hostnag

Check a domain's DMARC policy

Paste a mail domain to read its DMARC record and see which policy it asks receivers to apply to mail that fails SPF and DKIM. It runs once with a 10 second cap, the same runner a monitor uses; the result says where it ran.

How to read this

DMARC
The record as published: the policy (none only observes; quarantine and reject act), and whether a rua= address collects aggregate reports.
MX, SPF and DKIM
The rest of the mail setup is read on the same run, since a DMARC policy is only as good as the SPF and DKIM it relies on. Blocklists are left to their own page.

Questions

Is p=none a problem?

Not on day one: none is where a rollout starts, so the reports show what would fail. Left there for good, spoofed mail from your domain is delivered like your own, which is why the check flags it.

Is this a scan?

No. It reads the TXT record at _dmarc.<domain> once, along with the MX and SPF records, the way a receiving mail server does.

Related

Mail health monitoringThe records that keep mail deliverable, plus up to 8 sending addresses checked against the blocklists that actually get you rejected.

Read

SPF, DKIM and DMARC explained: how to read the records and the mistakes that get mail rejectedWhat SPF, DKIM and DMARC each do, how to read a record term by term, the dig commands, and the mistakes that get legitimate mail rejected.

Watch this for good.

Start free