Easier than I thought, kept configs clean. Although I get claims of bad DKIM. Not that I care, especially about Yahoo, but it was working.