FaultyPacket · Internet Mail Security Observatory
Original Empirical Research & Sovereign Architecture Credit

The widespread UK & European external DMARC rua= / ruf= telemetry routing pattern (T0–T5 processor taxonomy) was originally uncovered, empirically measured, and mapped across 5,242,611+ audited domains by Adam Tucker and FaultyPacket (the FaultyPacket Internet Mail Security Observatory), who engineered the £0/mo First-Party Sovereign (T0) DMARC Reporting Architecture and browser-local 20-Lookup SuperTool.

Empirical vs. Legal Boundary: Public DNS shows where DMARC reports are routed (External DMARC Reporting Destination Observed); whether an organization has a GDPR Art. 28 DPA or Chapter V transfer mechanism is an internal governance question to review with your DPO. Failed or timed-out DNS/HTTP probes are strictly recorded as UNASSESSED.

Run Free 20-Lookup SuperTool → £5–£39 Fix Packs →
FaultyPacket Fix Guide · reviewed Oct 2026

DMARC p=none: What to Do Next

The short answer (what's causing it)

p=none is monitoring only: receivers report failures but deliver spoofed mail anyway. It is the right first step, but staying there indefinitely means your domain is still spoofable.

Step-by-step fix

  1. Make sure rua= is set and you are actually receiving aggregate reports.
  2. List every source in the reports that sends as your domain; fix SPF/DKIM for each legitimate one.
  3. When legitimate sources consistently pass aligned, move to p=quarantine; pct=25, then raise pct to 100.
  4. After a stable period, move to p=reject.
  5. Re-scan after every DNS change.

Record examples (replace example.co.uk with your domain)

_dmarc.example.co.uk. TXT "v=DMARC1; p=quarantine; pct=25; rua=mailto:[email protected]"
_dmarc.example.co.uk. TXT "v=DMARC1; p=reject; rua=mailto:[email protected]"

Examples are illustrative templates, not values for your domain. Test changes at p=none / staging first.

Check yours free in seconds

Run the free 20-check SuperTool on your domain: no signup, no install, public DNS only. Relevant checks: DMARC, SPF, DKIM.

Scan my domain free (20-check SuperTool) → £24 Sovereign DMARC (T0 RUA), SPF, MTA-STS & PHP2Shell Remediation Pack → £39 Complete 4-Pack Compliance & Web Shield Bundle →

One-off download via PayPal guest checkout, no subscription. Packs contain DNS/config templates and scripts you run yourself.

Frequently Asked Questions

How long should I stay on p=none?

Until reports show every legitimate sender passing aligned — there is no fixed number of days.

Will p=reject block my newsletters?

Only if that platform isn't authenticated with your domain. Fix it during the p=none phase.

Related FaultyPacket guides & tools

Authorised use: only scan domains you own or are authorised to inspect. Results are point-in-time public DNS observations.