I have moved Nameservers to Cloudflare as recommended elsewhere in this forum so I could set up DKIM. That seems to be working fine. I have edited SPF record as recommended. SPF Authentication is working. But we still intermittently fail SPF Alignment. It appears that Homestead-hosted email goes out through eigbox.net (and 18.104.22.168/18 is included in our SPF record). Sometimes the return-path is shown as "sunsetbuilderssupply.com" and SPF Alignment passes; at other times, return-path is shown as "bosmailoutNN@eigbox.net" and SPF Alignment fails. It is seemingly random. Dmarc still passes because I've set p=none in the _dmarc record. But how do we get return-path to show correctly as "sunsetbuilderssupply.com" every time so we pass SPF Alignment every time? I would like to be able to set p=strict in _dmarc to prevent spoofing, but I cannot do that until I can rely on passing SPF Alignment.