Move DMARC from p=none to enforcement
dmarc-none-policy
A p=none policy reports spoofing but never stops it. Move to quarantine, then reject, once aggregate reports show legitimate mail passing.
CDN and edge
Cloudflare
- 1 Go to DNS > Records
- 2 Edit your _dmarc TXT record to upgrade p=none to p=quarantine or p=reject
- 3 Start by reviewing your DMARC aggregate reports (rua=) before enforcing
Type: TXT
Name: _dmarc
Content: v=DMARC1; p=reject; rua=mailto:[email protected]
# Migration path:
# 1. p=none (monitor — you are here)
# 2. p=quarantine (spam folder)
# 3. p=reject (block entirely — goal)Does your app still have this?
Scan your domain