Another point of clarification on why I think this will work: I'm running SA as a pre-queue content_filter from postfix, so when SA decides an email is spam, non-forged senders get an error, without sending backscatter to forged addresses.
When I implement this, senders will get an error asking them to ask their administrator to create the necessary record. And I see no reason for that administrator not to create that record. The directions I followed to set up SA this way are half way down this page: http://wiki.apache.org/spamassassin/IntegratePostfixViaSpampd (Be sure to do the --sef and X-Envelope-From bits.) -- "I'd rather be happy than right any day." - Slartiblartfast, The Hitchhiker's Guide to the Galaxy http://www.ChaosReigns.com
