Delivery Status Notifications rejected by DMARC policy

Feb 21, 2024
12
1
3
Croatia
I've got it properly set SPF,DKIM and DMARC:
  • SPF record: v=spf1 mx -all
  • DKIM on Proxmox gateway: DKIM Signing: Yes, Signing Domain Source: Header , Sign all Outgoing Mail: Yes
  • DMARC: v=DMARC1; p=reject; pct=100; adkim=s; aspf=s; fo=1; rf=afrf; ri=86400;
When I send mail to gmail.com, all is ok. Mail is signed with PMG,SPF is ok, DMARAC is ok (strict=spf,strict=dkim).
If I send mail from gmail to a non-existent recipient on my mail server it's normal to expect bounced mail but that mail is reject by DMARC policy because it's not signed with DKIM.

My question is how to force PMG server to sign delivery status notifications?