#DMARC Checks
#VERSION=1.0
  warn
    dmarc_status         = accept : none : off
    !authenticated       = *
    log_message          = DMARC DEBUG: $dmarc_status $dmarc_used_domain

  warn
    dmarc_status         = !accept
    !authenticated       = *
    log_message          = DMARC DEBUG: '$dmarc_status' for $dmarc_used_domain

  warn
    dmarc_status         = quarantine
    !authenticated       = *
    set acl_m_quarantine = 1
    # Do something in a transport with this flag variable

  deny
    condition            = ${if eq{$dmarc_domain_policy}{reject}}
    condition            = ${if eq{$acl_m_mailing_list}{1}}
    message              = Messages from $dmarc_used_domain break mailing lists

  deny
    dmarc_status         = reject
    !authenticated       = *
    message              = Message from $dmarc_used_domain failed sender's DMARC policy, REJECT

  warn
    add_header           = :at_start:${authresults {$primary_hostname}}
