The following is from an email I received recently:

Authentication-Results: mx.google.com;
       dkim=pass header.i=@yahoo.com;
       dmarc=pass (p=REJECT dis=NONE) header.from=yahoo.com

I've been reading about SPF, DKIM, and DMARC, but I haven't found any explanation of what dis=NONE means. "dis" isn't listed in the DMARC tag registry, so where is it defined and what does it mean?

  • Another possible value is QUARANTINE and the FAQ mentions disposition, so it could be the "action" to be performed. However, found no reliable evidence. – sebix Sep 10 '15 at 16:12

dis=none (disposition=none) -- means that Gmail applied "none" policy



Wikipedia currently explains this very well:


The disposition reflects the policy published actually applied to the messages, none, quarantine, or reject. Along with it, not shown in the table, DMARC provides for a policy override. Some reasons why a receiver can apply a policy different from the one requested are already provided for by the specification:

  • forwarded: while keeping the same bounce address, usually doesn't break DKIM,
  • sampled out: because a sender can choose to only apply the policy to a percentage of messages only,
  • trusted forwarder: the message arrived from a locally known source
  • mailing list: the receiver heuristically determined that the message arrived from a mailing list,
  • local policy: receivers are obviously free to apply the policy they like, it is just cool to let senders know,
  • other: if none of the above applies, a comment field allows to say more.


For more detail see RFC 7489.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.