Email security
What does "DMARC quarantine/reject policy not enabled" mean?
Short answer: It means your DMARC record uses p=none, which only monitors — forged emails using your domain are still delivered.
The full answer
Security scanners show this warning when your record exists but has p=none. It is a normal starting point, but it does not protect you.
To fix it, confirm your real email services pass SPF or DKIM, then change p=none to p=quarantine. After a week or two with no problems, change it to p=reject.
v=DMARC1; p=quarantine; rua=mailto:dmarc@yourdomain.com
Want step-by-step help? Read What Is DMARC? A Beginner’s Guide to DMARC Policies.