I do not think by default Zimbra checks for and verifies SPF records for incoming emails. I saw this link

Improving Anti-spam system - Zimbra :: Wiki

But it does not say anything about enabling SPF checks for Zimbra's Spam checker. Any pointers would be appreciated.