I am using username@example.net below for privacy, but this is happening to a real domain and email address.

In the mass emails that we send, DMARC is failing:

[![enter image description here](https://i.stack.imgur.com/bsj8m.png)](https://i.stack.imgur.com/bsj8m.png)

In my TXT records, this is what I have for DMARC:

`_dmarc 14400 IN TXT "v=DMARC1; p=none; rua=mailto:username@example.net; sp=none; aspf=r"`

When I go to validate my DMARC records at <https://mxtoolbox.com>, this is what I get: 

[![enter image description here](https://i.stack.imgur.com/lHtyb.png)](https://i.stack.imgur.com/lHtyb.png)

Why could DMARC be failing even when a validator says that it passes, no syntax error and everything looks right? Notice how SPF and DKIM are passing. The problem is only with DMARC for some reason that I am trying to understand.

UPDATE 1: I found this paragraph at <https://support.google.com/a/answer/2466563?hl=en>:

> 
> Alignment mode refers to the precision with which sender records are compared to SPF and DKIM signatures, with the two possible values being relaxed or strict. represented by "r" and "s" respectively. In short, relaxed allows partial matches, such as subdomains of a given domain, while strict requires an exact match.
> 
> 
> 

Notice in my `_dmarc 14400 IN TXT "v=DMARC1; p=none; rua=mailto:username@example.net; sp=none; aspf=r"` how I am trying to use the relaxed mode.