The mailfrom field and others are set manually. I can send you a mail from what ever sender you want. The mail protocol is based on trust.