Is it possible you’re getting SPF fails when forwarding emails onto other domains? If so, one fix might be to enable Sender Rewriting Scheme (SRS). We recently ran into this issue when launching the self-hosted nixos.org mailserver. See the bug report and the PR implementing SRS.