The Road to Enforcement (p=reject)

Moving to p=reject is the ultimate goal of email security. It ensures that 100% of unauthorized emails claiming to be from your domain are blocked.

Phase 1: Monitoring Mode

Start with a policy of p=none. This tells receivers to "do nothing" with failing emails but send you a report.

v=DMARC1; p=none; rua=mailto:dmarc@sentradmarc.com;

Goal: Collect data for 2-4 weeks to identify all legitimate senders (Marketing tools, CRM, HR software).

Phase 2: Quarantine (The Ramp-up)

Once you've authorized your legitimate senders (aligned SPF/DKIM), move to Quarantine. This sends failing emails to the Spam folder.

Phase 3: Enforcement (Reject)

The final state. Messages failing authentication are deleted at the gateway.

v=DMARC1; p=reject; rua=mailto:dmarc@sentradmarc.com;