> Why isn't the IP checked and the domain taken for granted? I am > surprised by that. > You're not alone. http://spf.pobox.com/ is an example of a solution being worked on to this sticky problem. But SMTP is broken in this regard.