OK I cracked it ! I had to explicity tell the server that it was allowed to forward mail generated by itself. So in this case: Server 1 forwarding to server 2. Server 1 had to have 127.0.0.1 in its allowed list in the relay settings. I don't remember it being that way in previous versions, but hey...