Best DMARC policy to start with for a new domain?

Start with p=none and a rua address so you get reports without affecting delivery. Watch the reports for a week or two, confirm all your legitimate sources align, then move to quarantine, then reject. Our DMARC Generator builds the record for each stage.