This is from my rspamd screen.
This email should be fine. If I send directly from the gmx server I get the mail but if it comes from the forward at gmail I don’t get it.
`0BAFA45B-9B4B-45EE-999B-3BFABE1D877F@edison.tech 209.85.214.180 [dcihon@gmail.com] dcihon@gmx.com [danc@dccathome.com] dcihon@gmail.com Test no 3 reject 40.13 / 15 8.92 KiB 1.973 9/20/2024, 2:37:32 PM unknown
[Envelope To] To/Cc/Bcc [danc@dccathome.com] dcihon@gmail.com
Symbols

Sort by:
FREEMAIL_POLICY_FAILURE (16)
R_DKIM_REJECT (8) [gmx.com:s=s31663417]
DMARC_POLICY_QUARANTINE (8) [gmx.com : SPF not aligned (relaxed),quarantine]
FORGED_W_BAD_POLICY (3)
BAD_REP_POLICIES (2)
BAYES_SPAM (1.69996) [88.54%]
IP_REPUTATION_SPAM (1.638178) [asn: 15169(0.40), country: US(0.01), ip: 209.85.214.180(0.00)]
RWL_MAILSPIKE_GOOD (-0.1) [209.85.214.180:from]
MIME_GOOD (-0.1) [multipart/alternative,text/plain]
RCVD_IN_DNSWL_LOW (-0.1) [212.227.17.22:received]
ARC_REJECT (0.1) [signature check failed: fail, {[1] = sig:google.com:reject}]
MX_GOOD (-0.01) []
ASN (0) [asn:15169, ipnet:209.85.128.0/17, country:US]
MISSING_XM_UA (0)
RCVD_TLS_LAST (0)
RCVD_VIA_SMTP_AUTH (0)
TO_DN_ALL (0)
BCC (0)
FORGED_SENDER_FORWARDING (0)
MAILCOW_WHITE_EXCLUDE (0)
FWD_GOOGLE (0) [dcihon@gmail.com]
RCPT_COUNT_ONE (0) [1]
ARC_SIGNED (0) [dccathome.com:s=dkim:i=3]
RCVD_COUNT_THREE (0) [4]
FREEMAIL_ENVFROM (0) [gmail.com]
DKIM_TRACE (0) [gmx.com:-]
R_SPF_ALLOW (0) [+ip4:209.85.128.0/17:c]
FORGED_SENDER (0) [dcihon@gmx.com,dcihon@gmail.com]
FROM_HAS_DN (0)
MIME_TRACE (0) [0:+,1:+,2:~]
TAGGED_FROM (0) [caf_=danc=dccathomecom]
RCVD_IN_DNSWL_NONE (0) [209.85.214.180:from]
RCPT_MAILCOW_DOMAIN (0) [dccathome.com]
FROM_NEQ_ENVFROM (0) [dcihon@gmx.com,dcihon@gmail.com]
RECEIVED_SPAMHAUS_PBL (0) [97.106.130.170:received]
FREEMAIL_TO (0) [gmail.com]`

Here is what I see in postfix:
postfix-mailcow-1 | Sep 20 14:37:31 b1cad95c9193 postfix/postscreen[5258]: CONNECT from [209.85.214.180]:58501 to [172.22.1.253]:25 postfix-mailcow-1 | Sep 20 14:37:31 b1cad95c9193 postfix/postscreen[5258]: ALLOWLISTED [209.85.214.180]:58501 postfix-mailcow-1 | Sep 20 14:37:31 b1cad95c9193 postfix/smtpd[5261]: connect from mail-pl1-f180.google.com[209.85.214.180] postfix-mailcow-1 | Sep 20 14:37:31 b1cad95c9193 postfix/smtpd[5261]: Anonymous TLS connection established from mail-pl1-f180.google.com[209.85.214.180] to mail.dccathome.com: TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 postfix-mailcow-1 | Sep 20 14:37:32 b1cad95c9193 postfix/smtpd[5261]: 2BF09204121: client=mail-pl1-f180.google.com[209.85.214.180] postfix-mailcow-1 | Sep 20 14:37:32 b1cad95c9193 postfix/cleanup[5263]: 2BF09204121: message-id=<0BAFA45B-9B4B-45EE-999B-3BFABE1D877F@edison.tech> postfix-mailcow-1 | Sep 20 14:37:32 b1cad95c9193 postfix/cleanup[5263]: 2BF09204121: prepend: header Content-Transfer-Encoding: quoted-printable from mail-pl1-f180.google.com[209.85.214.180]; from=<dcihon+caf_=danc=dccathome.com@gmail.com> to=<danc@dccathome.com> proto=ESMTP helo=<mail-pl1-f180.google.com>: List-Unsubscribe: mailto:<contact@mydomain.com>?subject=unsubscribe>" postfix-mailcow-1 | Sep 20 14:37:32 b1cad95c9193 postfix/cleanup[5263]: 2BF09204121: prepend: header Content-Transfer-Encoding: quoted-printable from mail-pl1-f180.google.com[209.85.214.180]; from=<dcihon+caf_=danc=dccathome.com@gmail.com> to=<danc@dccathome.com> proto=ESMTP helo=<mail-pl1-f180.google.com>: List-Unsubscribe: mailto:<contact@mydomain.com>?subject=unsubscribe>" postfix-mailcow-1 | Sep 20 14:37:34 b1cad95c9193 postfix/cleanup[5263]: 2BF09204121: milter-reject: END-OF-MESSAGE from mail-pl1-f180.google.com[209.85.214.180]: 5.7.1 This message does not meet our delivery requirements; from=<dcihon+caf_=danc=dccathome.com@gmail.com> to=<danc@dccathome.com> proto=ESMTP helo=<mail-pl1-f180.google.com> postfix-mailcow-1 | Sep 20 14:37:34 b1cad95c9193 postfix/smtpd[5261]: disconnect from mail-pl1-f180.google.com[209.85.214.180] ehlo=2 starttls=1 mail=1 rcpt=1 data=0/1 quit=1 commands=6/7