How to set up DMARC and DKIM for Mailchimp

Mailchimp sends your campaigns from its own servers, so by default the DKIM signature says d=mailchimp.com and the SPF check uses a Return-Path on mailchimp.com. Both checks pass — but for Mailchimp's