It sounds to me like the bounce address is the third-party provider and there's no DKIM signature, so there's nothing for DMARC to align with. Sounds to me like the answer is that if you're going to let a third party send mail for you, it'd be a good idea to enable the third party to put on some DKIM signatures, too.
If you're going to have a third party send mail for you, why can't you just list the third party IP address in your SPF record?
_______________________________________________ dmarc-discuss mailing list dmarc-discuss@dmarc.org http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)