- What needs attention
- DMARC policy is set to p=none.
- Why it matters
- Anyone can spoof the domain in phishing campaigns.
- Steps
- 1Publish SPF with the authorized senders.
- 2Sign outbound mail with DKIM.
- 3Raise DMARC to p=quarantine, then p=reject.
- Verify
dig TXT _dmarc.mail.company.gt
Illustrative demo

