# DNS and email health guides

> The guides cover email authentication, mail servers, mail in transit, DNS security, and domains, written by the team that builds DNS Autopilot's free check.

- [From DMARC p=none to p=reject: a safe step-by-step path](https://dnsautopilot.com/blog/dmarc-p-none-to-p-reject): Move DMARC from p=none to p=reject without losing legitimate mail: collect reports, fix senders, then quarantine and reject, with clear criteria for each step. (2026-10-18)
- [MTA-STS and TLS-RPT: how to require TLS for mail to your domain](https://dnsautopilot.com/blog/mta-sts-and-tls-rpt): Set up MTA-STS and TLS-RPT step by step: the DNS records, the mta-sts.txt policy file, a safe testing-to-enforce rollout, and the mistakes that break mail. (2026-10-18)
- [SPF's 10 DNS lookup limit: why SPF breaks and how to fix it](https://dnsautopilot.com/blog/spf-10-dns-lookup-limit): SPF allows 10 DNS lookups. Go over and it returns permerror, which can fail DMARC. See what counts, how to count yours, and how to fix it safely. (2026-10-18)