SPF record must be set to a public IP

When the postfix server is on a host with a private IP only, the SPF record will be set to that private IP and defeat the purpose of the signature. It must be set to the IP of the first public IP used by the postfix server.