[ijl]

You should implement at least Sender Policy Framework to endorse only email from your own servers. Better yet implement DomainKeys Identified Mail.