Why don't emails pass DMARC?

Question

gmail

I would be grateful if you could help me figure out why emails don't pass DMARC. Mail is sent via mandrill and via zoho. Emails sent via mandrill pass validation, but emails sent via zoho fail.
What has been done:
1. Digital signature is enabled on Zoho:

2. Rules for SPF are written in DNS:

3. The public key received in Zoho is also published:

The service headers of the letter look like this.
- by email:

- by gmail:

Answer 1

DMARC-SPF fails because the sending server is not in the SPF policy

>host -tTXT namskidka.ru
namskidka.ru descriptive text "v=spf1 a mx include:spf.mandrillapp.com ?all"

add include:spf.zoho.com
DMARC-DKIM fails because you don't have a DKIM signature at all (RFC 4871), but have an obsolete DomainKey signature (RFC 4870, currently deprecated). Why so - ask zoho.