The DMARC record has an invalid p, sp or np tag.

DMARC_INVALID_POLICY · Severity: Error

• ErrorDMARC_INVALID_POLICY

  The DMARC record has an invalid p, sp or np tag.

  These tags must be none, quarantine or reject. RFC 9989 says receivers treat a record with an invalid value as p=none if it has a valid rua address, and apply no DMARC at all otherwise.

  Recommendation: Set the tag shown in the evidence to one of the defined values.

Reported by

• Domain health check
• Mail configuration check
• DMARC check

Available through the API

• Domain health check API
• Mail configuration check API
• Bulk mail configuration check API
• DMARC check API

Related findings

• Info DMARC_INHERITED The DMARC policy comes from a parent domain.
• Info DMARC_HISTORIC_TAG The DMARC record contains a tag that RFC 9989 lists as historic.
• Error DMARC_MULTIPLE_RECORDS More than one DMARC record was found.
• Warning DMARC_NOT_FOUND No DMARC record was found for the domain or any of its parent domains.
• Info DMARC_NO_RUA The DMARC record has no aggregate report address (rua).
• Info DMARC_PARTIAL_PCT The DMARC record uses pct below 100, a tag that RFC 9989 removed.

All findings