> Answering my own observation this seems to work with my fetchmail based > system: > > always_trust_envelope_sender 1
Adding that line to my local.cf has no apparent effect -- at least on messages from the sender. They're still Passing SPF, but NOT getting whitelisted.