DMARC Record (Strict)
Same as the DMARC Record check, plus verifies the record uses an enforcing policy. DMARC supports three policy values:
| Policy | Meaning | Strict check |
|---|---|---|
p=reject | Receivers reject mail that fails DMARC | passes |
p=quarantine | Receivers move failing mail to spam | passes |
p=none | Monitor-only, no action taken on failures | fails |
A p=none policy is useful while ramping up DMARC, but provides no real protection against spoofing of your domain. Use this check on domains where you want to enforce that DMARC actually does something.
Applies to: URIBL and URI hosts.
How It Works
Same lookup as the basic DMARC Record check, with one extra step: we parse the p= tag and verify the policy value.
Fails On
- No DMARC record at
_dmarc.<domain>. - Missing
p=tag (malformed record). - Policy is
p=none.
Related Checks
- DMARC Record - basic version that accepts any policy including
p=none.