SPF policy (or policies) have to be as strict as possible. Combine them with blocklists. Not the one publicly available where you can pay to be...
Grep is nice, but ....... simple as hell. I think OP needs something more complex.
Separate names with a comma.
