Request simple DMARC policy for a Marketing Cloud Engagement sending domain

Suggested DMARC record:
v=DMARC1; p=reject; adkim=r; aspf=r; pct=100;

• Please note that your delegated domain’s DMARC policy may differ from the above suggested record depending on when the domain was created in Marketing Cloud Engagement and/or if any modifications have been made.
• p=reject instruct ISPs to discard mail from your Marketing Cloud Engagement domain that does not authenticate properly.
  • other policy options include p=quarantine (allows email receivers to treat email that fails authentication as suspicious and typically files them in a spam folder) or p=none (no enforcement, email that fails authentication is delivered normally).
• This may provide a modest deliverability boost at Gmail.
• This will prevent spoofing for your sending domain.
• Since there is no "mailto:" parameter in this simple DMARC record, notifications for DMARC/authentication failures, spoofing reports, and/or attempted fraudulent uses of your domain will NOT be sent to any specified email address(es).
• This assumes this exact domain or subdomain is in use ONLY on Salesforce Marketing Cloud Engagement.
• This record may not be appropriate if you use this exact domain or subdomain on more than one email platform. You could be instructing ISPs to reject that other non-Salesforce Marketing Cloud Engagement legitimate mail.
• If your current DMARC record does not contain adkim=r; it will result in the same outcome as our Suggested DMARC record values listed above.
• You can find more information about DMARC here.

If you want to determine your domain’s current DMARC record:
Utilize third party DMARC record lookup tools to determine if your domain or subdomain has a DMARC record applied or inherited from a root/parent/organizational domain. 

If your domain is delegated:
Please submit a support case if you need to make any modifications to DMARC records for your delegated domains.

If your domain is self-hosted:
Please contact your domain administrator to make any modifications to your domain’s DMARC records.