ZARIVORATools

What Is DMARC?

DMARC tells receiving servers what to do with mail that fails SPF and DKIM, and asks them to report what they see. It is what stops others spoofing your domain.

Check Your Email Setup →

The record

Published at _dmarc.yourdomain as a TXT record, for example v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.

Policy values

  • p=none — monitor only. Useful to start, useless as a permanent state.
  • p=quarantine — failing mail goes to spam.
  • p=reject — failing mail is refused outright. This is the goal.

Safe rollout

  • Publish p=none with a reporting address.
  • Review reports for two to four weeks and authorise every legitimate sender.
  • Move to p=quarantine, then p=reject once reports are clean.
  • Keep reporting enabled permanently so new senders are visible.