SPF looks interesting. But I have a simple question, that's probably the
result of my lack of full understanding of how it works.
How does it work?
Suppose a spammer forges a hotmail.com address and tries to spam you.
He connects from an IP address somewhere
What happens if a person uses his business internet connection to send email
using his hotmail return address. Thus he will be sending legitimate mail but
from the business IP which of course is not listed. So according to the DOC.
THe message will be bounced.
"If the message fails SPF tests, it's a forgery. That's how you can tell it's
probably a spammer."
Can some please enlighten me.