SPF

SPF lets a domain publish, in a DNS record, which mail servers are allowed to send email on its behalf. Receiving servers check the sending IP against that list to catch forged sender addresses. It is simple to deploy but breaks on forwarded mail, which is why it is paired with DKIM and DMARC.