Hello,Well it depends, DMARC requires both, but a more strict DMARC will reject all emails which do not pass spf and dkim, furthermore they have strict spf and dkim and must align perfectly.
I believe my issue is my DMARC record has strict spf, and thus, spf keeps failing.
I am going to change it to relaxed and see if I stop being spammed with spf failures, however keep dkim strict.
Emails should always pass both spf and dkim in order to not be spammed, if an email provider allows emails if they only pass spf and fail dkim, then they need to improve their email server.
Thus, I am not too worried about having lists.archlinux.org included on my spf record, because they still can't sign emails with dkim and thus should still be spammed/bounced.
Thanks, Polarian
Attachment:
OpenPGP_0x0770E5312238C760.asc
Description: OpenPGP public key
Attachment:
OpenPGP_signature
Description: OpenPGP digital signature
