General comment - i suggest you remove lists.archlinux.org from your spf record. To pass dmarc you only need DKIM to be valid and aligned - spf is not needed. Since passing SPF with SPF alignment also passes DMARC, then adding a 3rd party mailing list as a permitted SPF sender is really a bad idea. Reason being that now you can have mail, which has no dkim signature at all, coming solely from that IP that can pass dmarc - even if you didn't sent it. This reduces the value of DMARC for your domain. Doing so, just gives email carte blanche to a third party for no benefit. I would therefore recommend that you remove lists.archlinux.org from your SPF record - at best its not needed, at worst you have reduced your email security. Just my view of course. gene