RFC 9989 policy builder

DMARC record generator

Build a current DMARC1 TXT value. The generator uses p, sp, np, alignment, reporting, and t=y, while omitting historic pct, rf, and ri.

Local generation

CONFIGURATION

Policy and reporting

Policy domain

The DNS host will be _dmarc.example.com.

Domain policy p=

none quarantine reject

Existing subdomains sp=

Non-existent subdomains np=

DKIM alignment adkim=

SPF alignment aspf=

Aggregate report email rua=

Optional. Use a mailbox or reporting service prepared to process DMARC aggregate XML.

Test enforcementAdd t=y when an effective policy is quarantine or reject.

Failure reporting

Request message-specific reportsAdd ruf; receiver support varies and reports can contain message data.

DNS RECORD

Enter a policy domain

The output updates from the selected RFC 9989 policy, alignment, reporting, and test-mode values.

This value reflects the selected policy, not the domain's real sending sources. Verify live DNS after publication.

Current policy format

npNon-existent subdomains

The active np tag can set a distinct policy for names that do not exist, otherwise it inherits sp or p.

t=yTest enforcement

Test mode requests one-level-lower handling for quarantine or reject while aggregate reporting continues unchanged.

pct / rf / riHistoric tags

RFC 9989 marks these tags historic. This generator does not emit them or claim percentage-based rollout behavior.