The p= value in a DMARC record is its policy: what you ask receiving servers to do with email that fails the DMARC check. There are three possible values.
The server takes no action because of DMARC. You still receive reports if you asked for them, so this setting is used to see who sends email in your name.
You ask servers to treat failing email as suspicious. In practice that often means the spam folder, though the receiving server makes the final call.
You ask servers to refuse failing email. The sender is told it was not accepted, and the message does not reach the inbox.
A pct= tag can apply the policy to only part of the failing email. A common path is to start at none, read the reports, and tighten the policy step by step. The p= tag is required: a DMARC record without a policy is not valid.
DNS Domain Detective shows which policy your DMARC record currently uses. Open DNS Domain Detective
DNS Domain Detective is now available on the App Store.
Last reviewed: 2026-11-02
#DNS #DKIM #SPF #DMARC #EmailSecurity #SysAdmin #MSP #iOS
This page gives general information and is not legal, financial or medical advice. [email protected]