@beasts Yes, definitely non-DKIM email doesn't forward reliably even without DMARC policies. We've seen GMail reject non-DKIM signed email without an explicit DMARC policy on the domain; they seem to basically infer one. This isn't RFC compliant but they're the 800-kilo gorilla, what are we going to do.