Please refer to the following useful links collected when I’m doing troubleshooting for my client servers

Stop Exchange 2007 & 2010 from Email Spoofing from own domain