> >> Personally, nowadays I believe bouncing messages back to > the alleged > >> sender > > > > That's not what he's asking. He wants to know whether asking ISPs to > > implement SPF checks (where they don't yet check SPF) will work. > > I'm not convinced that is what he meant but he wasn't clear about it > so I wont argue with you on that point.
There are at least two ISPs involved: Spammer A => SMTP Server B => Recipient Server C => (Bounce) => Forged Email Server D As the Email Server D, I was asking about complaining to SMTP Server B, since Spammer A was probably an authenticated user. I already use SPF HARDFAIL, so I could ALSO complain to Recipient Server C about NOT using SPF to reject the email from SMTP Server B. Jim