Adding the final sending server to a header

Yeah that makes sense, maybe we’re over thinking it

Yeah, the exception there would be dedicated IPs.

Then the EHLO may end up matching the tenant.

Thanks Mike appreciate the help/advise