DMARC Record Generator — p=none/quarantine/reject Policy Builder

Developer

A DMARC record generator builds the _dmarc DNS TXT value that connects SPF and DKIM authentication results to a domain-level mail handling policy.

What is it

DMARC tells receiving mail servers what the domain owner wants to happen when mail fails SPF or DKIM alignment. This tool combines p, sp, pct, rua, ruf, adkim, and aspf tags into the TXT value to publish at the _dmarc host. A common rollout starts with p=none to observe reports, then moves to quarantine or reject after legitimate sending paths are fixed.

DMARC TXT = "v=DMARC1; p=policy; pct=percent; rua=mailto:report; adkim=s|r; aspf=s|r"

How to use

  1. 1Enter the domain and choose the main p policy.
  2. 2Add aggregate report address (rua), failure report address (ruf), and pct rollout percentage.
  3. 3Publish the generated _dmarc host and TXT value in DNS, then verify with a DMARC checker.

Reference

DMARC Record Generator — p=none/quarantine/reject Policy Builder Reference
TagMeaning
p=nonecollect reports without quarantine
p=quarantineask receivers to spam/quarantine failed mail
p=rejectask receivers to reject failed mail
rua=mailto:aggregate report destination

Sources & standards

FAQ

Should I start with p=reject?

Usually no. Start with p=none reports, confirm legitimate mail passes SPF/DKIM alignment, then tighten policy gradually.

Is the report address sent to a server?

No. DMARC string generation runs entirely in your browser and does not perform DNS lookup or storage.

Does DMARC work without SPF and DKIM?

Not meaningfully. DMARC applies policy based on SPF or DKIM authentication and alignment with the visible From domain.

Related tools