A. Schulze:
So SPF *never* could be aligned to RFC5322.From for such messages.
even if spf=pass...
The only way to generate a DMARC=pass is DKIM. A domainowner has to DKIM-sign DeliveryStatusNotification or Autoresonder in alignement to the RFC5322.From.This is even more important if the domain use p=quarantine or p=reject.
like to see an exapmle? write to echo at signing-milter do org Andreas