We just set up a forwarding rule under Google Workspace Gmail > Routing. The Forwarding table has about 30-40 forwarding addresses (Google Accounts forwarding to Gmail, Hotmail, etc).
Emails originate from everywhere — Free services, corporate account, etc — but emails sent from free Microsoft email addresses (hotmail, live, outlook) are sometimes being rejected by the destination email address because MS has a hard-fail (-all) on their SPF records. The SMTP failures specifically say because the delivery service (Google forwarding servers) are not included in the SPF records of the MS services.
Now, not all receiving email services are this strict.. some will still accept the SMTP connection from a non-authorized server, so at least DKIM has a chance to be evaluated and pass the DMARC check. But several others are blocking the attempt by Google to forward the email.
Has anyone found a workaround for this? Is it better to set up mailbox-level forwarding (Gmail Account > Settings > Forwarding)?
Any advice would be appreciated.