Comment by LoSboccacc

you can check that the envelop and message sender header match at the mx level and let spf handle the rest