# Need Help Setting Up DMARC for My Domain

**URL:** https://forum.dmarcian.com/t/need-help-setting-up-dmarc-for-my-domain/2649
**Category:** Community Area
**Created:** [December 3, 2024, 7:02pm UTC](https://forum.dmarcian.com/t/need-help-setting-up-dmarc-for-my-domain/2649 "2024-12-03T19:02:09Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![robert](https://avatars.discourse-cdn.com/v4/letter/r/e95f7d/32.png) [@robert](https://forum.dmarcian.com/u/robert)
#### Post date: [December 3, 2024, 7:02pm UTC](https://forum.dmarcian.com/t/need-help-setting-up-dmarc-for-my-domain/2649/1 "2024-12-03T19:02:09Z")

</div>

Hi everyone,

I’m new to DMARC and could use some guidance. I’ve set up SPF and DKIM for my domain, and now I’m trying to implement DMARC to improve email deliverability and security.

Here’s what I’ve done so far:

1. Created a DMARC record with `p=none` to monitor emails.
2. Added the policy to my DNS:

```auto
v=DMARC1; p=none; rua=mailto:dmarc-reports@example.com; ruf=mailto:dmarc-failures@example.com  

```

1. Confirmed that SPF and DKIM are passing for most emails.

However, I’m still seeing some unauthorized sources in the reports. Can anyone recommend:

- How to identify and block these sources?
- When and how to transition to `p=quarantine` or `p=reject` safely?
- Tools or tips to analyze reports efficiently?

Any advice or resources would be much appreciated!

Thanks in advance! [😊](https://menuland.ph/mcdonalds-philippines-menu-prices/)

---

<div class="post-metadata">

### Author: ![LinkP](https://yyz2.discourse-cdn.com/flex036/user_avatar/forum.dmarcian.com/linkp/32/142_2.png) [@LinkP](https://forum.dmarcian.com/u/LinkP)
#### Post date: [December 3, 2024, 7:18pm UTC](https://forum.dmarcian.com/t/need-help-setting-up-dmarc-for-my-domain/2649/2 "2024-12-03T19:18:37Z")

</div>

> [@robert](#):
>
> block these sources

You cannot. The whole point of publishing a DMARC policy is to let the receiving MTA know how to treat these forgeries. Your current policy instructs recipient servers to deliver them to the inbox. A _quarantine_ or _reject_ policy requests that they be handled via the corresponding action.

> [@robert](#):
>
> When

Once your reports indicate that your policy covers all legitimate sources of email.

> [@robert](#):
>
> how

Change the _none_ to _quarantine_ and publish the updated DNS record.

> [@robert](#):
>
> Tools or tips to analyze reports efficiently

Use a service like dmarcian so that you aren’t trying to read piles of XML reports. Don’t waste time with Forensic reports. I wouldn’t even include an _ruf_ URI in your DMARC policy.