Software exists already (Score 1)

Make sure every hop is authenticated. As soon as one hop isn't (old SMTP server), mark the header with "source uncertain". SPAM-filters can then be more restrictive on these ones and let authenticated mails through more easily.