Yes, the public IP is listed in /etc/hosts
The problem is that three IP hops appear, and the first of them is localhost.
This causes the SPF record to be taken as erroneous, unless the ip4:127.0.0.1 mechanism is added.
With this change the SPF is correct, but emails are still rejected from some...