Finding the route…
Finding the route…
Early mistakes land in reports or spam; only the last step refuses. Each stamp is the real check, as if the steps above were published.
Read live from its published records. DMARC policy: reject.
A partial pct= or weaker subdomain policy leaves a way round your refuse policy.
Check reports for real subdomain mail, since the policy now reaches it.
With the last step published, forged mail in u-tokyo.ac.jp’s name is refused.
Each reading is the real check on these records plus the steps before it. Nothing is published. A policy is a request receivers apply as they choose. No record stops an approved service sending as you, or a lookalike domain.