SPF_Fail score too low?

[Chris Yuzik]

Hi everyone,

I was just going over some stats, and I see a rule called "SPF_FAIL" 
with the description, "SPF: sender does not match SPF record (fail)", 
which seems like a fairly major violation, yet the score assigned 
currently is only 1.14.

So if I'm clear what this means, I believe this says that the domain 
administrator has specified the specific IPs that are allowed to send 
email from this domain, and furthermore anything that doesn't come from 
the allowed IPs should not be accepted or trusted. Right? This isn't a 
soft-fail, but a full fail.

Seems to me this should be something that should be scored at 5.0 or 
higher. Or am I wrong?

Chris