An interesting product that relies on e-mail identity is Spam Arrest. It filters based on identity and keeps disallowed messages in a mailbox for seven days. Today I got a heap of bounces from all over the place. A spammer has been using my address. Filtering on identity isn't enough.