Ensuring SPF/DKIM for @gmail.com

[J Doe]

Hi,

I am currently using SpamAssassin 4.0.0 and I had a question on how I 
can ensure that any e-mail from @gmail.com has a valid SPF and DKIM 
signature.

I am aware that the following can be easily fooled, because it is not 
checking SPF and DKIM:

    welcomelist_from *@gmail.com

... so to ensure valid SPF and DKIM, I believe I would need:

    welcomelist_from_spf  *@gmail.com
    welcomelist_from_dkim *@gmail.com

... or *two* entries.

Is that correct ?

Thanks,

- J