Thanks for Kari comments,
These remind us to pay attention to more details in SPF and DKIM
On general if you have
ehlo twnic.net.tw
mail from: <UTF8 at twnic.net.tw> ALT-ADDRESS=forwarder at gateway.example
if gateway.example ia providing forwarding service, it practically
can not provide SPF records -- not providing SPF records is part
of service.
Yes, but users/clients dont know whether their provider has SPF record in
their ALT-ADDRESS,
If there are SPF in thoes domain include '-all' , that maybe cause their
mail to be rejected.
Mail adminstrator is hard to explains those issue to their clients.