solutions: Reverse lookups I mean this generally include many techniques to minimise forgeries: Reverse DNS checks Sender Policy Framework (and similar) Grey-listing (weakness in zombie SMTP engines) Problems: smaller domains, vanity domains mobile users