> Receiving SMTP servers need to be hardened to require SMTP authentication for messages claiming to originate from the company's own domain. Or validate SPF /

> Receiving SMTP servers need to be hardened to require SMTP authentication for messages claiming to originate from the company's own domain. Or validate SPF / DKIM and enable it for their own domain.