What is a DMARC policy, and what do p=none, p=quarantine, and p=reject mean?
Suggested answer
DMARC (Domain-based Message Authentication, Reporting, and Conformance) is a DNS TXT record at _dmarc.domain.com that specifies what receiving mail servers should do when a message fails SPF and DKIM alignment checks.
p=none: Monitor mode — no action taken on failing messages; aggregate reports (rua) and forensic reports (ruf) are sent to the specified email. Used during initial deployment to identify legitimate sending sources.
p=quarantine: Failing messages are routed to the spam/junk folder. Intermediate enforcement step.
p=reject: Failing messages are outright rejected and not delivered. Full protection against domain spoofing.
BIMI requirement: Brand Indicators for Message Identification (BIMI) — which displays your brand logo in supporting inboxes — requires p=quarantine or p=reject DMARC enforcement and a Verified Mark Certificate (VMC) for Gmail.
pct: Percentage of failing mail to apply the policy to (default 100). Useful for gradual rollout.
Practice content for interview preparation; not an official vendor answer. Verify details against current product documentation.
Community comments (0)
No comments yet.
Sign in or create a free account to add a comment. Comments are moderated before they appear.