I don't know if anyone else has had to put up with this crap but I have some one spoofing our domain name to send mail. Its a real pain as most mail servers don't bother looking at SPF or rDNS and just send me spam reports back
Apart from SPF and rDNS is there anything else I can really do?