# DMARC Policy for a Cold Email Domain: When to Move From none to quarantine to reject

URL: https://warmerly.com/blog/dmarc-policy-none-quarantine-reject-cold-email
Published: 2026-10-14
Reading time: 6 minutes
Tags: DNS, Authentication, Setup

> Start a cold email domain at p=none, read the reports, then move to quarantine and reject. What each policy does and the checks before you tighten it.

Start a new cold email domain at p=none, which only reports. Once the reports have shown for a few weeks that every legitimate sender passes DMARC, move to p=quarantine, and later to p=reject if you want failures blocked. Tightening before you have read the reports is how a legitimate sender, such as your sending tool, gets its mail rejected.

> **How this was checked**: The policy meanings and tags come from RFC 7489, the DMARC standard. The suggested pace is practical advice, not a rule in the standard. We make a free DMARC checker and DMARC record generator, which are linked below.

## What each policy does

**DMARC policies (the p= tag)**
| Policy | What receivers are asked to do with failing mail | When to use it |
| --- | --- | --- |
| p=none | Deliver as normal and send reports | A new domain, or any domain where you have not yet seen the reports |
| p=quarantine | Treat as suspicious, usually the spam folder | After the reports show every real sender passing |
| p=reject | Refuse the message | When you are confident and want the strongest protection against spoofing |

## A safe order of work

1. Publish v=DMARC1; p=none with an rua address you actually read. Reports are daily summaries from receivers listing who sent as your domain and whether SPF and DKIM passed and aligned.
2. Let it run for a few weeks across a normal pattern of sending. Check each source in the reports: your mailboxes, your sending tool, your website forms.
3. Fix any legitimate source that fails. The usual cause is a tool signing with its own domain, which fails alignment.
4. Move to p=quarantine. The pct tag lets you apply it to a share of mail first, for example pct=25, then raise it.
5. Consider p=reject once quarantine has run quietly for a while.

## Does a cold email domain need more than p=none?

Gmail and Yahoo require a DMARC record for bulk senders, and p=none satisfies that requirement. A cold email domain does not usually receive spoofed mail pressure the way a bank does, so many teams stay at p=none for a while. The advantage of tightening is protection against someone sending as your domain. The risk is blocking your own tools. Pick based on which matters more for that domain.

## Check the record

Use a DMARC checker to confirm the record parses, has one policy, and points reports to an address that can receive them. A common mistake is publishing two DMARC records, which makes both invalid.

**Tools and guides**
- [Free DMARC checker](https://warmerly.com/dmarc-checker)
- [Free DMARC record generator](https://warmerly.com/dmarc-record-generator)
- [DMARC report monitoring](https://warmerly.com/dmarc-monitoring)
- [Free DMARC report monitoring tools](https://warmerly.com/blog/free-dmarc-report-monitoring-tools)

---
Source: https://warmerly.com/blog/dmarc-policy-none-quarantine-reject-cold-email
Full content index: https://warmerly.com/llms-full.txt
Site index: https://warmerly.com/llms.txt