That's probably the reason why much spam has valid spf records. Get yourself a throwaway domain, so you're getting through the domain check and give that domain a valid spf record which allows all machines in the world to send mail for that domain. VoilĂ - valid SPF record.
That's why I asked which problem SPF is trying to solve.
Ralph
Then you would get greeylisted, then blacklisted since they can trace the domain and ip for sure.... It is helpful to let them know mail is not from you...however, if a spammer were to legitimize him/herself, then I would assume blacklist of ip and domain would soon follow everywhere.