If I set the access database to allow relaying from a domain, say bodyman.com , that I own, and control DNS, can someone spoof the headers of spam and gain the ability to relay from outside the network? Is it better to make the allowence in relay-domains? I definitely get spam with spoofed from lines with my domain and the opposite, complaints from clueless others that my domain is spoofed as the domain from which spam came from, despite the fact that the ip address is not from a network I control. Ruben