Just found my mail server's IPv6 address is listed as spam because someone else in the same /64 block is compromised. :woozypad: Fixed by requesting a personal /64 block from the VPS provider. This also allowed me to use publicly-routable IPv6 addresses for all clients behind my VPN. No more NAT.