headers: add Delivered-To check

mails arriving from the internet should not have the Delivered-To field set.

In the case of forwarders, maybe. But even in those cases, the Delivered-To address should not match the RCPT TO address.

Right?