Finding the route…
Finding the route…
Early mistakes land in reports or spam; only the last step refuses. Each stamp is the real check, as if the steps above were published.
Read live from its published records. DMARC policy: reject.
A partial pct= or weaker subdomain policy leaves a way round your refuse policy.
Check reports for real subdomain mail, since the policy now reaches it.
With the last step published, forged mail in ibm.com’s name is refused.
Each reading is the real check on these records plus the steps before it. Nothing is published. A policy is a request receivers apply as they choose. No record stops an approved service sending as you, or a lookalike domain.