[EMAIL PROTECTED] wrote: > Matt Kettler wrote: > > Notice my FAIL percentage is much higher. This is probably because my domain > publishes a "-all" record, and the most-frequently-spoofed domain for mail I > receive is my own.
I publish as soft-fail. That said, SA doesn't receive that much email spoofed from my domain. I whitelist my hosts by IP, then greylist anything attempting to use the local domain as a return path. This effectively knocks off most of the viruses, frauds and spams trying to forge my domain. I still get some, but I only get ones that can work their way past a greylist.
