DMARC record check

DMARC tells receivers what to do with unauthenticated mail. The record lives at _dmarc.yourdomain.

The three policies

Look for rua= (aggregate XML reports) and optionally ruf= (forensic). pct= less than 100 means a staged rollout. Alignment tags aspf and adkim default to relaxed. Full walkthrough: DMARC explained. Build a record: DMARC generator.