Glossary · Authentication
DMARC reports are feedback mailbox providers send domain owners: daily aggregate summaries (rua) and per-message failure reports (ruf).
The rua= tag in a DMARC record asks receivers for aggregate reports: compressed XML files, usually daily, listing each IP that sent mail using your domain, how many messages, and whether SPF, DKIM and DMARC passed. They're the map you need before tightening a policy.
The ruf= tag asks for failure (forensic) reports about individual failing messages. For privacy reasons most large providers don't send them. If reports go to another company's domain, that domain must publish an authorisation record, or many receivers won't send them.
Every domain you run in one inbox, from $3 a mailbox. 14 days free, no card.