I configured SPF/DMARC records for those domains, sign outbound email with DKIM and run the outbound server side in cloud data centers. That helps. Seeing the server logs also helps identify failures and diagnose why mail doesn't get accepted.