Choosing each setting
- Policy decides what happens to mail that fails: nothing (
none), the spam folder (quarantine) or refusal (reject). - Reports are the reason to start with DMARC. Each day, large receivers send an XML summary of every server that sent mail claiming to be you. They're hard to read raw, so many people send them to a free report service.
- Subdomain policy covers addresses like
news.yourdomain.com. Leave it the same unless subdomains send mail you haven't authenticated yet. - Percentage lets you roll out
quarantineorrejectgradually, for example 25% for a week, then 50%, then 100%. - Alignment should stay relaxed unless you have a specific reason: strict alignment fails mail sent from subdomains.
After you publish
Give DNS a few minutes, then run the DMARC checker to confirm the record is live and valid. If you haven't set up SPF and DKIM yet, follow the setup guide before enforcing a policy.