Why is an email blocked by the Sender Policy Framework if the SPF record contains the sending server?