Today I learned that a DMARC quarantine/reject policy doesn’t play nice with Gmail (Google Workspace, in this case) aliases. The process of discovering it and working it out was not pleasurable.
@Mtt After they "downgraded" free Workspace I went to Gmail and aliases. After awhile I had enough problems with DMARC and SPF. Fixed everything with www.migadu.com
@alexander Unfortunately, I am locked in with Google Workspace (company integration stuff). It’s the only issue we’ve had and I was able to fix it once I figured out the issue (by using lesser policy on that domain).