FALKEN'S MAZE / CHECKS / DMARC POLICY

DMARC policy

What Joshua checks

Checks for a DMARC record and how strict its policy is.

Why it matters

DMARC tells receivers to reject spoofed mail. A policy of "none" only monitors.

How to fix it

Move to p=quarantine, then p=reject once reports show legitimate mail passing.

In the Maze Score

Worth

15 points (half for a warning)

Severity

High

Runs on

Every scan, including the free report card

Related checks

• SPF recordFree
• DKIM signingFree
• Mail serversFree
• SPF lookup limitPro (Watchtower)
• DMARC alignmentPro (Watchtower)
• MTA-STS and TLS-RPTPro (Watchtower)
• BIMIPro (Watchtower)