>Can I suggest that we not use MX? Agreed. I would like it to say something like a host SHOULD remove A-R headers with names in its own domain that were applied outside its trust boundary. But it should leave A-R headers for other domains alone. R's, John