DKIM/SPF/DMARC Question - order of rules for allow/reject?

My understanding with DMARC is it allows you to configure your DNS to instruct e-mail servers that receive e-mail from senders from YOUR domain/e-mail server on how to handle a failed DKIM or SPF.
However, what if those recipient servers have their own e-mail gateway that is set to "allow" failed DKIM or failed SPF.
Does the DNS rule at your domain win over the recipient's server's inbound rules?
garryshapeAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

AmitIT ArchitectCommented:
DMARC/SPF/DKIM all are designed to prevent email spoofing. I am not very clear with your question. However, if you keep your door open for everyone, no one can prevent you from email spoofing. As an admin, it is your responsibility to keep your door properly closed and allow, who are permitted to enter.
0
DrDave242Commented:
...it allows you to configure your DNS to instruct e-mail servers that receive e-mail from senders...

"Advise" might be a better verb there than "instruct." DMARC can't force a recipient server to do anything with a message; it only provides a recommendation of how to handle messages that fail SPF and/or DKIM checks. What actually happens to these messages is completely up to the recipient server. This is mentioned in RFC 7489, section 6.7:

Mail Receivers MAY choose to reject or quarantine email even if email passes the DMARC mechanism check. [...] Mail Receivers MAY choose to accept email that fails the DMARC mechanism check even if the Domain Owner has published a "reject" policy.
1

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
DrDave242Commented:
No response from asker. Question answered with appropriate documentation.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.