). If not, check the domain in Domains.
- Other services sending on behalf of your domain: they can be legitimate (your company email, your invoicing system, your online store) or fraud attempts.
- Use this information with whoever manages your DNS to adjust the SPF and DMARC records.
Once your setup is stable and every legitimate service shows as passing, you can tighten the DMARC policy (from p=none to p=quarantine and then p=reject) to block anyone trying to impersonate your company. Do this together with whoever manages your email.