Nice! I tried this a few years ago, and while this worked nicely for inbound email, deliverability outbound was really bad, even with DKIM etc. set. Normal mails from <my domain> were fine.

I guess "amazon.<my domain>" got quite the phishing score at the time, so good call using grb instead of grub. :D