DMARC

DMARC is a DNS record that tells receiving mail servers what to do with messages claiming to come from your domain that fail SPF and DKIM alignment checks. It matters because Gmail and Yahoo require bulk senders to publish a policy, and because it is the only mechanism that stops other people sending as your brand. Start at p=none to collect reports, then move to quarantine and reject once every legitimate sending source aligns.