See every server sending as your domain, whether it authenticates, and what to fix before you turn enforcement on.