Missing DMARC Policy

[nijel]

Reported by Emanuel Bronshtein:

Missing DMARC Policy

more information about DMARC:
https://dmarc.org/wiki/FAQ
https://support.google.com/a/answer/2466580?hl=en

The following online tools can be used to view DMARC policy:
1. https://dmarcian.com/dmarc-inspector/
2. https://mxtoolbox.com/dmarc.aspx

Note: for example my domain e3amn2l.com has "v=DMARC1; p=none; adkim=s; aspf=s; fo=1; rua=mailto:dmarc-feedback@e3amn2l.com; ruf=mailto:dmarc-reports@e3amn2l.com" policy.

fix:
1. Implement DMARC policy:
https://support.google.com/a/answer/2466563?hl=en
which will report feedback & reports via "rua" & "ruf" options, it's recommended to start with p=none; and change the p value to quarantine/reject afterwards.

[ibennetch]

This really depends on #32 first (even with p=none, it seems to still be best to implement DKIM first).

[williamdes]

We have since some years a DMARC policy: v=DMARC1; p=quarantine; sp=quarantine; adkim=s; fo=1; ri=3600; rua=mailto:xxxxx-rua@phpmyadmin.net; ruf=mailto:xxxx-ruf@phpmyadmin.net