I don't know how to identify such mail in pmg style logs, but i think too, it's some of those mails from postfix directly.
That's why i asked about "myorigin" for masking pmg hostname in "From" Domain (for spf).
Administrator EMail: root@FQDN
'From' for Admin Mail: Proxmox Mail Gateway <postmaster@FQDN>
Sign all Outgoing mail: No
/etc/pmg/dkim/domains:
#pmg signing
FQDN 1
"FQDN" is our email domain. Every test is via the internal mx->pmg->internet...
That't because i see PMG is using pmghost.FQDN as EHLO for some generated mails and it breaks SPF record:
SPF Verification
Failed
helo
pmg-01.FQDN
Anyway, tested your suggestion:
disabled dkim signing:
email sent from client -> mailserver (1...
Based on the DMARC analyzators.
Because PMG doesn't support changing domains for generated mails by weubi i am looking for the most easiest way to do it without extra configurations on other systems.
Target: signing PMG generated emails ONLY...
Another bug - when you remove REALM with users mapped, and after it try to remove user:
api error (status = 400: unknown realm sub.example.org)
Removing user fails.