DMARC tells receiving mail servers what to do with email that claims to be from your domain but fails SPF/DKIM checks. Without it, anyone can spoof your domain. Gmail and Yahoo require it for bulk senders.
yourdomain.com TXT "v=spf1 include:_spf.google.com -all"
_dmarc.yourdomain.com TXT "v=DMARC1; p=quarantine; rua=mailto:dmarc@yourdomain.com"
Start with p=quarantine, review reports for 2-4 weeks, then move to p=reject.
SiteShield by Telekeen · Telekeen Communications