> the sender pretended to be sbcglobal.net (i.e. your domain), in order to > try to throw people off the scent when identifying the source; this is a > typical trick employed by spammers, yet it gives them away so easily to > people that understand Received: headers.
Don't want to hijack the thread, but a SPF record in DNS would prevent this... correct? At least I thought that's what it was supposed to do... Chris