Checks

DMARC policy is none

The DMARC record sets p=none.

Why it matters

p=none asks receivers to deliver mail even when alignment fails. It is a monitoring mode, not enforcement.

What to do

After you have read aggregate reports, move p= to quarantine or reject.

Reference

DMARC publishes policy for handling messages that fail SPF/DKIM alignment.

RFC 7489 — DMARC