What does this DMARC record actually do?
Read a domain's DMARC record and say what it actually does. Or build one, from p=none to enforcement, without guessing at the tags.
Step 1
Enter the domain.
Step 2
We read the record at _dmarc.<domain>.
Step 3
You get what it actually asks receivers to do, tag by tag.
From reporting to enforcement
p=none asks receivers to report and to reject nothing. It is the right place to start and the wrong place to stay — but moving past it without reading the reports first is how legitimate mail gets thrown away.
Publish rua=, read the aggregate reports until every legitimate sender aligns, then move to quarantine and then reject.