diff --git a/applications/email.nix b/applications/email.nix
index 41c9b3b..820aee0 100644
--- a/applications/email.nix
+++ b/applications/email.nix
@@ -145,7 +145,13 @@ in {
       {
         record = "_dmarc.${cfg.domain}.";
         r_type = "TXT";
-        value = ''"v=DMARC1; p=none"'';
+        # p     : quarantine => sends to spam, reject => never sent
+        # rua   : mail that receives reports about DMARC activity
+        # pct   : percentage of unathenticated messages that DMARC stops
+        # adkim : alignment policy for DKIM, s => Strict, subdomains arent allowed, r => relaxed, subdomains allowed
+        # aspf  : alignment policy for SPF, s => Strict, subdomains arent allowed, r => relaxed, subdomains allowed
+        # sp    : DMARC policy for subdomains, none => no action, reports to rua, quarantine => spam, reject => never sent
+        value = ''"v=DMARC1; p=quarantine; rua=mailto:mailman@skynet.ie; pct=100; adkim=s; aspf=s; sp=none"'';
       }
 
       # reverse pointer