Thanks for this comment. I also went down the same path. However, for me mails to Microsoft (outlook, live etc) don't seem to be working.
You said - > I then spent a couple of days setting up the various DMARC MTA-STS policies etc. [most of that time involved looking up what they were and why I needed them!]
Can you tell me how you did this? It'll be a bit help!