--- title: "DMARC Policy Guide: From p=none to p=reject | Be Efficient" description: "A staged guide to DMARC policies: start at p=none, read reports, fix senders, move to quarantine and then reject without breaking legitimate email." url: https://be-efficient.co/dmarc-policy-guide site: "be-efficient.co" --- 1. [Home](https://be-efficient.co/) 2. /[Email & Deliverability](https://be-efficient.co/topics/email) 3. /DMARC Policy Guide: From p=none to p=reject [Email & Deliverability](https://be-efficient.co/topics/email) # DMARC Policy Guide: From p=none to p=reject A staged guide to DMARC policies: start at p=none, read reports, fix senders, move to quarantine and then reject without breaking legitimate email. By Itamar HaimPublished November 11, 20262 min read On this page 1. [What do the three policies do?](#what-do-the-three-policies-do) 2. [How do you roll out DMARC safely?](#how-do-you-roll-out-dmarc-safely) 3. [What are alignment tags and the subdomain policy?](#what-are-alignment-tags-and-the-subdomain-policy) 4. [What mistakes break legitimate mail?](#what-mistakes-break-legitimate-mail) 5. [How does DMARC enforcement relate to deliverability?](#how-does-dmarc-enforcement-relate-to-deliverability) 6. [Frequently asked questions](#faqs) A DMARC policy tells receiving servers what to do with mail that fails authentication for your domain: p=none only monitors, p=quarantine sends it to spam and p=reject blocks it. The safe route is to start at none, learn who sends as your domain from reports, fix the legitimate senders, then tighten step by step. ## What do the three policies do? * `p=none`: no action on failures. You receive reports. This is the starting point and meets the Gmail and Yahoo minimum for bulk senders. * `p=quarantine`: failing messages are treated as suspicious, usually delivered to spam. * `p=reject`: failing messages are refused during delivery. This gives the strongest protection against spoofing of your domain. If you have not set up the underlying checks yet, begin with [SPF, DKIM and DMARC explained](https://be-efficient.co/spf-dkim-dmarc-explained). ## How do you roll out DMARC safely? 1. Publish `v=DMARC1; p=none; rua=mailto:reports@yourdomain.com` at `_dmarc.yourdomain.com`. 2. Collect aggregate reports for several weeks. A DMARC reporting service can turn the XML into readable dashboards. 3. Identify every legitimate sender in the reports: marketing tools, support desks, billing systems. Add them to SPF and enable DKIM for each so that they align. 4. Move to `p=quarantine`. The `pct` tag lets you apply the policy to a percentage of failing mail first. 5. Watch for legitimate mail landing in spam. Fix the sender and wait. 6. Move to `p=reject` once reports show only unauthorized sources failing. ## What are alignment tags and the subdomain policy? The `adkim` and `aspf` tags set strict or relaxed alignment. Relaxed, the default, lets subdomains of the same organizational domain match. The `sp` tag sets a separate policy for subdomains. If you send marketing from a subdomain, make sure its senders align before enforcing. ## What mistakes break legitimate mail? * Jumping straight to reject without reading reports. * Forgetting a sender, such as a payroll or ticketing system, that sends as your domain. * Exceeding the SPF 10-lookup limit while adding senders. * Not signing with DKIM, so forwarded mail fails when SPF breaks. ## How does DMARC enforcement relate to deliverability? Enforcement protects your domain from spoofing, and it is a prerequisite for some brand features in inboxes. It does not by itself improve placement for your real mail, but the discipline of inventorying senders usually uncovers unauthenticated streams that were hurting you. See [the Gmail and Yahoo requirements](https://be-efficient.co/gmail-yahoo-bulk-sender-requirements) and [our deliverability overview](https://be-efficient.co/email-deliverability). ## Frequently asked questions ### Is p=reject required? No. Gmail and Yahoo require a DMARC record for bulk senders, and p=none satisfies that. Reject is optional but offers the most protection. ### What does rua mean in DMARC? It is the address that receives aggregate reports, which summarize which servers sent mail as your domain and whether it passed. ### How long should I stay at p=none? Long enough to find all legitimate senders, often several weeks to a few months, depending on how many systems send for you. ### Can DMARC block my own newsletters? Yes, if the sending platform is not authenticated and aligned for your domain. That is why you check reports before enforcing. ## On this page 1. [What do the three policies do?](#what-do-the-three-policies-do) 2. [How do you roll out DMARC safely?](#how-do-you-roll-out-dmarc-safely) 3. [What are alignment tags and the subdomain policy?](#what-are-alignment-tags-and-the-subdomain-policy) 4. [What mistakes break legitimate mail?](#what-mistakes-break-legitimate-mail) 5. [How does DMARC enforcement relate to deliverability?](#how-does-dmarc-enforcement-relate-to-deliverability) 6. [Frequently asked questions](#faqs) ## Spotted something outdated? Tools and prices change fast. If anything here is wrong or out of date, tell us and we will fix it. [Send a correction](https://be-efficient.co/contact#contact-form) ## Keep reading [More in Email & Deliverability](https://be-efficient.co/topics/email) * Email & Deliverability ### [Email Deliverability: What It Is and How to Improve It](https://be-efficient.co/email-deliverability) Email deliverability is the chance your message lands in the inbox, not spam. See what controls it, how to check yours and what to fix first. November 11, 2026 · 3 min read * Email & Deliverability ### [Email Deliverability Test: How to Check Inbox Placement](https://be-efficient.co/email-deliverability-test) An email deliverability test shows whether your mail reaches the inbox, Promotions or spam. Learn the free checks, seed tests and how to read results. November 11, 2026 · 3 min read * Email & Deliverability ### [How to Improve Email Deliverability: 10 Fixes in Order](https://be-efficient.co/improve-email-deliverability) Improve email deliverability with ten fixes in the right order: authenticate your domain, clean your list, warm up volume and cut complaints. November 11, 2026 · 2 min read ## Contact - Contact form: [Send a message](https://be-efficient.co/contact#contact-form) (we reply by email) - Follow new articles: [RSS feed](https://be-efficient.co/feed.xml)