Is it possible to completly fake an email?

Mr. Flibble

Not sure what forum best fits this question...

Is it possible to completly fake an email including all metadata as shown below?

Delivered-To: 
Received: by 10.22.122.17 with SMTP id n17cs127001qbp;
        Mon, 9 Jul 2007 17:07:12 -0700 (PDT)
Received: by 10.22.22.2 with SMTP id ;
        Mon, 09 Jul 2007 17:07:12 -0700 (PDT)
Return-Path: 
Received: from 
        by mx.google.com with ESMTP id ...11;
        Mon, 09 Jul 2007 17:07:12 -0700 (PDT)
Received-SPF: 
DomainKey-Status: bad (test mode)
Received: from [66.211.222.22] (helo=)
	by 
	(envelope-from <>)
	id 1I83Fs-0005TA-MN
	for ; Tue, 10 Jul 2007 01:07:01 +0100
DomainKey-Signature: s=dkim; d=......com; c=nofws; q=dns; b=sTFL98AK826HKQM3xlU38CYyvOD60WP1bB+Byn2sVPPzDJhIk9i6oJ+GXYJGDSUcDQeJJ7pwXXbeAWJbJGtB4TVn46Dszw4iG5gjRt2cRVwCVlnMZqw0OL8vIThoFla3I639O1D8+JrC4sOwcaqfrVCTyMhtq0yVej8fc7ReSQ=;
Received: from unknown (HELO .....com) ([10.190.3.65])
  by .....com with SMTP; 09 Jul 2007 17:06:54 -0700
Received: (qmail 13478 invoked by uid 99); 10 Jul 2007 00:06:54 -0000
Date: Mon, 09 Jul 2007 17:06:54 -0700
Message-Id:
Subject: 
X-MaxCode-Template: 
To: 
From: 
Sender: .@....com
X-Email-Type-Id: PP341
X-XPT-XSL-Name: 
Content-Type: multipart/alternative;
  boundary=--
MIME-Version: 1.0
X-AntiAbuse: 
X-AntiAbuse: Primary Hostname -
X-AntiAbuse: Original Domain - 
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - ....com
.
.
.

ps. I'm trying to prevent it, not perform it.

Martyr

this might be answered better on the security forum.

ressem

More suited for networks.
Answer is yes, everything up to the point that it reaches your server, assuming that can you trust it.

If your server is compromised then everything can be changed.