smtp-recv should tag all arriving email with SPF-Received.
If the mail is to an address (and only one address) which contains an equals sign followed by atleast one period, we use that domain for SPF checking.
Otherwise if the mail is from <>, then we assume FAIL if the to address wasn't encapsulated, and PASS if it was.
Otherwise we perform an SPF check on the MAIL FROM address.