Anyone can send out an email pretending to be anyone else, but it's a matter of finding out which SMTP servers allow it..
VM will allow you to do this but you have to be conencted to thier network (as with most anti-relay rules) and they do log the IP against the user..
There's NO WAY you can stop it apart from at the source
