M365: Sending domain does not pass DMARC verification

[DrMacintosh]

Hello all, so we're working for a company that sends emails whenever a certain button is clicked in a program to mark when we are finished with a site. Previously this worked, but now the emails are not being delivered at all. I discovered that the reason is because of DMARC. Exchange is not delivering their emails because the sender does not pass DMARC verification and has a DMARC policy of reject.

 

I have informed them that their security settings are messed up, but who knows if they will fix them and will instead shift the responsibility onto me. If that's the case, is there a rule I can create to allow emails from their specific domain to bypass the DMARC checks and send the emails along to their intended recipients?

[Eigenvektor]

I assume this is what you want? https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/email-authentication-arc-configure?view=o365-worldwide

 

This should allow you to accept incoming messages, even when their signature is messed up. Of course, the proper solution would be for the sender to fix their domain's DNS entries for DMARC.