On Thu, 2006-09-14 at 22:37 -0500, Chris Mohler wrote: > > > the sender pretended to be sbcglobal.net (i.e. your domain), in order to > > > try to throw people off the scent when identifying the source; this is a > > > typical trick employed by spammers, yet it gives them away so easily to > > > people that understand Received: headers. > > Don't want to hijack the thread, but a SPF record in DNS would prevent > this... correct? At least I thought that's what it was supposed to > do... It would only prevent it if the recipients of the emails were rejecting mail that failed SPF checks. Very few people are prepared to do this because of problems with forwarded email, which is still in widespread use on the Internet. Paul.