DMARC fo — Failure reporting options
Which failures trigger a forensic report.
- Required
- no
- Default
- 0
- Valid values
0 | 1 | d | s
What it does
fo=0 reports only when both SPF and DKIM fail. fo=1 reports when either fails, which is far more informative and is what most operators want. fo=d reports DKIM failures regardless of alignment; fo=s does the same for SPF. Values combine with colons, as in fo=1:d. This tag does nothing unless ruf is also set.
Example
v=DMARC1; p=reject; rua=mailto:dmarc@example.com; ruf=mailto:f@example.com; fo=1