If you pay the DNS mafia, dkim and dmarc are overkill/excessive and SPF is more than enough.
And with an IP only SMTP server, SPF is builtin: the reply-to address must include the same IP than the one use to send the email. No DNS here and still a very good SPF validation.
So, all that has a nasty smell of big email providers trying to give hell to self-hosted people/orgs, or a mistake of admins of big email providers).
You have to tell those admins, and if actually a blockade is detected, you have to go legal.
Additionally, if those are malicious expect them to shadow hire (a) team(s) of hackers to destroy your public servers.