"Jim Hermann - UUN Hostmaster" <[EMAIL PROTECTED]> writes: > SPF is not enough. It does not eliminate the zombie or spambot.
It is if you set your SPF record to allow your mailer(s) and hard fail on all others *and* the recipient of the forged email checks against SPF. The problems come when recipients do not check (and act on) SPF even when you have defined a 'tight' SPF record.