"Thomas Cameron via users" <users@spamassassin.apache.org> writes:
> I actually set up SPF, DMARC, and DKIM on the non-profit's email > server. It works fine if I send email from the server. > > The rub is, I want all emails to presid...@example.org to be forwarded > to presidents_real_addr...@gmail.com. Since the forward happens at > mail.example.org, the "from" is from some other domain from > example.org, so it fails all the tests. You are overlooking that DKIM from the original From: is the responsibility of that domain and that if you do not modify the message then it should still pass. Domains sending without DKIM are going to be a mess.
