Glossary
The policy that stops others spoofing your domain — and that Gmail, Yahoo, and Outlook now expect from bulk senders.
In short
DMARC (Domain-based Message Authentication, Reporting and Conformance) is a DNS record at _dmarc.yourdomain.com that tells receivers what to do when an email fails authentication: nothing (p=none), send to spam (p=quarantine), or block (p=reject). It passes when SPF or DKIM passes for a domain that matches the visible From address.
SPF and DKIM can pass for a domain other than the one in your From address. DMARC requires that at least one of them passes for your From domain (or its parent domain with relaxed alignment). That closes the gap spoofers use.
p=none: monitor only and collect reports. p=quarantine: failing mail goes to spam. p=reject: failing mail is refused. Start at p=none with a rua= address, read the reports, fix any legitimate senders that fail, then move to quarantine and finally reject.
Monitoring: v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com. Enforcing: v=DMARC1; p=quarantine; pct=100; rua=mailto:dmarc@yourdomain.com.
Questions
It satisfies the bulk sender requirement to publish DMARC, but it does not protect your domain from spoofing. Move to quarantine or reject once reports show your real mail passing.
Daily XML summaries (rua) from receivers listing which servers sent mail as your domain and whether it passed SPF, DKIM, and alignment.
More from Infiara
Infiara Where Intelligence Meets Reach.
Connect a mailbox. Import a list. Write once. Launch. Let the inbox turn replies into work.
Infiara AI
Online · Fully AI email automation
