Every fix for email spoofing is a DNS record. If your domain's DNS is at Cloudflare, this is exactly where each one goes, and what trips people up there.
Not sure where your DNS is? A subscriber's fix guides detect it automatically. Start with the email guide.