Записки на коленке…

# cd /usr/ports/mail/postfix-policyd-spf-perl/ && make install clean

spf-policy  unix  -       n       n       -       0       spawn
   user=nobody argv=/usr/local/sbin/postfix-policyd-spf-perl

spf-policy_time_limit = 3600
#
smtpd_recipient_restrictions =  permit_mynetworks,
                                permit_sasl_authenticated,
                                check_recipient_access hash:$base/recipient_access,
                                reject_unauth_destination,
                                reject_unlisted_recipient,
                                reject_unknown_recipient_domain,
                                reject_non_fqdn_recipient,
                                reject_rbl_client bl.spamcop.net
                                reject_rbl_client dnsbl.sorbs.net
                                reject_rhsbl_client rhsbl.sorbs.net
                                check_policy_service unix:private/spf-policy
                                check_policy_service inet:127.0.0.1:10023

# /usr/local/etc/rc.d/postfix restart

# less /var/log/maillog | grep spf
mx postfix/policy-spf[49566]: : Policy action=PREPEND Received-SPF: pass
(mail.water-technics.ru: 83.222.xxx.xx is authorized to use 'mail.water-technics.ru'
in 'helo' identity (mechanism 'ip4:83.222.xxx.xx' matched)) receiver=mx.domain.ru;
identity=helo; helo=mail.domain1.ru; client-ip=83.222.xxx.xx