Read a domain’s DMARC record tag by tag: its policy for mail that fails, where reports go, how much mail it covers, and whether it only watches.
The record at _dmarc.allbirds.comv=DMARC1;p=quarantine;pct=100;rua=mailto:[email protected];ruf=mailto:[email protected];fo=1
Asked of public resolvers (1.1.1.1 and 8.8.8.8) as anyone on the internet sees it, at the moment of the check. A record changed in the last few hours may not show everywhere yet.
p=noneWatchMail that fails is delivered as before, and the reports show who sends as the domain.p=quarantineQuarantineMail that fails goes to spam. The step to take once reports show only your own mail.p=rejectRejectMail that fails is refused before anyone sees it.v=DMARC1p=rejectrua=mailto:[email protected]pct=100The record sits at _dmarc.example.com. Each step up is taken only when the reports show nothing of yours would fail it.
No rule in the rulebook covers this, so here is what it reads.
p=none, with reports sent to an address you read. Move to quarantine and then reject once the reports show only your own mail.
Gmail and Yahoo require it of anyone sending them much mail, and it is what stops others sending as your domain.
Daily summaries from receivers of the mail that claimed to be from your domain, and whether it passed.
One page is one part. A read checks every page against the whole rulebook and says what to fix first.
See allbirds.com’s report